actionmailbox 8.1.4 → 8.1.4.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +9 -0
  3. data/app/controllers/action_mailbox/ingresses/mailgun/inbound_emails_controller.rb +1 -1
  4. data/lib/action_mailbox/gem_version.rb +1 -1
  5. metadata +14 -14
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 6209e62a6cf1617f870bd64558f22542d2cb7def04accb951d9d035dfe6714ba
4
- data.tar.gz: 5a849fa3bec07d4ad853e4720269cad24eed12cc58a07d7e31594435b88a5309
3
+ metadata.gz: ea8252fc71388a5b1507a69658126c6ad7ae8e16e11dfd768443e4f67198337c
4
+ data.tar.gz: 4ed35b93b22a382df1ff44b5296a71022d946d0a86c20a8bbd87dbb4fb221179
5
5
  SHA512:
6
- metadata.gz: 0fde7f19e2018f48783774f34a446977018fc880ac641a53dd9bf115a3d901f4a987084eee4b3bfab860f65240bb09b1d2e96383cd11be9667f7418b838fd4c0
7
- data.tar.gz: ea6bceca33b02a9034501120cc7ac48e6ad80d37a295b638767069347919b854e66edb6ffb02f37825a705e4dc8ab6387ded72bad6e3a2bd4bacdff2e78ad870
6
+ metadata.gz: 913c6cca66880de37d9c797eb3ec2ce2cc87cce205296c2c4b4ace28f837d9648fc58ea518f0b597ade67af910d541db0900fbc330466b77335aaf87575e2bbe
7
+ data.tar.gz: 3733cce5d869d9205fe25af55b8dae8595a7d8c51149c2da6880bcc52e14b0eef1b313c18f69ab19c507b35336e718b0cf1fddb72959fbc83d8a9e3916b3ea2b
data/CHANGELOG.md CHANGED
@@ -1,3 +1,12 @@
1
+ ## Rails 8.1.4.1 (November 03, 2026) ##
2
+
3
+ * Reject Mailgun inbound emails whose timestamp is more than 2 minutes ahead
4
+ of local time.
5
+
6
+ [GHSA-5957-c7qm-m469]
7
+
8
+ *Mike Dalessio*
9
+
1
10
  ## Rails 8.1.4 (September 24, 2026) ##
2
11
 
3
12
  * No changes.
data/app/controllers/action_mailbox/ingresses/mailgun/inbound_emails_controller.rb CHANGED
@@ -99,7 +99,7 @@ module ActionMailbox
99
99
 
100
100
  # Allow for 2 minutes of drift between Mailgun time and local server time.
101
101
  def recent?
102
- Time.at(timestamp) >= 2.minutes.ago
102
+ Time.at(timestamp).between?(2.minutes.ago, 2.minutes.from_now)
103
103
  end
104
104
 
105
105
  def expected_signature
data/lib/action_mailbox/gem_version.rb CHANGED
@@ -10,7 +10,7 @@ module ActionMailbox
10
10
  MAJOR = 8
11
11
  MINOR = 1
12
12
  TINY = 4
13
- PRE = nil
13
+ PRE = "1"
14
14
 
15
15
  STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
16
16
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: actionmailbox
3
3
  version: !ruby/object:Gem::Version
4
- version: 8.1.4
4
+ version: 8.1.4.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - David Heinemeier Hansson
@@ -16,70 +16,70 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 8.1.4
19
+ version: 8.1.4.1
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 8.1.4
26
+ version: 8.1.4.1
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: activerecord
29
29
  requirement: !ruby/object:Gem::Requirement
30
30
  requirements:
31
31
  - - '='
32
32
  - !ruby/object:Gem::Version
33
- version: 8.1.4
33
+ version: 8.1.4.1
34
34
  type: :runtime
35
35
  prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
38
  - - '='
39
39
  - !ruby/object:Gem::Version
40
- version: 8.1.4
40
+ version: 8.1.4.1
41
41
  - !ruby/object:Gem::Dependency
42
42
  name: activestorage
43
43
  requirement: !ruby/object:Gem::Requirement
44
44
  requirements:
45
45
  - - '='
46
46
  - !ruby/object:Gem::Version
47
- version: 8.1.4
47
+ version: 8.1.4.1
48
48
  type: :runtime
49
49
  prerelease: false
50
50
  version_requirements: !ruby/object:Gem::Requirement
51
51
  requirements:
52
52
  - - '='
53
53
  - !ruby/object:Gem::Version
54
- version: 8.1.4
54
+ version: 8.1.4.1
55
55
  - !ruby/object:Gem::Dependency
56
56
  name: activejob
57
57
  requirement: !ruby/object:Gem::Requirement
58
58
  requirements:
59
59
  - - '='
60
60
  - !ruby/object:Gem::Version
61
- version: 8.1.4
61
+ version: 8.1.4.1
62
62
  type: :runtime
63
63
  prerelease: false
64
64
  version_requirements: !ruby/object:Gem::Requirement
65
65
  requirements:
66
66
  - - '='
67
67
  - !ruby/object:Gem::Version
68
- version: 8.1.4
68
+ version: 8.1.4.1
69
69
  - !ruby/object:Gem::Dependency
70
70
  name: actionpack
71
71
  requirement: !ruby/object:Gem::Requirement
72
72
  requirements:
73
73
  - - '='
74
74
  - !ruby/object:Gem::Version
75
- version: 8.1.4
75
+ version: 8.1.4.1
76
76
  type: :runtime
77
77
  prerelease: false
78
78
  version_requirements: !ruby/object:Gem::Requirement
79
79
  requirements:
80
80
  - - '='
81
81
  - !ruby/object:Gem::Version
82
- version: 8.1.4
82
+ version: 8.1.4.1
83
83
  - !ruby/object:Gem::Dependency
84
84
  name: mail
85
85
  requirement: !ruby/object:Gem::Requirement
@@ -164,10 +164,10 @@ licenses:
164
164
  - MIT
165
165
  metadata:
166
166
  bug_tracker_uri: https://github.com/rails/rails/issues
167
- changelog_uri: https://github.com/rails/rails/blob/v8.1.4/actionmailbox/CHANGELOG.md
168
- documentation_uri: https://api.rubyonrails.org/v8.1.4/
167
+ changelog_uri: https://github.com/rails/rails/blob/v8.1.4.1/actionmailbox/CHANGELOG.md
168
+ documentation_uri: https://api.rubyonrails.org/v8.1.4.1/
169
169
  mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
170
- source_code_uri: https://github.com/rails/rails/tree/v8.1.4/actionmailbox
170
+ source_code_uri: https://github.com/rails/rails/tree/v8.1.4.1/actionmailbox
171
171
  rubygems_mfa_required: 'true'
172
172
  rdoc_options: []
173
173
  require_paths: