passenger 6.1.2 → 6.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d8b463432f9160f9b746009db0faf286890b2ea8bcf7d8aa0aab5746fb90ea5e
-  data.tar.gz: 654da8b64ddfcd4da7f06bf437befd72a0a5646b778657c2ee7e6abc497426a7
+  metadata.gz: f8548c58c9ea83174fb896415cdf20c24832ae9f5063eab271614424719af501
+  data.tar.gz: 8272237fce37982de8d030844a0813d571b8dd6690df8d1426e96f7a3b3c5243
 SHA512:
-  metadata.gz: 75af1cc0616d3b9250013dfbfec2093d0476620a54a826e7f234aca3542d5fae37cafc0143c79849ba24dd74cf4236b0d8104020656a14a372746eef569b853f
-  data.tar.gz: 535252005eca991e2001dfdb5739494f2f67775e8090eb1e2edbe15e11dda6e486bf78d133a34ee858c0007c293e7ebf9bae70f2bbf289fe1df8a0ad9d89a465
+  metadata.gz: 6369fb4fd8364661a6291a627111b8c28979a351f42c5325be716c52fb06f4bcdf6d5097092d1821c3bb59b36758bea18f6ab70d7133c6c4dd5a2c7efd7b60b3
+  data.tar.gz: c46e8f69b09c01f8f496ae35aea5327bf7e55cd52dfd23e774e12a63c6424f8aa6d08bfee87e8df004f06badff8e713460da3d48c4174d991e62915b4d2d5616

data/CHANGELOG

@@ -1,4 +1,32 @@
-Release 6.1.2 (Not yet released)
+Release 6.1.3 (Not yet released)
+-------------
+ * [Ubuntu] Add packages for Ubuntu 26.04 "resolute", remove packages for Ubuntu 25.10 "questing" and Ubuntu 20.04 "focal". Closes GH-2657.
+ * [Nginx] Build Nginx dynamic modules against nginx-dev sources on Ubuntu/Debian where available to fix Ubuntu's incompatibility with upstream.
+ * [Ruby] add support for `rack.response_finished`. Closes GH-2418.
+ * Fix crash when buffer creation fails.
+ * [Nginx] The preferred PCRE2 version is now 10.47 (previously 10.46).
+ * [Nginx] Upgrades preferred Nginx to 1.30.1 from 1.28.0.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+   - ccache: 4.12.2 -> 4.13.4
+   - cmake: 4.2.2 -> 4.3.2
+   - curl: 8.18.0 -> 8.20.0
+   - git: 2.52.0 -> 2.54.0
+   - gnupg: 2.5.16 -> 2.5.19
+   - libgcrypt: 1.11.2 -> 1.12.2
+   - libgpg_error: 1.58 -> 1.60
+   - libiconv: 1.18 -> 1.19
+   - libksba: 1.6.7 -> 1.6.8
+   - openssl: 3.6.0 -> 3.6.2
+   - rubygems: 4.0.4 -> 4.0.10
+   - zlib: 1.3.1 -> 1.3.2
+   - rubies:
+      - removed 3.2 for EOL
+      - 3.3.10 -> 3.3.11
+      - 3.4.8 -> 3.4.9
+      - 4.0.1 -> 4.0.3
+
+
+Release 6.1.2
 -------------
  * [Ruby] logger is now a “bundled” but not “default” gem, so it must be added to gemspec. Closes GH-2642.
  * [Ruby] Fix Ruby < 2.3 support. Closes GH-2641.
@@ -25,14 +53,14 @@ Release 6.1.1
    - cmake: 4.0.0 -> 4.2.1
    - curl: 8.12.1 -> 8.17.0
    - git: 2.49.0 -> 2.52.0
-   - gnupg:2.4.7 -> 2.4.8
-   - libffi:3.4.7 -> 3.5.2
-   - libgcrypt:1.11.0 -> 1.11.2
-   - libgpg_error:1.51 -> 1.58
-   - libreadline:8.2 -> 8.3
-   - openssl:3.4.1 -> 3.6.0
-   - pcre2:10.45 -> 10.47
-   - pinentry:1.3.1 -> 1.3.2
+   - gnupg: 2.4.7 -> 2.4.8
+   - libffi: 3.4.7 -> 3.5.2
+   - libgcrypt: 1.11.0 -> 1.11.2
+   - libgpg_error: 1.51 -> 1.58
+   - libreadline: 8.2 -> 8.3
+   - openssl: 3.4.1 -> 3.6.0
+   - pcre2: 10.45 -> 10.47
+   - pinentry: 1.3.1 -> 1.3.2
    - rubygems: 3.6.6 -> 4.0.2
    - rubys:
      - dropped 3.1.7
@@ -632,7 +660,7 @@ Release 6.0.3
  * Fixed an incompatibility with sending requests to specific app instances, when using the rails web-console gem. Contributed by Mark R. James (@mrj).
  * Fixed a regression (introduced in 5.1.9) where some hooks were not called. Closes GH-2103. Contributed by Mark R. James (@mrj).
  * Fixes compilation with clang 8 (latest macOS update) by updating vendored boost library from 1.67 to 1.69.
- * Reverts a regression intruduced in 6.0.2 where Passenger would crash if it had to use the disk backed response cache. Closes GH-2189.
+ * Reverts a regression introduced in 6.0.2 where Passenger would crash if it had to use the disk backed response cache. Closes GH-2189.
  * [Nginx] Adds an option `passenger_buffer_upload` to allow buffering uploaded data in Passenger before forwarding it to the app. As a workaround for apps that cannot handle chunked data.
  * [Enterprise] When using deferred port binding, no longer binds port if all apps do not start up.
  * Updated various library versions used in precompiled binaries (used for e.g. gem installs):

data/doc/AiInstructions.md

@@ -57,8 +57,8 @@ This is codebase of the Passenger application server.
 
 ## Build system
 
-- Building agents: `drake -j4 nginx` (for concurrent building) or `rake nginx`
-- Building C++ test suite: `drake -j4 test:cxx:build` (for concurrent building) or `rake test:cxx:build`
+- Building agents: `rake -m -j4 nginx` (for concurrent building) or `rake nginx`
+- Building C++ test suite: `rake -m -j4 test:cxx:build` (for concurrent building) or `rake test:cxx:build`
 
 ## Special files
 

data/passenger.gemspec

@@ -15,6 +15,7 @@ Gem::Specification.new do |s|
   s.email = "software-signing@phusion.nl"
   s.require_paths = ["src/ruby_supportlib"]
   s.metadata = {
+    "rubygems_mfa_required" => "true",
     "bug_tracker_uri"   => "https://github.com/phusion/passenger/issues",
     "changelog_uri"     => "https://github.com/phusion/passenger/blob/stable-#{PhusionPassenger::VERSION_STRING.split('.').slice(0,2).join('.')}/CHANGELOG",
     "documentation_uri" => "https://www.phusionpassenger.com/docs/",

data/src/agent/Core/Config.h

@@ -149,7 +149,7 @@ using namespace std;
  *   security_update_checker_interval                                unsigned integer   -          default(86400)
  *   security_update_checker_proxy_url                               string             -          -
  *   security_update_checker_url                                     string             -          default("https://securitycheck.phusionpassenger.com/v1/check.json")
- *   server_software                                                 string             -          default("Phusion_Passenger/6.1.2")
+ *   server_software                                                 string             -          default("Phusion_Passenger/6.1.3")
  *   show_version_in_header                                          boolean            -          default(true)
  *   single_app_mode_app_root                                        string             -          default,read_only
  *   single_app_mode_app_start_command                               string             -          read_only

data/src/agent/Core/Controller/Config.h

@@ -118,7 +118,7 @@ parseControllerBenchmarkMode(const StaticString &mode) {
  *   old_routing                                         boolean            -          default(false),read_only
  *   request_freelist_limit                              unsigned integer   -          default(1024)
  *   response_buffer_high_watermark                      unsigned integer   -          default(134217728)
- *   server_software                                     string             -          default("Phusion_Passenger/6.1.2")
+ *   server_software                                     string             -          default("Phusion_Passenger/6.1.3")
  *   show_version_in_header                              boolean            -          default(true)
  *   start_reading_after_accept                          boolean            -          default(true)
  *   stat_throttle_rate                                  unsigned integer   -          default(10)

