The NetBSD Project

CVS log for pkgsrc/www/ruby-actionpack32/Attic/distinfo

[BACK] Up to [cvs.NetBSD.org] / pkgsrc / www / ruby-actionpack32

Request diff between arbitrary revisions


Default branch: MAIN
Current tag: pkgsrc-2012Q2


Revision 1.4.2.2 / (download) - annotate - [select for diffs], Mon Aug 20 08:22:29 2012 UTC (7 years, 2 months ago) by sbd
Branch: pkgsrc-2012Q2
Changes since 1.4.2.1: +3 -3 lines
Diff to previous 1.4.2.1 (colored) to branchpoint 1.4 (colored) next main 1.5 (colored)

Pullup ticket #3904 - requested by taca
Ruby on Rails 3.2.8 security update

Revisions pulled up:
- databases/ruby-activerecord32/distinfo                        1.6
- devel/ruby-activemodel32/distinfo                             1.6
- devel/ruby-activesupport32/distinfo                           1.6
- devel/ruby-railties32/distinfo                                1.6
- lang/ruby/rails.mk                                            1.30
- mail/ruby-actionmailer32/distinfo                             1.6
- www/ruby-actionpack32/distinfo                                1.6
- www/ruby-activeresource32/distinfo                            1.6
- www/ruby-rails32/distinfo                                     1.6

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 12:37:06 UTC 2012

   Modified Files:
   	pkgsrc/lang/ruby: rails.mk

   Log Message:
   Start update of Ruby on Rails 3.2.8.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 12:38:09 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-activesupport32: distinfo

   Log Message:
   Update ruby-activesupport32 to 3.2.8.

   ## Rails 3.2.8 (Aug 9, 2012) ##

   * Fix ActiveSupport integration with Mocha > 0.12.1. *Mike Gunderloy*

   * Reverted the deprecation of ActiveSupport::JSON::Variable.
     *Rafael MendonÁŠ FranÁŠ*

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 12:38:41 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-activemodel32: distinfo

   Log Message:
   Update ruby-activemodel32 to 3.2.8.

   ## Rails 3.2.8 (Aug 9, 2012) ##

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 12:40:00 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-actionpack32: distinfo

   Log Message:
   Update ruby-actionpack32 to 3.2.8.

   ## Rails 3.2.8 (Aug 9, 2012) ##

   * There is an XSS vulnerability in the strip_tags helper in Ruby on Rails, the
     helper doesn't correctly handle malformed html.  As a result an attacker can
     execute arbitrary javascript through the use of specially crafted malformed
     html.

     *Marek from Nethemba (www.nethemba.com) & Santiago Pastorino*

   * When a "prompt" value is supplied to the `select_tag` helper, the "prompt"
     value is not escaped.
     If untrusted data is not escaped, and is supplied as the prompt value, there
     is a potential for XSS attacks.
     Vulnerable code will look something like this:

       select_tag("name", options, :prompt => UNTRUSTED_INPUT)

     *Santiago Pastorino*

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 12:41:02 UTC 2012

   Modified Files:
   	pkgsrc/databases/ruby-activerecord32: distinfo

   Log Message:
   Update ruby-activerecord32 to 3.2.8.

   ## Rails 3.2.8 (Aug 9, 2012) ##

   * Do not consider the numeric attribute as changed if the old value is zero
     and the new value is not a string.
     Fixes #7237.

     *Rafael MendonÁŠ FranÁŠ*

   * Removes the deprecation of `update_attribute`. *fxn*

   * Reverted the deprecation of `composed_of`. *Rafael MendonÁŠ FranÁŠ*

   * Reverted the deprecation of `*_sql` association options. They will be
     deprecated in 4.0 instead. *Jon Leighton*

   * Do not eager load AR session store. ActiveRecord::SessionStore depends on
     the abstract store in Action Pack. Eager loading this class would break
     client code that eager loads Active Record standalone.
     Fixes #7160

     *Xavier Noria*

   * Do not set RAILS_ENV to "development" when using `db:test:prepare` and
     related rake tasks.
     This was causing the truncation of the development database data when using
     RSpec.

     Fixes #7175.

     *Rafael MendonÁŠ FranÁŠ*

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 12:41:37 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-activeresource32: distinfo

   Log Message:
   Update ruby-activeresource32 to 3.2.8.

   ## Rails 3.2.8 (Aug 9, 2012) ##

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 12:42:14 UTC 2012

   Modified Files:
   	pkgsrc/mail/ruby-actionmailer32: distinfo

   Log Message:
   Update ruby-actionmailer32 to 3.2.8.

   ## Rails 3.2.8 (Aug 9, 2012) ##

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 12:43:08 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-railties32: distinfo

   Log Message:
   Update ruby-railties32 to 3.2.8.

   ## Rails 3.2.8 (Aug 9, 2012) ##

   * ERB scaffold generator use the `:data => { :confirm => "Text" }` syntax
     instead of `:confirm`.

     *Rafael MendonÁŠ FranÁŠ*

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 12:44:30 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-rails32: distinfo

   Log Message:
   Update ruby-rails32 to 3.2.8.

   This is a meta-like package and no changes.

