ndr_support 5.9.7 → 5.10.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 219d266e0a79fb3e013249e574aa25648ddecd15b49421cd66c06780d63f47e8
-  data.tar.gz: 48cdd5789a4aed8be6c03993eb4d1ce7ec6bf7e5225aea7e47f5e452c641d3d0
+  metadata.gz: '096f063918140b27d2136df336b1ce9cc749236002d62c0c3ac6ac383b5f2295'
+  data.tar.gz: eeb407d4d7fa47c7d803b03383da810fe7ba914569923e6f8888e580f492c208
 SHA512:
-  metadata.gz: 869d57040385f645aae2c5b1c8dcefe5c2fd2176a7f8aa71f2859764edc7d9e0553a76065a92d29f98e3e1eb2bf29c6f8c1f0ee289e3314c90e0e105112f1cd6
-  data.tar.gz: dc2263d789b440b4a153c086b7049b5983e512af444fbb7f469161967685bbe4e130e7a68e63e5e14e5f4e494804a049f662fbd973e6588dddbb3a6065452902
+  metadata.gz: 7dfffec2a85e3692e25b464ca232d1e42e4a783b5f23a6f08a3fcc0dc566ab8687b746b4fde6c206fc6f30b9e7ca674d8097b7e4b4def9928d174a19ff7fc760
+  data.tar.gz: 995d2de405da83acc432b42f3f551057537c648f3aded0d2f2625962a36069a9a37019c5fc6031880495a649389410534e30cc501a9b88df4cfd847001405e37

data/CHANGELOG.md

@@ -1,6 +1,18 @@
 ## [Unreleased]
 * No unreleased changes
 
+## 5.10.1 / 2024-01-04
+## Fixed
+* Add 2026 bank holidays
+* Allow YAML aliases when using `yaml_safe_classes`
+
+## 5.10.0 / 2023-11-17
+## Changed
+* Generate UTF-8 encoded YAML by default. Disable with `utf8_storage = false`
+* Use `YAML.safe_load` by default. Override with
+  `self.yaml_safe_classes = yaml_safe_classes + [Klass1, Klass2]` and revert to
+  unsafe loading with `yaml_safe_classes = :unsafe` and `gem 'psych', '< 4'`
+
 ## 5.9.7 / 2023-11-16
 ## Fixed
 * YAMLSupport should preserve escaped backslashes in YAML text

data/code_safety.yml

@@ -23,7 +23,7 @@ file safety:
   CHANGELOG.md:
     comments:
     reviewed_by: brian.shand
-    safe_revision: ead7b5fe38f4f580d5c4ca2697136acc8ef1bd8b
+    safe_revision: c764a4d8c251b5076ed3d60391c8271bb5a099bc
   CODE_OF_CONDUCT.md:
     comments:
     reviewed_by: timgentry
@@ -71,7 +71,7 @@ file safety:
   lib/ndr_support/concerns/working_days.rb:
     comments:
     reviewed_by: brian.shand
-    safe_revision: bac214f4c93d8753268825408fc560171fac91c0
+    safe_revision: 6fb8c080befbb9c741c2bc3a2fadb29fe1c3d0aa
   lib/ndr_support/date_and_time_extensions.rb:
     comments:
     reviewed_by: brian.shand
@@ -171,7 +171,7 @@ file safety:
   lib/ndr_support/version.rb:
     comments:
     reviewed_by: brian.shand
-    safe_revision: 9a91fe5935711475449aebbb6b93bd9f40884a77
+    safe_revision: 3a4b0a4acb1d6dfbfc79b17ee11577cb22ab8923
   lib/ndr_support/working_days.rb:
     comments:
     reviewed_by: josh.pencheon
@@ -179,7 +179,7 @@ file safety:
   lib/ndr_support/yaml/serialization_migration.rb:
     comments:
     reviewed_by: brian.shand
-    safe_revision: ead7b5fe38f4f580d5c4ca2697136acc8ef1bd8b
+    safe_revision: c764a4d8c251b5076ed3d60391c8271bb5a099bc
   ndr_support.gemspec:
     comments:
     reviewed_by: brian.shand
@@ -283,4 +283,4 @@ file safety:
   test/yaml/serialization_test.rb:
     comments:
     reviewed_by: brian.shand
-    safe_revision: ead7b5fe38f4f580d5c4ca2697136acc8ef1bd8b
+    safe_revision: c764a4d8c251b5076ed3d60391c8271bb5a099bc

data/lib/ndr_support/concerns/working_days.rb

@@ -136,6 +136,15 @@ module WorkingDays
     '2025-08-25', # Monday    - Summer bank holiday
     '2025-12-25', # Thursday  - Christmas Day
     '2025-12-26', # Friday    - Boxing Day
+    # 2026
+    '2026-01-01', # Thursday  - New Year’s Day
+    '2026-04-03', # Friday    - Good Friday
+    '2026-04-06', # Monday    - Easter Monday
+    '2026-05-04', # Monday    - Early May bank holiday
+    '2026-05-25', # Monday    - Spring bank holiday
+    '2026-08-31', # Monday    - Summer bank holiday
+    '2026-12-25', # Friday    - Christmas Day
+    '2026-12-28', # Monday    - Boxing Day
   ].map { |str| Date.parse(str) }
 
   def self.check_lookup

data/lib/ndr_support/version.rb

@@ -3,5 +3,5 @@
 # This defines the NdrSupport version. If you change it, rebuild and commit the gem.
 # Use "rake build" to build the gem, see rake -T for all bundler rake tasks.
 module NdrSupport
-  VERSION = '5.9.7'
+  VERSION = '5.10.1'
 end

data/lib/ndr_support/yaml/serialization_migration.rb

@@ -12,8 +12,29 @@ module NdrSupport
       # accepted by load_yaml
       YAML_SAFE_CLASSES = [Date, DateTime, Time, Symbol].freeze
 
+      # Set list of YAML safe classes, or :unsafe to use unsafe load
+      def yaml_safe_classes=(yaml_safe_classes)
+        @yaml_safe_classes = yaml_safe_classes
+      end
+
+      def yaml_safe_classes
+        @yaml_safe_classes || YAML_SAFE_CLASSES
+      end
+
+      # Allow emitted YAML to contain UTF-8 characters
+      # Defaults to true. (Defaulted to false in ndr_support versions < 6)
+      def utf8_storage=(utf8_storage)
+        @utf8_storage = utf8_storage
+      end
+
+      def utf8_storage
+        return @utf8_storage if @utf8_storage == false
+
+        true # New ndr_support default for versions >= 6, previously false
+      end
+
       # Wrapper around: YAML.load(string)
-      def load_yaml(string, coerce_invalid_chars = false)
+      def load_yaml(string, coerce_invalid_chars = false) # rubocop:disable Style/OptionalBooleanParameter
         fix_encoding!(string, coerce_invalid_chars)
 
         # Achieve same behaviour using `syck` and `psych`:
@@ -21,10 +42,12 @@ module NdrSupport
         fix_encoding!(string, coerce_invalid_chars)
 
         # TODO: Bump NdrSupport major version, and switch to safe_load by default
-        object = if Psych::VERSION.start_with?('3.')
+        object = if yaml_safe_classes == :unsafe
+                   raise(SecurityError, 'Unsafe YAML no longer supported') unless Psych::VERSION.start_with?('3.')
+
                    Psych.load(string)
                  else
-                   Psych.safe_load(string, permitted_classes: YAML_SAFE_CLASSES)
+                   Psych.safe_load(string, permitted_classes: yaml_safe_classes, aliases: true)
                  end
 
         # Ensure that any string related to the object
@@ -37,8 +60,10 @@ module NdrSupport
 
       # Wrapper around: YAML.dump(object)
       def dump_yaml(object)
-        # Psych produces UTF-8 encoded output; we'd rather
-        # have YAML that can be safely stored in stores with
+        return Psych.dump(object) if utf8_storage
+
+        # Psych produces UTF-8 encoded output; historically we
+        # preferred YAML that can be safely stored in stores with
         # other encodings. If #load_yaml is used, the binary
         # encoding of the object will be reversed on load.
         Psych.dump binary_encode_any_high_ascii(object)

data/test/yaml/serialization_test.rb

@@ -8,6 +8,14 @@ class SerializationTest < Minitest::Test
     assert_equal hash, load_yaml(dump_yaml(hash))
   end
 
+  test 'should support aliases correctly' do
+    x = { 'c' => 5 }
+    hash = { 'a' => x, 'b' => x }
+    hash_yaml = "---\na: &1\n  c: 5\nb: *1\n"
+    assert_equal hash, load_yaml(hash_yaml), 'Deserialising known YAML with an alias'
+    assert_equal hash, load_yaml(dump_yaml(hash)), 'Deserialising a structure with repeated objects'
+  end
+
   test 'should handle syck-encoded characters' do
     assert_syck_1_8_yaml_loads_correctly
   end
@@ -44,26 +52,60 @@ class SerializationTest < Minitest::Test
     assert_yaml_coercion_behaviour
   end
 
-  test 'dump_yaml should produce encoding-portable YAML' do
-    original_object = { :basic => 'manana', :complex => 'mañana' }
+  test 'dump_yaml with utf8_storage = false should produce encoding-portable YAML' do
+    self.utf8_storage = false
+    original_object = { basic: 'manana', complex: 'mañana' }
     yaml_produced   = dump_yaml(original_object)
     reloaded_object = load_yaml(yaml_produced)
 
-    assert yaml_produced =~ /basic: manana/, 'binary-encoded more than was necessary'
+    assert_match(/basic: manana/, yaml_produced, 'binary-encoded more than was necessary')
 
     refute yaml_produced.bytes.detect { |byte| byte > 127 }, 'yaml has high-ascii'
     assert reloaded_object.inspect.bytes.detect { |byte| byte > 127 }
     assert_equal original_object, reloaded_object
   end
 
-  test 'encoding-portable YAML should be loadable' do
-    original_object = { :basic => 'manana', :complex => 'mañana' }
+  test 'encoding-portable YAML with utf8_storage = false should be loadable' do
+    self.utf8_storage = false
+    original_object = { basic: 'manana', complex: 'mañana' }
+    yaml_produced   = dump_yaml(original_object)
+
+    assert_equal("---\n:basic: manana\n:complex: !binary |-\n  bWHDsWFuYQ==\n", yaml_produced)
+
+    reloaded_object = load_yaml(yaml_produced)
+    assert_equal original_object, reloaded_object
+  end
+
+  test 'non-encoding-portable YAML with utf8_storage = true should be loadable' do
+    self.utf8_storage = true
+    original_object = { basic: 'manana', complex: 'mañana' }
     yaml_produced   = dump_yaml(original_object)
+    assert_equal("---\n:basic: manana\n:complex: mañana\n", yaml_produced)
 
     reloaded_object = load_yaml(yaml_produced)
     assert_equal original_object, reloaded_object
   end
 
+  test 'yaml_safe_classes should filter which classes can be loaded' do
+    original_object = { basic: 'manana', complex: 'mañana' }
+    yaml_produced   = dump_yaml(original_object)
+    self.yaml_safe_classes = []
+    assert_raises Psych::DisallowedClass, 'Load should fail without Symbol in yaml_safe_classes' do
+      load_yaml(yaml_produced)
+    end
+
+    self.yaml_safe_classes = [Symbol]
+    reloaded_object = load_yaml(yaml_produced)
+    assert_equal original_object, reloaded_object, 'Safe reload with Symbol class specified'
+
+    if Psych::VERSION.start_with?('3.')
+      # Not supported with Ruby >= 3.1 unless you force psych version < 4
+      self.yaml_safe_classes = :unsafe
+      reloaded_object = load_yaml(yaml_produced)
+      assert_equal original_object, reloaded_object, 'Unsafe reload with Symbol class'
+    end
+  end
+
   test 'time-like objects should serialise correctly with psych' do
     assert_timey_wimey_stuff
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ndr_support
 version: !ruby/object:Gem::Version
-  version: 5.9.7
+  version: 5.10.1
 platform: ruby
 authors:
 - NCRS Development Team
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-11-16 00:00:00.000000000 Z
+date: 2024-01-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activerecord