CVS commit: pkgsrc/devel/ruby-redmine60

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Wed Sep  2 17:00:15 UTC 2026

Modified Files:
        pkgsrc/devel/ruby-redmine60: Makefile PLIST distinfo

Log Message:
develr/ruby-redmine60: update to 6.0.11

6.0.11 (2026-08-25)

Security fixes:

* Defect #44249: API requests can affect a user's session and circumvent
  security policies

* Defect #44308: Stored XSS in Redmine Textile Formatter via < notextile >
  Tag-Restoration ("Frankenstein tag")

* Defect #44309: Nested issue-relations endpoints bypass source issue
  visibility

* Defect #44310: Child project inherit_members updates bypass
  member-management authorization

* Patch #44371: Filter key parameter from logging


To generate a diff of this commit:
cvs rdiff -u -r1.17 -r1.18 pkgsrc/devel/ruby-redmine60/Makefile
cvs rdiff -u -r1.7 -r1.8 pkgsrc/devel/ruby-redmine60/PLIST
cvs rdiff -u -r1.10 -r1.11 pkgsrc/devel/ruby-redmine60/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/ruby-redmine60/Makefile
diff -u pkgsrc/devel/ruby-redmine60/Makefile:1.17 pkgsrc/devel/ruby-redmine60/Makefile:1.18
--- pkgsrc/devel/ruby-redmine60/Makefile:1.17   Tue Aug 11 15:54:04 2026
+++ pkgsrc/devel/ruby-redmine60/Makefile        Wed Sep  2 17:00:15 2026
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.17 2026/08/11 15:54:04 taca Exp $
+# $NetBSD: Makefile,v 1.18 2026/09/02 17:00:15 taca Exp $
 
 DISTNAME=      redmine-${RM_VERSION}
 PKGNAME=       ${RUBY_PKGPREFIX}-${DISTNAME:S/redmine/redmine${RM_VER}/}
-PKGREVISION=   1
 CATEGORIES=    devel
 MASTER_SITES=  https://www.redmine.org/releases/
 
@@ -11,7 +10,7 @@ HOMEPAGE=     https://www.redmine.org/
 COMMENT=       Flexible project management web application
 LICENSE=       gnu-gpl-v2 # and so on.
 
-RM_VERSION=    6.0.10
+RM_VERSION=    6.0.11
 
 NO_BUILD=      yes
 
@@ -22,7 +21,7 @@ RUBY_RAILS_ACCEPTED=  72
 
 PYTHON_VERSIONS_INCOMPATIBLE=  27
 
-OVERRIDE_GEMSPEC+=     mini-magick>=4.11.0 nokogiri>=1.18.3<1.20 zip>=2.4.0
+OVERRIDE_GEMSPEC+=     mini-magick>=4.11.0 nokogiri>=1.19.1<1.20 zip>=2.4.0
 
 #DEPENDS+=     ${RUBY_PKGPREFIX}-bundler>=1.12.0:../../misc/ruby-bundler
 DEPENDS+=      ${RUBY_RAILS_DEPENDS}
@@ -34,13 +33,13 @@ DEPENDS+=   ${RUBY_PKGPREFIX}-actionpack-x
 DEPENDS+=      ${RUBY_PKGPREFIX}-roadie-rails32_${RUBY_RAILS}>=3.2.0<3.3:../../mail/ruby-roadie-rails32
 DEPENDS+=      ${RUBY_PKGPREFIX}-marcel>=1.0.0:../../devel/ruby-marcel
 DEPENDS+=      ${RUBY_PKGPREFIX}-mail>=2.8.1<2.9:../../mail/ruby-mail
-DEPENDS+=      ${RUBY_PKGPREFIX}-nokogiri>=1.18.3<1.20:../../textproc/ruby-nokogiri
+DEPENDS+=      ${RUBY_PKGPREFIX}-nokogiri>=1.19.1<1.20:../../textproc/ruby-nokogiri
 #DEPENDS+=     ${RUBY_PKGPREFIX}-i18n>=1.14.1:../../devel/ruby-i18n
 DEPENDS+=      ${RUBY_PKGPREFIX}-rbpdf>=1.21.4<1.22:../../print/ruby-rbpdf
 DEPENDS+=      ${RUBY_PKGPREFIX}-addressable>=0:../../net/ruby-addressable
 DEPENDS+=      ${RUBY_PKGPREFIX}-zip24>=2.4.0<3:../../archivers/ruby-zip24
 DEPENDS+=      ${RUBY_PKGPREFIX}-propshaft11>=1.1.0<1.2:../../www/ruby-propshaft11
-DEPENDS+=      ${RUBY_PKGPREFIX}-rack>=3.1.2:../../www/ruby-rack
+DEPENDS+=      ${RUBY_PKGPREFIX}-rack>=3.1.3:../../www/ruby-rack
 #
 DEPENDS+=      ${RUBY_PKGPREFIX}-rotp>=6.2.0:../../security/ruby-rotp
 DEPENDS+=      ${RUBY_PKGPREFIX}-rqrcode>=1.2.0:../../textproc/ruby-rqrcode

Index: pkgsrc/devel/ruby-redmine60/PLIST
diff -u pkgsrc/devel/ruby-redmine60/PLIST:1.7 pkgsrc/devel/ruby-redmine60/PLIST:1.8
--- pkgsrc/devel/ruby-redmine60/PLIST:1.7       Sun Mar 29 13:59:31 2026
+++ pkgsrc/devel/ruby-redmine60/PLIST   Wed Sep  2 17:00:15 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.7 2026/03/29 13:59:31 taca Exp $
+@comment $NetBSD: PLIST,v 1.8 2026/09/02 17:00:15 taca Exp $
 bin/redmine60_generate_secret_token${RUBY_SUFFIX}.sh
 bin/redmine60_load_default_data${RUBY_SUFFIX}.sh
 bin/redmine60_migrate_db${RUBY_SUFFIX}.sh
@@ -2040,6 +2040,7 @@ ${RM_DIR}/test/unit/jobs/destroy_project
 ${RM_DIR}/test/unit/jobs/destroy_projects_job_test.rb
 ${RM_DIR}/test/unit/journal_observer_test.rb
 ${RM_DIR}/test/unit/journal_test.rb
+${RM_DIR}/test/unit/lib/parameter_filtering_test.rb
 ${RM_DIR}/test/unit/lib/redmine/access_control_test.rb
 ${RM_DIR}/test/unit/lib/redmine/acts/mentionable_test.rb
 ${RM_DIR}/test/unit/lib/redmine/acts/positioned_with_scope_test.rb

Index: pkgsrc/devel/ruby-redmine60/distinfo
diff -u pkgsrc/devel/ruby-redmine60/distinfo:1.10 pkgsrc/devel/ruby-redmine60/distinfo:1.11
--- pkgsrc/devel/ruby-redmine60/distinfo:1.10   Tue Jun 16 14:37:34 2026
+++ pkgsrc/devel/ruby-redmine60/distinfo        Wed Sep  2 17:00:15 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.10 2026/06/16 14:37:34 taca Exp $
+$NetBSD: distinfo,v 1.11 2026/09/02 17:00:15 taca Exp $
 
-BLAKE2s (redmine-6.0.10.tar.gz) = fd410a9b582438bb889ed7022df516013e5ca9a35c4a42421dcebcd85c2736f2
-SHA512 (redmine-6.0.10.tar.gz) = 312a989a9172808237e2201fa4a2445dd8d52edf3091075390bb92338611d033bf6d29ea5b8254c10eac2fc1db60451b35f1e14763b270cc8c8cd57c28ac5304
-Size (redmine-6.0.10.tar.gz) = 4074957 bytes
+BLAKE2s (redmine-6.0.11.tar.gz) = 97e400f26c3825fa2071623fe6a3c3f24f39fa007d62e799875b8a2bcac0502a
+SHA512 (redmine-6.0.11.tar.gz) = fdd080eb62ed87c806248bb084e8bddac2aaa416ad3a38965db2cf8d565a5c00238835d7bfe43caeeabc5a3b8e289d0271ce73e9a540c2744ba6b381f889dff3
+Size (redmine-6.0.11.tar.gz) = 4077822 bytes
 SHA1 (patch-Gemfile) = ab9478c45251dd4e6f725c5fd483af82b8d48014
 SHA1 (patch-config_additional__environment.rb.example) = 7ad913800c5f31fdd9b71aa92294bdbeea7b77fe
 SHA1 (patch-lib_redmine_scm_adapters_mercurial_redminehelper.py) = 87db1005896b2a962b8b93ec5b5b7d313ae6f691