re2 2.5.0-arm64-darwin → 2.6.0-arm64-darwin

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dab5b9531e10e72c28d6a0d5e67db10b9218ae42ccd37aa45b89d12011fd50ee
-  data.tar.gz: a505da291a924283d596743333ee3ea9910643f87ae4b2918ca6a385d45f1d76
+  metadata.gz: 19a043d6bee81b950cf9544cac002a257581ecb94d6d3c7baa32facb04abcd47
+  data.tar.gz: 3cefecb0c18f46ac048893d6f75afa12e21846634be7c7ceeb67fc64d7d27050
 SHA512:
-  metadata.gz: ae56121ea91554f99f60eee74947cc1e0f5e349c98e6d4bbb6cd93b72435d7c60141724ca149b56cef55002635f3446ed68f64c72826a2e09068e3e99fa8ddc7
-  data.tar.gz: 614fb248fb1bbfc65e8787f705f7a44b8c39d3500eaa32ea1a144ba37790b93c3e9d5f5c5176ee5071699f3020cae906a40b34bf73fa8c3d6c55035d61119a25
+  metadata.gz: ecfb6c3e91743fc77654a9be047f451af3ab205c7b86d78cd03ef69d95089d406e1ff113b641409754408064c1b5d27f91d6ce66b43335b88fde8a9313eeaad1
+  data.tar.gz: 737e13ab5265eb02a9e4e71108d8f8f43a3d6af69d7f42754ae65f2a3cca151a0e78dac2506ed936c751ff1067d82e1d34f7d00ec919a3c8962e17062cc99c17

data/README.md

@@ -1,10 +1,12 @@
-# re2 [![Build Status](https://github.com/mudge/re2/actions/workflows/tests.yml/badge.svg?branch=main)](https://github.com/mudge/re2/actions)
+# re2 - safer regular expressions in Ruby
 
 Ruby bindings to [RE2][], a "fast, safe, thread-friendly alternative to
 backtracking regular expression engines like those used in PCRE, Perl, and
 Python".
 
-**Current version:** 2.5.0  
+[![Build Status](https://github.com/mudge/re2/actions/workflows/tests.yml/badge.svg?branch=main)](https://github.com/mudge/re2/actions)
+
+**Current version:** 2.6.0  
 **Bundled RE2 version:** libre2.11 (2023-11-01)  
 
 ```ruby
@@ -28,6 +30,7 @@ RE2('(\w+):(\d+)').full_match("ruby:1234")
     * [Encoding](#encoding)
 * [Requirements](#requirements)
     * [Native gems](#native-gems)
+    * [Verifying the gems](#verifying-the-gems)
     * [Installing the `ruby` platform gem](#installing-the-ruby-platform-gem)
     * [Using system libraries](#using-system-libraries)
 * [Thanks](#thanks)
@@ -37,6 +40,17 @@ RE2('(\w+):(\d+)').full_match("ruby:1234")
 
 ## Why RE2?
 
+While [recent
+versions](https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/) of
+Ruby have improved defences against [regular expression denial of service
+(ReDoS) attacks](https://en.wikipedia.org/wiki/ReDoS), it is still possible for
+users to craft malicious patterns that take a long time to process by using
+syntactic features such as [back-references, lookaheads and possessive
+quantifiers](https://bugs.ruby-lang.org/issues/19104#note-3). RE2 aims to
+eliminate ReDoS by design:
+
+> **_Safety is RE2's raison d'être._**
+>
 > RE2 was designed and implemented with an explicit goal of being able to
 > handle regular expressions from untrusted users without risk. One of its
 > primary guarantees is that the match time is linear in the length of the
@@ -110,7 +124,7 @@ See the API documentation for [`RE2::Regexp#initialize`](https://mudge.name/re2/
 
 ### Matching interface
 
-There are two main methods for matching: [`RE2::Regexp#full_match?`](https://mudge.name/re2/RE2/Regexp.html#full_match%3F-instance_method) requires the regular expression to match the entire input text, and [`RE2::Regexp#partial_match?`](https://mudge.name/re2/RE2/Regexp.html#match%3F-instance_method) looks for a match for a substring of the input text, returning a boolean to indicate whether a match was successful or not.
+There are two main methods for matching: [`RE2::Regexp#full_match?`](https://mudge.name/re2/RE2/Regexp.html#full_match%3F-instance_method) requires the regular expression to match the entire input text, and [`RE2::Regexp#partial_match?`](https://mudge.name/re2/RE2/Regexp.html#partial_match%3F-instance_method) looks for a match for a substring of the input text, returning a boolean to indicate whether a match was successful or not.
 
 ```ruby
 RE2('h.*o').full_match?("hello")    #=> true
@@ -253,11 +267,40 @@ It supports the following RE2 ABI versions:
 
 Where possible, a pre-compiled native gem will be provided for the following platforms:
 
-* Linux `aarch64-linux` and `arm-linux` (requires [glibc](https://www.gnu.org/software/libc/) 2.29+)
-* Linux `x86-linux` and `x86_64-linux` (requires [glibc](https://www.gnu.org/software/libc/) 2.17+) including [musl](https://musl.libc.org/)-based systems such as [Alpine](https://alpinelinux.org)
+* Linux
+    * `aarch64-linux` and `arm-linux` (requires [glibc](https://www.gnu.org/software/libc/) 2.29+)
+    * `x86-linux` and `x86_64-linux` (requires [glibc](https://www.gnu.org/software/libc/) 2.17+)
+    * [musl](https://musl.libc.org/)-based systems such as [Alpine](https://alpinelinux.org) are supported as long as a [glibc-compatible library is installed](https://wiki.alpinelinux.org/wiki/Running_glibc_programs)
 * macOS `x86_64-darwin` and `arm64-darwin`
 * Windows `x64-mingw32` and `x64-mingw-ucrt`
 
+### Verifying the gems
+
+SHA256 checksums are included in the [release notes](https://github.com/mudge/re2/releases) for each version and can be checked with `sha256sum`, e.g.
+
+```console
+$ gem fetch re2 -v 2.5.0
+Fetching re2-2.5.0-arm64-darwin.gem
+Downloaded re2-2.5.0-arm64-darwin
+$ sha256sum re2-2.5.0-arm64-darwin.gem
+4b20c4539a12787102b22012e678968af23f87e35f88843744835bd13ac9f6bc  re2-2.5.0-arm64-darwin.gem
+```
+
+[GPG](https://www.gnupg.org/) signatures are attached to each release (the assets ending in `.sig`) and can be verified if you import [our signing key `0x39AC3530070E0F75`](https://mudge.name/39AC3530070E0F75.asc) (or fetch it from a public keyserver, e.g. `gpg --keyserver keyserver.ubuntu.com --recv-key 0x39AC3530070E0F75`):
+
+```console
+$ gpg --verify re2-2.5.0-arm64-darwin.gem.sig re2-2.5.0-arm64-darwin.gem
+gpg: Signature made Fri 15 Dec 2023 12:58:58 GMT
+gpg:                using RSA key 702609D9C790F45B577D7BEC39AC3530070E0F75
+gpg: Good signature from "Paul Mucur <mudge@mudge.name>" [unknown]
+gpg:                 aka "Paul Mucur <paul@ghostcassette.com>" [unknown]
+gpg: WARNING: This key is not certified with a trusted signature!
+gpg:          There is no indication that the signature belongs to the owner.
+Primary key fingerprint: 7026 09D9 C790 F45B 577D  7BEC 39AC 3530 070E 0F75
+```
+
+The fingerprint should be as shown above or you can independently verify it with the ones shown in the footer of https://mudge.name.
+
 ### Installing the `ruby` platform gem
 
 > [!WARNING]

data/Rakefile

@@ -33,7 +33,7 @@ Gem::PackageTask.new(RE2_GEM_SPEC) do |p|
   p.need_tar = false
 end
 
-CROSS_RUBY_VERSIONS = %w[3.2.0 3.1.0 3.0.0 2.7.0 2.6.0].join(':')
+CROSS_RUBY_VERSIONS = %w[3.3.0 3.2.0 3.1.0 3.0.0 2.7.0 2.6.0].join(':')
 CROSS_RUBY_PLATFORMS = %w[
   aarch64-linux
   arm-linux

data/ext/re2/re2.cc

@@ -1588,7 +1588,7 @@ static VALUE re2_regexp_full_match_p(const VALUE self, VALUE text) {
  *
  * @param [text] text the text to scan incrementally
  * @return [RE2::Scanner] an `Enumerable` {RE2::Scanner} object
- * @raises [TypeError] if `text` cannot be coerced to a `String`
+ * @raise [TypeError] if `text` cannot be coerced to a `String`
  * @example
  *   c = RE2::Regexp.new('(\w+)').scan("Foo bar baz")
  *   #=> #<RE2::Scanner:0x0000000000000001>
@@ -1652,7 +1652,7 @@ static VALUE re2_regexp_match_has_endpos_argument_p(VALUE) {
  * @param [String, RE2::Regexp] pattern a regexp matching text to be replaced
  * @param [String] rewrite the string to replace with
  * @return [String] the resulting string
- * @raises [TypeError] if the given rewrite or pattern (if not provided as a
+ * @raise [TypeError] if the given rewrite or pattern (if not provided as a
  *   {RE2::Regexp}) cannot be coerced to `String`s
  * @example
  *   RE2.Replace("hello there", "hello", "howdy") #=> "howdy there"
@@ -1700,7 +1700,7 @@ static VALUE re2_Replace(VALUE, VALUE str, VALUE pattern,
  * @param [String] str the string to modify
  * @param [String, RE2::Regexp] pattern a regexp matching text to be replaced
  * @param [String] rewrite the string to replace with
- * @raises [TypeError] if the given rewrite or pattern (if not provided as a
+ * @raise [TypeError] if the given rewrite or pattern (if not provided as a
  *   {RE2::Regexp}) cannot be coerced to `String`s
  * @return [String] the resulting string
  * @example
@@ -1745,7 +1745,7 @@ static VALUE re2_GlobalReplace(VALUE, VALUE str, VALUE pattern,
  * exactly match the original string.
  *
  * @param [String] unquoted the unquoted string
- * @raises [TypeError] if the given unquoted string cannot be coerced to a `String`
+ * @raise [TypeError] if the given unquoted string cannot be coerced to a `String`
  * @return [String] the escaped string
  * @example
  *   RE2::Regexp.escape("1.5-2.0?") #=> "1\.5\-2\.0\?"

data/lib/re2/regexp.rb

@@ -6,6 +6,7 @@
 # Copyright (c) 2010, Paul Mucur (https://mudge.name)
 # Released under the BSD Licence, please see LICENSE.txt
 
+
 module RE2
   class Regexp
     # Match the pattern against any substring of the given `text` and return a

data/lib/re2/scanner.rb

@@ -6,6 +6,7 @@
 # Copyright (c) 2010, Paul Mucur (https://mudge.name)
 # Released under the BSD Licence, please see LICENSE.txt
 
+
 module RE2
   class Scanner
     include Enumerable

data/lib/re2/string.rb

@@ -9,6 +9,7 @@
 require "re2"
 
 module RE2
+  # @deprecated Use methods on {RE2} and {RE2::Regexp} instead.
   module String
     # @deprecated Use {RE2.Replace} instead.
     def re2_sub(*args)

data/lib/re2/version.rb

@@ -8,6 +8,7 @@
 # Copyright (c) 2010, Paul Mucur (https://mudge.name)
 # Released under the BSD Licence, please see LICENSE.txt
 
+
 module RE2
-  VERSION = "2.5.0"
+  VERSION = "2.6.0"
 end

data/re2.gemspec

@@ -38,8 +38,8 @@ Gem::Specification.new do |s|
     "spec/re2/set_spec.rb",
     "spec/re2/scanner_spec.rb"
   ]
-  s.add_development_dependency("rake-compiler", "~> 1.2.1")
-  s.add_development_dependency("rake-compiler-dock", "~> 1.3.0")
+  s.add_development_dependency("rake-compiler", "~> 1.2.5")
+  s.add_development_dependency("rake-compiler-dock", "~> 1.4.0")
   s.add_development_dependency("rspec", "~> 3.2")
   s.add_runtime_dependency("mini_portile2", "~> 2.8.5") # keep version in sync with extconf.rb
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: re2
 version: !ruby/object:Gem::Version
-  version: 2.5.0
+  version: 2.6.0
 platform: arm64-darwin
 authors:
 - Paul Mucur
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-12-05 00:00:00.000000000 Z
+date: 2023-12-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake-compiler
@@ -17,28 +17,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.2.1
+        version: 1.2.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.2.1
+        version: 1.2.5
 - !ruby/object:Gem::Dependency
   name: rake-compiler-dock
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.3.0
+        version: 1.4.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.3.0
+        version: 1.4.0
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -75,6 +75,7 @@ files:
 - lib/3.0/re2.bundle
 - lib/3.1/re2.bundle
 - lib/3.2/re2.bundle
+- lib/3.3/re2.bundle
 - lib/re2.rb
 - lib/re2/regexp.rb
 - lib/re2/scanner.rb
@@ -104,7 +105,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '2.6'
   - - "<"
     - !ruby/object:Gem::Version
-      version: 3.3.dev
+      version: 3.4.dev
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="