resque-scheduler 4.10.0 → 4.10.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of resque-scheduler might be problematic. Click here for more details.

Files changed (10) hide show
  1. checksums.yaml +4 -4
  2. data/.github/workflows/codeql-analysis.yml +1 -1
  3. data/.github/workflows/rubocop.yml +1 -1
  4. data/.github/workflows/ruby.yml +1 -1
  5. data/CHANGELOG.md +5 -0
  6. data/lib/resque/scheduler/logger_builder.rb +3 -2
  7. data/lib/resque/scheduler/server/views/delayed_schedules.erb +1 -1
  8. data/lib/resque/scheduler/version.rb +1 -1
  9. data/resque-scheduler.gemspec +2 -0
  10. metadata +4 -2
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: e3fea20c1e19d0477785e35cd8e568ed5edb31a1b3e5cb8b50b3bf6ceb8ed417
4
- data.tar.gz: a015f8b83e75f674c2c74b477a656233a19ecc69ae10bbd8b1eca0a7d6328f23
3
+ metadata.gz: cf0c6b96fa880ba5a817d63c04d9e17a070061c1f3cd7fe8b9ad6c91c2ffe016
4
+ data.tar.gz: a01edeea347f025e87b7327a89a6fb509716ecea47b3cbe1a8c4eea0de08e3ff
5
5
  SHA512:
6
- metadata.gz: 2847caf20385af6e97a6316d4e1dc9c69841948a43d913cfe430c7a45786924315e9cf1b8b57c5bd37aa26e68f34fcfd35c6289fd9d63e233bbc0071ce962251
7
- data.tar.gz: 8d612a72c7a3b671125e03d2dd6738691e5a9abce0d2b9ef8060f312b5793570ccc6052541740a07e0b67760359c8a72c4fe5690cca8ae9216322eb65fbabe9c
6
+ metadata.gz: 4a8facf77afaf21a8a39ebfab4cac5f42d97e743a353f70e43dfc3caa7f97da8ff6c9f868d57e9d7ba36c96f4b91cf4c66032e0803d69a1f2f04283e0fddac65
7
+ data.tar.gz: 470bbd7ded28c0c4b62d3aa4bfa9b78c04066e3e430a124c6671c6dd336b3678ff3edab5266a72a705bb6cc8b65e1899b70891b4b06829dc417396d3aebaf8b1
data/.github/workflows/codeql-analysis.yml CHANGED
@@ -27,7 +27,7 @@ jobs:
27
27
 
28
28
  steps:
29
29
  - name: Checkout repository
30
- uses: actions/checkout@v3
30
+ uses: actions/checkout@v4
31
31
 
32
32
  # Initializes the CodeQL tools for scanning.
33
33
  - name: Initialize CodeQL
data/.github/workflows/rubocop.yml CHANGED
@@ -18,7 +18,7 @@ jobs:
18
18
  ]
19
19
 
20
20
  steps:
21
- - uses: actions/checkout@v3
21
+ - uses: actions/checkout@v4
22
22
  - uses: ruby/setup-ruby@v1
23
23
  with:
24
24
  ruby-version: ${{ matrix.ruby }}
data/.github/workflows/ruby.yml CHANGED
@@ -72,7 +72,7 @@ jobs:
72
72
  COVERAGE: 1
73
73
 
74
74
  steps:
75
- - uses: actions/checkout@v3
75
+ - uses: actions/checkout@v4
76
76
  - uses: ruby/setup-ruby@v1
77
77
  with:
78
78
  ruby-version: "${{ matrix.ruby-version }}"
data/CHANGELOG.md CHANGED
@@ -2,6 +2,11 @@
2
2
 
3
3
  **ATTN**: This project uses [semantic versioning](http://semver.org/).
4
4
 
5
+ ## [4.10.1] - 2023-12-15
6
+ ### Fixed
7
+ * Fix json dump crasher with JSON 2.7.0+ by @PatrickTulskie in #781
8
+ * Fix for #761, reflected XSS in delayed_schedules.erb by @PatrickTulskie in #780
9
+
5
10
  ## [4.10.0] - 2023-08-20
6
11
  ### Added
7
12
  * Add logfmt option for logging output (#763)
data/lib/resque/scheduler/logger_builder.rb CHANGED
@@ -59,13 +59,14 @@ module Resque
59
59
  def json_formatter
60
60
  proc do |severity, datetime, progname, msg|
61
61
  require 'json'
62
- JSON.dump(
62
+ log_data = {
63
63
  name: progname,
64
64
  progname: progname,
65
65
  level: severity,
66
66
  timestamp: datetime.iso8601,
67
67
  msg: msg
68
- ) + "\n"
68
+ }
69
+ JSON.dump(log_data) + "\n"
69
70
  end
70
71
  end
71
72
 
data/lib/resque/scheduler/server/views/delayed_schedules.erb CHANGED
@@ -1,4 +1,4 @@
1
- <h1>Delayed jobs scheduled for <%= params[:klass] %> (<%= show_job_arguments(@args) %>)</h1>
1
+ <h1>Delayed jobs scheduled for <%=h params[:klass] %> (<%= show_job_arguments(@args) %>)</h1>
2
2
 
3
3
  <table class='jobs'>
4
4
  <tr>
data/lib/resque/scheduler/version.rb CHANGED
@@ -2,6 +2,6 @@
2
2
 
3
3
  module Resque
4
4
  module Scheduler
5
- VERSION = '4.10.0'.freeze
5
+ VERSION = '4.10.1'.freeze
6
6
  end
7
7
  end
data/resque-scheduler.gemspec CHANGED
@@ -12,6 +12,7 @@ Gem::Specification.new do |spec|
12
12
  Ryan Biesemeyer
13
13
  Dan Buch
14
14
  Michael Bianco
15
+ Patrick Tulskie
15
16
  EOF
16
17
  spec.email = %w(
17
18
  bvandenbos@gmail.com
@@ -19,6 +20,7 @@ Gem::Specification.new do |spec|
19
20
  ryan@yaauie.com
20
21
  dan@meatballhat.com
21
22
  mike@mikebian.co
23
+ patricktulskie@gmail.com
22
24
  )
23
25
  spec.summary = 'Light weight job scheduling on top of Resque'
24
26
  spec.description = <<-DESCRIPTION
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: resque-scheduler
3
3
  version: !ruby/object:Gem::Version
4
- version: 4.10.0
4
+ version: 4.10.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Ben VandenBos
@@ -9,10 +9,11 @@ authors:
9
9
  - Ryan Biesemeyer
10
10
  - Dan Buch
11
11
  - Michael Bianco
12
+ - Patrick Tulskie
12
13
  autorequire:
13
14
  bindir: exe
14
15
  cert_chain: []
15
- date: 2023-08-20 00:00:00.000000000 Z
16
+ date: 2023-12-15 00:00:00.000000000 Z
16
17
  dependencies:
17
18
  - !ruby/object:Gem::Dependency
18
19
  name: bundler
@@ -254,6 +255,7 @@ email:
254
255
  - ryan@yaauie.com
255
256
  - dan@meatballhat.com
256
257
  - mike@mikebian.co
258
+ - patricktulskie@gmail.com
257
259
  executables:
258
260
  - resque-scheduler
259
261
  extensions: []