erb 6.0.2-java → 6.0.4-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4637930a7467c1119aa688421e6e5e27ae740509da3bfd9ea10fcb7149f86587
-  data.tar.gz: d0447e52a8e7a1487418a2be2de6d64de17c656dad647595543d951de1444fda
+  metadata.gz: 20c0647f3c42b33fcc85c6db69720a9b042f1ad5273c2a38b7ea8260016359eb
+  data.tar.gz: b9d6d76adca7f3ea81654ef41a43ed27523c382e671e5019ced076c5c148e1b8
 SHA512:
-  metadata.gz: 5f7e12facd027c5eb69de14c33f4a45c1ff5bd112898e597595fe6bc74947d207a8cb0db60ac64265fb28536790f20d6e60005afcd0264590bbf282ba53714f6
-  data.tar.gz: a8075c4f70eb6e9993431b2913998681ea31c54cc56e14f25299b158abe072a43a41cc2657795b628c34afa4976afac520a12f2cee47d957b9410871f1b08515
+  metadata.gz: 9378aa65ed0a61329056073905ace16709524c448c642edcd0fd8a1ea52f71156e668dd98aea0b4f3c45f9beebc0d6edc2ed74e1127fcf00b0213697949b9ff0
+  data.tar.gz: 38f01de19eead39446765c257095ba7616162d2f48c155134cc7dcdb6171ba3f23477dd32b8d12493c5c9050e92033c34c9ffd1fccb7c40aa4d0d0e2e4020cc9

data/NEWS.md

@@ -1,8 +1,16 @@
 # Changelog
 
+## 6.0.4
+
+* Prohibit `def_method` on marshal-loaded ERB instances
+
+## 6.0.3
+
+* Exclude some files from published gem https://github.com/ruby/erb/pull/108
+
 ## 6.0.2
 
-* Freeze `src` in `ERB#initialize` for Ractor compatibility
+* Freeze `src` in `ERB#initialize` for Ractor compatibility https://github.com/ruby/erb/pull/105
 
 ## 6.0.1
 

data/erb.gemspec

@@ -20,8 +20,8 @@ Gem::Specification.new do |spec|
   spec.metadata['source_code_uri'] = spec.homepage
   spec.metadata['changelog_uri'] = "https://github.com/ruby/erb/blob/v#{spec.version}/NEWS.md"
 
-  spec.files         = Dir.chdir(File.expand_path('..', __FILE__)) do
-    `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
+  spec.files = Dir.chdir(__dir__) do
+    `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|\.git|\.github)/}) }
   end
   spec.bindir        = 'libexec'
   spec.executables   = ['erb']

data/lib/erb/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 class ERB
   # The string \ERB version.
-  VERSION = '6.0.2'
+  VERSION = '6.0.4'
 end

data/lib/erb.rb

@@ -1087,6 +1087,9 @@ class ERB
   # ```
   #
   def def_method(mod, methodname, fname='(ERB)')
+    unless @_init.equal?(self.class.singleton_class)
+      raise ArgumentError, "not initialized"
+    end
     src = self.src.sub(/^(?!#|$)/) {"def #{methodname}\n"} << "\nend\n"
     mod.module_eval do
       eval(src, binding, fname, -1)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: erb
 version: !ruby/object:Gem::Version
-  version: 6.0.2
+  version: 6.0.4
 platform: java
 authors:
 - Masatoshi SEKI
@@ -20,12 +20,6 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".document"
-- ".github/dependabot.yml"
-- ".github/release.yml"
-- ".github/workflows/dependabot_automerge.yml"
-- ".github/workflows/push-gem.yml"
-- ".github/workflows/sync-ruby.yml"
-- ".github/workflows/test.yml"
 - ".gitignore"
 - ".rdoc_options"
 - BSDL
@@ -55,7 +49,7 @@ licenses:
 metadata:
   homepage_uri: https://github.com/ruby/erb
   source_code_uri: https://github.com/ruby/erb
-  changelog_uri: https://github.com/ruby/erb/blob/v6.0.2/NEWS.md
+  changelog_uri: https://github.com/ruby/erb/blob/v6.0.4/NEWS.md
 rdoc_options: []
 require_paths:
 - lib

data/.github/dependabot.yml

@@ -1,6 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: 'github-actions'
-    directory: '/'
-    schedule:
-      interval: 'monthly'

data/.github/release.yml

@@ -1,4 +0,0 @@
-changelog:
-  exclude:
-    labels:
-      - dependencies # Added by Dependabot

data/.github/workflows/dependabot_automerge.yml

@@ -1,30 +0,0 @@
-name: Dependabot auto-merge
-on:
-  pull_request:
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  automerge:
-    runs-on: ubuntu-latest
-    if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'ruby/erb'
-    steps:
-      - name: Dependabot metadata
-        uses: dependabot/fetch-metadata@v2
-        id: metadata
-
-      - name: Wait for status checks
-        uses: lewagon/wait-on-check-action@v1
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          ref: ${{ github.event.pull_request.head.sha || github.sha }}
-          check-regexp: 'build \(.*\)'
-          wait-interval: 30
-
-      - name: Auto-merge for Dependabot PRs
-        run: gh pr merge --auto --rebase "$PR_URL"
-        env:
-          PR_URL: ${{ github.event.pull_request.html_url }}
-          GITHUB_TOKEN: ${{ secrets.MATZBOT_DEPENDABOT_MERGE_TOKEN }}

data/.github/workflows/push-gem.yml

@@ -1,51 +0,0 @@
-name: Publish gem to rubygems.org
-
-on:
-  push:
-    tags:
-      - 'v*'
-
-permissions:
-  contents: read
-
-jobs:
-  push:
-    if: github.repository_owner == 'ruby'
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        ruby: [ruby, jruby]
-      fail-fast: false
-
-    environment:
-      name: rubygems.org
-      url: https://rubygems.org/gems/erb
-
-    permissions:
-      contents: write
-      id-token: write
-
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
-        with:
-          egress-policy: audit
-
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
-
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@d5126b9b3579e429dd52e51e68624dda2e05be25 # v1.267.0
-        with:
-          bundler-cache: true
-          ruby-version: ${{ matrix.ruby }}
-
-      - name: Publish to RubyGems
-        uses: rubygems/release-gem@1c162a739e8b4cb21a676e97b087e8268d8fc40b # v1.1.2
-
-      - name: Create GitHub release
-        run: |
-          tag_name="$(git describe --tags --abbrev=0)"
-          gh release create "${tag_name}" --verify-tag --generate-notes
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        if: ${{ matrix.ruby == 'ruby' }}

data/.github/workflows/sync-ruby.yml

@@ -1,33 +0,0 @@
-name: Sync ruby
-on:
-  push:
-    branches: [master]
-jobs:
-  sync:
-    name: Sync ruby
-    runs-on: ubuntu-latest
-    if: ${{ github.repository_owner == 'ruby' }}
-    steps:
-      - uses: actions/checkout@v6
-
-      - name: Create GitHub App token
-        id: app-token
-        uses: actions/create-github-app-token@v2
-        with:
-          app-id: 2060836
-          private-key: ${{ secrets.RUBY_SYNC_DEFAULT_GEMS_PRIVATE_KEY }}
-          owner: ruby
-          repositories: ruby
-
-      - name: Sync to ruby/ruby
-        uses: convictional/trigger-workflow-and-wait@v1.6.5
-        with:
-          owner: ruby
-          repo: ruby
-          workflow_file_name: sync_default_gems.yml
-          github_token: ${{ steps.app-token.outputs.token }}
-          ref: master
-          client_payload: |
-            {"gem":"${{ github.event.repository.name }}","before":"${{ github.event.before }}","after":"${{ github.event.after }}"}
-          propagate_failure: true
-          wait_interval: 10

data/.github/workflows/test.yml

@@ -1,36 +0,0 @@
-name: test
-
-on:
-  push:
-    branches: [master]
-  pull_request:
-  workflow_dispatch:
-
-jobs:
-  ruby-versions:
-    uses: ruby/actions/.github/workflows/ruby_versions.yml@master
-    with:
-      engine: cruby
-      versions: '["jruby", "truffleruby-head"]'
-
-  test:
-    needs: ruby-versions
-    name: build (${{ matrix.ruby }} / ${{ matrix.os }})
-    strategy:
-      matrix:
-        ruby: ${{ fromJson(needs.ruby-versions.outputs.versions) }}
-        os: [ubuntu-latest]
-      fail-fast: false
-    runs-on: ${{ matrix.os }}
-    steps:
-    - uses: actions/checkout@v6
-    - name: Set up Ruby
-      uses: ruby/setup-ruby@v1
-      with:
-        ruby-version: ${{ matrix.ruby }}
-        bundler-cache: true
-    - name: Run test
-      run: bundle exec rake test
-    - name: RDoc coverage
-      run: |
-        rdoc -C --visibility=private .