CVS commit: [pkgsrc-2023Q1] pkgsrc/lang

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Sat Apr  1 19:57:14 UTC 2023

Modified Files:
        pkgsrc/lang/ruby [pkgsrc-2023Q1]: rubyversion.mk
        pkgsrc/lang/ruby30-base [pkgsrc-2023Q1]: distinfo

Log Message:
Pullup ticket #6746 - requested by taca
lang/ruby30-base: security update

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.262
- lang/ruby30-base/distinfo                                     1.12

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Apr  1 09:08:51 UTC 2023

   Modified Files:
        pkgsrc/lang/ruby: rubyversion.mk
        pkgsrc/lang/ruby30-base: distinfo

   Log Message:
   lang/ruby30: update to 3.0.6

   Ruby 3.0.6 Released                  Posted by usa on 30 Mar 2023

   Ruby 3.0.6 has been released.

   This release includes security fixes. Please check the topics below for
   details.

   * CVE-2023-28755: ReDoS vulnerability in URI
   * CVE-2023-28756: ReDoS vulnerability in Time

   This release also includes some bug fixes.  See the GitHub releases for
   further details.

   After this release, we end the normal maintenance phase of Ruby 3.0, and
   Ruby 3.0 enters the security maintenance phase.  This means that we will no
   longer backport any bug fixes to Ruby 3.0 except security fixes.

   The term of the security maintenance phase is scheduled for a year.  Ruby
   3.0 reaches EOL and its official support ends by the end of the security
   maintenance phase.  Therefore, we recommend that you start to plan upgrade
   to Ruby 3.1 or 3.2.

   To generate a diff of this commit:
   cvs rdiff -u -r1.261 -r1.262 pkgsrc/lang/ruby/rubyversion.mk
   cvs rdiff -u -r1.11 -r1.12 pkgsrc/lang/ruby30-base/distinfo


To generate a diff of this commit:
cvs rdiff -u -r1.260.2.1 -r1.260.2.2 pkgsrc/lang/ruby/rubyversion.mk
cvs rdiff -u -r1.11 -r1.11.4.1 pkgsrc/lang/ruby30-base/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/ruby/rubyversion.mk
diff -u pkgsrc/lang/ruby/rubyversion.mk:1.260.2.1 pkgsrc/lang/ruby/rubyversion.mk:1.260.2.2
--- pkgsrc/lang/ruby/rubyversion.mk:1.260.2.1   Sat Apr  1 19:39:42 2023
+++ pkgsrc/lang/ruby/rubyversion.mk     Sat Apr  1 19:57:14 2023
@@ -1,4 +1,4 @@
-# $NetBSD: rubyversion.mk,v 1.260.2.1 2023/04/01 19:39:42 spz Exp $
+# $NetBSD: rubyversion.mk,v 1.260.2.2 2023/04/01 19:57:14 spz Exp $
 #
 
 # This file determines which Ruby version is used as a dependency for
@@ -214,7 +214,7 @@ RUBY_VERSION_REQD?= ${PKGNAME_REQD:C/rub
 
 # current supported Ruby's version
 RUBY27_VERSION=                2.7.8
-RUBY30_VERSION=                3.0.5
+RUBY30_VERSION=                3.0.6
 RUBY31_VERSION=                3.1.3
 RUBY32_VERSION=                3.2.1
 
@@ -408,13 +408,13 @@ RUBY_STRINGIO_VER=                3.0.1
 RUBY_STRSCAN_VER=              3.0.1
 RUBY_SYSLOG_VER=               0.1.0
 RUBY_TEMPFILE_VER=             0.1.1
-RUBY_TIME_VER=                 0.1.0
+RUBY_TIME_VER=                 0.1.1
 RUBY_TIMEOUT_VER=              0.1.1
 RUBY_TMPDIR_VER=               0.1.2
 RUBY_TRACER_VER=               0.1.1
 RUBY_TSORT_VER=                        0.1.0
 RUBY_UN_VER=                   0.1.0
-RUBY_URI_VER=                  0.10.1
+RUBY_URI_VER=                  0.10.2
 RUBY_WEAKREF_VER=              0.1.1
 RUBY_YAML_VER=                 0.1.1
 RUBY_ZLIB_VER=                 2.0.0

Index: pkgsrc/lang/ruby30-base/distinfo
diff -u pkgsrc/lang/ruby30-base/distinfo:1.11 pkgsrc/lang/ruby30-base/distinfo:1.11.4.1
--- pkgsrc/lang/ruby30-base/distinfo:1.11       Sat Nov 26 13:07:52 2022
+++ pkgsrc/lang/ruby30-base/distinfo    Sat Apr  1 19:57:14 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.11 2022/11/26 13:07:52 taca Exp $
+$NetBSD: distinfo,v 1.11.4.1 2023/04/01 19:57:14 spz Exp $
 
-BLAKE2s (ruby-3.0.5.tar.xz) = 21cbe465dddcd8f3fdd19190cab6b513e7a1ae68f6686b0b9f3a95ce86d88bf1
-SHA512 (ruby-3.0.5.tar.xz) = 1c69d18210a2156f7696c678a8d54bf05c4dc49a1401c1ecc5760b1c23fb6ac14053873a225564664d6a327cda274ce72f47d112a6ad8d378f978de4e507e9a0
-Size (ruby-3.0.5.tar.xz) = 15880196 bytes
+BLAKE2s (ruby-3.0.6.tar.xz) = c774fdd29b34f60212f74897455185476bc8bfad5007d1123e8d14d42f172295
+SHA512 (ruby-3.0.6.tar.xz) = abbf883cd9f3ddbd171df8f8c3cd35d930623c4c01a5e01387de0aee9811cca7604b82163e18e04f809773bf1ca5a450f13f62f3db14f191f610e116ae4fa6f8
+Size (ruby-3.0.6.tar.xz) = 15864560 bytes
 SHA1 (patch-common.mk) = c23eed58427b2fd4ba8fdb3692f609701a666c6d
 SHA1 (patch-configure) = a6ef87bfefd5f753d0b331c6b5493ef189f69d6a
 SHA1 (patch-ext_dbm_extconf.rb) = c998f8735db54b1ae2bc8b6caa359ce88bc7a45b