@pact-foundation/pact-cli-linux-x64 16.1.4 → 16.1.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pact-foundation/pact-cli-linux-x64",
-  "version": "16.1.4",
+  "version": "16.1.5",
   "description": "Platform Specific Broker CLI for @pact-foundation/pact linux-x64",
   "repository": {
     "type": "git",

package/standalone/{linux-x64-2.5.2 → linux-x64-2.5.3}/pact/README.md

@@ -9,9 +9,9 @@ Creates a standalone pact command line executable containing
 
 ## Package contents
 
-This version (2.5.2) of the Pact standalone executables package contains:
+This version (2.5.3) of the Pact standalone executables package contains:
 
-  * pact gem 1.66.1
+  * pact gem 1.66.2
   * pact-mock_service gem 3.12.3
   * pact-support gem 1.21.2
   * pact-provider-verifier gem 1.39.1

package/standalone/{linux-x64-2.5.2 → linux-x64-2.5.3}/pact/lib/vendor/Gemfile

@@ -1,6 +1,6 @@
 source 'https://rubygems.org'
 
-gem "pact", "1.66.1"
+gem "pact", "1.66.2"
 gem "pact-message", "0.11.1"
 gem "pact-mock_service", "3.12.3"
 gem "pact-provider-verifier", "1.39.1"

package/standalone/{linux-x64-2.5.2 → linux-x64-2.5.3}/pact/lib/vendor/Gemfile.lock

@@ -34,7 +34,7 @@ GEM
     net-http (0.6.0)
       uri
     ostruct (0.6.3)
-    pact (1.66.1)
+    pact (1.66.2)
       jsonpath (~> 1.0)
       pact-mock_service (~> 3.0, >= 3.3.1)
       pact-support (~> 1.21, >= 1.21.0)
@@ -85,7 +85,7 @@ GEM
       term-ansicolor (~> 1.7)
       thor (>= 0.20, < 2.0)
     parslet (2.0.0)
-    rack (3.1.16)
+    rack (3.1.18)
     rack-proxy (0.7.7)
       rack
     rack-reverse-proxy-pact (1.0.2)
@@ -111,7 +111,7 @@ GEM
     rspec-mocks (3.13.5)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.13.0)
-    rspec-support (3.13.4)
+    rspec-support (3.13.6)
     rspec_junit_formatter (0.6.0)
       rspec-core (>= 2, < 4, != 2.12.0)
     string_pattern (2.3.0)
@@ -147,7 +147,7 @@ DEPENDENCIES
   bigdecimal (= 3.1.5)
   fiddle (= 1.1.2)
   json (= 2.7.2)
-  pact (= 1.66.1)
+  pact (= 1.66.2)
   pact-message (= 0.11.1)
   pact-mock_service (= 3.12.3)
   pact-provider-verifier (= 1.39.1)

package/standalone/{linux-x64-2.5.2 → linux-x64-2.5.3}/pact/lib/vendor/ruby/3.3.0/extensions/x86_64-linux/3.3.0/bigdecimal-3.1.5/gem_make.out

@@ -32,17 +32,17 @@ checking for RB_WARN_CATEGORY_DEPRECATED in ruby.h... yes
 creating Makefile
 
 current directory: /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/bigdecimal-3.1.5/ext/bigdecimal
-make DESTDIR\= sitearchdir\=./.gem.20250725-2419-klt65y sitelibdir\=./.gem.20250725-2419-klt65y clean
+make DESTDIR\= sitearchdir\=./.gem.20251013-2311-a3nrlc sitelibdir\=./.gem.20251013-2311-a3nrlc clean
 
 current directory: /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/bigdecimal-3.1.5/ext/bigdecimal
-make DESTDIR\= sitearchdir\=./.gem.20250725-2419-klt65y sitelibdir\=./.gem.20250725-2419-klt65y
+make DESTDIR\= sitearchdir\=./.gem.20251013-2311-a3nrlc sitelibdir\=./.gem.20251013-2311-a3nrlc
 compiling bigdecimal.c
 compiling missing.c
 linking shared-object bigdecimal.so
 
 current directory: /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/bigdecimal-3.1.5/ext/bigdecimal
-make DESTDIR\= sitearchdir\=./.gem.20250725-2419-klt65y sitelibdir\=./.gem.20250725-2419-klt65y install
-/usr/bin/install -c -m 0755 bigdecimal.so ./.gem.20250725-2419-klt65y
+make DESTDIR\= sitearchdir\=./.gem.20251013-2311-a3nrlc sitelibdir\=./.gem.20251013-2311-a3nrlc install
+/usr/bin/install -c -m 0755 bigdecimal.so ./.gem.20251013-2311-a3nrlc
 
 current directory: /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/bigdecimal-3.1.5/ext/bigdecimal
-make DESTDIR\= sitearchdir\=./.gem.20250725-2419-klt65y sitelibdir\=./.gem.20250725-2419-klt65y clean
+make DESTDIR\= sitearchdir\=./.gem.20251013-2311-a3nrlc sitelibdir\=./.gem.20251013-2311-a3nrlc clean

package/standalone/{linux-x64-2.5.2 → linux-x64-2.5.3}/pact/lib/vendor/ruby/3.3.0/extensions/x86_64-linux/3.3.0/bigdecimal-3.1.5/mkmf.log

@@ -135,7 +135,7 @@ checked program was:
 have_func: checking for _lzcnt_u32() in x86intrin.h... -------------------- no
 
 LD_LIBRARY_PATH=.:/opt/hostedtoolcache/Ruby/3.3.9/x64/lib "gcc -o conftest -I/opt/hostedtoolcache/Ruby/3.3.9/x64/include/ruby-3.3.0/x86_64-linux -I/opt/hostedtoolcache/Ruby/3.3.9/x64/include/ruby-3.3.0/ruby/backward -I/opt/hostedtoolcache/Ruby/3.3.9/x64/include/ruby-3.3.0 -I. -DENABLE_PATH_CHECK=0   -O3 -fno-fast-math -ggdb3 -Wall -Wextra -Wdeprecated-declarations -Wdiv-by-zero -Wduplicated-cond -Wimplicit-function-declaration -Wimplicit-int -Wpointer-arith -Wwrite-strings -Wold-style-definition -Wimplicit-fallthrough=0 -Wmissing-noreturn -Wno-cast-function-type -Wno-constant-logical-operand -Wno-long-long -Wno-missing-field-initializers -Wno-overlength-strings -Wno-packed-bitfield-compat -Wno-parentheses-equality -Wno-self-assign -Wno-tautological-compare -Wno-unused-parameter -Wno-unused-value -Wsuggest-attribute=format -Wsuggest-attribute=noreturn -Wunused-variable -Wmisleading-indentation -Wundef  -fPIC conftest.c  -L. -L/opt/hostedtoolcache/Ruby/3.3.9/x64/lib -Wl,-rpath,/opt/hostedtoolcache/Ruby/3.3.9/x64/lib -L. -fstack-protector-strong -rdynamic -Wl,-export-dynamic -Wl,--no-as-needed     -Wl,-rpath,/opt/hostedtoolcache/Ruby/3.3.9/x64/lib -L/opt/hostedtoolcache/Ruby/3.3.9/x64/lib -lruby  -lm -lpthread  -lc"
-/usr/bin/ld: /tmp/ccNkoo98.o: in function `t':
+/usr/bin/ld: /tmp/ccu4C3mD.o: in function `t':
 /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/bigdecimal-3.1.5/ext/bigdecimal/conftest.c:16:(.text+0x7): undefined reference to `_lzcnt_u32'
 collect2: error: ld returned 1 exit status
 checked program was:
@@ -197,7 +197,7 @@ checked program was:
 have_func: checking for _lzcnt_u64() in x86intrin.h... -------------------- no
 
 LD_LIBRARY_PATH=.:/opt/hostedtoolcache/Ruby/3.3.9/x64/lib "gcc -o conftest -I/opt/hostedtoolcache/Ruby/3.3.9/x64/include/ruby-3.3.0/x86_64-linux -I/opt/hostedtoolcache/Ruby/3.3.9/x64/include/ruby-3.3.0/ruby/backward -I/opt/hostedtoolcache/Ruby/3.3.9/x64/include/ruby-3.3.0 -I. -DENABLE_PATH_CHECK=0   -O3 -fno-fast-math -ggdb3 -Wall -Wextra -Wdeprecated-declarations -Wdiv-by-zero -Wduplicated-cond -Wimplicit-function-declaration -Wimplicit-int -Wpointer-arith -Wwrite-strings -Wold-style-definition -Wimplicit-fallthrough=0 -Wmissing-noreturn -Wno-cast-function-type -Wno-constant-logical-operand -Wno-long-long -Wno-missing-field-initializers -Wno-overlength-strings -Wno-packed-bitfield-compat -Wno-parentheses-equality -Wno-self-assign -Wno-tautological-compare -Wno-unused-parameter -Wno-unused-value -Wsuggest-attribute=format -Wsuggest-attribute=noreturn -Wunused-variable -Wmisleading-indentation -Wundef  -fPIC conftest.c  -L. -L/opt/hostedtoolcache/Ruby/3.3.9/x64/lib -Wl,-rpath,/opt/hostedtoolcache/Ruby/3.3.9/x64/lib -L. -fstack-protector-strong -rdynamic -Wl,-export-dynamic -Wl,--no-as-needed     -Wl,-rpath,/opt/hostedtoolcache/Ruby/3.3.9/x64/lib -L/opt/hostedtoolcache/Ruby/3.3.9/x64/lib -lruby  -lm -lpthread  -lc"
-/usr/bin/ld: /tmp/ccuQncta.o: in function `t':
+/usr/bin/ld: /tmp/cc02NzpY.o: in function `t':
 /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/bigdecimal-3.1.5/ext/bigdecimal/conftest.c:16:(.text+0x7): undefined reference to `_lzcnt_u64'
 collect2: error: ld returned 1 exit status
 checked program was:
@@ -601,7 +601,7 @@ checked program was:
 /* end */
 
 LD_LIBRARY_PATH=.:/opt/hostedtoolcache/Ruby/3.3.9/x64/lib "gcc -o conftest -I/opt/hostedtoolcache/Ruby/3.3.9/x64/include/ruby-3.3.0/x86_64-linux -I/opt/hostedtoolcache/Ruby/3.3.9/x64/include/ruby-3.3.0/ruby/backward -I/opt/hostedtoolcache/Ruby/3.3.9/x64/include/ruby-3.3.0 -I. -DENABLE_PATH_CHECK=0   -O3 -fno-fast-math -ggdb3 -Wall -Wextra -Wdeprecated-declarations -Wdiv-by-zero -Wduplicated-cond -Wimplicit-function-declaration -Wimplicit-int -Wpointer-arith -Wwrite-strings -Wold-style-definition -Wimplicit-fallthrough=0 -Wmissing-noreturn -Wno-cast-function-type -Wno-constant-logical-operand -Wno-long-long -Wno-missing-field-initializers -Wno-overlength-strings -Wno-packed-bitfield-compat -Wno-parentheses-equality -Wno-self-assign -Wno-tautological-compare -Wno-unused-parameter -Wno-unused-value -Wsuggest-attribute=format -Wsuggest-attribute=noreturn -Wunused-variable -Wmisleading-indentation -Wundef  -fPIC conftest.c  -L. -L/opt/hostedtoolcache/Ruby/3.3.9/x64/lib -Wl,-rpath,/opt/hostedtoolcache/Ruby/3.3.9/x64/lib -L. -fstack-protector-strong -rdynamic -Wl,-export-dynamic -Wl,--no-as-needed     -Wl,-rpath,/opt/hostedtoolcache/Ruby/3.3.9/x64/lib -L/opt/hostedtoolcache/Ruby/3.3.9/x64/lib -lruby  -lm -lpthread  -lc"
-/usr/bin/ld: /tmp/cczn4vd0.o: in function `t':
+/usr/bin/ld: /tmp/ccjXz0gF.o: in function `t':
 /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/bigdecimal-3.1.5/ext/bigdecimal/conftest.c:17:(.text+0xb): undefined reference to `__builtin_isfinite'
 collect2: error: ld returned 1 exit status
 checked program was:

package/standalone/{linux-x64-2.5.2 → linux-x64-2.5.3}/pact/lib/vendor/ruby/3.3.0/extensions/x86_64-linux/3.3.0/fiddle-1.1.2/gem_make.out

@@ -22,10 +22,10 @@ checking signedness of size_t... unsigned
 creating Makefile
 
 current directory: /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/fiddle-1.1.2/ext/fiddle
-make DESTDIR\= sitearchdir\=./.gem.20250725-2419-9rfqn5 sitelibdir\=./.gem.20250725-2419-9rfqn5 clean
+make DESTDIR\= sitearchdir\=./.gem.20251013-2311-if7isz sitelibdir\=./.gem.20251013-2311-if7isz clean
 
 current directory: /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/fiddle-1.1.2/ext/fiddle
-make DESTDIR\= sitearchdir\=./.gem.20250725-2419-9rfqn5 sitelibdir\=./.gem.20250725-2419-9rfqn5
+make DESTDIR\= sitearchdir\=./.gem.20251013-2311-if7isz sitelibdir\=./.gem.20251013-2311-if7isz
 compiling closure.c
 compiling conversions.c
 compiling fiddle.c
@@ -37,8 +37,8 @@ compiling pointer.c
 linking shared-object fiddle.so
 
 current directory: /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/fiddle-1.1.2/ext/fiddle
-make DESTDIR\= sitearchdir\=./.gem.20250725-2419-9rfqn5 sitelibdir\=./.gem.20250725-2419-9rfqn5 install
-/usr/bin/install -c -m 0755 fiddle.so ./.gem.20250725-2419-9rfqn5
+make DESTDIR\= sitearchdir\=./.gem.20251013-2311-if7isz sitelibdir\=./.gem.20251013-2311-if7isz install
+/usr/bin/install -c -m 0755 fiddle.so ./.gem.20251013-2311-if7isz
 
 current directory: /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/fiddle-1.1.2/ext/fiddle
-make DESTDIR\= sitearchdir\=./.gem.20250725-2419-9rfqn5 sitelibdir\=./.gem.20250725-2419-9rfqn5 clean
+make DESTDIR\= sitearchdir\=./.gem.20251013-2311-if7isz sitelibdir\=./.gem.20251013-2311-if7isz clean

package/standalone/{linux-x64-2.5.2 → linux-x64-2.5.3}/pact/lib/vendor/ruby/3.3.0/extensions/x86_64-linux/3.3.0/json-2.7.2/gem_make.out

@@ -3,14 +3,14 @@ current directory: /home/runner/work/pact-standalone/pact-standalone/build/vendo
 creating Makefile
 
 current directory: /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/json-2.7.2/ext/json
-make DESTDIR\= sitearchdir\=./.gem.20250725-2419-uyrtkr sitelibdir\=./.gem.20250725-2419-uyrtkr clean
+make DESTDIR\= sitearchdir\=./.gem.20251013-2311-oz2gio sitelibdir\=./.gem.20251013-2311-oz2gio clean
 
 current directory: /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/json-2.7.2/ext/json
-make DESTDIR\= sitearchdir\=./.gem.20250725-2419-uyrtkr sitelibdir\=./.gem.20250725-2419-uyrtkr
+make DESTDIR\= sitearchdir\=./.gem.20251013-2311-oz2gio sitelibdir\=./.gem.20251013-2311-oz2gio
 make: Nothing to be done for 'all'.
 
 current directory: /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/json-2.7.2/ext/json
-make DESTDIR\= sitearchdir\=./.gem.20250725-2419-uyrtkr sitelibdir\=./.gem.20250725-2419-uyrtkr install
+make DESTDIR\= sitearchdir\=./.gem.20251013-2311-oz2gio sitelibdir\=./.gem.20251013-2311-oz2gio install
 
 current directory: /home/runner/work/pact-standalone/pact-standalone/build/vendor/ruby/3.3.0/gems/json-2.7.2/ext/json
-make DESTDIR\= sitearchdir\=./.gem.20250725-2419-uyrtkr sitelibdir\=./.gem.20250725-2419-uyrtkr clean
+make DESTDIR\= sitearchdir\=./.gem.20251013-2311-oz2gio sitelibdir\=./.gem.20251013-2311-oz2gio clean

package/standalone/{linux-x64-2.5.2/pact/lib/vendor/ruby/3.3.0/gems/pact-1.66.1 → linux-x64-2.5.3/pact/lib/vendor/ruby/3.3.0/gems/pact-1.66.2}/lib/pact/provider/request.rb

@@ -29,7 +29,7 @@ module Pact
           when String then expected_request.body
           when NullExpectation then ''
           else
-            Pact::Generators.apply_generators(expected_request, "body", reified_body, @state_params)
+            generated_body
           end
         end
 
@@ -60,6 +60,19 @@ module Pact
           end
         end
 
+        def generated_body
+          result = Pact::Generators.apply_generators(expected_request, "body", reified_body, @state_params)
+
+          case result
+          when Hash
+            result.to_json
+          when String
+            result
+          else
+            raise "Expected body to be a String or Hash, but was #{result.class} with value #{result.inspect}"
+          end
+        end
+
         def rack_request_header_for header
           with_http_prefix(header.to_s.upcase).tr('-', '_')
         end

package/standalone/{linux-x64-2.5.2/pact/lib/vendor/ruby/3.3.0/gems/pact-1.66.1 → linux-x64-2.5.3/pact/lib/vendor/ruby/3.3.0/gems/pact-1.66.2}/lib/pact/version.rb

@@ -1,4 +1,4 @@
 # Remember to bump pact-provider-proxy when this changes major version
 module Pact
-  VERSION = "1.66.1"
+  VERSION = "1.66.2"
 end

package/standalone/{linux-x64-2.5.2/pact/lib/vendor/ruby/3.3.0/gems/rack-3.1.16 → linux-x64-2.5.3/pact/lib/vendor/ruby/3.3.0/gems/rack-3.1.18}/lib/rack/multipart/parser.rb

@@ -47,6 +47,27 @@ module Rack
         Tempfile.new(["RackMultipart", extension])
       }
 
+      BOUNDARY_START_LIMIT = 16 * 1024
+      private_constant :BOUNDARY_START_LIMIT
+
+      MIME_HEADER_BYTESIZE_LIMIT = 64 * 1024
+      private_constant :MIME_HEADER_BYTESIZE_LIMIT
+
+      env_int = lambda do |key, val|
+        if str_val = ENV[key]
+          begin
+            val = Integer(str_val, 10)
+          rescue ArgumentError
+            raise ArgumentError, "non-integer value provided for environment variable #{key}"
+          end
+        end
+
+        val
+      end
+
+      BUFFERED_UPLOAD_BYTESIZE_LIMIT = env_int.call("RACK_MULTIPART_BUFFERED_UPLOAD_BYTESIZE_LIMIT", 16 * 1024 * 1024)
+      private_constant :BUFFERED_UPLOAD_BYTESIZE_LIMIT
+
       class BoundedIO # :nodoc:
         def initialize(io, content_length)
           @io             = io
@@ -206,6 +227,8 @@ module Rack
 
         @state = :FAST_FORWARD
         @mime_index = 0
+        @body_retained = nil
+        @retained_size = 0
         @collector = Collector.new tempfile
 
         @sbuf = StringScanner.new("".dup)
@@ -287,6 +310,10 @@ module Rack
 
             # retry for opening boundary
           else
+            # We raise if we don't find the multipart boundary, to avoid unbounded memory
+            # buffering. Note that the actual limit is the higher of 16KB and the buffer size (1MB by default)
+            raise Error, "multipart boundary not found within limit" if @sbuf.string.bytesize > BOUNDARY_START_LIMIT
+
             # no boundary found, keep reading data
             return :want_read
           end
@@ -403,16 +430,30 @@ module Rack
             name = filename || "#{content_type || TEXT_PLAIN}[]".dup
           end
 
+          # Mime part head data is retained for both TempfilePart and BufferPart
+          # for the entireity of the parse, even though it isn't used for BufferPart.
+          update_retained_size(head.bytesize)
+
+          # If a filename is given, a TempfilePart will be used, so the body will
+          # not be buffered in memory. However, if a filename is not given, a BufferPart
+          # will be used, and the body will be buffered in memory.
+          @body_retained = !filename
+
           @collector.on_mime_head @mime_index, head, filename, content_type, name
           @state = :MIME_BODY
         else
-          :want_read
+          # We raise if the mime part header is too large, to avoid unbounded memory
+          # buffering. Note that the actual limit is the higher of 64KB and the buffer size (1MB by default)
+          raise Error, "multipart mime part header too large" if @sbuf.string.bytesize > MIME_HEADER_BYTESIZE_LIMIT
+
+          return :want_read
         end
       end
 
       def handle_mime_body
         if (body_with_boundary = @sbuf.check_until(@body_regex)) # check but do not advance the pointer yet
           body = body_with_boundary.sub(@body_regex_at_end, '') # remove the boundary from the string
+          update_retained_size(body.bytesize) if @body_retained
           @collector.on_mime_body @mime_index, body
           @sbuf.pos += body.length + 2 # skip \r\n after the content
           @state = :CONSUME_TOKEN
@@ -421,7 +462,9 @@ module Rack
           # Save what we have so far
           if @rx_max_size < @sbuf.rest_size
             delta = @sbuf.rest_size - @rx_max_size
-            @collector.on_mime_body @mime_index, @sbuf.peek(delta)
+            body = @sbuf.peek(delta)
+            update_retained_size(body.bytesize) if @body_retained
+            @collector.on_mime_body @mime_index, body
             @sbuf.pos += delta
             @sbuf.string = @sbuf.rest
           end
@@ -429,6 +472,13 @@ module Rack
         end
       end
 
+      def update_retained_size(size)
+        @retained_size += size
+        if @retained_size > BUFFERED_UPLOAD_BYTESIZE_LIMIT
+          raise Error, "multipart data over retained size limit"
+        end
+      end
+
       # Scan until the we find the start or end of the boundary.
       # If we find it, return the appropriate symbol for the start or
       # end of the boundary.  If we don't find the start or end of the

package/standalone/{linux-x64-2.5.2/pact/lib/vendor/ruby/3.3.0/gems/rack-3.1.16 → linux-x64-2.5.3/pact/lib/vendor/ruby/3.3.0/gems/rack-3.1.18}/lib/rack/query_parser.rb

@@ -57,6 +57,8 @@ module Rack
     PARAMS_LIMIT = env_int.call("RACK_QUERY_PARSER_PARAMS_LIMIT", 4096)
     private_constant :PARAMS_LIMIT
 
+    attr_reader :bytesize_limit
+
     def initialize(params_class, param_depth_limit, bytesize_limit: BYTESIZE_LIMIT, params_limit: PARAMS_LIMIT)
       @params_class = params_class
       @param_depth_limit = param_depth_limit
@@ -218,7 +220,7 @@ module Rack
     def check_query_string(qs, sep)
       if qs
         if qs.bytesize > @bytesize_limit
-          raise QueryLimitError, "total query size (#{qs.bytesize}) exceeds limit (#{@bytesize_limit})"
+          raise QueryLimitError, "total query size exceeds limit (#{@bytesize_limit})"
         end
 
         if (param_count = qs.count(sep.is_a?(String) ? sep : '&')) >= @params_limit

package/standalone/{linux-x64-2.5.2/pact/lib/vendor/ruby/3.3.0/gems/rack-3.1.16 → linux-x64-2.5.3/pact/lib/vendor/ruby/3.3.0/gems/rack-3.1.18}/lib/rack/request.rb

@@ -528,7 +528,10 @@ module Rack
               set_header RACK_REQUEST_FORM_PAIRS, pairs
               set_header RACK_REQUEST_FORM_HASH, expand_param_pairs(pairs)
             else
-              form_vars = get_header(RACK_INPUT).read
+              # Add 2 bytes. One to check whether it is over the limit, and a second
+              # in case the slice! call below removes the last byte
+              # If read returns nil, use the empty string
+              form_vars = get_header(RACK_INPUT).read(query_parser.bytesize_limit + 2) || ''
 
               # Fix for Safari Ajax postings that always append \0
               # form_vars.sub!(/\0\z/, '') # performance replacement:

package/standalone/{linux-x64-2.5.2/pact/lib/vendor/ruby/3.3.0/gems/rack-3.1.16 → linux-x64-2.5.3/pact/lib/vendor/ruby/3.3.0/gems/rack-3.1.18}/lib/rack/sendfile.rb

@@ -16,21 +16,21 @@ module Rack
   # delivery code.
   #
   # In order to take advantage of this middleware, the response body must
-  # respond to +to_path+ and the request must include an x-sendfile-type
+  # respond to +to_path+ and the request must include an `x-sendfile-type`
   # header. Rack::Files and other components implement +to_path+ so there's
-  # rarely anything you need to do in your application. The x-sendfile-type
+  # rarely anything you need to do in your application. The `x-sendfile-type`
   # header is typically set in your web servers configuration. The following
   # sections attempt to document
   #
   # === Nginx
   #
-  # Nginx supports the x-accel-redirect header. This is similar to x-sendfile
+  # Nginx supports the `x-accel-redirect` header. This is similar to `x-sendfile`
   # but requires parts of the filesystem to be mapped into a private URL
   # hierarchy.
   #
   # The following example shows the Nginx configuration required to create
-  # a private "/files/" area, enable x-accel-redirect, and pass the special
-  # x-sendfile-type and x-accel-mapping headers to the backend:
+  # a private "/files/" area, enable `x-accel-redirect`, and pass the special
+  # `x-accel-mapping` header to the backend:
   #
   #   location ~ /files/(.*) {
   #     internal;
@@ -44,24 +44,29 @@ module Rack
   #     proxy_set_header   X-Real-IP           $remote_addr;
   #     proxy_set_header   X-Forwarded-For     $proxy_add_x_forwarded_for;
   #
-  #     proxy_set_header   x-sendfile-type     x-accel-redirect;
   #     proxy_set_header   x-accel-mapping     /var/www/=/files/;
   #
   #     proxy_pass         http://127.0.0.1:8080/;
   #   }
   #
-  # Note that the x-sendfile-type header must be set exactly as shown above.
-  # The x-accel-mapping header should specify the location on the file system,
+  # The `x-accel-mapping` header should specify the location on the file system,
   # followed by an equals sign (=), followed name of the private URL pattern
   # that it maps to. The middleware performs a simple substitution on the
   # resulting path.
   #
+  # To enable `x-accel-redirect`, you must configure the middleware explicitly:
+  #
+  #   use Rack::Sendfile, "x-accel-redirect"
+  #
+  # For security reasons, the `x-sendfile-type` header from requests is ignored.
+  # The sendfile variation must be set via the middleware constructor.
+  #
   # See Also: https://www.nginx.com/resources/wiki/start/topics/examples/xsendfile
   #
   # === lighttpd
   #
-  # Lighttpd has supported some variation of the x-sendfile header for some
-  # time, although only recent version support x-sendfile in a reverse proxy
+  # Lighttpd has supported some variation of the `x-sendfile` header for some
+  # time, although only recent version support `x-sendfile` in a reverse proxy
   # configuration.
   #
   #   $HTTP["host"] == "example.com" {
@@ -83,7 +88,7 @@ module Rack
   #
   # === Apache
   #
-  # x-sendfile is supported under Apache 2.x using a separate module:
+  # `x-sendfile` is supported under Apache 2.x using a separate module:
   #
   # https://tn123.org/mod_xsendfile/
   #
@@ -97,16 +102,28 @@ module Rack
   # === Mapping parameter
   #
   # The third parameter allows for an overriding extension of the
-  # x-accel-mapping header. Mappings should be provided in tuples of internal to
+  # `x-accel-mapping` header. Mappings should be provided in tuples of internal to
   # external. The internal values may contain regular expression syntax, they
   # will be matched with case indifference.
+  #
+  # When `x-accel-redirect` is explicitly enabled via the variation parameter,
+  # and no application-level mappings are provided, the middleware will read
+  # the `x-accel-mapping` header from the proxy. This allows nginx to control
+  # the path mapping without requiring application-level configuration.
+  #
+  # === Security
+  #
+  # For security reasons, the `x-sendfile-type` header from HTTP requests is
+  # ignored. The sendfile variation must be explicitly configured via the
+  # middleware constructor to prevent information disclosure vulnerabilities
+  # where attackers could bypass proxy restrictions.
 
   class Sendfile
     def initialize(app, variation = nil, mappings = [])
       @app = app
       @variation = variation
       @mappings = mappings.map do |internal, external|
-        [/^#{internal}/i, external]
+        [/\A#{internal}/i, external]
       end
     end
 
@@ -145,22 +162,35 @@ module Rack
     end
 
     private
+
     def variation(env)
-      @variation ||
-        env['sendfile.type'] ||
-        env['HTTP_X_SENDFILE_TYPE']
+      # Note: HTTP_X_SENDFILE_TYPE is intentionally NOT read for security reasons.
+      # Attackers could use this header to enable x-accel-redirect and bypass proxy restrictions.
+      @variation || env['sendfile.type']
+    end
+
+    def x_accel_mapping(env)
+      # Only allow header when:
+      # 1. `x-accel-redirect` is explicitly enabled via constructor.
+      # 2. No application-level mappings are configured.
+      return nil unless @variation =~ /x-accel-redirect/i
+      return nil if @mappings.any?
+      
+      env['HTTP_X_ACCEL_MAPPING']
     end
 
     def map_accel_path(env, path)
       if mapping = @mappings.find { |internal, _| internal =~ path }
-        path.sub(*mapping)
-      elsif mapping = env['HTTP_X_ACCEL_MAPPING']
+        return path.sub(*mapping)
+      elsif mapping = x_accel_mapping(env)
+        # Safe to use header: explicit config + no app mappings:
         mapping.split(',').map(&:strip).each do |m|
           internal, external = m.split('=', 2).map(&:strip)
-          new_path = path.sub(/^#{internal}/i, external)
+          new_path = path.sub(/\A#{internal}/i, external)
           return new_path unless path == new_path
         end
-        path
+
+        return path
       end
     end
   end

package/standalone/{linux-x64-2.5.2/pact/lib/vendor/ruby/3.3.0/gems/rack-3.1.16 → linux-x64-2.5.3/pact/lib/vendor/ruby/3.3.0/gems/rack-3.1.18}/lib/rack/version.rb

@@ -12,7 +12,7 @@
 # so it should be enough just to <tt>require 'rack'</tt> in your code.
 
 module Rack
-  RELEASE = "3.1.16"
+  RELEASE = "3.1.18"
 
   # Return the Rack release as a dotted string.
   def self.release

package/standalone/{linux-x64-2.5.2/pact/lib/vendor/ruby/3.3.0/gems/rspec-support-3.13.4 → linux-x64-2.5.3/pact/lib/vendor/ruby/3.3.0/gems/rspec-support-3.13.6}/lib/rspec/support/differ.rb

@@ -1,7 +1,6 @@
 # frozen_string_literal: true
 
 RSpec::Support.require_rspec_support 'encoded_string'
-RSpec::Support.require_rspec_support 'hunk_generator'
 RSpec::Support.require_rspec_support "object_formatter"
 
 require 'pp'

package/standalone/{linux-x64-2.5.2/pact/lib/vendor/ruby/3.3.0/gems/rspec-support-3.13.4 → linux-x64-2.5.3/pact/lib/vendor/ruby/3.3.0/gems/rspec-support-3.13.6}/lib/rspec/support/method_signature_verifier.rb

@@ -79,12 +79,37 @@ module RSpec
           given_kw_args - @allowed_kw_args
         end
 
-        # If the last argument is Hash, Ruby will treat only symbol keys as keyword arguments
-        # the rest will be grouped in another Hash and passed as positional argument.
-        def has_kw_args_in?(args)
-          Hash === args.last &&
-            could_contain_kw_args?(args) &&
-            (RubyFeatures.kw_arg_separation? || args.last.empty? || args.last.keys.any? { |x| x.is_a?(Symbol) })
+        # Considering the arg types, are there kw_args?
+        if RubyFeatures.kw_arg_separation?
+          def has_kw_args_in?(args)
+            # If the last arg is a hash, depending on the signature it could be kw_args or a positional parameter.
+            return false unless Hash === args.last && could_contain_kw_args?(args)
+
+            # If the position of the hash is beyond the count of required and optional positional
+            # args then it is the kwargs hash
+            return true if args.count > @max_non_kw_args
+
+            # This is the proper way to disambiguate between positional args and keywords hash
+            # but relies on beginning of the call chain annotating the method with
+            # ruby2_keywords, so only use it for positive feedback as without the annotation
+            # this is always false
+            return true if Hash.ruby2_keywords_hash?(args[-1])
+
+            # Otherwise, the hash could be defined kw_args or an optional positional parameter
+            # inspect the keys against known kwargs to determine what it is
+            # Note: the problem with this is that if a user passes only invalid keyword args,
+            #       rspec no longer detects is and will assign this to a positional argument
+            return arbitrary_kw_args? || args.last.keys.all? { |x| @allowed_kw_args.include?(x) }
+          end
+        else
+          def has_kw_args_in?(args)
+            # Version <= Ruby 2.7
+            # If the last argument is Hash, Ruby will treat only symbol keys as keyword arguments
+            # the rest will be grouped in another Hash and passed as positional argument.
+            Hash === args.last &&
+              could_contain_kw_args?(args) &&
+              (args.last.empty? || args.last.keys.any? { |x| x.is_a?(Symbol) })
+          end
         end
 
         # Without considering what the last arg is, could it
@@ -282,7 +307,7 @@ module RSpec
 
       def initialize(signature, args=[])
         @signature = signature
-        @non_kw_args, @kw_args = split_args(*args)
+        @non_kw_args, @kw_args = split_args(args.clone)
         @min_non_kw_args = @max_non_kw_args = @non_kw_args
         @arbitrary_kw_args = @unlimited_args = false
       end
@@ -362,7 +387,7 @@ module RSpec
         !@unlimited_args || @signature.unlimited_args?
       end
 
-      def split_args(*args)
+      def split_args(args)
         kw_args = if @signature.has_kw_args_in?(args) && !RubyFeatures.kw_arg_separation?
                     last = args.pop
                     non_kw_args = last.reject { |k, _| k.is_a?(Symbol) }
@@ -395,13 +420,13 @@ module RSpec
     class LooseSignatureVerifier < MethodSignatureVerifier
     private
 
-      def split_args(*args)
+      def split_args(args)
         if RSpec::Support.is_a_matcher?(args.last) && @signature.could_contain_kw_args?(args)
           args.pop
           @signature = SignatureWithKeywordArgumentsMatcher.new(@signature)
         end
 
-        super(*args)
+        super(args)
       end
 
       # If a matcher is used in a signature in place of keyword arguments, all

package/standalone/{linux-x64-2.5.2/pact/lib/vendor/ruby/3.3.0/gems/rspec-support-3.13.4 → linux-x64-2.5.3/pact/lib/vendor/ruby/3.3.0/gems/rspec-support-3.13.6}/lib/rspec/support/version.rb

@@ -3,7 +3,7 @@
 module RSpec
   module Support
     module Version
-      STRING = '3.13.4'
+      STRING = '3.13.6'
     end
   end
 end

package/standalone/{linux-x64-2.5.2/pact/lib/vendor/ruby/3.3.0/gems/rspec-support-3.13.4 → linux-x64-2.5.3/pact/lib/vendor/ruby/3.3.0/gems/rspec-support-3.13.6}/lib/rspec/support.rb

@@ -158,5 +158,6 @@ module RSpec
     # pp, etc by avoiding an unnecessary require. Instead, autoload will take
     # care of loading the differ on first use.
     autoload :Differ, "rspec/support/differ"
+    autoload :HunkGenerator, "rspec/support/hunk_generator"
   end
 end

package/standalone/{linux-x64-2.5.2/pact/lib/vendor/ruby/3.3.0/specifications/pact-1.66.1.gemspec → linux-x64-2.5.3/pact/lib/vendor/ruby/3.3.0/specifications/pact-1.66.2.gemspec}

@@ -1,15 +1,15 @@
 # -*- encoding: utf-8 -*-
-# stub: pact 1.66.1 ruby lib
+# stub: pact 1.66.2 ruby lib
 
 Gem::Specification.new do |s|
   s.name = "pact".freeze
-  s.version = "1.66.1".freeze
+  s.version = "1.66.2".freeze
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0".freeze) if s.respond_to? :required_rubygems_version=
   s.metadata = { "bug_tracker_uri" => "https://github.com/pact-foundation/pact-ruby/issues", "changelog_uri" => "https://github.com/pact-foundation/pact-ruby/blob/master/CHANGELOG.md", "documentation_uri" => "https://github.com/pact-foundation/pact-ruby/blob/master/README.md", "source_code_uri" => "https://github.com/pact-foundation/pact-ruby" } if s.respond_to? :metadata=
   s.require_paths = ["lib".freeze]
   s.authors = ["James Fraser".freeze, "Sergei Matheson".freeze, "Brent Snook".freeze, "Ronald Holshausen".freeze, "Beth Skurrie".freeze]
-  s.date = "2025-01-20"
+  s.date = "1980-01-02"
   s.description = "Enables consumer driven contract testing, providing a mock service and DSL for the consumer project, and interaction playback and verification for the service provider project.".freeze
   s.email = ["james.fraser@alumni.swinburne.edu".freeze, "sergei.matheson@gmail.com".freeze, "brent@fuglylogic.com".freeze, "uglyog@gmail.com".freeze, "bskurrie@dius.com.au".freeze]
   s.executables = ["pact".freeze]
@@ -17,7 +17,7 @@ Gem::Specification.new do |s|
   s.homepage = "https://github.com/pact-foundation/pact-ruby".freeze
   s.licenses = ["MIT".freeze]
   s.required_ruby_version = Gem::Requirement.new(">= 2.0".freeze)
-  s.rubygems_version = "3.6.3".freeze
+  s.rubygems_version = "3.7.2".freeze
   s.summary = "Enables consumer driven contract testing, providing a mock service and DSL for the consumer project, and interaction playback and verification for the service provider project.".freeze
 
   s.installed_by_version = "3.5.22".freeze