nesta 0.17.0 → 0.18.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 32a4c40ea41ed81170227708f4fa21efd9ecdc78b13aae276a28b71f70edbb8b
-  data.tar.gz: 7b437529392e034f4f2c9fe7b6df915faae5a284958ebd181aabb71462279106
+  metadata.gz: 12864a6defdd473b703fe553e3693bf1f697054ac2765fd7f22464f6525e5867
+  data.tar.gz: 1a3bfcb203d9862a10ef9691286187ef2c91f3c880bd56bea99f8f34ab0f83a4
 SHA512:
-  metadata.gz: 51d4278434f049e7d2c67107a947960c1407bdf4b1c133da575e5f4a829f7a25d1d0c4ef16dac399ffbc25b1fa708b8f2b7787b7a9a6171f9dd60414522a7c08
-  data.tar.gz: 791f6ea80a7b87b915548d6ee6688ff3eeb187bce03a77bf7fb6811645712f285880be77c763f1b947efc06f0eb5cdf1ed6b8734b9aa411f0e75a491d0c9ed76
+  metadata.gz: ee6c78cb3046d5f93eb2dacb76107e173a51ad18d422e6195691a3fab70eac946704d984b0262febaaa69c688af761805678d67c9eedff60e992f3f56ce9c9c7
+  data.tar.gz: c410d3cdb2504abbd3d55b83a2799638a12d7806db20798ef00813d5fe630750f5ea74828d3b457c719fd2db822d284e3270351834a070aaf14400c1db44dfd1

data/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.18.0 (19 November 2024)
+
+* Update Sinatra to 4.1, to fix a vulnerability.
+
+  Note that this is the same security alert that I believed I was fixing when I
+  released Nesta 0.17.0. In actual fact, at that point the latest version of
+  Sinatra (4.0.0) didn't yet include a fix.
+
+  (Graham Ashton)
+
 ## 0.17.0 (6 November 2024)
 
  * Update Sinatra to verion 4.0, to fix a vulnerability. This has also

data/Gemfile

@@ -2,5 +2,3 @@ source 'https://rubygems.org'
 
 # Specify your gem's dependencies in nesta.gemspec
 gemspec
-
-# gem (RUBY_VERSION =~ /^1/) ? 'debugger' : 'byebug'

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    nesta (0.17.0)
+    nesta (0.18.0)
       RedCloth (~> 4.2)
       haml (>= 3.1, < 6.0)
       haml-contrib (>= 1.0)
@@ -44,6 +44,7 @@ GEM
       rb-fsevent (>= 0.9.3)
       rb-inotify (>= 0.9)
       rb-kqueue (>= 0.2)
+    logger (1.6.1)
     mini_mime (1.1.5)
     mini_portile2 (2.8.7)
     minitest (5.25.1)
@@ -65,8 +66,9 @@ GEM
     public_suffix (6.0.1)
     racc (1.8.1)
     rack (3.1.8)
-    rack-protection (4.0.0)
+    rack-protection (4.1.0)
       base64 (>= 0.1.0)
+      logger (>= 1.6.0)
       rack (>= 3.0.0, < 4)
     rack-session (2.0.0)
       rack (>= 3.0.0)
@@ -85,10 +87,11 @@ GEM
     sass-embedded (1.80.6)
       google-protobuf (~> 4.28)
       rake (>= 13)
-    sinatra (4.0.0)
+    sinatra (4.1.0)
+      logger (>= 1.6.0)
       mustermann (~> 3.0)
       rack (>= 3.0.0, < 4)
-      rack-protection (= 4.0.0)
+      rack-protection (= 4.1.0)
       rack-session (>= 2.0.0, < 3)
       tilt (~> 2.0)
     temple (0.10.3)

data/lib/nesta/static/site.rb

@@ -61,8 +61,8 @@ module Nesta
 
       def set_app_root
         root = ::File.expand_path('.')
-        ['Gemfile', ].each do |expected|
-          if ! File.exist?(File.join(root, 'config', 'config.yml'))
+        ['Gemfile', File.join('config', 'config.yml')].each do |expected|
+          if ! File.exist?(File.join(root, expected))
             message = "is this a Nesta site? (expected './#{expected}')"
             raise RuntimeError, message
           end

data/lib/nesta/version.rb

@@ -1,3 +1,3 @@
 module Nesta
-  VERSION = '0.17.0'
+  VERSION = '0.18.0'
 end

data/templates/Gemfile

@@ -1,4 +1,4 @@
-source 'http://rubygems.org'
+source 'https://rubygems.org'
 
 gem 'nesta'
 <% if @options['vlad'] %>gem 'vlad', '2.1.0'
@@ -7,5 +7,3 @@ gem 'vlad-git', '2.2.0'<% end %>
 group :development do
   gem 'mr-sparkle'
 end
-
-# gem 'debugger'

data/test/support/temporary_files.rb

@@ -1,3 +1,5 @@
+require 'fileutils'
+
 module TemporaryFiles
   TEMP_DIR = File.expand_path('tmp', File.join(File.dirname(__FILE__), '..'))
 
@@ -21,7 +23,8 @@ module TemporaryFiles
 
   def in_temporary_project(*args, &block)
     FileUtils.mkdir_p(File.join(project_root, 'config'))
-    File.open(File.join(project_root, 'config', 'config.yml'), 'w').close
+    FileUtils.touch(File.join(project_root, 'Gemfile'))
+    FileUtils.touch(File.join(project_root, 'config', 'config.yml'))
     Dir.chdir(project_root) { yield project_root }
   ensure
     remove_temp_directory

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: nesta
 version: !ruby/object:Gem::Version
-  version: 0.17.0
+  version: 0.18.0
 platform: ruby
 authors:
 - Graham Ashton
-autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-11-06 00:00:00.000000000 Z
+date: 2024-11-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: haml
@@ -354,7 +353,6 @@ files:
 homepage: https://nestacms.com
 licenses: []
 metadata: {}
-post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -369,8 +367,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.20
-signing_key: 
+rubygems_version: 3.6.0.dev
 specification_version: 4
 summary: Ruby CMS, written in Sinatra
 test_files: []