CVS commit: pkgsrc/devel/ruby-redmine61

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sun Mar 29 13:57:44 UTC 2026

Modified Files:
        pkgsrc/devel/ruby-redmine61: Makefile PLIST distinfo
        pkgsrc/devel/ruby-redmine61/patches: patch-Gemfile

Log Message:
devel/ruby-redmine61: update to 6.1.2

6.1.2 (2026-03-16)

This release contains security fixes.

[Calendar]

* Defect #43718: Issue beginning/ending arrows should be flipped in RTL
  calendars

[Code cleanup/refactoring]

* Patch #43649: Remove MySQL 5.7-related comments from database.yml.example
* Patch #43713: Add missing entries "apps" and "shield-check" to
  icon_source.yml
* Patch #43872: Update GitHub Actions workflow dependencies

[Database]

* Patch #43668: Serialize address limit checks during email_addresses#create

[Issues]

* Defect #33610: Submitting the issue edit form without changes unexpectedly
  updates updated_on
* Feature #43837: Add a hint to the issue relation add form that clarifies
  multiple comma-separated issue IDs are accepted

[Issues filter]

* Patch #43736: author.group filter test fix

[Issues list]

* Defect #31972: An empty group_count badge is displayed when grouped with
  created_on

[Performance]

* Defect #43651: Searching issues with searchable custom fields causes a
  performance regression on MySQL

[Permissions and roles]

* Feature #43659: Set minimum width for Permission column in permission
  report

[Security]

* Defect #43661: Unsafe eval usage in AttachmentsHelper
* Defect #43690: Directory Traversal via Backslash-Separated Paths in
  Filesystem SCM
* Defect #43691: DOM (Stored) XSS in @mention autocomplete via unescaped
  user name
* Defect #43692: LDAP Injection (Unescaped Input in LDAP Search Filter)
* Defect #43694: DOM XSS: HTML Injection via Custom Field Name in Query
  Filter Generation
* Defect #43830: User who is allowed to view only their own time entries can
  retrieve other users' time entry details by directly specifying the
  TimeEntry ID via the REST API
* Defect #43840: Update Nokogiri to 1.19.1

[Text formatting]

* Defect #40918: Wiki "Edit this section" does not extract SeText headings
  correctly in CommonMark Markdown
* Defect #43662: Cursor may move to incorrect position when pasting inline
  images from clipboard

[Themes]

* Feature #43087: Allow to change icons sprites from theme

[UI]

* Defect #43664: Project menu tab left/right buttons are broken in RTL
  layout
* Defect #43672: Indent icons for subtasks and subprojects in list tables
  are misplaced in RTL layout
* Defect #43674: Unintended global `ol` styling in changeset CSS
* Defect #43675: "Add filter" dropdown in query form appears on the wrong
  side in RTL layout
* Defect #43714: Arrow buttons for Available/Selected columns are misleading
  in the issues query form on RTL layouts
* Defect #43715: Project selector does not indent subprojects in RTL layout
* Defect #43804: Custom field preview does not work on bulk issue edit
* Defect #43869: Default assignee selected by category is not shown in UI

[Wiki]

* Feature #43631: Add "include_subprojects" parameter to recent_pages macro
  to include pages from subprojects


To generate a diff of this commit:
cvs rdiff -u -r1.1 -r1.2 pkgsrc/devel/ruby-redmine61/Makefile \
    pkgsrc/devel/ruby-redmine61/PLIST pkgsrc/devel/ruby-redmine61/distinfo
cvs rdiff -u -r1.1 -r1.2 pkgsrc/devel/ruby-redmine61/patches/patch-Gemfile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/ruby-redmine61/Makefile
diff -u pkgsrc/devel/ruby-redmine61/Makefile:1.1 pkgsrc/devel/ruby-redmine61/Makefile:1.2
--- pkgsrc/devel/ruby-redmine61/Makefile:1.1    Wed Feb 11 07:53:37 2026
+++ pkgsrc/devel/ruby-redmine61/Makefile        Sun Mar 29 13:57:44 2026
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.1 2026/02/11 07:53:37 taca Exp $
+# $NetBSD: Makefile,v 1.2 2026/03/29 13:57:44 taca Exp $
 
 DISTNAME=      redmine-${RM_VERSION}
 PKGNAME=       ${RUBY_PKGPREFIX}-${DISTNAME:S/redmine/redmine${RM_VER}/}
@@ -10,7 +10,7 @@ HOMEPAGE=     https://www.redmine.org/
 COMMENT=       Flexible project management web application
 LICENSE=       gnu-gpl-v2 # and so on.
 
-RM_VERSION=    6.1.1
+RM_VERSION=    6.1.2
 
 NO_BUILD=      yes
 
Index: pkgsrc/devel/ruby-redmine61/PLIST
diff -u pkgsrc/devel/ruby-redmine61/PLIST:1.1 pkgsrc/devel/ruby-redmine61/PLIST:1.2
--- pkgsrc/devel/ruby-redmine61/PLIST:1.1       Wed Feb 11 07:53:37 2026
+++ pkgsrc/devel/ruby-redmine61/PLIST   Sun Mar 29 13:57:44 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.1 2026/02/11 07:53:37 taca Exp $
+@comment $NetBSD: PLIST,v 1.2 2026/03/29 13:57:44 taca Exp $
 bin/redmine61_generate_secret_token${RUBY_SUFFIX}.sh
 bin/redmine61_load_default_data${RUBY_SUFFIX}.sh
 bin/redmine61_migrate_db${RUBY_SUFFIX}.sh
@@ -42,6 +42,7 @@ ${RM_DIR}/app/assets/images/calendar.png
 ${RM_DIR}/app/assets/images/cancel.png
 ${RM_DIR}/app/assets/images/changeset.png
 ${RM_DIR}/app/assets/images/chevron-down.svg
+${RM_DIR}/app/assets/images/chevron-left-idnt.svg
 ${RM_DIR}/app/assets/images/chevron-right-idnt.svg
 ${RM_DIR}/app/assets/images/close.png
 ${RM_DIR}/app/assets/images/close_hl.png
@@ -2043,6 +2044,7 @@ ${RM_DIR}/test/system/list_autofill_test
 ${RM_DIR}/test/system/messages_test.rb
 ${RM_DIR}/test/system/my_page_test.rb
 ${RM_DIR}/test/system/oauth_provider_test.rb
+${RM_DIR}/test/system/query_test.rb
 ${RM_DIR}/test/system/quick_jump_test.rb
 ${RM_DIR}/test/system/reactions_test.rb
 ${RM_DIR}/test/system/repositories_test.rb
Index: pkgsrc/devel/ruby-redmine61/distinfo
diff -u pkgsrc/devel/ruby-redmine61/distinfo:1.1 pkgsrc/devel/ruby-redmine61/distinfo:1.2
--- pkgsrc/devel/ruby-redmine61/distinfo:1.1    Wed Feb 11 07:53:37 2026
+++ pkgsrc/devel/ruby-redmine61/distinfo        Sun Mar 29 13:57:44 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.1 2026/02/11 07:53:37 taca Exp $
+$NetBSD: distinfo,v 1.2 2026/03/29 13:57:44 taca Exp $
 
-BLAKE2s (redmine-6.1.1.tar.gz) = f1617d4d125919b14e280ec9e9131fd0c7663304fc110f2e46177aeef44dca3b
-SHA512 (redmine-6.1.1.tar.gz) = ed3e3e4f8939e652893eaa3f1d8728570cb2d92093a3abb3d2308618dc4956bd809b0ed40ddcb92d34aa6a07bd08b0c309e2df76ca63f52168e120d800811adc
-Size (redmine-6.1.1.tar.gz) = 4148785 bytes
-SHA1 (patch-Gemfile) = 64ecd1dfacc04e3487bd56b5d9f14d7ea63a76ff
+BLAKE2s (redmine-6.1.2.tar.gz) = 1f695351d734c176682d58d7acbc95762ec44cc753e9ae2e364d958d99e82a95
+SHA512 (redmine-6.1.2.tar.gz) = ee76fe4e164e635f1bb2e0a5125fbe41b33ec03ef0512464d6f08f23d456b12814a70e9be3d6e080cbde625628f18d7b3e6a54c49f06331cd43e6c550777b728
+Size (redmine-6.1.2.tar.gz) = 4154595 bytes
+SHA1 (patch-Gemfile) = 2cb173d03ac9a219d76589686c2723fa2ec92e75
 SHA1 (patch-config_additional__environment.rb.example) = 7ad913800c5f31fdd9b71aa92294bdbeea7b77fe
 SHA1 (patch-lib_tasks_initializers.rake) = d5ccb73cff6baedee9dfbe7563e25925f1ff9d85

Index: pkgsrc/devel/ruby-redmine61/patches/patch-Gemfile
diff -u pkgsrc/devel/ruby-redmine61/patches/patch-Gemfile:1.1 pkgsrc/devel/ruby-redmine61/patches/patch-Gemfile:1.2
--- pkgsrc/devel/ruby-redmine61/patches/patch-Gemfile:1.1       Wed Feb 11 07:53:37 2026
+++ pkgsrc/devel/ruby-redmine61/patches/patch-Gemfile   Sun Mar 29 13:57:44 2026
@@ -1,11 +1,11 @@
-$NetBSD: patch-Gemfile,v 1.1 2026/02/11 07:53:37 taca Exp $
+$NetBSD: patch-Gemfile,v 1.2 2026/03/29 13:57:44 taca Exp $
 
 * Relax dependency.
 * Do not load gem for developemt and test.
 
---- Gemfile.orig       2026-01-06 02:25:05.000000000 +0000
+--- Gemfile.orig       2026-03-17 07:40:07.000000000 +0000
 +++ Gemfile
-@@ -2,14 +2,14 @@ source 'https://rubygems.org'
+@@ -2,7 +2,7 @@ source 'https://rubygems.org'
  
  ruby '>= 3.2.0', '< 3.5.0'
  
@@ -14,14 +14,6 @@ $NetBSD: patch-Gemfile,v 1.1 2026/02/11 
  gem 'rouge', '~> 4.5'
  gem 'mini_mime', '~> 1.1.0'
  gem "actionpack-xml_parser"
- gem 'roadie-rails', '~> 3.3.0'
- gem 'marcel'
- gem 'mail', '~> 2.8.1'
--gem 'nokogiri', '~> 1.18.3'
-+gem 'nokogiri', '~> 1.18'
- gem 'i18n', '~> 1.14.1'
- gem 'rbpdf', '~> 1.21.4'
- gem 'addressable'
 @@ -38,17 +38,17 @@ gem 'rotp', '>= 5.0.0'
  gem 'rqrcode'