roda 2.18.0 → 2.19.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: b5e850d352a98dff085d020e04fa52c55894edaf
-  data.tar.gz: 0fb277bfbfd64699d15d6e56325464e5ba3cb5cb
+  metadata.gz: 3b6466dae7413eb39adad4261800c4a31373bd59
+  data.tar.gz: e03a612cbbcc10f0745c7c5ac90dd60ba42d2608
 SHA512:
-  metadata.gz: a779f1e2cb695dab260f457798582014dd7bee889304de79cea0c05c43f3252b350cddb33e9d17d601f6844eaedc241290b48a2daf7ede4a89133113a2c2f353
-  data.tar.gz: 8594f7058bd36a6cfba5cd47831b0e5267927f09e740c4c2e3b14f237a98432aaa5dde2c15b5a9d9ecb4944de9d35125adc548382383e366795ca8d4678dff1c
+  metadata.gz: eed87278923a1e0c6c02bf903a42e3951bc2d4f3b7107f3a7e7898287abc374185cdb1fa4456392695bd8649cdc132f31764054dd911a4bd3b4cea24652259ac
+  data.tar.gz: 7d79e779afcbd05769a6568920ef5854c5ae9bfdeb9cf5947177efa73a08d1350d63f758ddb747e566991dfccd7df21a1e430b35872d9bae75692b1cd29a027a

data/CHANGELOG

@@ -1,3 +1,15 @@
+= 2.19.0 (2016-10-14)
+
+* Don't add Content-Type/Content-Length headers for 1xx, 204, 205, 304 statuses (celsworth, jeremyevans) (#101, #102)
+
+* Optimize indifferent_params plugin when using Rack 2 (jeremyevans)
+
+* Fix assets_paths method in assets plugin when subresource integrity is used (jeremyevans, celsworth)
+
+* Make assets plugin depend on h plugin, instead of using Rack::Utils.escape_html (jeremyevans)
+
+* Make h plugin not escape / (celsworth, jeremyevans) (#100)
+
 = 2.18.0 (2016-09-13)
 
 * Add assets_preloading plugin, for creating link tags or Link header for preloading assets (celsworth, jeremyevans) (#98)

data/doc/release_notes/2.18.0.txt

@@ -2,16 +2,16 @@
 
 * A static_routing plugin has been added, which can give a 3-4x
   increase in performance for large number of static routes, and
-	makes routing O(1) for static routes.  Static routes are routes
-	that match full paths, with no placeholders, and are checked before
-	using the normal routing tree.
-
-	Static routes are defined via class-level static_* routing methods.
-	There is a static_* routing method for each HTTP verb (e.g.
-	static_get), as well as a static_route method, which will work
-	for any HTTP verb, with the verb-specific method taking priority.
-	By using static_route, you can get significantly faster performance
-	while retaining some of the benefits of Roda's routing tree design
+  makes routing O(1) for static routes.  Static routes are routes
+  that match full paths, with no placeholders, and are checked before
+  using the normal routing tree.
+
+  Static routes are defined via class-level static_* routing methods.
+  There is a static_* routing method for each HTTP verb (e.g.
+  static_get), as well as a static_route method, which will work
+  for any HTTP verb, with the verb-specific method taking priority.
+  By using static_route, you can get significantly faster performance
+  while retaining some of the benefits of Roda's routing tree design
   (simple shared logic with verb specific behavior). Example:
 
     plugin :static_routing
@@ -35,25 +35,25 @@
     end
 
   Because static routing routes on the full path instead of by
-	path segment, the methods takes the full path as a string,
-	including the leading slash.
+  path segment, the methods takes the full path as a string,
+  including the leading slash.
 
 * An assets_preloading plugin has been added, which makes it simple
   to generate HTML link tags or a Link header value to tell the
-	browser to preload assets for performance reasons.
+  browser to preload assets for performance reasons.
 
-	  # In routes, using the Link header:
-		response.headers['Link'] = preload_assets_link_header(:css)
+    # In routes, using the Link header:
+    response.headers['Link'] = preload_assets_link_header(:css)
 
-		# In templates, using a link tag:
-		<%= preload_assets_link_tags(:css) %>
+    # In templates, using a link tag:
+    <%= preload_assets_link_tags(:css) %>
 
 = New Features
 
 * RodaRequest#real_remaining_path has been added.  This is designed
   to be overridden by plugins that modify remaining_path for internal
-	routing purposes.  RodaRequest#run now uses real_remaining_path
-	when passing requests to other rack applications.
+  routing purposes.  RodaRequest#run now uses real_remaining_path
+  when passing requests to other rack applications.
 
 * An assets_paths method has been added to the assets plugin.  This
   is similar to the assets method, but it returns an array of paths
@@ -63,7 +63,7 @@
 
 * The public plugin now works correctly when used with the
   type_routing plugin, for paths ending in extensions that
-	type_routing is configured to handle.
+  type_routing is configured to handle.
 
 * The head plugin now works with the not_allowed plugin if it is
   loaded after the not_allowed plugin.

data/doc/release_notes/2.19.0.txt

@@ -0,0 +1,30 @@
+= Improvements
+
+* The indifferent_params plugin is now optimized when using Rack 2,
+  using Rack 2's query_parser API, and it no longer needs to do a
+  deep copy of the params.
+
+* The Content-Type and Content-Length headers are no longer added
+  for 1xx, 204, 205, and 304 responses.
+
+* The assets_paths method in the assets plugin now works
+  correctly when subresource integrity is enabled.
+
+* The asset paths are now escaped in tags by the assets and
+  assets_preloading plugins.  While it's unlikely a developer
+  would use an asset path that requires escaping, that case is
+  now handled correctly.
+
+* The h plugin no longer calls Rack::Utils.escape_html, instead
+  implementing it's own html escaping.
+
+* The assets plugin now uses the h plugin, instead of calling
+  Rack::Utils.escape_html.
+
+= Backwards Compatibility
+
+* The h plugin's html escaping no longer escapes "/", which is
+  a behavior change if you are using any recent version of rack.
+  The security arguments made to escape "/" could be applied to
+  many other characters, so if you want to escape "/", you should
+  probably use a separate method that escapes all \W characters.

data/lib/roda.rb

@@ -867,6 +867,7 @@ class Roda
       # Instance methods for RodaResponse
       module ResponseMethods
         CONTENT_LENGTH = "Content-Length".freeze
+        CONTENT_TYPE = "Content-Type".freeze
         DEFAULT_HEADERS = {"Content-Type" => "text/html".freeze}.freeze
         LOCATION = "Location".freeze
 
@@ -932,10 +933,17 @@ class Roda
         #   #      []]
         def finish
           b = @body
-          s = (@status ||= b.empty? ? 404 : default_status)
+          empty = b.empty?
+          s = (@status ||= empty ? 404 : default_status)
           set_default_headers
           h = @headers
-          h[CONTENT_LENGTH] ||= @length.to_s
+
+          if empty && (s == 304 || s == 204 || s == 205 || (s >= 100 && s <= 199))
+            h.delete(CONTENT_TYPE)
+          else
+            h[CONTENT_LENGTH] ||= @length.to_s
+          end
+
           [s, h, b]
         end
 

data/lib/roda/plugins/assets.rb

@@ -319,15 +319,17 @@ class Roda
       CONTENT_ENCODING = 'Content-Encoding'.freeze
       GZIP = 'gzip'.freeze
       DOTGZ = '.gz'.freeze
+      EMPTY_ATTRS = {}.freeze
 
       # Internal exception raised when a compressor cannot be found
       CompressorNotFound = Class.new(RodaError)
 
-      # Load the render and caching plugins plugins, since the assets plugin
+      # Load the render, caching, and h plugins, since the assets plugin
       # depends on them.
       def self.load_dependencies(app, _opts = nil)
         app.plugin :render
         app.plugin :caching
+        app.plugin :h
       end
 
       # Setup the options for the plugin.  See the Assets module RDoc
@@ -605,35 +607,23 @@ class Roda
         # asset group. See the assets function documentation for details.
         def assets_paths(type)
           o = self.class.assets_opts
-          type, *dirs = type if type.is_a?(Array)
-          stype = type.to_s
-          ru = Rack::Utils
+          if type.is_a?(Array)
+            ltype, *dirs = type
+          else
+            ltype = type
+          end
+          stype = ltype.to_s
 
           url_prefix = request.script_name if self.class.opts[:add_script_name]
 
           if compiled = o[:compiled]
-            asset_host = o[:compiled_asset_host]
-            if dirs && !dirs.empty?
-              key = dirs.join(DOT)
-              ckey = "#{stype}.#{key}"
-              if hash = ukey = compiled[ckey]
-                ukey = "#{key}.#{ukey}"
-              end
-            else
-              hash = ukey = compiled[stype]
-            end
-
-            if ukey
-              if algo = o[:sri]
-                integrity = "\" integrity=\"#{algo}-#{ru.escape_html([[hash].pack('H*')].pack('m').tr("\n", EMPTY_STRING))}"
-              end
-
-              [ "#{asset_host}#{url_prefix}/#{o[:"compiled_#{stype}_prefix"]}.#{ukey}.#{stype}#{integrity}" ]
+            if ukey = _compiled_assets_hash(type, true)
+              ["#{o[:compiled_asset_host]}#{url_prefix}/#{o[:"compiled_#{stype}_prefix"]}.#{ukey}.#{stype}"]
             else
               []
             end
           else
-            asset_dir = o[type]
+            asset_dir = o[ltype]
             if dirs && !dirs.empty?
               dirs.each{|f| asset_dir = asset_dir[f]}
               prefix = "#{dirs.join(SLASH)}/" if o[:group_subdirs]
@@ -652,19 +642,17 @@ class Roda
         # When the assets are not compiled, this will result in a separate
         # tag for each asset file.  When the assets are compiled, this will
         # result in a single tag to the compiled asset file.
-        def assets(type, attrs = nil)
-          ru = Rack::Utils
-          attrs = if attrs
-            attrs.map{|k,v| "#{k}=\"#{ru.escape_html(v.to_s)}\""}.join(SPACE)
-          else
-            EMPTY_STRING
-          end
+        def assets(type, attrs = EMPTY_ATTRS)
+          ltype = type.is_a?(Array) ? type[0] : type
 
-          ltype = if type.is_a?(Array)
-            type[0]
-          else
-            type
+          o = self.class.assets_opts
+          if o[:compiled] && (algo = o[:sri]) && (hash = _compiled_assets_hash(type))
+            attrs = Hash[attrs]
+            attrs[:integrity] = "#{algo}-#{h([[hash].pack('H*')].pack('m').tr("\n", EMPTY_STRING))}"
           end
+
+          attrs = attrs.map{|k,v| "#{k}=\"#{h(v)}\""}.join(SPACE)
+
           if ltype == :js
             tag_start = "<script type=\"text/javascript\" #{attrs} src=\""
             tag_end = JS_END
@@ -673,7 +661,7 @@ class Roda
             tag_end = CSS_END
           end
 
-          assets_paths(type).map{|p| "#{tag_start}#{p}#{tag_end}"}.join(NEWLINE)
+          assets_paths(type).map{|p| "#{tag_start}#{h(p)}#{tag_end}"}.join(NEWLINE)
         end
 
         # Render the asset with the given filename.  When assets are compiled,
@@ -719,6 +707,24 @@ class Roda
 
         private
 
+        def _compiled_assets_hash(type, return_ukey=false)
+          compiled = self.class.assets_opts[:compiled]
+          type, *dirs = type if type.is_a?(Array)
+          stype = type.to_s
+
+          if dirs && !dirs.empty?
+            key = dirs.join(DOT)
+            ckey = "#{stype}.#{key}"
+            if hash = ukey = compiled[ckey]
+              ukey = "#{key}.#{ukey}"
+            end
+          else
+            hash = ukey = compiled[stype]
+          end
+
+          return_ukey ? ukey : hash
+        end
+
         # Return when the file was last modified.  If the file depends on any
         # other files, check the modification times of all dependencies and
         # return the maximum.

data/lib/roda/plugins/assets_preloading.rb

@@ -61,7 +61,7 @@ class Roda
         # Return a string of <link> tags for the given asset
         # types/groups.
         def preload_assets_link_tags(*args)
-          _preload_assets_array(args).map{|path, as| "<link href=\"#{path}\" rel=\"preload\" as=\"#{as}\">"}.join(NEWLINE)
+          _preload_assets_array(args).map{|path, as| "<link href=\"#{h(path)}\" rel=\"preload\" as=\"#{as}\">"}.join(NEWLINE)
         end
 
         # Return a string suitable for a Link header for the

data/lib/roda/plugins/h.rb

@@ -14,10 +14,23 @@ class Roda
     #     h('<foo>')
     #   end
     module H
+      # A Hash of entities and their escaped equivalents,
+      # to be escaped by h().
+      ESCAPE_HTML = {
+        "&" => "&amp;".freeze,
+        "<" => "&lt;".freeze,
+        ">" => "&gt;".freeze,
+        "'" => "&#x27;".freeze,
+        '"' => "&quot;".freeze,
+      }.freeze
+
+      # A Regexp of HTML entities to match for escaping.
+      ESCAPE_HTML_PATTERN = Regexp.union(*ESCAPE_HTML.keys)
+
       module InstanceMethods
         # HTML escape the input and return the escaped version.
-        def h(s)
-          ::Rack::Utils.escape_html(s.to_s)
+        def h(string)
+          string.to_s.gsub(ESCAPE_HTML_PATTERN){|c| ESCAPE_HTML[c] }
         end
       end
     end

data/lib/roda/plugins/indifferent_params.rb

@@ -4,9 +4,9 @@
 class Roda
   module RodaPlugins
     # The indifferent_params plugin adds a +params+ instance
-    # method which returns a copy of the request params hash
-    # that will automatically convert symbols to strings.
-    # Example:
+    # method which offers indifferent access to the request
+    # params, allowing you to use symbols to lookup values in
+    # a hash where the keys are strings.  Example:
     #
     #   plugin :indifferent_params
     #
@@ -14,39 +14,81 @@ class Roda
     #     params[:foo]
     #   end
     #
-    # The params hash is initialized lazily, so you only pay
-    # the penalty of copying the request params if you call
-    # the +params+ method.
+    # The exact behavior depends on the version of Rack in use.
+    # If you are using Rack 2, this plugin uses rack's API
+    # to set the query parser for the request to use indifferent
+    # access. Rack 1 doesn't support indifferent access to
+    # params, so if you are using Rack 1, this plugin will make
+    # a deep copy of the request params hash, where each level
+    # uses indifferent access.  On Rack 1, The params hash is
+    # initialized lazily, so you only pay the penalty of
+    # copying the request params if you call the +params+ method.
     #
     # Note that there is a rack-indifferent gem that
-    # automatically makes rack use indifferent params. Using
-    # rack-indifferent is faster and has some other minor
-    # advantages over the indifferent_params plugin, though
-    # it affects rack itself instead of just the Roda app that
+    # monkey patches rack to always use indifferent params. If
+    # you are using Rack 1, it is recommended to use
+    # rack-indifferent instead of this plugin, as it is faster
+    # and has some other minor advantages, though
+    # it affects all rack applications instead of just the Roda app that
     # you load the plugin into.
     module IndifferentParams
-      module InstanceMethods
-        # A copy of the request params that will automatically
-        # convert symbols to strings.
-        def params
-          @_params ||= indifferent_params(request.params)
+      INDIFFERENT_PROC = lambda{|h,k| h[k.to_s] if k.is_a?(Symbol)}
+
+      if Rack.release > '2'
+        class QueryParser < Rack::QueryParser
+          # Work around for invalid optimization in rack
+          def parse_nested_query(qs, d=nil)
+            return make_params.to_params_hash if qs.nil? || qs.empty?
+            super
+          end
+          
+          class Params < Rack::QueryParser::Params
+            def initialize(limit = Rack::Utils.key_space_limit)
+              @limit  = limit
+              @size   = 0
+              @params = Hash.new(&INDIFFERENT_PROC)
+            end
+          end
+
         end
 
-        private
-
-        # Recursively process the request params and convert
-        # hashes to support indifferent access, leaving
-        # other values alone.
-        def indifferent_params(params)
-          case params 
-          when Hash
-            hash = Hash.new{|h, k| h[k.to_s] if Symbol === k}
-            params.each{|k, v| hash[k] = indifferent_params(v)}
-            hash
-          when Array
-            params.map{|x| indifferent_params(x)}
-          else
-            params
+        module RequestMethods
+          QUERY_PARSER = Rack::Utils.default_query_parser = QueryParser.new(QueryParser::Params, 65536, 100)
+
+          def query_parser
+            QUERY_PARSER
+          end
+        end
+
+        module InstanceMethods
+          def params
+            @_request.params
+          end
+        end
+      else
+        module InstanceMethods
+          # A copy of the request params that will automatically
+          # convert symbols to strings.
+          def params
+            @_params ||= indifferent_params(@_request.params)
+          end
+
+          private
+
+          # Recursively process the request params and convert
+          # hashes to support indifferent access, leaving
+          # other values alone.
+          def indifferent_params(params)
+            case params 
+            when Hash
+              hash = Hash.new(&INDIFFERENT_PROC)
+              params.each{|k, v| hash[k] = indifferent_params(v)}
+              hash
+            when Array
+              params.map{|x| indifferent_params(x)}
+            else
+              params
+            end
           end
         end
       end  

data/lib/roda/version.rb

@@ -4,7 +4,7 @@ class Roda
   RodaMajorVersion = 2
 
   # The minor version of Roda, updated for new feature releases of Roda.
-  RodaMinorVersion = 18
+  RodaMinorVersion = 19
 
   # The patch version of Roda, updated only for bug fixes from the last
   # feature release.

data/spec/plugin/assets_preloading_spec.rb

@@ -1,5 +1,21 @@
 require File.expand_path("spec_helper", File.dirname(File.dirname(__FILE__)))
 
+run_tests = true
+begin
+  begin
+    require 'tilt/sass'
+  rescue LoadError
+    begin
+      for lib in %w'tilt sass'
+        require lib
+      end
+    rescue LoadError
+      warn "#{lib} not installed, skipping assets_preloading plugin test"
+      run_tests = false
+    end
+  end
+end
+
 describe "assets_preloading plugin" do
   before do
     app(:bare) do
@@ -79,4 +95,4 @@ describe "assets_preloading plugin" do
     html = body('/tags-js')
     html.scan('as="script"').count.must_equal 1
   end
-end
+end if run_tests

data/spec/plugin/assets_spec.rb

@@ -294,20 +294,20 @@ if run_tests
     end
 
     [[:sha256, 64, 44], [:sha384, 96, 64], [:sha512, 128, 88]].each do |algo, hex_length, base64_length|
-      it 'should handle :sri option for subresource integrity when compiling assets' do
+      it "should handle :sri option for subresource integrity for #{algo} when compiling assets" do
         app.plugin :assets, :sri=>algo
         app.compile_assets
         html = body('/test')
         html.scan(/<link/).length.must_equal 1
-        html =~ %r|integrity="#{algo}-([^"]+)" />|
-        css_hash = $1.gsub('&#x2F;', '/')
+        html =~ %r|et" integrity="#{algo}-([^"]+)"|
+        css_hash = $1
         css_hash.length.must_equal base64_length
         html =~ %r|href="(/assets/app\.[a-f0-9]{#{hex_length}}\.css)"|
         css = body($1)
         [Digest.const_get(algo.to_s.upcase).digest(css)].pack('m').tr("\n", "").must_equal css_hash
         html.scan(/<script/).length.must_equal 1
-        html =~ %r|integrity="#{algo}-([^"]+)"></script>|
-        js_hash = $1.gsub('&#x2F;', '/')
+        html =~ %r|pt" integrity="#{algo}-([^"]+)"|
+        js_hash = $1
         js_hash.length.must_equal base64_length
         html =~ %r|src="(/assets/app\.head\.[a-f0-9]{#{hex_length}}\.js)"|
         js = body($1)

data/spec/plugin/content_for_spec.rb

@@ -2,9 +2,8 @@ require File.expand_path("spec_helper", File.dirname(File.dirname(__FILE__)))
 
 begin
   require 'tilt/erb'
-  require 'tilt/haml'
 rescue LoadError
-  warn "tilt, erb, or haml not installed, skipping content_for plugin test"
+  warn "tilt not installed, skipping content_for plugin test"
 else
 describe "content_for plugin with erb" do
   before do
@@ -39,6 +38,37 @@ describe "content_for plugin with erb" do
   end
 end
 
+describe "content_for plugin with multiple calls to the same key" do
+  before do
+    app(:bare) do
+      plugin :render, :views => './spec/views'
+      plugin :content_for
+
+      route do |r|
+        r.root do
+          view(:inline => "<% content_for :foo do %>foo<% end %><% content_for :foo do %>baz<% end %>bar", :layout => { :inline => '<%= yield %> <%= content_for(:foo) %>' })
+        end
+      end
+    end
+  end
+
+  it "should replace with multiple calls to the same key by default" do
+    body.strip.must_equal "bar baz"
+  end
+
+  it "should append with multiple calls to the same key if :append plugin option is used" do
+    app.plugin :content_for, :append => true
+    body.strip.must_equal "bar foobaz"
+  end
+end
+end
+
+begin
+  require 'tilt/erb'
+  require 'tilt/haml'
+rescue LoadError
+  warn "tilt or haml not installed, skipping content_for plugin haml tests"
+else
 describe "content_for plugin with haml" do
   before do
     app(:bare) do
@@ -107,28 +137,4 @@ describe "content_for plugin when overriding :engine" do
     body('/a').strip.must_equal "bar\nfoo"
   end
 end
-
-describe "content_for plugin with multiple calls to the same key" do
-  before do
-    app(:bare) do
-      plugin :render, :views => './spec/views'
-      plugin :content_for
-
-      route do |r|
-        r.root do
-          view(:inline => "<% content_for :foo do %>foo<% end %><% content_for :foo do %>baz<% end %>bar", :layout => { :inline => '<%= yield %> <%= content_for(:foo) %>' })
-        end
-      end
-    end
-  end
-
-  it "should replace with multiple calls to the same key by default" do
-    body.strip.must_equal "bar baz"
-  end
-
-  it "should append with multiple calls to the same key if :append plugin option is used" do
-    app.plugin :content_for, :append => true
-    body.strip.must_equal "bar foobaz"
-  end
-end
 end

data/spec/plugin/h_spec.rb

@@ -3,9 +3,9 @@ require File.expand_path("spec_helper", File.dirname(File.dirname(__FILE__)))
 describe "h plugin" do 
   it "adds h method for html escaping" do
     app(:h) do |r|
-      h("<form>") + h(:form)
+      h("<form>") + h(:form) + h("test&<>/'")
     end
 
-    body.must_equal '&lt;form&gt;form'
+    body.must_equal '&lt;form&gt;formtest&amp;&lt;&gt;/&#x27;'
   end
 end

data/spec/plugin/indifferent_params_spec.rb

@@ -9,5 +9,6 @@ describe "indifferent_params plugin" do
     end
 
     body('QUERY_STRING'=>'a=2&b[][c]=3', 'rack.input'=>StringIO.new).must_equal '2/3'
+    body('REQUEST_METHOD'=>'POST', 'rack.input'=>StringIO.new('a=2&b[][c]=3')).must_equal '2/3'
   end
 end

data/spec/response_spec.rb

@@ -65,6 +65,16 @@ describe "response #finish" do
     header('Content-Length').must_equal '1'
   end
 
+  it "should not set Content-Type header on a 204 response" do
+    app do |r|
+      response.status = 204
+      throw :halt, response.finish
+    end
+
+    header('Content-Type').must_equal nil
+    header('Content-Length').must_equal nil
+  end
+
   it "should not overwrite existing status" do
     app do |r|
       response.status = 500

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: roda
 version: !ruby/object:Gem::Version
-  version: 2.18.0
+  version: 2.19.0
 platform: ruby
 authors:
 - Jeremy Evans
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-09-13 00:00:00.000000000 Z
+date: 2016-10-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
@@ -184,6 +184,7 @@ extra_rdoc_files:
 - doc/release_notes/2.16.0.txt
 - doc/release_notes/2.17.0.txt
 - doc/release_notes/2.18.0.txt
+- doc/release_notes/2.19.0.txt
 files:
 - CHANGELOG
 - MIT-LICENSE
@@ -205,6 +206,7 @@ files:
 - doc/release_notes/2.16.0.txt
 - doc/release_notes/2.17.0.txt
 - doc/release_notes/2.18.0.txt
+- doc/release_notes/2.19.0.txt
 - doc/release_notes/2.2.0.txt
 - doc/release_notes/2.3.0.txt
 - doc/release_notes/2.4.0.txt
@@ -420,7 +422,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.5.1
+rubygems_version: 2.6.6
 signing_key: 
 specification_version: 4
 summary: Routing tree web toolkit