xmlrpc 0.3.2 → 0.3.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: beb82c31668a9eac6cc5fec044fd06335c42126ce3d4f1f6defda2c987b42ac7
-  data.tar.gz: 216663d8c70e048ad6522be02c15e737da9bb4f29ffb268cd65fd8e270d52f15
+  metadata.gz: 53431a8134df4bd293125d6805ef0c71d29a3843ce264a52d15f34390d25159c
+  data.tar.gz: a0a644953cb08ed360be98054d8afe974f84e01a0b1e83c40ab0103fe175f973
 SHA512:
-  metadata.gz: f2bc2b1c23323a22e37b5cde407ce06440f16d7b4a7ad733aa996616f04524de93e56b4e4deb37a1bf8a7793234011f4bf88141e4146c1aa5940ffb851de272f
-  data.tar.gz: 151dc29ed010ce4610c20d6673dea4ce939fdea3bcf287e7eebf728959768c868afe45a0fa8b0c4393754845efe14d0cf7e86b2c1ce046225aee1c8ca123860e
+  metadata.gz: 79a802bf935c8a7e0fe4aebfa3b927dc5106c9a05d57d75c5f6ace965077972e6f99c63fe7ce5dca60af134fa9c3232db6cb48afeca8997d1a8dc4fc64188e60
+  data.tar.gz: d0395846e7cc156e06ef8afd00bddd062ad629c1c039ce8a7f3b6943f40f58440eeb8fb973c1872ea33788e3e5005610f50b23202a736132b619495d8a972e68

data/.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'weekly'

data/.github/workflows/release.yml

@@ -0,0 +1,30 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "*"
+
+jobs:
+  github:
+    name: GitHub
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v3
+      - name: Extract release note
+        run: |
+          ruby \
+            -e 'print("## xmlrpc "); \
+                puts(ARGF.read.split(/^## /)[1])' \
+            NEWS.md > release-note.md
+      - name: Upload to release
+        run: |
+          title=$(head -n1 release-note.md | sed -e 's/^## //')
+          tail -n +2 release-note.md > release-note-without-version.md
+          gh release create ${GITHUB_REF_NAME} \
+            --discussion-category Announcements \
+            --notes-file release-note-without-version.md \
+            --title "${title}"
+        env:
+          GH_TOKEN: ${{ github.token }}

data/.github/workflows/test.yml

@@ -28,9 +28,9 @@ jobs:
         exclude:
           - { os: windows , ruby: head }
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: ${{ matrix.ruby }}
-      - run: bundle install
-      - run: rake
+          bundler-cache: true # 'bundle install' and cache gems
+      - run: bundle exec rake

data/NEWS.md

@@ -1,5 +1,20 @@
 # News
 
+## 0.3.3
+
+### Improvements
+
+  * GH-36: Stopped to unmarshal all classes. Classes that include
+    `XMLRPC::Marshallable` are only allowed.
+
+    [Patch by ooooooo-q]
+    [Found by ooooooo-q and plenumlab separately]
+
+### Thanks
+
+  * ooooooo-q
+  * plenumlab
+
 ## 0.3.2
 
 ### Improvements

data/lib/xmlrpc/parser.rb

@@ -113,6 +113,7 @@ module XMLRPC # :nodoc:
         begin
           mod = Module
           klass.split("::").each {|const| mod = mod.const_get(const.strip)}
+          return hash unless mod.included_modules.include?(XMLRPC::Marshallable)
 
           obj = mod.allocate
 

data/lib/xmlrpc.rb

@@ -289,5 +289,5 @@
 #
 # You can change the XML-writer by calling method ParserWriterChooseMixin#set_writer.
 module XMLRPC
-  VERSION = "0.3.2"
+  VERSION = "0.3.3"
 end

data/xmlrpc.gemspec

@@ -15,8 +15,6 @@ Gem::Specification.new do |spec|
   spec.licenses      = ["Ruby", "BSD-2-Clause"]
 
   spec.files         = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
-  spec.bindir        = "exe"
-  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]
   spec.required_ruby_version = ">= 2.3"
 
@@ -24,5 +22,6 @@ Gem::Specification.new do |spec|
 
   spec.add_development_dependency "bundler"
   spec.add_development_dependency "rake"
+  spec.add_development_dependency "rexml"
   spec.add_development_dependency "test-unit"
 end

metadata

@@ -1,15 +1,15 @@
 --- !ruby/object:Gem::Specification
 name: xmlrpc
 version: !ruby/object:Gem::Version
-  version: 0.3.2
+  version: 0.3.3
 platform: ruby
 authors:
 - SHIBATA Hiroshi
 - Sutou Kouhei
-autorequire: 
-bindir: exe
+autorequire:
+bindir: bin
 cert_chain: []
-date: 2021-02-04 00:00:00.000000000 Z
+date: 2023-08-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: webrick
@@ -53,6 +53,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: rexml
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: test-unit
   requirement: !ruby/object:Gem::Requirement
@@ -76,6 +90,8 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".github/dependabot.yml"
+- ".github/workflows/release.yml"
 - ".github/workflows/test.yml"
 - ".gitignore"
 - Gemfile
@@ -101,7 +117,7 @@ licenses:
 - Ruby
 - BSD-2-Clause
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -116,8 +132,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.0.dev
-signing_key: 
+rubygems_version: 3.5.0.dev
+signing_key:
 specification_version: 4
 summary: XMLRPC is a lightweight protocol that enables remote procedure calls over
   HTTP.