data/src/agent/Watchdog/Config.h

@@ -139,7 +139,7 @@ using namespace std;
  *   security_update_checker_interval                                         unsigned integer   -          default(86400)
  *   security_update_checker_proxy_url                                        string             -          -
  *   security_update_checker_url                                              string             -          default("https://securitycheck.phusionpassenger.com/v1/check.json")
- *   server_software                                                          string             -          default("Phusion_Passenger/6.1.2")
+ *   server_software                                                          string             -          default("Phusion_Passenger/6.1.3")
  *   setsid                                                                   boolean            -          default(false)
  *   show_version_in_header                                                   boolean            -          default(true)
  *   single_app_mode_app_root                                                 string             -          default,read_only

data/src/cxx_supportlib/Constants.h

@@ -84,7 +84,7 @@
 #define PASSENGER_API_VERSION_MAJOR 0
 #define PASSENGER_API_VERSION_MINOR 3
 #define PASSENGER_DEFAULT_USER "nobody"
-#define PASSENGER_VERSION "6.1.2"
+#define PASSENGER_VERSION "6.1.3"
 #define POOL_HELPER_THREAD_STACK_SIZE 262144
 #define PROCESS_SHUTDOWN_TIMEOUT 60
 #define PROCESS_SHUTDOWN_TIMEOUT_DISPLAY "1 minute"

data/src/cxx_supportlib/ServerKit/FileBufferedChannel.h

@@ -1224,8 +1224,10 @@ private:
 		case RS_WAITING_FOR_CHANNEL_IDLE:
 			break;
 		case RS_READING_FROM_FILE:
-			inFileMode->readRequest->cancel();
-			inFileMode->readRequest = NULL;
+			if (inFileMode->readRequest) {
+				inFileMode->readRequest->cancel();
+				inFileMode->readRequest = NULL;
+			}
 			break;
 		case RS_INACTIVE:
 		case RS_TERMINATED:
@@ -1241,8 +1243,10 @@ private:
 			break;
 		case WS_CREATING_FILE:
 		case WS_MOVING:
-			inFileMode->writerRequest->cancel();
-			inFileMode->writerRequest = NULL;
+			if (inFileMode->writerRequest) {
+				inFileMode->writerRequest->cancel();
+				inFileMode->writerRequest = NULL;
+			}
 			break;
 		case WS_TERMINATED:
 			return;

data/src/ruby_supportlib/phusion_passenger/rack/thread_handler_extension.rb

@@ -50,6 +50,7 @@ module PhusionPassenger
       RACK_URL_SCHEME    = "rack.url_scheme"     # :nodoc:
       RACK_HIJACK_P      = "rack.hijack?"        # :nodoc:
       RACK_HIJACK        = "rack.hijack"         # :nodoc:
+      RACK_RESPONSE_FINISHED    = "rack.response_finished" # :nodoc:
       HTTP_VERSION       = "HTTP_VERSION"        # :nodoc:
       HTTP_1_1           = "HTTP/1.1"            # :nodoc:
       SCRIPT_NAME        = "SCRIPT_NAME"         # :nodoc:
@@ -97,6 +98,7 @@ module PhusionPassenger
               connection
             end
           end
+          env[RACK_RESPONSE_FINISHED] = []
           env[HTTP_VERSION] = HTTP_1_1
 
           # Rails somehow modifies env['REQUEST_METHOD'], so we perform the comparison
@@ -115,6 +117,11 @@ module PhusionPassenger
               # forcing it to be respawned, and thereby effectively DoSing it.
               print_exception("Rack application object", e)
             end
+            env[RACK_RESPONSE_FINISHED].reverse_each do | cb |
+              cb.call(env, status, headers, e)
+            rescue => e
+              print_exception("Rack application object", e)
+            end
             return false
           end
 
@@ -166,6 +173,11 @@ module PhusionPassenger
             end
           ensure
             close_body(body, env, socket_wrapper)
+            env[RACK_RESPONSE_FINISHED].reverse_each do | cb |
+              cb.call(env, status, headers, nil)
+            rescue => e
+              print_exception("Rack application object", e)
+            end
           end
           false
         ensure
@@ -175,10 +187,6 @@ module PhusionPassenger
 
     private
       def process_body(env, connection, socket_wrapper, status, is_head_request, headers, body)
-        if @ush_reporter
-          ush_log_id = @ush_reporter.log_writing_rack_body_begin
-        end
-
         # Fix up incompliant body objects. Ensure that the body object
         # can respond to #each.
         output_body = should_output_body?(status, is_head_request)
@@ -317,16 +325,9 @@ module PhusionPassenger
         end
 
         signal_keep_alive_allowed!
-      ensure
-        if @ush_reporter && ush_log_id
-          @ush_reporter.log_writing_rack_body_end(ush_log_id)
-        end
       end
 
       def close_body(body, env, socket_wrapper)
-        if @ush_reporter
-          ush_log_id = @ush_reporter.log_closing_rack_body_begin
-        end
         begin
           body.close if body && body.respond_to?(:close)
         rescue => e
@@ -336,10 +337,6 @@ module PhusionPassenger
           if !should_swallow_app_error?(e, socket_wrapper)
             print_exception("Rack response body object's #close method", e)
           end
-        ensure
-          if @ush_reporter && ush_log_id
-            @ush_reporter.log_closing_rack_body_end(ush_log_id)
-          end
         end
       end
 

data/src/ruby_supportlib/phusion_passenger.rb

@@ -31,20 +31,20 @@ module PhusionPassenger
 
   PACKAGE_NAME = 'passenger'
   # Run 'rake src/cxx_supportlib/Constants.h configkit_schemas_inline_comments' after changing this number.
-  VERSION_STRING = '6.1.2'
+  VERSION_STRING = '6.1.3'
 
   # Tip: find the SHA-256 with ./dev/nginx_version_sha256 <VERSION>
-  PREFERRED_NGINX_VERSION = '1.28.0'
-  NGINX_SHA256_CHECKSUM = 'c6b5c6b086c0df9d3ca3ff5e084c1d0ef909e6038279c71c1c3e985f576ff76a'
+  PREFERRED_NGINX_VERSION = '1.30.1'
+  NGINX_SHA256_CHECKSUM = '99765000d974896b31ca5882d8c279ce3fe7ef6f5c6f9f0a967ed7fd3407f9cc'
 
   # Packaging may be locked to an older version due to the specific module configuration being
   # incompatible with the version we prefer (latest stable).
-  PACKAGING_PREFERRED_NGINX_VERSION = '1.28.0'
-  PACKAGING_NGINX_SHA256_CHECKSUM = 'c6b5c6b086c0df9d3ca3ff5e084c1d0ef909e6038279c71c1c3e985f576ff76a'
+  PACKAGING_PREFERRED_NGINX_VERSION = '1.30.1'
+  PACKAGING_NGINX_SHA256_CHECKSUM = '99765000d974896b31ca5882d8c279ce3fe7ef6f5c6f9f0a967ed7fd3407f9cc'
 
   # sha256sum of the .tar.gz
-  PREFERRED_PCRE_VERSION  = '10.46'
-  PCRE_SHA256_CHECKSUM = '8d28d7f2c3b970c3a4bf3776bcbb5adfc923183ce74bc8df1ebaad8c1985bd07'
+  PREFERRED_PCRE_VERSION  = '10.47'
+  PCRE_SHA256_CHECKSUM = 'c08ae2388ef333e8403e670ad70c0a11f1eed021fd88308d7e02f596fcd9dc16'
 
   STANDALONE_INTERFACE_VERSION  = 1
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: passenger
 version: !ruby/object:Gem::Version
-  version: 6.1.2
+  version: 6.1.3
 platform: ruby
 authors:
 - Phusion - http://www.phusion.nl/
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-01-28 00:00:00.000000000 Z
+date: 2026-05-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -4322,6 +4322,7 @@ files:
 homepage: https://www.phusionpassenger.com/
 licenses: []
 metadata:
+  rubygems_mfa_required: 'true'
   bug_tracker_uri: https://github.com/phusion/passenger/issues
   changelog_uri: https://github.com/phusion/passenger/blob/stable-6.1/CHANGELOG
   documentation_uri: https://www.phusionpassenger.com/docs/