passenger 6.0.2 → 6.0.15

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: '0619ca90cabc94ee6b8801d143b14877ab15500d'
-  data.tar.gz: f65f9070719053192fcc50206cb146cd18dbba2f
+  metadata.gz: f51fe2f94d713dcb1f6f56e57fcdf9a15b55cd60
+  data.tar.gz: 043ca2b56fb2c4cd1402588e5710b494966591b8
 SHA512:
-  metadata.gz: 9e844139554498a4662950e649dcf56b768bc74f9a306ef070d13fa504e2f18869e701fd8ceb064aaba5bb4987277ee9910f8aaf2ec8135f60823645895a1965
-  data.tar.gz: 8b0bc8083d5a620506813ae1946fc900e3ae65016fcd552a5c8ea6273d0cf247482d676146eb889fa776b1059e91d4dc51249c9aa7a2c070120f2d9458e32992
+  metadata.gz: 4b4f504752a5ed7fedee9c701431b47abfd168a7fddfbb14510f2127e420f33728e765feb5ce40fcd56483c5f546bddb201ce0ef96cdb161717b946ccaa5ab5e
+  data.tar.gz: 60f2803713c89eada3f62d47d5cf0f55d26e01b2c2ee23af4144def877b18772f29dcfe2654a5f2597c33de76bd4dcadeca84d4ba1b4dcc7bbfee09aa8cd7bc9

data/CHANGELOG

@@ -1,9 +1,346 @@
+Release 6.0.15 (Not yet released)
+-------------
+ * Restore ability to build against upstream libev. Contributed by Antonio Terceiro. Closes GH-1544.
+ * Improve rvm gemset detection. Closes GH-2420.
+ * Fix watchdog error on disable-log-prefix flag. Contributed by Paul Hanyzewski. Closes GH-2363.
+ * Upgrades Boost to 1.80.
+ * Fixed compilation on some platforms by explicitely using the stl queue. Closes GH-2440.
+ * Raise an error in case rack gets an ENOBUFS error. Contributed by Mathieu Jobin.
+ * Fixes interaction between preload bundler option and setenv RUBYOPT option. Closes GH-2424.
+ * Add rpm packages for el9 (RHEL, Rocky, Alma). Closes GH-2431.
+ * Upgrade jsoncpp to 1.9.5.
+ * Improve Solaris support for 11.3 & 11.4.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+ - ccache: 4.6 → 4.6.3
+ - cmake: 3.23.1 → 3.24.2
+ - curl: 7.82.0 → 7.85.0
+ - git: 2.36.0 → 2.37.3
+ - gnupg: 2.3.5 → 2.3.7
+ - libiconv: 1.16 → 1.17
+ - libksba: 1.6.0 → 1.6.1
+ - openssl: 1.1.1n → 1.1.1q
+ - pinentry: 1.2.0 → 1.2.1
+ - rubygems: 3.3.12 → 3.3.22
+
+
+Release 6.0.14
+-------------
+ * Removes use of rexml in passenger restart command, because it was removed from Ruby 3. Closes GH-2415.
+ * Adds Ubuntu 22.04 "Jammy" packages, and removes Ubuntu 21.10 "Impish" packages.
+ * Fixes a use after free regression introduced in 6.0.12.
+ * Fixed a warning about ERB.new argument deprecation in Ruby 3.1. Closes GH-2417.
+ * Removed google apis from error pages for easier GDPR compliance.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+   - cmake 3.22.3 → 3.23.1
+   - git 2.35.1 → 2.36.0
+   - gnupg 2.3.4 → 2.3.5
+   - libgcrypt 1.9.4 → 1.10.1
+   - libgpg_error 1.44 → 1.45
+   - ntbtls 0.3.0 → 0.3.1
+   - rubygems 3.3.9 → 3.3.12
+   - zlib 1.2.11 → 1.2.12
+   - ruby
+     - 2.6.9 → 2.6.10
+     - 2.7.5 → 2.7.6
+     - 3.0.3 → 3.0.4
+     - 3.1.1 → 3.1.2
+
+
+Release 6.0.13
+-------------
+ * Add WASM mime type, Closes GH-2398.
+ * Fix compilation on FreeBSD 13. Closes GH-2402.
+ * [Ruby] Fixes app process crash when ECONNRESET received.
+ * Fix automated fetching of pcre source for installer scripts.
+ * Bump preferred nginx 1.20.1 → 1.20.2.
+ * [Ruby] Add option to preload bundler. Closes GH-2409.
+
+   - Apache: PassengerPreloadBundler
+   - Nginx: passenger_preload_bundler
+   - Standalone: --preload_bundler
+
+ * [Node] Suppresses the winston circular dependency warning.
+ * [RPMs] EL8 RPMs are now built on Rocky linux, and should be compatible with Alma, Rocky, CentOS, and RHEL.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+   - ccache 4.4.2 → 4.6
+   - cmake 3.21.4 → 3.22.3
+   - curl 7.79.1 → 7.82.0
+   - git 2.33.1 → 2.35.1
+   - gnupg 2.3.3 → 2.3.4
+   - libgpg_error 1.42 → 1.44
+   - ntbtls 0.2.0 → 0.3.0
+   - openssl 1.1.1l → 1.1.1n
+   - rubygems 3.2.30 → 3.3.9
+   - zstd 1.5.0 → 1.5.2
+   - ruby
+     - dropped 2.4.10
+     - dropped 2.5.9
+     - 2.6.8 → 2.6.9
+     - 2.7.4 → 2.7.5
+     - 3.0.2 → 3.0.3
+     - added 3.1.1
+
+
+Release 6.0.12
+-------------
+ * [Debian] Fix compilation on 32 bit arm. Contributed by Antonio Terceiro.
+ * [Debian] Add Bullseye Debian packages.
+ * Add formatted error messages to responses. Contributed by Mohammad Aboelnour.
+ * Fixes for running under WSL 1. Contributed by Luke Pearce. Closes GH-2036.
+ * Upgrades Boost to 1.77. To go along with 32 bit arm fix.
+ * [MacOS] Fixes autodetection of openssl lib on apple silicon. Contributed by Taketo Takashima. Closes GH-2389.
+ * Reconnect to mongoid databases after fork, like we do for ActiveRecord. Contributed by Mohammad Aboelnour.
+ * [Ubuntu] add missing apache name in instance registry dir detection.
+ * [Ubuntu] replace hirsute apt packages with impish.
+ * [Nginx] add new config option to choose the status code returned when application spawning fails. (passenger_spawn_exception_status_code).
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+ - ccache: 4.4.1 → 4.4.2
+ - cmake: 3.21.2 → 3.21.4
+ - curl: 7.78.0 → 7.79.1
+ - git: 2.33.0 → 2.33.1
+ - gnupg: 2.3.2 → 2.3.3
+ - rubygems: 3.2.27 → 3.2.30
+ - s3cmd: 2.1.0 → 2.2.0
+
+
+Release 6.0.11
+-------------
+ * Fix compilation on GCC 4.4, fixes a regression in 6.0.8 where Passenger would no longer compiler without a C++11 compiler.
+ * [CentOS] Fix version detection on CentOS Stream. Contributed by Taketo Takashima. Closes GH-2377.
+ * [MacOS] Additionally look for PCRE in the new location that Homebrew has split it's packages into.
+ * Fix compilation on GCC < 4.5.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+    - ccache: 4.3 → 4.4.1
+    - cmake: 3.20.5 → 3.21.2
+    - curl: 7.77.0 → 7.78.0
+    - git: 2.32.0 → 2.33.0
+    - gnupg: 2.3.1 → 2.3.2
+    - libgcrypt: 1.9.3 → 1.9.4
+    - openssl: 1.1.1k → 1.1.1l
+    - pinentry: 1.1.1 → 1.2.0
+    - rubygems: 3.2.21 → 3.2.27
+    - rubies:
+      - 2.6.7 → 2.6.8
+      - 2.7.3 → 2.7.4
+      - 3.0.1 → 3.0.2
+
+
+Release 6.0.10
+-------------
+ * [Debian/Ubuntu] Fix a regression in `passenger_system_ruby` where Ruby 3 couldn't be found.
+ * [CentOS/RHEL] Bump rpm nginx dependency to match EPEL nginx (was 1.16.1 now 1.20.1). Closes GH-2364.
+ * [Nginx] The preferred PCRE version is now 8.45 (previously 8.44).
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+    - cmake 3.20.3 → 3.20.5
+    - git 2.31.1 → 2.32.0
+    - libksba 1.5.1 → 1.6.0
+    - rubygems 3.2.19 → 3.2.21
+    - pcre 8.44 → 8.45
+
+
+Release 6.0.9
+-------------
+ * Upgrades Boost to 1.76. Fixes a regression where some boost headers for comatibility with older distros were missing.
+ * Make building on Apple Silcon using homebrew openssl work. Contributed by TheBerg.
+ * Add Support for Ubuntu Hirsute.
+ * Remove prebuilt packages for Ubuntu Groovy.
+ * Properly support HTTP 418. Contributed by Thomas Pfister.
+ * Fix several C++ warnings about implicit copy operators/constructors.
+ * Bump preferred nginx 1.18.0 → 1.20.1.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+    - ccache 4.2 → 4.3
+    - cmake 3.19.7 → 3.20.3
+    - curl 7.75.0 → 7.77.0
+    - git 2.31.0 → 2.31.1
+    - gnupg 2.2.27 → 2.3.1
+    - libgcrypt 1.9.2 → 1.9.3
+    - libksba 1.5.0 → 1.5.1
+    - ntbTLS added → 0.2.0
+    - zlib 1.4.9 → 1.5.0
+    - rubygems 3.2.15 → 3.2.19
+    - ruby:
+      - 2.3.8 → removed
+      - 2.5.8 → 2.5.9
+      - 2.6.6 → 2.6.7
+      - 2.7.2 → 2.7.3
+      - 3.0.0 → 3.0.1
+
+
+Release 6.0.8
+-------------
+ * [Apache] Fixes crash when restarting Apache on CentOS 8. Closes GH-2318.
+ * [Standalone] fix abort websockets on shutdown. Closes GH-2211.
+ * Fixes application process titles. They are now properly set to something like "Passenger RubyApp: ..." instead of "Passenger AppPreloader: ... (forking)".
+ * Upgrades Boost to 1.74.
+ * Allow passenger-status to detect passenger instance registry dir when systemd PrivateTmp dir is in use.
+ * Reduce the likelihood of a crash when using systemd PrivateTmp dir with Apache.
+ * Removed CentOS 6, and Debian Jessie prebuilt binaries and packages. Both are EOL.
+ * No-longer build 32 bit prebuilt binaries, as HBB dropped support.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+    - ccache_version: 4.0 → 4.2
+    - cmake_version: 3.18.4 → 3.19.7
+    - curl_version: 7.73.0 → 7.75.0
+    - git_version: 2.29.1 → 2.31.0
+    - gnupg_version: 2.2.23 → 2.2.27
+    - libassuan_version: 2.5.4 → 2.5.5
+    - libgcrypt_version: 1.8.7 → 1.9.2
+    - libgpg_error_version: 1.39 → 1.42
+    - libksba_version: 1.4.0 → 1.5.0
+    - openssl_version: 1.1.1h → 1.1.1k
+    - pinentry_version: 1.1.0 → 1.1.1
+    - rubygems_version: 3.1.4 → 3.2.15
+    - zstd_version: 1.4.5 → 1.4.9
+    - ruby_versions + 3.0.0
+
+
+Release 6.0.7
+-------------
+ * Addresses regression introduced in 6.0.5 when attempting to establish database connection after fork and activerecord is not configured in the expected way. Closes GH-2281.
+ * Addresses regression introduced in 5.1.5 where hook scripts would fail to run. As a result the PASSENGER_ERROR_PAGE and PASSENGER_CONFIG_MANIFEST env vars have been removed from the passenger hook script environment.
+ * Match static rails assets on 8-digit content hash. Contributed by @mattozinga.
+ * Allow skipping the Apache/Nginx sections of the `passenger-memory-stats` output, through the `--no-apache` and `--no-nginx` commandline options. Closes GH-2306. Contributed by Saverio Miroddi (@saveriomiroddi).
+ * Fixes an issue where `passenger-memory-stats` would throw an error if a process went away while it was running. Closes GH-2305.
+ * Fixes a formatting issue with apr-1 include flags on macOS.
+ * Fixes a warning about BOOST_*_ENDIAN macros being deprecated by migrating to new suggested macros.
+ * Fixes an occasional issue with the node loader where the startup handshake would fail to record progress.
+ * Adds an option for specifying the address to bind ruby apps to, for sending requests directly to specific app instances:
+  - Standalone: direct_instance_request_address
+  - Nginx:      passenger_direct_instance_request_address
+  - Apache:     PassengerDirectInstanceRequestAddress
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+    - ccache: 4.0 (was: 3.7.10)
+    - curl: 7.73.0 (was: 7.71.1)
+    - git: 2.29.1 (was: 2.27.0)
+    - gnupg: 2.2.23 (was: 2.2.21)
+    - libgpg_error: 1.39 (was: 1.38)
+    - ruby: 2.7.2 (was: 2.7.1)
+    - libassuan 2.5.4 (was: 2.5.3)
+    - libgcrypt 1.8.7 (was 1.8.6)
+    - OpenSSL 1.1.1h (was 1.0.2u)
+
+
+Release 6.0.6
+-------------
+ * Update gemspec with up to date metadata.
+ * Reverts the addition of the 'etc' gem to the Passenger gemspec, because it broke on normal ruby installs. Closes GH-2283.
+ * Builds Ubuntu focal Nginx dynamic module package against Nginx 1.18.0. Closes GH-2291.
+ * No longer providing prebuilt Ruby 2.1 or 2.2 binaries, they have been EOL for years and rubygems no longer supports them.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+    - ccache 3.7.10 (was 3.7.9)
+    - Curl 7.71.1 (was 7.69.1)
+    - Git 2.27.0 (was 2.26.2)
+    - GnuPG 2.2.21 (was 2.2.20)
+    - libgpg_error 1.38 (was 1.37)
+    - libgcrypt 1.8.6 (was 1.8.5)
+    - RubyGems 3.1.4 (was 3.0.8)
+
+
+Release 6.0.5
+-------------
+
+ * [Enterprise] Fixed a regression (introduced in 5.0.0) where Flying Passenger could not update the Passenger configuration. Closes GH-1554.
+ * Adds Ubuntu 20.04 "Focal" packages, and removes Ubuntu 19.04 "Disco" packages.
+ * Adds RHEL / CentOS 8 packages.
+ * [Nginx] Converts CentOS 7 packages to provide a dynamic module instead of a full Nginx install.
+ * Fixes the encoding name for xml output from the `passenger-status --show=xml` command. Closes GH-2248.
+ * Adds the 'etc' gem as an explicit dependency. Closes GH-2124.
+ * Adds a user agent to the passenger pre-spawn script. Closes GH-1534.
+ * Fixes a compilation issue on FreeBSD. Closes GH-2240.
+ * Fixes an issue where rack bodies may not be processed correctly.
+ * Improves the database reconnection speed in forked processes. closes GH-2253.
+ * [Nginx] Adds a config option `passenger_temp_path` to set the path used for the disk backed response cache. Re-Closes GH-2075.
+ * [Apache] Protects the path info and script name passed to the app from modifications done by mod_security. Closes GH-2198.
+ * Ensures baseuri is set per request, even if config is loaded from cache. Closes GH-2117.
+ * Make temp dir toucher cleanup code more resilient to permissions issues.
+ * [Nginx] Bumps the preferred Nginx version to 1.18.0 (previously 1.17.3).
+ * [Nginx] The preferred PCRE version is now 8.44 (previously 8.43).
+ * Removed deprecated rubyforge gemspec property. Contributed by @olleolleolle.
+ * Adds an option for specifying the attributes on the sticky session cookie:
+	- Apache:     PassengerStickySessionsCookieAttributes     "SameSite=Lax; Secure;"
+	- Nginx:      passenger_sticky_sessions_cookie_attributes "SameSite=Lax; Secure;"
+	- Standalone: --sticky-sessions-cookie-attributes         "SameSite=Lax; Secure;"
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+    - ccache 3.7.9 (was 3.7.3)
+    - Curl 7.69.1 (was 7.66.0)
+    - Git 2.26.2 (was 2.23.0)
+    - GnuPG 2.2.20 (was 2.2.17)
+    - libgpg_error 1.37 (was 1.36)
+    - OpenSSL 1.0.2u (was 1.0.2t)
+    - PCRE 8.44 (was 8.43)
+    - s3cmd 2.1.0 (was 2.0.2)
+    - RubyGems 3.0.8 (was 3.0.6)
+    - Rubies:
+      - 2.4.6 -> 2.4.10
+      - 2.5.5 -> 2.5.8
+      - 2.6.3 -> 2.6.6
+      + 2.7.1
+
+
+Release 6.0.4
+-------------
+
+ * Adds Debian 10 "Buster" packages.
+
+
+Release 6.0.3
+-------------
+
+ * Add an option to specify the spawn dir during startup, which is specifically useful for CageFS users. Contributed by @plmnikulin. Closes GH-2145.
+
+    - Apache: `PassengerSpawnDir`
+    - Nginx: `passenger_spawn_dir`
+
+ * [Nginx] Bumps the preferred Nginx version to 1.17.3 (previously 1.15.8).
+ * [Nginx] The preferred PCRE version is now 8.43 (previously 8.42).
+ * Adds Ubuntu 19.04 "Disco" packages, and removes Ubuntu 18.10 "Cosmic" and Ubuntu 14.04 "Trusty" packages.
+ * Changes minimum supported macOS version to 10.12 Sierra.
+ * Improves container detection and fixes a compilation warning in GCC 8+. Closes GH-2186.
+ * Allowed externally specifying an app instance to send a request to. Contributed by Mark R. James (@mrj).
+ * Fixed an incompatibility with sending requests to specific app instances, when using the rails web-console gem. Contributed by Mark R. James (@mrj).
+ * Fixed a regression (introduced in 5.1.9) where some hooks were not called. Closes GH-2103. Contributed by Mark R. James (@mrj).
+ * Fixes compilation with clang 8 (latest macOS update) by updating vendored boost library from 1.67 to 1.69.
+ * Reverts a regression intruduced in 6.0.2 where Passenger would crash if it had to use the disk backed response cache. Closes GH-2189.
+ * [Nginx] Adds an option `passenger_buffer_upload` to allow buffering uploaded data in Passenger before forwarding it to the app. As a workaround for apps that cannot handle chunked data.
+ * [Enterprise] When using deferred port binding, no longer binds port if all apps do not start up.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+    - PCRE 8.43 (was 8.42)
+    - Curl 7.65.1 (was 7.64.0)
+    - ccache 3.7.3 (was 3.6)
+    - Git 2.22.0 (was 2.20.1)
+    - OpenSSL 1.0.2s (was 1.0.2q)
+    - RubyGems 3.0.6 (was 3.0.2)
+    - GnuPG 2.2.16 (was 2.2.13)
+    - libgcrypt 1.8.5 (was 1.8.4)
+    - libgpg_error 1.36 (was 1.35)
+    - libiconv 1.16 (was 1.15)
+    - Ruby:
+      - 2.4.5 -> 2.4.6
+      - 2.5.3 -> 2.5.5
+      - 2.6.1 -> 2.6.3
+
+
 Release 6.0.2
 -------------
 
