docspring 3.0.0 → 3.2.0

data/vendor/bundle/ruby/3.3.0/gems/bundler-audit-0.9.2/lib/bundler/audit/task.rb

@@ -1,114 +0,0 @@
-require 'rake/tasklib'
-
-module Bundler
-  module Audit
-    #
-    # Defines the `bundle:audit` rake tasks.
-    #
-    class Task < Rake::TaskLib
-      class CommandNotFound < RuntimeError
-      end
-
-      #
-      # Initializes the task.
-      #
-      def initialize
-        define
-      end
-
-      #
-      # Runs the `bundler-audit` command with the additional arguments.
-      #
-      # @param [Array<String>] arguments
-      #   Additional command-line arguments for `bundler-audit`.
-      #
-      # @return [true]
-      #   The `bundler-audit` command successfully exited.
-      #
-      # @raise [CommandNotFound]
-      #   The `bundler-audit` command could not be executed or was not found.
-      #
-      # @note
-      #   If the `bundler-audit` command exits with an error, the rake task
-      #   will also exit with the same error code.
-      #
-      # @api private
-      #
-      def bundler_audit(*arguments)
-        case system('bundler-audit',*arguments)
-        when false
-          exit $?.exitstatus || 1
-        when nil
-          raise(CommandNotFound,"bundler-audit could not be executed")
-        else
-          return true
-        end
-      end
-
-      #
-      # Runs the `bundle-audit check` command.
-      #
-      # @return [true]
-      #   The `bundler-audit` command successfully exited.
-      #
-      # @raise [CommandNotFound]
-      #   The `bundler-audit` command could not be executed or was not found.
-      #
-      # @note
-      #   If the `bundler-audit` command exits with an error, the rake task
-      #   will also exit with the same error code.
-      #
-      # @api private
-      #
-      def check
-        bundler_audit 'check'
-      end
-
-      #
-      # Runs the `bundle-audit update` command.
-      #
-      # @return [true]
-      #   The `bundler-audit` command successfully exited.
-      #
-      # @raise [CommandNotFound]
-      #   The `bundler-audit` command could not be executed or was not found.
-      #
-      # @note
-      #   If the `bundler-audit` command exits with an error, the rake task
-      #   will also exit with the same error code.
-      #
-      # @api private
-      #
-      def update
-        bundler_audit 'update'
-      end
-
-      protected
-
-      #
-      # Defines the `bundle:audit` and `bundle:audit:update` task.
-      #
-      def define
-        namespace :bundle do
-          namespace :audit do
-            desc 'Checks the Gemfile.lock for insecure dependencies'
-            task :check do
-              check
-            end
-
-            desc 'Updates the bundler-audit vulnerability database'
-            task :update do
-              update
-            end
-          end
-
-          task :audit => 'audit:check'
-        end
-
-        task 'bundler:audit'        => 'bundle:audit'
-        task 'bundler:audit:check'  => 'bundle:audit:check'
-        task 'bundler:audit:update' => 'bundle:audit:update'
-      end
-    end
-  end
-end

data/vendor/bundle/ruby/3.3.0/gems/bundler-audit-0.9.2/lib/bundler/audit/version.rb

@@ -1,23 +0,0 @@
-#
-# Copyright (c) 2013-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# bundler-audit is free software: you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# bundler-audit is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with bundler-audit.  If not, see <https://www.gnu.org/licenses/>.
-#
-
-module Bundler
-  module Audit
-    # bundler-audit version
-    VERSION = '0.9.2'
-  end
-end

data/vendor/bundle/ruby/3.3.0/gems/bundler-audit-0.9.2/lib/bundler/audit.rb

@@ -1,19 +0,0 @@
-#
-# Copyright (c) 2013-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# bundler-audit is free software: you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# bundler-audit is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with bundler-audit.  If not, see <https://www.gnu.org/licenses/>.
-#
-
-require 'bundler/audit/database'
-require 'bundler/audit/version'

data/vendor/bundle/ruby/3.3.0/gems/bundler-audit-0.9.2/spec/advisory_spec.rb

@@ -1,373 +0,0 @@
-require 'spec_helper'
-require 'bundler/audit/database'
-require 'bundler/audit/advisory'
-
-describe Bundler::Audit::Advisory do
-  let(:root) { Fixtures::DATABASE_PATH }
-  let(:gem)  { 'test' }
-  let(:id)   { 'CVE-2020-1234' }
-  let(:path) { Fixtures.join('advisory',"#{id}.yml") }
-
-  subject { described_class.load(path) }
-
-  let(:a_patched_version) do
-    subject.patched_versions.map { |version_rule|
-      # For all the rules, get the individual constraints out and see if we
-      # can find a suitable one...
-      version_rule.requirements.select { |(constraint, gem_version)|
-        # We only want constraints where the version number specified is
-        # one of the unaffected version.  I.E. we don't want ">", "<", or if
-        # such a thing exists, "!=" constraints.
-        ['~>', '>=', '=', '<='].include?(constraint)
-      }.map { |(constraint, gem_version)|
-        # Fetch just the version component, which is a Gem::Version,
-        # and extract the string representation of the version.
-        gem_version.version
-      }
-    }.flatten.first
-  end
-
-  let(:an_unaffected_version) do
-    subject.unaffected_versions.map { |version_rule|
-      # For all the rules, get the individual constraints out and see if we
-      # can find a suitable one...
-      version_rule.requirements.select { |(constraint, gem_version)|
-        # We only want constraints where the version number specified is
-        # one of the unaffected version.  I.E. we don't want ">", "<", or if
-        # such a thing exists, "!=" constraints.
-        ['~>', '>=', '=', '<='].include?(constraint)
-      }.map { |(constraint, gem_version)|
-        # Fetch just the version component, which is a Gem::Version,
-        # and extract the string representation of the version.
-        gem_version.version
-      }
-    }.flatten.first
-  end
-
-  describe "load" do
-    let(:data) do
-      File.open(path) do |yaml|
-        if Psych::VERSION >= '3.1.0'
-          YAML.safe_load(yaml, permitted_classes: [Date])
-        else
-          # XXX: psych < 3.1.0 YAML.safe_load calling convention
-          YAML.safe_load(yaml, [Date])
-        end
-      end
-    end
-
-    describe '#id' do
-      subject { super().id }
-      it { is_expected.to eq(id)                  }
-    end
-
-    describe '#url' do
-      subject { super().url }
-      it { is_expected.to eq(data['url'])         }
-    end
-
-    describe '#title' do
-      subject { super().title }
-      it { is_expected.to eq(data['title'])       }
-    end
-
-    describe '#date' do
-      subject { super().date }
-      it { is_expected.to eq(data['date'])        }
-    end
-
-    describe '#cvss_v2' do
-      subject { super().cvss_v2 }
-      it { is_expected.to eq(data['cvss_v2'])     }
-    end
-
-    describe '#cvss_v3' do
-      subject { super().cvss_v3 }
-      it { is_expected.to eq(data['cvss_v3'])     }
-    end
-
-    describe '#description' do
-      subject { super().description }
-      it { is_expected.to eq(data['description']) }
-    end
-
-    context "YAML data not representing a hash" do
-      let(:path) do
-        File.expand_path('../fixtures/advisory/not_a_hash.yml', __FILE__)
-      end
-
-      it "should raise an exception" do
-        expect {
-          Advisory.load(path)
-        }.to raise_exception("advisory data in #{path.dump} was not a Hash")
-      end
-    end
-
-    describe "#patched_versions" do
-      subject { described_class.load(path).patched_versions }
-
-      it "should all be Gem::Requirement objects" do
-        expect(subject.all? { |version|
-          expect(version).to be_kind_of(Gem::Requirement)
-        }).to be_truthy
-      end
-
-      it "should parse the versions" do
-        expect(subject.map(&:to_s)).to eq(data['patched_versions'])
-      end
-    end
-  end
-
-  describe "#cve_id" do
-    let(:cve) { "2015-1234" }
-
-    subject do
-      described_class.new.tap do |advisory|
-        advisory.cve = cve
-      end
-    end
-
-    it "should prepend CVE- to the CVE id" do
-      expect(subject.cve_id).to be == "CVE-#{cve}"
-    end
-
-    context "when cve is nil" do
-      subject { described_class.new }
-
-      it { expect(subject.cve_id).to be_nil }
-    end
-  end
-
-  describe "#osvdb_id" do
-    let(:osvdb) { "123456" }
-
-    subject do
-      described_class.new.tap do |advisory|
-        advisory.osvdb = osvdb
-      end
-    end
-
-    it "should prepend OSVDB- to the OSVDB id" do
-      expect(subject.osvdb_id).to be == "OSVDB-#{osvdb}"
-    end
-
-    context "when cve is nil" do
-      subject { described_class.new }
-
-      it { expect(subject.osvdb_id).to be_nil }
-    end
-  end
-
-  describe "#ghsa_id" do
-    let(:ghsa) { "xfhh-rx56-rxcr" }
-
-    subject do
-      described_class.new.tap do |advisory|
-        advisory.ghsa = ghsa
-      end
-    end
-
-    it "should prepend GHSA- to the GHSA id" do
-      expect(subject.ghsa_id).to be == "GHSA-#{ghsa}"
-    end
-
-    context "when ghsa is nil" do
-      subject { described_class.new }
-
-      it { expect(subject.ghsa_id).to be_nil }
-    end
-  end
-
-  describe "#identifiers" do
-    it "should include all identifiers if defined" do
-      advisory = described_class.new.tap do |advisory|
-        advisory.cve = "2018-1234"
-        advisory.osvdb = "2019-2345"
-        advisory.ghsa = "2020-3456"
-      end
-
-      expect(advisory.identifiers).to eq([
-        "CVE-2018-1234",
-        "OSVDB-2019-2345",
-        "GHSA-2020-3456"
-      ])
-    end
-
-    it "should exclude nil identifiers" do
-      advisory = described_class.new
-      expect(advisory.identifiers).to eq([])
-
-      advisory = described_class.new.tap do |advisory|
-        advisory.cve = "2018-1234"
-      end
-      expect(advisory.identifiers).to eq(["CVE-2018-1234"])
-
-      advisory = described_class.new.tap do |advisory|
-        advisory.ghsa = "2020-3456"
-      end
-      expect(advisory.identifiers).to eq(["GHSA-2020-3456"])
-    end
-  end
-
-  describe "#criticality" do
-    context "when cvss_v2 is between 0.0 and 3.9" do
-      subject do
-        described_class.new.tap do |advisory|
-          advisory.cvss_v2 = 3.9
-        end
-      end
-
-      it { expect(subject.criticality).to eq(:low) }
-    end
-
-    context "when cvss_v2 is between 4.0 and 6.9" do
-      subject do
-        described_class.new.tap do |advisory|
-          advisory.cvss_v2 = 6.9
-        end
-      end
-
-      it { expect(subject.criticality).to eq(:medium) }
-    end
-
-    context "when cvss_v2 is between 7.0 and 10.0" do
-      subject do
-        described_class.new.tap do |advisory|
-          advisory.cvss_v2 = 10.0
-        end
-      end
-
-      it { expect(subject.criticality).to eq(:high) }
-    end
-
-    context "when cvss_v3 is 0.0" do
-      subject do
-        described_class.new.tap do |advisory|
-          advisory.cvss_v3 = 0.0
-        end
-      end
-
-      it { expect(subject.criticality).to eq(:none) }
-    end
-
-    context "when cvss_v3 is between 0.1 and 3.9" do
-      subject do
-        described_class.new.tap do |advisory|
-          advisory.cvss_v3 = 3.9
-        end
-      end
-
-      it { expect(subject.criticality).to eq(:low) }
-    end
-
-    context "when cvss_v3 is between 4.0 and 6.9" do
-      subject do
-        described_class.new.tap do |advisory|
-          advisory.cvss_v3 = 6.9
-        end
-      end
-
-      it { expect(subject.criticality).to eq(:medium) }
-    end
-
-    context "when cvss_v3 is between 7.0 and 8.9" do
-      subject do
-        described_class.new.tap do |advisory|
-          advisory.cvss_v3 = 8.9
-        end
-      end
-
-      it { expect(subject.criticality).to eq(:high) }
-    end
-
-    context "when cvss_v3 is between 9.0 and 10.0" do
-      subject do
-        described_class.new.tap do |advisory|
-          advisory.cvss_v3 = 10.0
-        end
-      end
-
-      it { expect(subject.criticality).to eq(:critical) }
-    end
-  end
-
-  describe "#unaffected?" do
-    context "when passed a version that matches one unaffected version" do
-      let(:version) { Gem::Version.new(an_unaffected_version) }
-
-      it "should return true" do
-        expect(subject.unaffected?(version)).to be_truthy
-      end
-    end
-
-    context "when passed a version that matches no unaffected version" do
-      let(:version) { Gem::Version.new('3.0.9') }
-
-      it "should return false" do
-        expect(subject.unaffected?(version)).to be_falsey
-      end
-    end
-  end
-
-  describe "#patched?" do
-    context "when passed a version that matches one patched version" do
-      let(:version) { Gem::Version.new(a_patched_version) }
-
-      it "should return true" do
-        expect(subject.patched?(version)).to be_truthy
-      end
-    end
-
-    context "when passed a version that matches no patched version" do
-      let(:version) { Gem::Version.new('0.1.1') }
-
-      it "should return false" do
-        expect(subject.patched?(version)).to be_falsey
-      end
-    end
-  end
-
-  describe "#vulnerable?" do
-    context "when passed a version that matches one patched version" do
-      let(:version) { Gem::Version.new(a_patched_version) }
-
-      it "should return false" do
-        expect(subject.vulnerable?(version)).to be_falsey
-      end
-    end
-
-    context "when passed a version that matches no patched version" do
-      let(:version) { Gem::Version.new('0.1.1') }
-
-      it "should return true" do
-        expect(subject.vulnerable?(version)).to be_truthy
-      end
-
-      context "when unaffected_versions is not empty" do
-        context "when passed a version that matches one unaffected version" do
-          let(:version) { Gem::Version.new(an_unaffected_version) }
-
-          it "should return false" do
-            expect(subject.vulnerable?(version)).to be_falsey
-          end
-        end
-
-        context "when passed a version that matches no unaffected version" do
-          let(:version) { Gem::Version.new('0.1.0') }
-
-          it "should return true" do
-            expect(subject.vulnerable?(version)).to be_truthy
-          end
-        end
-      end
-    end
-  end
-
-  describe "#to_h" do
-    subject { super().to_h }
-
-    it "must include criticality: :critical" do
-      expect(subject[:criticality]).to be :critical
-    end
-  end
-end

data/vendor/bundle/ruby/3.3.0/gems/bundler-audit-0.9.2/spec/audit_spec.rb

@@ -1,8 +0,0 @@
-require 'spec_helper'
-require 'bundler/audit'
-
-describe Bundler::Audit do
-  it "should have a VERSION constant" do
-    expect(subject.const_get('VERSION')).not_to be_empty
-  end
-end

data/vendor/bundle/ruby/3.3.0/gems/bundler-audit-0.9.2/spec/bundle/insecure_sources/Gemfile

@@ -1,4 +0,0 @@
-source 'http://rubygems.org'
-
-gem 'rails'
-gem 'jquery-rails', git: 'git://github.com/rails/jquery-rails.git'

data/vendor/bundle/ruby/3.3.0/gems/bundler-audit-0.9.2/spec/bundle/insecure_sources/Gemfile.lock

@@ -1,151 +0,0 @@
-GIT
-  remote: git://github.com/rails/jquery-rails.git
-  revision: a8b003d726522cf663611c114d8f0e79abf8d200
-  specs:
-    jquery-rails (4.4.0)
-      rails-dom-testing (>= 1, < 3)
-      railties (>= 4.2.0)
-      thor (>= 0.14, < 2.0)
-
-GEM
-  remote: http://rubygems.org/
-  specs:
-    actioncable (6.1.3.2)
-      actionpack (= 6.1.3.2)
-      activesupport (= 6.1.3.2)
-      nio4r (~> 2.0)
-      websocket-driver (>= 0.6.1)
-    actionmailbox (6.1.3.2)
-      actionpack (= 6.1.3.2)
-      activejob (= 6.1.3.2)
-      activerecord (= 6.1.3.2)
-      activestorage (= 6.1.3.2)
-      activesupport (= 6.1.3.2)
-      mail (>= 2.7.1)
-    actionmailer (6.1.3.2)
-      actionpack (= 6.1.3.2)
-      actionview (= 6.1.3.2)
-      activejob (= 6.1.3.2)
-      activesupport (= 6.1.3.2)
-      mail (~> 2.5, >= 2.5.4)
-      rails-dom-testing (~> 2.0)
-    actionpack (6.1.3.2)
-      actionview (= 6.1.3.2)
-      activesupport (= 6.1.3.2)
-      rack (~> 2.0, >= 2.0.9)
-      rack-test (>= 0.6.3)
-      rails-dom-testing (~> 2.0)
-      rails-html-sanitizer (~> 1.0, >= 1.2.0)
-    actiontext (6.1.3.2)
-      actionpack (= 6.1.3.2)
-      activerecord (= 6.1.3.2)
-      activestorage (= 6.1.3.2)
-      activesupport (= 6.1.3.2)
-      nokogiri (>= 1.8.5)
-    actionview (6.1.3.2)
-      activesupport (= 6.1.3.2)
-      builder (~> 3.1)
-      erubi (~> 1.4)
-      rails-dom-testing (~> 2.0)
-      rails-html-sanitizer (~> 1.1, >= 1.2.0)
-    activejob (6.1.3.2)
-      activesupport (= 6.1.3.2)
-      globalid (>= 0.3.6)
-    activemodel (6.1.3.2)
-      activesupport (= 6.1.3.2)
-    activerecord (6.1.3.2)
-      activemodel (= 6.1.3.2)
-      activesupport (= 6.1.3.2)
-    activestorage (6.1.3.2)
-      actionpack (= 6.1.3.2)
-      activejob (= 6.1.3.2)
-      activerecord (= 6.1.3.2)
-      activesupport (= 6.1.3.2)
-      marcel (~> 1.0.0)
-      mini_mime (~> 1.0.2)
-    activesupport (6.1.3.2)
-      concurrent-ruby (~> 1.0, >= 1.0.2)
-      i18n (>= 1.6, < 2)
-      minitest (>= 5.1)
-      tzinfo (~> 2.0)
-      zeitwerk (~> 2.3)
-    builder (3.2.4)
-    concurrent-ruby (1.1.8)
-    crass (1.0.6)
-    erubi (1.10.0)
-    globalid (0.4.2)
-      activesupport (>= 4.2.0)
-    i18n (1.8.10)
-      concurrent-ruby (~> 1.0)
-    loofah (2.19.1)
-      crass (~> 1.0.2)
-      nokogiri (>= 1.5.9)
-    mail (2.7.1)
-      mini_mime (>= 0.1.1)
-    marcel (1.0.1)
-    method_source (1.0.0)
-    mini_mime (1.0.3)
-    mini_portile2 (2.8.0)
-    minitest (5.14.4)
-    nio4r (2.5.7)
-    nokogiri (1.13.10)
-      mini_portile2 (~> 2.8.0)
-      racc (~> 1.4)
-    nokogiri (1.13.10-x86_64-linux)
-      racc (~> 1.4)
-    racc (1.6.1)
-    rack (2.2.6.3)
-    rack-test (1.1.0)
-      rack (>= 1.0, < 3)
-    rails (6.1.3.2)
-      actioncable (= 6.1.3.2)
-      actionmailbox (= 6.1.3.2)
-      actionmailer (= 6.1.3.2)
-      actionpack (= 6.1.3.2)
-      actiontext (= 6.1.3.2)
-      actionview (= 6.1.3.2)
-      activejob (= 6.1.3.2)
-      activemodel (= 6.1.3.2)
-      activerecord (= 6.1.3.2)
-      activestorage (= 6.1.3.2)
-      activesupport (= 6.1.3.2)
-      bundler (>= 1.15.0)
-      railties (= 6.1.3.2)
-      sprockets-rails (>= 2.0.0)
-    rails-dom-testing (2.0.3)
-      activesupport (>= 4.2.0)
-      nokogiri (>= 1.6)
-    rails-html-sanitizer (1.4.4)
-      loofah (~> 2.19, >= 2.19.1)
-    railties (6.1.3.2)
-      actionpack (= 6.1.3.2)
-      activesupport (= 6.1.3.2)
-      method_source
-      rake (>= 0.8.7)
-      thor (~> 1.0)
-    rake (13.0.3)
-    sprockets (4.0.2)
-      concurrent-ruby (~> 1.0)
-      rack (> 1, < 3)
-    sprockets-rails (3.2.2)
-      actionpack (>= 4.0)
-      activesupport (>= 4.0)
-      sprockets (>= 3.0.0)
-    thor (1.1.0)
-    tzinfo (2.0.4)
-      concurrent-ruby (~> 1.0)
-    websocket-driver (0.7.4)
-      websocket-extensions (>= 0.1.0)
-    websocket-extensions (0.1.5)
-    zeitwerk (2.4.2)
-
-PLATFORMS
-  ruby
-  x86_64-linux
-
-DEPENDENCIES
-  jquery-rails!
-  rails
-
-BUNDLED WITH
-   2.2.0

data/vendor/bundle/ruby/3.3.0/gems/bundler-audit-0.9.2/spec/bundle/secure/Gemfile

@@ -1,4 +0,0 @@
-source 'https://rubygems.org'
-
-gem 'rails', '~> 5.2'
-gem 'rails-html-sanitizer', '~> 1.4.4'