CVS commit: pkgsrc/devel/ruby-redmine60

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Tue Jun 16 14:37:35 UTC 2026

Modified Files:
        pkgsrc/devel/ruby-redmine60: Makefile distinfo
        pkgsrc/devel/ruby-redmine60/patches: patch-Gemfile

Log Message:
devel/ruby-redmine60: update to 6.0.10

Redmine 6.0.10 (2026-06-15)

This release addresss multiple security vulnerabilities along with various
bug fixes and improvements.

Code cleanup/refactoring

* Defect #43985: Flaky IssuesSystemTest caused by `!page.has_css?`
* Defect #44010: Too much INFO log of asset paths when starting Rails

Documentation

* Defect #43906: Wiki help does not display localized content for locales
  with a region subtag
* Patch #43896: Remove obsolete db:migrate:upgrade_plugin_migrations step
  from doc/UPGRADING
* Patch #43930: Add blockquote formatting in CommonMark wiki help pages

Projects

* Defect #43910: Projects with the identifiers "autocomplete" or
  "bulk_destroy" cannot perform some operations

Rails support

* Patch #43909: Update Rails to 7.2.3.1

SCM

* Patch #43966: Tighten SVN repository URL validation

Security

* Patch #43986: Improve the `config.filter_parameters` setting
* Defect #43951: Bulk attachment download bypasses View files permission for
  project/version attachments
* Defect #44109: PreAuth leak name of private Projects
* Defect #44118: Any project member with add_issue_notes permission can add
  notes to private issues they cannot view, via the MailHandler reply
  dispatch
* Defect #44138: Stored XSS in Textile formatter due to restore_redmine_links
* Defect #44145: PostScript execution in Redmine::Thumbnail.generate via %%
  DSC-comment prefix
* Defect #44146: Time-entry API hidden custom-field leak

Translations

* Patch #44005: Fix French translation of label_auto_watch_on_issue_created

UI

* Defect #44170: Toggling between board and list in projects query do not
  work properly


To generate a diff of this commit:
cvs rdiff -u -r1.15 -r1.16 pkgsrc/devel/ruby-redmine60/Makefile
cvs rdiff -u -r1.9 -r1.10 pkgsrc/devel/ruby-redmine60/distinfo
cvs rdiff -u -r1.7 -r1.8 pkgsrc/devel/ruby-redmine60/patches/patch-Gemfile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/ruby-redmine60/Makefile
diff -u pkgsrc/devel/ruby-redmine60/Makefile:1.15 pkgsrc/devel/ruby-redmine60/Makefile:1.16
--- pkgsrc/devel/ruby-redmine60/Makefile:1.15   Wed Apr  8 14:54:20 2026
+++ pkgsrc/devel/ruby-redmine60/Makefile        Tue Jun 16 14:37:34 2026
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.15 2026/04/08 14:54:20 taca Exp $
+# $NetBSD: Makefile,v 1.16 2026/06/16 14:37:34 taca Exp $
 
 DISTNAME=      redmine-${RM_VERSION}
 PKGNAME=       ${RUBY_PKGPREFIX}-${DISTNAME:S/redmine/redmine${RM_VER}/}
@@ -10,7 +10,7 @@ HOMEPAGE=     https://www.redmine.org/
 COMMENT=       Flexible project management web application
 LICENSE=       gnu-gpl-v2 # and so on.
 
-RM_VERSION=    6.0.9
+RM_VERSION=    6.0.10
 
 NO_BUILD=      yes
 

Index: pkgsrc/devel/ruby-redmine60/distinfo
diff -u pkgsrc/devel/ruby-redmine60/distinfo:1.9 pkgsrc/devel/ruby-redmine60/distinfo:1.10
--- pkgsrc/devel/ruby-redmine60/distinfo:1.9    Sun Mar 29 13:59:31 2026
+++ pkgsrc/devel/ruby-redmine60/distinfo        Tue Jun 16 14:37:34 2026
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.9 2026/03/29 13:59:31 taca Exp $
+$NetBSD: distinfo,v 1.10 2026/06/16 14:37:34 taca Exp $
 
-BLAKE2s (redmine-6.0.9.tar.gz) = 3dd4faac2b149ee412761345888bf22105ef30e7b17904b6d3dca3396a0d5bf5
-SHA512 (redmine-6.0.9.tar.gz) = 00ed51a94e3c5b0d2fe118c42f83e00dd06d4a72f0e450a7cc8ef1e68fe628afcbcd0ea82b9108469cb5ef99b35e18bb12bfa5d183dad133f283ce42fe8cf19f
-Size (redmine-6.0.9.tar.gz) = 4071535 bytes
-SHA1 (patch-Gemfile) = 732fd64023ffe871b0fbe2a4f2e9b12fb11e3db0
+BLAKE2s (redmine-6.0.10.tar.gz) = fd410a9b582438bb889ed7022df516013e5ca9a35c4a42421dcebcd85c2736f2
+SHA512 (redmine-6.0.10.tar.gz) = 312a989a9172808237e2201fa4a2445dd8d52edf3091075390bb92338611d033bf6d29ea5b8254c10eac2fc1db60451b35f1e14763b270cc8c8cd57c28ac5304
+Size (redmine-6.0.10.tar.gz) = 4074957 bytes
+SHA1 (patch-Gemfile) = ab9478c45251dd4e6f725c5fd483af82b8d48014
 SHA1 (patch-config_additional__environment.rb.example) = 7ad913800c5f31fdd9b71aa92294bdbeea7b77fe
 SHA1 (patch-lib_redmine_scm_adapters_mercurial_redminehelper.py) = 87db1005896b2a962b8b93ec5b5b7d313ae6f691
 SHA1 (patch-lib_tasks_initializers.rake) = d5ccb73cff6baedee9dfbe7563e25925f1ff9d85

Index: pkgsrc/devel/ruby-redmine60/patches/patch-Gemfile
diff -u pkgsrc/devel/ruby-redmine60/patches/patch-Gemfile:1.7 pkgsrc/devel/ruby-redmine60/patches/patch-Gemfile:1.8
--- pkgsrc/devel/ruby-redmine60/patches/patch-Gemfile:1.7       Sun Mar 29 13:59:32 2026
+++ pkgsrc/devel/ruby-redmine60/patches/patch-Gemfile   Tue Jun 16 14:37:34 2026
@@ -1,19 +1,10 @@
-$NetBSD: patch-Gemfile,v 1.7 2026/03/29 13:59:32 taca Exp $
+$NetBSD: patch-Gemfile,v 1.8 2026/06/16 14:37:34 taca Exp $
 
 * Relax dependency.
 * Do not load gem for developemt and test.
 
---- Gemfile.orig       2026-03-17 07:40:04.000000000 +0000
+--- Gemfile.orig       2026-06-15 19:25:03.000000000 +0000
 +++ Gemfile
-@@ -2,7 +2,7 @@ source 'https://rubygems.org'
- 
- ruby '>= 3.1.0', '< 3.4.0'
- 
--gem 'rails', '7.2.3'
-+gem 'rails', '~>7.2.3'
- gem 'rouge', '~> 4.5'
- gem 'mini_mime', '~> 1.1.0'
- gem "actionpack-xml_parser"
 @@ -13,15 +13,15 @@ gem 'nokogiri', Gem.ruby_version >= Gem:
  gem 'i18n', '~> 1.14.1'
  gem 'rbpdf', '~> 1.21.4'