Log message:
www/rails71: update to 7.1.5

Ruby on Rails 7.1.5 (2024-10-31)

Active Model

* Fix regression in alias_attribute to work with user defined methods.

   alias_attribute would wrongly assume the attribute accessor was generated
   by Active Model.

	class Person
	  include ActiveModel::AttributeMethods

	  define_attribute_methods :name
	  attr_accessor :name

	  alias_attribute :full_name, :name
	end

    person.full_name # => NoMethodError: undefined method `attribute' for an
    instance of Person

    Jean Boussier

Active Record

* Fix marshalling of unsaved associated records in 7.1 format.

  The 7.1 format would only marshal associated records if the association
  was loaded.  But associations that would only contain unsaved records
  would be skipped.

  Jean Boussier

* Fix an issue where .left_outer_joins used with multiple associations that
  have the same child association but different parents does not join all
  parents.

  Previously, using .left_outer_joins with the same child association would
  only join one of the parents.

  Now it will correctly join both parents.

    Fixes #41498.

    Garrett Blehm

* Ensure ActiveRecord::Encryption.config is always ready before access.

  Previously, ActiveRecord::Encryption configuration was deferred until
  ActiveRecord::Base was loaded. Therefore, accessing
  ActiveRecord::Encryption.config properties before ActiveRecord::Base was
  loaded would give incorrect results.

  ActiveRecord::Encryption now has its own loading hook so that its
  configuration is set as soon as needed.

  When ActiveRecord::Base is loaded, even lazily, it in turn triggers the
  loading of ActiveRecord::Encryption, thus preserving the original behavior
  of having its config ready before any use of ActiveRecord::Base.

  Maxime Réty

* Add TimeZoneConverter#== method, so objects will be properly compared by
  their type, scale, limit & precision.

  Address #52699.

  Ruy Rocha

Log message:
www/ruby-rails71: update to 7.1.4.2

Security fix of ruby-action-mailer70.  Other packages have no change
except their version.

7.1.4.2 (2024-10-23)

Action Mailer

* Fix NoMethodError in block_format helper [Michael Leimstaedtner]

Log message:
www/ruby-rails71: update to 7.1.4.1

Update Ruby on Rails 7.1 to 7.1.4.1.

Active Support

* No changes.

Active Model

* No changes.

Active Record

* No changes.

Action View

* No changes.

Action Pack

* Avoid regex backtracking in HTTP Token authentication [CVE-2024-47887]
* Avoid regex backtracking in query parameter filtering [CVE-2024-41128]

Active Job

* No changes.

Action Mailer

* Avoid regex backtracking in block_format helper [CVE-2024-47889]

Action Cable

* No changes.

Active Storage

* No changes.

Action Mailbox

* No changes.

Action Text

* Avoid backtracing in plain_text_for_blockquote_node [CVE-2024-47888]

Railties

* No changes.

Log message:
databases/ruby-activerecord71: update to 7.1.4

Active Record 7.1.4 (2024-08-22)

Changes are too many to write here, please refer section of Active Record:
<https://github.com/rails/rails/releases/tag/v7.1.4>.

Log message:
www/ruby-rails71: update to 7.1.3.4

Security fix for CVE-2024-32464 (textproc/ruby-actiontext70) and
CVE-2024-28103 (www/ruby-actionpack61 package).

Ruby on Rails 7.1.3.4 (2024-06-04)

Action Text

    * Sanitize ActionText HTML ContentAttachment in Trix edit view
      [CVE-2024-32464]

  Action Pack

    * Include the HTTP Permissions-Policy on non-HTML Content-Types
      [CVE-2024-28103]

Log message:
www/ruby-rails71: update to 7.1.3.2

Update Ruby on Rails 7.1 and related pacakges to 7.1.3.2
This includes security fix:

	CVE-2024-26142 for www/ruby-actionpack71
	CVE-2024-26143 for www/ruby-actionpack71

Action Pack

* Fix possible XSS vulnerability with the translate method in controllers

  CVE-2024-26143

* Fix ReDoS in Accept header parsing

  CVE-2024-26142

Log message:
databases/ruby-activerecord71: update to 7.1.3

Active Record (2024-01-16)

* Fix Migrations with versions older than 7.1 validating options given to
  add_reference.  [Hartley McGuire]

* Ensure reload sets correct owner for each association.  [Dmytro Savochkin]

* Fix view runtime for controllers with async queries.  [fatkodima]

* Fix load_async to work with query cache.  [fatkodima]

* Fix polymorphic belongs_to to correctly use parent's
  query_constraints. [fatkodima]

* Fix Preloader to not generate a query for already loaded association with
  query_constraints.  [fatkodima]

* Fix multi-database polymorphic preloading with equivalent table names.

  When preloading polymorphic associations, if two models pointed to two
  tables with the same name but located in different databases, the
  preloader would only load one.  [Ari Summer]

* Fix encrypted_attribute? to take into account context properties passed to
  encrypts.  [Maxime Réty]

* Fix find_by to work correctly in presence of composite primary keys.
  [fatkodima]

* Fix async queries sometimes returning a raw result if they hit the query
  cache.

  ShipPart.async_count could return a raw integer rather than a Promise if
  it found the result in the query cache.  [fatkodima]

* Fix Relation#transaction to not apply a default scope.

  The method was incorrectly setting a default scope around its block:

	Post.where(published: true).transaction do
	  Post.count # SELECT COUNT(*) FROM posts WHERE published = FALSE;
	end

  [Jean Boussier]

* Fix calling async_pluck on a none relation.

  Model.none.async_pluck(:id) was returning a naked value instead of a
  promise.  [Jean Boussier]

* Fix calling load_async on a none relation.

  Model.none.load_async was returning a broken result.  [Lucas Mazza]

* TrilogyAdapter: ignore host if socket parameter is set.

  This allows to configure a connection on a UNIX socket via DATABASE_URL:

	DATABASE_URL=trilogy://does-not-matter/my_db_production?socket=/var/run/mysql.sock

  [Jean Boussier]

* Fix has_secure_token calls the setter method on initialize.  [Abeid Ahmed]

* Allow using object_id as a database column name.

  It was available before rails 7.1 and may be used as a part of polymorphic
  relationship to object where object can be any other database record.
  [Mikhail Doronin]

* Fix rails db:create:all to not touch databases before they are created.
  [fatkodima]

Log message:
databases/ruby-activerecord71: add version 7.1.2

Active Record -- Object-relational mapping in Rails

Active Record connects classes to relational database tables to establish an
almost zero-configuration persistence layer for applications.  The library
provides a base class that, when subclassed, sets up a mapping between the
new class and an existing table in the database.  In the context of an
application, these classes are commonly referred to as *models*.  Models can
also be connected to other models; this is done by defining *associations*.

Active Record relies heavily on naming in that it uses class and association
names to establish mappings between respective database tables and foreign
key columns.  Although these mappings can be defined explicitly, it's
recommended to follow naming conventions, especially when getting started
with the library.

This is for Ruby on Rails 7.1.