activesupport 8.0.5 → 8.0.5.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e4952a5142700edad7b5bf62c0753a93f202873d96a6ad7dd5b231348ec9d917
-  data.tar.gz: 7f832339286eeeec1fda1097ee5ad50b6efc3ae44bb1aa483524907dcb3aebd7
+  metadata.gz: 22241404cc02e580fd1591eae63cc0ba8bbab2603e9d48e6baa6cefa4bbd6f1d
+  data.tar.gz: f62c817eb1ab3a3e9a3fa37d6cefabe0d52f8ac7da6de2bf9dcd0812d230eede
 SHA512:
-  metadata.gz: 5b4825cf61610686c03d69e648665d4d886e1c755a0f3bc4db14d1bb81331e0c11a79d3c96295185972cb0852e894d66bdc03d2c6787e8c6f3629f4d18e8ce43
-  data.tar.gz: 5b7ee77d3c6a4f36a7746d2ce9a2d49d2cc18c9a4e17931626d3dc87c09edb12236180a6ef5d1c7dddcbf7cdafed9d97edb9b9146ed0d56231b286573f41795b
+  metadata.gz: ef9a83ed926881ac15c0f83c7786a439e79d21c3c3cbc0e72d9a2f39be2995f28bf4c62b78b1deaa079face57ed15b10200d10384f1f3dcef649b153acbf3dff
+  data.tar.gz: ec380533afadf6d311e522744467722aefc8575776fd1b9b8a686f645f6fcb2b4468826d5c87998e069a2ba2b7a7445adeefac43fae6a06fa181b00b5b6999bc

data/CHANGELOG.md

@@ -1,3 +1,22 @@
+## Rails 8.0.5.2 (November 03, 2026) ##
+
+*   `ActiveSupport::Inflector#safe_constantize` matches the constant name in a
+    `LoadError` message as a literal string instead of building a `Regexp`
+    from it.
+
+    The name's segments were interpolated unescaped into the pattern, so input
+    that reaches `safe_constantize`, such as the channel identifier in an Action
+    Cable subscribe command, chose the source passed to the regexp compiler.
+
+    [GHSA-8474-xrp6-wh69]
+
+    *Jeremy Daer*
+
+## Rails 8.0.5.1 (July 29, 2026) ##
+
+*   No changes.
+
+
 ## Rails 8.0.5 (March 24, 2026) ##
 
 *   Fix inflections to better handle overlapping acronyms.

data/lib/active_support/gem_version.rb

@@ -10,7 +10,7 @@ module ActiveSupport
     MAJOR = 8
     MINOR = 0
     TINY  = 5
-    PRE   = nil
+    PRE   = "2"
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
   end

data/lib/active_support/inflector/methods.rb

@@ -319,7 +319,8 @@ module ActiveSupport
         e.name.to_s == camel_cased_word.to_s)
     rescue LoadError => e
       message = e.respond_to?(:original_message) ? e.original_message : e.message
-      raise unless /Unable to autoload constant #{const_regexp(camel_cased_word)}/.match?(message)
+      constant_name = camel_cased_word.split("::").find { |part| !part.empty? } || camel_cased_word
+      raise unless message.include?("Unable to autoload constant #{constant_name}")
     end
 
     # Returns the suffix that should be added to a number to denote the position
@@ -349,23 +350,6 @@ module ActiveSupport
     end
 
     private
-      # Mounts a regular expression, returned as a string to ease interpolation,
-      # that will match part by part the given constant.
-      #
-      #   const_regexp("Foo::Bar::Baz") # => "Foo(::Bar(::Baz)?)?"
-      #   const_regexp("::")            # => "::"
-      def const_regexp(camel_cased_word)
-        parts = camel_cased_word.split("::")
-
-        return Regexp.escape(camel_cased_word) if parts.empty?
-
-        last = parts.pop
-
-        parts.reverse!.inject(last) do |acc, part|
-          part.empty? ? acc : "#{part}(::#{acc})?"
-        end
-      end
-
       # Applies inflection rules for +singularize+ and +pluralize+.
       #
       # If passed an optional +locale+ parameter, the uncountables will be

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: activesupport
 version: !ruby/object:Gem::Version
-  version: 8.0.5
+  version: 8.0.5.2
 platform: ruby
 authors:
 - David Heinemeier Hansson
@@ -494,10 +494,10 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v8.0.5/activesupport/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v8.0.5/
+  changelog_uri: https://github.com/rails/rails/blob/v8.0.5.2/activesupport/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v8.0.5.2/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v8.0.5/activesupport
+  source_code_uri: https://github.com/rails/rails/tree/v8.0.5.2/activesupport
   rubygems_mfa_required: 'true'
 rdoc_options:
 - "--encoding"
@@ -515,7 +515,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.6
+rubygems_version: 4.0.20
 specification_version: 4
 summary: A toolkit of support libraries and Ruby core extensions extracted from the
   Rails framework.