CVS commit: [pkgsrc-2026Q3] pkgsrc/www/ruby-css-parser

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Wed Nov 11 10:44:23 UTC 2026

Modified Files:
        pkgsrc/www/ruby-css-parser [pkgsrc-2026Q3]: Makefile distinfo

Log Message:
Pullup ticket #7366 - requested by taca
www/ruby-css-parser: Security fix

Revisions pulled up:
- www/ruby-css-parser/Makefile                                  1.40-1.41
- www/ruby-css-parser/distinfo                                  1.42-1.43

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Sep 24 05:16:16 UTC 2026

   Modified Files:
        pkgsrc/www/ruby-css-parser: Makefile distinfo

   Log Message:
   www/ruby-css-parser: update to 3.2.0

   3.2.0 (2026-09-20)

   * Fix ReDoS hang when expanding dimension shorthands containing unclosed CSS
     functions (e.g. margin: x() calc(aaaa...)): RE_FUNCTIONS now uses
     possessive quantifiers plus a 10ms regexp timeout with fallback to plain
     whitespace splitting

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Nov  7 15:47:48 UTC 2026

   Modified Files:
        pkgsrc/www/ruby-css-parser: Makefile distinfo

   Log Message:
   www/ruby-css-parser: update to 3.4.0

   3.3.0 (2026-10-07)

   * Fix Arbitrary local-file read via attacker-controlled @import

   3.4.0 (2026-11-01)

   * Speed up RuleSet::Declarations#to_s ~20x: its clean-up regexp matched the
     empty string at every character ([\n\r\f\t]*), making gsub! replace at
     every position; the unreachable \s+$ branch is dropped, output unchanged

   * Allocate less in RuleSet: skip the downcased copy of already normalized
     property names, and build dimension shorthands without enumerators

   * Allocate less when expanding and creating dimension shorthands, and skip
     the colour regexp on values without a comma

   * Return already sanitized media types as-is from sanitize_media_query, and
     allocate less when splitting selectors and counting ids

   * Allocate less than half the objects when parsing and serializing
     declarations: values are copied only when they need cleaning, and hashes
     are iterated without building [key, value] pairs


To generate a diff of this commit:
cvs rdiff -u -r1.39 -r1.39.2.1 pkgsrc/www/ruby-css-parser/Makefile
cvs rdiff -u -r1.41 -r1.41.2.1 pkgsrc/www/ruby-css-parser/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/ruby-css-parser/Makefile
diff -u pkgsrc/www/ruby-css-parser/Makefile:1.39 pkgsrc/www/ruby-css-parser/Makefile:1.39.2.1
--- pkgsrc/www/ruby-css-parser/Makefile:1.39    Wed Sep  9 14:15:53 2026
+++ pkgsrc/www/ruby-css-parser/Makefile Wed Nov 11 10:44:23 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.39 2026/09/09 14:15:53 taca Exp $
+# $NetBSD: Makefile,v 1.39.2.1 2026/11/11 10:44:23 maya Exp $
 
-DISTNAME=      css_parser-3.1.0
+DISTNAME=      css_parser-3.4.0
 PKGNAME=       ${RUBY_PKGPREFIX}-${DISTNAME:S/_/-/g}
 CATEGORIES=    www
 

Index: pkgsrc/www/ruby-css-parser/distinfo
diff -u pkgsrc/www/ruby-css-parser/distinfo:1.41 pkgsrc/www/ruby-css-parser/distinfo:1.41.2.1
--- pkgsrc/www/ruby-css-parser/distinfo:1.41    Wed Sep  9 14:15:53 2026
+++ pkgsrc/www/ruby-css-parser/distinfo Wed Nov 11 10:44:23 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.41 2026/09/09 14:15:53 taca Exp $
+$NetBSD: distinfo,v 1.41.2.1 2026/11/11 10:44:23 maya Exp $
 
-BLAKE2s (css_parser-3.1.0.gem) = eb20a1a53640dc9624b3c3c03ebeeecddb73bc45ed39a03cd59cde4bd70d7b42
-SHA512 (css_parser-3.1.0.gem) = acdd267e23c7b8fe26bd8bc7348693a849514dfd7710aa21399335e25c18ce434897fe4fe5feea6d507f742a1b19aabccbcdebd0c515648a26a7051d6867bdbb
-Size (css_parser-3.1.0.gem) = 24064 bytes
+BLAKE2s (css_parser-3.4.0.gem) = e6a08292cab35ef386618fc20c97a6968996d1bd4186c0d2ff672f91f4f370a0
+SHA512 (css_parser-3.4.0.gem) = cf90b6ff0cf37ac72aecc934cf236de76fae1d00873033d7937543adc22379b6ea774a8dbfbd7f63cca9f7f6ef4fdf09e63d29207ffd37c6b01128621f0455f5
+Size (css_parser-3.4.0.gem) = 25600 bytes