head 1.13; access; symbols pkgsrc-2025Q4:1.12.0.2 pkgsrc-2025Q4-base:1.12 pkgsrc-2025Q3:1.11.0.2 pkgsrc-2025Q3-base:1.11 pkgsrc-2025Q2:1.10.0.6 pkgsrc-2025Q2-base:1.10 pkgsrc-2025Q1:1.10.0.4 pkgsrc-2025Q1-base:1.10 pkgsrc-2024Q4:1.10.0.2 pkgsrc-2024Q4-base:1.10 pkgsrc-2024Q3:1.6.0.2 pkgsrc-2024Q3-base:1.6 pkgsrc-2024Q2:1.5.0.2 pkgsrc-2024Q2-base:1.5 pkgsrc-2024Q1:1.3.0.2 pkgsrc-2024Q1-base:1.3 pkgsrc-2023Q4:1.1.0.2 pkgsrc-2023Q4-base:1.1; locks; strict; comment @# @; 1.13 date 2026.02.23.14.50.01; author taca; state dead; branches; next 1.12; commitid zqo2xRTPaE6PKvvG; 1.12 date 2025.11.03.08.10.06; author taca; state Exp; branches; next 1.11; commitid SUsbHvzrYheT85hG; 1.11 date 2025.08.14.15.19.04; author taca; state Exp; branches; next 1.10; commitid sdLPkLHzCgDu7I6G; 1.10 date 2024.12.11.15.37.33; author taca; state Exp; branches; next 1.9; commitid 39Pla2HAqoL286BF; 1.9 date 2024.12.01.15.47.46; author taca; state Exp; branches; next 1.8; commitid S1SFr8BAefYovOzF; 1.8 date 2024.10.27.14.35.27; author taca; state Exp; branches; next 1.7; commitid UZ57ZiGWBu6tejvF; 1.7 date 2024.10.21.15.07.29; author taca; state Exp; branches; next 1.6; commitid ck4BqKpvHA4qBxuF; 1.6 date 2024.09.22.13.26.39; author taca; state Exp; branches; next 1.5; commitid f5HqdJ8uqdhCYNqF; 1.5 date 2024.06.05.16.44.18; author taca; state Exp; branches; next 1.4; commitid muTmIWT1fBDDzOcF; 1.4 date 2024.05.22.13.27.19; author taca; state Exp; branches; next 1.3; commitid tSliGn5m9bbXVZaF; 1.3 date 2024.02.24.14.55.26; author taca; state Exp; branches 1.3.2.1; next 1.2; commitid 8z2MQh2StPhzfHZE; 1.2 date 2024.02.04.15.18.23; author taca; state Exp; branches; next 1.1; commitid s9drw9tPvvLj18XE; 1.1 date 2023.11.30.15.32.41; author taca; state Exp; branches; next ; commitid XOzuESfdAKLKdEOE; 1.3.2.1 date 2024.06.13.15.56.32; author bsiegert; state Exp; branches; next ; commitid lhVDGh6tvzxl3QdF; desc @@ 1.13 log @www/ruby-rails71: Remove Ruby on Rails 7.1.x pacakges EOL since 2025-10-29. @ text @$NetBSD: distinfo,v 1.12 2025/11/03 08:10:06 taca Exp $ BLAKE2s (actioncable-7.1.6.gem) = 62c01516d5db468fc09daf5cd339b213f9a36a1f21d123bf40e3e5a9e3369175 SHA512 (actioncable-7.1.6.gem) = 8ac8ee806b32e1047adce1535224426c8e1862655556b867cd9fc57cdccce8f08d481b4f92c4d18438664fa5abacf14870a9cd1443976354012ae154f2efd4cf Size (actioncable-7.1.6.gem) = 48128 bytes @ 1.12 log @www/ruby-rails71: update to 7.1.6 Ruby on Rails 7.1.6 (2025-10-28) This is the final release of Ruby on Rails 7.1.x. Active Support * No changes. Active Model * No changes. Active Record * Gracefully handle Timeout.timeout firing during connection configuration. Use of Timeout.timeout could result in improperly initialized database connection. This could lead to a partially configured connection being used, resulting in various exceptions, the most common being with the PostgreSQLAdapter raising undefined method key?' for nilorTypeError: wrong argument type nil (expected PG::TypeMap)`. Jean Boussier * Fix error handling during connection configuration. Active Record wasn't properly handling errors during the connection configuration phase. This could lead to a partially configured connection being used, resulting in various exceptions, the most common being with the PostgreSQLAdapter raising undefined method key?' for nilorTypeError: wrong argument type nil (expected PG::TypeMap)`. Jean Boussier * Fix prepared statements on mysql2 adapter. Jean Boussier * Fix a race condition in ActiveRecord::Base#method_missing when lazily defining attributes. If multiple thread were concurrently triggering attribute definition on the same model, it could result in a NoMethodError being raised. Jean Boussier Action View * No changes. Action Pack * No changes. Active Job * No changes. Action Mailer * No changes. Action Cable * Fixed compatibility with redis gem 5.4.1 Jean Boussier Active Storage * No changes. Action Mailbox * No changes. Action Text * No changes. Railties * No changes. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.11 2025/08/14 15:19:04 taca Exp $ @ 1.11 log @www/ruby-rails71: update to 7.1.5.2 Ruby on Rails 7.1.5.2 (2025-08-13) Active Record * Call inspect on ids in RecordNotFound error [CVE-2025-55193] Gannon McGibbon, John Hawthorn Active Storage * Remove dangerous transformations [CVE-2025-24293] Zack Deveau @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.10 2024/12/11 15:37:33 taca Exp $ d3 3 a5 3 BLAKE2s (actioncable-7.1.5.2.gem) = d3433ae77df2665bf46b34d4eeb7846360e732b6d3e9350af852205cb23b3745 SHA512 (actioncable-7.1.5.2.gem) = af56cd787787e8de8581112731fca8147c082ca7d6d41b8bec12eae14fcbf971c7832bf3eea3a8a4f7d9c96c4907bf2e5efe8976df4d567e0bd8cd19917d4fa9 Size (actioncable-7.1.5.2.gem) = 48128 bytes @ 1.10 log @www/ruby-rails71: update to 7.1.5.1 Update to Ruby on Rails 7.1.5.1. Action Pack * Add validation to content security policies to disallow spaces and semicolons. Developers should use multiple arguments, and different directive methods instead. [CVE-2024-54133] Gannon McGibbon Action Text * Update vendored trix version to 2.1.10 John Hawthorn @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.9 2024/12/01 15:47:46 taca Exp $ d3 3 a5 3 BLAKE2s (actioncable-7.1.5.1.gem) = fc8f408f171e3ccf4f35cd50535f19b5d97468c9e2c6d27b6e229c1875dbac10 SHA512 (actioncable-7.1.5.1.gem) = 55cdbed8b2a44c065463fe14a7c3c2571387ff01d0c03e94da81359d6cf7119a7fb07419e9477b4bcc09a248843e151b1130684422ba2c02cbc9aeb08b3d969d Size (actioncable-7.1.5.1.gem) = 48128 bytes @ 1.9 log @www/rails71: update to 7.1.5 Ruby on Rails 7.1.5 (2024-10-31) Active Model * Fix regression in alias_attribute to work with user defined methods. alias_attribute would wrongly assume the attribute accessor was generated by Active Model. class Person include ActiveModel::AttributeMethods define_attribute_methods :name attr_accessor :name alias_attribute :full_name, :name end person.full_name # => NoMethodError: undefined method `attribute' for an instance of Person Jean Boussier Active Record * Fix marshalling of unsaved associated records in 7.1 format. The 7.1 format would only marshal associated records if the association was loaded. But associations that would only contain unsaved records would be skipped. Jean Boussier * Fix an issue where .left_outer_joins used with multiple associations that have the same child association but different parents does not join all parents. Previously, using .left_outer_joins with the same child association would only join one of the parents. Now it will correctly join both parents. Fixes #41498. Garrett Blehm * Ensure ActiveRecord::Encryption.config is always ready before access. Previously, ActiveRecord::Encryption configuration was deferred until ActiveRecord::Base was loaded. Therefore, accessing ActiveRecord::Encryption.config properties before ActiveRecord::Base was loaded would give incorrect