resque-scheduler 4.10.0 → 4.10.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (10) hide show
  1. checksums.yaml +4 -4
  2. data/.github/workflows/codeql-analysis.yml +1 -1
  3. data/.github/workflows/rubocop.yml +1 -1
  4. data/.github/workflows/ruby.yml +1 -1
  5. data/CHANGELOG.md +9 -0
  6. data/lib/resque/scheduler/logger_builder.rb +3 -2
  7. data/lib/resque/scheduler/server/views/delayed_schedules.erb +1 -1
  8. data/lib/resque/scheduler/version.rb +1 -1
  9. data/resque-scheduler.gemspec +2 -0
  10. metadata +4 -2
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: e3fea20c1e19d0477785e35cd8e568ed5edb31a1b3e5cb8b50b3bf6ceb8ed417
4
- data.tar.gz: a015f8b83e75f674c2c74b477a656233a19ecc69ae10bbd8b1eca0a7d6328f23
3
+ metadata.gz: 6cf8e385c64ab6efafcc8f3a499ec2dc8d7be736604e7d4578dd356f1c19d6e9
4
+ data.tar.gz: a564652590bf3c5dc85695cbbb57fb4ca85873de78c94f0580a104ef5d98cf55
5
5
  SHA512:
6
- metadata.gz: 2847caf20385af6e97a6316d4e1dc9c69841948a43d913cfe430c7a45786924315e9cf1b8b57c5bd37aa26e68f34fcfd35c6289fd9d63e233bbc0071ce962251
7
- data.tar.gz: 8d612a72c7a3b671125e03d2dd6738691e5a9abce0d2b9ef8060f312b5793570ccc6052541740a07e0b67760359c8a72c4fe5690cca8ae9216322eb65fbabe9c
6
+ metadata.gz: 2ab0cea69751963f68055eae115c349a885439a5b33c1c3046a5abd4fc30b676233964d430fa5aeb3eb7960d9339772d41ca31c575156eb4e6583cc66de7497e
7
+ data.tar.gz: f0a4ab726ea640f9df76bbb824078252fb90de9d40c90220611c71069363025933f4a97200c73c13c7c91ff4f02a8c64c735372bbd2e0510e4e5bd021ec081fb
data/.github/workflows/codeql-analysis.yml CHANGED
@@ -27,7 +27,7 @@ jobs:
27
27
 
28
28
  steps:
29
29
  - name: Checkout repository
30
- uses: actions/checkout@v3
30
+ uses: actions/checkout@v4
31
31
 
32
32
  # Initializes the CodeQL tools for scanning.
33
33
  - name: Initialize CodeQL
data/.github/workflows/rubocop.yml CHANGED
@@ -18,7 +18,7 @@ jobs:
18
18
  ]
19
19
 
20
20
  steps:
21
- - uses: actions/checkout@v3
21
+ - uses: actions/checkout@v4
22
22
  - uses: ruby/setup-ruby@v1
23
23
  with:
24
24
  ruby-version: ${{ matrix.ruby }}
data/.github/workflows/ruby.yml CHANGED
@@ -72,7 +72,7 @@ jobs:
72
72
  COVERAGE: 1
73
73
 
74
74
  steps:
75
- - uses: actions/checkout@v3
75
+ - uses: actions/checkout@v4
76
76
  - uses: ruby/setup-ruby@v1
77
77
  with:
78
78
  ruby-version: "${{ matrix.ruby-version }}"
data/CHANGELOG.md CHANGED
@@ -2,6 +2,15 @@
2
2
 
3
3
  **ATTN**: This project uses [semantic versioning](http://semver.org/).
4
4
 
5
+ ## [4.10.2] - 2023-12-15
6
+ ### Fixed
7
+ * Finish fixing CVE-2022-44303, XSS in delayed_schedules by @PatrickTulskie in #783
8
+
9
+ ## [4.10.1] - 2023-12-15
10
+ ### Fixed
11
+ * Fix json dump crasher with JSON 2.7.0+ by @PatrickTulskie in #781
12
+ * Fix for #761, reflected XSS in delayed_schedules.erb by @PatrickTulskie in #780
13
+
5
14
  ## [4.10.0] - 2023-08-20
6
15
  ### Added
7
16
  * Add logfmt option for logging output (#763)
data/lib/resque/scheduler/logger_builder.rb CHANGED
@@ -59,13 +59,14 @@ module Resque
59
59
  def json_formatter
60
60
  proc do |severity, datetime, progname, msg|
61
61
  require 'json'
62
- JSON.dump(
62
+ log_data = {
63
63
  name: progname,
64
64
  progname: progname,
65
65
  level: severity,
66
66
  timestamp: datetime.iso8601,
67
67
  msg: msg
68
- ) + "\n"
68
+ }
69
+ JSON.dump(log_data) + "\n"
69
70
  end
70
71
  end
71
72
 
data/lib/resque/scheduler/server/views/delayed_schedules.erb CHANGED
@@ -1,4 +1,4 @@
1
- <h1>Delayed jobs scheduled for <%= params[:klass] %> (<%= show_job_arguments(@args) %>)</h1>
1
+ <h1>Delayed jobs scheduled for <%=h params[:klass] %> (<%=h show_job_arguments(@args) %>)</h1>
2
2
 
3
3
  <table class='jobs'>
4
4
  <tr>
data/lib/resque/scheduler/version.rb CHANGED
@@ -2,6 +2,6 @@
2
2
 
3
3
  module Resque
4
4
  module Scheduler
5
- VERSION = '4.10.0'.freeze
5
+ VERSION = '4.10.2'.freeze
6
6
  end
7
7
  end
data/resque-scheduler.gemspec CHANGED
@@ -12,6 +12,7 @@ Gem::Specification.new do |spec|
12
12
  Ryan Biesemeyer
13
13
  Dan Buch
14
14
  Michael Bianco
15
+ Patrick Tulskie
15
16
  EOF
16
17
  spec.email = %w(
17
18
  bvandenbos@gmail.com
@@ -19,6 +20,7 @@ Gem::Specification.new do |spec|
19
20
  ryan@yaauie.com
20
21
  dan@meatballhat.com
21
22
  mike@mikebian.co
23
+ patricktulskie@gmail.com
22
24
  )
23
25
  spec.summary = 'Light weight job scheduling on top of Resque'
24
26
  spec.description = <<-DESCRIPTION
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: resque-scheduler
3
3
  version: !ruby/object:Gem::Version
4
- version: 4.10.0
4
+ version: 4.10.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Ben VandenBos
@@ -9,10 +9,11 @@ authors:
9
9
  - Ryan Biesemeyer
10
10
  - Dan Buch
11
11
  - Michael Bianco
12
+ - Patrick Tulskie
12
13
  autorequire:
13
14
  bindir: exe
14
15
  cert_chain: []
15
- date: 2023-08-20 00:00:00.000000000 Z
16
+ date: 2023-12-15 00:00:00.000000000 Z
16
17
  dependencies:
17
18
  - !ruby/object:Gem::Dependency
18
19
  name: bundler
@@ -254,6 +255,7 @@ email:
254
255
  - ryan@yaauie.com
255
256
  - dan@meatballhat.com
256
257
  - mike@mikebian.co
258
+ - patricktulskie@gmail.com
257
259
  executables:
258
260
  - resque-scheduler
259
261
  extensions: []