passenger 6.0.19 → 6.0.20

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4d6c6aa2e5aebe46db8eaac696afa9aab27bc8d54f50bd220e465ab42bcf3791
-  data.tar.gz: c57f1e7ba334127a9a8f17c5b7e9ed44758b38ecac0d50b0fa1cb4132382b4db
+  metadata.gz: 31a05868dd215b1999d12f6b03d72af3ea92674ee44ad6b8c4ac04656ee3e45f
+  data.tar.gz: 7b827c29786d69c42544e9ffd1be1a9a22bb7a7c5c290c4f58a9a4c092352034
 SHA512:
-  metadata.gz: 3c778980e85efdc20b16d636607c4d1ec96684c523ce0a2e8d3a2b0199222412023b18c826bacb6744dedb9035fde1e82c3dc96fe9fdaa453c79c7b86c41746a
-  data.tar.gz: 1666e6ae1719c0ccf9a03e9ef05855054f433c7fe68b9c0fbc4b1485db313fc7d30ffe3d26fa6ee11b3420d6a1d85b4f4324cffcb5528512bcd9aaa1cb4cc220
+  metadata.gz: 0bfbb6358658b39082ddd04c56f6d9dcd8e3a1a8ea4309146d3c9fd0706fd936f60eb2cbedd4b4264e9a81a1723e3335ad4da746486eca41453ac5401e8bd5d7
+  data.tar.gz: ca7752ab7ddce1209e99f6e1a1c408d5c4363b821b3eb97c68cba9481ae8575ddebd46ab9e69f2e2fad182b4f4976f997ebdd17776280aaaa5ef2f0b04486c2e

data/CHANGELOG

@@ -1,10 +1,32 @@
-Release 6.0.19 (Not yet released)
+Release 6.0.20 (Not yet released)
+-------------
+ * Upgrades Boost from 1.81 -> 1.83.
+ * Upgrades http-parser from 2.3.0 -> 2.9.4.
+ * [Ubuntu] Adds packages for Ubuntu 23.10 "mantic".
+ * [Python] Address use of binary strings and file reads in python3.
+ * [Ruby] Address use of deprecated ActiveRecord method. Closes GH-2516.
+ * [ARM] fix arch for apache module on Arm Macs.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+   - cmake: 3.27.7 -> 3.28.1
+   - curl: 8.4.0 -> 8.5.0
+   - git: 2.42.0 -> 2.43.0
+   - libgcrypt: 1.10.2 -> 1.10.3
+   - libksba: 1.6.4 -> 1.6.5
+   - ntbtls: 0.3.1 -> 0.3.2
+   - openssl: 3.1.4 -> 3.2.0
+   - rubygems: 3.4.21 -> 3.5.4
+   - s3cmd: 2.3.0 -> 2.4.0
+   - rubies:
+     - 3.2.2 -> 3.2.3
+     - 3.3.0
+
+
+Release 6.0.19
 -------------
- * [Ruby] Fix compatibility with Rack 3 header array. Closses GH-2503.
+ * [Ruby] Fix compatibility with Rack 3 header array. Closes GH-2503.
  * [Ruby] Preserve `SIGPROF` signal handlers. Contributed by Ivo Anjo. Closes GH-2489.
  * [Python] Replaces use of imp module with importlib in Python 3. Contributed by Rongxin Liu. Closes GH-2399 and GH-2501.
  * [Ubuntu] Removes packages for Ubuntu 18.04 "Bionic" (EOL June 2023).
- * [Ubuntu] Adds packages for Ubuntu 23.04 "mantic".
  * Fixed a memory allocation bug in the security update checker.
  * [Debian] Add Debian 12 Bookworm packages. Closes GH-2488.
  * [RPM] Published arm64/aarch64 rpms for EL8 & EL9 (RHEL, Rocky, Alma). Closes GH-2452.

data/build/integration_tests.rb

@@ -105,8 +105,9 @@ task 'test:integration:native_packaging' do
     # The tests put /usr/bin and /usr/sbin first in PATH, causing /usr/bin/ruby to be used.
     # We should run the tests in /usr/bin/ruby too, so that native_support is compiled for
     # the same Ruby.
+    brew_prefix = `env -P /usr/local/bin:/opt/homebrew/bin brew --prefix`
     prefix = "env NATIVE_PACKAGING_METHOD=homebrew " +
-      "LOCATIONS_INI=/usr/local/Cellar/passenger/#{PhusionPassenger::VERSION_STRING}/libexec/src/ruby_supportlib/phusion_passenger/locations.ini"
+      "LOCATIONS_INI=#{brew_prefix}/Cellar/passenger/#{PhusionPassenger::VERSION_STRING}/libexec/src/ruby_supportlib/phusion_passenger/locations.ini"
     if PlatformInfo.in_rvm?
       prefix << " rvm-exec system /usr/bin/ruby -S"
     end

data/package.json

@@ -4,25 +4,25 @@
   "description": "A fast and robust web server and application server for Ruby, Python and Node.js",
   "main": "index.js",
   "devDependencies": {
-    "@babel/core": "^7.17.9",
-    "@babel/preset-env": "^7.16.11",
-    "@babel/preset-react": "^7.16.7",
-    "babel-loader": "^8.2.5",
-    "body-parser": "^1.20.0",
-    "css-loader": "^6.7.1",
+    "@babel/core": "^7.23.5",
+    "@babel/preset-env": "^7.23.5",
+    "@babel/preset-react": "^7.23.3",
+    "babel-loader": "^8.3.0",
+    "body-parser": "^1.20.2",
+    "css-loader": "^6.8.1",
     "css-minimizer-webpack-plugin": "^3.4.1",
-    "express": "^4.17.3",
-    "jquery": "^3.6.0",
-    "mini-css-extract-plugin": "^2.6.0",
-    "mocha": "^6.2.3",
-    "multer": "^1.4.4",
+    "express": "^4.18.2",
+    "jquery": "^3.7.1",
+    "mini-css-extract-plugin": "^2.7.6",
+    "mocha": "^9.2.2",
+    "multer": "^1.4.4-lts.1",
     "preact": "^8.5.3",
     "should": "^2.1.1",
     "sinon": "^1.17.7",
-    "style-loader": "^3.3.1",
-    "terser-webpack-plugin": "^5.3.1",
-    "webpack": "^5.72.0",
-    "webpack-cli": "^4.9.2"
+    "style-loader": "^3.3.3",
+    "terser-webpack-plugin": "^5.3.9",
+    "webpack": "^5.89.0",
+    "webpack-cli": "^4.10.0"
   },
   "scripts": {
     "test": "rake test:node"

data/src/agent/Core/Config.h

@@ -165,7 +165,7 @@ using namespace std;
  *   security_update_checker_interval                                unsigned integer   -          default(86400)
  *   security_update_checker_proxy_url                               string             -          -
  *   security_update_checker_url                                     string             -          default("https://securitycheck.phusionpassenger.com/v1/check.json")
- *   server_software                                                 string             -          default("Phusion_Passenger/6.0.19")
+ *   server_software                                                 string             -          default("Phusion_Passenger/6.0.20")
  *   show_version_in_header                                          boolean            -          default(true)
  *   single_app_mode_app_root                                        string             -          default,read_only
  *   single_app_mode_app_start_command                               string             -          read_only

data/src/agent/Core/Controller/Config.h

@@ -116,7 +116,7 @@ parseControllerBenchmarkMode(const StaticString &mode) {
  *   multi_app                                           boolean            -          default(true),read_only
  *   request_freelist_limit                              unsigned integer   -          default(1024)
  *   response_buffer_high_watermark                      unsigned integer   -          default(134217728)
- *   server_software                                     string             -          default("Phusion_Passenger/6.0.19")
+ *   server_software                                     string             -          default("Phusion_Passenger/6.0.20")
  *   show_version_in_header                              boolean            -          default(true)
  *   start_reading_after_accept                          boolean            -          default(true)
  *   stat_throttle_rate                                  unsigned integer   -          default(10)

data/src/agent/Watchdog/Config.h

@@ -154,7 +154,7 @@ using namespace std;
  *   security_update_checker_interval                                         unsigned integer   -          default(86400)
  *   security_update_checker_proxy_url                                        string             -          -
  *   security_update_checker_url                                              string             -          default("https://securitycheck.phusionpassenger.com/v1/check.json")
- *   server_software                                                          string             -          default("Phusion_Passenger/6.0.19")
+ *   server_software                                                          string             -          default("Phusion_Passenger/6.0.20")
  *   setsid                                                                   boolean            -          default(false)
  *   show_version_in_header                                                   boolean            -          default(true)
  *   single_app_mode_app_root                                                 string             -          default,read_only

data/src/cxx_supportlib/Constants.h

@@ -83,7 +83,7 @@
 #define PASSENGER_API_VERSION_MAJOR 0
 #define PASSENGER_API_VERSION_MINOR 3
 #define PASSENGER_DEFAULT_USER "nobody"
-#define PASSENGER_VERSION "6.0.19"
+#define PASSENGER_VERSION "6.0.20"
 #define POOL_HELPER_THREAD_STACK_SIZE 262144
 #define PROCESS_SHUTDOWN_TIMEOUT 60
 #define PROCESS_SHUTDOWN_TIMEOUT_DISPLAY "1 minute"

data/src/cxx_supportlib/ServerKit/HttpHeaderParser.h

@@ -489,6 +489,9 @@ public:
 					goto default_error;
 				}
 				break;
+			case HPE_UNEXPECTED_CONTENT_LENGTH:
+				message->aux.parseError = REQUEST_CONTAINS_CONTENT_LENGTH_AND_TRANSFER_ENCODING;
+				break;
 			default:
 				default_error:
 				message->aux.parseError = HTTP_PARSER_ERRNO_BEGIN - HTTP_PARSER_ERRNO(&state->parser);