CVS commit: pkgsrc/security/ruby-oauth

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sun Jun 28 15:12:19 UTC 2026

Modified Files:
        pkgsrc/security/ruby-oauth: Makefile distinfo

Log Message:
security/ruby-oauth: update to 1.1.7

1.1.7 - 2026-06-15

* TAG: v1.1.7
* COVERAGE: 88.32% -- 839/950 lines in 33 files
* BRANCH COVERAGE: 58.67% -- 159/271 branches in 33 files
* 40.38% documented

Changed

* Retemplated repository metadata, workflows, modular gemfiles,
  documentation scaffolding, version_gem >= 1.1.12, and templating-isolated
  local workspace Gemfile wiring with the current kettle-jem template.
* Raised the auth-sanitizer runtime dependency floor to >= 0.2.1, so OAuth
  consumers get hash and nested-attribute inspect redaction fixes plus
  downstream RBS duplicate-declaration fixes.
* Raised the oauth-tty runtime dependency floor to >= 1.0.9.
* Raised the oauth-tty runtime dependency floor to >= 1.0.10, removing the
  transitive external cgi runtime dependency for Ruby 2.4 consumers.

Fixed

* Restored docs/CNAME so the generated documentation site keeps its custom
  domain.
* Pinned older Ruby appraisals to Rack 2.2 so rack-test remains compatible
  with the Ruby 2.4, Ruby 2.5, and JRuby 9.2 CI jobs.
* Derived an RSA public key from PEM private-key strings before signature
  verification, matching JRuby OpenSSL behavior while preserving RSA-SHA1
  verification semantics.
* Removed the external cgi runtime dependency because the only cgi gem
  releases installable on Ruby 2.4 call String#delete_prefix, which is
  unavailable on Ruby 2.4.
* Removed the external erb dependency from the Ruby 2.4 appraisal because
  Ruby 2.4 already provides ERB and the released erb gem depends on external
  cgi.
* Added a private-key-backed RSA-SHA1 verification fallback for JRuby
  OpenSSL versions that raise OpenSSL::PKey::PKeyError during public-key
  verification.


To generate a diff of this commit:
cvs rdiff -u -r1.26 -r1.27 pkgsrc/security/ruby-oauth/Makefile
cvs rdiff -u -r1.23 -r1.24 pkgsrc/security/ruby-oauth/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/ruby-oauth/Makefile
diff -u pkgsrc/security/ruby-oauth/Makefile:1.26 pkgsrc/security/ruby-oauth/Makefile:1.27
--- pkgsrc/security/ruby-oauth/Makefile:1.26    Mon Jun  8 13:21:49 2026
+++ pkgsrc/security/ruby-oauth/Makefile Sun Jun 28 15:12:19 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.26 2026/06/08 13:21:49 taca Exp $
+# $NetBSD: Makefile,v 1.27 2026/06/28 15:12:19 taca Exp $
 
-DISTNAME=      oauth-1.1.6
+DISTNAME=      oauth-1.1.7
 CATEGORIES=    security
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
@@ -8,9 +8,9 @@ HOMEPAGE=       https://github.com/oauth-xx/oa
 COMMENT=       OAuth Core Ruby implementation
 LICENSE=       mit
 
-DEPENDS+=      ${RUBY_PKGPREFIX}-oauth-tty>=1.0.8<2:../../security/ruby-oauth-tty
+DEPENDS+=      ${RUBY_PKGPREFIX}-oauth-tty>=1.0.10<2:../../security/ruby-oauth-tty
 DEPENDS+=      ${RUBY_PKGPREFIX}-snaky_hash>=2.0.5<3:../../security/ruby-snaky_hash
-DEPENDS+=      ${RUBY_PKGPREFIX}-version_gem>=1.1.11<2:../../devel/ruby-version_gem
+DEPENDS+=      ${RUBY_PKGPREFIX}-version_gem>=1.1.12<2:../../devel/ruby-version_gem
 
 USE_LANGUAGES= # none
 

Index: pkgsrc/security/ruby-oauth/distinfo
diff -u pkgsrc/security/ruby-oauth/distinfo:1.23 pkgsrc/security/ruby-oauth/distinfo:1.24
--- pkgsrc/security/ruby-oauth/distinfo:1.23    Mon Jun  8 13:21:49 2026
+++ pkgsrc/security/ruby-oauth/distinfo Sun Jun 28 15:12:19 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.23 2026/06/08 13:21:49 taca Exp $
+$NetBSD: distinfo,v 1.24 2026/06/28 15:12:19 taca Exp $
 
-BLAKE2s (oauth-1.1.6.gem) = b749435848dc9354bd5a6f84af36e757105d205bd012776504bc8a4b08957e74
-SHA512 (oauth-1.1.6.gem) = 35a2bc48893955b245cb8251672283fa6e3c843d34067a9c8e904316901eed8ccd4d786c507da40ac3d5b8087d0894caab0072fa4d9ec8b0bdb5ee362481e371
-Size (oauth-1.1.6.gem) = 65536 bytes
+BLAKE2s (oauth-1.1.7.gem) = 248253248af099bebb7a9f56fd77bb922b1e4162d35d83e5037d3efe08cf6c97
+SHA512 (oauth-1.1.7.gem) = 68e700fc68a5693a70414f26af22adfc3af9aa8f218ee681994c8d224cb18084b1e5e3450104abf8c0f797d603081f59a47ee6362d58045ed30439d0cc0bdfdc
+Size (oauth-1.1.7.gem) = 66560 bytes