activesupport 6.1.7.2 → 6.1.7.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 28ca70c38f67026955b1161ed6b18e7baa7764f972a65fcfb98045d92ae36b21
-  data.tar.gz: a3338be243c6e5ba5c90cafd07b33d964ab0a07b1501555c21385827bedd1f2c
+  metadata.gz: 90c1e1ac6c0b5064de76fbc6bdf516d85f2b7339a082841ed3d96d314acadd95
+  data.tar.gz: 505167362a4d007a7e88a0b3f0cead94944d33a56a5ce5d77791ecf619a0b28c
 SHA512:
-  metadata.gz: f3ecf8f53514da55a4de9fdbd5acca109477ad01fdc8d19de3b90a7488a0799d22edba09f6aaaf70e85e8900235d1545d41c3adeb183186271e2d9195f5056e7
-  data.tar.gz: ad99b075680358ff999d6a7483b17960248934075dd8b11da56b7f35e9a6f94a013f2cdf60c380e952b5a6c440008065dae8b10cd28180e517340d43667c7964
+  metadata.gz: a360ad74604b0a82b416e90883dbdd0f2f90de338b025cab43a0e43428d1421c90d4fe8631b9a6cfa8c55fc746036ec8432baeb19883099ff5d992d7cd4c54a7
+  data.tar.gz: c6527296af9e7b0fcc56ee3eee03ff02b761959d4fe9c11774ecb1818d7ae642820a582bd346970ec1b0837cacff1e9e429179934a7d3a54f99f6a5d4b66c098

data/CHANGELOG.md

@@ -1,3 +1,32 @@
+## Rails 6.1.7.7 (February 21, 2024) ##
+
+*   No changes.
+
+
+## Rails 6.1.7.6 (August 22, 2023) ##
+
+*   No changes.
+
+
+## Rails 6.1.7.5 (August 22, 2023) ##
+
+*   Use a temporary file for storing unencrypted files while editing
+
+    [CVE-2023-38037]
+
+
+## Rails 6.1.7.4 (June 26, 2023) ##
+
+*   No changes.
+
+
+## Rails 6.1.7.3 (March 13, 2023) ##
+
+*   Implement SafeBuffer#bytesplice
+
+    [CVE-2023-28120]
+
+
 ## Rails 6.1.7.2 (January 24, 2023) ##
 
 *   No changes.

data/lib/active_support/core_ext/string/output_safety.rb

@@ -216,6 +216,10 @@ module ActiveSupport #:nodoc:
     end
     alias << concat
 
+    def bytesplice(*args, value)
+      super(*args, implicit_html_escape_interpolated_argument(value))
+    end
+
     def insert(index, value)
       super(index, html_escape_interpolated_argument(value))
     end

data/lib/active_support/encrypted_file.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 require "pathname"
-require "tmpdir"
+require "tempfile"
 require "active_support/message_encryptor"
 
 module ActiveSupport
@@ -69,17 +69,16 @@ module ActiveSupport
 
     private
       def writing(contents)
-        tmp_file = "#{Process.pid}.#{content_path.basename.to_s.chomp('.enc')}"
-        tmp_path = Pathname.new File.join(Dir.tmpdir, tmp_file)
-        tmp_path.binwrite contents
+        Tempfile.create(["", "-" + content_path.basename.to_s.chomp(".enc")]) do |tmp_file|
+          tmp_path = Pathname.new(tmp_file)
+          tmp_path.binwrite contents
 
-        yield tmp_path
+          yield tmp_path
 
-        updated_contents = tmp_path.binread
+          updated_contents = tmp_path.binread
 
-        write(updated_contents) if updated_contents != contents
-      ensure
-        FileUtils.rm(tmp_path) if tmp_path&.exist?
+          write(updated_contents) if updated_contents != contents
+        end
       end
 
 

data/lib/active_support/gem_version.rb

@@ -10,7 +10,7 @@ module ActiveSupport
     MAJOR = 6
     MINOR = 1
     TINY  = 7
-    PRE   = "2"
+    PRE   = "7"
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: activesupport
 version: !ruby/object:Gem::Version
-  version: 6.1.7.2
+  version: 6.1.7.7
 platform: ruby
 authors:
 - David Heinemeier Hansson
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-01-25 00:00:00.000000000 Z
+date: 2024-02-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: i18n
@@ -357,10 +357,10 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v6.1.7.2/activesupport/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v6.1.7.2/
+  changelog_uri: https://github.com/rails/rails/blob/v6.1.7.7/activesupport/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v6.1.7.7/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v6.1.7.2/activesupport
+  source_code_uri: https://github.com/rails/rails/tree/v6.1.7.7/activesupport
   rubygems_mfa_required: 'true'
 post_install_message:
 rdoc_options:
@@ -379,7 +379,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.3
+rubygems_version: 3.2.22
 signing_key:
 specification_version: 4
 summary: A toolkit of support libraries and Ruby core extensions extracted from the