CVS commit: pkgsrc/devel/ruby-redmine61

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Tue Jun 16 14:34:56 UTC 2026

Modified Files:
        pkgsrc/devel/ruby-redmine61: Makefile PLIST distinfo
        pkgsrc/devel/ruby-redmine61/patches: patch-Gemfile

Log Message:
devel/ruby-redmine61: update to 6.1.3

This release addresss multiple security vulnerabilities along with various
bug fixes and improvements.

Code cleanup/refactoring

* Defect #43985: Flaky IssuesSystemTest caused by `!page.has_css?`
* Defect #44010: Too much INFO log of asset paths when starting Rails
* Defect #44072:
  OauthProviderSystemTest#test_application_creation_and_authorization fails
  randomly
* Patch #44073: TimeEntryTest#test_should_not_accept_closed_issue fails
  randomly depending on locale

Documentation

* Defect #43906: Wiki help does not display localized content for locales
  with a region subtag
* Defect #43920: German and Tamil CommonMark wiki help pages lack the Alerts
  section
* Patch #43447: Update INSTALL document to mention additional_environment.rb
* Patch #43896: Remove obsolete db:migrate:upgrade_plugin_migrations step
  from doc/UPGRADING
* Patch #43897: Use `bin/rails` instead of `rake` in documentation
* Patch #43929: German translation for Alerts section on CommonMark wiki
  help page
* Patch #43930: Add blockquote formatting in CommonMark wiki help pages

Issues

* Defect #44042: Watchers section in the sidebar is incorrectly updated when
  watching a subtasks or related issue via context menu

Projects

* Defect #43910: Projects with the identifiers "autocomplete" or
  "bulk_destroy" cannot perform some operations

REST API

* Defect #43698: ArgumentError occurs on /oauth/authorize when REST API is
  disabled

Rails support

* Patch #43909: Update Rails to 7.2.3.1

SCM

* Defect #43964: `IconsHelper#scm_change_icon` ignores passed options
* Patch #43966: Tighten SVN repository URL validation

Security

* Patch #43986: Improve the `config.filter_parameters` setting
* Defect #43951: Bulk attachment download bypasses View files permission for
  project/version attachments
* Defect #44109: PreAuth leak name of private Projects
* Defect #44118: Any project member with add_issue_notes permission can add
  notes to private issues they cannot view, via the MailHandler reply
  dispatch
* Defect #44138: Stored XSS in Textile formatter due to
  restore_redmine_links
* Defect #44145: PostScript execution in Redmine::Thumbnail.generate via %%
  DSC-comment prefix
* Defect #44146: Time-entry API hidden custom-field leak
* Defect #44174: OAuth scope enforcement bypass in user account

Translations

* Defect #43921: Tamil CommonMark help page incorrectly translates CSS
  property names
* Patch #43922: Japanese translation update for `recent_pages` macro help on
  `project` and `include_subprojects` options
* Patch #44005: Fix French translation of label_auto_watch_on_issue_created

UI

* Defect #43984: Current page background in pagination overflows its border
* Defect #44069: Remove redundant underline from abbr elements
* Defect #44127: Replace legacy group avatar icon with SVG
* Defect #44170: Toggling between board and list in projects query do not
  work properly


To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.5 pkgsrc/devel/ruby-redmine61/Makefile
cvs rdiff -u -r1.2 -r1.3 pkgsrc/devel/ruby-redmine61/PLIST \
    pkgsrc/devel/ruby-redmine61/distinfo
cvs rdiff -u -r1.2 -r1.3 pkgsrc/devel/ruby-redmine61/patches/patch-Gemfile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/ruby-redmine61/Makefile
diff -u pkgsrc/devel/ruby-redmine61/Makefile:1.4 pkgsrc/devel/ruby-redmine61/Makefile:1.5
--- pkgsrc/devel/ruby-redmine61/Makefile:1.4    Wed Apr  8 14:54:20 2026
+++ pkgsrc/devel/ruby-redmine61/Makefile        Tue Jun 16 14:34:56 2026
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.4 2026/04/08 14:54:20 taca Exp $
+# $NetBSD: Makefile,v 1.5 2026/06/16 14:34:56 taca Exp $
 
 DISTNAME=      redmine-${RM_VERSION}
 PKGNAME=       ${RUBY_PKGPREFIX}-${DISTNAME:S/redmine/redmine${RM_VER}/}
@@ -10,7 +10,7 @@ HOMEPAGE=     https://www.redmine.org/
 COMMENT=       Flexible project management web application
 LICENSE=       gnu-gpl-v2 # and so on.
 
-RM_VERSION=    6.1.2
+RM_VERSION=    6.1.3
 
 NO_BUILD=      yes
 

Index: pkgsrc/devel/ruby-redmine61/PLIST
diff -u pkgsrc/devel/ruby-redmine61/PLIST:1.2 pkgsrc/devel/ruby-redmine61/PLIST:1.3
--- pkgsrc/devel/ruby-redmine61/PLIST:1.2       Sun Mar 29 13:57:44 2026
+++ pkgsrc/devel/ruby-redmine61/PLIST   Tue Jun 16 14:34:56 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2026/03/29 13:57:44 taca Exp $
+@comment $NetBSD: PLIST,v 1.3 2026/06/16 14:34:56 taca Exp $
 bin/redmine61_generate_secret_token${RUBY_SUFFIX}.sh
 bin/redmine61_load_default_data${RUBY_SUFFIX}.sh
 bin/redmine61_migrate_db${RUBY_SUFFIX}.sh
@@ -86,6 +86,7 @@ ${RM_DIR}/app/assets/images/folder_open.
 ${RM_DIR}/app/assets/images/folder_open_add.png
 ${RM_DIR}/app/assets/images/folder_open_orange.png
 ${RM_DIR}/app/assets/images/group.png
+${RM_DIR}/app/assets/images/group.svg
 ${RM_DIR}/app/assets/images/help.png
 ${RM_DIR}/app/assets/images/history.png
 ${RM_DIR}/app/assets/images/hourglass-empty.svg
Index: pkgsrc/devel/ruby-redmine61/distinfo
diff -u pkgsrc/devel/ruby-redmine61/distinfo:1.2 pkgsrc/devel/ruby-redmine61/distinfo:1.3
--- pkgsrc/devel/ruby-redmine61/distinfo:1.2    Sun Mar 29 13:57:44 2026
+++ pkgsrc/devel/ruby-redmine61/distinfo        Tue Jun 16 14:34:56 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.2 2026/03/29 13:57:44 taca Exp $
+$NetBSD: distinfo,v 1.3 2026/06/16 14:34:56 taca Exp $
 
-BLAKE2s (redmine-6.1.2.tar.gz) = 1f695351d734c176682d58d7acbc95762ec44cc753e9ae2e364d958d99e82a95
-SHA512 (redmine-6.1.2.tar.gz) = ee76fe4e164e635f1bb2e0a5125fbe41b33ec03ef0512464d6f08f23d456b12814a70e9be3d6e080cbde625628f18d7b3e6a54c49f06331cd43e6c550777b728
-Size (redmine-6.1.2.tar.gz) = 4154595 bytes
-SHA1 (patch-Gemfile) = 2cb173d03ac9a219d76589686c2723fa2ec92e75
+BLAKE2s (redmine-6.1.3.tar.gz) = 0bcd52773c9eb65b6c1d3cad8771dbf0345d081bcd904ba4676f27ca1292ba99
+SHA512 (redmine-6.1.3.tar.gz) = 68957c091e26e73c95a4d3d6c5665c9c5a3105ff1619ba8af6aaf55a086c710468bd043228b2dfbfc71139a923cc510165cbcfb76a069d2c4b1a1e0ad5d8ff64
+Size (redmine-6.1.3.tar.gz) = 4157946 bytes
+SHA1 (patch-Gemfile) = 9abd5975a93bc8dfb30c436a770491755749b54b
 SHA1 (patch-config_additional__environment.rb.example) = 7ad913800c5f31fdd9b71aa92294bdbeea7b77fe
 SHA1 (patch-lib_tasks_initializers.rake) = d5ccb73cff6baedee9dfbe7563e25925f1ff9d85

Index: pkgsrc/devel/ruby-redmine61/patches/patch-Gemfile
diff -u pkgsrc/devel/ruby-redmine61/patches/patch-Gemfile:1.2 pkgsrc/devel/ruby-redmine61/patches/patch-Gemfile:1.3
--- pkgsrc/devel/ruby-redmine61/patches/patch-Gemfile:1.2       Sun Mar 29 13:57:44 2026
+++ pkgsrc/devel/ruby-redmine61/patches/patch-Gemfile   Tue Jun 16 14:34:56 2026
@@ -1,16 +1,16 @@
-$NetBSD: patch-Gemfile,v 1.2 2026/03/29 13:57:44 taca Exp $
+$NetBSD: patch-Gemfile,v 1.3 2026/06/16 14:34:56 taca Exp $
 
 * Relax dependency.
 * Do not load gem for developemt and test.
 
---- Gemfile.orig       2026-03-17 07:40:07.000000000 +0000
+--- Gemfile.orig       2026-06-15 19:25:05.000000000 +0000
 +++ Gemfile
 @@ -2,7 +2,7 @@ source 'https://rubygems.org'
  
  ruby '>= 3.2.0', '< 3.5.0'
  
--gem 'rails', '7.2.3'
-+gem 'rails', '~> 7.2.3'
+-gem 'rails', '7.2.3.1'
++gem 'rails', '~> 7.2.3.1'
  gem 'rouge', '~> 4.5'
  gem 'mini_mime', '~> 1.1.0'
  gem "actionpack-xml_parser"