Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package rubygem-actionpack-7.0 for
openSUSE:Factory checked in at 2023-04-21 18:47:42
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/rubygem-actionpack-7.0 (Old)
and /work/SRC/openSUSE:Factory/.rubygem-actionpack-7.0.new.1533 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "rubygem-actionpack-7.0"
Fri Apr 21 18:47:42 2023 rev:8 rq:1081234 version:7.0.4.3
Changes:
--------
---
/work/SRC/openSUSE:Factory/rubygem-actionpack-7.0/rubygem-actionpack-7.0.changes
2023-03-08 14:52:22.442611173 +0100
+++
/work/SRC/openSUSE:Factory/.rubygem-actionpack-7.0.new.1533/rubygem-actionpack-7.0.changes
2023-04-21 18:47:44.328156599 +0200
@@ -1,0 +2,7 @@
+Fri Apr 21 11:21:03 UTC 2023 - Marcus Rueckert <[email protected]>
+
+- Update to version 7.0.4.3:
+
https://rubyonrails.org/2023/3/13/Rails-7-0-4-3-and-6-1-7-3-have-been-released
+
https://rubyonrails.org/2023/1/24/Rails-7-0-4-2-and-6-1-7-2-have-been-released
+
+-------------------------------------------------------------------
Old:
----
actionpack-7.0.4.1.gem
New:
----
actionpack-7.0.4.3.gem
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ rubygem-actionpack-7.0.spec ++++++
--- /var/tmp/diff_new_pack.yw0b6R/_old 2023-04-21 18:47:44.880159797 +0200
+++ /var/tmp/diff_new_pack.yw0b6R/_new 2023-04-21 18:47:44.884159820 +0200
@@ -24,7 +24,7 @@
#
Name: rubygem-actionpack-7.0
-Version: 7.0.4.1
+Version: 7.0.4.3
Release: 0
%define mod_name actionpack
%define mod_full_name %{mod_name}-%{version}
++++++ actionpack-7.0.4.1.gem -> actionpack-7.0.4.3.gem ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/CHANGELOG.md new/CHANGELOG.md
--- old/CHANGELOG.md 2023-01-17 19:54:56.000000000 +0100
+++ new/CHANGELOG.md 2023-03-13 19:52:51.000000000 +0100
@@ -1,3 +1,17 @@
+## Rails 7.0.4.3 (March 13, 2023) ##
+
+* No changes.
+
+
+## Rails 7.0.4.2 (January 24, 2023) ##
+
+* Fix `domain: :all` for two letter TLD
+
+ This fixes a compatibility issue introduced in our previous security
+ release when using `domain: :all` with a two letter but single level top
+ level domain domain (like `.ca`, rather than `.co.uk`).
+
+
## Rails 7.0.4.1 (January 17, 2023) ##
* Fix sec issue with _url_host_allowed?
Binary files old/checksums.yaml.gz and new/checksums.yaml.gz differ
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/lib/action_dispatch/middleware/cookies.rb
new/lib/action_dispatch/middleware/cookies.rb
--- old/lib/action_dispatch/middleware/cookies.rb 2023-01-17
19:54:56.000000000 +0100
+++ new/lib/action_dispatch/middleware/cookies.rb 2023-03-13
19:52:51.000000000 +0100
@@ -461,8 +461,8 @@
# Case where tld_length is not provided
else
# Regular TLDs
- if !(/([^.]{2,3}\.[^.]{2})$/.match?(request.host))
- cookie_domain = dot_splitted_host.last(2).join('.')
+ if !(/\.[^.]{2,3}\.[^.]{2}\z/.match?(request.host))
+ cookie_domain = dot_splitted_host.last(2).join(".")
# **.**, ***.** style TLDs like co.uk and com.au
else
cookie_domain = dot_splitted_host.last(3).join('.')
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/lib/action_pack/gem_version.rb
new/lib/action_pack/gem_version.rb
--- old/lib/action_pack/gem_version.rb 2023-01-17 19:54:56.000000000 +0100
+++ new/lib/action_pack/gem_version.rb 2023-03-13 19:52:51.000000000 +0100
@@ -10,7 +10,7 @@
MAJOR = 7
MINOR = 0
TINY = 4
- PRE = "1"
+ PRE = "3"
STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
end
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/metadata new/metadata
--- old/metadata 2023-01-17 19:54:56.000000000 +0100
+++ new/metadata 2023-03-13 19:52:51.000000000 +0100
@@ -1,14 +1,14 @@
--- !ruby/object:Gem::Specification
name: actionpack
version: !ruby/object:Gem::Version
- version: 7.0.4.1
+ version: 7.0.4.3
platform: ruby
authors:
- David Heinemeier Hansson
autorequire:
bindir: bin
cert_chain: []
-date: 2023-01-17 00:00:00.000000000 Z
+date: 2023-03-13 00:00:00.000000000 Z
dependencies:
- !ruby/object:Gem::Dependency
name: activesupport
@@ -16,14 +16,14 @@
requirements:
- - '='
- !ruby/object:Gem::Version
- version: 7.0.4.1
+ version: 7.0.4.3
type: :runtime
prerelease: false
version_requirements: !ruby/object:Gem::Requirement
requirements:
- - '='
- !ruby/object:Gem::Version
- version: 7.0.4.1
+ version: 7.0.4.3
- !ruby/object:Gem::Dependency
name: rack
requirement: !ruby/object:Gem::Requirement
@@ -98,28 +98,28 @@
requirements:
- - '='
- !ruby/object:Gem::Version
- version: 7.0.4.1
+ version: 7.0.4.3
type: :runtime
prerelease: false
version_requirements: !ruby/object:Gem::Requirement
requirements:
- - '='
- !ruby/object:Gem::Version
- version: 7.0.4.1
+ version: 7.0.4.3
- !ruby/object:Gem::Dependency
name: activemodel
requirement: !ruby/object:Gem::Requirement
requirements:
- - '='
- !ruby/object:Gem::Version
- version: 7.0.4.1
+ version: 7.0.4.3
type: :development
prerelease: false
version_requirements: !ruby/object:Gem::Requirement
requirements:
- - '='
- !ruby/object:Gem::Version
- version: 7.0.4.1
+ version: 7.0.4.3
description: Web apps on Rails. Simple, battle-tested conventions for building
and
testing MVC web applications. Works with any Rack-compatible server.
email: [email protected]
@@ -310,10 +310,10 @@
- MIT
metadata:
bug_tracker_uri: https://github.com/rails/rails/issues
- changelog_uri:
https://github.com/rails/rails/blob/v7.0.4.1/actionpack/CHANGELOG.md
- documentation_uri: https://api.rubyonrails.org/v7.0.4.1/
+ changelog_uri:
https://github.com/rails/rails/blob/v7.0.4.3/actionpack/CHANGELOG.md
+ documentation_uri: https://api.rubyonrails.org/v7.0.4.3/
mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
- source_code_uri: https://github.com/rails/rails/tree/v7.0.4.1/actionpack
+ source_code_uri: https://github.com/rails/rails/tree/v7.0.4.3/actionpack
rubygems_mfa_required: 'true'
post_install_message:
rdoc_options: []
