CVS commit: [pkgsrc-2026Q1] pkgsrc/textproc/ruby-nokogiri

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Thu May  7 22:22:31 UTC 2026

Modified Files:
        pkgsrc/textproc/ruby-nokogiri [pkgsrc-2026Q1]: Makefile distinfo

Log Message:
Pullup ticket #7093 - requested by taca
textproc/ruby-nokogiri: Security fix

Revisions pulled up:
- textproc/ruby-nokogiri/Makefile                               1.110
- textproc/ruby-nokogiri/distinfo                               1.77

---
   Module Name: pkgsrc
   Committed By:        tsutsui
   Date:                Wed Apr 29 00:01:39 UTC 2026

   Modified Files:
        pkgsrc/textproc/ruby-nokogiri: Makefile distinfo

   Log Message:
   ruby-nokogiri: update to 1.19.3

   Upstream changes:
    https://github.com/sparklemotion/nokogiri/releases/tag/v1.19.3
    https://github.com/sparklemotion/nokogiri/releases/tag/v1.19.2

   v1.19.3 / 2026-04-27

    Fixed / Security

     * Address exponential regex backtracking in CSS selector tokenizer.
       See GHSA-c4rq-3m3g-8wgx for more information.
     * [CRuby] Address memory leak in XSLT::Stylesheet#transform. See
       GHSA-v2fc-qm4h-8hqv for more information.

   v1.19.2 / 2026-03-19

    Dependencies

     * [JRuby] Saxon-HE is updated to 12.7, from 9.6.0-4. Saxon-HE is a
       transitive dependency of nu.validator:jing, and this update
       addresses CVEs in Saxon-HE's own transitive dependencies JDOM and
       dom4j. We don't think this warrants a security release, however
       we're cutting a patch release to help users whose security
       scanners are flagging this. [#3611] @flavorjones


To generate a diff of this commit:
cvs rdiff -u -r1.109 -r1.109.2.1 pkgsrc/textproc/ruby-nokogiri/Makefile
cvs rdiff -u -r1.76 -r1.76.2.1 pkgsrc/textproc/ruby-nokogiri/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/textproc/ruby-nokogiri/Makefile
diff -u pkgsrc/textproc/ruby-nokogiri/Makefile:1.109 pkgsrc/textproc/ruby-nokogiri/Makefile:1.109.2.1
--- pkgsrc/textproc/ruby-nokogiri/Makefile:1.109        Tue Feb 17 14:40:04 2026
+++ pkgsrc/textproc/ruby-nokogiri/Makefile      Thu May  7 22:22:31 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.109 2026/02/17 14:40:04 taca Exp $
+# $NetBSD: Makefile,v 1.109.2.1 2026/05/07 22:22:31 maya Exp $
 
-DISTNAME=      nokogiri-1.19.1
+DISTNAME=      nokogiri-1.19.3
 CATEGORIES=    textproc
 
 MAINTAINER=    tsutsui%NetBSD.org@localhost

Index: pkgsrc/textproc/ruby-nokogiri/distinfo
diff -u pkgsrc/textproc/ruby-nokogiri/distinfo:1.76 pkgsrc/textproc/ruby-nokogiri/distinfo:1.76.2.1
--- pkgsrc/textproc/ruby-nokogiri/distinfo:1.76 Tue Feb 17 14:40:04 2026
+++ pkgsrc/textproc/ruby-nokogiri/distinfo      Thu May  7 22:22:31 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.76 2026/02/17 14:40:04 taca Exp $
+$NetBSD: distinfo,v 1.76.2.1 2026/05/07 22:22:31 maya Exp $
 
-BLAKE2s (nokogiri-1.19.1.gem) = 16eeeb1c2f7d8c3767414443cc6a0bd16660dde267766781010f70c053cca67b
-SHA512 (nokogiri-1.19.1.gem) = eb8f55c2ca5e0b15b0f106fef7333bc4e4a93e0936a276823deaf32f77351826ae709cda56bd47411c194a5e5a1abe07abbe122461093e28ea70444290a7d778
-Size (nokogiri-1.19.1.gem) = 4366336 bytes
+BLAKE2s (nokogiri-1.19.3.gem) = 5b3a53e5cf78d489beed975dd9e8ee7c6ec33c0d251a3d13681599bff40ac932
+SHA512 (nokogiri-1.19.3.gem) = b0b76e4b80e54465218c96664b5bede1dfd2656b5540c5b39b9abebf7f38783e1f4f7bba28595bdf54892cd1cc2fa8473b3702f5638a344d3c6feb8809106cb3
+Size (nokogiri-1.19.3.gem) = 4367360 bytes