ohloh_scm 4.0.4 → 4.0.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8a2809f103f847130e35e67a70e1d8faf67a411a1fa94833bdb31c96bc771333
-  data.tar.gz: 180fdb5edbb2bfee8ce634aa00a8ea870c4c079f9680eabe2eb99c10a8bf9c2e
+  metadata.gz: 9173a903d32cdd9d100594a9077f7528d473a8cb9c7f1dcf7172745184f2f2f0
+  data.tar.gz: d6b967d7648cb2bdbc5c594d8c119c8f533d945b3b608aaef87bd2f4b8c67322
 SHA512:
-  metadata.gz: 80f56ed86d0187d93893d69125369a822f09fa3635d7e386639bfb4d114ce326dad5b0cfd489e38d6cc57feee717dffd78d658cee70bfe11f4fce5944a4d5fd4
-  data.tar.gz: 95828cac55d0d3ed5e57e7b3b067e94bdfab59f3f9365f6f3cd95dfbd622ddb020002ffba8c7652c2120a91630312a5dee21d07e8b3b71a36a7419d59b2996b4
+  metadata.gz: 904efa77cf2a35d8de044afc5c8fb16f9266465e8d4fdf04ef403ccc093983a16fb76b0a40791f6033c4e767c2c598df0c79dfcb15f33e29e6fee4d00a3f9a6d
+  data.tar.gz: cd232f7a7bff3c4384160e04952cddf0ac54680d34c4e84ad44bc7874be6cec4d42d5007a8d41513a1e54afb1c3a1b9be8b32b021e76308b2a3992a8712ea7b4

data/lib/ohloh_scm/cvs/validation.rb

@@ -17,8 +17,8 @@ module OhlohScm
       def branch_name_errors
         if scm.branch_name.to_s.empty?
           [:branch_name, "The branch name can't be blank."]
-        elsif scm.branch_name.length > 120
-          [:branch_name, 'The branch name must not be longer than 120 characters.']
+        elsif scm.branch_name.length > 200
+          [:branch_name, 'The branch name must not be longer than 200 characters.']
         elsif !scm.branch_name.match?(/^[\w\-\+\.\/\ ]+$/)
           [:branch_name, "The branch name may contain only letters,
           numbers, spaces, and the special characters '_', '-', '+', '/', and '.'"]

data/lib/ohloh_scm/validation.rb

@@ -37,8 +37,8 @@ module OhlohScm
     def url_errors
       error = if scm.url.nil? || scm.url.empty?
                 "The URL can't be blank."
-              elsif scm.url.length > 120
-                'The URL must not be longer than 120 characters.'
+              elsif scm.url.length > 200
+                'The URL must not be longer than 200 characters.'
               elsif !scm.url.match?(public_url_regex)
                 'The URL does not appear to be a valid server connection string.'
               end

data/lib/ohloh_scm/version.rb

@@ -2,7 +2,7 @@
 
 module OhlohScm
   module Version
-    STRING = '4.0.4'
+    STRING = '4.0.5'
     GIT = '2.34.1'
     SVN = '1.14.1'
     CVSNT = '1.12.13'

data/security.md

@@ -0,0 +1,30 @@
+## Security
+The Black Duck Vulnerability Disclosure Process is executed by the Product Security Incident Response Team (PSIRT). The Black Duck process is based on well-known industry standards, such as NIST-SP-800-61, ISO 29147, and ISO 30111. 
+
+The Black Duck PSIRT coordinates the response and, if necessary, disclosure of security incidents related to Black Duck products and associated software. Black Duck PSIRT's primary objective is to minimize the risks associated with security incidents in a timely, secure, and responsible manner.
+
+Black Duck will investigate all reports for Black Duck products/platforms that are currently supported; accepted reports will be prioritized based on severity and other environmental factors. 
+
+If you believe you have found a security vulnerability in any repository that meets Black duck's definition of a security vulnerability, please report it to us as described below.
+
+## Reporting Security Issues
+**Please do not report security vulnerabilities through public GitHub issues.**
+
+Instead, please report them to the Black Duck  PSIRT team through email psirt@blackduck.com.
+
+Contact Black Duck within 24 hours if you encounter any end user data. Do not view, alter, save, store, transfer, or otherwise access the data, and immediately purge any local information upon reporting the vulnerability to Black Duck.
+
+Please include the requested information listed below (as much as you can provide) to help us better understand the nature and scope of the possible issue:
+
+- Affected Product/Platform and Version
+- Technical description of the issue 
+- Detailed steps to reproduce and/or sample code used to exploit the vulnerability 
+- Contact information and optional name for acknowledgments
+- Proposed disclosure plans 
+This information will help us triage your report more quickly.
+
+## Preferred Languages
+We prefer all communications to be in English.
+
+## Policy
+Black Duck follows the principle of [Coordinated Vulnerability Disclosure.](https://www.blackduck.com/company/legal/vulnerability-disclosure-policy.html)

data/spec/ohloh_scm/cvs/validation_spec.rb

@@ -12,7 +12,7 @@ describe 'Cvs::Validation' do
 
   it 'must have errors for invalid branch_name' do
     get_core(:cvs, branch_name: 'x' * 81).validation.send(:branch_name_errors).must_be_nil
-    get_core(:cvs, branch_name: 'x' * 121).validation.send(:branch_name_errors).wont_be :empty?
+    get_core(:cvs, branch_name: 'x' * 201).validation.send(:branch_name_errors).wont_be :empty?
     get_core(:cvs, branch_name: 'foo@bar').validation.send(:branch_name_errors).wont_be :empty?
   end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ohloh_scm
 version: !ruby/object:Gem::Version
-  version: 4.0.4
+  version: 4.0.5
 platform: ruby
 authors:
 - OpenHub Team at Synopsys
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-10-17 00:00:00.000000000 Z
+date: 2025-03-03 00:00:00.000000000 Z
 dependencies: []
 description: |-
   The OpenHub source control management library for \
@@ -97,6 +97,7 @@ files:
 - lib/ohloh_scm/validation.rb
 - lib/ohloh_scm/version.rb
 - ohloh_scm.gemspec
+- security.md
 - spec/.rubocop.yml
 - spec/benchmarks/hg_bzr_bash_vs_py_api.rb
 - spec/benchmarks/process_spawn_benchmark.rb
@@ -192,8 +193,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3.1
-signing_key: 
+rubygems_version: 3.0.9
+signing_key:
 specification_version: 4
 summary: Source Control Management
 test_files: