packages/lang/ruby/patches, branch master

ruby: update to 3.4.5

2025-09-18T19:17:26Z

Ruby 3.4.0 is a major release that introduces several changes: - Adds `it` block parameter reference - Switches default parser to Prism - Implements Happy Eyeballs Version 2 in the socket library - Improves YJIT - Adds Modular GC - And more (see changelog for full details) Subsequent minor releases include: - 3.4.1: fixes version description - 3.4.2: routine bugfix release - 3.4.3: routine bugfix release - 3.4.4: routine bugfix release (Linux-specific) - 3.4.5: routine bugfix release, adds GCC 15 support Packaging changes: - (NEW) ruby-repl_type_completor (packaging the repl_type_completor gem) - Refreshed package dependencies - Updated `ruby_missingfiles` (detects unpacked files) to use `apk` - Refactored `ruby_find_pkgsdeps` (detects inter-package dependencies) to use the Ruby parser (Prism) instead of heuristic string matching Changelog: https://www.ruby-lang.org/en/news/2024/12/25/ruby-3-4-0-released/ Signed-off-by: Luiz Angelo Daros de Luca

ruby: fix riscv64 build

2023-08-14T21:16:23Z

Fix build by adding missing macros. The patch is taken from: https://lists.openembedded.org/g/openembedded-core/message/161168 Signed-off-by: Tianling Shen

ruby: update to 3.2.1

2023-04-11T19:48:16Z

Ruby 3.2 changes include: * WASI based WebAssembly support * Production-ready YJIT * Regexp improvements against ReDoS See: https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/ Ruby 3.2.1 changes includes: * Bugfixes See: https://www.ruby-lang.org/en/news/2023/02/08/ruby-3-2-1-released/ Package-related changes are: * libyaml is no longer bundled, requiring OpenWrt to build it as a host library for ruby/host. * Added sub-packages: - ruby-mjit: files for mJIT, although disabled during build - ruby-syntax_suggest: finds missing ends * Backported patches dropped: - 001-fix-build-with-libressl-3.5.patch - 002-fix-operator-precedence.patch * Usual dependencies adjustments Signed-off-by: Luiz Angelo Daros de Luca

ruby: update to 3.1.3

2022-12-12T03:10:09Z

This release includes a security fix. - CVE-2021-33621: HTTP response splitting in CGI For more details: - https://www.ruby-lang.org/en/news/2022/11/24/ruby-3-1-3-released/ Signed-off-by: Luiz Angelo Daros de Luca

ruby: fix build with LibreSSL over v3.5

2022-07-24T02:19:12Z

LibreSSL 3.5 and later provide and need to use PEM_write_bio_PrivateKey_traditional() upstream commit: https://github.com/ruby/openssl/commit/e25fb0d0d86da5a9398ebdc9216b2ea89f80fa3d https://github.com/ruby/openssl/commit/b02815271fcc295cb8b07ef740684b88a10f2760 Signed-off-by: ZiMing Mo

ruby: update to 3.1.2

2022-04-25T19:13:08Z

Ruby 3.1.0 major changes: - YJIT: New experimental in-process JIT compiler - debug gem: A new debugger - error_highlight: Fine-grained error location in backtrace - IRB Autocomplete and Documentation Display - Many more. See: https://www.ruby-lang.org/en/news/2021/12/25/ruby-3-1-0-released/ Ruby 3.1.1 changes: - Many non-security bug fixes. See: https://www.ruby-lang.org/en/news/2022/02/18/ruby-3-1-1-released/ Ruby 3.1.2 changes: - CVE-2022-28738: Double free in Regexp compilation - CVE-2022-28739: Buffer overrun in String-to-Float conversion Packaging changes: - Dropped 100-musl.patch (upstream fix) - Added: ruby-error_highlight, ruby-random_formatter, ruby-ruby2_keywords - Removed: ruby-dbm, ruby-gdbm, ruby-fiber, ruby-gdbm, ruby-tracer - ruby_find_pkgsdeps script: * cleaned some ignored and weak dependencies - ruby_missingfiles script: * fix the example cmdline * let diff use all terminal columns Signed-off-by: Luiz Angelo Daros de Luca

ruby: update to 3.0.2

2021-07-15T17:44:15Z

This release fixes some bugs and these vulnerabilities: * CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP * CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP * CVE-2021-31799: A command injection vulnerability in RDoc Signed-off-by: Luiz Angelo Daros de Luca

ruby: update to 3.0.0

2021-02-22T22:49:38Z

This release goal is performance, concurrency, and typing. See details in https://www.ruby-lang.org/en/news/2020/12/25/ruby-3-0-0-released/ New subpackages (reflect of mostly complete upstream ruby gemification) - ruby-abbrev (from ruby-misc) - ruby-base64 (from ruby-misc) - ruby-coverage (from ruby-misc) - ruby-continuation (from ruby-misc) - ruby-debug (from ruby-debuglib) - ruby-english (from ruby-misc) - ruby-expect (from ruby-misc) - ruby-fiber (from ruby-misc) - ruby-find (from ruby-filelib) - ruby-io-nonblock (from ruby-multithread) - ruby-io-wait (from ruby-multithread) - ruby-monitor (from ruby-multithread) - ruby-net-ftp (from ruby-net) - ruby-net-http (from ruby-net) - ruby-net-imap (from ruby-net) - ruby-net-pop (from ruby-net) - ruby-net-protocol (from ruby-net) - ruby-objspace (from ruby-debuglib) - ruby-open-uri (from ruby-net) - ruby-pathname (from ruby-filelib) - ruby-pp (from ruby-prettyprint) - ruby-pty (from ruby-misc) - ruby-rbs (NEW) - ruby-resolv (from ruby-socket) - ruby-resolv-replace (from ruby-socket) - ruby-securerandom (from ruby-misc) - ruby-set (from ruby-misc) - ruby-shellwords (from ruby-misc) - ruby-syslog (from ruby-logger) - ruby-tempfile (from ruby-filelib) - ruby-tmpdir (from ruby-filelib) - ruby-tsort (from ruby-misc) - ruby-typeprof (NEW) - ruby-un (from ruby-mkmf) - ruby-weakref (from ruby-misc) Removed subpackages - ruby-debuglib (split into ruby-debug,ruby-objspace) - ruby-filelib (split into ruby-find,ruby-pathname,ruby-tempfile,ruby-tmpdir) - ruby-misc (split into ruby-abbrev,ruby-base64,ruby-continuation, ruby-coverage,ruby-english,ruby-expect,ruby-fiber,ruby-securerandom, ruby-set,ruby-shellwords,ruby-tsort,ruby-weakref) - ruby-multithread (split into ruby-io-nonblock,ruby-io-wait,ruby-monitor) - ruby-net (split into ruby-net-ftp,ruby-net-http,ruby-net-imap,ruby-net-pop, ruby-net-protocol,ruby-open-uri) - ruby-net-telnet (removed upstream) - ruby-sdbm (removed upstream) - ruby-webrick (removed upstream) - ruby-xmlrpc (removed upstream) Signed-off-by: Luiz Angelo Daros de Luca

treewide: Run refresh on all packages

2021-02-21T00:02:15Z

The crude loop I wrote to come up with this changeset: find -L package/feeds/packages/ -name patches | \ sed 's/patches$/refresh/' | sort | xargs make Signed-off-by: Ilya Lipnitskiy

ruby: update to 2.7.1

2020-04-14T21:57:36Z

New subpackages (reflect of ongoing ruby gemification) - ruby-benchmark (from ruby-debuglib) - ruby-delegate (from ruby-misc) - ruby-getoptlong (from ruby-misc) - ruby-net-pop (from ruby-net) - ruby-net-imap (from ruby-net) - ruby-observer (from ruby-patterns, now gone) - ruby-open3 (from ruby-misc) - ruby-readline-ext (was ruby-readline, while ruby-readline now selects either ruby-readline-ext or ruby-reline) - ruby-reline (alternative to ruby-readline-ext as pure ruby) - ruby-singleton (from ruby-patterns, now gone) - ruby-timeout (from ruby-multithread) Dropped subpackages: - ruby-cmath (gone in 2.7.0) - ruby-e2mmap (gone in 2.7.0) - ruby-patterns (splitted into ruby-observer, ruby-singleton) - ruby-scanf (gone in 2.7.0) - ruby-shell (gone in 2.7.0) - ruby-sync (gone in 2.7.0) - ruby-thwait (gone in 2.7.0) Ruby 2.7.0 also dropped profile.rb and profiler.rb (they were in ruby-debuglib) Patches changes: - Dropped patch 001_fix_isnan_isinf_finite_with_uclibc.patch (now in release) - Added 100-musl.patch, fixing mainly coroutine implementation selection Helper scripts changes: - ruby_missingfiles: do not ignore ruby-dev files - ruby_find_pkgsdeps: better detect circular dependencies Ruby 2.7.1 fixes these security issues: * CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (Additional fix) * CVE-2020-10933: Heap exposure vulnerability in the socket library Signed-off-by: Luiz Angelo Daros de Luca