rsyntaxtree 1.6.2 → 1.6.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f13f7407a77bda563986883ec33eed5c2699305e73428582e0caf2c64c7cdf22
-  data.tar.gz: 329f1d4357b0034709bd842f117c14ea401dad18b7ca72e65b917149fcc794a9
+  metadata.gz: dd3b753fd33f6df5903c6df87d02bf7c7ac45de57e1ba18da51f03fe391ab45f
+  data.tar.gz: 3f53988bbb1ccd64b75792b822ccb04eca2d7f209500d881610cf2295ced3ce7
 SHA512:
-  metadata.gz: 4bab8dc69ae2631ae4818e41a2b986136ab9b40e20a6e9bd2e4793b745e605193f35920e5679e48f5e37bc89211c26e2a1f659a432292c2fd3c027fe35063ae1
-  data.tar.gz: 36db33880b172ac48da638dc0de97797481c88ca6af3bddb632cb1e5f7f795d5146ad1cac5d29f242213157bd16a8c44e031c690d55561fd73076be4bb2dde0e
+  metadata.gz: 66e9a66413e457d4de55902743cc9ad61861c4b7fcdb4d9951d79966893e0665f5fea1e369ec69bbf058104627fc156250c841e2213f22b55b1c5b306991f311
+  data.tar.gz: 94ff87d7fab49605087c81bc98639c86fe768c1842048438c87381d22ebbf4d651cc0b5b6cadc16acf169cdee9021b694a8239777bc6088a4d3eb3d5f985d248

data/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [1.6.3] - 2026-07
+
+### Fixed
+- Packaged files no longer carry owner-only permissions. `gem build` preserves
+  on-disk modes, so gems built from a checkout with `0600`/`0700` files shipped
+  a library unreadable — and a `rsyntaxtree` CLI unexecutable — by anyone but
+  the owner after `sudo gem install`. File modes are now normalized before the
+  gem is built: `0755` for commands (`bin/`, `exe/`) and shebang scripts, `0644`
+  for everything else. This also drops stray executable bits that the working
+  tree had picked up on data files (images, fonts, Markdown, CSS, library
+  sources).
+
 ## [1.6.2] - 2026-06
 
 ### Fixed

data/Rakefile

@@ -13,6 +13,25 @@ Rake::TestTask.new do |task|
     task.warning = false
 end
 
+# Gem packaging preserves on-disk file modes. Owner-only permissions (which a
+# Dropbox-synced checkout tends to produce) ship files that are unreadable, and
+# a CLI that is unexecutable, for anyone but the owner after `sudo gem install`.
+# Normalize every tracked file before the gem is built: a file is executable
+# only if it is a command (bin/, exe/) or a script with a shebang; everything
+# else is data and gets 0644. Deciding by path/content rather than by the
+# current mode also drops stray executable bits picked up from the filesystem.
+task :normalize_permissions do
+    `git ls-files -z`.split("\x0").each do |f|
+        next unless File.file?(f)
+
+        executable = f.start_with?("bin/", "exe/") ||
+                     File.open(f, "rb") { |io| io.read(2) } == "#!"
+        File.chmod(executable ? 0o755 : 0o644, f)
+    end
+end
+
+Rake::Task["build"].enhance([:normalize_permissions])
+
 desc "Generate SVG and PNG example images locally"
 task :generate do
     require_relative "dev/generate_examples"

data/lib/rsyntaxtree/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module RSyntaxTree
-  VERSION = "1.6.2"
+  VERSION = "1.6.3"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rsyntaxtree
 version: !ruby/object:Gem::Version
-  version: 1.6.2
+  version: 1.6.3
 platform: ruby
 authors:
 - Yoichiro Hasebe