Path to this page:
Subject: CVS commit: [pkgsrc-2019Q1] pkgsrc
From: Benny Siegert
Date: 2019-05-05 20:18:17
Message id: 20190505181818.0DF41FB16@cvs.NetBSD.org
Log Message:
Pullup ticket #5954 - requested by taca
www/ruby-rails52: security fix
Revisions pulled up:
- databases/ruby-activerecord52/distinfo 1.2
- devel/ruby-activejob52/distinfo 1.2
- devel/ruby-activemodel52/PLIST 1.2
- devel/ruby-activemodel52/distinfo 1.2
- devel/ruby-activestorage52/distinfo 1.2
- devel/ruby-activesupport52/PLIST 1.2
- devel/ruby-activesupport52/distinfo 1.2
- devel/ruby-railties52/PLIST 1.2
- devel/ruby-railties52/distinfo 1.2
- lang/ruby/rails.mk 1.77
- mail/ruby-actionmailer52/distinfo 1.2
- www/ruby-actioncable52/distinfo 1.2
- www/ruby-actionpack52/distinfo 1.2
- www/ruby-actionview52/distinfo 1.2
- www/ruby-rails52/distinfo 1.2
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Apr 14 10:29:39 UTC 2019
Modified Files:
pkgsrc/lang/ruby: rails.mk
Log Message:
lang/ruby: start update rails52 to 5.2.3
Start update of ruby-rails52.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Apr 14 10:30:26 UTC 2019
Modified Files:
pkgsrc/devel/ruby-activesupport52: PLIST distinfo
Log Message:
devel/ruby-activesupport52: update to 5.2.3
## Rails 5.2.3 (March 27, 2019) ##
* Add `ActiveSupport::HashWithIndifferentAccess#assoc`.
`assoc` can now be called with either a string or a symbol.
*Stefan Sch=FC=DFler*
* Fix `String#safe_constantize` throwing a `LoadError` for incorrectl=
y cased constant references.
*Keenan Brock*
* Allow Range#=3D=3D=3D and Range#cover? on Range
`Range#cover?` can now accept a range argument like `Range#include?=
` and
`Range#=3D=3D=3D`. `Range#=3D=3D=3D` works correctly on Ruby 2.6. `=
Range#include?` is moved
into a new file, with these two methods.
*utilum*
* If the same block is `included` multiple times for a Concern, an ex=
ception is no longer raised.
*Mark J. Titorenko*, *Vlad Bokov*
## Rails 5.2.2.1 (March 11, 2019) ##
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Apr 14 10:30:59 UTC 2019
Modified Files:
pkgsrc/devel/ruby-activemodel52: PLIST distinfo
Log Message:
devel/ruby-activemodel52: update to 5.2.3
## Rails 5.2.3 (March 27, 2019) ##
* Fix date value when casting a multiparameter date hash to not conve=
rt
from Gregorian date to Julian date.
Before:
Day.new({"day(1i)"=3D>"1", \
"day(2i)"=3D>"1", \
"day(3i)"=3D>"1"})=
=3D> #<Day id: nil, day: "0001-01-03", created_at: \
nil, updated=
_at: nil>
After:
Day.new({"day(1i)"=3D>"1", \
"day(2i)"=3D>"1", \
"day(3i)"=3D>"1"})=
=3D> #<Day id: nil, day: "0001-01-01", created_at: \
nil, updated=
_at: nil>
Fixes #28521.
*Sayan Chakraborty*
* Fix numericality equality validation of `BigDecimal` and `Float`
by casting to `BigDecimal` on both ends of the validation.
*Gannon McGibbon*
## Rails 5.2.2.1 (March 11, 2019) ##
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Apr 14 10:31:25 UTC 2019
Modified Files:
pkgsrc/devel/ruby-activejob52: distinfo
Log Message:
devel/ruby-activejob52: update to 5.2.3
## Rails 5.2.3 (March 27, 2019) ##
* No changes.
## Rails 5.2.2.1 (March 11, 2019) ##
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Apr 14 10:31:52 UTC 2019
Modified Files:
pkgsrc/www/ruby-actionview52: distinfo
Log Message:
www/ruby-actionview52: update to 5.2.3
## Rails 5.2.3 (March 27, 2019) ##
* Prevent non-primary mouse keys from triggering Rails UJS click hand=
lers.
Firefox fires click events even if the click was triggered by non-p=
rimary mouse keys such as right- or scroll-wheel-clicks.
For example, right-clicking a link such as the one described below =
(with an underlying ajax request registered on click) should not cause =
that request to occur.
```
<%=3D link_to 'Remote', remote_path, class: 'remote', remote: true,=
data: { type: :json } %>
```
Fixes #34541
*Wolfgang Hobmaier*
## Rails 5.2.2.1 (March 11, 2019) ##
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Apr 14 10:32:37 UTC 2019
Modified Files:
pkgsrc/www/ruby-actionpack52: distinfo
Log Message:
www/ruby-actionpack52: update to 5.2.3
* 5.2.2.2 fixes these security problems:
CVE-2019-5418
CVE-2019-5419
CVE-2019-5420
## Rails 5.2.3 (March 27, 2019) ##
* Allow using combine the Cache Control `public` and `no-cache` heade=
rs.
Before this change, even if `public` was specified for Cache Contro=
l header,
it was excluded when `no-cache` was included. This fixed to keep `p=
ublic`
header as is.
Fixes #34780.
*Yuji Yaginuma*
* Allow `nil` params for `ActionController::TestCase`.
*Ryo Nakamura*
## Rails 5.2.2.1 (March 11, 2019) ##
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Apr 14 10:33:01 UTC 2019
Modified Files:
pkgsrc/www/ruby-actioncable52: distinfo
Log Message:
www/ruby-actioncable52: update to 5.2.3
## Rails 5.2.3 (March 27, 2019) ##
* No changes.
## Rails 5.2.2.1 (March 11, 2019) ##
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Apr 14 10:33:31 UTC 2019
Modified Files:
pkgsrc/databases/ruby-activerecord52: distinfo
Log Message:
databases/ruby-activerecord52: update to 5.2.3
## Rails 5.2.3 (March 27, 2019) ##
* Fix different `count` calculation when using `size` with manual `se=
lect` with DISTINCT.
Fixes #35214.
*Juani Villarejo*
* Fix prepared statements caching to be enabled even when query cachi=
ng is enabled.
*Ryuta Kamizono*
* Don't allow `where` with invalid value matches to nil values.
Fixes #33624.
*Ryuta Kamizono*
* Restore an ability that class level `update` without giving ids.
Fixes #34743.
*Ryuta Kamizono*
* Fix join table column quoting with SQLite.
*Gannon McGibbon*
* Ensure that `delete_all` on collection proxy returns affected count=
.=
*Ryuta Kamizono*
* Reset scope after delete on collection association to clear stale o=
ffsets of removed records.
*Gannon McGibbon*
## Rails 5.2.2.1 (March 11, 2019) ##
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Apr 14 10:33:55 UTC 2019
Modified Files:
pkgsrc/devel/ruby-activestorage52: distinfo
Log Message:
devel/ruby-activestorage52: update to 5.2.3
## Rails 5.2.3 (March 27, 2019) ##
* No changes.
## Rails 5.2.2.1 (March 11, 2019) ##
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Apr 14 10:34:27 UTC 2019
Modified Files:
pkgsrc/mail/ruby-actionmailer52: distinfo
Log Message:
mail/ruby-actionmailer52: update to 5.2.3
## Rails 5.2.3 (March 27, 2019) ##
* No changes.
## Rails 5.2.2.1 (March 11, 2019) ##
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Apr 14 10:34:57 UTC 2019
Modified Files:
pkgsrc/devel/ruby-railties52: PLIST distinfo
Log Message:
devel/ruby-railties52: updateo to 5.2.3
## Rails 5.2.3 (March 27, 2019) ##
* Seed database with inline ActiveJob job adapter.
*Gannon McGibbon*
* Fix boolean interaction in scaffold system tests.
*Gannon McGibbon*
## Rails 5.2.2.1 (March 11, 2019) ##
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Apr 14 10:36:34 UTC 2019
Modified Files:
pkgsrc/www/ruby-rails52: distinfo
Log Message:
www/ruby-rails52: update to 5.2.3
Update ruby-rails52 to 5.2.3 which contains security fix of actionpack =
in
5.2.2.2.
Files: