passenger 6.0.23 → 6.0.25

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '090896f92fb435c62847f46a39df880b08d3081323c925b35be422bb701d44a4'
-  data.tar.gz: 7c41513aef78b37d5ac93573afc01992f3d5ec6fe08101103ee0a0a2a8ab1cd4
+  metadata.gz: '0864392c22c6c48427a4ab0e8eeb4254fbb2f6cbb6d07c13570bc9f54b710dd6'
+  data.tar.gz: ecff7e5b78e2a08f93fb73c12126964d29cc80065aaa96e0153505db63f3c066
 SHA512:
-  metadata.gz: 3c6daa23ca3426ebafa54f7d94b018467bbc6d2572799a50ddf111f0628673d5e308ead07dd8e7d06e9d6a8b63bbdc28090c1c581ef06e6a6fce1a143956a6ac
-  data.tar.gz: 12130ca0f74963de002f8d1a777a2ce4563631a4e6ea7a654325efec072dd4e44e40989df4cbe9addad1b12664cdfd53d6ceeb9e76133f3ca169dc2b334ff478
+  metadata.gz: 24706e10441ff794e17f663197c57ad276b18588fc3f31fade19475ad834c7e08470d63d275639ba4a97bc4f76152af477c9fd1297ff637afe086c1957e78d71
+  data.tar.gz: 61d9e594cf3487de28fa37c19398408685d0e1a74d3ffcd5d388c3f0fc5dd59b1a173a814f4c77298a11de7394ea7d677cb353308d8b7bb70e39cfe16296f2c0

data/CHANGELOG

@@ -1,4 +1,48 @@
-Release 6.0.23 (Not yet released)
+Release 6.0.25 (Not yet released)
+-------------
+ * Fixes compilation with clang 19 (latest Fedora update) by dropping a buggy stddev function from the moving average header. Closes GH-2580.
+ * [Standalone] Adds a config option to specify the stop timeout for Passenger: `--stop-timeout 120` or `PASSENGER_STOP_TIMEOUT=120`.
+ * [Standalone] Changes Passenger's (not apps') start timeout to 25s (from 15s), stop timeouts default to 60s.
+ * [Ruby] Fixes an issue where Bundler would try to re-exec the process name instead of the script. Closes GH-2567 and GH-2577.
+ * [Enterprise] Adds a temporary flag to allow reverting to previous routing behaviour, in order to mitigate possible performance regressions, this flag will become a no-op and eventually removed once the routing issues have been fixed. Closes GH-2579.
+   - Apache: PassengerOldRouting on
+   - Nginx: passenger_old_routing on;
+   - Standalone: --old-routing
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+   - cmake: 3.31.2 -> 3.31.3
+   - curl: 8.11.0 -> 8.11.1
+   - libiconv: 1.17 -> 1.18
+   - rubygems: 3.5.23 -> 3.6.2
+   - rubies:
+     - added 3.4.1
+
+
+Release 6.0.24
+-------------
+ * [Nginx] Upgrades preferred Nginx to 1.26.2 from 1.26.1.
+ * [Enterprise] Smarter rolling restarts for better performance and reliability. We changed the way we route requests. Instead of picking the least-busy process, we now first prioritize new processes first. During a rolling restart, this new behavior leads to more efficient utilization of application caches, faster validation of new rollouts, and faster recovery from problematic deployments. Closes GH-2551.
+ * Fix a regression from 6.0.10 where running `passenger-config system-properties` would throw an error. Closes GH-2565.
+ * [Enterprise] Fix a memory corruption-related crash that could occur during rolling restarting.
+ * [Ubuntu] Add packages for Ubuntu 24.10 "oracular".
+ * [Ruby] Specify rackup version to avoid broken 1.0 gem. Closes GH-2559.
+ * Fixes compatibility with Ruby apps whose Gemfile.lock depends on base64.
+ * Upgrades Boost from 1.85 -> 1.86.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+   - ccache 4.10.1 -> 4.10.2
+   - cmake 3.30.1 -> 3.31.2
+   - curl 8.8.0 -> 8.11.0
+   - git 2.45.2 -> 2.47.1
+   - gnupg 2.4.5 -> 2.4.7
+   - libgpg_error 1.50 -> 1.51
+   - npth 1.7 -> 1.8
+   - openssl 3.3.1 -> 3.4.0
+   - rubygems 3.5.16 -> 3.5.23
+   - rubies:
+     - 3.2.4 -> 3.2.6
+     - 3.3.4 -> 3.3.6
+
+
+Release 6.0.23
 -------------
  * [Enterprise] The rolling restart feature now replaces app processes in newest-to-oldest order, to make more efficient use of alive processes during the rolling-restart's duration. Closes GH-2551.
  * [Ruby] Improve Rack 3 compatibility.
@@ -158,12 +202,12 @@ Release 6.0.17
  * Changes minimum supported macOS version to 10.14 Mojave.
  * Adds support for a `PASSENGER_MAX_LOG_LINE_LENGTH_BYTES` environment variable. The default length remains at 8KB. Closes GH-2413.
  * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
-   - curl: 7.86.0 → 7.87.0
-   - git: 2.38.1 → 2.39.0
-   - gnupg: 2.3.8 → 2.4.0
-   - libksba: 1.6.2 → 1.6.3
-   - openssl: 1.1.1s → 3.0.7
-   - rubygems: 3.3.26 → 3.4.3
+   - curl: 7.86.0 -> 7.87.0
+   - git: 2.38.1 -> 2.39.0
+   - gnupg: 2.3.8 -> 2.4.0
+   - libksba: 1.6.2 -> 1.6.3
+   - openssl: 1.1.1s -> 3.0.7
+   - rubygems: 3.3.26 -> 3.4.3
    - rubies: added 3.2.0
 
 
@@ -174,20 +218,20 @@ Release 6.0.16
  * Adds systemd private tmpdir workaround on Ubuntu/Debian. Closes GH-2397.
  * Downgrade jsoncpp to 1.8.1 from 1.9.5 to fix invalid json generation bug. Closes GH-2445.
  * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
-   - cmake: 3.24.2 → 3.25.1
-   - curl: 7.85.0 → 7.86.0
-   - git 2.37.3 → 2.38.1
-   - gnupg: 2.3.7 → 2.3.8
-   - libgpg_error 1.45 → 1.46
-   - libksba 1.6.1 → 1.6.2
-   - openssl: 1.1.1q → 1.1.1s
-   - rubygems 3.3.22 → 3.3.26
-   - s3cmd 2.2.0 → 2.3.0
-   - zlib: 1.2.12 → 1.2.13
+   - cmake: 3.24.2 -> 3.25.1
+   - curl: 7.85.0 -> 7.86.0
+   - git 2.37.3 -> 2.38.1
+   - gnupg: 2.3.7 -> 2.3.8
+   - libgpg_error 1.45 -> 1.46
+   - libksba 1.6.1 -> 1.6.2
+   - openssl: 1.1.1q -> 1.1.1s
+   - rubygems 3.3.22 -> 3.3.26
+   - s3cmd 2.2.0 -> 2.3.0
+   - zlib: 1.2.12 -> 1.2.13
    - rubies:
-     - 2.7.6 → 2.7.7
-     - 3.0.4 → 3.0.5
-     - 3.1.2 → 3.1.3
+     - 2.7.6 -> 2.7.7
+     - 3.0.4 -> 3.0.5
+     - 3.1.2 -> 3.1.3
 
 
 Release 6.0.15
@@ -204,16 +248,16 @@ Release 6.0.15
  * Improve Solaris support for 11.3 & 11.4.
  * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
 
- - ccache: 4.6 → 4.6.3
- - cmake: 3.23.1 → 3.24.2
- - curl: 7.82.0 → 7.85.0
- - git: 2.36.0 → 2.37.3
- - gnupg: 2.3.5 → 2.3.7
- - libiconv: 1.16 → 1.17
- - libksba: 1.6.0 → 1.6.1
- - openssl: 1.1.1n → 1.1.1q
- - pinentry: 1.2.0 → 1.2.1
- - rubygems: 3.3.12 → 3.3.22
+ - ccache: 4.6 -> 4.6.3
+ - cmake: 3.23.1 -> 3.24.2
+ - curl: 7.82.0 -> 7.85.0
+ - git: 2.36.0 -> 2.37.3
+ - gnupg: 2.3.5 -> 2.3.7
+ - libiconv: 1.16 -> 1.17
+ - libksba: 1.6.0 -> 1.6.1
+ - openssl: 1.1.1n -> 1.1.1q
+ - pinentry: 1.2.0 -> 1.2.1
+ - rubygems: 3.3.12 -> 3.3.22
 
 
 Release 6.0.14
@@ -225,19 +269,19 @@ Release 6.0.14
  * Removed google apis from error pages for easier GDPR compliance.
  * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
 
-   - cmake 3.22.3 → 3.23.1
-   - git 2.35.1 → 2.36.0
-   - gnupg 2.3.4 → 2.3.5
-   - libgcrypt 1.9.4 → 1.10.1
-   - libgpg_error 1.44 → 1.45
-   - ntbtls 0.3.0 → 0.3.1
-   - rubygems 3.3.9 → 3.3.12
-   - zlib 1.2.11 → 1.2.12
+   - cmake 3.22.3 -> 3.23.1
+   - git 2.35.1 -> 2.36.0
+   - gnupg 2.3.4 -> 2.3.5
+   - libgcrypt 1.9.4 -> 1.10.1
+   - libgpg_error 1.44 -> 1.45
+   - ntbtls 0.3.0 -> 0.3.1
+   - rubygems 3.3.9 -> 3.3.12
+   - zlib 1.2.11 -> 1.2.12
    - ruby
-     - 2.6.9 → 2.6.10
-     - 2.7.5 → 2.7.6
-     - 3.0.3 → 3.0.4
-     - 3.1.1 → 3.1.2
+     - 2.6.9 -> 2.6.10
+     - 2.7.5 -> 2.7.6
+     - 3.0.3 -> 3.0.4
+     - 3.1.1 -> 3.1.2
 
 
 Release 6.0.13
@@ -246,7 +290,7 @@ Release 6.0.13
  * Fix compilation on FreeBSD 13. Closes GH-2402.
  * [Ruby] Fixes app process crash when ECONNRESET received.
  * Fix automated fetching of pcre source for installer scripts.
- * Bump preferred nginx 1.20.1 → 1.20.2.
+ * Bump preferred nginx 1.20.1 -> 1.20.2.
  * [Ruby] Add option to preload bundler. Closes GH-2409.
 
    - Apache: PassengerPreloadBundler
@@ -257,22 +301,22 @@ Release 6.0.13
  * [RPMs] EL8 RPMs are now built on Rocky linux, and should be compatible with Alma, Rocky, CentOS, and RHEL.
  * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
 
-   - ccache 4.4.2 → 4.6
-   - cmake 3.21.4 → 3.22.3
-   - curl 7.79.1 → 7.82.0
-   - git 2.33.1 → 2.35.1
-   - gnupg 2.3.3 → 2.3.4
-   - libgpg_error 1.42 → 1.44
-   - ntbtls 0.2.0 → 0.3.0
-   - openssl 1.1.1l → 1.1.1n
-   - rubygems 3.2.30 → 3.3.9
-   - zstd 1.5.0 → 1.5.2
+   - ccache 4.4.2 -> 4.6
+   - cmake 3.21.4 -> 3.22.3
+   - curl 7.79.1 -> 7.82.0
+   - git 2.33.1 -> 2.35.1
+   - gnupg 2.3.3 -> 2.3.4
+   - libgpg_error 1.42 -> 1.44
+   - ntbtls 0.2.0 -> 0.3.0
+   - openssl 1.1.1l -> 1.1.1n
+   - rubygems 3.2.30 -> 3.3.9
+   - zstd 1.5.0 -> 1.5.2
    - ruby
      - dropped 2.4.10
      - dropped 2.5.9
-     - 2.6.8 → 2.6.9
-     - 2.7.4 → 2.7.5
-     - 3.0.2 → 3.0.3
+     - 2.6.8 -> 2.6.9
+     - 2.7.4 -> 2.7.5
+     - 3.0.2 -> 3.0.3
      - added 3.1.1
 
 
@@ -290,13 +334,13 @@ Release 6.0.12
  * [Nginx] add new config option to choose the status code returned when application spawning fails. (passenger_spawn_exception_status_code).
  * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
 
- - ccache: 4.4.1 → 4.4.2
- - cmake: 3.21.2 → 3.21.4
- - curl: 7.78.0 → 7.79.1
- - git: 2.33.0 → 2.33.1
- - gnupg: 2.3.2 → 2.3.3
- - rubygems: 3.2.27 → 3.2.30
- - s3cmd: 2.1.0 → 2.2.0
+ - ccache: 4.4.1 -> 4.4.2
+ - cmake: 3.21.2 -> 3.21.4
+ - curl: 7.78.0 -> 7.79.1
+ - git: 2.33.0 -> 2.33.1
+ - gnupg: 2.3.2 -> 2.3.3
+ - rubygems: 3.2.27 -> 3.2.30
+ - s3cmd: 2.1.0 -> 2.2.0
 
 
 Release 6.0.11
@@ -307,19 +351,19 @@ Release 6.0.11
  * Fix compilation on GCC < 4.5.
  * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
 
-    - ccache: 4.3 → 4.4.1
-    - cmake: 3.20.5 → 3.21.2
-    - curl: 7.77.0 → 7.78.0
-    - git: 2.32.0 → 2.33.0
-    - gnupg: 2.3.1 → 2.3.2
-    - libgcrypt: 1.9.3 → 1.9.4
-    - openssl: 1.1.1k → 1.1.1l
-    - pinentry: 1.1.1 → 1.2.0
-    - rubygems: 3.2.21 → 3.2.27
+    - ccache: 4.3 -> 4.4.1
+    - cmake: 3.20.5 -> 3.21.2
+    - curl: 7.77.0 -> 7.78.0
+    - git: 2.32.0 -> 2.33.0
+    - gnupg: 2.3.1 -> 2.3.2
+    - libgcrypt: 1.9.3 -> 1.9.4
+    - openssl: 1.1.1k -> 1.1.1l
+    - pinentry: 1.1.1 -> 1.2.0
+    - rubygems: 3.2.21 -> 3.2.27
     - rubies:
-      - 2.6.7 → 2.6.8
-      - 2.7.3 → 2.7.4
-      - 3.0.1 → 3.0.2
+      - 2.6.7 -> 2.6.8
+      - 2.7.3 -> 2.7.4
+      - 3.0.1 -> 3.0.2
 
 
 Release 6.0.10
@@ -329,11 +373,11 @@ Release 6.0.10
  * [Nginx] The preferred PCRE version is now 8.45 (previously 8.44).
  * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
 
-    - cmake 3.20.3 → 3.20.5
-    - git 2.31.1 → 2.32.0
-    - libksba 1.5.1 → 1.6.0
-    - rubygems 3.2.19 → 3.2.21
-    - pcre 8.44 → 8.45
+    - cmake 3.20.3 -> 3.20.5
+    - git 2.31.1 -> 2.32.0
+    - libksba 1.5.1 -> 1.6.0
+    - rubygems 3.2.19 -> 3.2.21
+    - pcre 8.44 -> 8.45
 
 
 Release 6.0.9
@@ -344,25 +388,25 @@ Release 6.0.9
  * Remove prebuilt packages for Ubuntu Groovy.
  * Properly support HTTP 418. Contributed by Thomas Pfister.
  * Fix several C++ warnings about implicit copy operators/constructors.
- * Bump preferred nginx 1.18.0 → 1.20.1.
+ * Bump preferred nginx 1.18.0 -> 1.20.1.
  * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
 
-    - ccache 4.2 → 4.3
-    - cmake 3.19.7 → 3.20.3
-    - curl 7.75.0 → 7.77.0
-    - git 2.31.0 → 2.31.1
-    - gnupg 2.2.27 → 2.3.1
-    - libgcrypt 1.9.2 → 1.9.3
-    - libksba 1.5.0 → 1.5.1
-    - ntbTLS added → 0.2.0
-    - zlib 1.4.9 → 1.5.0
-    - rubygems 3.2.15 → 3.2.19
+    - ccache 4.2 -> 4.3
+    - cmake 3.19.7 -> 3.20.3
+    - curl 7.75.0 -> 7.77.0
+    - git 2.31.0 -> 2.31.1
+    - gnupg 2.2.27 -> 2.3.1
+    - libgcrypt 1.9.2 -> 1.9.3
+    - libksba 1.5.0 -> 1.5.1
+    - ntbTLS added -> 0.2.0
+    - zlib 1.4.9 -> 1.5.0
+    - rubygems 3.2.15 -> 3.2.19
     - ruby:
-      - 2.3.8 → removed
-      - 2.5.8 → 2.5.9
-      - 2.6.6 → 2.6.7
-      - 2.7.2 → 2.7.3
-      - 3.0.0 → 3.0.1
+      - 2.3.8 -> removed
+      - 2.5.8 -> 2.5.9
+      - 2.6.6 -> 2.6.7
+      - 2.7.2 -> 2.7.3
+      - 3.0.0 -> 3.0.1
 
 
 Release 6.0.8
@@ -377,19 +421,19 @@ Release 6.0.8
  * No-longer build 32 bit prebuilt binaries, as HBB dropped support.
  * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
 
-    - ccache_version: 4.0 → 4.2
-    - cmake_version: 3.18.4 → 3.19.7
-    - curl_version: 7.73.0 → 7.75.0
-    - git_version: 2.29.1 → 2.31.0
-    - gnupg_version: 2.2.23 → 2.2.27
-    - libassuan_version: 2.5.4 → 2.5.5
-    - libgcrypt_version: 1.8.7 → 1.9.2
-    - libgpg_error_version: 1.39 → 1.42
-    - libksba_version: 1.4.0 → 1.5.0
-    - openssl_version: 1.1.1h → 1.1.1k
-    - pinentry_version: 1.1.0 → 1.1.1
-    - rubygems_version: 3.1.4 → 3.2.15
-    - zstd_version: 1.4.5 → 1.4.9
+    - ccache_version: 4.0 -> 4.2
+    - cmake_version: 3.18.4 -> 3.19.7
+    - curl_version: 7.73.0 -> 7.75.0
+    - git_version: 2.29.1 -> 2.31.0
+    - gnupg_version: 2.2.23 -> 2.2.27
+    - libassuan_version: 2.5.4 -> 2.5.5
+    - libgcrypt_version: 1.8.7 -> 1.9.2
+    - libgpg_error_version: 1.39 -> 1.42
+    - libksba_version: 1.4.0 -> 1.5.0
+    - openssl_version: 1.1.1h -> 1.1.1k
+    - pinentry_version: 1.1.0 -> 1.1.1
+    - rubygems_version: 3.1.4 -> 3.2.15
+    - zstd_version: 1.4.5 -> 1.4.9
     - ruby_versions + 3.0.0
 
 
@@ -458,9 +502,9 @@ Release 6.0.5
  * [Nginx] The preferred PCRE version is now 8.44 (previously 8.43).
  * Removed deprecated rubyforge gemspec property. Contributed by @olleolleolle.
  * Adds an option for specifying the attributes on the sticky session cookie:
-	- Apache:     PassengerStickySessionsCookieAttributes     "SameSite=Lax; Secure;"
-	- Nginx:      passenger_sticky_sessions_cookie_attributes "SameSite=Lax; Secure;"
-	- Standalone: --sticky-sessions-cookie-attributes         "SameSite=Lax; Secure;"
+    - Apache:     PassengerStickySessionsCookieAttributes     "SameSite=Lax; Secure;"
+    - Nginx:      passenger_sticky_sessions_cookie_attributes "SameSite=Lax; Secure;"
+    - Standalone: --sticky-sessions-cookie-attributes         "SameSite=Lax; Secure;"
  * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
 
