charcoal 2.8.0 → 2.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0e0f5357949ef43147b8d283f08389d33a34d88fb5aabfd426458a60b6506dcb
-  data.tar.gz: 6fafd57d4ae6a1236236b6dc7c0bd07c9e6f74d18942bf4d28c1eb3fcdfd615a
+  metadata.gz: 6d3a9f48b3bab866f70fb6546172acecea8ce4767e7a55854804b2099542554b
+  data.tar.gz: 034d87dfd8c1973ce3247850d933945b7a24b0c7de2d2b164244a0d618c9d2ec
 SHA512:
-  metadata.gz: 8918346db83b8e769a129920b6947287c01b197e677b654f2edc87c0f4add6631d57bb33f72878f0057d9fa73366c0368fb4b9bd48ff83caf7d9d2399ad063e9
-  data.tar.gz: 8989c33065aa23601ea61f472f9eea88b6c0b8d45033eec36a7bc80dcfe992c14a52753aa5f6f7486a62a3ed418de07e67ba130bc3c3b6edaa490cf62ea0c5f3
+  metadata.gz: 7090f4dfff23575604def834c40ada23ce74191cff33cb63183ef4307832bd1a0688ad78df2e607032b775f1865448c100689860d7a6f2b39e0c22bd110c13cd
+  data.tar.gz: bb6e7bcc8f79c3d8c5f9b76eabe3f14c915c472c5c8b093f30a1807e1bfdf41bd7b993876c5a469e0bfe38c482029057d7a6e70e7f45c9a6181ffd0fea20647b

data/lib/charcoal/utilities.rb

@@ -1,7 +1,27 @@
 require "action_controller"
+require "action_dispatch"
 
 module Charcoal::Utilities
-  Routing = defined?(ActionDispatch) ? ActionDispatch::Routing : ActionController::Routing
+  # OPTIONS is the preflight question, not an answer. CONNECT/TRACE/TRACK are
+  # "forbidden methods" the browser won't send cross-origin.
+  # See https://fetch.spec.whatwg.org/#forbidden-method
+  FORBIDDEN_CORS_METHODS = %w[OPTIONS CONNECT TRACE TRACK].freeze
+
+  # WebDAV / versioning families (PROPFIND, MKCOL, REPORT, …): recognized by
+  # Rails but never sent cross-origin. These are the RFC groups ActionDispatch
+  # concatenates to build HTTP_METHODS.
+  WEBDAV_METHODS = [
+    *ActionDispatch::Request::RFC2518,
+    *ActionDispatch::Request::RFC3253,
+    *ActionDispatch::Request::RFC3648,
+    *ActionDispatch::Request::RFC3744,
+    *ActionDispatch::Request::RFC5323,
+    *ActionDispatch::Request::RFC4791
+  ].freeze
+
+  # Verbs advertised in Access-Control-Allow-Methods.
+  HTTP_METHODS = (ActionDispatch::Request::HTTP_METHODS - FORBIDDEN_CORS_METHODS - WEBDAV_METHODS)
+    .map { |v| v.downcase.to_sym }.freeze
 
   def allowed_methods_for?(protocol)
     @allowed_methods ||= {}
@@ -12,9 +32,7 @@ module Charcoal::Utilities
   private
 
   def methods_allowed_for?(protocol)
-    Routing::HTTP_METHODS.select do |verb|
-      next if verb == :options
-
+    HTTP_METHODS.select do |verb|
       route = find_route(request.path, request.env.merge(method: verb))
 
       if route

data/lib/charcoal/version.rb

@@ -1,3 +1,3 @@
 module Charcoal
-  VERSION = "2.8.0"
+  VERSION = "2.9.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: charcoal
 version: !ruby/object:Gem::Version
-  version: 2.8.0
+  version: 2.9.0
 platform: ruby
 authors:
 - Steven Davidovitz
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-07-01 00:00:00.000000000 Z
+date: 2026-07-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,70 +16,28 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '6.1'
+        version: '7.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '6.1'
+        version: '7.0'
 - !ruby/object:Gem::Dependency
   name: actionpack
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '6.1'
+        version: '7.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '6.1'
-- !ruby/object:Gem::Dependency
-  name: rake
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-- !ruby/object:Gem::Dependency
-  name: yard
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 0.9.11
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 0.9.11
-- !ruby/object:Gem::Dependency
-  name: shoulda
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.0'
+        version: '7.0'
 description: Helps you support JSONP and CORS in your Rails app
 email: sdavidovitz@zendesk.com
 executables: []
@@ -97,7 +55,7 @@ homepage: https://github.com/zendesk/charcoal
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -105,15 +63,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '3.1'
+      version: '3.2'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.11
-signing_key: 
+rubygems_version: 3.4.19
+signing_key:
 specification_version: 4
 summary: Cross-Origin helper for Rails
 test_files: []