Hello community,

here is the log from the commit of package rubygem-omniauth for 
openSUSE:Factory checked in at 2020-05-11 13:39:01
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/rubygem-omniauth (Old)
 and      /work/SRC/openSUSE:Factory/.rubygem-omniauth.new.2738 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "rubygem-omniauth"

Mon May 11 13:39:01 2020 rev:4 rq:802357 version:1.9.1

Changes:
--------
--- /work/SRC/openSUSE:Factory/rubygem-omniauth/rubygem-omniauth.changes        
2019-03-04 09:20:32.076599261 +0100
+++ 
/work/SRC/openSUSE:Factory/.rubygem-omniauth.new.2738/rubygem-omniauth.changes  
    2020-05-11 13:39:02.080825893 +0200
@@ -1,0 +2,6 @@
+Thu May  7 21:10:05 UTC 2020 - Stephan Kulow <[email protected]>
+
+- updated to version 1.9.1
+  no changelog found
+
+-------------------------------------------------------------------

Old:
----
  omniauth-1.9.0.gem

New:
----
  omniauth-1.9.1.gem

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ rubygem-omniauth.spec ++++++
--- /var/tmp/diff_new_pack.hCcFpR/_old  2020-05-11 13:39:02.960827738 +0200
+++ /var/tmp/diff_new_pack.hCcFpR/_new  2020-05-11 13:39:02.964827746 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package rubygem-omniauth
 #
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -24,7 +24,7 @@
 #
 
 Name:           rubygem-omniauth
-Version:        1.9.0
+Version:        1.9.1
 Release:        0
 %define mod_name omniauth
 %define mod_full_name %{mod_name}-%{version}
@@ -32,7 +32,7 @@
 BuildRequires:  %{ruby >= 2.2}
 BuildRequires:  %{rubygem gem2rpm}
 BuildRequires:  ruby-macros >= 5
-Url:            https://github.com/omniauth/omniauth
+URL:            https://github.com/omniauth/omniauth
 Source:         https://rubygems.org/gems/%{mod_full_name}.gem
 Source1:        gem2rpm.yml
 Summary:        A generalized Rack framework for multiple-provider 
authentication

++++++ omniauth-1.9.0.gem -> omniauth-1.9.1.gem ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/.travis.yml new/.travis.yml
--- old/.travis.yml     2018-12-14 18:31:47.000000000 +0100
+++ new/.travis.yml     2020-03-02 18:36:11.000000000 +0100
@@ -1,7 +1,9 @@
 bundler_args: --without development
 before_install:
-  - gem update --system
-  - gem update bundler
+  - gem uninstall -v '>= 2' -i $(rvm gemdir)@global -ax bundler || true
+  - gem install bundler -v '1.17.3'
+install:
+ - bundle _1.17.3_ install --jobs=3 --retry=3
 cache: bundler
 env:
   global:
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Gemfile new/Gemfile
--- old/Gemfile 2018-12-14 18:31:47.000000000 +0100
+++ new/Gemfile 2020-03-02 18:36:11.000000000 +0100
@@ -13,14 +13,14 @@
 
 group :test do
   gem 'coveralls', :require => false
-  gem 'hashie', '>= 3.4.6', '< 3.7.0', :platforms => [:jruby_18]
+  gem 'hashie', '>= 3.4.6', '~> 4.0.0', :platforms => [:jruby_18]
   gem 'json', '~> 2.0.3', :platforms => %i[jruby_18 jruby_19 ruby_19]
   gem 'mime-types', '~> 3.1', :platforms => [:jruby_18]
   gem 'rack', '>= 2.0.6', :platforms => %i[jruby_18 jruby_19 ruby_19 ruby_20 
ruby_21]
   gem 'rack-test'
   gem 'rest-client', '~> 2.0.0', :platforms => [:jruby_18]
   gem 'rspec', '~> 3.5.0'
-  gem 'rubocop', '>= 0.58.2', :platforms => %i[ruby_20 ruby_21 ruby_22 ruby_23 
ruby_24]
+  gem 'rubocop', '>= 0.58.2', '< 0.69.0', :platforms => %i[ruby_20 ruby_21 
ruby_22 ruby_23 ruby_24]
   gem 'tins', '~> 1.13.0', :platforms => %i[jruby_18 jruby_19 ruby_19]
 end
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/README.md new/README.md
--- old/README.md       2018-12-14 18:31:47.000000000 +0100
+++ new/README.md       2020-03-02 18:36:11.000000000 +0100
@@ -2,14 +2,12 @@
 
 [![Gem Version](http://img.shields.io/gem/v/omniauth.svg)][gem]
 [![Build Status](http://img.shields.io/travis/omniauth/omniauth.svg)][travis]
-[![Dependency 
Status](http://img.shields.io/gemnasium/omniauth/omniauth.svg)][gemnasium]
 [![Code 
Climate](http://img.shields.io/codeclimate/github/omniauth/omniauth.svg)][codeclimate]
 [![Coverage 
Status](http://img.shields.io/coveralls/omniauth/omniauth.svg)][coveralls]
 
[![Security](https://hakiri.io/github/omniauth/omniauth/master.svg)](https://hakiri.io/github/omniauth/omniauth/master)
 
 [gem]: https://rubygems.org/gems/omniauth
 [travis]: http://travis-ci.org/omniauth/omniauth
-[gemnasium]: https://gemnasium.com/omniauth/omniauth
 [codeclimate]: https://codeclimate.com/github/omniauth/omniauth
 [coveralls]: https://coveralls.io/r/omniauth/omniauth
 
@@ -122,6 +120,8 @@
 you how you want to implement the particulars of your application's
 authentication flow.
 
+**Please note:** there is currently a CSRF vulnerability which affects 
OmniAuth (designated 
[CVE-2015-9284](https://nvd.nist.gov/vuln/detail/CVE-2015-9284)) that requires 
mitigation at the application level. More details on how to do this can be 
found on the 
[Wiki](https://github.com/omniauth/omniauth/wiki/Resolving-CVE-2015-9284).
+
 ## Configuring The `origin` Param
 The `origin` url parameter is typically used to inform where a user came from 
and where, should you choose to use it, they'd want to return to.
 
Binary files old/checksums.yaml.gz and new/checksums.yaml.gz differ
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/lib/omniauth/builder.rb new/lib/omniauth/builder.rb
--- old/lib/omniauth/builder.rb 2018-12-14 18:31:47.000000000 +0100
+++ new/lib/omniauth/builder.rb 2020-03-02 18:36:11.000000000 +0100
@@ -1,24 +1,5 @@
 module OmniAuth
   class Builder < ::Rack::Builder
-    def initialize(app, &block)
-      @options = nil
-      if rack14? || rack2?
-        super
-      else
-        @app = app
-        super(&block)
-        @ins << @app
-      end
-    end
-
-    def rack14?
-      Rack.release.start_with?('1.') && (Rack.release.split('.')[1].to_i >= 4)
-    end
-
-    def rack2?
-      Rack.release.start_with? '2.'
-    end
-
     def on_failure(&block)
       OmniAuth.config.on_failure = block
     end
@@ -40,7 +21,7 @@
     end
 
     def options(options = false)
-      return @options || {} if options == false
+      return @options ||= {} if options == false
 
       @options = options
     end
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/lib/omniauth/version.rb new/lib/omniauth/version.rb
--- old/lib/omniauth/version.rb 2018-12-14 18:31:47.000000000 +0100
+++ new/lib/omniauth/version.rb 2020-03-02 18:36:11.000000000 +0100
@@ -1,3 +1,3 @@
 module OmniAuth
-  VERSION = '1.9.0'.freeze
+  VERSION = '1.9.1'.freeze
 end
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/lib/omniauth.rb new/lib/omniauth.rb
--- old/lib/omniauth.rb 2018-12-14 18:31:47.000000000 +0100
+++ new/lib/omniauth.rb 2020-03-02 18:36:11.000000000 +0100
@@ -132,7 +132,7 @@
   end
 
   module Utils
-  module_function
+  module_function # rubocop:disable Layout/IndentationWidth
 
     def form_css
       "<style type='text/css'>#{OmniAuth.config.form_css}</style>"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/metadata new/metadata
--- old/metadata        2018-12-14 18:31:47.000000000 +0100
+++ new/metadata        2020-03-02 18:36:11.000000000 +0100
@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: omniauth
 version: !ruby/object:Gem::Version
-  version: 1.9.0
+  version: 1.9.1
 platform: ruby
 authors:
 - Michael Bleigh
@@ -10,7 +10,7 @@
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-12-14 00:00:00.000000000 Z
+date: 2020-03-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: hashie
@@ -19,9 +19,6 @@
     - - ">="
       - !ruby/object:Gem::Version
         version: 3.4.6
-    - - "<"
-      - !ruby/object:Gem::Version
-        version: 3.7.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -29,9 +26,6 @@
     - - ">="
       - !ruby/object:Gem::Version
         version: 3.4.6
-    - - "<"
-      - !ruby/object:Gem::Version
-        version: 3.7.0
 - !ruby/object:Gem::Dependency
   name: rack
   requirement: !ruby/object:Gem::Requirement
@@ -134,7 +128,7 @@
       version: 1.3.5
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.11
+rubygems_version: 2.6.14.4
 signing_key: 
 specification_version: 4
 summary: A generalized Rack framework for multiple-provider authentication.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/omniauth.gemspec new/omniauth.gemspec
--- old/omniauth.gemspec        2018-12-14 18:31:47.000000000 +0100
+++ new/omniauth.gemspec        2020-03-02 18:36:11.000000000 +0100
@@ -5,7 +5,7 @@
 require 'omniauth/version'
 
 Gem::Specification.new do |spec|
-  spec.add_dependency 'hashie', ['>= 3.4.6', '< 3.7.0']
+  spec.add_dependency 'hashie', ['>= 3.4.6']
   spec.add_dependency 'rack', ['>= 1.6.2', '< 3']
   spec.add_development_dependency 'bundler', '~> 1.14'
   spec.add_development_dependency 'rake', '~> 12.0'


Reply via email to