actionpack 7.1.4.2 → 7.1.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9bd7816015412fae314bd4fa1fd0ae92392ff4113d2c1349f9d2583e69cb132a
-  data.tar.gz: 68add3afd1737983f98720b9e6339a4a323c945348e96a0bd1e03dbf7c89c906
+  metadata.gz: ef6ded6ec75402697cbeaf5e35774fc5883ec6dea9a31c9698b28949c0b9547f
+  data.tar.gz: d31034f579dbab96df8449bbe31b449aa6c6d94711ce0f394ed3933bd316546b
 SHA512:
-  metadata.gz: ccceb25da20cd27588cc573e6e93afd2fcf157dc2e3e5d0e5854da79402466f391fc54adea0e68c543fec506c71956d81e2c937fab7c950718d44f3712b69939
-  data.tar.gz: c3e2439e31b326c084501898663cf36518e3b03dfa66eed20ee8b74624433d7c9c224ef799cd257b27dc2125227f519d0ce089401711e14ccc5cb06e3f382563
+  metadata.gz: 563f1655070799cff368211fbe55ce13d4cd8a5984ca16d9c94df8fb6fec119c644d0a43a3fadf088cf2df019d4c6266a1e36ea4e3de1a82dbdf92f8e100d3c1
+  data.tar.gz: 170f1c5406ee4c8d740d50b63fd74d8c803b3aa4f8a16b69d73355949bb7a9d7835d4118d685050c3dd967cac6933403e1097575ab1d9e4dbfbdce292defe978

data/CHANGELOG.md

@@ -1,3 +1,8 @@
+## Rails 7.1.5 (October 30, 2024) ##
+
+*   No changes.
+
+
 ## Rails 7.1.4.2 (October 23, 2024) ##
 
 *   No changes.
@@ -9,10 +14,14 @@
 
     [CVE-2024-47887]
 
+    *John Hawthorn*
+
 *   Avoid regex backtracking in query parameter filtering
 
     [CVE-2024-41128]
 
+    *John Hawthorn*
+
 ## Rails 7.1.4 (August 22, 2024) ##
 
 *   Resolve deprecation warning in latest `selenium-webdriver`.

data/lib/action_controller/metal/http_authentication.rb

@@ -207,7 +207,7 @@ module ActionController
         end
       end
 
-      # Returns false on a valid response, true otherwise.
+      # Returns true on a valid response, false otherwise.
       def authenticate(request, realm, &password_procedure)
         request.authorization && validate_digest_response(request, realm, &password_procedure)
       end
@@ -425,7 +425,7 @@ module ActionController
       module ControllerMethods
         # Authenticate using an HTTP Bearer token, or otherwise render an HTTP
         # header requesting the client to send a Bearer token. For the authentication
-        # to be considered successful, +login_procedure+ should return a non-nil
+        # to be considered successful, +login_procedure+ must not return a false
         # value. Typically, the authenticated user is returned.
         #
         # See ActionController::HttpAuthentication::Token for example usage.

data/lib/action_dispatch/routing/inspector.rb

@@ -99,7 +99,7 @@ module ActionDispatch
             { controller: /#{filter[:controller].underscore.sub(/_?controller\z/, "")}/ }
           elsif filter[:grep]
             grep_pattern = Regexp.new(filter[:grep])
-            path = URI::DEFAULT_PARSER.escape(filter[:grep])
+            path = RFC2396_PARSER.escape(filter[:grep])
             normalized_path = ("/" + path).squeeze("/")
 
             {

data/lib/action_dispatch/routing/mapper.rb

@@ -2026,7 +2026,7 @@ module ActionDispatch
               name_for_action(options.delete(:as), action)
             end
 
-            path = Mapping.normalize_path URI::DEFAULT_PARSER.escape(path), formatted
+            path = Mapping.normalize_path RFC2396_PARSER.escape(path), formatted
             ast = Journey::Parser.parse path
 
             mapping = Mapping.build(@scope, @set, ast, controller, default_action, to, via, formatted, options_constraints, anchor, options)

data/lib/action_dispatch/routing/route_set.rb

@@ -903,7 +903,7 @@ module ActionDispatch
           params.each do |key, value|
             if value.is_a?(String)
               value = value.dup.force_encoding(Encoding::BINARY)
-              params[key] = URI::DEFAULT_PARSER.unescape(value)
+              params[key] = RFC2396_PARSER.unescape(value)
             end
           end
           req.path_parameters = params

data/lib/action_dispatch.rb

@@ -29,6 +29,7 @@ require "active_support/core_ext/module/attribute_accessors"
 
 require "action_pack"
 require "rack"
+require "uri"
 require "action_dispatch/deprecator"
 
 module Rack # :nodoc:
@@ -53,6 +54,9 @@ module ActionDispatch
     message: "ActionDispatch::IllegalStateError is deprecated without replacement.",
     deprecator: ActionDispatch.deprecator
 
+  RFC2396_PARSER = defined?(URI::RFC2396_PARSER) ? URI::RFC2396_PARSER : URI::RFC2396_Parser.new
+  private_constant :RFC2396_PARSER
+
   class MissingController < NameError
   end
 

data/lib/action_pack/gem_version.rb

@@ -9,8 +9,8 @@ module ActionPack
   module VERSION
     MAJOR = 7
     MINOR = 1
-    TINY  = 4
-    PRE   = "2"
+    TINY  = 5
+    PRE   = nil
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: actionpack
 version: !ruby/object:Gem::Version
-  version: 7.1.4.2
+  version: 7.1.5
 platform: ruby
 authors:
 - David Heinemeier Hansson
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-10-23 00:00:00.000000000 Z
+date: 2024-10-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.4.2
+        version: 7.1.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.4.2
+        version: 7.1.5
 - !ruby/object:Gem::Dependency
   name: nokogiri
   requirement: !ruby/object:Gem::Requirement
@@ -128,28 +128,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.4.2
+        version: 7.1.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.4.2
+        version: 7.1.5
 - !ruby/object:Gem::Dependency
   name: activemodel
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.4.2
+        version: 7.1.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.4.2
+        version: 7.1.5
 description: Web apps on Rails. Simple, battle-tested conventions for building and
   testing MVC web applications. Works with any Rack-compatible server.
 email: david@loudthinking.com
@@ -346,10 +346,10 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v7.1.4.2/actionpack/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v7.1.4.2/
+  changelog_uri: https://github.com/rails/rails/blob/v7.1.5/actionpack/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v7.1.5/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v7.1.4.2/actionpack
+  source_code_uri: https://github.com/rails/rails/tree/v7.1.5/actionpack
   rubygems_mfa_required: 'true'
 post_install_message: 
 rdoc_options: []