rubygems-update 3.5.17 → 3.5.19

data/lib/rubygems/vendor/securerandom/lib/securerandom.rb

@@ -0,0 +1,96 @@
+# -*- coding: us-ascii -*-
+# frozen_string_literal: true
+
+require_relative 'random/formatter'
+
+# == Secure random number generator interface.
+#
+# This library is an interface to secure random number generators which are
+# suitable for generating session keys in HTTP cookies, etc.
+#
+# You can use this library in your application by requiring it:
+#
+#   require 'rubygems/vendor/securerandom/lib/securerandom'
+#
+# It supports the following secure random number generators:
+#
+# * openssl
+# * /dev/urandom
+# * Win32
+#
+# Gem::SecureRandom is extended by the Gem::Random::Formatter module which
+# defines the following methods:
+#
+# * alphanumeric
+# * base64
+# * choose
+# * gen_random
+# * hex
+# * rand
+# * random_bytes
+# * random_number
+# * urlsafe_base64
+# * uuid
+#
+# These methods are usable as class methods of Gem::SecureRandom such as
+# +Gem::SecureRandom.hex+.
+#
+# If a secure random number generator is not available,
+# +NotImplementedError+ is raised.
+
+module Gem::SecureRandom
+
+  # The version
+  VERSION = "0.3.1"
+
+  class << self
+    # Returns a random binary string containing +size+ bytes.
+    #
+    # See Random.bytes
+    def bytes(n)
+      return gen_random(n)
+    end
+
+    private
+
+    # :stopdoc:
+
+    # Implementation using OpenSSL
+    def gen_random_openssl(n)
+      return OpenSSL::Random.random_bytes(n)
+    end
+
+    # Implementation using system random device
+    def gen_random_urandom(n)
+      ret = Random.urandom(n)
+      unless ret
+        raise NotImplementedError, "No random device"
+      end
+      unless ret.length == n
+        raise NotImplementedError, "Unexpected partial read from random device: only #{ret.length} for #{n} bytes"
+      end
+      ret
+    end
+
+    begin
+      # Check if Random.urandom is available
+      Random.urandom(1)
+      alias gen_random gen_random_urandom
+    rescue RuntimeError
+      begin
+        require 'openssl'
+      rescue NoMethodError
+        raise NotImplementedError, "No random device"
+      else
+        alias gen_random gen_random_openssl
+      end
+    end
+
+    # :startdoc:
+
+    # Generate random data bytes for Gem::Random::Formatter
+    public :gen_random
+  end
+end
+
+Gem::SecureRandom.extend(Gem::Random::Formatter)

data/lib/rubygems/vendored_securerandom.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+module Gem::Random; end
+require_relative "vendor/securerandom/lib/securerandom"

data/lib/rubygems.rb

@@ -9,7 +9,7 @@
 require "rbconfig"
 
 module Gem
-  VERSION = "3.5.17"
+  VERSION = "3.5.19"
 end
 
 # Must be first since it unloads the prelude from 1.9.2
@@ -753,18 +753,14 @@ An Array (#{env.inspect}) was passed in from #{caller[3]}
   # Safely read a file in binary mode on all platforms.
 
   def self.read_binary(path)
-    open_file(path, "rb+", &:read)
-  rescue Errno::EACCES, Errno::EROFS
-    open_file(path, "rb", &:read)
+    File.binread(path)
   end
 
   ##
   # Safely write a file in binary mode on all platforms.
 
   def self.write_binary(path, data)
-    open_file(path, "wb") do |io|
-      io.write data
-    end
+    File.binwrite(path, data)
   rescue Errno::ENOSPC
     # If we ran out of space but the file exists, it's *guaranteed* to be corrupted.
     File.delete(path) if File.exist?(path)
@@ -778,24 +774,31 @@ An Array (#{env.inspect}) was passed in from #{caller[3]}
     File.open(path, flags, &block)
   end
 
+  ##
+  # Open a file with given flags, and protect access with a file lock
+
+  def self.open_file_with_lock(path, &block)
+    file_lock = "#{path}.lock"
+    open_file_with_flock(file_lock, &block)
+  ensure
+    FileUtils.rm_f file_lock
+  end
+
   ##
   # Open a file with given flags, and protect access with flock
 
   def self.open_file_with_flock(path, &block)
-    flags = File.exist?(path) ? "r+" : "a+"
+    mode = IO::RDONLY | IO::APPEND | IO::CREAT | IO::BINARY
+    mode |= IO::SHARE_DELETE if IO.const_defined?(:SHARE_DELETE)
 
-    File.open(path, flags) do |io|
+    File.open(path, mode) do |io|
       begin
         io.flock(File::LOCK_EX)
       rescue Errno::ENOSYS, Errno::ENOTSUP
+      rescue Errno::ENOLCK # NFS
+        raise unless Thread.main == Thread.current
       end
       yield io
-    rescue Errno::ENOLCK # NFS
-      if Thread.main != Thread.current
-        raise
-      else
-        open_file(path, flags, &block)
-      end
     end
   end
 

data/rubygems-update.gemspec

@@ -2,7 +2,7 @@
 
 Gem::Specification.new do |s|
   s.name = "rubygems-update"
-  s.version = "3.5.17"
+  s.version = "3.5.19"
   s.authors = ["Jim Weirich", "Chad Fowler", "Eric Hodel", "Luis Lavena", "Aaron Patterson", "Samuel Giddins", "André Arko", "Evan Phoenix", "Hiroshi SHIBATA"]
   s.email = ["", "", "drbrain@segment7.net", "luislavena@gmail.com", "aaron@tenderlovemaking.com", "segiddins@segiddins.me", "andre@arko.net", "evan@phx.io", "hsbt@ruby-lang.org"]
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rubygems-update
 version: !ruby/object:Gem::Version
-  version: 3.5.17
+  version: 3.5.19
 platform: ruby
 authors:
 - Jim Weirich
@@ -16,7 +16,7 @@ authors:
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-08-01 00:00:00.000000000 Z
+date: 2024-09-18 00:00:00.000000000 Z
 dependencies: []
 description: |-
   A package (also known as a library) contains a set of functionality
@@ -365,6 +365,10 @@ files:
 - bundler/lib/bundler/vendor/pub_grub/lib/pub_grub/version_range.rb
 - bundler/lib/bundler/vendor/pub_grub/lib/pub_grub/version_solver.rb
 - bundler/lib/bundler/vendor/pub_grub/lib/pub_grub/version_union.rb
+- bundler/lib/bundler/vendor/securerandom/.document
+- bundler/lib/bundler/vendor/securerandom/LICENSE.txt
+- bundler/lib/bundler/vendor/securerandom/lib/random/formatter.rb
+- bundler/lib/bundler/vendor/securerandom/lib/securerandom.rb
 - bundler/lib/bundler/vendor/thor/.document
 - bundler/lib/bundler/vendor/thor/LICENSE.md
 - bundler/lib/bundler/vendor/thor/lib/thor.rb
@@ -426,6 +430,7 @@ files:
 - bundler/lib/bundler/vendored_net_http.rb
 - bundler/lib/bundler/vendored_persistent.rb
 - bundler/lib/bundler/vendored_pub_grub.rb
+- bundler/lib/bundler/vendored_securerandom.rb
 - bundler/lib/bundler/vendored_thor.rb
 - bundler/lib/bundler/vendored_timeout.rb
 - bundler/lib/bundler/vendored_tsort.rb
@@ -667,6 +672,10 @@ files:
 - lib/rubygems/vendor/resolv/.document
 - lib/rubygems/vendor/resolv/LICENSE.txt
 - lib/rubygems/vendor/resolv/lib/resolv.rb
+- lib/rubygems/vendor/securerandom/.document
+- lib/rubygems/vendor/securerandom/LICENSE.txt
+- lib/rubygems/vendor/securerandom/lib/random/formatter.rb
+- lib/rubygems/vendor/securerandom/lib/securerandom.rb
 - lib/rubygems/vendor/timeout/.document
 - lib/rubygems/vendor/timeout/LICENSE.txt
 - lib/rubygems/vendor/timeout/lib/timeout.rb
@@ -693,6 +702,7 @@ files:
 - lib/rubygems/vendored_molinillo.rb
 - lib/rubygems/vendored_net_http.rb
 - lib/rubygems/vendored_optparse.rb
+- lib/rubygems/vendored_securerandom.rb
 - lib/rubygems/vendored_timeout.rb
 - lib/rubygems/vendored_tsort.rb
 - lib/rubygems/version.rb
@@ -727,7 +737,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.17
+rubygems_version: 3.5.19
 signing_key:
 specification_version: 4
 summary: RubyGems is a package management framework for Ruby. This gem is downloaded