alogram_payrisk 0.3.2 → 0.3.4

data/vendor/bundle/ruby/3.3.0/gems/{io-console-0.8.2 → io-console-0.9.4}/lib/io/console/size.rb

@@ -1,9 +1,11 @@
 # frozen_string_literal: false
 # fallback to console window size
 def IO.default_console_size
+  lines = ENV["LINES"].to_i
+  columns = ENV["COLUMNS"].to_i
   [
-    ENV["LINES"].to_i.nonzero? || 25,
-    ENV["COLUMNS"].to_i.nonzero? || 80,
+    lines.positive? ? lines : 25,
+    columns.positive? ? columns : 80,
   ]
 end
 

data/vendor/bundle/ruby/3.3.0/gems/jaro_winkler-1.5.6/ext/jaro_winkler/Makefile

@@ -13,12 +13,12 @@ NULLCMD = :
 #### Start of system configuration section. ####
 
 srcdir = .
-topdir = /opt/hostedtoolcache/Ruby/3.3.11/x64/include/ruby-3.3.0
+topdir = /opt/hostedtoolcache/Ruby/3.3.12/x64/include/ruby-3.3.0
 hdrdir = $(topdir)
-arch_hdrdir = /opt/hostedtoolcache/Ruby/3.3.11/x64/include/ruby-3.3.0/x86_64-linux
+arch_hdrdir = /opt/hostedtoolcache/Ruby/3.3.12/x64/include/ruby-3.3.0/x86_64-linux
 PATH_SEPARATOR = :
 VPATH = $(srcdir):$(arch_hdrdir)/ruby:$(hdrdir)/ruby
-prefix = $(DESTDIR)/opt/hostedtoolcache/Ruby/3.3.11/x64
+prefix = $(DESTDIR)/opt/hostedtoolcache/Ruby/3.3.12/x64
 rubysitearchprefix = $(rubylibprefix)/$(sitearch)
 rubyarchprefix = $(rubylibprefix)/$(arch)
 rubylibprefix = $(libdir)/$(RUBY_BASE_NAME)

data/vendor/bundle/ruby/3.3.0/gems/{parser-3.3.11.1 → parser-3.3.12.0}/lib/parser/current.rb

@@ -111,7 +111,7 @@ module Parser
     CurrentRuby = Ruby32
 
   when /^3\.3\./
-    current_version = '3.3.11'
+    current_version = '3.3.12'
     if RUBY_VERSION != current_version
       warn_syntax_deviation 'parser/ruby33', current_version
     end

data/vendor/bundle/ruby/3.3.0/gems/{parser-3.3.11.1 → parser-3.3.12.0}/lib/parser/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Parser
-  VERSION = '3.3.11.1'
+  VERSION = '3.3.12.0'
 end

data/vendor/bundle/ruby/3.3.0/gems/{psych-5.4.0 → psych-5.5.0}/README.md

@@ -23,6 +23,7 @@ Psych.dump("foo")     # => "--- foo\n...\n"
 ## Dependencies
 
 * libyaml
+* libfyaml (optional, only for the experimental `--enable-libfyaml` backend)
 
 ## Installation
 
@@ -57,6 +58,58 @@ gem 'psych'
 
 JRuby ships with a pure Java implementation of Psych.
 
+## Experimental libfyaml backend
+
+Psych ships an experimental, opt-in backend built on
+[libfyaml](https://github.com/pantoniou/libfyaml), a fully YAML 1.2 compliant
+parser and emitter. It is compiled only when you explicitly pass
+`--enable-libfyaml` at build time. Without the flag the default libyaml
+backend is used and nothing changes.
+
+```bash
+# libfyaml and pkg-config must be installed first, for example:
+#   apt-get install libfyaml-dev   # Debian/Ubuntu
+#   brew install libfyaml          # macOS
+gem install psych -- --enable-libfyaml
+```
+
+This backend is not supported on Windows.
+
+Because libfyaml follows YAML 1.2, the YAML 1.1 booleans `yes`, `no`, `on`, and
+`off` load as plain strings instead of `true`/`false` (only `true`/`false` are
+booleans). This resolves the so-called "Norway problem", where the country
+code `no` was parsed as `false`:
+
+```ruby
+Psych.load("country: no") # => {"country" => "no"}
+```
+
+You can check which backend is active:
+
+```ruby
+Psych::BACKEND         # => "libfyaml" (or "libyaml")
+Psych.libfyaml_version # => "0.9.6"
+```
+
+The backend is experimental. Its output is valid YAML but is formatted
+differently from libyaml in places, and a few emitter edge cases are not yet
+matched. The default libyaml backend remains the supported choice.
+
+Two more differences are worth knowing. Scalars emitted with the default
+(`ANY`) style may be quoted or laid out differently from libyaml, so
+byte-for-byte output is not guaranteed to match. On a parse error,
+`Psych::SyntaxError#problem` carries libfyaml's full diagnostic message and
+`Psych::SyntaxError#context` is always `nil`, whereas libyaml splits the
+description across `#problem` and `#context`.
+
+This backend targets YAML 1.2 compliance, not speed. In a rough
+single-machine benchmark that loads and dumps in-memory documents, parsing
+was roughly on par with libyaml (sometimes faster on string-heavy input),
+while emitting was about 1.7x to 1.9x slower. Your numbers will vary, but the
+shape holds: libfyaml is competitive at parsing and slower at emitting. Use
+this backend when you need YAML 1.2 semantics. If throughput is your priority,
+keep using the default libyaml backend.
+
 ## Release
 
 We used the trusted publisher and [rubygems/release-gem](https://github.com/rubygems/release-gem) workflow.

data/vendor/bundle/ruby/3.3.0/gems/{psych-5.4.0 → psych-5.5.0}/ext/psych/Makefile

@@ -13,12 +13,12 @@ NULLCMD = :
 #### Start of system configuration section. ####
 
 srcdir = .
-topdir = /opt/hostedtoolcache/Ruby/3.3.11/x64/include/ruby-3.3.0
+topdir = /opt/hostedtoolcache/Ruby/3.3.12/x64/include/ruby-3.3.0
 hdrdir = $(topdir)
-arch_hdrdir = /opt/hostedtoolcache/Ruby/3.3.11/x64/include/ruby-3.3.0/x86_64-linux
+arch_hdrdir = /opt/hostedtoolcache/Ruby/3.3.12/x64/include/ruby-3.3.0/x86_64-linux
 PATH_SEPARATOR = :
 VPATH = $(srcdir):$(arch_hdrdir)/ruby:$(hdrdir)/ruby
-prefix = $(DESTDIR)/opt/hostedtoolcache/Ruby/3.3.11/x64
+prefix = $(DESTDIR)/opt/hostedtoolcache/Ruby/3.3.12/x64
 rubysitearchprefix = $(rubylibprefix)/$(sitearch)
 rubyarchprefix = $(rubylibprefix)/$(arch)
 rubylibprefix = $(libdir)/$(RUBY_BASE_NAME)

data/vendor/bundle/ruby/3.3.0/gems/{psych-5.4.0 → psych-5.5.0}/ext/psych/extconf.rb

@@ -2,6 +2,28 @@
 # frozen_string_literal: true
 require 'mkmf'
 
+# Experimental, opt-in libfyaml backend.  Only used when psych is built with
+# --enable-libfyaml.  Without the flag nothing below changes and the default
+# libyaml backend is built exactly as before.
+if enable_config("libfyaml", false)
+  if $mswin or $mingw or $cygwin
+    abort "The libfyaml backend (--enable-libfyaml) is not supported on Windows"
+  end
+  unless pkg_config('libfyaml')
+    abort "libfyaml was requested with --enable-libfyaml but was not found via pkg-config"
+  end
+  # libfyaml 0.8 and earlier crash psych's emitter, so require a known-good
+  # version rather than building something that segfaults at runtime.
+  pkgconfig = ENV["PKG_CONFIG"] || "pkg-config"
+  unless system(pkgconfig, "--atleast-version=0.9", "libfyaml")
+    abort "The libfyaml backend requires libfyaml 0.9 or newer"
+  end
+  $defs << "-DPSYCH_USE_LIBFYAML"
+
+  create_makefile 'psych'
+  return
+end
+
 if $mswin or $mingw or $cygwin
   $CPPFLAGS << " -DYAML_DECLARE_STATIC"
 end

data/vendor/bundle/ruby/3.3.0/gems/psych-5.5.0/ext/psych/psych.c

@@ -0,0 +1,68 @@
+#include <psych.h>
+
+/* call-seq: Psych.libyaml_version
+ *
+ * Returns the version of the underlying YAML library as a three-element
+ * array. This is libyaml by default. On the experimental libfyaml backend,
+ * where libyaml is not linked, it reports the libfyaml version instead.
+ */
+static VALUE libyaml_version(VALUE module)
+{
+    int major, minor, patch;
+    VALUE list[3];
+
+#ifdef PSYCH_USE_LIBFYAML
+    /* Experimental libfyaml backend: there is no libyaml linked in.  Report
+     * the libfyaml version so callers still receive a 3-element version. */
+    const struct fy_version *v = fy_version_default();
+    major = v ? v->major : 0;
+    minor = v ? v->minor : 0;
+    patch = 0;
+#else
+    yaml_get_version(&major, &minor, &patch);
+#endif
+
+    list[0] = INT2NUM(major);
+    list[1] = INT2NUM(minor);
+    list[2] = INT2NUM(patch);
+
+    return rb_ary_new4((long)3, list);
+}
+
+#ifdef PSYCH_USE_LIBFYAML
+/* call-seq: Psych.libfyaml_version
+ *
+ * Returns the libfyaml version string. This method is only defined when
+ * psych was built with the experimental libfyaml backend
+ * (+--enable-libfyaml+).
+ */
+static VALUE libfyaml_version(VALUE module)
+{
+    const char *v = fy_library_version();
+    return v ? rb_usascii_str_new2(v) : Qnil;
+}
+#endif
+
+VALUE mPsych;
+
+void Init_psych(void)
+{
+    #ifdef HAVE_RB_EXT_RACTOR_SAFE
+        RB_EXT_RACTOR_SAFE(true);
+    #endif
+    mPsych = rb_define_module("Psych");
+
+    rb_define_singleton_method(mPsych, "libyaml_version", libyaml_version, 0);
+
+#ifdef PSYCH_USE_LIBFYAML
+    rb_define_singleton_method(mPsych, "libfyaml_version", libfyaml_version, 0);
+    rb_define_const(mPsych, "BACKEND", rb_usascii_str_new2("libfyaml"));
+#else
+    rb_define_const(mPsych, "BACKEND", rb_usascii_str_new2("libyaml"));
+#endif
+
+    Init_psych_parser();
+    Init_psych_emitter();
+    Init_psych_to_ruby();
+    Init_psych_yaml_tree();
+}

data/vendor/bundle/ruby/3.3.0/gems/{psych-5.4.0 → psych-5.5.0}/ext/psych/psych.h

@@ -4,7 +4,11 @@
 #include <ruby.h>
 #include <ruby/encoding.h>
 
+#ifdef PSYCH_USE_LIBFYAML
+#include <libfyaml.h>
+#else
 #include <yaml.h>
+#endif
 
 #include <psych_parser.h>
 #include <psych_emitter.h>

data/vendor/bundle/ruby/3.3.0/gems/{psych-5.4.0 → psych-5.5.0}/ext/psych/psych_emitter.c

@@ -1,5 +1,7 @@
 #include <psych.h>
 
+#ifndef PSYCH_USE_LIBFYAML
+
 #if !defined(RARRAY_CONST_PTR)
 #define RARRAY_CONST_PTR(s) (const VALUE *)RARRAY_PTR(s)
 #endif
@@ -587,3 +589,5 @@ void Init_psych_emitter(void)
     id_indentation = rb_intern("indentation");
     id_canonical   = rb_intern("canonical");
 }
+
+#endif /* PSYCH_USE_LIBFYAML */

data/vendor/bundle/ruby/3.3.0/gems/{psych-5.4.0 → psych-5.5.0}/ext/psych/psych_parser.c

@@ -1,9 +1,10 @@
 #include <psych.h>
 
+#ifndef PSYCH_USE_LIBFYAML
+
 VALUE cPsychParser;
 
 static ID id_read;
-static ID id_path;
 static ID id_empty;
 static ID id_start_stream;
 static ID id_end_stream;
@@ -51,19 +52,28 @@ static int io_reader(void * data, unsigned char *buf, size_t size, size_t *read)
     return 1;
 }
 
+/* The parser calls back into Ruby for every event, so a handler can call
+ * Psych::Parser#parse again on the same object.  parse() reinitialises the
+ * parser it is handed, which would pull the input out from under the loop
+ * still driving it, so keep a flag to reject a reentrant call. */
+typedef struct {
+    yaml_parser_t yaml_parser;
+    int parsing;
+} psych_parser_t;
+
 static void dealloc(void * ptr)
 {
-    yaml_parser_t * parser;
+    psych_parser_t * parser;
 
-    parser = (yaml_parser_t *)ptr;
-    yaml_parser_delete(parser);
+    parser = (psych_parser_t *)ptr;
+    yaml_parser_delete(&parser->yaml_parser);
     xfree(parser);
 }
 
 #if 0
 static size_t memsize(const void *ptr)
 {
-    const yaml_parser_t *parser = ptr;
+    const psych_parser_t *parser = ptr;
     /* TODO: calculate parser's size */
     return 0;
 }
@@ -80,10 +90,10 @@ static const rb_data_type_t psych_parser_type = {
 
 static VALUE allocate(VALUE klass)
 {
-    yaml_parser_t * parser;
-    VALUE obj = TypedData_Make_Struct(klass, yaml_parser_t, &psych_parser_type, parser);
+    psych_parser_t * parser;
+    VALUE obj = TypedData_Make_Struct(klass, psych_parser_t, &psych_parser_type, parser);
 
-    yaml_parser_initialize(parser);
+    yaml_parser_initialize(&parser->yaml_parser);
 
     return obj;
 }
@@ -256,9 +266,22 @@ static VALUE protected_event_location(VALUE pointer)
     return rb_funcall3(args[0], id_event_location, 4, args + 1);
 }
 
-static VALUE parse(VALUE self, VALUE handler, VALUE yaml, VALUE path)
+struct parse_args {
+    psych_parser_t * psych_parser;
+    VALUE self;
+    VALUE handler;
+    VALUE yaml;
+    VALUE path;
+};
+
+static VALUE parse_body(VALUE ptr)
 {
-    yaml_parser_t * parser;
+    struct parse_args * pargs = (struct parse_args *)ptr;
+    yaml_parser_t * parser = &pargs->psych_parser->yaml_parser;
+    VALUE self = pargs->self;
+    VALUE handler = pargs->handler;
+    VALUE yaml = pargs->yaml;
+    VALUE path = pargs->path;
     yaml_event_t event;
     int done = 0;
     int state = 0;
@@ -266,8 +289,6 @@ static VALUE parse(VALUE self, VALUE handler, VALUE yaml, VALUE path)
     int encoding = rb_utf8_encindex();
     rb_encoding * internal_enc = rb_default_internal_encoding();
 
-    TypedData_Get_Struct(self, yaml_parser_t, &psych_parser_type, parser);
-
     yaml_parser_delete(parser);
     yaml_parser_initialize(parser);
 
@@ -311,6 +332,10 @@ static VALUE parse(VALUE self, VALUE handler, VALUE yaml, VALUE path)
         event_args[3] = end_line;
         event_args[4] = end_column;
         rb_protect(protected_event_location, (VALUE)event_args, &state);
+        if (state) {
+            yaml_event_delete(&event);
+            rb_jump_tag(state);
+        }
 
         switch(event.type) {
             case YAML_STREAM_START_EVENT:
@@ -495,7 +520,11 @@ static VALUE parse(VALUE self, VALUE handler, VALUE yaml, VALUE path)
             rb_protect(protected_end_mapping, handler, &state);
             break;
           case YAML_NO_EVENT:
+            /* Once libyaml has produced the stream end, every later call
+             * succeeds with a zeroed event and YAML_STREAM_END_EVENT can no
+             * longer be reached.  Stop rather than loop forever. */
             rb_protect(protected_empty, handler, &state);
+            done = 1;
             break;
           case YAML_STREAM_END_EVENT:
             rb_protect(protected_end_stream, handler, &state);
@@ -509,6 +538,37 @@ static VALUE parse(VALUE self, VALUE handler, VALUE yaml, VALUE path)
     return self;
 }
 
+static VALUE parse_ensure(VALUE ptr)
+{
+    psych_parser_t * parser = (psych_parser_t *)ptr;
+
+    parser->parsing = 0;
+
+    return Qnil;
+}
+
+static VALUE parse(VALUE self, VALUE handler, VALUE yaml, VALUE path)
+{
+    psych_parser_t * parser;
+    struct parse_args pargs;
+
+    TypedData_Get_Struct(self, psych_parser_t, &psych_parser_type, parser);
+
+    if (parser->parsing) {
+        rb_raise(rb_const_get(mPsych, rb_intern("Exception")),
+                "parser is already parsing, it cannot be reused from a handler callback");
+    }
+    parser->parsing = 1;
+
+    pargs.psych_parser = parser;
+    pargs.self         = self;
+    pargs.handler      = handler;
+    pargs.yaml         = yaml;
+    pargs.path         = path;
+
+    return rb_ensure(parse_body, (VALUE)&pargs, parse_ensure, (VALUE)parser);
+}
+
 /*
  * call-seq:
  *    parser.mark # => #<Psych::Parser::Mark>
@@ -520,13 +580,13 @@ static VALUE mark(VALUE self)
 {
     VALUE mark_klass;
     VALUE args[3];
-    yaml_parser_t * parser;
+    psych_parser_t * parser;
 
-    TypedData_Get_Struct(self, yaml_parser_t, &psych_parser_type, parser);
+    TypedData_Get_Struct(self, psych_parser_t, &psych_parser_type, parser);
     mark_klass = rb_const_get_at(cPsychParser, rb_intern("Mark"));
-    args[0] = SIZET2NUM(parser->mark.index);
-    args[1] = SIZET2NUM(parser->mark.line);
-    args[2] = SIZET2NUM(parser->mark.column);
+    args[0] = SIZET2NUM(parser->yaml_parser.mark.index);
+    args[1] = SIZET2NUM(parser->yaml_parser.mark.line);
+    args[2] = SIZET2NUM(parser->yaml_parser.mark.column);
 
     return rb_class_new_instance(3, args, mark_klass);
 }
@@ -559,7 +619,6 @@ void Init_psych_parser(void)
     rb_define_method(cPsychParser, "mark", mark, 0);
 
     id_read            = rb_intern("read");
-    id_path            = rb_intern("path");
     id_empty           = rb_intern("empty");
     id_start_stream    = rb_intern("start_stream");
     id_end_stream      = rb_intern("end_stream");
@@ -573,3 +632,5 @@ void Init_psych_parser(void)
     id_end_mapping     = rb_intern("end_mapping");
     id_event_location  = rb_intern("event_location");
 }
+
+#endif /* PSYCH_USE_LIBFYAML */

data/vendor/bundle/ruby/3.3.0/gems/{psych-5.4.0 → psych-5.5.0}/lib/psych/class_loader.rb

@@ -9,6 +9,7 @@ module Psych
     DATA        = 'Data' unless RUBY_VERSION < "3.2"
     DATE        = 'Date'
     DATE_TIME   = 'DateTime'
+    ENCODING    = 'Encoding'
     EXCEPTION   = 'Exception'
     OBJECT      = 'Object'
     PSYCH_OMAP  = 'Psych::Omap'

data/vendor/bundle/ruby/3.3.0/gems/{psych-5.4.0 → psych-5.5.0}/lib/psych/parser.rb

@@ -59,7 +59,46 @@ module Psych
     # See Psych::Parser and Psych::Parser#handler
 
     def parse yaml, path = yaml.respond_to?(:path) ? yaml.path : "<unknown>"
-      _native_parse @handler, yaml, path
+      _native_parse @handler, strip_bom(yaml), path
+    end
+
+    private
+
+    BOM = {
+      Encoding::UTF_8 => "\u{FEFF}".freeze,
+      Encoding::UTF_16LE => "\u{FEFF}".encode(Encoding::UTF_16LE).freeze,
+      Encoding::UTF_16BE => "\u{FEFF}".encode(Encoding::UTF_16BE).freeze,
+      Encoding::UTF_32LE => "\u{FEFF}".encode(Encoding::UTF_32LE).freeze,
+      Encoding::UTF_32BE => "\u{FEFF}".encode(Encoding::UTF_32BE).freeze,
+    }.freeze
+    private_constant :BOM
+
+    # libyaml only skips a leading byte order mark when it detects the stream
+    # encoding by itself.  Psych passes the encoding explicitly whenever it is
+    # known, and on that path libyaml counts the BOM as a first-line character,
+    # which shifts the column of every token on the first line and silently
+    # terminates a block mapping at the second line [Bug #13615].
+    def strip_bom yaml
+      if String === yaml
+        bom = BOM[yaml.encoding]
+        # delete_prefix copies even when there is no prefix, so keep the guard.
+        return yaml.delete_prefix(bom) if bom && yaml.start_with?(bom)
+      elsif yaml.respond_to?(:read) && yaml.respond_to?(:external_encoding) &&
+            yaml.respond_to?(:pos) && yaml.respond_to?(:seek)
+        bom = BOM[yaml.external_encoding]
+        skip_io_bom yaml, bom.b if bom
+      end
+      yaml
+    end
+
+    def skip_io_bom io, bom
+      begin
+        pos = io.pos
+      rescue SystemCallError, IOError
+        return # Not seekable; nothing has been consumed yet.
+      end
+      head = io.read(bom.bytesize)
+      io.seek(pos, IO::SEEK_SET) if head && head.b != bom
     end
   end
 end

data/vendor/bundle/ruby/3.3.0/gems/{psych-5.4.0 → psych-5.5.0}/lib/psych/scalar_scanner.rb

@@ -24,6 +24,18 @@ module Psych
                          |[-+]?(?:0|[1-9](?:[0-9]|,[0-9]|_[0-9])*) (?# base 10)
                          |[-+]?0x[_,]*[0-9a-fA-F][0-9a-fA-F_,]*    (?# base 16))$/x
 
+    # YAML 1.1 treats yes/no/on/off as booleans in addition to true/false,
+    # while YAML 1.2's core schema only recognizes true/false.  The default
+    # libyaml backend keeps the 1.1 set for backward compatibility; the
+    # experimental libfyaml backend follows 1.2.
+    if defined?(Psych::BACKEND) && Psych::BACKEND == 'libfyaml'
+      BOOLEAN_TRUE  = /^true$/i
+      BOOLEAN_FALSE = /^false$/i
+    else
+      BOOLEAN_TRUE  = /^(yes|true|on)$/i
+      BOOLEAN_FALSE = /^(no|false|off)$/i
+    end
+
     attr_reader :class_loader
 
     # Create a new scanner
@@ -48,9 +60,9 @@ module Psych
           string
         elsif string == '~' || string.match?(/^null$/i)
           nil
-        elsif string.match?(/^(yes|true|on)$/i)
+        elsif string.match?(BOOLEAN_TRUE)
           true
-        elsif string.match?(/^(no|false|off)$/i)
+        elsif string.match?(BOOLEAN_FALSE)
           false
         else
           string
@@ -115,7 +127,7 @@ module Psych
     def parse_time string
       klass = class_loader.load 'Time'
 
-      date, time = *(string.split(/[ tT]/, 2))
+      date, time = *(string.split(/[Tt]|\s+/, 2))
       (yy, m, dd) = date.match(/^(-?\d{4})-(\d{1,2})-(\d{1,2})/).captures.map { |x| x.to_i }
       md = time.match(/(\d+:\d+:\d+)(?:\.(\d*))?\s*(Z|[-+]\d+(:\d\d)?)?/)
 

data/vendor/bundle/ruby/3.3.0/gems/{psych-5.4.0 → psych-5.5.0}/lib/psych/versions.rb

@@ -2,7 +2,7 @@
 
 module Psych
   # The version of Psych you are using
-  VERSION = '5.4.0'
+  VERSION = '5.5.0'
 
   if RUBY_ENGINE == 'jruby'
     DEFAULT_SNAKEYAML_VERSION = '2.10'.freeze

data/vendor/bundle/ruby/3.3.0/gems/{psych-5.4.0 → psych-5.5.0}/lib/psych/visitors/to_ruby.rb

@@ -72,7 +72,7 @@ module Psych
         when '!binary', 'tag:yaml.org,2002:binary'
           o.value.unpack('m').first
         when /^!(?:str|ruby\/string)(?::(.*))?$/, 'tag:yaml.org,2002:str'
-          klass = resolve_class($1)
+          klass = resolve_subclass($1, String)
           if klass
             klass.allocate.replace o.value
           else
@@ -87,6 +87,7 @@ module Psych
           DateTime.civil(*t.to_a[0, 6].reverse, Rational(t.utc_offset, 86400)) +
             (t.subsec/86400)
         when '!ruby/encoding'
+          class_loader.encoding
           ::Encoding.find o.value
         when "!ruby/object:Complex"
           class_loader.complex
@@ -156,7 +157,7 @@ module Psych
           }
           map
         when /^!(?:seq|ruby\/array):(.*)$/
-          klass = resolve_class($1)
+          klass = resolve_subclass($1, Array)
           list  = register(o, klass.allocate)
           o.children.each { |c| list.push accept c }
           list
@@ -246,7 +247,7 @@ module Psych
           end
 
         when /^!(?:str|ruby\/string)(?::(.*))?$/, 'tag:yaml.org,2002:str'
-          klass   = resolve_class($1)
+          klass   = resolve_subclass($1, String)
           members = {}
           string  = nil
 
@@ -267,7 +268,7 @@ module Psych
           end
           init_with(string, members.map { |k,v| [k.to_s.sub(/^@/, ''),v] }, o)
         when /^!ruby\/array:(.*)$/
-          klass = resolve_class($1)
+          klass = resolve_subclass($1, Array)
           list  = register(o, klass.allocate)
 
           members = Hash[o.children.map { |c| accept c }.each_slice(2).to_a]
@@ -301,7 +302,7 @@ module Psych
           set
 
         when /^!ruby\/hash-with-ivars(?::(.*))?$/
-          hash = $1 ? resolve_class($1).allocate : {}
+          hash = $1 ? resolve_subclass($1, Hash).allocate : {}
           register o, hash
           o.children.each_slice(2) do |key, value|
             case key.value
@@ -316,7 +317,7 @@ module Psych
           hash
 
         when /^!map:(.*)$/, /^!ruby\/hash:(.*)$/
-          revive_hash register(o, resolve_class($1).allocate), o
+          revive_hash register(o, resolve_subclass($1, Hash).allocate), o
 
         when '!omap', 'tag:yaml.org,2002:omap'
           map = register(o, class_loader.psych_omap.new)
@@ -444,9 +445,6 @@ module Psych
         end
       end
 
-      def merge_key hash, key, val
-      end
-
       def revive klass, node
         s = register(node, klass.allocate)
         init_with(s, revive_hash({}, node, true), node)
@@ -468,6 +466,19 @@ module Psych
       def resolve_class klassname
         class_loader.load klassname
       end
+
+      # Resolve +klassname+ and ensure it is +parent+ or one of its
+      # subclasses. Tags such as !ruby/hash-with-ivars are only ever emitted
+      # for subclasses of a specific core class; without this check a crafted
+      # document could name an unrelated (but permitted) class and have its
+      # state populated directly, bypassing the class's own init_with.
+      def resolve_subclass klassname, parent
+        klass = resolve_class(klassname)
+        if klass && !(klass <= parent)
+          raise ArgumentError, "Invalid tag: expected a subclass of #{parent}, got #{klass}"
+        end
+        klass
+      end
     end
 
     class NoAliasRuby < ToRuby

data/vendor/bundle/ruby/3.3.0/gems/{psych-5.4.0 → psych-5.5.0}/lib/psych/visitors/yaml_tree.rb

@@ -496,9 +496,6 @@ module Psych
         end
       end
 
-      def dump_list o
-      end
-
       def dump_exception o, msg
         tag = ['!ruby/exception', o.class.name].join ':'
 

data/vendor/bundle/ruby/3.3.0/gems/racc-1.8.1/ext/racc/cparse/Makefile

@@ -13,12 +13,12 @@ NULLCMD = :
 #### Start of system configuration section. ####
 
 srcdir = .
-topdir = /opt/hostedtoolcache/Ruby/3.3.11/x64/include/ruby-3.3.0
+topdir = /opt/hostedtoolcache/Ruby/3.3.12/x64/include/ruby-3.3.0
 hdrdir = $(topdir)
-arch_hdrdir = /opt/hostedtoolcache/Ruby/3.3.11/x64/include/ruby-3.3.0/x86_64-linux
+arch_hdrdir = /opt/hostedtoolcache/Ruby/3.3.12/x64/include/ruby-3.3.0/x86_64-linux
 PATH_SEPARATOR = :
 VPATH = $(srcdir):$(arch_hdrdir)/ruby:$(hdrdir)/ruby
-prefix = $(DESTDIR)/opt/hostedtoolcache/Ruby/3.3.11/x64
+prefix = $(DESTDIR)/opt/hostedtoolcache/Ruby/3.3.12/x64
 rubysitearchprefix = $(rubylibprefix)/$(sitearch)
 rubyarchprefix = $(rubylibprefix)/$(arch)
 rubylibprefix = $(libdir)/$(RUBY_BASE_NAME)