jekyll 1.1.1 → 1.1.2

checksums.yaml

@@ -1,15 +1,15 @@
 ---
 !binary "U0hBMQ==":
   metadata.gz: !binary |-
-    NGRlNDhiMDk4MGFjOWFhNmY5Y2E4NzdjM2I0ZTIyNmUxY2M2MDE5OA==
+    NzE0ZjEzYzM3ZGZhYmJjODMyZDNkYTUxNWY5ZThjMWVlM2M3NWI5Yg==
   data.tar.gz: !binary |-
-    OGYzMmMyNzk5YWZkMzFmOGZjZjNkN2M2ZmFlYzJjNzI3ODgzYTlkZA==
+    NGU1MDcwYjliYjlhMjNmMjk5ZTNkZTA2ODgxMmQ5Y2E3NGM3Y2Y5Yw==
 !binary "U0hBNTEy":
   metadata.gz: !binary |-
-    MTgwMDQ3YWYyZDUwMzgzM2RmYTZhNWVhNTE0YzNmMWIxMDg2ODU4Njk3YWQ3
-    ZWViYTIwYTVmYWY1OWNiYjQ2MDgwNTc3ZmY1YzVlNTI2M2ViYmYwYjU1ODIx
-    YzkwZmE2MTE4NDExYWU2YTE3Y2YyYTEyN2QxMWEzMTJmODI5Y2E=
+    N2Y5YmY5NDJjMGVhMGJkZDMyMmEyNWQ2ZGZlMzNlY2MxN2U1ZDY0NjVhY2U0
+    OGY4NjE1MmYwOWRlM2E1MTU1YmYyYWY3M2MwNGYwZmYyZTI5MDQ5OTdlMmQ5
+    OWVmMDQ0M2U5NDk1N2Y2ODEwODY5Y2I0MzkyNjdjNDE3NzBiNTg=
   data.tar.gz: !binary |-
-    ODMyZTI2ODUzNGU0NGE2NTI2ZDg2ZmNlNWIxNjZhNWIxNTE5Y2RjYmQ3ZmQ2
-    MGJkNDNmZGQyM2I0OGQyZDM3MzRjYjMxMTgyOGVlNjNmZjk1ZWUyMGVhYjAx
-    YjJkNTk5YTUwNDRjMjFlYWI1Y2I2NWU5ZWY4ZGE0YjEwMjE4MWY=
+    MzdkNjFjZjllNmI4NzIzMjJhNjU1MjY4ZjI4ZGIwNjU5Mjc4YzZjMDY1ODY1
+    M2QxMDIwYzkzNDY0M2Y2NWYwZDUxZDcyZGM0ZTNlNGQyMmU3ZDg4NmYwNzNl
+    ZmY5YTJlZWZlNmRiMjE4ZmEwZGZkYmU0NDMzNTFhYzRhNzM2ODY=

data/History.markdown

@@ -8,7 +8,10 @@
 
 ### Development Fixes
 
-### Site Enhancements
+## v1.1.2 / 2013-07-25
+
+### Bug Fixes
+  * Require Liquid 2.5.1 (#1349)
 
 ## v1.1.1 / 2013-07-24
 

data/jekyll.gemspec

@@ -4,9 +4,9 @@ Gem::Specification.new do |s|
   s.rubygems_version = '1.3.5'
 
   s.name              = 'jekyll'
-  s.version           = '1.1.1'
+  s.version           = '1.1.2'
   s.license           = 'MIT'
-  s.date              = '2013-07-24'
+  s.date              = '2013-07-25'
   s.rubyforge_project = 'jekyll'
 
   s.summary     = "A simple, blog aware, static site generator."
@@ -23,7 +23,7 @@ Gem::Specification.new do |s|
   s.rdoc_options = ["--charset=UTF-8"]
   s.extra_rdoc_files = %w[README.markdown LICENSE]
 
