NOTICE: This package has been removed from pkgsrc

./www/ruby-actioncable60, Toolkit for building modeling frameworks (part of Rails 6.0)

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ]

Branch: CURRENT, Version: 6.0.6.1, Package name: ruby31-actioncable60-6.0.6.1, Maintainer: pkgsrc-users

# Action Cable - Integrated WebSockets for Rails

Action Cable seamlessly integrates WebSockets with the rest of your Rails
application. It allows for real-time features to be written in Ruby in the
same style and form as the rest of your Rails application, while still being
performant and scalable. It's a full-stack offering that provides both a
client-side JavaScript framework and a server-side Ruby framework. You have
access to your full domain model written with Active Record or your ORM of
choice.

This is for Ruby on Rails 6.0.


Required to run:
[www/ruby-websocket-driver] [net/ruby-nio4r] [lang/ruby26-base] [www/ruby-actionpack60]

Required to build:
[pkgtools/cwrappers]

Master sites:

Filesize: 41.5 KB

Version history: (Expand)

CVS history: (Expand)


   2023-09-03 17:50:53 by Takahiro Kambe | Files touched by this commit (54) | Package removed
Log message:
Remove Ruby on Rails 6.0 packages.

Ruby on Rails 6.0 reached EOL.
   2023-01-19 15:27:26 by Takahiro Kambe | Files touched by this commit (15) | Package updated
Log message:
www/ruby-rails60: update to 6.0.6.1

Only databases/ruby-activerecord61 has updated.

Rails 6.0.6.1 (2023-01-17)

* Make `sanitize_as_sql_comment` more strict

  Though this method was likely never meant to take user input, it was
  attempting sanitization. That sanitization could be bypassed with
  carefully crafted input.

  This commit makes the sanitization more robust by replacing any
  occurrances of "/*" or "*/" with "/ *" or \ 
"* /". It also performs a
  first pass to remove one surrounding comment to avoid compatibility
  issues for users relying on the existing removal.

  This also clarifies in the documentation of annotate that it should not
  be provided user input.

  [CVE-2023-22794]
   2022-09-10 10:19:00 by Takahiro Kambe | Files touched by this commit (14) | Package updated
Log message:
www/ruby-rails60: update to 6.0.6

Ruby on Rails 6.0.6 release on 9th September 2022 and
Active Record is only updated.

databases/ruby-activerecord60

* Symbol is allowed by default for YAML columns

  Étienne Barrié
   2022-07-13 16:44:10 by Takahiro Kambe | Files touched by this commit (15) | Package updated
Log message:
www/ruby-rails60: update to 6.0.5.1

Rails 6.0.5.1 (2022-07-12) updates databases/ruby-activerecord60 only.

databases/ruby-activerecord60

* Change ActiveRecord::Coders::YAMLColumn default to safe_load

  This adds two new configuration options The configuration options are as
  follows:

	o config.active_storage.use_yaml_unsafe_load

  When set to true, this configuration option tells Rails to use the old
  "unsafe" YAML loading strategy, maintaining the existing behavior but
  leaving the possible escalation vulnerability in place.  Setting this
  option to true is *not* recommended, but can aid in upgrading.

	o config.active_record.yaml_column_permitted_classes

  The "safe YAML" loading method does not allow all classes to be
  deserialized by default.  This option allows you to specify classes deemed
  "safe" in your application.  For example, if your application uses Symbol
  and Time in serialized data, you can add Symbol and Time to the allowed
  list as follows:

	config.active_record.yaml_column_permitted_classes = [Symbol, Date, Time]

  [CVE-2022-32224]
   2022-06-07 16:59:21 by Takahiro Kambe | Files touched by this commit (16) | Package updated
Log message:
www/ruby-rails60: update to 6.0.5

Ruby on Rails 6.0.5 (2022-05-12)

Active Support

* Fix tag helper regression.

Action Text

* Disentangle Action Text from ApplicationController

  Allow Action Text to be used without having an ApplicationController
  defined.

  This makes sure:

    - Action Text attachments render the correct URL host in mailers.
    - an ActionController::Renderer isn't allocated per request.
    - Sidekiq doesn't hang with the "classic" autoloader.
   2022-05-05 05:24:55 by Takahiro Kambe | Files touched by this commit (10) 
Log message:
Update rest of Ruby on Rails 60 components.

No change except version.
   2022-03-13 16:08:23 by Takahiro Kambe | Files touched by this commit (14) | Package updated
Log message:
www/ruby-rails60: update to 6.0.4.7

Changes are in devel/ruby-activestorage60 only.

## Rails 6.0.4.7 (March 08, 2022) ##

* Added image transformation validation via configurable allow-list.

  Variant now offers a configurable allow-list for
  transformation methods in addition to a configurable deny-list for arguments.

  [CVE-2022-21831]
   2022-02-13 08:31:23 by Takahiro Kambe | Files touched by this commit (14) | Package updated
Log message:
www/ruby-rails60: update to  6.0.4.6

This update contains security fix for CVE-2022-23633 in ruby-actionpack60.

Active Support 6.0.4.6 (2022-02-11)

* Fix Reloader method signature to work with the new Executor signature.

Action Pack 6.0.4.6

6.0.4.5 (2022-02-11)

* Under certain circumstances, the middleware isn't informed that the
  response body has been fully closed which result in request state
  not being fully reset before the next request.

  [CVE-2022-23633]

Other packages have no change.