CVS commit: [pkgsrc-2026Q2] pkgsrc/devel/ruby-concurrent-ruby

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Mon Jul 13 13:31:41 UTC 2026

Modified Files:
        pkgsrc/devel/ruby-concurrent-ruby [pkgsrc-2026Q2]: Makefile distinfo

Log Message:
Pullup ticket #7157 - requested by taca
devel/ruby-concurrent-ruby: security fix

Revisions pulled up:
- devel/ruby-concurrent-ruby/Makefile                           1.14
- devel/ruby-concurrent-ruby/distinfo                           1.16

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sun Jun 28 14:34:15 UTC 2026

   Modified Files:
        pkgsrc/devel/ruby-concurrent-ruby: Makefile distinfo

   Log Message:
   devel/ruby-concurrent-ruby: update to 1.3.7

   1.3.7 (2026-06-16)

   There are 3 security fixes in this release, so updating is recommended.
   These security vulnerabilities are not very likely to be hit in practice and
   have a corresponding Low severity score.

   What's Changed

   * CVE-2026-54904 AtomicReference#update livelocks when the stored value is
     Float::NAN. Fix by @joshuay03 and @eregon
   * CVE-2026-54905 ReentrantReadWriteLock read-count overflow grants a write
     lock without exclusivity. Fix by @joshuay03
   * CVE-2026-54906 ReadWriteLock allows wrong-thread write release and stray
     read-release counter corruption. Fix by @joshuay03
   * concurrent-ruby-ext: fix build on Darwin 32-bit by @barracuda156 in #1064
   * Add SECURITY.md by @eregon in #1104
   * Add Ruby 4.0 in CI by @eregon in #1106

   New Contributors

   * @barracuda156 made their first contribution in #1064


To generate a diff of this commit:
cvs rdiff -u -r1.13 -r1.13.4.1 pkgsrc/devel/ruby-concurrent-ruby/Makefile
cvs rdiff -u -r1.15 -r1.15.4.1 pkgsrc/devel/ruby-concurrent-ruby/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/ruby-concurrent-ruby/Makefile
diff -u pkgsrc/devel/ruby-concurrent-ruby/Makefile:1.13 pkgsrc/devel/ruby-concurrent-ruby/Makefile:1.13.4.1
--- pkgsrc/devel/ruby-concurrent-ruby/Makefile:1.13     Tue Jan 13 15:03:15 2026
+++ pkgsrc/devel/ruby-concurrent-ruby/Makefile  Mon Jul 13 13:31:41 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.13 2026/01/13 15:03:15 taca Exp $
+# $NetBSD: Makefile,v 1.13.4.1 2026/07/13 13:31:41 bsiegert Exp $
 
-DISTNAME=      concurrent-ruby-1.3.6
+DISTNAME=      concurrent-ruby-1.3.7
 CATEGORIES=    devel
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/devel/ruby-concurrent-ruby/distinfo
diff -u pkgsrc/devel/ruby-concurrent-ruby/distinfo:1.15 pkgsrc/devel/ruby-concurrent-ruby/distinfo:1.15.4.1
--- pkgsrc/devel/ruby-concurrent-ruby/distinfo:1.15     Tue Jan 13 15:03:15 2026
+++ pkgsrc/devel/ruby-concurrent-ruby/distinfo  Mon Jul 13 13:31:41 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.15 2026/01/13 15:03:15 taca Exp $
+$NetBSD: distinfo,v 1.15.4.1 2026/07/13 13:31:41 bsiegert Exp $
 
-BLAKE2s (concurrent-ruby-1.3.6.gem) = 4156d779a11767c8ad005bb20c0ebf4b7c4e27f01b68606f6a5c343f91ff5b25
-SHA512 (concurrent-ruby-1.3.6.gem) = e7c46e6c4d0b4a48957550a1fc7ddf6947b356005d32b68e9b3bdd8dae12dcd49c6c19a8acc382199037268e64279b8b3b9a80fc40be52e7fc106759bf3bd4b8
-Size (concurrent-ruby-1.3.6.gem) = 350720 bytes
+BLAKE2s (concurrent-ruby-1.3.7.gem) = a1cb32457c38f5568128b7d297e5555c8c8fe038e732b52ca12a4586f4d8aaf7
+SHA512 (concurrent-ruby-1.3.7.gem) = 52995ff0b9559b2715e08d77a148fed58b66a93612e55cf99c4cf9409770954c1bbed8dba8992df99a42f4fa31418e2692b893530b869ff30ff6e517b0882da0
+Size (concurrent-ruby-1.3.7.gem) = 350208 bytes