Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package rubygem-bootsnap for openSUSE:Factory checked in at 2021-03-24 16:14:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rubygem-bootsnap (Old) and /work/SRC/openSUSE:Factory/.rubygem-bootsnap.new.2401 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "rubygem-bootsnap" Wed Mar 24 16:14:16 2021 rev:10 rq:880667 version:1.7.3 Changes: -------- --- /work/SRC/openSUSE:Factory/rubygem-bootsnap/rubygem-bootsnap.changes 2021-02-20 22:12:18.111039813 +0100 +++ /work/SRC/openSUSE:Factory/.rubygem-bootsnap.new.2401/rubygem-bootsnap.changes 2021-03-24 16:14:20.004025952 +0100 @@ -1,0 +2,7 @@ +Tue Mar 23 06:00:28 UTC 2021 - Manuel Schnitzer <mschnit...@suse.com> + +- updated to version 1.7.3 + + * Disable YAML precompilation when encountering YAML tags. (#351) + +------------------------------------------------------------------- Old: ---- bootsnap-1.7.2.gem New: ---- bootsnap-1.7.3.gem ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rubygem-bootsnap.spec ++++++ --- /var/tmp/diff_new_pack.ssqZB6/_old 2021-03-24 16:14:20.476026448 +0100 +++ /var/tmp/diff_new_pack.ssqZB6/_new 2021-03-24 16:14:20.480026452 +0100 @@ -24,7 +24,7 @@ # Name: rubygem-bootsnap -Version: 1.7.2 +Version: 1.7.3 Release: 0 %define mod_name bootsnap %define mod_full_name %{mod_name}-%{version} ++++++ bootsnap-1.7.2.gem -> bootsnap-1.7.3.gem ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/CHANGELOG.md new/CHANGELOG.md --- old/CHANGELOG.md 2021-02-08 10:11:52.000000000 +0100 +++ new/CHANGELOG.md 2021-03-22 09:49:34.000000000 +0100 @@ -1,5 +1,9 @@ # Unreleased +# 1.7.3 + +* Disable YAML precompilation when encountering YAML tags. (#351) + # 1.7.2 * Fix compatibility with msgpack < 1. (#349) Binary files old/checksums.yaml.gz and new/checksums.yaml.gz differ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lib/bootsnap/compile_cache/yaml.rb new/lib/bootsnap/compile_cache/yaml.rb --- old/lib/bootsnap/compile_cache/yaml.rb 2021-02-08 10:11:52.000000000 +0100 +++ new/lib/bootsnap/compile_cache/yaml.rb 2021-03-22 09:49:34.000000000 +0100 @@ -8,8 +8,7 @@ attr_accessor(:msgpack_factory, :cache_dir, :supported_options) def input_to_storage(contents, _) - raise(Uncompilable) if contents.index("!ruby/object") - obj = ::YAML.load(contents) + obj = strict_load(contents) msgpack_factory.dump(obj) rescue NoMethodError, RangeError # The object included things that we can't serialize @@ -27,6 +26,13 @@ ::YAML.load(data, **(kwargs || {})) end + def strict_load(payload, *args) + ast = ::YAML.parse(payload) + return ast unless ast + strict_visitor.create(*args).visit(ast) + end + ruby2_keywords :strict_load if respond_to?(:ruby2_keywords, true) + def precompile(path, cache_dir: YAML.cache_dir) Bootsnap::CompileCache::Native.precompile( cache_dir, @@ -86,6 +92,17 @@ end self.supported_options.freeze end + + def strict_visitor + self::NoTagsVisitor ||= Class.new(Psych::Visitors::ToRuby) do + def visit(target) + if target.tag + raise Uncompilable, "YAML tags are not supported: #{target.tag}" + end + super + end + end + end end module Patch diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lib/bootsnap/version.rb new/lib/bootsnap/version.rb --- old/lib/bootsnap/version.rb 2021-02-08 10:11:52.000000000 +0100 +++ new/lib/bootsnap/version.rb 2021-03-22 09:49:34.000000000 +0100 @@ -1,4 +1,4 @@ # frozen_string_literal: true module Bootsnap - VERSION = "1.7.2" + VERSION = "1.7.3" end diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/metadata new/metadata --- old/metadata 2021-02-08 10:11:52.000000000 +0100 +++ new/metadata 2021-03-22 09:49:34.000000000 +0100 @@ -1,14 +1,14 @@ --- !ruby/object:Gem::Specification name: bootsnap version: !ruby/object:Gem::Version - version: 1.7.2 + version: 1.7.3 platform: ruby authors: - Burke Libbey autorequire: bindir: exe cert_chain: [] -date: 2021-02-08 00:00:00.000000000 Z +date: 2021-03-22 00:00:00.000000000 Z dependencies: - !ruby/object:Gem::Dependency name: bundler