Revision 1.4.2.1 / (download) - annotate - [select for diffs], Sun Aug 12 14:49:00 2012 UTC (7 years, 2 months ago) by tron
Branch: pkgsrc-2012Q2
Changes since 1.4: +4 -4 lines
Diff to previous 1.4 (colored)

Pullup ticket #3896 - requested by taca
databases/ruby-activerecord32: security update
devel/ruby-activemodel32: security update
devel/ruby-activesupport32: security update
devel/ruby-railties32: security update
mail/ruby-actionmailer32: security update
www/ruby-actionpack32: security update
www/ruby-activeresource32: security update
www/ruby-rails32: security update

Revisions pulled up:
- databases/ruby-activerecord32/distinfo                        1.5
- devel/ruby-activemodel32/distinfo                             1.5
- devel/ruby-activesupport32/distinfo                           1.5
- devel/ruby-railties32/distinfo                                1.5
- lang/ruby/rails.mk                                            1.27
- mail/ruby-actionmailer32/distinfo                             1.5
- www/ruby-actionpack32/distinfo                                1.5
- www/ruby-activeresource32/distinfo                            1.5
- www/ruby-rails32/distinfo                                     1.5

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:50:28 UTC 2012

   Modified Files:
   	pkgsrc/lang/ruby: rails.mk

   Log Message:
   Start update of Ruby on Rails 3.2.7.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:51:18 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-activesupport32: distinfo

   Log Message:
   Update ruby-activesupport32 to 3.2.7.

   ## Rails 3.2.7 (unreleased)

   * Hash#fetch(fetch) is not the same as doing hash[key]
   * adds a missing require [fixes #6896]
   * make sure the inflection rules are loaded when cherry-picking
     active_support/core_ext/string/inflections.rb [fixes #6884]
   * Merge pull request #6857 from rsutphin/as_core_ext_time_missing_require
   * bump AS deprecation_horizon to 4.0

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:52:25 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-activemodel32: distinfo

   Log Message:
   Update ruby-activemodel32 to 3.2.7.

   ## Rails 3.2.7 (unreleased)

   * `validates_inclusion_of` and `validates_exclusion_of` now accept `:within`
     option as alias of `:in` as documented.

   * Fix the the backport of the object dup with the ruby 1.9.3p194.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:53:01 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-activeresource32: distinfo

   Log Message:
   Update ruby-activeresource32 to 3.2.7.

   ## Rails 3.2.7 (unreleased)

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:53:46 UTC 2012

   Modified Files:
   	pkgsrc/databases/ruby-activerecord32: distinfo

   Log Message:
   Update ruby-activerecord32 to 3.2.7.

   ## Rails 3.2.7 (unreleased) ##

   *   `:finder_sql` and `:counter_sql` options on collection associations
       are deprecated. Please transition to using scopes.

       *Jon Leighton*

   *   `:insert_sql` and `:delete_sql` options on `has_and_belongs_to_many`
       associations are deprecated. Please transition to using `has_many
       :through`

       *Jon Leighton*

   *   `composed_of` has been deprecated. You'll have to write your own accessor
       and mutator methods if you'd like to use value objects to represent some
       portion of your models.

       *Steve Klabnik*

   *   `update_attribute` has been deprecated. Use `update_column` if
       you want to bypass mass-assignment protection, validations, callbacks,
       and touching of updated_at. Otherwise please use `update_attributes`.

       *Steve Klabnik*

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:55:32 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-actionpack32: distinfo

   Log Message:
   Update ruby-actionpack32 to 3.2.7.

   ## Rails 3.2.7 (unreleased) ##

   * Do not convert digest auth strings to symbols. CVE-2012-3424

   * Bump Journey requirements to 1.0.4

   * Add support for optional root segments containing slashes

   * Fixed bug creating invalid HTML in select options

   * Show in log correct wrapped keys

   * Fix NumberHelper options wrapping to prevent verbatim blocks being rendered
     instead of line continuations.

   * ActionController::Metal doesn't have logger method, check it and then
     delegate

   * ActionController::Caching depends on RackDelegation and
     AbstractController::Callbacks

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:56:13 UTC 2012

   Modified Files:
   	pkgsrc/mail/ruby-actionmailer32: distinfo

   Log Message:
   Update ruby-actionmailer32 to 3.2.7.

   ## Rails 3.2.7 (unreleased)

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:56:46 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-railties32: distinfo

   Log Message:
   Update ruby-railties32 to 3.2.7.

   ## Rails 3.2.7 (unreleased)

   * Since Rails 3.2, use layout false to render no layout
   * Use strict_args_position! if available from Thor

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:57:33 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-rails32: distinfo

   Log Message:
   Update Update ruby-rails32 to 3.2.17.

   This is a meta-like package and no changes.

Revision 1.4 / (download) - annotate - [select for diffs], Wed Jun 13 15:15:59 2012 UTC (7 years, 4 months ago) by taca
Branch: MAIN
CVS Tags: pkgsrc-2012Q2-base
Branch point for: pkgsrc-2012Q2
Changes since 1.3: +4 -4 lines
Diff to previous 1.3 (colored)

Update www/ruby-actionpack32 to 3.2.6.

## Rails 3.2.6 (Jun 12, 2012) ##

*   nil is removed from array parameter values

    CVE-2012-2694

*   Deprecate `:confirm` in favor of `':data => { :confirm => "Text" }'` option
    for `button_to`, `button_tag`, `image_submit_tag`, `link_to` and
    `submit_tag` helpers.

    *Carlos Galdino*

*   Allow to use mounted_helpers (helpers for accessing mounted engines) in
    ActionView::TestCase. *Piotr Sarnacki*

*   Include mounted_helpers (helpers for accessing mounted engines) in
    ActionDispatch::IntegrationTest by default. *Piotr Sarnacki*

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.




CVSweb <webmaster@jp.NetBSD.org>