CVS commit: pkgsrc/www/ruby-crass

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sat Nov  7 15:44:33 UTC 2026

Modified Files:
        pkgsrc/www/ruby-crass: Makefile PLIST distinfo

Log Message:
www/ruby-crass: update to 1.0.8

1.0.8 (2026-10-21)

Security

* Moderate: Fixed a tokenizer bug in which a ) following an escaped
  backslash (\\) inside a bad URL didn't terminate the bad URL token,
  causing Crass to consume more input than a spec-compliant browser would.
  CSS sanitizers built on Crass could be tricked into passing through
  declarations, rules, or at-rules that a browser would then apply.
  (GHSA-pq4g-8rxf-4g29)


To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.5 pkgsrc/www/ruby-crass/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/www/ruby-crass/PLIST
cvs rdiff -u -r1.6 -r1.7 pkgsrc/www/ruby-crass/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/ruby-crass/Makefile
diff -u pkgsrc/www/ruby-crass/Makefile:1.4 pkgsrc/www/ruby-crass/Makefile:1.5
--- pkgsrc/www/ruby-crass/Makefile:1.4  Sun Jun 28 15:21:40 2026
+++ pkgsrc/www/ruby-crass/Makefile      Sat Nov  7 15:44:33 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.4 2026/06/28 15:21:40 taca Exp $
+# $NetBSD: Makefile,v 1.5 2026/11/07 15:44:33 taca Exp $
 
-DISTNAME=      crass-1.0.7
+DISTNAME=      crass-1.0.8
 CATEGORIES=    www
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/www/ruby-crass/PLIST
diff -u pkgsrc/www/ruby-crass/PLIST:1.3 pkgsrc/www/ruby-crass/PLIST:1.4
--- pkgsrc/www/ruby-crass/PLIST:1.3     Sun Jun 28 15:21:40 2026
+++ pkgsrc/www/ruby-crass/PLIST Sat Nov  7 15:44:33 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.3 2026/06/28 15:21:40 taca Exp $
+@comment $NetBSD: PLIST,v 1.4 2026/11/07 15:44:33 taca Exp $
 ${GEM_HOME}/cache/${GEM_NAME}.gem
 ${GEM_LIBDIR}/.github/workflows/tests.yml
 ${GEM_LIBDIR}/.gitignore
@@ -8,6 +8,7 @@ ${GEM_LIBDIR}/HISTORY.md
 ${GEM_LIBDIR}/LICENSE
 ${GEM_LIBDIR}/README.md
 ${GEM_LIBDIR}/Rakefile
+${GEM_LIBDIR}/SECURITY.md
 ${GEM_LIBDIR}/crass.gemspec
 ${GEM_LIBDIR}/lib/crass.rb
 ${GEM_LIBDIR}/lib/crass/parser.rb

Index: pkgsrc/www/ruby-crass/distinfo
diff -u pkgsrc/www/ruby-crass/distinfo:1.6 pkgsrc/www/ruby-crass/distinfo:1.7
--- pkgsrc/www/ruby-crass/distinfo:1.6  Sun Jun 28 15:21:40 2026
+++ pkgsrc/www/ruby-crass/distinfo      Sat Nov  7 15:44:33 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.6 2026/06/28 15:21:40 taca Exp $
+$NetBSD: distinfo,v 1.7 2026/11/07 15:44:33 taca Exp $
 
-BLAKE2s (crass-1.0.7.gem) = 8b36526797e5c0bf7aa3e007d80b425b18f067565b24821a1f2a3cf3b554555b
-SHA512 (crass-1.0.7.gem) = 4c3ee2ea174215154ff8f123ed72d9d19827f0388ea796929030a1e7059d052a9280b84a8d9eca4cecbd08b086562bedd702c7552b77faca2470ef0f886aac29
-Size (crass-1.0.7.gem) = 20992 bytes
+BLAKE2s (crass-1.0.8.gem) = 5dbff7d90736f5ebb46fdbb1f636c6bacc5267ec334c906900aa6a517783c529
+SHA512 (crass-1.0.8.gem) = 61b0a21da1d4621cea6388838be1491273ac8b0d76823a5b34b78f10814f11c009d8a1d545d4dae5905cad2ac2c23197abeda3df0b3423dc440ed0798917d33e
+Size (crass-1.0.8.gem) = 21504 bytes