  * Allow compilation to work when Apple messed up their system ruby headers.
  * Only try to read pid 1's /proc files as root, in container detection. Closes GH-2168.
- * Add an option to disable prefixing application logs with "App PID stdout": `PassengerDisableLogPrefix` (Apache) / `passenger_disable_log_prefix` (Nginx). Closes GH-1915.
+ * Add an option to disable prefixing application logs with "App PID stdout". Contributed by Ian Kottman. Closes GH-1915.
+
+    - Apache: `PassengerDisableLogPrefix`
+    - Nginx: `passenger_disable_log_prefix`
+
  * Add support for identifying the Passenger instance by PID. Closes GH-2146. Contributed by Saverio Miroddi (@saveriomiroddi).
  * [Ruby] Made Passenger more resiliant to Rack bugs. Closes GH-2150.
  * [Nginx] Do not touch Nginx's proxy_temp_path var in Passenger's nginx modules. Closes GH-2075. Contributed by Roman Berestnikov-Sivolov (@ROMB).
@@ -338,7 +675,7 @@ Release 5.1.1
  * The security update check now reports whether libcurl + SSL backend are statically linked to Passenger, in which case the check also needs to warn about relevant OpenSSL vulnerabilities in the linked library.
  * Increases the allowed line lengths emitted by apps at startup.
  * Adds support for the unary 'not' operator in the Union Station filter language.
- * [Enterprise] Add missing flying-passenger integration mode to security update check. 
+ * [Enterprise] Add missing flying-passenger integration mode to security update check.
  * Fixes support for Rails 5.0.1 Action Cable. Specifically, we now support the `options` argument in the `write_nonblock` method in hijacked Rack IO sockets.
  * [Apache] Introduces a small delay to prevent running the Security Update Checker twice at startup.
 
@@ -350,11 +687,11 @@ Release 5.1.0
  * [Enterprise] When running a Rails app in multithreaded mode, Passenger Enterprise automatically tags Rails logs with the current thread number. This makes it possible to distinguish logs generated by different threads.
  * Fixes permissions issue on Linux when setting OOM score after lowering privileges. Closes GH-1858.
  * [Standalone] Allows raw json envvars in Passengerfile.json. Closes GH-1837.
- * [Standalone] Make the `max_requests` option available on the command line as well. 
+ * [Standalone] Make the `max_requests` option available on the command line as well.
  * Fixes unaligned memory access in base64 decoder on platforms that have strict aliasing requirements (non x86/x86_64). Closes GH-1646.
  * Introduces daily Passenger security update check to warn (error log) if there are newer Passenger versions with important security fixes (describing what was discovered, what is affected, which version has the fix).
  * Fixes compilation on Linux when a non-glibc C library is in use. Closes GH-1870.
- * `passenger-install-nginx-module` and the standalone compiler now add the http v2, realip and addition module flags for Nginx (just like the APT/RPM/autobuilder already had). Closes GH-1788. 
+ * `passenger-install-nginx-module` and the standalone compiler now add the http v2, realip and addition module flags for Nginx (just like the APT/RPM/autobuilder already had). Closes GH-1788.
  * [Apache] Fixes PassengerShowVersionInHeader option. Thanks to Sebastian Welther for contributing this.
  * Passenger now reports when you try to use Node.js or Meteor clustering, and tries to continue with just a nonfunctional shim in place, so that if your code uses the clustering APIs your app may still work.
  * Updates libev config.sub and config.guess to support newer platforms such as the IBM power 8.
@@ -517,7 +854,7 @@ Release 5.0.22
  * The `passenger-config validate-install` command no longer prints false warnings about duplicate Passenger installs on systems that use RBenv. Closes GH-1627.
  * Fixes race conditions in the automatic building of the Ruby native support extension. Closes GH-1570.
  * [Enterprise] Fixes compatibility with byebug 7.0. Closes GH-1662.
- * Support Union Station logging for Node.js applications, with Express/MongoDB automatically supported. 
+ * Support Union Station logging for Node.js applications, with Express/MongoDB automatically supported.
  * The Ruby Union Station hooks no longer abort with a fatal error when the application does not call the Union Station initializer method during startup. The error is now only logged.
  * In case of an error response (HTTP 5xx), Union Station logging will also contain request headers.
  * The Union Station hooks are now more resilient against environment variable problems.
@@ -580,7 +917,7 @@ Release 5.0.16
  * Supports seek() such that body.rewind works when using Rack middleware that uses Zlib::GzipReader (e.g. for compressed requests). Closes GH-1553.
  * [Apache] Improves detection of Apache configuration file problems. Closes GH-1577.
  * [Enterprise] Fixes installation of the Passenger Enterprise Apache module on Debian Testing.
- * Fixes logging of HTTP response code for Union Station. This regression was introduced by Passenger 5. Closes GH-1581. 
+ * Fixes logging of HTTP response code for Union Station. This regression was introduced by Passenger 5. Closes GH-1581.
  * Adds a new subcommand `passenger-config about support-binaries-dir`.
  * Fixes a regression in the Node.js loader with regard to custom startup files. This bug was introduced in 5.0.14. Closes GH-1557 (again).
  * Fixes a crash when a Ruby application is accessed through a sub-URI and a root virtual host at the same time.
@@ -2401,9 +2738,9 @@ Release 2.2.15
  * [Apache] Fixed incorrect temp dir cleanup by passenger-status
    On some systems, running passenger-status could print the following
    message:
-   
+
       *** Cleaning stale folder /tmp/passenger.1234
-   
+
    ...after which Phusion Passenger breaks because that directory is
    necessary for it to function properly. The cause of this problem
    has been found and has been fixed.
@@ -2480,10 +2817,10 @@ Release 2.2.11
    affects Apache. When under high load, Apache might freeze and stop
    responding to requests. It is caused by a race condition which is
    why it escaped our last release testing.
-   
+
    This problem does not affect Nginx; you only have to upgrade if
    you're using Apache.
-   
+
    http://groups.google.com/group/phusion-passenger/t/d5bb2f17c8446ea0
 
 
@@ -2505,20 +2842,20 @@ Release 2.2.9
    Actually, previous Phusion Passenger releases were already compatible
    with Rails 3, depending on the spawn method that would be invoked. Here's
    the story:
-   
+
    Since Phusion Passenger 2.2.8, when the file config.ru exists, Phusion
    Passenger will treat the app as a Rack app, not as a Rails app. This is
    in contrast to earlier versions which gave Rails detection more priority
    than Rack detection. Phusion Passenger loads Rack apps and Rails apps in
    different ways. The Rails loader was not compatible with Rails 3, which
    is what we've fixed in this release.
-   
+
    That said, a Rails 3 app would have worked out-of-the-box on Phusion
    Passenger 2.2.8 as well because Rails 3 apps include a config.ru file
    by default, causing Phusion Passenger 2.2.8 to use the Rack loader.
    Earlier versions of Phusion Passenger would just completely bail out
    because they'd use the Rails loader.
-   
+
    That said, with 2.2.9 there are still some caveats:
    - Smart spawning (the mechanism with which REE's 33% memory reduction
      is implemented) is *not* supported for Rack apps. This means that if
@@ -2527,7 +2864,7 @@ Release 2.2.9
    - Rails 3 depends on Rack 1.1.0. You must have Rack 1.1.0 installed as
      a gem, even if you've bundled it with the gem bundler. This is because
      Phusion Passenger itself depends on Rack.
-   
+
    Both of these caveats are temporary. We have plans to solve both of these
    properly in the future.
  * What's up with the Gem Bundler?
@@ -2537,9 +2874,9 @@ Release 2.2.9
    version seems to work fine. Please note that you need to insert the
    following snippet in config/preinitializer.rb, as instructed by the gem
    bundler's README:
-   
+
      require "#{RAILS_ROOT}/vendor/gems/environment"
-   
+
    The Rails::Boot monkey patching code as posted at
    http://yehudakatz.com/2009/11/03/using-the-new-gem-bundler-today/
    does not seem to be required anymore.
@@ -2588,7 +2925,7 @@ Release 2.2.8
    seen an error message along the lines of
 
