CVS commit: [pkgsrc-2024Q4] pkgsrc/net/ruby-net-imap

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Wed Feb 12 07:25:16 UTC 2025

Modified Files:
        pkgsrc/net/ruby-net-imap [pkgsrc-2024Q4]: Makefile PLIST distinfo

Log Message:
Pullup ticket #6945 - requested by taca
net/ruby-net-imap: Security fix

Revisions pulled up:
- net/ruby-net-imap/Makefile                                    1.8-1.10
- net/ruby-net-imap/PLIST                                       1.6-1.7
- net/ruby-net-imap/distinfo                                    1.5-1.7

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Jan  2 05:41:25 UTC 2025

   Modified Files:
        pkgsrc/net/ruby-net-imap: Makefile PLIST distinfo

   Log Message:
   net/ruby-net-imap: update to 0.5.4

   pkgsrc change: restrict Ruby's version (not for Ruby 3.4).

   0.5.4 (2024-12-23)

   What's Changed

   Added

   * Add support for PARTIAL extension (RFC9394) by @nevans in #367

   Fixed

   * Fix partial-range encoding of exclusive ranges by @nevans in #370

   Documentation

   * Fix documentation for #fetch by @nevans in #369

   0.5.3 (2024-12-22)

   What's Changed

   Added

   * Add support for VANISHED responses by @nevans in #329

   Documentation

   * Fix rdoc issues by @nevans in #365

   0.5.2 (2024-12-17)

   What's Changed

   Added

   * Raise ArgumentError on multiple search charset args by @nevans in #363
   * Add keyword argument for search charset by @nevans in #364
   * Add basic ESEARCH support (RFC4466, RFC4731) by @nevans in #333

   Fixed

   * Return empty SearchResult for no search result by @nevans in #362

   Documentation

   * Fix README example by @nevans in #354
   * Add release.yml for better release note generation by @nevans in #355
   * Fix rdoc 6.8 CSS styles by @nevans in #356
   * Update IMAP#search docs (again) by @nevans in #360
   * Consistent heading levels inside method rdoc by @nevans in #361

   Other Changes

   * Add Data polyfill for ruby 3.1 by @nevans in #352
   *  Refactor internal command data classes by @nevans in #358

   Miscellaneous

   * Drop YAML.unsafe_load_file refinement (tests only) by @nevans in #353
   * Bump step-security/harden-runner from 2.10.1 to 2.10.2 by @dependabot in
     #357
   * Enabled windows-latest on GHA by @hsbt in #359

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sun Jan 19 16:28:20 UTC 2025

   Modified Files:
        pkgsrc/net/ruby-net-imap: Makefile distinfo

   Log Message:
   net/ruby-net-imap: update to 0.5.5

   0.5.5 (2025-01-04)

   What's Changed

   Breaking Changes

   * Remove accidental Data#attributes method by @nevans in #371
   * For ruby 3.2 and above, this PR is not a breaking change, and it fixes a
     YAML serialization bug.
   * Net::IMAP::Data#attributes was only available in ruby 3.1, with net-imap
     v0.5.2 - v0.5.4. It can be replaced by #to_h.

   Added

   * RFC9586 UIDONLY support by @avdi in #366

   Documentation

   * Fix rdoc issues by @nevans in #372
   * Use standard www.rfc-editor.org links for RFCs by @nevans in #374
   * Documentation updates by @nevans in #373

   New Contributors

   * @avdi made their first contribution in #366

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sun Feb  9 14:40:07 UTC 2025

   Modified Files:
        pkgsrc/net/ruby-net-imap: Makefile distinfo

   Log Message:
   net/ruby-net-imap: update to 0.5.6

   0.5.6 (2025-02-08)

   Security Fix

   Fixes CVE-2025-25186 (GHSA-7fc5-f82f-cx69): A malicious server can exhaust
   client memory by sending APPENDUID or COPYUID responses with very large
   uid-set ranges.  Net::IMAP::UIDPlusData expands these ranges into arrays of
   integers.

   Fix with minor API changes

   Set config.parser_use_deprecated_uidplus_data to false to replace
   UIDPlusData with AppendUIDData and CopyUIDData.  These classes store their
   UIDs as Net::IMAP::SequenceSet objects (not expanded into arrays of
   integers).  Code that does not handle APPENDUID or COPYUID responses should
   not see any difference.  Code that does handle these responses may need to
   be updated.

   For v0.3.8, this option is not available
   For v0.4.19, the default value is true.
   For v0.5.6, the default value is :up_to_max_size.
   For v0.6.0, the only allowed value will be false (UIDPlusData will be
   removed from v0.6).

   Mitigate with backward compatible API

   Adjust config.parser_max_deprecated_uidplus_data_size to limit the maximum
   UIDPlusData UID set size.
   When config.parser_use_deprecated_uidplus_data == true, larger sets will
   crash.
   When config.parser_use_deprecated_uidplus_data == :up_to_max_size, larger
   sets will use AppendUIDData or CopyUIDData.

   For v0.3,8, this limit is hard-coded to 10,000.
   For v0.4.19, this limit defaults to 1000.
   For v0.5.6, this limit defaults to 100.
   For v0.6.0, the only allowed value will be 0 (UIDPlusData will be removed
   from v0.6).

   Please Note: unhandled responses

   If the client does not add response handlers to prune unhandled responses, a
   malicious server can still eventually exhaust all client memory, by
   repeatedly sending malicious responses.  However, net-imap has always
   retained unhandled responses, and it has always been necessary for
   long-lived connections to prune these responses.  This is not significantly
   different from connecting to a trusted server with a long-lived connection.
   To limit the maximum number of retained responses, a simple handler might
   look something like the following:

     limit = 1000
     imap.add_response_handler do |resp|
       next unless resp.respond_to?(:name) && resp.respond_to?(:data)
       name = resp.name
       code = resp.data.code&.name if resp.data.in?(Net::IMAP::ResponseText)
       imap.responses(name) { _1.slice!(0...-limit) }
       imap.responses(code) { _1.slice!(0...-limit) }
     end

   Added

   * Ensure ResponseParser config is mutable and non-global by @nevans in #381
   * Add SequenceSet methods for querying about duplicates by @nevans in #384
   * Add SequenceSet#each_ordered_number by @nevans in #386
   * Add SequenceSet#find_ordered_index by @nevans in #396
   * Add SequenceSet#ordered_at by @nevans in #397
   * Add AppendUIDData and CopyUIDData classes by @nevans in #400
   * Add parser config for APPENDUID/COPYUID, Deprecate UIDPlusData by @nevans
     in #401

   Fixed

   * Fix SequenceSet#append when its @string is nil by @nevans in #376
   * Fix SequenceSet merging in another SequenceSet by @nevans in #377
   * Fix SequenceSet count dups with multiple "*" by @nevans in #387
   * Re-raise #starttls error from receiver thread by @nevans in #395

   Documentation

   * Fix SequenceSet#cover? documentation by @nevans in #379
   * Document COPYUID in tagged vs untagged responses by @nevans in #398

   Other Changes

   * Move UIDPlusData to its own file by @nevans in #391
   * Parse uid-set as sequence-set without * by @nevans in #393

   Miscellaneous

   * Bump step-security/harden-runner from 2.10.2 to 2.10.3 by @dependabot in #375
   * Bump step-security/harden-runner from 2.10.3 to 2.10.4 by @dependabot in #380
   * Improve test coverage for SequenceSet enums by @nevans in #383
   *  Refactor SequenceSet enumerator tests by @nevans in #385
   * Add "irb" to Gemfile to silence warning by @nevans in #388
   * Omit flaky test with macOS platform by @hsbt in #389
   * Improve UIDPlusData test coverage by @nevans in #392
   * Rename UIDPLUS test file for consistency by @nevans in #399

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Tue Feb 11 16:15:39 UTC 2025

   Modified Files:
        pkgsrc/net/ruby-net-imap: PLIST

   Log Message:
   net/ruby-net-imap: update PLIST

   Forgot to commit with previous update.


To generate a diff of this commit:
cvs rdiff -u -r1.7 -r1.7.2.1 pkgsrc/net/ruby-net-imap/Makefile
cvs rdiff -u -r1.5 -r1.5.2.1 pkgsrc/net/ruby-net-imap/PLIST
cvs rdiff -u -r1.4 -r1.4.2.1 pkgsrc/net/ruby-net-imap/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/ruby-net-imap/Makefile
diff -u pkgsrc/net/ruby-net-imap/Makefile:1.7 pkgsrc/net/ruby-net-imap/Makefile:1.7.2.1
--- pkgsrc/net/ruby-net-imap/Makefile:1.7       Mon Dec  9 15:27:03 2024
+++ pkgsrc/net/ruby-net-imap/Makefile   Wed Feb 12 07:25:16 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.7 2024/12/09 15:27:03 taca Exp $
+# $NetBSD: Makefile,v 1.7.2.1 2025/02/12 07:25:16 maya Exp $
 
-DISTNAME=      net-imap-0.5.1
+DISTNAME=      net-imap-0.5.6
 CATEGORIES=    net mail
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/net/ruby-net-imap/PLIST
diff -u pkgsrc/net/ruby-net-imap/PLIST:1.5 pkgsrc/net/ruby-net-imap/PLIST:1.5.2.1
--- pkgsrc/net/ruby-net-imap/PLIST:1.5  Mon Dec  9 15:27:03 2024
+++ pkgsrc/net/ruby-net-imap/PLIST      Wed Feb 12 07:25:16 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.5 2024/12/09 15:27:03 taca Exp $
+@comment $NetBSD: PLIST,v 1.5.2.1 2025/02/12 07:25:16 maya Exp $
 ${GEM_HOME}/cache/${GEM_NAME}.gem
 ${GEM_LIBDIR}/BSDL
 ${GEM_LIBDIR}/COPYING
@@ -15,8 +15,10 @@ ${GEM_LIBDIR}/lib/net/imap/config/attr_a
 ${GEM_LIBDIR}/lib/net/imap/config/attr_inheritance.rb
 ${GEM_LIBDIR}/lib/net/imap/config/attr_type_coercion.rb
 ${GEM_LIBDIR}/lib/net/imap/data_encoding.rb
+${GEM_LIBDIR}/lib/net/imap/data_lite.rb
 ${GEM_LIBDIR}/lib/net/imap/deprecated_client_options.rb
 ${GEM_LIBDIR}/lib/net/imap/errors.rb
+${GEM_LIBDIR}/lib/net/imap/esearch_result.rb
 ${GEM_LIBDIR}/lib/net/imap/fetch_data.rb
 ${GEM_LIBDIR}/lib/net/imap/flags.rb
 ${GEM_LIBDIR}/lib/net/imap/response_data.rb
@@ -48,6 +50,8 @@ ${GEM_LIBDIR}/lib/net/imap/stringprep/sa
 ${GEM_LIBDIR}/lib/net/imap/stringprep/saslprep_tables.rb
 ${GEM_LIBDIR}/lib/net/imap/stringprep/tables.rb
 ${GEM_LIBDIR}/lib/net/imap/stringprep/trace.rb
+${GEM_LIBDIR}/lib/net/imap/uidplus_data.rb
+${GEM_LIBDIR}/lib/net/imap/vanished_data.rb
 ${GEM_LIBDIR}/net-imap.gemspec
 ${GEM_LIBDIR}/rakelib/benchmarks.rake
 ${GEM_LIBDIR}/rakelib/rdoc.rake

Index: pkgsrc/net/ruby-net-imap/distinfo
diff -u pkgsrc/net/ruby-net-imap/distinfo:1.4 pkgsrc/net/ruby-net-imap/distinfo:1.4.2.1
--- pkgsrc/net/ruby-net-imap/distinfo:1.4       Mon Dec  9 15:27:03 2024
+++ pkgsrc/net/ruby-net-imap/distinfo   Wed Feb 12 07:25:16 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.4 2024/12/09 15:27:03 taca Exp $
+$NetBSD: distinfo,v 1.4.2.1 2025/02/12 07:25:16 maya Exp $
 
-BLAKE2s (net-imap-0.5.1.gem) = 5b1d0e983579d392680fd57057373e0129e2dc80858fae238e2099dfa05ad53f
-SHA512 (net-imap-0.5.1.gem) = bfafbc26c5673ac0de30b772483864cf67e76cc369500bf83b3e2db173f922ffd0c38855b2d10e7566f300d2f1b469fde417112dfccca81eeda1af37fda8abdf
-Size (net-imap-0.5.1.gem) = 155648 bytes
+BLAKE2s (net-imap-0.5.6.gem) = 0f18df0054be85dcf9bef655ea88d91277837bf913838da0347bf25c59fd4cc5
+SHA512 (net-imap-0.5.6.gem) = 8f475d44b66708c8af1036d88b7b27e0e44c8f3796307bead6649db8045a2909573fbb41b026b073bfa11cf3ce0c1adaa998bf6c2732f5921a7947da9524dfa3
+Size (net-imap-0.5.6.gem) = 171520 bytes