actionmailer 7.2.0 → 7.2.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9c7f9dbdd83663bd038b7e812e4b5f7318b20f1946fbace7f07354a3e268d1ed
-  data.tar.gz: 77246e426849a478ee05eb9c47b22fbaa14d8a11afbeb153a19c766158484346
+  metadata.gz: dead7aa73f10df3907e7314902d2bb322b089bc0d4e22d01e916e9cf7ecd4c18
+  data.tar.gz: e8477ce5f9c8795700aeb5ab20b7f8d3581df9aeaefcdb5bac3d9587770f0600
 SHA512:
-  metadata.gz: b6c39d2a7f3a9ba30606717cc7f091aab23bf93844b68575ac690657295cfb980c4905758f37ec9f7f083b42548f60dd59031c61904ea4e5f3c5e162419c854a
-  data.tar.gz: 2f8f081f7c3528694fb1fecfac16e4bb8a3a61590248ef1b446f74d2b5df03bf049436cfbbed6f4958835327e2865fd4aab5d2111322cbc5a81d8b1b5e75279c
+  metadata.gz: b73dae035cf3b87e7f4e67a32c7f968edfd29bd2b692887175d9087151fac4e4ec13cff35b6c32659fd3511f770ddbd2c668a55d39b38fbffb1f4cbd4e705c28
+  data.tar.gz: af0abdca9964dbcf323908273817327ffc89fd4e4da37643ba55c230a6536a6ede26e3599c82b2ae4ae3176ba98c6f3dd3fa383f63f6c8f031390b73c68dcd39

data/CHANGELOG.md

@@ -1,3 +1,14 @@
+## Rails 7.2.1.1 (October 15, 2024) ##
+
+*   Avoid regex backtracking in `block_format` helper
+
+    [CVE-2024-47889]
+
+## Rails 7.2.1 (August 22, 2024) ##
+
+*   No changes.
+
+
 ## Rails 7.2.0 (August 09, 2024) ##
 
 *   Remove deprecated params via `:args` for `assert_enqueued_email_with`.

data/lib/action_mailer/gem_version.rb

@@ -9,8 +9,8 @@ module ActionMailer
   module VERSION
     MAJOR = 7
     MINOR = 2
-    TINY  = 0
-    PRE   = nil
+    TINY  = 1
+    PRE   = "1"
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
   end

data/lib/action_mailer/mail_helper.rb

@@ -25,10 +25,18 @@ module ActionMailer
       }.join("\n\n")
 
       # Make list points stand on their own line
-      formatted.gsub!(/[ ]*([*]+) ([^*]*)/) { "  #{$1} #{$2.strip}\n" }
-      formatted.gsub!(/[ ]*([#]+) ([^#]*)/) { "  #{$1} #{$2.strip}\n" }
+      output = +""
+      splits = formatted.split(/(\*+|\#+)/)
+      while line = splits.shift
+        if line.start_with?("*", "#") && splits[0].start_with?(" ")
+          output.chomp!(" ") while output.end_with?(" ")
+          output << "  #{line} #{splits.shift.strip}\n"
+        else
+          output << line
+        end
+      end
 
-      formatted
+      output
     end
 
     # Access the mailer instance.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: actionmailer
 version: !ruby/object:Gem::Version
-  version: 7.2.0
+  version: 7.2.1.1
 platform: ruby
 authors:
 - David Heinemeier Hansson
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-08-09 00:00:00.000000000 Z
+date: 2024-10-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,56 +16,56 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.2.0
+        version: 7.2.1.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.2.0
+        version: 7.2.1.1
 - !ruby/object:Gem::Dependency
   name: actionpack
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.2.0
+        version: 7.2.1.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.2.0
+        version: 7.2.1.1
 - !ruby/object:Gem::Dependency
   name: actionview
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.2.0
+        version: 7.2.1.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.2.0
+        version: 7.2.1.1
 - !ruby/object:Gem::Dependency
   name: activejob
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.2.0
+        version: 7.2.1.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.2.0
+        version: 7.2.1.1
 - !ruby/object:Gem::Dependency
   name: mail
   requirement: !ruby/object:Gem::Requirement
@@ -134,12 +134,12 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v7.2.0/actionmailer/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v7.2.0/
+  changelog_uri: https://github.com/rails/rails/blob/v7.2.1.1/actionmailer/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v7.2.1.1/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v7.2.0/actionmailer
+  source_code_uri: https://github.com/rails/rails/tree/v7.2.1.1/actionmailer
   rubygems_mfa_required: 'true'
-post_install_message:
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -155,8 +155,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements:
 - none
-rubygems_version: 3.5.11
-signing_key:
+rubygems_version: 3.5.16
+signing_key: 
 specification_version: 4
 summary: Email composition and delivery framework (part of Rails).
 test_files: []