2022-10-10 05:36:51 by Takahiro Kambe | Files touched by this commit (32) |
Log message:
Remove lines for Ruby 2.6.
|
2022-09-10 14:47:47 by Takahiro Kambe | Files touched by this commit (1) | |
Log message:
devel/ruby-railties70: update to 7.0.4
* config.allow_concurrency = false now use a Monitor instead of a Mutex
This allows to enable config.active_support.executor_around_test_case even
when config.allow_concurrency is disabled.
Jean Boussier
* Skip Active Storage and Action Mailer if Active Job is skipped.
Étienne Barrié
* Correctly check if frameworks are disabled when running app:update.
Étienne Barrié and Paulo Barros
* Fixed config.active_support.cache_format_version never being applied.
Rails 7.0 shipped with a new serializer for Rails.cache, but the
associated config wasn't working properly. Note that even after this fix,
it can only be applied from the application.rb file.
Alex Ghiculescu
|
2022-07-13 16:48:48 by Takahiro Kambe | Files touched by this commit (15) | |
Log message:
www/ruby-rails70: update to 7.0.3.1
Rails 7.0.3.1 (2022-07-12) updates databases/ruby-activerecord70 only.
databases/ruby-activerecord70
* Change ActiveRecord::Coders::YAMLColumn default to safe_load
This adds two new configuration options The configuration options are as
follows:
o config.active_storage.use_yaml_unsafe_load
When set to true, this configuration option tells Rails to use the old
"unsafe" YAML loading strategy, maintaining the existing behavior but
leaving the possible escalation vulnerability in place. Setting this
option to true is *not* recommended, but can aid in upgrading.
o config.active_record.yaml_column_permitted_classes
The "safe YAML" loading method does not allow all classes to be
deserialized by default. This option allows you to specify classes deemed
"safe" in your application. For example, if your application uses Symbol
and Time in serialized data, you can add Symbol and Time to the allowed
list as follows:
config.active_record.yaml_column_permitted_classes = [Symbol, Date, Time]
[CVE-2022-32224]
|
2022-06-07 17:22:15 by Takahiro Kambe | Files touched by this commit (2) | |
Log message:
devel/ruby-railties70: update to 7.0.3
7.0.3 (2022-05-12)
* If reloading and eager loading are both enabled, after a reload Rails
eager loads again the application code.
* Use controller_class_path in Rails::Generators::NamedBase#route_url
The route_url method now returns the correct path when generating a
namespaced controller with a top-level model using --model-name.
Previously, when running this command:
bin/rails generate scaffold_controller Admin/Post --model-name Post
the comments above the controller action would look like:
# GET /posts
def index
@posts = Post.all
end
afterwards, they now look like this:
# GET /admin/posts
def index
@posts = Post.all
end
Fixes #44662.
|
2022-05-05 05:41:42 by Takahiro Kambe | Files touched by this commit (11) |
Log message:
Update rest of Ruby on Rails 70 components.
No change except version.
|
2022-03-27 08:43:12 by Thomas Klausner | Files touched by this commit (13) |
Log message:
rails 7.0 wants ruby 2.7+, mark it as such
|
2022-03-27 08:30:00 by Thomas Klausner | Files touched by this commit (24) |
Log message:
ruby*: fix rails version in COMMENT
|
2022-03-13 16:15:05 by Takahiro Kambe | Files touched by this commit (14) | |
Log message:
www/ruby-rails70: update to 7.0.2.3
Changes are in devel/ruby-activestorage70 only.
Rails 7.0.2.3 (March 08, 2022)
* Added image transformation validation via configurable allow-list.
Variant now offers a configurable allow-list for
transformation methods in addition to a configurable deny-list for arguments.
[CVE-2022-21831]
|
2022-02-13 08:45:49 by Takahiro Kambe | Files touched by this commit (1) | |
Log message:
devel/ruby-railties70: update to 7.0.2
7.0.2 (2022-02-08)
* No changes.
7.0.2.1 (2022-02-11)
* No changes.
7.0.2.2 (2022-02-11)
* No changes.
|
2022-01-16 15:10:09 by Takahiro Kambe | Files touched by this commit (1) |
Log message:
devel/ruby-railties70: 7.0.1 (2021-01-06)
* Prevent duplicate entries in plugin Gemfile.
Jonathan Hefner
* Fix asset pipeline errors for plugin dummy apps.
Jonathan Hefner
* Fix generated route revocation.
Jonathan Hefner
* Addresses an issue in which Sidekiq jobs could not reload certain
namespaces.
See fxn/zeitwerk#198 for details.
Xavier Noria
* Fix plugin generator to a plugin that pass all the tests.
Rafael Mendonça França
|