domain_name 0.6.20260907 → 0.7.20261007

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dae0595567db75e31a429d76bdecc2ee055fdc09675a5108c30bc5ba02f7d3ba
-  data.tar.gz: 42bc683fd3f28c8696a6d897d0005cc145ca7f39a8a678f00e744a41b1b386bf
+  metadata.gz: 476a417bd69f97cbcbc78fd5c5b558b64be4dccebaf4faa2f423cbda38f16f2a
+  data.tar.gz: d85b95635ab78654fabfbfeecf5e1177ac9dca1675cf6eb373da497525f9371f
 SHA512:
-  metadata.gz: 930b6fe91d13c53171a0736d42fe471c5c71d4551c49e0097cf9e44258e24eef0dae44ae7b1d760806cf0a3fc7222ba2e9cdcff76a211d7049694da073557745
-  data.tar.gz: 419ec5e61f670b24f75d1f942eeadc63fb6e516b718e4ad4498d2ccb4cd9515d8ddc1469777ffa0074070ff36d44814c9f693751352bd5bf26590952c9623df6
+  metadata.gz: 352e4f73563ddc78ca350026b87c4b785e7bc84747e076f48c15f8521936cb180778849f04c9179183352c9980078b8644ee3214f809ac97f655c4a24d7f161b
+  data.tar.gz: 5c0f30985880e573684bf2ac7357c3696654cd2538d0bd988b419383d1343c906fb3389cb171e7c8ef66a867bcc001d6beac4c166292c977903ae4276e339f66

data/.github/renovate.json5

@@ -11,9 +11,7 @@
   schedule: ["after 9am on friday", "before 6pm on friday"],
   rebaseWhen: "behind-base-branch",
   lockFileMaintenance: {
-    enabled: true,
-    labels: ["dependencies"],
-    schedule: ["after 9am on friday", "before 6pm on friday"],
+    enabled: false,
   },
   vulnerabilityAlerts: {
     enabled: true,

data/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## [v0.7.20261007](https://github.com/knu/ruby-domain_name/tree/v0.7.20261007) (2026-10-13)
+[Full Changelog](https://github.com/knu/ruby-domain_name/compare/v0.6.20260921...v0.7.20261007)
+
+- Update the eTLD database to 2026-10-07 07:28:30 UTC
+- Reject IDN labels longer than 63 characters in `DomainName::Punycode.encode_hostname` and `decode_hostname`, and thus in `DomainName.new`, to avoid quadratic Punycode processing time
+- Classify a rooted IPv4 address such as `127.0.0.1.` as an IP address instead of a domain name
+- Make `DomainName#==` return false and `DomainName#<=>` return nil for objects that are not strings, instead of raising `TypeError`
+
+**Merged pull requests:**
+
+- Return conventional results for unrelated comparisons [\#35](https://github.com/knu/ruby-domain_name/pull/35) ([OskarEichler](https://github.com/OskarEichler))
+- Classify rooted IPs and bound hostname normalization [\#41](https://github.com/knu/ruby-domain_name/pull/41) ([OskarEichler](https://github.com/OskarEichler))
+
+## [v0.6.20260921](https://github.com/knu/ruby-domain_name/tree/v0.6.20260921) (2026-09-24)
+[Full Changelog](https://github.com/knu/ruby-domain_name/compare/v0.6.20260907...v0.6.20260921)
+
+- Update the eTLD database to 2026-09-21 18:50:24 UTC
+
 ## [v0.6.20260907](https://github.com/knu/ruby-domain_name/tree/v0.6.20260907) (2026-09-10)
 [Full Changelog](https://github.com/knu/ruby-domain_name/compare/v0.6.20260902...v0.6.20260907)
 

data/data/public_suffix_list.dat

@@ -5,8 +5,8 @@
 // Please pull this list from, and only from https://publicsuffix.org/list/public_suffix_list.dat,
 // rather than any other VCS sites. Pulling from any other URL is not guaranteed to be supported.
 
-// VERSION: 2026-09-07_20-57-11_UTC
-// COMMIT: 9fc6745c5d3f678a59af9c24de72e5eb3c300e2c
+// VERSION: 2026-10-07_07-28-19_UTC
+// COMMIT: 3929462652695bad04f0a27afb600974014a3c8b
 
 // Instructions on pulling and using this list can be found at https://publicsuffix.org/list/.
 
@@ -6812,7 +6812,7 @@ org.zw
 
 // newGTLDs
 
-// List of new gTLDs imported from https://www.icann.org/resources/registries/gtlds/v2/gtlds.json on 2026-07-24T16:40:16Z
+// List of new gTLDs imported from https://www.icann.org/resources/registries/gtlds/v2/gtlds.json on 2026-10-01T20:07:38Z
 // This list is auto-generated, don't edit it manually.
 // aaa : American Automobile Association, Inc.
 // https://www.iana.org/domains/root/db/aaa.html
@@ -7630,7 +7630,7 @@ coffee
 // https://www.iana.org/domains/root/db/college.html
 college
 
-// cologne : dotKoeln GmbH
+// cologne : domainworx Service & Management GmbH
 // https://www.iana.org/domains/root/db/cologne.html
 cologne
 
@@ -8798,10 +8798,6 @@ jprs
 // https://www.iana.org/domains/root/db/juegos.html
 juegos
 
-// juniper : JUNIPER NETWORKS, INC.
-// https://www.iana.org/domains/root/db/juniper.html
-juniper
-
 // kaufen : Dog Beach, LLC
 // https://www.iana.org/domains/root/db/kaufen.html
 kaufen
@@ -8846,7 +8842,7 @@ kitchen
 // https://www.iana.org/domains/root/db/kiwi.html
 kiwi
 
-// koeln : dotKoeln GmbH
+// koeln : domainworx Service & Management GmbH
 // https://www.iana.org/domains/root/db/koeln.html
 koeln
 
@@ -11421,9 +11417,10 @@ cloudfront.net
 
 // Amazon Cognito
 // Submitted by AWS Security <psl-maintainers@amazon.com>
-// Reference: d7d4a954-976e-403e-a010-de9ed0cfbbd1
+// Reference: dd7b1be3-c336-4750-8e69-85d381b572dd
 auth.af-south-1.amazoncognito.com
 auth.ap-east-1.amazoncognito.com
+auth.ap-east-2.amazoncognito.com
 auth.ap-northeast-1.amazoncognito.com
 auth.ap-northeast-2.amazoncognito.com
 auth.ap-northeast-3.amazoncognito.com
@@ -11434,6 +11431,7 @@ auth.ap-southeast-2.amazoncognito.com
 auth.ap-southeast-3.amazoncognito.com
 auth.ap-southeast-4.amazoncognito.com
 auth.ap-southeast-5.amazoncognito.com
+auth.ap-southeast-6.amazoncognito.com
 auth.ap-southeast-7.amazoncognito.com
 auth.ca-central-1.amazoncognito.com
 auth.ca-west-1.amazoncognito.com
@@ -11573,6 +11571,30 @@ emrappui-prod.us-west-2.amazonaws.com
 emrnotebooks-prod.us-west-2.amazonaws.com
 emrstudio-prod.us-west-2.amazonaws.com
 
+// Amazon Lightsail
+// Submitted by AWS Security <psl-maintainers@amazon.com>
+// Reference: _BNEF4RCADXL7ELNLFZHYJMSMW4
+amazonlightsail.com
+*.ap-east-1.cs.amazonlightsail.com
+*.ap-northeast-1.cs.amazonlightsail.com
+*.ap-northeast-2.cs.amazonlightsail.com
+*.ap-south-1.cs.amazonlightsail.com
+*.ap-southeast-1.cs.amazonlightsail.com
+*.ap-southeast-2.cs.amazonlightsail.com
+*.ap-southeast-3.cs.amazonlightsail.com
+*.ap-southeast-5.cs.amazonlightsail.com
+*.ca-central-1.cs.amazonlightsail.com
+*.eu-central-1.cs.amazonlightsail.com
+*.eu-north-1.cs.amazonlightsail.com
+*.eu-south-2.cs.amazonlightsail.com
+*.eu-west-1.cs.amazonlightsail.com
+*.eu-west-2.cs.amazonlightsail.com
+*.eu-west-3.cs.amazonlightsail.com
+*.sa-east-1.cs.amazonlightsail.com
+*.us-east-1.cs.amazonlightsail.com
+*.us-east-2.cs.amazonlightsail.com
+*.us-west-2.cs.amazonlightsail.com
+
 // Amazon Managed Workflows for Apache Airflow
 // Submitted by AWS Security <psl-maintainers@amazon.com>
 // Reference: bfd043cc-2816-451d-894e-612c6b61a438
@@ -12194,7 +12216,7 @@ awsapps.com
 
 // AWS Elastic Beanstalk
 // Submitted by AWS Security <psl-maintainers@amazon.com>
-// Reference: e4e02a54-eaf9-4fe7-b662-39ccbc011a04
+// Reference: _CCBN322SBHBCSUGB7BBDVTREDI
 cn-north-1.eb.amazonaws.com.cn
 cn-northwest-1.eb.amazonaws.com.cn
 elasticbeanstalk.com
@@ -12204,13 +12226,18 @@ ap-northeast-1.elasticbeanstalk.com
 ap-northeast-2.elasticbeanstalk.com
 ap-northeast-3.elasticbeanstalk.com
 ap-south-1.elasticbeanstalk.com
+ap-south-2.elasticbeanstalk.com
 ap-southeast-1.elasticbeanstalk.com
 ap-southeast-2.elasticbeanstalk.com
 ap-southeast-3.elasticbeanstalk.com
+ap-southeast-4.elasticbeanstalk.com
 ap-southeast-5.elasticbeanstalk.com
+ap-southeast-6.elasticbeanstalk.com
 ap-southeast-7.elasticbeanstalk.com
 ca-central-1.elasticbeanstalk.com
+ca-west-1.elasticbeanstalk.com
 eu-central-1.elasticbeanstalk.com
+eu-central-2.elasticbeanstalk.com
 eu-north-1.elasticbeanstalk.com
 eu-south-1.elasticbeanstalk.com
 eu-south-2.elasticbeanstalk.com
@@ -12769,8 +12796,10 @@ co.no
 // Combell.com : https://www.combell.com
 // Submitted by Combell Team <support@combell.com>
 webhosting.be
+site.webhosting.be
 prvw.eu
 hosting-cluster.nl
+site.hosting-cluster.nl
 
 // Contentful GmbH : https://www.contentful.com
 // Submitted by Contentful Developer Experience Team <prd-ecosystem-dx@contentful.com>
@@ -12844,6 +12873,13 @@ dyndns.dappnode.io
 builtwithdark.com
 darklang.io
 
+// Databricks, Inc. : https://www.databricks.com/
+// Submitted by Databricks Enterprise Security <entsec@databricks.com>
+aws.databricksapps.com
+*.azure.databricksapps.com
+gcp.databricksapps.com
+aws-gov.databricksapps.us
+
 // DataDetect, LLC. : https://datadetect.com
 // Submitted by Andrew Banchich <abanchich@sceven.com>
 demo.datadetect.com
@@ -13625,6 +13661,10 @@ preview.site
 // Submitted by Jason Zhu <jason@owtware.com>
 filegear.me
 
+// Files.com : https://www.files.com/
+// Submitted by Caleb Hearth <ops+public-suffix@files.com>
+hosted-by-files.com
+
 // Firebase, Inc.
 // Submitted by Chris Raynor <chris@firebase.com>
 firebaseapp.com
@@ -13774,6 +13814,10 @@ gitlab.io
 gitapp.si
 gitpage.si
 
+// Glide : https://www.glideapps.com
+// Submitted by Glide Engineering <engineering@heyglide.com>
+glideos.app
+
 // Global NOG Alliance : https://nogalliance.org/
 // Submitted by Sander Steffann <sander@nogalliance.org>
 nog.community
@@ -13926,6 +13970,8 @@ cloud.goog
 translate.goog
 *.usercontent.goog
 cloudfunctions.net
+cloud.run
+ai.studio
 
 // Goupile : https://goupile.fr
 // Submitted by Niels Martignene <hello@goupile.fr>
@@ -14016,6 +14062,7 @@ here.now
 // Heroku : https://www.heroku.com/
 // Submitted by Shumon Huque <public-dns@salesforce.com>
 herokuapp.com
+*.compute.herokuapp.com
 
 // Heyflow : https://www.heyflow.com
 // Submitted by Mirko Nitschke <tech@heyflow.com>
@@ -14222,6 +14269,10 @@ home64.de
 ipv64.de
 ipv64.net
 
+// IQHost / IQ Group : https://iqhost.pl/
+// Submitted by Adam Buhl <admin@iqhost.pl>
+iqhs.pl
+
 // ir.md : https://nic.ir.md
 // Submitted by Ali Soizi <info@nic.ir.md>
 ir.md
@@ -15361,8 +15412,6 @@ qcx.io
 // QNAP System Inc : https://www.qnap.com
 // Submitted by Nick Chang <cloudadmin@qnap.com>
 myqnapcloud.cn
-alpha-myqnapcloud.com
-dev-myqnapcloud.com
 mycloudnas.com
 mynascloud.com
 myqnapcloud.com
@@ -15463,33 +15512,8 @@ firewalledreplit.co
 id.firewalledreplit.co
 repl.co
 id.repl.co
-replit.dev
-archer.replit.dev
-bones.replit.dev
-canary.replit.dev
-global.replit.dev
-hacker.replit.dev
-id.replit.dev
-janeway.replit.dev
-kim.replit.dev
-kira.replit.dev
-kirk.replit.dev
-odo.replit.dev
-paris.replit.dev
-picard.replit.dev
-pike.replit.dev
-prerelease.replit.dev
-reed.replit.dev
-riker.replit.dev
-sisko.replit.dev
-spock.replit.dev
-staging.replit.dev
-sulu.replit.dev
-tarpit.replit.dev
-teams.replit.dev
-tucker.replit.dev
-wesley.replit.dev
-worf.replit.dev
+*.replit.dev
+*.teams.replit.dev
 repl.run
 
 // Resin.io : https://resin.io
@@ -15497,6 +15521,10 @@ repl.run
 resindevice.io
 devices.resinstaging.io
 
+// Retool : https://retool.com
+// Submitted by Andrew Guan <security@retool.com>
+retool.app
+
 // Rico Developments Limited : https://adimo.co
 // Submitted by Colin Brown <hello@adimo.co>
 adimo.co.uk
@@ -15992,6 +16020,10 @@ storage.supabase.co
 supabase.in
 supabase.net
 
+// Surge : https://surge.sh
+// Submitted by Brock Whitten <support@surge.sh>
+surge.sh
+
 // Syncloud : https://syncloud.org
 // Submitted by Boris Rybalkin <syncloud@syncloud.it>
 syncloud.it

data/lib/domain_name/etld_data.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 class DomainName
-  ETLD_DATA_DATE = '2026-09-07T20:57:24Z'
+  ETLD_DATA_DATE = '2026-10-07T07:28:30Z'
 
   ETLD_DATA = {
     "ac" => 0,
@@ -6343,7 +6343,6 @@ class DomainName
     "jpmorgan" => 0,
     "jprs" => 0,
     "juegos" => 0,
-    "juniper" => 0,
     "kaufen" => 0,
     "kddi" => 0,
     "kerryhotels" => 0,
@@ -7052,6 +7051,7 @@ class DomainName
     "cloudfront.net" => 0,
     "auth.af-south-1.amazoncognito.com" => 0,
     "auth.ap-east-1.amazoncognito.com" => 0,
+    "auth.ap-east-2.amazoncognito.com" => 0,
     "auth.ap-northeast-1.amazoncognito.com" => 0,
     "auth.ap-northeast-2.amazoncognito.com" => 0,
     "auth.ap-northeast-3.amazoncognito.com" => 0,
@@ -7062,6 +7062,7 @@ class DomainName
     "auth.ap-southeast-3.amazoncognito.com" => 0,
     "auth.ap-southeast-4.amazoncognito.com" => 0,
     "auth.ap-southeast-5.amazoncognito.com" => 0,
+    "auth.ap-southeast-6.amazoncognito.com" => 0,
     "auth.ap-southeast-7.amazoncognito.com" => 0,
     "auth.ca-central-1.amazoncognito.com" => 0,
     "auth.ca-west-1.amazoncognito.com" => 0,
@@ -7192,6 +7193,26 @@ class DomainName
     "emrappui-prod.us-west-2.amazonaws.com" => 0,
     "emrnotebooks-prod.us-west-2.amazonaws.com" => 0,
     "emrstudio-prod.us-west-2.amazonaws.com" => 0,
+    "amazonlightsail.com" => 0,
+    "ap-east-1.cs.amazonlightsail.com" => -1,
+    "ap-northeast-1.cs.amazonlightsail.com" => -1,
+    "ap-northeast-2.cs.amazonlightsail.com" => -1,
+    "ap-south-1.cs.amazonlightsail.com" => -1,
+    "ap-southeast-1.cs.amazonlightsail.com" => -1,
+    "ap-southeast-2.cs.amazonlightsail.com" => -1,
+    "ap-southeast-3.cs.amazonlightsail.com" => -1,
+    "ap-southeast-5.cs.amazonlightsail.com" => -1,
+    "ca-central-1.cs.amazonlightsail.com" => -1,
+    "eu-central-1.cs.amazonlightsail.com" => -1,
+    "eu-north-1.cs.amazonlightsail.com" => -1,
+    "eu-south-2.cs.amazonlightsail.com" => -1,
+    "eu-west-1.cs.amazonlightsail.com" => -1,
+    "eu-west-2.cs.amazonlightsail.com" => -1,
+    "eu-west-3.cs.amazonlightsail.com" => -1,
+    "sa-east-1.cs.amazonlightsail.com" => -1,
+    "us-east-1.cs.amazonlightsail.com" => -1,
+    "us-east-2.cs.amazonlightsail.com" => -1,
+    "us-west-2.cs.amazonlightsail.com" => -1,
     "airflow.af-south-1.on.aws" => -1,
     "airflow.ap-east-1.on.aws" => -1,
     "airflow.ap-northeast-1.on.aws" => -1,
@@ -7772,13 +7793,18 @@ class DomainName
     "ap-northeast-2.elasticbeanstalk.com" => 0,
     "ap-northeast-3.elasticbeanstalk.com" => 0,
     "ap-south-1.elasticbeanstalk.com" => 0,
+    "ap-south-2.elasticbeanstalk.com" => 0,
     "ap-southeast-1.elasticbeanstalk.com" => 0,
     "ap-southeast-2.elasticbeanstalk.com" => 0,
     "ap-southeast-3.elasticbeanstalk.com" => 0,
+    "ap-southeast-4.elasticbeanstalk.com" => 0,
     "ap-southeast-5.elasticbeanstalk.com" => 0,
+    "ap-southeast-6.elasticbeanstalk.com" => 0,
     "ap-southeast-7.elasticbeanstalk.com" => 0,
     "ca-central-1.elasticbeanstalk.com" => 0,
+    "ca-west-1.elasticbeanstalk.com" => 0,
     "eu-central-1.elasticbeanstalk.com" => 0,
+    "eu-central-2.elasticbeanstalk.com" => 0,
     "eu-north-1.elasticbeanstalk.com" => 0,
     "eu-south-1.elasticbeanstalk.com" => 0,
     "eu-south-2.elasticbeanstalk.com" => 0,
@@ -8088,8 +8114,10 @@ class DomainName
     "co.no" => 0,
     "devinapps.com" => -1,
     "webhosting.be" => 0,
+    "site.webhosting.be" => 0,
     "prvw.eu" => 0,
