sqlite3 1.5.0.rc2-arm64-darwin → 1.5.2-arm64-darwin

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: fdf1e9a3902303294ab9ba82bc4ce8374282635a633a4a556f000263ad690c29
4
- data.tar.gz: 424d00b973e9f1d58e52ebd14ae5dd8f516ef42dd849c761d55ebdb7a4d22a48
3
+ metadata.gz: ef5b1f8ab4707eade36c5feb979a9512169c0f85c4aeed66246c07d57634e4b2
4
+ data.tar.gz: fd0cb2184a81d99cee50359acd4db2cb6afdec99c63d7ae0e3e9e821aac7dfe1
5
5
  SHA512:
6
- metadata.gz: 1ed1fb1a6805f0ac034d67a3ef79b14edcf032bc2c71bf572c99546dc5cd4a96a82cfb94e6ca456b6fadbd699a9c825ec834f45af3d9ca41b64cf6a8c8c5d09c
7
- data.tar.gz: c8a462e25fa75d40f10798bdb6e07c47e44adb1c3280a2cc9edd301cedb05eb7748682c5e05885992eac930c1adfe1078868ccd9d3a89fc27dbdf3b975415078
6
+ metadata.gz: 9ca890c1088dd4e71285508a11d0080e8c8251388242504e72e1e80180cdb3783d5374ded1fcd93864b7302d45917e624ac1c64b28b28b732ad5636ebc724396
7
+ data.tar.gz: 948f345f1c71aa19f105b8d60a63651c4c093da0e2e5ca38dc394d7cc58fd1c15d1e969cec33d331b3b421d9191b54313c9a4e5d575d70deb90f9ac6a4075495
data/CHANGELOG.md CHANGED
@@ -1,6 +1,36 @@
1
1
  # sqlite3-ruby Changelog
2
2
 
3
- ## 1.5.0 / unreleased
3
+ ## 1.5.2 / 2022-10-01
4
+
5
+ ### Packaging
6
+
7
+ This version correctly vendors the tarball for sqlite v3.39.4 in the vanilla "ruby" platform gem package, so that users will not require network access at installation.
8
+
9
+ v1.5.0 and v1.5.1 mistakenly packaged the tarball for sqlite v3.38.5 in the vanilla "ruby" platform gem, resulting in downloading the intended tarball over the network at installation time (or, if the network was not available, failure to install). Note that the precompiled native gems were not affected by this issue. [#352]
10
+
11
+
12
+ ## 1.5.1 / 2022-09-29
13
+
14
+ ### Dependencies
15
+
16
+ * Vendored sqlite is updated to [v3.39.4](https://sqlite.org/releaselog/3_39_4.html).
17
+
18
+ ### Security
19
+
20
+ The vendored version of sqlite, v3.39.4, should be considered to be a security release. From the release notes:
21
+
22
+ > Version 3.39.4 is a minimal patch against the prior release that addresses issues found since the
23
+ > prior release. In particular, a potential vulnerability in the FTS3 extension has been fixed, so
24
+ > this should be considered a security update.
25
+ >
26
+ > In order to exploit the vulnerability, an attacker must have full SQL access and must be able to
27
+ > construct a corrupt database with over 2GB of FTS3 content. The problem arises from a 32-bit
28
+ > signed integer overflow.
29
+
30
+ For more information please see [GHSA-mgvv-5mxp-xq67](https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-mgvv-5mxp-xq67).
31
+
32
+
33
+ ## 1.5.0 / 2022-09-08
4
34
 
5
35
  ### Packaging
6
36
 
@@ -23,13 +53,13 @@ See [the README](https://github.com/sparklemotion/sqlite3-ruby#native-gems-recom
23
53
 
24
54
  #### More consistent developer experience
25
55
 
26
- Both the native (precompiled) gems and the vanilla "ruby platform" (source) gem include sqlite v3.39.2 by default.
56
+ Both the native (precompiled) gems and the vanilla "ruby platform" (source) gem include sqlite v3.39.3 by default.
27
57
 
28
58
  Defaulting to a consistent version of sqlite across all systems means that your development environment behaves exactly like your production environment, and you have access to the latest and greatest features of sqlite.
29
59
 
30
60
  You can opt-out of the packaged version of sqlite (and use your system-installed library as in versions < 1.5.0). See [the README](https://github.com/sparklemotion/sqlite3-ruby#avoiding-the-precompiled-native-gem) for more information.
31
61
 
32
- [Release notes for this version of sqlite](https://sqlite.org/releaselog/3_39_0.html)
62
+ [Release notes for this version of sqlite](https://sqlite.org/releaselog/3_39_3.html)
33
63
 
34
64
 
35
65
  ### Rubies and Platforms
data/CONTRIBUTING.md CHANGED
@@ -20,5 +20,5 @@ A quick checklist:
20
20
  - [ ] update `CHANGELOG.md` and `lib/sqlite3/version.rb` including `VersionProxy::{MINOR,TINY}`
21
21
  - [ ] create a git tag using a format that matches the pattern `v\d+\.\d+\.\d+`, e.g. `v1.3.13`
22
22
  - [ ] run `bin/build-gems` and make sure it completes and all the tests pass
23
- - [ ] `for g in gems/*.gem ; do gem push $g ; done`
23
+ - [ ] `for g in gems/*.gem ; do gem push $g ; done`s
24
24
  - [ ] create a release at https://github.com/sparklemotion/sqlite3-ruby/releases and include sha2 checksums
data/README.md CHANGED
@@ -107,7 +107,8 @@ If you're on a platform that supports a native gem but you want to avoid using i
107
107
 
108
108
  - If you're not using Bundler, then run `gem install sqlite3 --platform=ruby`
109
109
  - If you are using Bundler
110
- - version 2.1 or later, then you'll need to run `bundle config set force_ruby_platform true`,
110
+ - version 2.3.18 or later, you can specify [`gem "sqlite3", force_ruby_platform: true`](https://bundler.io/v2.3/man/gemfile.5.html#FORCE_RUBY_PLATFORM)
111
+ - version 2.1 or later, then you'll need to run `bundle config set force_ruby_platform true`
111
112
  - version 2.0 or earlier, then you'll need to run `bundle config force_ruby_platform true`
112
113
 
113
114
 
@@ -118,7 +119,7 @@ If you are on a platform or version of Ruby that is not covered by the Native Ge
118
119
 
119
120
  #### Packaged libsqlite3
120
121
 
121
- By default, as of v1.5.0 of this library, libsqlite3 v3.38.5 is packaged with the gem and will be compiled and used automatically. This takes a bit longer than the native gem, but will provide a modern, well-supported version of libsqlite3.
122
+ By default, as of v1.5.0 of this library, the latest available version of libsqlite3 is packaged with the gem and will be compiled and used automatically. This takes a bit longer than the native gem, but will provide a modern, well-supported version of libsqlite3.
122
123
 
123
124
  For example, on a linux system running Ruby 2.5:
124
125
 
@@ -143,6 +144,7 @@ If you would prefer to build the sqlite3-ruby gem against your system libsqlite3
143
144
 
144
145
  PLEASE NOTE:
145
146
 
147
+ - you must avoid installing a precompiled native gem (see [previous section](#avoiding-the-precompiled-native-gem))
146
148
  - only versions of libsqlite3 `>= 3.5.0` are supported,
147
149
  - and some library features may depend on how your libsqlite3 was compiled.
148
150
 
data/dependencies.yml ADDED
@@ -0,0 +1,14 @@
1
+ # TODO: stop using symbols here once we no longer support Ruby 2.7 and can rely on symbolize_names
2
+ :sqlite3:
3
+ # checksum verified by first checking the published sha3(256) checksum against https://sqlite.org/download.html:
4
+ #
5
+ # $ sha3sum -a 256 ports/archives/sqlite-autoconf-3390400.tar.gz
6
+ # 431328e30d12c551da9ba7ef2122b269076058512014afa799caaf62ca567090 ports/archives/sqlite-autoconf-3390400.tar.gz
7
+ #
8
+ # $ sha256sum ports/archives/sqlite-autoconf-3390400.tar.gz
9
+ # f31d445b48e67e284cf206717cc170ab63cbe4fd7f79a82793b772285e78fdbb ports/archives/sqlite-autoconf-3390400.tar.gz
10
+ #
11
+ :version: "3.39.4"
12
+ :files:
13
+ - :url: "https://sqlite.org/2022/sqlite-autoconf-3390400.tar.gz"
14
+ :sha256: "f31d445b48e67e284cf206717cc170ab63cbe4fd7f79a82793b772285e78fdbb"
@@ -265,9 +265,10 @@ rb_sqlite3_define_aggregator2(VALUE self, VALUE aggregator, VALUE ruby_name)
265
265
  void
266
266
  rb_sqlite3_aggregator_init(void)
267
267
  {
268
- rb_gc_register_address(&cAggregatorWrapper);
269
- rb_gc_register_address(&cAggregatorInstance);
270
268
  /* rb_class_new generatos class with undefined allocator in ruby 1.9 */
271
269
  cAggregatorWrapper = rb_funcall(rb_cClass, rb_intern("new"), 0);
270
+ rb_gc_register_mark_object(cAggregatorWrapper);
271
+
272
272
  cAggregatorInstance = rb_funcall(rb_cClass, rb_intern("new"), 0);
273
+ rb_gc_register_mark_object(cAggregatorInstance);
273
274
  }
@@ -1,5 +1,6 @@
1
1
  require "mkmf"
2
2
  require "mini_portile2"
3
+ require "yaml"
3
4
 
4
5
  module Sqlite3
5
6
  module ExtConf
@@ -131,23 +132,8 @@ module Sqlite3
131
132
  end
132
133
 
133
134
  def mini_portile_config
134
- {
135
- sqlite3: {
136
- # checksum verified by first checking the published sha3(256) checksum:
137
- #
138
- # $ sha3sum -a 256 ports/archives/sqlite-autoconf-3390200.tar.gz
139
- # b195891eb32305481e61c6718b8cc3b090685b613c4824a076c63166a46c5bee ports/archives/sqlite-autoconf-3390200.tar.gz
140
- #
141
- # $ sha256sum ports/archives/sqlite-autoconf-3390200.tar.gz
142
- # 852be8a6183a17ba47cee0bbff7400b7aa5affd283bf3beefc34fcd088a239de ports/archives/sqlite-autoconf-3390200.tar.gz
143
- #
144
- version: "3.39.2",
145
- files: [{
146
- url: "https://www.sqlite.org/2022/sqlite-autoconf-3390200.tar.gz",
147
- sha256: "852be8a6183a17ba47cee0bbff7400b7aa5affd283bf3beefc34fcd088a239de",
148
- }],
149
- }
150
- }
135
+ # TODO: once Ruby 2.7 is no longer supported, use symbolize_names: true
136
+ YAML.load_file(File.join(package_root_dir, "dependencies.yml"))
151
137
  end
152
138
 
153
139
  def abort_could_not_find(missing)
Binary file
Binary file
Binary file
Binary file
@@ -1,16 +1,14 @@
1
1
  module SQLite3
2
2
 
3
- VERSION = "1.5.0.rc2"
3
+ VERSION = "1.5.2"
4
4
 
5
5
  module VersionProxy
6
-
7
6
  MAJOR = 1
8
7
  MINOR = 5
9
- TINY = 0
10
- BUILD = "rc2"
8
+ TINY = 2
9
+ BUILD = nil
11
10
 
12
11
  STRING = [ MAJOR, MINOR, TINY, BUILD ].compact.join( "." )
13
- #:beta-tag:
14
12
 
15
13
  VERSION = ::SQLite3::VERSION
16
14
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: sqlite3
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.5.0.rc2
4
+ version: 1.5.2
5
5
  platform: arm64-darwin
6
6
  authors:
7
7
  - Jamis Buck
@@ -10,7 +10,7 @@ authors:
10
10
  autorequire:
11
11
  bindir: bin
12
12
  cert_chain: []
13
- date: 2022-08-30 00:00:00.000000000 Z
13
+ date: 2022-10-01 00:00:00.000000000 Z
14
14
  dependencies:
15
15
  - !ruby/object:Gem::Dependency
16
16
  name: minitest
@@ -103,6 +103,7 @@ files:
103
103
  - LICENSE
104
104
  - LICENSE-DEPENDENCIES
105
105
  - README.md
106
+ - dependencies.yml
106
107
  - ext/sqlite3/aggregator.c
107
108
  - ext/sqlite3/aggregator.h
108
109
  - ext/sqlite3/backup.c
@@ -178,9 +179,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
178
179
  version: 3.2.dev
179
180
  required_rubygems_version: !ruby/object:Gem::Requirement
180
181
  requirements:
181
- - - ">"
182
+ - - ">="
182
183
  - !ruby/object:Gem::Version
183
- version: 1.3.1
184
+ version: '0'
184
185
  requirements: []
185
186
  rubygems_version: 3.3.4
186
187
  signing_key: