erb 6.0.0 → 6.0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 24e8a0ab298d9b248a5bd3080947f0c8096291df4c8448dc8863dfd9a9e6f7a2
-  data.tar.gz: c55db78471a7a43d8c0c570de76f43c74a082bbd51f6f47e6640444253244e11
+  metadata.gz: 699fa4b868078fb1f1c665a30fc39e8eb25f169a62cb49620a5443dd6e213fa4
+  data.tar.gz: 472de54777fb648fdee981930424f848fb025495c51284a26bbba0c6b451f43b
 SHA512:
-  metadata.gz: fe73982eda100d4da4a2051d06ee8d76d08d71006e148405a23f4a836256c2b67d0821f97abf0bc89d4852c403c5637bc41482f0c8ecc25ece504cadefa96909
-  data.tar.gz: 3f96a3426744e4f6b69d9ae774a5c51ad1d79141d5e6b2182c9a4bc6a5cb3f66398347be67a265b110c1a8e6fffedd66094245b5a8b3802abc223db3695d5ed6
+  metadata.gz: 3be7d825296a080b39e00cfb05c450c696194a8e7e6c4cd9d130c65811facf237949020822e1c62f4c15e168c1473510104cb9b33f3256c7cb0faf5634e583cc
+  data.tar.gz: 34bb56cc547cc8c4bd4aa38b339b7f9a19a9d5c1d2256c3726fe3b7541af8af3a9bd7cf938071311777594eaa49c7d8e7a872fa1839624350bbc66f94438df65

data/.github/workflows/push-gem.yml

@@ -27,11 +27,11 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
 
       - name: Set up Ruby
         uses: ruby/setup-ruby@d5126b9b3579e429dd52e51e68624dda2e05be25 # v1.267.0

data/.github/workflows/sync-ruby.yml

@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.repository_owner == 'ruby' }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Create GitHub App token
         id: app-token

data/.github/workflows/test.yml

@@ -23,7 +23,7 @@ jobs:
       fail-fast: false
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - name: Set up Ruby
       uses: ruby/setup-ruby@v1
       with:

data/NEWS.md

@@ -1,4 +1,12 @@
-# Change Lo
+# Changelog
+
+## 6.0.1.1
+
+* Prohibit `def_method` on marshal-loaded ERB instances
+
+## 6.0.1
+
+* Freeze `ERB::Compiler::TrimScanner::ERB_STAG` for Ractor compatibility
 
 ## 6.0.0
 

data/lib/erb/compiler.rb

@@ -225,7 +225,7 @@ class ERB::Compiler # :nodoc:
       end
     end
 
-    ERB_STAG = %w(<%= <%# <%)
+    ERB_STAG = %w(<%= <%# <%).freeze
     def is_erb_stag?(s)
       ERB_STAG.member?(s)
     end

data/lib/erb/util.rb

@@ -9,7 +9,7 @@
 require 'cgi/escape'
 
 # Load or define ERB::Escape#html_escape.
-# We don't build the C extention 'cgi/escape' for JRuby, TruffleRuby, and WASM.
+# We don't build the C extension 'cgi/escape' for JRuby, TruffleRuby, and WASM.
 # miniruby (used by CRuby build scripts) also fails to load erb/escape.so.
 begin
   require 'erb/escape'

data/lib/erb/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 class ERB
   # The string \ERB version.
-  VERSION = '6.0.0'
+  VERSION = '6.0.1.1'
 end

data/lib/erb.rb

@@ -1086,6 +1086,9 @@ class ERB
   # ```
   #
   def def_method(mod, methodname, fname='(ERB)')
+    unless @_init.equal?(self.class.singleton_class)
+      raise ArgumentError, "not initialized"
+    end
     src = self.src.sub(/^(?!#|$)/) {"def #{methodname}\n"} << "\nend\n"
     mod.module_eval do
       eval(src, binding, fname, -1)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: erb
 version: !ruby/object:Gem::Version
-  version: 6.0.0
+  version: 6.0.1.1
 platform: ruby
 authors:
 - Masatoshi SEKI
@@ -55,7 +55,7 @@ licenses:
 metadata:
   homepage_uri: https://github.com/ruby/erb
   source_code_uri: https://github.com/ruby/erb
-  changelog_uri: https://github.com/ruby/erb/blob/v6.0.0/NEWS.md
+  changelog_uri: https://github.com/ruby/erb/blob/v6.0.1.1/NEWS.md
 rdoc_options: []
 require_paths:
 - lib