     "hosting-cluster.nl" => 0,
+    "site.hosting-cluster.nl" => 0,
     "ctfcloud.net" => 0,
     "convex.app" => 0,
     "convex.cloud" => 0,
@@ -8126,6 +8154,10 @@ class DomainName
     "dyndns.dappnode.io" => 0,
     "builtwithdark.com" => 0,
     "darklang.io" => 0,
+    "aws.databricksapps.com" => 0,
+    "azure.databricksapps.com" => -1,
+    "gcp.databricksapps.com" => 0,
+    "aws-gov.databricksapps.us" => 0,
     "demo.datadetect.com" => 0,
     "instance.datadetect.com" => 0,
     "edgestack.me" => 0,
@@ -8727,6 +8759,7 @@ class DomainName
     "figma-gov.site" => 0,
     "preview.site" => 0,
     "filegear.me" => 0,
+    "hosted-by-files.com" => 0,
     "firebaseapp.com" => 0,
     "fldrv.com" => 0,
     "on-fleek.app" => 0,
@@ -8801,6 +8834,7 @@ class DomainName
     "gitlab.io" => 0,
     "gitapp.si" => 0,
     "gitpage.si" => 0,
+    "glideos.app" => 0,
     "nog.community" => 0,
     "co.ro" => 0,
     "shop.ro" => 0,
@@ -8933,6 +8967,8 @@ class DomainName
     "translate.goog" => 0,
     "usercontent.goog" => -1,
     "cloudfunctions.net" => 0,
+    "cloud.run" => 0,
+    "ai.studio" => 0,
     "goupile.fr" => 0,
     "pymnt.uk" => 0,
     "gov.nl" => 0,
@@ -8964,6 +9000,7 @@ class DomainName
     "hercules-dev.com" => 0,
     "here.now" => 0,
     "herokuapp.com" => 0,
+    "compute.herokuapp.com" => -1,
     "heyflow.page" => 0,
     "heyflow.site" => 0,
     "ravendb.cloud" => 0,
@@ -9073,6 +9110,7 @@ class DomainName
     "home64.de" => 0,
     "ipv64.de" => 0,
     "ipv64.net" => 0,
+    "iqhs.pl" => 0,
     "ir.md" => 0,
     "is-a-good.dev" => 0,
     "iservschule.de" => 0,
@@ -9750,8 +9788,6 @@ class DomainName
     "qcx.io" => 0,
     "sys.qcx.io" => -1,
     "myqnapcloud.cn" => 0,
-    "alpha-myqnapcloud.com" => 0,
-    "dev-myqnapcloud.com" => 0,
     "mycloudnas.com" => 0,
     "mynascloud.com" => 0,
     "myqnapcloud.com" => 0,
@@ -9792,36 +9828,12 @@ class DomainName
     "id.firewalledreplit.co" => 0,
     "repl.co" => 0,
     "id.repl.co" => 0,
-    "replit.dev" => 0,
-    "archer.replit.dev" => 0,
-    "bones.replit.dev" => 0,
-    "canary.replit.dev" => 0,
-    "global.replit.dev" => 0,
-    "hacker.replit.dev" => 0,
-    "id.replit.dev" => 0,
-    "janeway.replit.dev" => 0,
-    "kim.replit.dev" => 0,
-    "kira.replit.dev" => 0,
-    "kirk.replit.dev" => 0,
-    "odo.replit.dev" => 0,
-    "paris.replit.dev" => 0,
-    "picard.replit.dev" => 0,
-    "pike.replit.dev" => 0,
-    "prerelease.replit.dev" => 0,
-    "reed.replit.dev" => 0,
-    "riker.replit.dev" => 0,
-    "sisko.replit.dev" => 0,
-    "spock.replit.dev" => 0,
-    "staging.replit.dev" => 0,
-    "sulu.replit.dev" => 0,
-    "tarpit.replit.dev" => 0,
-    "teams.replit.dev" => 0,
-    "tucker.replit.dev" => 0,
-    "wesley.replit.dev" => 0,
-    "worf.replit.dev" => 0,
+    "replit.dev" => -1,
+    "teams.replit.dev" => -1,
     "repl.run" => 0,
     "resindevice.io" => 0,
     "devices.resinstaging.io" => 0,
+    "retool.app" => 0,
     "adimo.co.uk" => 0,
     "itcouldbewor.se" => 0,
     "aus.basketball" => 0,
@@ -10111,6 +10123,7 @@ class DomainName
     "storage.supabase.co" => 0,
     "supabase.in" => 0,
     "supabase.net" => 0,
+    "surge.sh" => 0,
     "syncloud.it" => 0,
     "dscloud.biz" => 0,
     "direct.quickconnect.cn" => 0,

data/lib/domain_name/punycode.rb

@@ -92,6 +92,9 @@ class DomainName
     DOT = '.'
     PREFIX = 'xn--'
 
+    # The maximum length of a label in a hostname (RFC 1035)
+    MAX_LABEL_LENGTH = 63
+
     # Most errors we raise are basically kind of ArgumentError.
     class ArgumentError < ::ArgumentError; end
     class BufferOverflowError < ArgumentError; end
@@ -177,13 +180,22 @@ class DomainName
         output
       end
 
-      # Encode a hostname using IDN/Punycode algorithms
+      # Encode a hostname using IDN/Punycode algorithms.  Raises
+      # ArgumentError if an encoded label would exceed
+      # MAX_LABEL_LENGTH.
       def encode_hostname(hostname)
         hostname.match(RE_NONBASIC) or return hostname
 
         hostname.split(DOT).map { |name|
           if name.match(RE_NONBASIC)
-            PREFIX + encode(name)
+            # Encoding takes quadratic time, and the encoded label is
+            # always longer than the input by at least the prefix
+            name.length + PREFIX.length > MAX_LABEL_LENGTH and
+              raise ArgumentError, "Label is too long: #{name.length} characters"
+            label = PREFIX + encode(name)
+            label.length > MAX_LABEL_LENGTH and
+              raise ArgumentError, "Encoded label is too long: #{label.length} characters"
+            label
           else
             name
           end
@@ -272,9 +284,13 @@ class DomainName
         output.pack('U*')
       end
 
-      # Decode a hostname using IDN/Punycode algorithms
+      # Decode a hostname using IDN/Punycode algorithms.  Raises
+      # ArgumentError if an encoded label exceeds MAX_LABEL_LENGTH.
       def decode_hostname(hostname)
         hostname.gsub(/(\A|#{Regexp.quote(DOT)})#{Regexp.quote(PREFIX)}([^#{Regexp.quote(DOT)}]*)/o) {
+          length = PREFIX.length + $2.length
+          length > MAX_LABEL_LENGTH and
+            raise ArgumentError, "Encoded label is too long: #{length} characters"
           $1 + decode($2)
         }
       end

data/lib/domain_name/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 class DomainName
-  VERSION = '0.6.20260907'
+  VERSION = '0.7.20261007'
 end

data/lib/domain_name.rb

@@ -82,7 +82,7 @@ class DomainName
       raise ArgumentError, "domain name must not start with a dot: #{hostname}"
     end
     case hostname
-    when /\A([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)\z/
+    when /\A([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)\.?\z/
       @ipaddr = IPAddr.new($1)
       @uri_host = @hostname = @ipaddr.to_s
       @domain = @tld = nil
@@ -171,12 +171,20 @@ class DomainName
   end
 
   def ==(other)
-    other = DomainName.new(other) unless DomainName === other
+    unless DomainName === other
+      other = String.try_convert(other)
+      return false unless other
+      other = DomainName.new(other)
+    end
     other.hostname == @hostname
   end
 
   def <=>(other)
-    other = DomainName.new(other) unless DomainName === other
+    unless DomainName === other
+      other = String.try_convert(other)
+      return nil unless other
+      other = DomainName.new(other)
+    end
     othername = other.hostname
     if othername == @hostname
       0

data/test/test_domain_name-punycode.rb

@@ -96,4 +96,36 @@ class TestDomainName < Test::Unit::TestCase
       assert_equal cps.pack('U*').unicode_normalize(:nfc), DomainName::Punycode.decode(punycode), title
     }
   end
+
+  test "limit the length of encoded labels in a hostname" do
+    longest = 'a' * 55 + "ü"
+    encoded = 'xn--' + 'a' * 55 + '-8yf'
+    assert_equal 63, encoded.length
+    assert_equal "#{encoded}.com", DomainName::Punycode.encode_hostname("#{longest}.com")
+    assert_equal "#{longest}.com", DomainName::Punycode.decode_hostname("#{encoded}.com")
+
+    assert_raises(DomainName::Punycode::ArgumentError) {
+      DomainName::Punycode.encode_hostname("a#{longest}.com")
+    }
+    assert_raises(DomainName::Punycode::ArgumentError) {
+      DomainName::Punycode.decode_hostname("xn--a#{encoded[4..-1]}.com")
+    }
+
+    ascii = 'a' * 64
+    assert_equal "#{ascii}.com", DomainName::Punycode.encode_hostname("#{ascii}.com")
+    assert_equal "#{ascii}.com", DomainName::Punycode.decode_hostname("#{ascii}.com")
+  end
+
+  test "reject long labels before encoding or decoding them" do
+    unicode = (0x4E00...0x4E00 + 10_000).to_a.pack('U*')
+    assert_raises(DomainName::Punycode::ArgumentError) {
+      DomainName::Punycode.encode_hostname("#{unicode}.com")
+    }
+    assert_raise_kind_of(ArgumentError) { DomainName.new("#{unicode}.com") }
+
+    punycode = 'xn--' + '9' * 10_000
+    assert_raises(DomainName::Punycode::ArgumentError) {
+      DomainName::Punycode.decode_hostname("#{punycode}.com")
+    }
+  end
 end

data/test/test_domain_name.rb

@@ -184,6 +184,24 @@ class TestDomainName < Test::Unit::TestCase
     }
   end
 
+  test "compare with objects that are not strings" do
+    dn = DomainName('foo.com')
+    [nil, 1, :'foo.com', Object.new].each { |other|
+      assert_equal(false, dn == other)
+      assert_equal(true,  dn != other)
+      assert_equal(nil,   dn <=> other)
+      assert_equal(nil,   dn <   other)
+      assert_equal(nil,   dn >=  other)
+    }
+
+    str = Object.new
+    def str.to_str
+      'www.foo.com'
+    end
+    assert_equal(false, dn == str)
+    assert_equal(1,     dn <=> str)
+  end
+
   test "check cookie domain correctly" do
     {
       'com' => [
@@ -272,6 +290,13 @@ class TestDomainName < Test::Unit::TestCase
     assert_equal(false, dn.cookie_domain?('168.10.20'))
     assert_equal(false, dn.cookie_domain?('20'))
     assert_equal(nil, dn.superdomain)
+
+    dn = DomainName("#{a}.")
+    assert_equal(a, dn.hostname)
+    assert_equal(true, dn.ipaddr?)
+    assert_equal(nil, dn.domain)
+    assert_equal(true, dn.cookie_domain?(a))
+    assert_equal(false, dn.cookie_domain?('10.20'))
   end
 
   test "parse IPv6 addresseses" do

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: domain_name
 version: !ruby/object:Gem::Version
-  version: 0.6.20260907
+  version: 0.7.20261007
 platform: ruby
 authors:
 - Akinori MUSHA