react_on_rails 17.2.1.rc.2 → 17.2.1.rc.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 873030bfb660d497c78ad7f6b1d829afc2ea47f0e9af5eef17d32ecfcbb8eab0
-  data.tar.gz: 06fb62c87edb38282098cff52958084a52337589924caabe98e38ff9ee840180
+  metadata.gz: 8d6e79196d56ec079250f6fd6e5153056a23771944428f93a477e3050ee5ec89
+  data.tar.gz: 26c7692b5445e685d7203d9c8d0a67686c41ed56599d3a91bcfc218cb90bd47c
 SHA512:
-  metadata.gz: 07302dd91bb841ea7cd9e0f8ea66670c79bebb3bee67556a88836b6d37e8343a6718c419db6828f32981156ec7c7928cbaa1d20fe66ce527183b449329fc0083
-  data.tar.gz: 40a186a2d6db7331315ec50a85c3cf5a6a7e61fe1da14cecb60d6b4e6b05ce4c13955de07043c38e9d10a6c11fcca6ee090db812efd1a3581e0c6961860703ae
+  metadata.gz: f025cc17830ea2e1029cf259609e0db2efb67158da5b3f9d87d76498c72ef604269c7c407ee8fc5302644d581b2c5fba34be713989acb0a9447911bf642d6c90
+  data.tar.gz: f2925374b8b20959dea5a4fef12d2b0d9cff4355531121ba9feba7ef60e1f40988ba9d814c181e288d0b357e1eac935d83ce5ebd1ed1c9bfa2571aac154ee6dc

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    react_on_rails (17.2.1.rc.2)
+    react_on_rails (17.2.1.rc.3)
       addressable
       connection_pool
       execjs (~> 2.5)

data/lib/react_on_rails/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module ReactOnRails
-  VERSION = "17.2.1.rc.2"
+  VERSION = "17.2.1.rc.3"
 end

data/lib/react_on_rails/version_checker/lockfile_resolution.rb

@@ -143,10 +143,23 @@ module ReactOnRails
         # ISO timestamps (a time: map), which Psych types as Date/Time and safe parsing would
         # otherwise reject.
         def self.project_document(path)
-          docs = YAML.safe_load_stream(File.read(path), permitted_classes: [Date, Time])
+          docs = safe_load_documents(File.read(path))
           docs.reverse_each.find { |d| d.is_a?(Hash) && (d.key?("importers") || d.key?("dependencies")) }
         end
 
+        # YAML.safe_load_stream exists only from Psych 5.2.5 (Ruby 3.4 ships 5.2.2). Older Psych
+        # parses the stream and safe-loads each document, which keeps the same alias and class
+        # restrictions.
+        def self.safe_load_documents(content)
+          return YAML.safe_load_stream(content, permitted_classes: [Date, Time]) if YAML.respond_to?(:safe_load_stream)
+
+          Psych.parse_stream(content).children.map do |document|
+            single = Psych::Nodes::Stream.new
+            single.children << document
+            YAML.safe_load(single.to_yaml, permitted_classes: [Date, Time])
+          end
+        end
+
         # lockfileVersion >= 6: "16.6.0(react-dom@19.3.0(react@19.3.0))(react@19.3.0)" -> "16.6.0"
         # lockfileVersion 5.x:  "16.6.0_react@19.3.0" -> "16.6.0"
         def self.strip_peer_suffix(version)

data/sig/react_on_rails/version_checker/lockfile_resolution.rbs

@@ -17,6 +17,7 @@ module ReactOnRails
         def self.copy_version: (String key, untyped entry, Regexp key_pattern, String package_name) -> String?
         def self.dependencies: (Hash[String, untyped] doc) -> Hash[String, untyped]?
         def self.project_document: (String path) -> Hash[String, untyped]?
+        def self.safe_load_documents: (String content) -> Array[untyped]
         def self.strip_peer_suffix: (String? version) -> String?
       end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: react_on_rails
 version: !ruby/object:Gem::Version
-  version: 17.2.1.rc.2
+  version: 17.2.1.rc.3
 platform: ruby
 authors:
 - Justin Gordon