results. ActiveRecord::Encryption now has its own loading hook so that its configuration is set as soon as needed. When ActiveRecord::Base is loaded, even lazily, it in turn triggers the loading of ActiveRecord::Encryption, thus preserving the original behavior of having its config ready before any use of ActiveRecord::Base. Maxime Réty * Add TimeZoneConverter#== method, so objects will be properly compared by their type, scale, limit & precision. Address #52699. Ruy Rocha @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.8 2024/10/27 14:35:27 taca Exp $ d3 3 a5 3 BLAKE2s (actioncable-7.1.5.gem) = 0c7ba4f9673e8cf2555af08463f83c0d1e7c243811b1c8c28e8844b114d233ca SHA512 (actioncable-7.1.5.gem) = c510f50d63ff1493738c083d54bf6cc2bb0a29a737cba5e798f467e4e01e49611854a4a0c3170dc928efa16e4c473ee67222c35ea4a766931cf20de8ea2b5cfb Size (actioncable-7.1.5.gem) = 48128 bytes @ 1.8 log @www/ruby-rails71: update to 7.1.4.2 Security fix of ruby-action-mailer70. Other packages have no change except their version. 7.1.4.2 (2024-10-23) Action Mailer * Fix NoMethodError in block_format helper [Michael Leimstaedtner] @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.7 2024/10/21 15:07:29 taca Exp $ d3 3 a5 3 BLAKE2s (actioncable-7.1.4.2.gem) = 2ae4d88fc7763c33a392a8c55585c03454d1f85ae3c46b5b07dc39cf787724cb SHA512 (actioncable-7.1.4.2.gem) = 76a8bad23941c4c38e63645bcdd3aeee5f1676f2f9eadeaa2e24f3dadabc84954ca9c7a4de521b3540ffa635d017d380a0d6cf0e5b211cd5b1b4e4f6d388783d Size (actioncable-7.1.4.2.gem) = 48128 bytes @ 1.7 log @www/ruby-rails71: update to 7.1.4.1 Update Ruby on Rails 7.1 to 7.1.4.1. Active Support * No changes. Active Model * No changes. Active Record * No changes. Action View * No changes. Action Pack * Avoid regex backtracking in HTTP Token authentication [CVE-2024-47887] * Avoid regex backtracking in query parameter filtering [CVE-2024-41128] Active Job * No changes. Action Mailer * Avoid regex backtracking in block_format helper [CVE-2024-47889] Action Cable * No changes. Active Storage * No changes. Action Mailbox * No changes. Action Text * Avoid backtracing in plain_text_for_blockquote_node [CVE-2024-47888] Railties * No changes. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.6 2024/09/22 13:26:39 taca Exp $ d3 3 a5 3 BLAKE2s (actioncable-7.1.4.1.gem) = 02f4a99b820f1d12ee47fb927200bc4fde324846777fa894d7669e7c365ac47b SHA512 (actioncable-7.1.4.1.gem) = fd00891ef0fece4578860ed19e3b5482c63b3e4be5665472ec84ae2681b527f9b72d1c8c5a0ba83c8ae3b9c25ab3be947e27a19f68bf7e319a984710dad46767 Size (actioncable-7.1.4.1.gem) = 48128 bytes @ 1.6 log @www/ruby-actioncable71: update to 7.1.4 Action Cable 7.1.4 (2024-08-22) * No changes. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.5 2024/06/05 16:44:18 taca Exp $ d3 3 a5 3 BLAKE2s (actioncable-7.1.4.gem) = 9a979882095d8c7337147e1b99b74625f8f7807befc05adab771a4038d29956d SHA512 (actioncable-7.1.4.gem) = 320617a2bdb7631b6131d32c2d2abbcff3df9973fe3b58693676492a0ed706492a4c0bb737a64f0b2425f9a6240821b9ed45ffb8760b79cbec966fc40c8c3a62 Size (actioncable-7.1.4.gem) = 48128 bytes @ 1.5 log @www/ruby-rails71: update to 7.1.3.4 Security fix for CVE-2024-32464 (textproc/ruby-actiontext70) and CVE-2024-28103 (www/ruby-actionpack61 package). Ruby on Rails 7.1.3.4 (2024-06-04) Action Text * Sanitize ActionText HTML ContentAttachment in Trix edit view [CVE-2024-32464] Action Pack * Include the HTTP Permissions-Policy on non-HTML Content-Types [CVE-2024-28103] @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.4 2024/05/22 13:27:19 taca Exp $ d3 3 a5 4 BLAKE2s (actioncable-7.1.3.4.gem) = d9b9d127ea77cc994585b56daaabcddcee9c5c82384cecea711a97079ae38079 SHA512 (actioncable-7.1.3.4.gem) = 901e9ca6605447ca6753b29e8ad730d8e7ffad60b71a6604351c8317c3e32d1bfe2d814901e4e91e3b885adedbd0e11426cdac16c4836f46f2e7928f79a0fe16 Size (actioncable-7.1.3.4.gem) = 48128 bytes SHA1 (patch-lib_action__cable.rb) = b7469be80ddff38a751b601c1550d72d463da4ce @ 1.4 log @www/ruby-rails71: update to 7.1.3.3 Fix CVE-2024-34341 of textproc/ruby-actiontext71. 7.1.3.3 (2024-05-16) Active Support * No changes. Active Model * No changes. Active Record * No changes. Action View * No changes. Action Pack * No changes. Active Job * No changes. Action Mailer * No changes. Action Cable * No changes. Active Storage * No changes. Action Mailbox * No changes. Action Text * Upgrade Trix to 2.1.1 to fix CVE-2024-34341. Rafael Mendonça França Railties * No changes. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.3 2024/02/24 14:55:26 taca Exp $ d3 3 a5 3 BLAKE2s (actioncable-7.1.3.3.gem) = 802930c71e6239f7bd356cb88fa6c8c0b57579017a80d81fc5f072cf4c0b7313 SHA512 (actioncable-7.1.3.3.gem) = c6a66500cd287ea54150dff10894550c59e97e82a1d3ac73b69d1cd12e4b8ce2e2906ad556b95faca70805435470ce8dd0288f42ab00d9cda4b466bf10ad8231 Size (actioncable-7.1.3.3.gem) = 48128 bytes @ 1.3 log @www/ruby-rails71: update to 7.1.3.2 Update Ruby on Rails 7.1 and related pacakges to 7.1.3.2 This includes security fix: CVE-2024-26142 for www/ruby-actionpack71 CVE-2024-26143 for www/ruby-actionpack71 Action Pack * Fix possible XSS vulnerability with the translate method in controllers CVE-2024-26143 * Fix ReDoS in Accept header parsing CVE-2024-26142 @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.2 2024/02/04 15:18:23 taca Exp $ d3 3 a5 3 BLAKE2s (actioncable-7.1.3.2.gem) = 58b3dd1cbd28b3dac8169432a78b49c9257063e00962822b4c38d5be813c9421 SHA512 (actioncable-7.1.3.2.gem) = 8abc940a1e10a2a360f011d96da791bac7f883c325be406a78038ca34312c8f97b698ae97343ba092d7ca9d107ab4eb8959cd5d5a3ff3c2c440f63adec5d0a08 Size (actioncable-7.1.3.2.gem) = 48128 bytes @ 1.3.2.1 log @Pullup ticket #6860 - requested by taca www/ruby-rails71: security fix Revisions pulled up: - databases/ruby-activerecord71/distinfo 1.4-1.5 - devel/ruby-activejob71/distinfo 1.4-1.5 - devel/ruby-activemodel71/distinfo 1.4-1.5 - devel/ruby-activestorage71/distinfo 1.4-1.5 - devel/ruby-activesupport71/distinfo 1.4-1.5 - devel/ruby-railties71/distinfo 1.4-1.5 - lang/ruby/rails.mk 1.161,1.164 - mail/ruby-actionmailbox71/distinfo 1.4-1.5 - mail/ruby-actionmailer71/distinfo 1.4-1.5 - textproc/ruby-actiontext71/distinfo 1.4-1.5 - www/ruby-actioncable71/distinfo 1.4-1.5 - www/ruby-actionpack71/distinfo 1.4-1.5 - www/ruby-actionview71/PLIST 1.3 - www/ruby-actionview71/distinfo 1.4-1.5 - www/ruby-rails71/distinfo 1.4-1.5 --- Module Name: pkgsrc Committed By: taca Date: Wed May 22 13:27:19 UTC 2024 Modified Files: pkgsrc/databases/ruby-activerecord71: distinfo pkgsrc/devel/ruby-activejob71: distinfo pkgsrc/devel/ruby-activemodel71: distinfo pkgsrc/devel/ruby-activestorage71: distinfo pkgsrc/devel/ruby-activesupport71: distinfo pkgsrc/devel/ruby-railties71: distinfo pkgsrc/lang/ruby: rails.mk pkgsrc/mail/ruby-actionmailbox71: distinfo pkgsrc/mail/ruby-actionmailer71: distinfo pkgsrc/textproc/ruby-actiontext71: distinfo pkgsrc/www/ruby-actioncable71: distinfo pkgsrc/www/ruby-actionpack71: distinfo pkgsrc/www/ruby-actionview71: PLIST distinfo pkgsrc/www/ruby-rails71: distinfo Log Message: www/ruby-rails71: update to 7.1.3.3 Fix CVE-2024-34341 of textproc/ruby-actiontext71. 