piwigo-api 0.5.4 → 0.5.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 87356665f4013fd077e465bc8bc455d65521778ecabe929b4d51e77a4f8a48f7
-  data.tar.gz: 2febfdf137f95ccca79bdb23565373220e1f553114376b05333c944f2d8caee1
+  metadata.gz: 608967b560f96ebac045082ad64519c8cd8b6edf25d326f595e71628180e860b
+  data.tar.gz: c5656010a6b30019c95794d429576a0e8a4f95adbb0a05ef6c6e164c3ecca0e1
 SHA512:
-  metadata.gz: fc6d52f44e5d80aea19d572c1bf0c20027c830be07aa6d1d91cccb163be5e65f5fa190c4c7ba4aaf05b8042405c57609f3b8dbdd343285416d9e0a08548750c0
-  data.tar.gz: 50b9ffe518dda064dbbad1c56a43cbfc0671bcec6c2eb70c1833bb3d5bf072b22eb750b7e42f7effca9b01dcc346f07fba210d2c045eca498aa371306180912e
+  metadata.gz: 32b960c4c36aa093590dd37e03aba30b82630ba6337ce4cce2c523b5fadabac5e8b05afc427c7a4065a83bfe3ce5a70dda71746de96195e46dda234cead79861
+  data.tar.gz: 3dce2f6adf09ff7606a0e3d32bc33c709389b1a37694597a8912c563ae70a905fe001d086b124accbc65cabc2bb53226af8556660cde677cf42c30d5fb8dc143

data/.github/workflows/gempush.yml

@@ -1,36 +1,37 @@
 name: Ruby Gem
 
 on:
-  pull_request:
-    branches:
-      - master
   push:
-    branches:
-      - master
+    branches: [ master ]
+  pull_request:
+    branches: [ master ]
 
 jobs:
   build:
     name: Build + Publish
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
 
     steps:
-    - uses: actions/checkout@master
+    - uses: actions/checkout@v2
     - name: Set up Ruby 2.6
       uses: actions/setup-ruby@v1
       with:
-        version: 2.6.x
+        ruby-version: 2.6.x
 
     - name: Publish to GPR
       run: |
         mkdir -p $HOME/.gem
         touch $HOME/.gem/credentials
         chmod 0600 $HOME/.gem/credentials
-        printf -- "---\n:github: Bearer ${GEM_HOST_API_KEY}\n" > $HOME/.gem/credentials
+        printf -- "---\n:github: ${GEM_HOST_API_KEY}\n" > $HOME/.gem/credentials
         gem build *.gemspec
         gem push --KEY github --host https://rubygems.pkg.github.com/${OWNER} *.gem
       env:
-        GEM_HOST_API_KEY: ${{secrets.GPR_AUTH_TOKEN}}
-        OWNER: KKDad
+        GEM_HOST_API_KEY: "Bearer ${{secrets.GITHUB_TOKEN}}"
+        OWNER: ${{ github.repository_owner }}
 
     - name: Publish to RubyGems
       run: |
@@ -41,4 +42,4 @@ jobs:
         gem build *.gemspec
         gem push *.gem
       env:
-        GEM_HOST_API_KEY: ${{secrets.RUBYGEMS_AUTH_TOKEN}}
+        GEM_HOST_API_KEY: "${{secrets.RUBYGEMS_AUTH_TOKEN}}"

data/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+0.5.8 - 2021-07-13 
+- Update dependencies address CVE-2021-32740
+
+0.5.7 - 2020-03-01
+- Fixed open-ended dependency on codecov
+
+0.5.6 - 2020-03-01
+- Update dependencies to address security vulnerability
+
+0.5.5 - 2019-11-26
+- Fix another encoding issue when synchronizing folder with accented characters.
+
 0.5.4 - 2019-11-26
 - Fix crash in sniff_attributes when the image dosn't contain a valid EXIF data
 - Fix parent albums when syncronizing a folder-tree of albums into Piwigo

data/Gemfile.lock

@@ -1,73 +1,73 @@
 PATH
   remote: .
   specs:
-    piwigo-api (0.5.4)
+    piwigo-api (0.5.7)
       exifr (~> 1.3)
-      http (~> 4.2)
+      http (~> 5.0)
       logger (~> 1.4)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    addressable (2.7.0)
+    addressable (2.8.0)
       public_suffix (>= 2.0.2, < 5.0)
     ansi (1.5.0)
-    builder (3.2.3)
-    codecov (0.1.16)
-      json
-      simplecov
-      url
-    docile (1.3.2)
+    builder (3.2.4)
+    codecov (0.5.2)
+      simplecov (>= 0.15, < 0.22)
+    docile (1.4.0)
     domain_name (0.5.20190701)
       unf (>= 0.0.5, < 1.0.0)
-    exifr (1.3.6)
-    ffi (1.11.3-x64-mingw32)
+    exifr (1.3.9)
+    ffi (1.15.3)
+    ffi (1.15.3-x64-mingw32)
     ffi-compiler (1.0.1)
       ffi (>= 1.0.0)
       rake
-    http (4.2.0)
+    http (5.0.1)
       addressable (~> 2.3)
       http-cookie (~> 1.0)
-      http-form_data (~> 2.0)
-      http-parser (~> 1.2.0)
-    http-cookie (1.0.3)
+      http-form_data (~> 2.2)
+      llhttp-ffi (~> 0.3.0)
+    http-cookie (1.0.4)
       domain_name (~> 0.5)
-    http-form_data (2.1.1)
-    http-parser (1.2.1)
-      ffi-compiler (>= 1.0, < 2.0)
-    json (2.2.0)
-    logger (1.4.1)
-    minitest (5.13.0)
-    minitest-reporters (1.4.2)
+    http-form_data (2.3.0)
+    llhttp-ffi (0.3.1)
+      ffi-compiler (~> 1.0)
+      rake (~> 13.0)
+    logger (1.4.3)
+    minitest (5.14.4)
+    minitest-reporters (1.4.3)
       ansi
       builder
       minitest (>= 5.0)
       ruby-progressbar
-    public_suffix (4.0.1)
-    rake (10.5.0)
-    ruby-progressbar (1.10.1)
-    simplecov (0.17.1)
+    public_suffix (4.0.6)
+    rake (13.0.6)
+    ruby-progressbar (1.11.0)
+    simplecov (0.21.2)
       docile (~> 1.1)
-      json (>= 1.8, < 3)
-      simplecov-html (~> 0.10.0)
-    simplecov-html (0.10.2)
+      simplecov-html (~> 0.11)
+      simplecov_json_formatter (~> 0.1)
+    simplecov-html (0.12.3)
+    simplecov_json_formatter (0.1.3)
     unf (0.1.4)
       unf_ext
-    unf_ext (0.0.7.6)
-    url (0.3.2)
+    unf_ext (0.0.7.7)
+    unf_ext (0.0.7.7-x64-mingw32)
 
 PLATFORMS
   ruby
   x64-mingw32
 
 DEPENDENCIES
-  bundler (~> 2.0)
-  codecov (>= 0.1.10)
-  minitest (~> 5.0)
+  bundler (~> 2.2)
+  codecov (~> 0.5)
+  minitest (~> 5.14)
   minitest-reporters (~> 1.4)
   piwigo-api!
-  rake (~> 10.0)
-  simplecov (~> 0.17)
+  rake (~> 13.0)
+  simplecov (~> 0.21)
 
 BUNDLED WITH
-   2.0.2
+   2.2.15

data/lib/piwigo/folder_sync.rb

@@ -39,7 +39,7 @@ module Piwigo
       end
 
       Dir.entries(directory).reject { |entry| entry =~ /^.{1,2}$/ }.each do |directory_entry|
-        item_to_process = File.join directory, directory_entry
+        item_to_process = (File.join directory, directory_entry).encode('utf-8')
 
         if File.directory? item_to_process
           @parent_album = ensure_album(File.dirname(item_to_process), nil)

data/lib/piwigo/images.rb

@@ -51,11 +51,15 @@ module Piwigo
       attr_accessor :categories
 
       def initialize(hash: nil)
-        hash&.each { |key, value| send("#{key}=", value) }
+        hash&.each do |key, value|
+          # Bug: If the encoding is Windows-1252, then Piwigo will blowup when creating the album
+          value = value.encode('UTF-8', 'Windows-1252') if value.class == String && value.encoding.to_s == 'Windows-1252'
+          send("#{key}=", value)
+        end
       end
     end
 
-    class Paging # rubocop:todo Style/Documentation
+    class Paging
       # @return [Number] Page number of the results
       attr_accessor :page
 
@@ -69,7 +73,11 @@ module Piwigo
       attr_accessor :total_count
 
       def initialize(hash: nil)
-        hash&.each { |key, value| send("#{key}=", value) }
+        hash&.each do |key, value|
+          # Bug: If the encoding is Windows-1252, then Piwigo will blowup when creating the album
+          value = value.encode('UTF-8', 'Windows-1252') if value.class == String && value.encoding.to_s == 'Windows-1252'
+          send("#{key}=", value)
+        end
       end
     end
 

data/lib/piwigo/version.rb

@@ -1,3 +1,3 @@
 module Piwigo
-  VERSION = '0.5.4'.freeze
+  VERSION = '0.5.8'.freeze
 end

data/piwigo-api.gemspec

@@ -27,14 +27,14 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.add_development_dependency 'bundler', '~> 2.0'
-  spec.add_development_dependency 'codecov', '>= 0.1.10'
-  spec.add_development_dependency 'minitest', '~> 5.0'
+  spec.add_development_dependency 'bundler', '~> 2.2'
+  spec.add_development_dependency 'codecov', '~> 0.5'
+  spec.add_development_dependency 'minitest', '~> 5.14'
   spec.add_development_dependency 'minitest-reporters', '~>1.4'
-  spec.add_development_dependency 'rake', '~> 10.0'
-  spec.add_development_dependency 'simplecov', '~> 0.17'
+  spec.add_development_dependency 'rake', '~> 13.0'
+  spec.add_development_dependency 'simplecov', '~> 0.21'
 
-  spec.add_runtime_dependency 'http', '~>4.2'
+  spec.add_runtime_dependency 'http', '~>5.0'
   spec.add_runtime_dependency 'logger', '~>1.4'
   spec.add_runtime_dependency 'exifr', '~>1.3'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: piwigo-api
 version: !ruby/object:Gem::Version
-  version: 0.5.4
+  version: 0.5.8
 platform: ruby
 authors:
 - Adrian Gilbert
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-11-26 00:00:00.000000000 Z
+date: 2021-07-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -16,42 +16,42 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '2.2'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '2.2'
 - !ruby/object:Gem::Dependency
   name: codecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.1.10
+        version: '0.5'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.1.10
+        version: '0.5'
 - !ruby/object:Gem::Dependency
   name: minitest
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: '5.14'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: '5.14'
 - !ruby/object:Gem::Dependency
   name: minitest-reporters
   requirement: !ruby/object:Gem::Requirement
@@ -72,42 +72,42 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '13.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '13.0'
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.17'
+        version: '0.21'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.17'
+        version: '0.21'
 - !ruby/object:Gem::Dependency
   name: http
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '4.2'
+        version: '5.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '4.2'
+        version: '5.0'
 - !ruby/object:Gem::Dependency
   name: logger
   requirement: !ruby/object:Gem::Requirement
@@ -193,7 +193,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
+rubygems_version: 3.0.3.1
 signing_key: 
 specification_version: 4
 summary: Gem to interact with the Piwigo API