kabosu 0.6.11.3-x86_64-linux → 0.6.11.4-x86_64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6c7a3e920238fcea4e26f16ebbdb2c133ec3ac0a93f20c1b2e622a301efc04bb
-  data.tar.gz: e7a38a4d705a4891157f6b45909813eca3456d452f28ab5929b63b16b1db2602
+  metadata.gz: 35471381b6629c0d31472aacae162470842a8156c2391b2b1ccb2861685189e0
+  data.tar.gz: 5382f364f3eae050ecff3d11eabeb949307d7da5e029cc7e886fd46ea8978dd3
 SHA512:
-  metadata.gz: 70ada36b1c9d22b027d24df8c0e630ac2a843f18604af66adc2d03f98fbcdc4a9223bd09cbfbce03e4024225809500fa5911a9d76aedf66bbc502cf9c9a4cfb0
-  data.tar.gz: 49e631281970c008e1eae4a03a0f677976da9c5b2a3a7f174ba5b7b9c3b9b56ef6872cebb69bac419580d0ef6158a2237adab25fa4c7abdba5fcd07277c5c6cd
+  metadata.gz: 9e3f125d078556fb0333f9e2b7c8ac83a37b71fe1b8666dfd89824b12711cb94c09e70ac75d9cb88d2705390663ab53b9f172532d16222be0035d36cb1bcef4a
+  data.tar.gz: 95a24438309c088ff6ad2d8fc872e50ec7223486cad81ad4fe3fa09c87d2910899c0697977f7a3a5594da2700c87af8e10ce126549d2a686d834191a38228174

data/lib/kabosu/dict_manager.rb

@@ -58,19 +58,17 @@ module Kabosu
       raise DownloadError, "No downloadable assets for #{version}/#{edition}" if sources.empty?
 
       sources.each do |source|
-        begin
-          download(source.fetch(:url), source.fetch(:archive_path))
-          extract(source.fetch(:archive_path), dest_dir, edition: edition)
-          FileUtils.rm_f(source.fetch(:archive_path))
-          break
-        rescue DownloadError => e
-          FileUtils.rm_f(source.fetch(:archive_path)) if File.exist?(source.fetch(:archive_path))
-          # Try the next candidate (e.g. wheel if the zip 404s). If this was
-          # the last one, surface the original error.
-          raise if sources.last.equal?(source)
-
-          warn "  falling back: #{e.message}"
-        end
+        download(source.fetch(:url), source.fetch(:archive_path))
+        extract(source.fetch(:archive_path), dest_dir, edition: edition)
+        FileUtils.rm_f(source.fetch(:archive_path))
+        break
+      rescue DownloadError => e
+        FileUtils.rm_f(source.fetch(:archive_path))
+        # Try the next candidate (e.g. wheel if the zip 404s). If this was
+        # the last one, surface the original error.
+        raise if sources.last.equal?(source)
+
+        warn "  falling back: #{e.message}"
       end
 
       raise DownloadError, "Expected #{dic_path} after extraction, but file not found" unless File.exist?(dic_path)
@@ -214,7 +212,8 @@ module Kabosu
     def pick_release_sources(version, edition)
       candidates = []
       zip = release_asset_url(version, edition)
-      candidates << { url: zip, archive_path: File.join(@dir, "sudachi-dictionary-#{version}-#{edition}.zip"), format: :zip }
+      candidates << { url: zip, archive_path: File.join(@dir, "sudachi-dictionary-#{version}-#{edition}.zip"),
+                      format: :zip }
 
       begin
         release = fetch_release(version)
@@ -337,14 +336,8 @@ module Kabosu
 
           next if entry.directory?
 
-          target = File.join(dest_dir, target_name)
-          # Guard against zip-slip — refuse entries that escape dest_dir.
-          unless File.expand_path(target).start_with?(File.expand_path(dest_dir) + File::SEPARATOR)
-            raise DownloadError, "Refusing to extract entry outside dest_dir: #{entry.name}"
-          end
-
           FileUtils.mkdir_p(dest_dir)
-          entry.extract(target) { true } # overwrite existing
+          entry.extract(target_name, destination_directory: dest_dir) { true }
         end
       end
     rescue Zip::Error => e

data/lib/kabosu/version.rb

@@ -1,3 +1,3 @@
 module Kabosu
-  VERSION = "0.6.11.3".freeze
+  VERSION = "0.6.11.4".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kabosu
 version: !ruby/object:Gem::Version
-  version: 0.6.11.3
+  version: 0.6.11.4
 platform: x86_64-linux
 authors:
 - davafons
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-08-20 00:00:00.000000000 Z
+date: 2026-09-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rubyzip
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.3'
+        version: '3.4'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.3'
+        version: '3.4'
 - !ruby/object:Gem::Dependency
   name: benchmark
   requirement: !ruby/object:Gem::Requirement