rubygems-update 3.1.6 → 3.3.22

data/util/ci.sh

@@ -1,62 +0,0 @@
-#!/usr/bin/env bash
-
-set -eo pipefail
-
-if [ -z "$TEST_TOOL" ]
-then
-  echo "You must specify a TEST_TOOL"
-  exit 1
-fi
-
-case $1 in
-  before_script)
-    if [ -d "$HOME/.rvm" ]
-    then
-      gemhome=$(gem env home)
-      ruby -I lib bin/gem uninstall executable-hooks gem-wrappers bundler-unload -x --force -i "$gemhome@global"
-    fi
-
-    if [ "$TEST_TOOL" = "rubygems" ]
-    then
-      exec rake setup
-    else
-      cd bundler
-
-      export RGV=..
-
-      if [ -n "$BDV" ]
-      then
-        git reset --hard "origin/$BDV"
-      fi
-
-      gem install rake -v "~>12.0"
-      exec bin/rake spec:deps
-    fi
-
-    ;;
-
-  rubocop)
-    gem install rubocop -v "~>0.74.0"
-    exec util/rubocop
-
-    ;;
-
-  script)
-    if [ "$TEST_TOOL" = "rubygems" ]
-    then
-      exec rake test
-    else
-      cd bundler
-
-      export RGV=..
-
-      exec bin/rake spec -t
-    fi
-
-    ;;
-
-  *)
-    echo "unknown args $*"
-    exit 1
-    ;;
-esac

data/util/cops/deprecations.rb

@@ -1,52 +0,0 @@
-# frozen_string_literal: true
-
-module RuboCop
-  module Cop
-    module Rubygems
-      # This cop enforces that no outdated deprecations are present on RubyGems
-      # code base.
-      #
-      # @example
-      #
-      #   As of March, 2019
-      #
-      #   # bad
-      #   deprecate :safdfa, nil, 2018, 12
-      #   deprecate :safdfa, nil, 2019, 03
-      #
-      #   # good
-      #   deprecate :safdfa, nil, 2019, 04
-      #
-      class Deprecations < Cop
-
-        MSG = "Remove `deprecate` calls with dates in the past, along with " \
-          "the methods they deprecate, or expand the deprecation horizons to " \
-          "a future date"
-
-        def on_send(node)
-          _receiver, method_name, *args = *node
-          return unless method_name == :deprecate
-
-          scheduled_year = args[2].children.last
-          scheduled_month = args[3].children.last
-
-          current_time = Time.now
-
-          current_year = current_time.year
-          current_month = current_time.month
-
-          if current_year >= scheduled_year || (current_year == scheduled_year && current_month >= scheduled_month)
-            add_offense(node)
-          end
-        end
-
-        private
-
-        def message(node)
-          format(MSG, method: node.method_name)
-        end
-
-      end
-    end
-  end
-end

data/util/create_certs.rb

@@ -1,171 +0,0 @@
-# frozen_string_literal: true
-require 'openssl'
-require 'time'
-
-class CertificateBuilder
-
-  attr_reader :start
-
-  def initialize(key_size = 2048)
-    @start          = Time.utc 2012, 01, 01, 00, 00, 00
-    @end_of_time    = Time.utc 9999, 12, 31, 23, 59, 59
-    @end_of_time_32 = Time.utc 2038, 01, 19, 03, 14, 07
-
-    @key_size = key_size
-    @serial = 0
-  end
-
-  def create_certificates(key, subject, issuer_key = key, issuer_cert = nil,
-                          not_before: @start, not_after: :end_of_time,
-                          is_ca: false)
-    certificates = []
-
-    not_before, not_before_32 = validity_for not_before
-    not_after,  not_after_32  = validity_for not_after
-    issuer_cert, issuer_cert_32 = issuer_cert
-
-    certificates <<
-      create_certificate(key, subject, issuer_key, issuer_cert,
-                         not_before, not_after, is_ca)
-    certificates <<
-      create_certificate(key, subject, issuer_key, issuer_cert_32,
-                         not_before_32, not_after_32, is_ca)
-
-    certificates
-  end
-
-  def create_certificate(key, subject, issuer_key, issuer_cert,
-                         not_before, not_after, is_ca)
-    cert = OpenSSL::X509::Certificate.new
-    issuer_cert ||= cert # if not specified, create self signing cert
-
-    cert.version    = 2
-    cert.serial     = 0
-
-    cert.not_before = not_before
-    cert.not_after  = not_after
-
-    cert.serial = next_serial
-
-    cert.public_key = key.public_key
-
-    cert.subject = OpenSSL::X509::Name.new [%W[CN #{subject}], %w[DC example]]
-    cert.issuer  = issuer_cert.subject
-
-    ef = OpenSSL::X509::ExtensionFactory.new issuer_cert, cert
-
-    cert.extensions = [
-      ef.create_extension('subjectAltName', "email:#{subject}@example"),
-      ef.create_extension('subjectKeyIdentifier', 'hash')
-    ]
-
-    if cert != issuer_cert  # not self-signed cert
-      cert.add_extension ef.create_extension('authorityKeyIdentifier', 'keyid:always')
-    end
-
-    if is_ca
-      cert.add_extension ef.create_extension('basicConstraints', 'CA:TRUE', true)
-      cert.add_extension ef.create_extension('keyUsage', 'keyCertSign', true)
-    end
-
-    cert.sign issuer_key, OpenSSL::Digest::SHA1.new
-
-    puts "created cert - subject: #{cert.subject}, issuer: #{cert.issuer}"
-    cert
-  end
-
-  def create_key
-    puts "creating key"
-    OpenSSL::PKey::RSA.new @key_size
-  end
-
-  def create_keys(names)
-    keys = {}
-
-    names.each do |name|
-      keys[name] = create_key
-    end
-
-    keys
-  end
-
-  def next_serial
-    serial = @serial
-    @serial += 1
-    serial
-  end
-
-  def validity_for(time)
-    if time == :end_of_time
-      validity    = @end_of_time
-      validity_32 = @end_of_time_32
-    else
-      validity = validity_32 = time
-    end
-
-    [validity, validity_32]
-  end
-
-end
-
-cb = CertificateBuilder.new
-
-keys = cb.create_keys [
-  :alternate,
-  :child,
-  :grandchild,
-  :invalid,
-  :invalidchild,
-  :private,
-]
-
-keys[:public] = keys[:private].public_key
-
-certs = {}
-certs[:public] =
-  cb.create_certificates(keys[:private], 'nobody',
-                         is_ca: true)
-certs[:child] =
-  cb.create_certificates(keys[:child], 'child',
-                         keys[:private], certs[:public],
-                         is_ca: true)
-certs[:alternate] =
-  cb.create_certificates(keys[:alternate], 'alternate')
-certs[:expired] =
-  cb.create_certificates(keys[:private], 'nobody',
-                         not_before: Time.at(0),
-                         not_after: Time.at(0))
-certs[:future] =
-  cb.create_certificates(keys[:private], 'nobody',
-                         not_before: :end_of_time,
-                         not_after: :end_of_time)
-certs[:invalid_issuer] =
-  cb.create_certificates(keys[:invalid], 'invalid',
-                         keys[:invalid], certs[:public],
-                         is_ca: true)
-certs[:grandchild] =
-  cb.create_certificates(keys[:grandchild], 'grandchild',
-                         keys[:child], certs[:child])
-certs[:invalid_signer] =
-  cb.create_certificates(keys[:invalid], 'invalid',
-                         keys[:private], certs[:invalid])
-certs[:invalidchild] =
-  cb.create_certificates(keys[:invalidchild], 'invalidchild',
-                         keys[:invalid], certs[:child])
-certs[:wrong_key] =
-  cb.create_certificates(keys[:alternate], 'nobody')
-
-base_dir = 'test/rubygems'
-
-keys.each do |name, key|
-  dest = File.join base_dir, "#{name}_key.pem"
-  File.write dest, key.to_pem
-end
-
-certs.each do |name, (cert, cert_32)|
-  dest = File.join base_dir, "#{name}_cert.pem"
-  File.write dest, cert.to_pem
-
-  dest = File.join base_dir, "#{name}_cert_32.pem"
-  File.write dest, cert_32.to_pem
-end

data/util/create_certs.sh

@@ -1,27 +0,0 @@
-#!/bin/sh
-
-# cp /etc/ssl/openssl.cnf . # copied from OpenSSL 1.1.1b source
-
-rm -rf demoCA/ server/ client/ 
-
-mkdir demoCA demoCA/private demoCA/newcerts
-touch demoCA/index.txt
-echo 00 > demoCA/serial
-openssl genrsa -out demoCA/private/cakey.pem 2048
-openssl req -new -key demoCA/private/cakey.pem -out demoCA/careq.pem -subj "/C=JP/ST=Tokyo/O=RubyGemsTest/CN=CA"
-openssl ca -batch -config openssl.cnf -extensions v3_ca -out demoCA/cacert.pem -startdate 090101000000Z -enddate 491231235959Z -batch -keyfile demoCA/private/cakey.pem -selfsign -infiles demoCA/careq.pem
-
-mkdir server
-openssl genrsa -out server/server.key 2048
-openssl req -new -key server/server.key -out server/csr.pem -subj "/C=JP/ST=Tokyo/O=RubyGemsTest/CN=localhost"
-openssl ca -batch -config openssl.cnf -startdate 090101000000Z -enddate 491231235959Z -in server/csr.pem -keyfile demoCA/private/cakey.pem -cert demoCA/cacert.pem -out server/cert.pem
-
-mkdir client
-openssl genrsa -out client/client.key 2048
-openssl req -config openssl.cnf -new -key client/client.key -out client/csr.pem -subj "/C=JP/ST=Tokyo/O=RubyGemsTest/CN=client"
-openssl ca -batch -config openssl.cnf -startdate 090101000000Z -enddate 491231235959Z -in client/csr.pem -keyfile demoCA/private/cakey.pem -cert demoCA/cacert.pem -out client/cert.pem
-
-cp demoCA/cacert.pem $(git rev-parse --show-toplevel)/test/rubygems/ca_cert.pem
-cp server/cert.pem $(git rev-parse --show-toplevel)/test/rubygems/ssl_cert.pem
-cp server/server.key $(git rev-parse --show-toplevel)/test/rubygems/ssl_key.pem
-cat client/cert.pem client/client.key > $(git rev-parse --show-toplevel)/test/rubygems/client.pem

data/util/create_encrypted_key.rb

@@ -1,16 +0,0 @@
-# frozen_string_literal: true
-require 'openssl'
-
-test_path = File.expand_path('../../test/rubygems', __FILE__)
-
-private_key_path = "#{test_path}/private_key.pem"
-
-key = OpenSSL::PKey::RSA.new File.read private_key_path
-
-cipher = OpenSSL::Cipher.new 'DES-CBC'
-
-encrypted_key_path = "#{test_path}/encrypted_private_key.pem"
-
-open encrypted_key_path, 'w' do |io|
-  io.write key.to_pem cipher, 'Foo bar'
-end

data/util/generate_spdx_license_list.rb

@@ -1,63 +0,0 @@
-# frozen_string_literal: true
-require 'json'
-require 'net/http'
-require 'uri'
-
-licenses_json = Net::HTTP.get(URI('https://spdx.org/licenses/licenses.json'))
-licenses = JSON.parse(licenses_json)['licenses'].map do |licenseObject|
-  licenseObject['licenseId']
-end
-exceptions_json = Net::HTTP.get(URI('https://spdx.org/licenses/exceptions.json'))
-exceptions = JSON.parse(exceptions_json)['exceptions'].map do |exceptionObject|
-  exceptionObject['licenseExceptionId']
-end
-
-open 'lib/rubygems/util/licenses.rb', 'w' do |io|
-  io.write <<-RUBY
-# frozen_string_literal: true
-require 'rubygems/text'
-
-class Gem::Licenses
-
-  extend Gem::Text
-
-  NONSTANDARD = 'Nonstandard'.freeze
-
-  # Software Package Data Exchange (SPDX) standard open-source software
-  # license identifiers
-  LICENSE_IDENTIFIERS = %w(
-    #{licenses.sort.join "\n    "}
-  ).freeze
-
-  # exception identifiers
-  EXCEPTION_IDENTIFIERS = %w(
-    #{exceptions.sort.join "\n    "}
-  ).freeze
-
-  REGEXP = %r{
-    \\A
-    (
-      \#{Regexp.union(LICENSE_IDENTIFIERS)}
-      \\+?
-      (\\s WITH \\s \#{Regexp.union(EXCEPTION_IDENTIFIERS)})?
-      | \#{NONSTANDARD}
-    )
-    \\Z
-  }ox.freeze
-
-  def self.match?(license)
-    !REGEXP.match(license).nil?
-  end
-
-  def self.suggestions(license)
-    by_distance = LICENSE_IDENTIFIERS.group_by do |identifier|
-      levenshtein_distance(identifier, license)
-    end
-    lowest = by_distance.keys.min
-    return unless lowest < license.size
-    by_distance[lowest]
-  end
-
-end
-  RUBY
-end

data/util/patch_with_prs.rb

@@ -1,77 +0,0 @@
-#!/usr/bin/env ruby
-
-$:.unshift File.expand_path("../../lib", __FILE__)
-require "rubygems"
-require "optparse"
-
-def confirm(prompt = "")
-  loop do
-    print(prompt)
-    print(": ") unless prompt.empty?
-    break if $stdin.gets.strip == "y"
-  end
-rescue Interrupt
-  abort
-end
-
-def sh(*cmd)
-  return if system(*cmd)
-  raise "#{cmd} failed"
-end
-
-version = nil
-prs = []
-
-OptionParser.new do |opts|
-  opts.banner = "Usage: #{__FILE__} [options]"
-
-  opts.on("--version=VERSION", "The version to release") do |v|
-    version = v
-  end
-end.parse!
-
-prs = ARGV.dup
-
-version ||= begin
-  version = Gem::Version.new(Gem::VERSION)
-  segments = version.segments
-  if segments.last.is_a?(String)
-    segments << "1"
-  else
-    segments[-1] += 1
-  end
-  segments.join(".")
-end
-
-confirm "You are about to release #{version}, currently #{Gem::VERSION}"
-
-branch = version.split(".", 3)[0, 2].join(".")
-sh("git", "checkout", branch)
-sh("git", "submodule", "update", "--init", "--recursive")
-
-commits = `git log --oneline origin/master --`.split("\n").map {|l| l.split(/\s/, 2) }.reverse
-commits.select! {|_sha, message| message =~ /(Auto merge of|Merge pull request|Merge) ##{Regexp.union(*prs)}/ }
-
-unless system("git", "cherry-pick", "-x", "-m", "1", *commits.map(&:first))
-  abort unless system("zsh")
-end
-
-sh(Gem.ruby, File.expand_path("../update_changelog.rb", __FILE__))
-
-version_file = "lib/rubygems.rb"
-version_contents = File.read(version_file)
-unless version_contents.sub!(/^(\s*VERSION = )(["'])#{Gem::Version::VERSION_PATTERN}\2/, "\\1#{version.to_s.dump}")
-  abort "failed to update #{version_file}, is it in the expected format?"
-end
-File.open(version_file, "w") {|f| f.write(version_contents) }
-
-confirm "Update changelog"
-sh("git", "commit", "-am", "Version #{version} with changelog")
-sh("rake", "release", "VERSION=#{version}")
-sh("git", "push")
-sh("git", "checkout", "master")
-sh("git", "pull")
-unless system("git", "merge", "v#{version}", "--no-edit")
-  abort unless system("zsh")
-end
-sh("git", "push")

data/util/rubocop

@@ -1,8 +0,0 @@
-#!/usr/bin/env ruby
-# frozen_string_literal: true
-
-begin
-  load Gem.bin_path("rubocop", "rubocop", "~> 0.74.0")
-rescue Gem::GemNotFoundException
-  abort "Install the rubocop gem (~> 0.74.0) to run a static analysis"
-end

data/util/update_bundled_ca_certificates.rb

@@ -1,137 +0,0 @@
-# frozen_string_literal: true
-require 'net/http'
-require 'openssl'
-require 'fileutils'
-
-URIS = [
-  URI('https://rubygems.org'),
-  URI('https://www.rubygems.org'),
-  URI('https://index.rubygems.org'),
-  URI('https://staging.rubygems.org'),
-].freeze
-
-HOSTNAMES_TO_MAP = [
-  'rubygems.org',
-  'index.rubygems.org'
-].freeze
-
-def connect_to(uri, store)
-  # None of the URIs are IPv6, so URI::Generic#hostname(ruby 1.9.3+) isn't needed
-  http = Net::HTTP.new uri.host, uri.port
-
-  http.use_ssl = uri.scheme.downcase == 'https'
-  http.ssl_version = :TLSv1_2
-  http.verify_mode = OpenSSL::SSL::VERIFY_PEER
-  http.cert_store = store
-
-  http.get '/'
-
-  true
-rescue OpenSSL::SSL::SSLError
-  false
-end
-
-def load_certificates(io)
-  cert_texts =
-    io.read.scan(/^-{5}BEGIN CERTIFICATE-{5}.*?^-{5}END CERTIFICATE-{5}/m)
-
-  cert_texts.map do |cert_text|
-    OpenSSL::X509::Certificate.new cert_text
-  end
-end
-
-def show_certificates(certificates)
-  certificates.each do |certificate|
-    p certificate.subject.to_a
-  end
-end
-
-def store_for(certificates)
-  store = OpenSSL::X509::Store.new
-  certificates.each do |certificate|
-    store.add_cert certificate
-  end
-
-  store
-end
-
-def test_certificates(certificates, uri)
-  1.upto certificates.length do |n|
-    puts "combinations of #{n} certificates"
-    certificates.combination(n).each do |combination|
-      match = test_uri uri, combination
-
-      if match
-        $needed_combinations << match
-        puts
-        puts match.map { |certificate| certificate.subject }
-        return
-      else
-        print '.'
-      end
-    end
-    puts
-  end
-end
-
-def test_uri(uri, certificates)
-  store = store_for certificates
-
-  verified = connect_to uri, store
-
-  return certificates if verified
-
-  nil
-end
-
-def hostname_certificate_mapping(certificates)
-  mapping = {}
-  HOSTNAMES_TO_MAP.each do |hostname|
-    uri = URI("https://#{hostname}")
-    certificates.each do |cert|
-      match = test_uri uri, [cert]
-      mapping[hostname] = cert if match && !mapping.values.include?(cert)
-    end
-  end
-  mapping
-end
-
-def write_certificates(certificates)
-  mapping = hostname_certificate_mapping(certificates)
-  mapping.each do |hostname, certificate|
-    subject = certificate.subject.to_a
-    name = (subject.assoc('CN') || subject.assoc('OU'))[1]
-    name = name.delete ' .-'
-
-    FileUtils.mkdir_p("lib/rubygems/ssl_certs/#{hostname}")
-    destination = "lib/rubygems/ssl_certs/#{hostname}/#{name}.pem"
-
-    warn "overwriting certificate #{name}" if File.exist? destination
-
-    open destination, 'w' do |io|
-      io.write certificate.to_pem
-    end
-  end
-end
-
-io =
-  if ARGV.empty?
-    open OpenSSL::X509::DEFAULT_CERT_FILE
-  else
-    ARGF
-  end
-
-certificates = load_certificates io
-puts "loaded #{certificates.length} certificates"
-
-$needed_combinations = []
-
-URIS.each do |uri|
-  puts uri
-
-  test_certificates certificates, uri
-end
-
-needed = $needed_combinations.flatten.uniq
-
-write_certificates needed

data/util/update_changelog.rb

@@ -1,64 +0,0 @@
-#!/usr/bin/env ruby
-
-require 'json'
-require 'net/http'
-
-def github_api(path)
-  base = 'https://api.github.com'
-  url = path.start_with?(base) ? path : base + path
-  uri = URI.parse(url)
-  http = Net::HTTP.new(uri.host, uri.port)
-  http.use_ssl = true
-  req = Net::HTTP::Get.new(uri.request_uri)
-  req["authorization"] = "token #{ENV['GITHUB_API_TOKEN']}" if ENV['GITHUB_API_TOKEN']
-  response = http.request(req)
-  JSON.load(response.body)
-end
-
-def wrap(text, length, indent)
-  result = []
-  work = text.dup
-
-  while work.length > length
-    if work =~ /^(.{0,#{length}})[ \n]/o
-      result << $1
-      work.slice!(0, $&.length)
-    else
-      result << work.slice!(0, length)
-    end
-  end
-
-  result << work unless work.empty?
-  result = result.reduce(String.new) do |acc, elem|
-    acc << "\n" << ' ' * indent unless acc.empty?
-    acc << elem
-  end
-  result += "\n" unless result.end_with?("\n")
-  result
-end
-
-def sentence(text)
-  text = text[0].upcase + text[1..-1]
-  text.end_with?('.') ? text : text << '.'
-end
-
-from = ARGV.shift || Gem::VERSION
-branch = ARGV.shift || "HEAD"
-
-history = File.read(File.expand_path('../../History.txt', __FILE__))
-
-File.open(File.expand_path('../../ChangeLog', __FILE__), 'w') do |changelog|
-  commits = `git log --oneline v#{from}..#{branch}`.split("\n")
-  prs = commits.reverse_each.map { |c| c =~ /(Auto merge of|Merge pull request|Merge) #(\d+)/ && $2 }.compact.uniq.sort!
-  prs.each do |pr|
-    next if history =~ /Pull\srequest\s##{pr}/m
-    details = github_api "/repos/rubygems/rubygems/pulls/#{pr}"
-    title, user = details.values_at('title', 'user')
-    user = github_api(user['url'])
-    name = user['name'] || user['login']
-    changelog << wrap(
-      ['*', sentence(title), sentence("Pull request ##{pr} by #{name}")].join(' '),
-      74, 2
-    )
-  end
-end