-  s.add_runtime_dependency('liquid', "~> 2.3")
+  s.add_runtime_dependency('liquid', "~> 2.5.1")
   s.add_runtime_dependency('classifier', "~> 1.3")
   s.add_runtime_dependency('directory_watcher', "~> 1.4.1")
   s.add_runtime_dependency('maruku', "~> 0.5")
@@ -142,6 +142,8 @@ Gem::Specification.new do |s|
     site/_posts/2013-06-07-jekyll-1-0-3-released.markdown
     site/_posts/2013-07-14-jekyll-1-1-0-released.markdown
     site/_posts/2013-07-24-jekyll-1-1-1-released.markdown
+    site/_posts/2013-07-25-jekyll-1-0-4-released.markdown
+    site/_posts/2013-07-25-jekyll-1-1-2-released.markdown
     site/css/gridism.css
     site/css/normalize.css
     site/css/pygments.css

data/lib/jekyll.rb

@@ -58,7 +58,7 @@ require_all 'jekyll/tags'
 SafeYAML::OPTIONS[:suppress_warnings] = true
 
 module Jekyll
-  VERSION = '1.1.1'
+  VERSION = '1.1.2'
 
   # Public: Generate a Jekyll configuration Hash by merging the default
   # options with anything in _config.yml, and adding the given options on top.

data/site/_posts/2013-07-25-jekyll-1-0-4-released.markdown

@@ -0,0 +1,20 @@
+---
+layout: news_item
+title: "Jekyll 1.0.4 Released"
+date: "2013-07-25 09:08:38 +0200"
+author: parkr
+version: 1.0.4
+categories: [release]
+---
+
+This version contains a [very important security patch][230] for `Liquid::Drop` plugins
+which granted access to all non-`Drop` entities within a `Drop`, which may include your
+Rack configuration settings and many more pieces of private information which could be
+used to exploit your system. We recommend you upgrade to v1.0.4 as quickly as possible if
+you use `Liquid::Drop` plugins in your site.
+
+Many thanks for [Ben Balter](http://github.com/benbalter) for alerting us to the problem
+and [submitting a patch][1349] so quickly.
+
+[230]: https://github.com/Shopify/liquid/pull/230
+[1349]: https://github.com/mojombo/jekyll/issues/1349

data/site/_posts/2013-07-25-jekyll-1-1-2-released.markdown

@@ -0,0 +1,20 @@
+---
+layout: news_item
+title: "Jekyll 1.1.2 Released"
+date: "2013-07-25 09:08:38 +0200"
+author: parkr
+version: 1.1.2
+categories: [release]
+---
+
+This version contains a [very important security patch][230] for `Liquid::Drop` plugins
+which granted access to all non-`Drop` entities within a `Drop`, which may include your
+Rack configuration settings and many more pieces of private information which could be
+used to exploit your system. We recommend you upgrade to v1.1.2 as quickly as possible if
+you use `Liquid::Drop` plugins in your site.
+
+Many thanks for [Ben Balter](http://github.com/benbalter) for alerting us to the problem
+and [submitting a patch][1349] so quickly.
+
+[230]: https://github.com/Shopify/liquid/pull/230
+[1349]: https://github.com/mojombo/jekyll/issues/1349

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jekyll
 version: !ruby/object:Gem::Version
-  version: 1.1.1
+  version: 1.1.2
 platform: ruby
 authors:
 - Tom Preston-Werner
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-07-24 00:00:00.000000000 Z
+date: 2013-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: liquid
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
-        version: '2.3'
+        version: 2.5.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
-        version: '2.3'
+        version: 2.5.1
 - !ruby/object:Gem::Dependency
   name: classifier
   requirement: !ruby/object:Gem::Requirement
@@ -426,6 +426,8 @@ files:
 - site/_posts/2013-06-07-jekyll-1-0-3-released.markdown
 - site/_posts/2013-07-14-jekyll-1-1-0-released.markdown
 - site/_posts/2013-07-24-jekyll-1-1-1-released.markdown
+- site/_posts/2013-07-25-jekyll-1-0-4-released.markdown
+- site/_posts/2013-07-25-jekyll-1-1-2-released.markdown
 - site/css/gridism.css
 - site/css/normalize.css
 - site/css/pygments.css