       *** Exception IOError in Passenger RequestHandler (closed stream)
-   
+
    then this is a Ruby bug at work. This bug has been fixed in Ruby 1.9.2,
    but Ruby 1.9.1 still contains this bug. We've added a workaround so that
    the bug is not triggered with this Ruby version. Issue #432.
@@ -2679,7 +3016,7 @@ Release 2.2.5
    headers. It turns out that some people relied on the old behavior, we so now
    environment variables set with mod_env are set in both ENV and in the CGI
    environment.
-   
+
    Fixes bug #335.
 
  * [Apache] Fixed compilation problems on some Linux systems with older versions of Apache
@@ -2747,7 +3084,7 @@ Release 2.2.5
    order: first models, then controllers, then helpers.
 
    Bug #359.
- 
+
  * Fixed a few bugs in WSGI compliance
    PATH_INFO is supposed to be set to the request URI, but without the query
    string and without the base URI. This has been fixed: bug #360.

data/CONTRIBUTING.md

@@ -19,7 +19,7 @@
    * [Further reading](#further_reading)
  * [Pull requests](#pull_requests)
 
-Thank you for your interest in Phusion Passenger. Phusion Passenger is open source so your contributions are very welcome. Although we also provide a [commercial version](https://www.phusionpassenger.com/enterprise) and [commercial support](https://www.phusionpassenger.com/commercial_support), the core remains open source and we remain committed to keep it that way. This guide gives you an overview of the ways with which you can contribute, as well as contribution guidelines.
+Thank you for your interest in Phusion Passenger. Phusion Passenger is open source so your contributions are very welcome. Although we also provide a [commercial version](https://www.phusionpassenger.com/features#premium-features) and [commercial support](https://www.phusionpassenger.com/commercial_support), the core remains open source and we remain committed to keep it that way. This guide gives you an overview of the ways with which you can contribute, as well as contribution guidelines.
 
 You can contribute in one of the following areas:
 

data/CONTRIBUTORS

@@ -1,4 +1,5 @@
 _why
+A compound of Fe and O
 Adam Duke
 Alessandro Lenzen
 Alex Osborne
@@ -8,8 +9,10 @@ Andre Ferraz
 Andre Nathan
 Andrei Belov
 Andy Allan
+Antonio Terceiro
 Benjamin Fleischer
 Bernd Ahlers
+Bernhard M. Wiedemann
 Camden Narzt (Phusion)
 Chad Fowler
 Chris Walquist
@@ -50,36 +53,47 @@ Jacob Elder
 Jacob Harris
 James Miller
 Jan Berkel
+Janko Marohnić
 Jason Cannon
 jastix
 Jay Freeman (saurik)
 jbergler
+Jia L
 John Dewey
 John Leach
 Joshua Lund
 jpatterson
 Jude Nagurney
 Kenneth Powers
+Luke Pearce
 Luuk Hafkamp (Phusion)
 Luuk Hendriks (Phusion)
 MAEDA Go
 Magnus Holm
+Mark R. James
+Mathieu Jobin
+Matt Ozinga
 Michal Papis
 Michał Pokrywka
 Mike
 Mike Boone
+Mohammad Aboelnour
 Morton Jonuschat
 Nathaniel Bibler
 Neil Wilson
+Nicolas Maloeuvre
 Ninh Bui (Phusion)
 Oleksiy Shchukin
+Olle Jonsson
 Pat Downey
 Paul B
+Paul Hanyzewski
 Paul Kmiec
 Pepijn Looije
 Perry Smith
 Philip M. Gollucci
 PikachuEXE
+plmnikulin
 Po-Chuan Hsieh
 Radagaisus
 Redmar Kerkhoff
@@ -101,6 +115,9 @@ Sebastian Welther
 Slippy Douglas
 Stephen Bannasch
 Steven Chamberlain
+Taketo Takashima
+TheBerg
+Thomas Pfister
 Tim Bishop
 Tim Carey-Smith
 Tinco Andringa (Phusion)

data/README.md

@@ -1,20 +1,13 @@
 [![Gem Version](https://badge.fury.io/rb/passenger.svg)](https://badge.fury.io/rb/passenger)
-# <img src="images/passenger_logo.svg" alt="passenger logo" style="margin-bottom: -.2em; width: 1.4em"> Phusion Passenger
+# <img src="images/passenger_logo.svg" alt="passenger logo" style="margin-bottom: -.2em; width: 1.4em"> Phusion Passenger®
 <h3>Supercharge your Ruby, Node.js and Python apps</h3>
 
-[Phusion Passenger™](https://www.phusionpassenger.com/) is a web server and application server, designed to be fast, robust and lightweight. It takes a lot of complexity out of deploying web apps, adds powerful enterprise-grade features that are useful in production, and makes administration much easier and less complex. Phusion Passenger supports Ruby, Python, Node.js and Meteor, and is being used by high-profile companies such as **Apple, Pixar, New York Times, AirBnB, Juniper** etc as well as [over 650.000 websites](http://trends.builtwith.com/Web-Server/Phusion-Passenger).
+[Phusion Passenger®](https://www.phusionpassenger.com/) is a web server and application server, designed to be fast, robust and lightweight. It takes a lot of complexity out of deploying web apps, adds powerful enterprise-grade features that are useful in production, and makes administration much easier and less complex. Phusion Passenger supports Ruby, Python, Node.js and Meteor, and is being used by high-profile companies such as **Apple, Pixar, New York Times, AirBnB, Juniper** etc as well as [over 650.000 websites](http://trends.builtwith.com/Web-Server/Phusion-Passenger).
 
 <a href="https://vimeo.com/224923750"><img src="https://github.com/phusion/passenger/blob/stable-5.2/images/justin.png" height="400"></a><br><em>Phusion Passenger - the smart app server</em>
 
 <p>What makes Passenger so fast and reliable is its <strong>C++</strong> core, its <strong>zero-copy</strong> architecture, its <strong>watchdog</strong> system and its <strong>hybrid</strong> evented, multi-threaded and multi-process design.</p>
 
-## Fuse Panel - GUI for Passenger
-The <strong>smarter</strong> and <strong>simpler command center</strong> for your applications. <strong><a href="https://www.phusionpassenger.com/fuse-panel" target="_blank">Fuse Panel</a></strong> monitors your apps in near real-time, offers insights in your logs and enables analyzing and troubleshooting issues. New and exclusively available in the Fuse Panel is much-requested feature <strong>per-application log viewing and splitting</strong>.
-
-Regardless of if you’re running Passenger open source or you’re one of our enterprise customers, the Fuse Panel is available for free while in beta. <a href="https://www.phusionpassenger.com/fuse-panel" target="_blank">Give it a try</a>.
-
-<img src="https://github.com/phusion/passenger/blob/stable-5.2/images/spark.png" align="left" width="300">
-
 ### Learn more:
 - [Website](https://www.phusionpassenger.com/)
 - [Fuse Panel](https://www.phusionpassenger.com/fuse-panel)

data/bin/passenger-install-nginx-module

@@ -268,7 +268,7 @@ private
     new_screen
     puts "<banner>PCRE (required by Nginx) not installed, downloading it...</banner>"
 
-    url = "http://downloads.sourceforge.net/project/pcre/pcre/#{PREFERRED_PCRE_VERSION}/pcre-#{PREFERRED_PCRE_VERSION}.tar.gz"
+    url = "https://sourceforge.net/projects/pcre/files/pcre/#{PREFERRED_PCRE_VERSION}/pcre-#{PREFERRED_PCRE_VERSION}.tar.gz/download"
     dirname = "pcre-#{PREFERRED_PCRE_VERSION}"
     tarball = "#{@working_dir}/pcre.tar.gz"
 
@@ -575,6 +575,7 @@ private
             # Nginx checks for PCRE in multiple places...
             system("(gcc -I/usr/local/include -I/usr/include/pcre " <<
               "-I/usr/pkg/include -I/opt/local/include " <<
+              "-I/opt/homebrew/include " <<
               "-c passenger-check.c) >/dev/null 2>/dev/null")
           end
         ensure