kabosu 0.6.11.3 → 0.6.11.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ab7b76c6ec8d607faa407a7c2b8a803ea1835e99f00fcac4f657e1f29305c409
-  data.tar.gz: 80c80b241e18ee83cd4c88b9572d8da3189c6312dd537d2837a9c2121f341fbb
+  metadata.gz: 0cbde067dd87473e8d0526d3ceedc5f3ee53632baeef69fd0590d66472cb917c
+  data.tar.gz: 6870b870af4882efd7a781d1d71e7b108a336d4f9e8af694a6cec0b83904ea73
 SHA512:
-  metadata.gz: 85956d6876d3e3884f5f68bff7661306d9cf9ae109fb26b6a3241c1ecbd9c4f2220e95adfdb77d5642a9ae8607b903c4206c20db772cd274056fbca90a8f2769
-  data.tar.gz: 36c5772e7c17991e2b55125df66dfece3b06c5b4f93044a690c867d9321d97f4e73ad8088e9bc9e276416f9bd58cd19bead5ce6dc67eecf6c47072e07ab49d5e
+  metadata.gz: e52d39934b001d31e4957d0399ea73fe3459b6f63358a03d1bf699aa1345cfc302ee58d5f1fccefa2eb8b3482f1b9e9d64717f95232113660fea98764115b3bf
+  data.tar.gz: 31813b1a826f62a26a19d668690712b06067d67a9a409aa343b07c6b0e17340a06aff9e1f81ca5c76708ab7e909b44825d259d40ddd505212c0fa9bdccc00ab1

data/ext/kabosu/src/morpheme.rs

@@ -370,7 +370,11 @@ impl RbMorpheme {
     // morpheme on a real workload, so five of every six Strings this built were
     // a copy of one it had already built.
     pub(crate) fn dictionary_form(ruby: &Ruby, rb_self: &Self) -> RString {
-        frozen_string(ruby, &rb_self.dictionary_form_cache, &rb_self.data.dictionary_form)
+        frozen_string(
+            ruby,
+            &rb_self.dictionary_form_cache,
+            &rb_self.data.dictionary_form,
+        )
     }
 
     pub(crate) fn normalized_form(&self) -> &str {

data/lib/kabosu/dict_manager.rb

@@ -58,19 +58,17 @@ module Kabosu
       raise DownloadError, "No downloadable assets for #{version}/#{edition}" if sources.empty?
 
       sources.each do |source|
-        begin
-          download(source.fetch(:url), source.fetch(:archive_path))
-          extract(source.fetch(:archive_path), dest_dir, edition: edition)
-          FileUtils.rm_f(source.fetch(:archive_path))
-          break
-        rescue DownloadError => e
-          FileUtils.rm_f(source.fetch(:archive_path)) if File.exist?(source.fetch(:archive_path))
-          # Try the next candidate (e.g. wheel if the zip 404s). If this was
-          # the last one, surface the original error.
-          raise if sources.last.equal?(source)
-
-          warn "  falling back: #{e.message}"
-        end
+        download(source.fetch(:url), source.fetch(:archive_path))
+        extract(source.fetch(:archive_path), dest_dir, edition: edition)
+        FileUtils.rm_f(source.fetch(:archive_path))
+        break
+      rescue DownloadError => e
+        FileUtils.rm_f(source.fetch(:archive_path))
+        # Try the next candidate (e.g. wheel if the zip 404s). If this was
+        # the last one, surface the original error.
+        raise if sources.last.equal?(source)
+
+        warn "  falling back: #{e.message}"
       end
 
       raise DownloadError, "Expected #{dic_path} after extraction, but file not found" unless File.exist?(dic_path)
@@ -214,7 +212,8 @@ module Kabosu
     def pick_release_sources(version, edition)
       candidates = []
       zip = release_asset_url(version, edition)
-      candidates << { url: zip, archive_path: File.join(@dir, "sudachi-dictionary-#{version}-#{edition}.zip"), format: :zip }
+      candidates << { url: zip, archive_path: File.join(@dir, "sudachi-dictionary-#{version}-#{edition}.zip"),
+                      format: :zip }
 
       begin
         release = fetch_release(version)
@@ -337,14 +336,8 @@ module Kabosu
 
           next if entry.directory?
 
-          target = File.join(dest_dir, target_name)
-          # Guard against zip-slip — refuse entries that escape dest_dir.
-          unless File.expand_path(target).start_with?(File.expand_path(dest_dir) + File::SEPARATOR)
-            raise DownloadError, "Refusing to extract entry outside dest_dir: #{entry.name}"
-          end
-
           FileUtils.mkdir_p(dest_dir)
-          entry.extract(target) { true } # overwrite existing
+          entry.extract(target_name, destination_directory: dest_dir) { true }
         end
       end
     rescue Zip::Error => e

data/lib/kabosu/version.rb

@@ -1,3 +1,3 @@
 module Kabosu
-  VERSION = "0.6.11.3".freeze
+  VERSION = "0.6.11.4".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kabosu
 version: !ruby/object:Gem::Version
-  version: 0.6.11.3
+  version: 0.6.11.4
 platform: ruby
 authors:
 - davafons
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-08-20 00:00:00.000000000 Z
+date: 2026-09-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rb_sys
@@ -30,14 +30,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.3'
+        version: '3.4'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.3'
+        version: '3.4'
 - !ruby/object:Gem::Dependency
   name: benchmark
   requirement: !ruby/object:Gem::Requirement