activesupport 6.1.7 → 6.1.7.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 86fc82a4ac7a8ff4945e8433ea6873e1d9325b470ad7ac8d7310c73370a4f01d
-  data.tar.gz: 62f8370923132917f2d665eb09bf1975db08a335d951013cbfaa15077b778d6e
+  metadata.gz: aee01b05130a46c1b8fd9d80ae810fa00042710c0340e35db9189e780b393bb3
+  data.tar.gz: 19bfb37a5d85cd9be32abd812aefad3a99cc683a11e2ee69f838ad5ddddf4577
 SHA512:
-  metadata.gz: ac345691c68306eb3fd83090e79e2794de25d1cf8a6caf34199d4bced1a144a11b670e1a1471dbfe6079c6a4acab76d36d9f2aefc05ad5539f180048a45029ad
-  data.tar.gz: 0ebb0c6a75f4c1664e673927a50dc3506915f17667bc6768535365b80f1d775f13a07b74150725eb6e24a117deae15566a4d40471bfea2678b11c213503429f1
+  metadata.gz: 32de2a791763ef9e8b20ccf981561873c42a4a936b490eea0b3ab91aade293adc45b53eb876595dfbffa71de91960dd9106395f704457604300292553aa08d73
+  data.tar.gz: 1229fa3c47e421ae1d7ea4470d2e9c12b90fb3225de20f0e96bb3fba0c64cf335e496a538c6246db7841ca0cd4a5b571e52636cecdf7c7162af9ce3de9cd3551

data/CHANGELOG.md

@@ -1,3 +1,10 @@
+## Rails 6.1.7.1 (January 17, 2023) ##
+
+*   Avoid regex backtracking in Inflector.underscore
+
+    [CVE-2023-22796]
+
+
 ## Rails 6.1.7 (September 09, 2022) ##
 
 *   No changes.

data/lib/active_support/gem_version.rb

@@ -10,7 +10,7 @@ module ActiveSupport
     MAJOR = 6
     MINOR = 1
     TINY  = 7
-    PRE   = nil
+    PRE   = "1"
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
   end

data/lib/active_support/inflector/methods.rb

@@ -93,8 +93,7 @@ module ActiveSupport
       return camel_cased_word unless /[A-Z-]|::/.match?(camel_cased_word)
       word = camel_cased_word.to_s.gsub("::", "/")
       word.gsub!(inflections.acronyms_underscore_regex) { "#{$1 && '_' }#{$2.downcase}" }
-      word.gsub!(/([A-Z\d]+)([A-Z][a-z])/, '\1_\2')
-      word.gsub!(/([a-z\d])([A-Z])/, '\1_\2')
+      word.gsub!(/([A-Z])(?=[A-Z][a-z])|([a-z\d])(?=[A-Z])/) { ($1 || $2) << "_" }
       word.tr!("-", "_")
       word.downcase!
       word

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: activesupport
 version: !ruby/object:Gem::Version
-  version: 6.1.7
+  version: 6.1.7.1
 platform: ruby
 authors:
 - David Heinemeier Hansson
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-09-09 00:00:00.000000000 Z
+date: 2023-01-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: i18n
@@ -357,10 +357,10 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v6.1.7/activesupport/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v6.1.7/
+  changelog_uri: https://github.com/rails/rails/blob/v6.1.7.1/activesupport/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v6.1.7.1/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v6.1.7/activesupport
+  source_code_uri: https://github.com/rails/rails/tree/v6.1.7.1/activesupport
   rubygems_mfa_required: 'true'
 post_install_message:
 rdoc_options:
@@ -379,7 +379,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.3
+rubygems_version: 3.4.3
 signing_key:
 specification_version: 4
 summary: A toolkit of support libraries and Ruby core extensions extracted from the