7.1.3.3 (2024-05-16) Active Support * No changes. Active Model * No changes. Active Record * No changes. Action View * No changes. Action Pack * No changes. Active Job * No changes. Action Mailer * No changes. Action Cable * No changes. Active Storage * No changes. Action Mailbox * No changes. Action Text * Upgrade Trix to 2.1.1 to fix CVE-2024-34341. Rafael Mendon=E7a Fran=E7a Railties * No changes. --- Module Name: pkgsrc Committed By: taca Date: Wed Jun 5 16:44:18 UTC 2024 Modified Files: pkgsrc/databases/ruby-activerecord71: distinfo pkgsrc/devel/ruby-activejob71: distinfo pkgsrc/devel/ruby-activemodel71: distinfo pkgsrc/devel/ruby-activestorage71: distinfo pkgsrc/devel/ruby-activesupport71: distinfo pkgsrc/devel/ruby-railties71: distinfo pkgsrc/lang/ruby: rails.mk pkgsrc/mail/ruby-actionmailbox71: distinfo pkgsrc/mail/ruby-actionmailer71: distinfo pkgsrc/textproc/ruby-actiontext71: distinfo pkgsrc/www/ruby-actioncable71: distinfo pkgsrc/www/ruby-actionpack71: distinfo pkgsrc/www/ruby-actionview71: distinfo pkgsrc/www/ruby-rails71: distinfo Log Message: www/ruby-rails71: update to 7.1.3.4 Security fix for CVE-2024-32464 (textproc/ruby-actiontext70) and CVE-2024-28103 (www/ruby-actionpack61 package). Ruby on Rails 7.1.3.4 (2024-06-04) Action Text * Sanitize ActionText HTML ContentAttachment in Trix edit view [CVE-2024-32464] Action Pack * Include the HTTP Permissions-Policy on non-HTML Content-Types [CVE-2024-28103] @ text @d1 1 a1 1 $NetBSD$ d3 3 a5 3 BLAKE2s (actioncable-7.1.3.4.gem) = d9b9d127ea77cc994585b56daaabcddcee9c5c82384cecea711a97079ae38079 SHA512 (actioncable-7.1.3.4.gem) = 901e9ca6605447ca6753b29e8ad730d8e7ffad60b71a6604351c8317c3e32d1bfe2d814901e4e91e3b885adedbd0e11426cdac16c4836f46f2e7928f79a0fe16 Size (actioncable-7.1.3.4.gem) = 48128 bytes @ 1.2 log @www/ruby-actioncable71: update to 7.1.3 Action Cable (2024-01-16) * No changes. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.1 2023/11/30 15:32:41 taca Exp $ d3 3 a5 3 BLAKE2s (actioncable-7.1.3.gem) = 9196a6da8cea32c087b15abb2d414ed150f057c472755ff15445ebb50b1b7f30 SHA512 (actioncable-7.1.3.gem) = 337535ea62b736db46ca02de8c91d4e1e812e003a6bf53bdd8a023bfc4f1757e261b40429bef1a44dcc7645a35ccd4968148a7e23a1b56a48c8f157d2c740263 Size (actioncable-7.1.3.gem) = 48128 bytes @ 1.1 log @www/ruby-actioncable71: add version 7.1.2 Action Cable - Integrated WebSockets for Rails Action Cable seamlessly integrates WebSockets with the rest of your Rails application. It allows for real-time features to be written in Ruby in the same style and form as the rest of your Rails application, while still being performant and scalable. It's a full-stack offering that provides both a client-side JavaScript framework and a server-side Ruby framework. You have access to your full domain model written with Active Record or your ORM of choice. This is for Ruby on Rails 7.1. @ text @d1 1 a1 1 $NetBSD$ d3 3 a5 3 BLAKE2s (actioncable-7.1.2.gem) = df7e793fdeb1d1ecfb393a09ddf74eb326ed7b0f3b4d4a67744ed7e13c5ab393 SHA512 (actioncable-7.1.2.gem) = 68fc937f4c442b5c85868827960e41f350bf285e746084aea366901c6660ecd86b297cd1724d2ea822673b13178feed8af52557094cb7629e0c8cc37abed9efa Size (actioncable-7.1.2.gem) = 48128 bytes @