2024-12-01 16:47:47 by Takahiro Kambe | Files touched by this commit (14) | |
Log message: www/rails71: update to 7.1.5 Ruby on Rails 7.1.5 (2024-10-31) Active Model * Fix regression in alias_attribute to work with user defined methods. alias_attribute would wrongly assume the attribute accessor was generated by Active Model. class Person include ActiveModel::AttributeMethods define_attribute_methods :name attr_accessor :name alias_attribute :full_name, :name end person.full_name # => NoMethodError: undefined method `attribute' for an instance of Person Jean Boussier Active Record * Fix marshalling of unsaved associated records in 7.1 format. The 7.1 format would only marshal associated records if the association was loaded. But associations that would only contain unsaved records would be skipped. Jean Boussier * Fix an issue where .left_outer_joins used with multiple associations that have the same child association but different parents does not join all parents. Previously, using .left_outer_joins with the same child association would only join one of the parents. Now it will correctly join both parents. Fixes #41498. Garrett Blehm * Ensure ActiveRecord::Encryption.config is always ready before access. Previously, ActiveRecord::Encryption configuration was deferred until ActiveRecord::Base was loaded. Therefore, accessing ActiveRecord::Encryption.config properties before ActiveRecord::Base was loaded would give incorrect results. ActiveRecord::Encryption now has its own loading hook so that its configuration is set as soon as needed. When ActiveRecord::Base is loaded, even lazily, it in turn triggers the loading of ActiveRecord::Encryption, thus preserving the original behavior of having its config ready before any use of ActiveRecord::Base. Maxime Réty * Add TimeZoneConverter#== method, so objects will be properly compared by their type, scale, limit & precision. Address #52699. Ruy Rocha |
2024-10-27 15:35:27 by Takahiro Kambe | Files touched by this commit (14) | |
Log message: www/ruby-rails71: update to 7.1.4.2 Security fix of ruby-action-mailer70. Other packages have no change except their version. 7.1.4.2 (2024-10-23) Action Mailer * Fix NoMethodError in block_format helper [Michael Leimstaedtner] |
2024-10-27 15:32:58 by Takahiro Kambe | Files touched by this commit (14) | |
Log message: www/ruby-rails70: update to 7.0.8.6 Security fix of ruby-action-mailer70. Other packages have no change except their version. 7.0.8.6 (2024-10-23) Action Mailer * Fix NoMethodError in block_format helper [Michael Leimstaedtner] |
2024-10-27 15:29:40 by Takahiro Kambe | Files touched by this commit (14) | |
Log message: www/ruby-rails61: update to 6.1.7.10 Security fix of ruby-action-mailer61. Other packages have no change except their version. Action Mailer * Fix NoMethodError in block_format helper [Michael Leimstaedtner] |
2024-10-21 17:07:30 by Takahiro Kambe | Files touched by this commit (14) | |
Log message: www/ruby-rails71: update to 7.1.4.1 Update Ruby on Rails 7.1 to 7.1.4.1. Active Support * No changes. Active Model * No changes. Active Record * No changes. Action View * No changes. Action Pack * Avoid regex backtracking in HTTP Token authentication [CVE-2024-47887] * Avoid regex backtracking in query parameter filtering [CVE-2024-41128] Active Job * No changes. Action Mailer * Avoid regex backtracking in block_format helper [CVE-2024-47889] Action Cable * No changes. Active Storage * No changes. Action Mailbox * No changes. Action Text * Avoid backtracing in plain_text_for_blockquote_node [CVE-2024-47888] Railties * No changes. |
2024-10-21 17:03:22 by Takahiro Kambe | Files touched by this commit (14) | |
Log message: www/ruby-rails70: update to 7.0.8.5 Update Ruby on Rails 7.0 to 7.0.8.5. Active Support * No changes. Active Model * No changes. Active Record * No changes. Action View * No changes. Action Pack * Avoid regex backtracking in HTTP Token authentication [CVE-2024-47887] * Avoid regex backtracking in query parameter filtering [CVE-2024-41128] Active Job * No changes. Action Mailer * Avoid regex backtracking in block_format helper [CVE-2024-47889] Action Cable * No changes. Active Storage * No changes. Action Mailbox * No changes. Action Text * Avoid backtracing in plain_text_for_blockquote_node [CVE-2024-47888] Railties * No changes. |
2024-10-21 16:58:58 by Takahiro Kambe | Files touched by this commit (14) | |
Log message: www/ruby-rails61: update to 6.1.7.9 Update Ruby on Rails 6.1 to 6.1.7.9. Active Support * No changes. Active Model * No changes. Active Record * No changes. Action View * No changes. Action Pack * Avoid regex backtracking in HTTP Token authentication [CVE-2024-47887] * Avoid regex backtracking in query parameter filtering [CVE-2024-41128] Active Job * No changes. Action Mailer * Avoid regex backtracking in block_format helper [CVE-2024-47889] Action Cable * No changes. Active Storage * No changes. Action Mailbox * No changes. Action Text * Avoid backtracing in plain_text_for_blockquote_node [CVE-2024-47888] Railties * No changes. |
2024-09-22 15:16:01 by Takahiro Kambe | Files touched by this commit (1) | |
Log message: lang/ruby: start update Ruby on Rails 7.1 to 7.1.4 |
2024-07-13 17:25:25 by Takahiro Kambe | Files touched by this commit (4) | |
Log message: lang/ruby33: update to 3.3.4 3.3.4 (2024-07-09) * Bug #20573: Warning.warn shouldn't be called for disabled warnings * Bug #20585: Size of memory allocated by String.new(:capacity) is different from the specified value * Bug #20581: Ruby 3.3.3 install has missing deps for bundled net-pop gem * Bug #20595: Corruption of encoding name string * Bug #20598: Corruption of internal encoding string * Bug #20562: Categorize RUBY_FREE_AT_EXIT warning * Bug #20468: Segfault on safe navigation in for target * Bug #20592: Interrupting Addrinfo causes Segmentation fault on alpine * Bug #20239: Segmentation fault when using Regex on a large String * Bug #20570: Nokey behavior changed since 3.3. * Bug #20605: Add explicit compiler fence when pushing frames to ensure safe profiling |
2024-06-05 18:44:18 by Takahiro Kambe | Files touched by this commit (14) | |
Log message: www/ruby-rails71: update to 7.1.3.4 Security fix for CVE-2024-32464 (textproc/ruby-actiontext70) and CVE-2024-28103 (www/ruby-actionpack61 package). Ruby on Rails 7.1.3.4 (2024-06-04) Action Text * Sanitize ActionText HTML ContentAttachment in Trix edit view [CVE-2024-32464] Action Pack * Include the HTTP Permissions-Policy on non-HTML Content-Types [CVE-2024-28103] |