CVS commit: pkgsrc/www/ruby-crass

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sun Jun 28 15:21:40 UTC 2026

Modified Files:
        pkgsrc/www/ruby-crass: Makefile PLIST distinfo

Log Message:
www/ruby-crass: update to 1.0.7

1.0.7 (2026-06-25)

Security

* High: Fixed a denial of service vulnerability in which a large numeric
  exponent could consume disproportionate CPU and memory before the value
  was clamped.  Exponents are now bounded before 10**exponent is computed.
  (GHSA-6wmf-3r64-vcwv)

* Moderate: Fixed a scenario in which deeply nested simple blocks or
  functions could exhaust the Ruby stack and raise SystemStackError, or
  could result in excessive memory usage.  Parser nesting is now limited to
  a configurable maximum depth via a new option (:maximum_depth, with a
  conservative default of 25).  Constructs nested more deeply are discarded
  as an :error node with the value "maximum-depth-exceeded".
  (GHSA-6jxj-px6v-747w)

* Moderate: Fixed a scenario in which a long run of adjacent comments could
  exhaust the Ruby stack and raise SystemStackError.  Discarded comments are
  now skipped iteratively rather than recursively.  (GHSA-wwpr-jff3-395c)

* Moderate: Fixed a denial of service vulnerability in which inputs
  containing many non-ASCII characters could cause excessive CPU usage due
  to inefficient handling of multi-byte characters during tokenization.
  (GHSA-8vfg-2r28-hvhj)


To generate a diff of this commit:
cvs rdiff -u -r1.3 -r1.4 pkgsrc/www/ruby-crass/Makefile
cvs rdiff -u -r1.2 -r1.3 pkgsrc/www/ruby-crass/PLIST
cvs rdiff -u -r1.5 -r1.6 pkgsrc/www/ruby-crass/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/ruby-crass/Makefile
diff -u pkgsrc/www/ruby-crass/Makefile:1.3 pkgsrc/www/ruby-crass/Makefile:1.4
--- pkgsrc/www/ruby-crass/Makefile:1.3  Sun May 17 15:40:48 2020
+++ pkgsrc/www/ruby-crass/Makefile      Sun Jun 28 15:21:40 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.3 2020/05/17 15:40:48 taca Exp $
+# $NetBSD: Makefile,v 1.4 2026/06/28 15:21:40 taca Exp $
 
-DISTNAME=      crass-1.0.6
+DISTNAME=      crass-1.0.7
 CATEGORIES=    www
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/www/ruby-crass/PLIST
diff -u pkgsrc/www/ruby-crass/PLIST:1.2 pkgsrc/www/ruby-crass/PLIST:1.3
--- pkgsrc/www/ruby-crass/PLIST:1.2     Sun May 17 15:40:48 2020
+++ pkgsrc/www/ruby-crass/PLIST Sun Jun 28 15:21:40 2026
@@ -1,7 +1,7 @@
-@comment $NetBSD: PLIST,v 1.2 2020/05/17 15:40:48 taca Exp $
+@comment $NetBSD: PLIST,v 1.3 2026/06/28 15:21:40 taca Exp $
 ${GEM_HOME}/cache/${GEM_NAME}.gem
+${GEM_LIBDIR}/.github/workflows/tests.yml
 ${GEM_LIBDIR}/.gitignore
-${GEM_LIBDIR}/.travis.yml
 ${GEM_LIBDIR}/.yardopts
 ${GEM_LIBDIR}/Gemfile
 ${GEM_LIBDIR}/HISTORY.md

Index: pkgsrc/www/ruby-crass/distinfo
diff -u pkgsrc/www/ruby-crass/distinfo:1.5 pkgsrc/www/ruby-crass/distinfo:1.6
--- pkgsrc/www/ruby-crass/distinfo:1.5  Tue Oct 26 11:30:55 2021
+++ pkgsrc/www/ruby-crass/distinfo      Sun Jun 28 15:21:40 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.5 2021/10/26 11:30:55 nia Exp $
+$NetBSD: distinfo,v 1.6 2026/06/28 15:21:40 taca Exp $
 
-BLAKE2s (crass-1.0.6.gem) = e83462f26132aae01da9a0b214c8d817b02cfdbae185189773198b2af9a483f8
-SHA512 (crass-1.0.6.gem) = a05a63bc6718ef578dd5297001ecd3075c5fc2d5d253eeb28f0a88b1e605ce628da98733aced2263c7c549dad8cb36331cebe06b6ea9e426114eb80a2af484ec
-Size (crass-1.0.6.gem) = 18432 bytes
+BLAKE2s (crass-1.0.7.gem) = 8b36526797e5c0bf7aa3e007d80b425b18f067565b24821a1f2a3cf3b554555b
+SHA512 (crass-1.0.7.gem) = 4c3ee2ea174215154ff8f123ed72d9d19827f0388ea796929030a1e7059d052a9280b84a8d9eca4cecbd08b086562bedd702c7552b77faca2470ef0f886aac29
+Size (crass-1.0.7.gem) = 20992 bytes