     - ccache 3.7.9 (was 3.7.3)
@@ -570,7 +614,7 @@ Release 6.0.1
 Release 6.0.0
 -------------
 
- * Introduces support for *all* programming languages. Yes that's right... Java, Elixir, Go — Passenger now supports them all! This effort is called "generic language support".
+ * Introduces support for *all* programming languages. Yes that's right... Java, Elixir, Go - Passenger now supports them all! This effort is called "generic language support".
  * Bumps the preferred Nginx version to 1.15.7.
  * Introduces anonymous usage telemetry, which helps us improve Passenger. Please read the docs on what data is collected and how to disable this.
  * [Nginx] Introduces a new option "passenger_request_buffering on|off", to allow disabling request body buffering. This is only supported in Nginx >= 1.15.3. Closes GH-2121.
@@ -922,7 +966,7 @@ Release 5.0.29
  * [Nginx] The preferred Nginx version is now 1.10.1 (previously 1.10.0).
  * [Nginx] The preferred PCRE version is now 8.39 (previously 8.34).
  * [Standalone] Passenger Standalone now supports /dev/stdout and /dev/stderr as log file path (via `--log-file` or Passengerfile.json). This is especially useful in Docker containers. In previous versions logging to those paths did not work, resulting in nothing getting logged at all.
- * Adds Ubuntu 16.04 "Xenial" packages, deprecates Ubuntu 15.10 “Wily” packages (in accordance with LTS support policy).
+ * Adds Ubuntu 16.04 "Xenial" packages, deprecates Ubuntu 15.10 "Wily" packages (in accordance with LTS support policy).
 
 
 Release 5.0.28

data/LICENSE

@@ -1,4 +1,4 @@
-Copyright (c) 2010-2017 Phusion Holding B.V.
+Copyright (c) 2010-2025 Asynchronous B.V.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

data/README.md

@@ -57,4 +57,4 @@ Ruby users can also build a gem from the Git repository and install the gem.
 
 ## Legal
 
-"Passenger" and "Phusion Passenger" are registered trademarks of Phusion Holding B.V.
+"Passenger" and "Phusion Passenger" are registered trademarks of Asynchronous B.V.

data/Rakefile

@@ -1,8 +1,8 @@
 #  Phusion Passenger - https://www.phusionpassenger.com/
-#  Copyright (C) 2008-2017  Phusion Holding B.V.
+#  Copyright (c) 2008-2025 Asynchronous B.V.
 #
 #  "Passenger", "Phusion Passenger" and "Union Station" are registered
-#  trademarks of Phusion Holding B.V.
+#  trademarks of Asynchronous B.V.
 #
 #  This program is free software; you can redistribute it and/or modify
 #  it under the terms of the GNU General Public License as published by
@@ -28,13 +28,17 @@ $LOAD_PATH.unshift("#{SOURCE_ROOT}/src/ruby_supportlib")
 if defined?(Bundler)
   clean_env = nil
 
-  if Bundler.method_defined?(:with_unbundled_env)
+  if Bundler.respond_to?(:with_original_env)
+    Bundler.with_original_env do
+      clean_env = ENV.to_hash.dup
+    end
+  elsif Bundler.respond_to?(:with_unbundled_env)
     Bundler.with_unbundled_env do
-      clean_env = ENV.to_hash
+      clean_env = ENV.to_hash.dup
     end
   else
     Bundler.with_clean_env do
-      clean_env = ENV.to_hash
+      clean_env = ENV.to_hash.dup
     end
   end
   ENV.replace(clean_env)

data/bin/passenger

@@ -1,9 +1,9 @@
 #!/usr/bin/env ruby
 #  Phusion Passenger - https://www.phusionpassenger.com/
-#  Copyright (c) 2010-2017 Phusion Holding B.V.
+#  Copyright (c) 2010-2025 Asynchronous B.V.
 #
 #  "Passenger", "Phusion Passenger" and "Union Station" are registered
-#  trademarks of Phusion Holding B.V.
+#  trademarks of Asynchronous B.V.
 #
 #  Permission is hereby granted, free of charge, to any person obtaining a copy
 #  of this software and associated documentation files (the "Software"), to deal

data/bin/passenger-config

@@ -1,9 +1,9 @@
 #!/usr/bin/env ruby
 #  Phusion Passenger - https://www.phusionpassenger.com/
-#  Copyright (c) 2010-2017 Phusion Holding B.V.
+#  Copyright (c) 2010-2025 Asynchronous B.V.
 #
 #  "Passenger", "Phusion Passenger" and "Union Station" are registered
-#  trademarks of Phusion Holding B.V.
+#  trademarks of Asynchronous B.V.
 #
 #  Permission is hereby granted, free of charge, to any person obtaining a copy
 #  of this software and associated documentation files (the "Software"), to deal

data/bin/passenger-install-apache2-module

@@ -1,10 +1,10 @@
 #!/usr/bin/env ruby
 # encoding: binary
 #  Phusion Passenger - https://www.phusionpassenger.com/
-#  Copyright (c) 2010-2017 Phusion Holding B.V.
+#  Copyright (c) 2010-2025 Asynchronous B.V.
 #
 #  "Passenger", "Phusion Passenger" and "Union Station" are registered
-#  trademarks of Phusion Holding B.V.
+#  trademarks of Asynchronous B.V.
 #
 #  Permission is hereby granted, free of charge, to any person obtaining a copy
 #  of this software and associated documentation files (the "Software"), to deal
@@ -122,6 +122,8 @@ class Installer < PhusionPassenger::AbstractInstaller
   end
 
   def run_steps
+    PlatformInfo.verbose = true if @verbose_depcheck
+
     if PhusionPassenger.build_system_dir.nil?
       # Invariant: PhusionPassenger.custom_packaged?
       if apache_module_available?
@@ -944,6 +946,9 @@ parser = OptionParser.new do |opts|
   opts.on("--force-colors", "Display colors even if stdout is not a TTY") do
     options[:colorize] = true
   end
+  opts.on("--verbose-depcheck", "Show more dependency checking-related logs") do
+    options[:verbose_depcheck] = true
+  end
   opts.on("--snippet", "Show just the Apache config snippet.") do
     options[:snippet] = true
   end

data/bin/passenger-install-nginx-module

@@ -1,9 +1,9 @@
 #!/usr/bin/env ruby
 #  Phusion Passenger - https://www.phusionpassenger.com/
-#  Copyright (c) 2010-2017 Phusion Holding B.V.
+#  Copyright (c) 2010-2025 Asynchronous B.V.
 #
 #  "Passenger", "Phusion Passenger" and "Union Station" are registered
-#  trademarks of Phusion Holding B.V.
+#  trademarks of Asynchronous B.V.
 #
 #  Permission is hereby granted, free of charge, to any person obtaining a copy
 #  of this software and associated documentation files (the "Software"), to deal
@@ -39,6 +39,7 @@ require 'digest/sha2'
 require 'optparse'
 require 'fileutils'
 require 'tmpdir'
+PhusionPassenger.require_passenger_lib 'platform_info/compiler'
 PhusionPassenger.require_passenger_lib 'platform_info/ruby'
 PhusionPassenger.require_passenger_lib 'platform_info/openssl'
 PhusionPassenger.require_passenger_lib 'abstract_installer'
@@ -542,8 +543,18 @@ private
   end
 
   def build_nginx_configure_command(prefix, extra_configure_flags = nil)
-    extra_cflags = "-Wno-error #{PlatformInfo.openssl_extra_cflags}".strip
-    extra_ldflags = PlatformInfo.openssl_extra_ldflags
+    # When USE_ASAN is set, we compile our own code with AddressSanitizer but not Nginx.
+    # It's a third-party codebase we don't control so enabling AddressSanitizer for
+    # Nginx as well is more likely to hurt than help.
+    extra_cflags = [
+      "-Wno-error",
+      PlatformInfo.openssl_extra_cflags,
+    ].compact.join(" ").strip
+
+    extra_ldflags = [
+      PlatformInfo.openssl_extra_ldflags,
+      boolean_option('USE_ASAN') ? PlatformInfo.address_sanitizer_flags : nil,
+    ].compact.join(" ").strip
 
     command = "sh ./configure --prefix='#{prefix}' "
     command << "--with-http_ssl_module "
@@ -601,6 +612,10 @@ private
     end
     return digest.hexdigest
   end
+
+  def boolean_option(name)
+    ["1", "on", "true", "yes"].include?(ENV[name])
+  end
 end
 
 ORIG_ARGV = ARGV.dup

data/bin/passenger-memory-stats

@@ -1,9 +1,9 @@
 #!/usr/bin/env ruby
 #  Phusion Passenger - https://www.phusionpassenger.com/
-#  Copyright (c) 2010-2017 Phusion Holding B.V.
+#  Copyright (c) 2010-2025 Asynchronous B.V.
 #
 #  "Passenger", "Phusion Passenger" and "Union Station" are registered
-#  trademarks of Phusion Holding B.V.
+#  trademarks of Asynchronous B.V.
 #
 #  Permission is hereby granted, free of charge, to any person obtaining a copy
 #  of this software and associated documentation files (the "Software"), to deal

data/bin/passenger-status

@@ -1,9 +1,9 @@
 #!/usr/bin/env ruby
 #  Phusion Passenger - https://www.phusionpassenger.com/
-#  Copyright (c) 2010-2017 Phusion Holding B.V.
+#  Copyright (c) 2010-2025 Asynchronous B.V.
 #
 #  "Passenger", "Phusion Passenger" and "Union Station" are registered
-#  trademarks of Phusion Holding B.V.
+#  trademarks of Asynchronous B.V.
 #
 #  Permission is hereby granted, free of charge, to any person obtaining a copy
 #  of this software and associated documentation files (the "Software"), to deal

data/build/agent.rb

@@ -1,8 +1,8 @@
 #  Phusion Passenger - https://www.phusionpassenger.com/
-#  Copyright (c) 2010-2018 Phusion Holding B.V.
+#  Copyright (c) 2010-2025 Asynchronous B.V.
 #
 #  "Passenger", "Phusion Passenger" and "Union Station" are registered
-#  trademarks of Phusion Holding B.V.
+#  trademarks of Asynchronous B.V.
 #
 #  Permission is hereby granted, free of charge, to any person obtaining a copy
 #  of this software and associated documentation files (the "Software"), to deal

data/build/apache2.rb

@@ -1,8 +1,8 @@
 #  Phusion Passenger - https://www.phusionpassenger.com/
-#  Copyright (c) 2010-2017 Phusion Holding B.V.
+#  Copyright (c) 2010-2025 Asynchronous B.V.
 #
 #  "Passenger", "Phusion Passenger" and "Union Station" are registered
-#  trademarks of Phusion Holding B.V.
+#  trademarks of Asynchronous B.V.
 #
 #  Permission is hereby granted, free of charge, to any person obtaining a copy
 #  of this software and associated documentation files (the "Software"), to deal
@@ -126,7 +126,7 @@ file(APACHE2_TARGET => dependencies) do
       PlatformInfo.apache2_module_cxx_ldflags,
       PlatformInfo.portability_cxx_ldflags,
       OPTIMIZE ? '-O' : nil,
-      USE_ASAN ? "-shared-libasan" : nil
+      USE_ASAN ? PlatformInfo.address_sanitizer_flags : nil,
     ].compact
   )
 end