Navigation:
Browse pkgsrc
(this page)
devel ruby-rai..
CVSweb ] [ 
Homepage ] [ 
RSS ] [ 
Required by ] [ 
Add to tracker ] 2024-12-11 16:37:33 by Takahiro Kambe | Files touched by this commit (15) |  |
Log message: www/ruby-rails71: update to 7.1.5.1 Update to Ruby on Rails 7.1.5.1. Action Pack * Add validation to content security policies to disallow spaces and semicolons. Developers should use multiple arguments, and different directive methods instead. [CVE-2024-54133] Gannon McGibbon Action Text * Update vendored trix version to 2.1.10 John Hawthorn |
| 2024-12-01 16:47:47 by Takahiro Kambe | Files touched by this commit (14) | |
Log message:
www/rails71: update to 7.1.5
Ruby on Rails 7.1.5 (2024-10-31)
Active Model
* Fix regression in alias_attribute to work with user defined methods.
alias_attribute would wrongly assume the attribute accessor was generated
by Active Model.
class Person
include ActiveModel::AttributeMethods
define_attribute_methods :name
attr_accessor :name
alias_attribute :full_name, :name
end
person.full_name # => NoMethodError: undefined method `attribute' for an
instance of Person
Jean Boussier
Active Record
* Fix marshalling of unsaved associated records in 7.1 format.
The 7.1 format would only marshal associated records if the association
was loaded. But associations that would only contain unsaved records
would be skipped.
Jean Boussier
* Fix an issue where .left_outer_joins used with multiple associations that
have the same child association but different parents does not join all
parents.
Previously, using .left_outer_joins with the same child association would
only join one of the parents.
Now it will correctly join both parents.
Fixes #41498.
Garrett Blehm
* Ensure ActiveRecord::Encryption.config is always ready before access.
Previously, ActiveRecord::Encryption configuration was deferred until
ActiveRecord::Base was loaded. Therefore, accessing
ActiveRecord::Encryption.config properties before ActiveRecord::Base was
loaded would give incorrect results.
ActiveRecord::Encryption now has its own loading hook so that its
configuration is set as soon as needed.
When ActiveRecord::Base is loaded, even lazily, it in turn triggers the
loading of ActiveRecord::Encryption, thus preserving the original behavior
of having its config ready before any use of ActiveRecord::Base.
Maxime Réty
* Add TimeZoneConverter#== method, so objects will be properly compared by
their type, scale, limit & precision.
Address #52699.
Ruy Rocha
|
| 2024-10-27 15:35:27 by Takahiro Kambe | Files touched by this commit (14) | |
Log message: www/ruby-rails71: update to 7.1.4.2 Security fix of ruby-action-mailer70. Other packages have no change except their version. 7.1.4.2 (2024-10-23) Action Mailer * Fix NoMethodError in block_format helper [Michael Leimstaedtner] |
| 2024-10-21 17:07:30 by Takahiro Kambe | Files touched by this commit (14) | |
Log message: www/ruby-rails71: update to 7.1.4.1 Update Ruby on Rails 7.1 to 7.1.4.1. Active Support * No changes. Active Model * No changes. Active Record * No changes. Action View * No changes. Action Pack * Avoid regex backtracking in HTTP Token authentication [CVE-2024-47887] * Avoid regex backtracking in query parameter filtering [CVE-2024-41128] Active Job * No changes. Action Mailer * Avoid regex backtracking in block_format helper [CVE-2024-47889] Action Cable * No changes. Active Storage * No changes. Action Mailbox * No changes. Action Text * Avoid backtracing in plain_text_for_blockquote_node [CVE-2024-47888] Railties * No changes. |
| 2024-06-05 18:44:18 by Takahiro Kambe | Files touched by this commit (14) | |
Log message:
www/ruby-rails71: update to 7.1.3.4
Security fix for CVE-2024-32464 (textproc/ruby-actiontext70) and
CVE-2024-28103 (www/ruby-actionpack61 package).
Ruby on Rails 7.1.3.4 (2024-06-04)
Action Text
* Sanitize ActionText HTML ContentAttachment in Trix edit view
[CVE-2024-32464]
Action Pack
* Include the HTTP Permissions-Policy on non-HTML Content-Types
[CVE-2024-28103]
|
| 2024-02-24 15:55:27 by Takahiro Kambe | Files touched by this commit (15) | |
Log message: www/ruby-rails71: update to 7.1.3.2 Update Ruby on Rails 7.1 and related pacakges to 7.1.3.2 This includes security fix: CVE-2024-26142 for www/ruby-actionpack71 CVE-2024-26143 for www/ruby-actionpack71 Action Pack * Fix possible XSS vulnerability with the translate method in controllers CVE-2024-26143 * Fix ReDoS in Accept header parsing CVE-2024-26142 |
| 2024-02-04 16:19:27 by Takahiro Kambe | Files touched by this commit (1) | |
Log message: devel/ruby-railties71: update to 7.1.3 Railties (2024-01-16) * Make sure config.after_routes_loaded hook runs on boot. [Rafael Mendonça França] * Fix config.log_level not being respected when using a BroadcastLogger [Édouard Chin] * Fix isolated engines to take ActiveRecord::Base.table_name_prefix into consideration. This will allow for engine defined models, such as inside Active Storage, to respect Active Record table name prefix configuration. [Chedli Bourguiba] * The bin/rails app:template command will no longer add potentially unwanted gem platforms via bundle lock --add-platform=... commands. [Jonathan Hefner] |
| 2023-11-30 16:34:32 by Takahiro Kambe | Files touched by this commit (6) |
Log message: devel/ruby-railties71: add version 7.1.2 Railties -- Gluing the Engine to the Rails Railties is responsible for gluing all frameworks together. Overall, it: * handles the bootstrapping process for a Rails application; * manages the +rails+ command line interface; * and provides the Rails generators core. This is for Ruby on Rails 7.1. |
New packages: