Skip to content

Commit 23e0345

Browse files
jhawthornjhawthorn
committed
Version 7.0.4.1
1 parent d7aba06 commit 23e0345

File tree

33 files changed

+235
-117
lines changed

33 files changed

+235
-117
lines changed

‎Gemfile.lock

Lines changed: 77 additions & 72 deletions
Original file line numberDiff line numberDiff line change
@@ -24,88 +24,88 @@ GIT
2424
PATH
2525
remote: .
2626
specs:
27-
actioncable (7.0.4)
28-
actionpack (= 7.0.4)
29-
activesupport (= 7.0.4)
27+
actioncable (7.0.4.1)
28+
actionpack (= 7.0.4.1)
29+
activesupport (= 7.0.4.1)
3030
nio4r (~> 2.0)
3131
websocket-driver (>= 0.6.1)
32-
actionmailbox (7.0.4)
33-
actionpack (= 7.0.4)
34-
activejob (= 7.0.4)
35-
activerecord (= 7.0.4)
36-
activestorage (= 7.0.4)
37-
activesupport (= 7.0.4)
32+
actionmailbox (7.0.4.1)
33+
actionpack (= 7.0.4.1)
34+
activejob (= 7.0.4.1)
35+
activerecord (= 7.0.4.1)
36+
activestorage (= 7.0.4.1)
37+
activesupport (= 7.0.4.1)
3838
mail (>= 2.7.1)
3939
net-imap
4040
net-pop
4141
net-smtp
42-
actionmailer (7.0.4)
43-
actionpack (= 7.0.4)
44-
actionview (= 7.0.4)
45-
activejob (= 7.0.4)
46-
activesupport (= 7.0.4)
42+
actionmailer (7.0.4.1)
43+
actionpack (= 7.0.4.1)
44+
actionview (= 7.0.4.1)
45+
activejob (= 7.0.4.1)
46+
activesupport (= 7.0.4.1)
4747
mail (~> 2.5, >= 2.5.4)
4848
net-imap
4949
net-pop
5050
net-smtp
5151
rails-dom-testing (~> 2.0)
52-
actionpack (7.0.4)
53-
actionview (= 7.0.4)
54-
activesupport (= 7.0.4)
52+
actionpack (7.0.4.1)
53+
actionview (= 7.0.4.1)
54+
activesupport (= 7.0.4.1)
5555
rack (~> 2.0, >= 2.2.0)
5656
rack-test (>= 0.6.3)
5757
rails-dom-testing (~> 2.0)
5858
rails-html-sanitizer (~> 1.0, >= 1.2.0)
59-
actiontext (7.0.4)
60-
actionpack (= 7.0.4)
61-
activerecord (= 7.0.4)
62-
activestorage (= 7.0.4)
63-
activesupport (= 7.0.4)
59+
actiontext (7.0.4.1)
60+
actionpack (= 7.0.4.1)
61+
activerecord (= 7.0.4.1)
62+
activestorage (= 7.0.4.1)
63+
activesupport (= 7.0.4.1)
6464
globalid (>= 0.6.0)
6565
nokogiri (>= 1.8.5)
66-
actionview (7.0.4)
67-
activesupport (= 7.0.4)
66+
actionview (7.0.4.1)
67+
activesupport (= 7.0.4.1)
6868
builder (~> 3.1)
6969
erubi (~> 1.4)
7070
rails-dom-testing (~> 2.0)
7171
rails-html-sanitizer (~> 1.1, >= 1.2.0)
72-
activejob (7.0.4)
73-
activesupport (= 7.0.4)
72+
activejob (7.0.4.1)
73+
activesupport (= 7.0.4.1)
7474
globalid (>= 0.3.6)
75-
activemodel (7.0.4)
76-
activesupport (= 7.0.4)
77-
activerecord (7.0.4)
78-
activemodel (= 7.0.4)
79-
activesupport (= 7.0.4)
80-
activestorage (7.0.4)
81-
actionpack (= 7.0.4)
82-
activejob (= 7.0.4)
83-
activerecord (= 7.0.4)
84-
activesupport (= 7.0.4)
75+
activemodel (7.0.4.1)
76+
activesupport (= 7.0.4.1)
77+
activerecord (7.0.4.1)
78+
activemodel (= 7.0.4.1)
79+
activesupport (= 7.0.4.1)
80+
activestorage (7.0.4.1)
81+
actionpack (= 7.0.4.1)
82+
activejob (= 7.0.4.1)
83+
activerecord (= 7.0.4.1)
84+
activesupport (= 7.0.4.1)
8585
marcel (~> 1.0)
8686
mini_mime (>= 1.1.0)
87-
activesupport (7.0.4)
87+
activesupport (7.0.4.1)
8888
concurrent-ruby (~> 1.0, >= 1.0.2)
8989
i18n (>= 1.6, < 2)
9090
minitest (>= 5.1)
9191
tzinfo (~> 2.0)
92-
rails (7.0.4)
93-
actioncable (= 7.0.4)
94-
actionmailbox (= 7.0.4)
95-
actionmailer (= 7.0.4)
96-
actionpack (= 7.0.4)
97-
actiontext (= 7.0.4)
98-
actionview (= 7.0.4)
99-
activejob (= 7.0.4)
100-
activemodel (= 7.0.4)
101-
activerecord (= 7.0.4)
102-
activestorage (= 7.0.4)
103-
activesupport (= 7.0.4)
92+
rails (7.0.4.1)
93+
actioncable (= 7.0.4.1)
94+
actionmailbox (= 7.0.4.1)
95+
actionmailer (= 7.0.4.1)
96+
actionpack (= 7.0.4.1)
97+
actiontext (= 7.0.4.1)
98+
actionview (= 7.0.4.1)
99+
activejob (= 7.0.4.1)
100+
activemodel (= 7.0.4.1)
101+
activerecord (= 7.0.4.1)
102+
activestorage (= 7.0.4.1)
103+
activesupport (= 7.0.4.1)
104104
bundler (>= 1.15.0)
105-
railties (= 7.0.4)
106-
railties (7.0.4)
107-
actionpack (= 7.0.4)
108-
activesupport (= 7.0.4)
105+
railties (= 7.0.4.1)
106+
railties (7.0.4.1)
107+
actionpack (= 7.0.4.1)
108+
activesupport (= 7.0.4.1)
109109
method_source
110110
rake (>= 12.2)
111111
thor (~> 1.0)
@@ -197,6 +197,7 @@ GEM
197197
daemons (1.4.1)
198198
dalli (3.2.0)
199199
dante (0.2.0)
200+
date (3.3.3)
200201
debug (1.4.0)
201202
irb (>= 1.3.6)
202203
reline (>= 0.2.7)
@@ -206,7 +207,6 @@ GEM
206207
delayed_job_active_record (4.1.6)
207208
activerecord (>= 3.0, < 6.2)
208209
delayed_job (>= 3.0, < 5)
209-
digest (3.1.0)
210210
digest-crc (0.6.4)
211211
rake (>= 12.0.0, < 14.0.0)
212212
em-http-request (1.1.7)
@@ -217,7 +217,7 @@ GEM
217217
http_parser.rb (>= 0.6.0)
218218
em-socksify (0.3.2)
219219
eventmachine (>= 1.0.0.beta.4)
220-
erubi (1.11.0)
220+
erubi (1.12.0)
221221
et-orbi (1.2.6)
222222
tzinfo
223223
event_emitter (0.2.6)
@@ -326,11 +326,14 @@ GEM
326326
listen (3.7.0)
327327
rb-fsevent (~> 0.10, >= 0.10.3)
328328
rb-inotify (~> 0.9, >= 0.9.10)
329-
loofah (2.18.0)
329+
loofah (2.19.1)
330330
crass (~> 1.0.2)
331331
nokogiri (>= 1.5.9)
332-
mail (2.7.1)
332+
mail (2.8.0.1)
333333
mini_mime (>= 0.1.1)
334+
net-imap
335+
net-pop
336+
net-smtp
334337
marcel (1.0.2)
335338
matrix (0.4.2)
336339
memoist (0.16.2)
@@ -357,24 +360,23 @@ GEM
357360
ruby2_keywords (~> 0.0.1)
358361
net-http-persistent (4.0.1)
359362
connection_pool (~> 2.2)
360-
net-imap (0.2.3)
361-
digest
363+
net-imap (0.3.4)
364+
date
362365
net-protocol
363-
strscan
364-
net-pop (0.1.1)
365-
digest
366+
net-pop (0.1.2)
366367
net-protocol
368+
net-protocol (0.2.1)
367369
timeout
368-
net-protocol (0.1.3)
369-
timeout
370-
net-smtp (0.3.1)
371-
digest
370+
net-smtp (0.3.3)
372371
net-protocol
373-
timeout
374372
nio4r (2.5.8)
375373
nokogiri (1.13.0)
376374
mini_portile2 (~> 2.7.0)
377375
racc (~> 1.4)
376+
nokogiri (1.13.0-x86_64-darwin)
377+
racc (~> 1.4)
378+
nokogiri (1.13.0-x86_64-linux)
379+
racc (~> 1.4)
378380
os (1.1.4)
379381
parallel (1.21.0)
380382
parser (3.1.0.0)
@@ -403,8 +405,8 @@ GEM
403405
rails-dom-testing (2.0.3)
404406
activesupport (>= 4.2.0)
405407
nokogiri (>= 1.6)
406-
rails-html-sanitizer (1.4.3)
407-
loofah (~> 2.3)
408+
rails-html-sanitizer (1.4.4)
409+
loofah (~> 2.19, >= 2.19.1)
408410
rainbow (3.0.0)
409411
rake (13.0.6)
410412
rb-fsevent (0.11.0)
@@ -512,11 +514,14 @@ GEM
512514
stackprof (0.2.17)
513515
stimulus-rails (1.0.2)
514516
railties (>= 6.0.0)
515-
strscan (3.0.4)
516517
sucker_punch (3.0.1)
517518
concurrent-ruby (~> 1.0)
518519
tailwindcss-rails (2.0.4)
519520
railties (>= 6.0.0)
521+
tailwindcss-rails (2.0.4-x86_64-darwin)
522+
railties (>= 6.0.0)
523+
tailwindcss-rails (2.0.4-x86_64-linux)
524+
railties (>= 6.0.0)
520525
terser (1.1.8)
521526
execjs (>= 0.3.0, < 3)
522527
thin (1.8.1)
@@ -525,7 +530,7 @@ GEM
525530
rack (>= 1, < 3)
526531
thor (1.2.1)
527532
tilt (2.0.10)
528-
timeout (0.3.0)
533+
timeout (0.3.1)
529534
trailblazer-option (0.1.2)
530535
turbo-rails (1.0.0)
531536
actionpack (>= 6.0.0)
@@ -556,7 +561,7 @@ GEM
556561
websocket-extensions (0.1.5)
557562
xpath (3.2.0)
558563
nokogiri (~> 1.8)
559-
zeitwerk (2.6.0)
564+
zeitwerk (2.6.6)
560565

561566
PLATFORMS
562567
ruby

‎RAILS_VERSION

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
7.0.4
1+
7.0.4.1

‎actioncable/CHANGELOG.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,8 @@
1+
## Rails 7.0.4.1 (January 17, 2023) ##
2+
3+
* No changes.
4+
5+
16
## Rails 7.0.4 (September 09, 2022) ##
27

38
* The Redis adapter is now compatible with redis-rb 5.0

‎actioncable/lib/action_cable/gem_version.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ module VERSION
1010
MAJOR = 7
1111
MINOR = 0
1212
TINY = 4
13-
PRE = nil
13+
PRE = "1"
1414

1515
STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
1616
end

‎actioncable/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@rails/actioncable",
3-
"version": "7.0.4",
3+
"version": "7.0.4-1",
44
"description": "WebSocket framework for Ruby on Rails.",
55
"module": "app/assets/javascripts/actioncable.esm.js",
66
"main": "app/assets/javascripts/actioncable.js",

‎actionmailbox/CHANGELOG.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,8 @@
1+
## Rails 7.0.4.1 (January 17, 2023) ##
2+
3+
* No changes.
4+
5+
16
## Rails 7.0.4 (September 09, 2022) ##
27

38
* No changes.

‎actionmailbox/lib/action_mailbox/gem_version.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ module VERSION
1010
MAJOR = 7
1111
MINOR = 0
1212
TINY = 4
13-
PRE = nil
13+
PRE = "1"
1414

1515
STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
1616
end

‎actionmailer/CHANGELOG.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,8 @@
1+
## Rails 7.0.4.1 (January 17, 2023) ##
2+
3+
* No changes.
4+
5+
16
## Rails 7.0.4 (September 09, 2022) ##
27

38
* No changes.

‎actionmailer/lib/action_mailer/gem_version.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ module VERSION
1010
MAJOR = 7
1111
MINOR = 0
1212
TINY = 4
13-
PRE = nil
13+
PRE = "1"
1414

1515
STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
1616
end

‎actionpack/CHANGELOG.md

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,21 @@
1+
## Rails 7.0.4.1 (January 17, 2023) ##
2+
3+
* Fix sec issue with _url_host_allowed?
4+
5+
Disallow certain strings from `_url_host_allowed?` to avoid a redirect
6+
to malicious sites.
7+
8+
[CVE-2023-22797]
9+
10+
* Avoid regex backtracking on If-None-Match header
11+
12+
[CVE-2023-22795]
13+
14+
* Use string#split instead of regex for domain parts
15+
16+
[CVE-2023-22792]
17+
18+
119
## Rails 7.0.4 (September 09, 2022) ##
220

321
* Prevent `ActionDispatch::ServerTiming` from overwriting existing values in `Server-Timing`.

0 commit comments

Comments
 (0)
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy