rubygems-update 2.5.1 → 2.5.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 2a8f0806e772b0fd07258556709de623f75d0614
-  data.tar.gz: 08f55fd0671659873c7af22435ecfa9e852636ca
+  metadata.gz: c7a47cbfb82b12348825937adf26e751760d82c5
+  data.tar.gz: 9af93cb24d58f63dcf049af89ec9f8a4f2b50501
 SHA512:
-  metadata.gz: de055f8e3f751b3ab5b3b138a488089df9891df5dc8e97f5cf5a11df67d120cb9e7e2d348a699e1de43bb940484f76dbe76116da02f357355f2c9d9283ddfb14
-  data.tar.gz: a2fdc146da6f5f44eecfffe93a2412d04eb7423b96a2cd4fe0983b66f8ca6e7e8ee6c4707d673d7fa87ea607e8bc5102a4d1d52be71d163f7bf1ae21fff1c1da
+  metadata.gz: b2b09e3eb5ebb5c45221f0276d9d027a9eab4ab6ed4b57cb8482a846f508adbc19e423d7a63104a3eabd23affc49570d64380f8884354bbf6fff5e7daf9b249e
+  data.tar.gz: 701530716e4a95ab496ec65d22b2b38f74e43a6ebe022be5183aefcc2ec075b926628c0a931c52d0262f4f35ad3d96fb6c1d081a2133bbdcaced4f71df204d0c

data/.travis.yml

@@ -0,0 +1,46 @@
+---
+after_script:
+- rake travis:after -t
+before_script:
+- gem uninstall executable-hooks gem-wrappers -x --force -i `gem env home`@global
+- gem install rake --no-document
+- gem install hoe-travis --no-document
+- gem install minitest -v '~> 4.7' --no-document
+- rake travis:before -t
+- gem list --details
+- gem env
+language: ruby
+notifications:
+  email:
+  - drbrain@segment7.net
+  - evan+notify@phx.io
+rvm:
+- 1.8.7
+- 1.9.2
+- 1.9.3
+- 2.0.0
+- 2.1.7
+- 2.2.3
+- 2.3.0
+- ruby-head
+env:
+  - "YAML=syck"
+  - "YAML=psych"
+script: rake travis
+matrix:
+  exclude:
+    - rvm: 1.8.7
+      env: "YAML=psych"
+    - rvm: 2.0.0
+      env: "YAML=syck"
+    - rvm: 2.1.7
+      env: "YAML=syck"
+    - rvm: 2.2.3
+      env: "YAML=syck"
+    - rvm: 2.3.0
+      env: "YAML=syck"
+    - rvm: ruby-head
+      env: "YAML=syck"
+  allow_failures:
+    - rvm: ruby-head
+sudo: false

data/CONTRIBUTING.rdoc

@@ -23,36 +23,107 @@ here: http://guides.rubygems.org/contributing/
 
 == Getting Started
 
-Run:
-
     $ gem install hoe
     $ rake newb
 
-After `rake newb` finishes you can run `rake` to run the tests.
-
-== Issues
-
-RubyGems uses milestones and labels to track issues and pull requests.
+To run commands like `gem install` from the repo:
 
-A new milestone is created for each feature release.  New features will be
-merged (for a pull request) or implemented when "enough" have accumulated.
-Upon release the milestone will be closed.  Bug fixes are added to the next
-feature release milestone and merged or fixed and released as-needed.  Bug fix
-releases use the previous feature release minor version number.
+    $ ruby -Ilib bin/gem install
 
-Issues in the "Unfulfilled Promises and Broken Dreams" milestone are looking
-for implementors.  It is highly unlikely they will be implemented by RubyGems
-committers.  They may be closed after one year.
-
-Issues in the "Future" milestone are more likely to be implemented by RubyGems
-committers.  They are triaged with each new feature release and either move to
-the new version numbered milestone, left in "Future" or moved to "Unfulfilled
-Promises and Broken Dreams".  They may be closed after one year.
-
-Issues with accepted status in a feature release milestone have been reviewed
-and triaged and are scheduled for a fix or implementation.
-
-Issues with the feedback status may be closed one week after a request for more
-information from a collaborator.  They will be reopened when more information
-becomes available.
+== Issues
 
+RubyGems uses labels to track all issues and pull requests. In order to provide
+guidance to the community this is documentation of how labels are used in the
+rubygems repository.
+
+=== Type
+
+Most Issues or pull requests will have one of these labels, which describes the
+type of the issue or pull request.
+
+* <b>bug report</b> - An issue describing a bug in rubygems. This would be something
+  that is broken, confusing, unexpected behavior etc.
+* <b>bugfix</b> - A pull request that fixes a bug report.
+* <b>feature request</b> - An issue describing a request for a new feature or
+  enhancement.
+* <b>feature implementation</b> - A pull request implementing a feature request.
+* <b>question</b> - An issue that is a more of a question than a call for specific
+  changes in the codebase.
+* <b>cleanup</b> - Generally for a pull request that improves the code base without
+  fixing a bug or implementing a feature.
+* <b>major bump</b> - This issue or pull request requires a major version bump
+* <b>administrative</b> - This issue relates to adminstrative tasks that need to
+  take place as it relates to rubygems
+
+Bug report and Bugfix have the same color. And feature implementation and
+feature request have the same color since they are related labels.
+
+=== Workflow
+
+These are labels that indicate the state of an issue, where it is in the process
+from being submitted to being closed. These are listed in rough progression
+order from submitted to closed.
+
+* <b>triage</b> - This is an issue or pull request that needs to be properly
+  labeled by by a maintainer.
+* <b>accepted</b> - This issue / pull request has been accepted as valid and
+  will be worked on by someone.
+* <b>ready for work</b> - An issue that is available for collaboration. This issue
+  should have existing discussion on the problem, and a description of how to go
+  about solving it. This label should be removed once someone has said they are
+  going to work on it.
+* <b>claimed</b> - An issue that is claimed by a member of the community and is
+  working on it. If the member can be assigned to the issue, they should be.
+* <b>feedback</b>- This issue/pull request is waiting on feedback from
+  one ore more of the folks involved in the issue. Generally their should be an
+  <tt>@username/team</tt> in the issue indicating who should respond.
+* <b>blocked</b> - the issue/pull request is currently unable to move forward because
+  of some specific reason, generally this will be a reason that is outside
+  RubyGems or needs feedback from some specific individual or group, and it may
+  be a while before something it is resolved.
+
+Feedback and blocked all have the same color since they are all waiting on
+someone in particular to do something.
+
+=== Inactive Reason
+
+Reasons are why an issue / pull request was closed without being worked on or
+accepted. There should also be more detailed information in the comments.
+
+* *duplicate* - This is a duplicate of an existing bug. The comments must
+  reference the existing issue.
+* *abandonded* - This is an issue/pull request that has aged off, is no longer
+  applicable or similar.
+* *declined* - An issue that won't be fixed/implemented or a pull request that 
+  is not accepted.
+* *deprecated* - An issue/pull request that no longer applies to the actively
+  maintained codebase.
+
+All the reason labels are the same maroon color.
+
+=== Categories
+
+These are aspects of the codebase, or what general area the issue or pull
+request pertains too. Not all issues will have a category.
+
+* <b>gemspec</b> - related to the gem specification itself
+* <b>API</b> - related to the public supported rubygems API. This is the code api,
+  not a network related API.
+* <b>command</b> - related to something in <tt>Gem::Commands</tt>
+* <b>install</b> - related to gem installations
+* <b>documentation</b> - related to updating / fixing / clarifiying documentation or
+  guides
+
+All category labels are the same blue color.
+
+=== Platforms
+
+If an issue or pull request pertains to only one platform, then it should have
+an appropriate platform tag.
+
+* *windows*
+* *java*
+* *osx*
+* *linux*
+
+All platform tags are the same purple color.

data/History.txt

@@ -1,5 +1,48 @@
 # coding: UTF-8
 
+=== 2.5.2 / 2016-01-31
+
+Bug fixes:
+
+* Fix memoization of Gem::Version#prerelease? Pull request #1125 by Matijs van
+  Zuijlen.
+* Handle trailing colons in GEM_PATH, by Damien Robert.
+* Improve the Gemfile `gemspec` method, fixing #1204 and #1033. Pull request
+  #1276 by Michael Papis.
+* Warn only once when a gemspec license is invalid. Pull request #1414 by Samuel
+  E. Giddins.
+* Check for exact constants before using them, fixing Ruby bug #11940. Pull
+  request #1438 by Nobuyoshi Nakada.
+* Fix building C extensions on Ruby 1.9.x on Windows. Pull request #1453 by Marie
+  Markwell.
+* Handle symlinks containing ".." correctly. Pull request #1457 by Samuel E.
+  Giddins.
+
+Minor enhancements:
+
+* Add `--no-rc` flag, which skips loading `.gemrc`. Pull request #1329 by Luis
+  Sagastume.
+* Allow basic auth to be excluded from `allowed_push_host`. By Josh Lane.
+* Add `gem list --exact`, which finds gems by string match instead of regex. Pull
+  request #1344 by Luis Sagastume.
+* Suggest alternatives when gem license is unknown. Pull request #1443 by Samuel
+  E. Giddins.
+* Print a useful error if a binstub expects a newer version of a gem than is
+  installed. Pull request #1407 by Samuel E. Giddins.
+* Allow the (supported) s3:// scheme to be used with `--source`. Pull request
+  #1416 by Dave Adams.
+* Add `--[no-]post-install-message` to `install` and `update`. Pull request #1162
+  by Josef Šimánek.
+* Add `--host` option to `yank`, providing symmetry with `pull`. Pull request
+  #1361 by Mike Virata-Stone.
+* Update bundled Molinillo to 0.4.1. Pull request #1452 by Samuel E. Giddins.
+* Allow calling `build` without '.gemspec'. Pull request #1454 by Stephen
+  Blackstone.
+* Add support for `source` option on gems in Gemfile. Pull request #1355 by
+  Michael Papis.
+* Function correctly when string literals are frozen on Ruby 2.3. Pull request
+  #1408 by Samuel E. Giddins.
+
 === 2.5.1 / 2015-12-10
 
 Bug fixes:
@@ -14,7 +57,7 @@ Bug fixes:
   request #1314 by Samuel E. Giddins.
 * Updated bundled Molinillo to 0.4.0.  Pull request #1322, #1396 by Samuel E.
   Giddins.
-* Improved performance of spec loading by reducing likelihood of loading he
+* Improved performance of spec loading by reducing likelihood of loading the
   complete specification.  Pull request #1373 by Aaron Patterson.
 * Improved caching of requirable files  Pull request #1377 by Aaron Patterson.
 * Fixed activation of gems with development dependencies.  Pull request #1388

data/MAINTAINERS.md

@@ -0,0 +1,4 @@
+André Arko <andre@arko.net> (@indirect)
+Jeremy Hinegardner <jeremy@copiousfreetime.org> (@copiousfreetime)
+Kurtis Rainbolt-Greene <me@kurtisrainboltgreene.name> (@krainboltgreene)
+Samuel Giddins <segiddins@segiddins.me> (@segiddins)

data/Manifest.txt

@@ -1,5 +1,6 @@
 .autotest
 .document
+.travis.yml
 CODE_OF_CONDUCT.md
 CONTRIBUTING.rdoc
 CVE-2013-4287.txt
@@ -7,8 +8,10 @@ CVE-2013-4363.txt
 CVE-2015-3900.txt
 History.txt
 LICENSE.txt
+MAINTAINERS.md
 MIT.txt
 Manifest.txt
+POLICIES.rdoc
 README.rdoc
 Rakefile
 UPGRADING.rdoc
@@ -142,6 +145,7 @@ lib/rubygems/resolver/molinillo/lib/molinillo/resolver.rb
 lib/rubygems/resolver/molinillo/lib/molinillo/state.rb
 lib/rubygems/resolver/requirement_list.rb
 lib/rubygems/resolver/set.rb
+lib/rubygems/resolver/source_set.rb
 lib/rubygems/resolver/spec_specification.rb
 lib/rubygems/resolver/specification.rb
 lib/rubygems/resolver/stats.rb

data/POLICIES.rdoc

@@ -0,0 +1,61 @@
+== Long-Term Support
+
+RubyGems long-term support policy will be similar to and follow the Ruby
+long-term support policy.
+
+When a Ruby version reaches end-of-life, the RubyGems version included in that
+release will also reach end-of-life.  After that date no security releases will
+be made for RubyGems releases up to the version shipped in the next release of
+Ruby.
+
+For example, Ruby 1.9.3 reached end-of-life on 23 February 2015.  RubyGems
+version 2.0.0 shipped with Ruby 2.0.0, so no RubyGems versions earlier than
+2.0.0 will receive any updates.  Ruby 2.1.0 shipped with RubyGems 2.2.0.  When
+Ruby 2.0.0 reaches end-of-life no RubyGems versions earlier than 2.2.0 will
+receive any updates.
+
+=== Security Fixes
+
+Security releases will be made for RubyGems version series that were included
+in a Ruby release.
+
+For example, RubyGems 2.0.x will recieve security fixes until Ruby 2.0.0
+reaches end-of-life.
+
+== Release Policies
+
+RubyGems primarily makes bug fix releases off of the master branch.  We may mix
+bug fixes and new features in the same release.  RubyGems does not guarantee
+it will make bug fix releases for earlier versions.
+
+For example, RubyGems 2.5.0 was recently released.  RubyGems does not
+guarantee any non-security bugfix releases will be made upon the 2.4.x series,
+or any earlier series, of releases.
+
+Additionally, when a Ruby version reaches end-of-life the following release of
+RubyGems will no longer be required to maintain backwards compatibility with
+that Ruby version.  This may result in a major version change.
+
+For example, since Ruby 1.9.3 has reached end-of-life, RubyGems may use
+features of ruby that only exist in Ruby 2.0 and later.  As of this writing
+RubyGems is 2.5.x, so the RubyGems version would become 3.x if it used
+features only available in Ruby 2.0 and later.
+
+== Committer Access
+
+RubyGems committers may lose their commit privileges if they are inactive for
+longer than 12 months.  Committer permission may be restored upon request by
+having a pull request merged.
+
+This is designed to improve the maintainability of RubyGems by requiring
+committers to maintain familiarity with RubyGems activity and to improve the
+security of RubyGems by preventing idle committers from having their commit
+permissions compromised or exposed.
+
+== Changing These Policies
+
+These policies were set in order to reduce the burden of maintenance and to
+keep committers current with existing development and policies.  RubyGems work
+is primarily volunteer-driven which limits the ability to provide long-term
+support.  By funding RubyTogether you can help extend support for older
+RubyGems versions.

data/appveyor.yml

@@ -6,6 +6,7 @@ branches:
 clone_depth: 10
 install:
   - SET PATH=C:\Ruby%ruby_version%\bin;%PATH%
+  - SET GEM_HOME=%APPDATA%\.gem
   - ruby --version
   - gem --version
   - gem install rake --no-rdoc --no-ri
@@ -24,8 +25,12 @@ after_test:
 
 environment:
   matrix:
-    - ruby_version: "193"
+    # FIXME: Tests don't even run on Ruby 1.9.3 on Windows on Appveyor.
+    # See: https://github.com/rubygems/rubygems/issues/1270
+    #- ruby_version: "193"
     - ruby_version: "200"
     - ruby_version: "200-x64"
     - ruby_version: "21"
     - ruby_version: "21-x64"
+    - ruby_version: "22"
+    - ruby_version: "22-x64"

data/lib/gauntlet_rubygems.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 require 'rubygems'
 require 'gauntlet'
 

data/lib/rubygems.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 # -*- ruby -*-
 #--
 # Copyright 2006 by Chad Fowler, Rich Kilmer, Jim Weirich and others.
@@ -9,7 +10,7 @@ require 'rbconfig'
 require 'thread'
 
 module Gem
-  VERSION = '2.5.1'
+  VERSION = '2.5.2'
 end
 
 # Must be first since it unloads the prelude from 1.9.2
@@ -238,7 +239,7 @@ module Gem
     specs = dep.matching_specs(true)
 
     raise Gem::GemNotFoundException,
-          "can't find gem #{name} (#{requirements})" if specs.empty?
+          "can't find gem #{dep}" if specs.empty?
 
     specs = specs.find_all { |spec|
       spec.executables.include? exec_name

data/lib/rubygems/available_set.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 class Gem::AvailableSet
 
   include Enumerable

data/lib/rubygems/basic_specification.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 ##
 # BasicSpecification is an abstract class which implements some common code
 # used by both Specification and StubSpecification.
@@ -124,9 +125,9 @@ class Gem::BasicSpecification
 
   def full_name
     if platform == Gem::Platform::RUBY or platform.nil? then
-      "#{name}-#{version}".untaint
+      "#{name}-#{version}".dup.untaint
     else
-      "#{name}-#{version}-#{platform}".untaint
+      "#{name}-#{version}-#{platform}".dup.untaint
     end
   end
 
@@ -281,7 +282,7 @@ class Gem::BasicSpecification
              self.require_paths.first
            end
 
-    "#{self.full_gem_path}/#{dirs}".untaint
+    "#{self.full_gem_path}/#{dirs}".dup.untaint
   end
 
   ##
@@ -325,4 +326,3 @@ class Gem::BasicSpecification
   end
 
 end
-

data/lib/rubygems/command.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 #--
 # Copyright 2006 by Chad Fowler, Rich Kilmer, Jim Weirich and others.
 # All rights reserved.
@@ -153,7 +154,7 @@ class Gem::Command
 
   def show_lookup_failure(gem_name, version, errors, domain)
     if errors and !errors.empty?
-      msg = "Could not find a valid gem '#{gem_name}' (#{version}), here is why:\n"
+      msg = "Could not find a valid gem '#{gem_name}' (#{version}), here is why:\n".dup
       errors.each { |x| msg << "          #{x.wordy}\n" }
       alert_error msg
     else
@@ -539,6 +540,11 @@ class Gem::Command
                     'Turn on Ruby debugging') do
   end
 
+  add_common_option('--norc',
+                    'Avoid loading any .gemrc file') do
+  end
+
+
   # :stopdoc:
 
   HELP = <<-HELP
@@ -579,4 +585,3 @@ end
 
 module Gem::Commands
 end
-