CVS commit: pkgsrc/security/ruby-oauth

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Mon Jun  8 13:21:49 UTC 2026

Modified Files:
        pkgsrc/security/ruby-oauth: Makefile PLIST distinfo

Log Message:
security/ruby-oauth: update to 1.1.6

1.1.6 (2026-06-07)

* TAG: v1.1.6
* COVERAGE: 89.05% -- 838/941 lines in 33 files
* BRANCH COVERAGE: 60.46% -- 159/263 branches in 33 files
* 40.38% documented

Changed

* Retemplated project workflows, appraisals, and development tooling with
  the current kettle-jem template.
* Documented current OAuth::Consumer configuration options, including token
  request redirect safety settings, and corrected the OAuth 1.0a usage
  example.
* Raised the runtime dependency floor for auth-sanitizer to >= 0.2.1.
* Raised the runtime dependency floor for snaky_hash to >= 2.0.5.

Security

* Hardened OAuth token endpoint redirect handling after the
  GHSA-pp92-crg2-gfv9 review: token redirects are now bounded, resolved
  explicitly, and rejected when they cross origins unless explicitly
  enabled.


To generate a diff of this commit:
cvs rdiff -u -r1.25 -r1.26 pkgsrc/security/ruby-oauth/Makefile
cvs rdiff -u -r1.13 -r1.14 pkgsrc/security/ruby-oauth/PLIST
cvs rdiff -u -r1.22 -r1.23 pkgsrc/security/ruby-oauth/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/ruby-oauth/Makefile
diff -u pkgsrc/security/ruby-oauth/Makefile:1.25 pkgsrc/security/ruby-oauth/Makefile:1.26
--- pkgsrc/security/ruby-oauth/Makefile:1.25    Sun May 31 06:11:11 2026
+++ pkgsrc/security/ruby-oauth/Makefile Mon Jun  8 13:21:49 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.25 2026/05/31 06:11:11 taca Exp $
+# $NetBSD: Makefile,v 1.26 2026/06/08 13:21:49 taca Exp $
 
-DISTNAME=      oauth-1.1.5
+DISTNAME=      oauth-1.1.6
 CATEGORIES=    security
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
@@ -9,8 +9,8 @@ COMMENT=        OAuth Core Ruby implementation
 LICENSE=       mit
 
 DEPENDS+=      ${RUBY_PKGPREFIX}-oauth-tty>=1.0.8<2:../../security/ruby-oauth-tty
-DEPENDS+=      ${RUBY_PKGPREFIX}-snaky_hash>=2.0.4<3:../../security/ruby-snaky_hash
-DEPENDS+=      ${RUBY_PKGPREFIX}-version_gem>=1.1.3<2:../../devel/ruby-version_gem
+DEPENDS+=      ${RUBY_PKGPREFIX}-snaky_hash>=2.0.5<3:../../security/ruby-snaky_hash
+DEPENDS+=      ${RUBY_PKGPREFIX}-version_gem>=1.1.11<2:../../devel/ruby-version_gem
 
 USE_LANGUAGES= # none
 

Index: pkgsrc/security/ruby-oauth/PLIST
diff -u pkgsrc/security/ruby-oauth/PLIST:1.13 pkgsrc/security/ruby-oauth/PLIST:1.14
--- pkgsrc/security/ruby-oauth/PLIST:1.13       Sun May 31 06:11:11 2026
+++ pkgsrc/security/ruby-oauth/PLIST    Mon Jun  8 13:21:49 2026
@@ -1,15 +1,15 @@
-@comment $NetBSD: PLIST,v 1.13 2026/05/31 06:11:11 taca Exp $
+@comment $NetBSD: PLIST,v 1.14 2026/06/08 13:21:49 taca Exp $
 ${GEM_HOME}/cache/${GEM_NAME}.gem
 ${GEM_LIBDIR}/CHANGELOG.md
 ${GEM_LIBDIR}/CITATION.cff
 ${GEM_LIBDIR}/CODE_OF_CONDUCT.md
 ${GEM_LIBDIR}/CONTRIBUTING.md
 ${GEM_LIBDIR}/FUNDING.md
-${GEM_LIBDIR}/LICENSE.txt
+${GEM_LIBDIR}/LICENSE.md
 ${GEM_LIBDIR}/README.md
-${GEM_LIBDIR}/REEK
 ${GEM_LIBDIR}/RUBOCOP.md
 ${GEM_LIBDIR}/SECURITY.md
+${GEM_LIBDIR}/certs/pboling.pem
 ${GEM_LIBDIR}/lib/oauth.rb
 ${GEM_LIBDIR}/lib/oauth/auth_sanitizer.rb
 ${GEM_LIBDIR}/lib/oauth/client.rb
@@ -55,4 +55,5 @@ ${GEM_LIBDIR}/lib/oauth/version.rb
 ${GEM_LIBDIR}/sig/oauth/consumer.rbs
 ${GEM_LIBDIR}/sig/oauth/signature/base.rbs
 ${GEM_LIBDIR}/sig/oauth/tokens/token.rbs
+${GEM_LIBDIR}/sig/oauth/version.rbs
 ${GEM_HOME}/specifications/${GEM_NAME}.gemspec

Index: pkgsrc/security/ruby-oauth/distinfo
diff -u pkgsrc/security/ruby-oauth/distinfo:1.22 pkgsrc/security/ruby-oauth/distinfo:1.23
--- pkgsrc/security/ruby-oauth/distinfo:1.22    Sun May 31 06:11:11 2026
+++ pkgsrc/security/ruby-oauth/distinfo Mon Jun  8 13:21:49 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.22 2026/05/31 06:11:11 taca Exp $
+$NetBSD: distinfo,v 1.23 2026/06/08 13:21:49 taca Exp $
 
-BLAKE2s (oauth-1.1.5.gem) = 8c39ada8236e947170698680471580771ac8acc6d829e9ea335b7446a9631c60
-SHA512 (oauth-1.1.5.gem) = 4fe182d8ab0c3a5aa4d06c6a0a09b0d0023e679c2f35909fd0cbc2dbd9577deefe6eb96d1bcf6985009f894300adb28566d209ce4a6376952dfd6c381f13e4a2
-Size (oauth-1.1.5.gem) = 61952 bytes
+BLAKE2s (oauth-1.1.6.gem) = b749435848dc9354bd5a6f84af36e757105d205bd012776504bc8a4b08957e74
+SHA512 (oauth-1.1.6.gem) = 35a2bc48893955b245cb8251672283fa6e3c843d34067a9c8e904316901eed8ccd4d786c507da40ac3d5b8087d0894caab0072fa4d9ec8b0bdb5ee362481e371
+Size (oauth-1.1.6.gem) = 65536 bytes