File ruby3.3.changes of Package ruby3.3
-------------------------------------------------------------------
Tue Sep 3 13:35:24 UTC 2024 - Marcus Rueckert <mrueckert@suse.de>
- Added 7939.diff
Cleanup binstub lock files
https://github.com/rubygems/rubygems/issues/7997
https://github.com/rubygems/rubygems/pull/7939
-------------------------------------------------------------------
Tue Sep 3 09:45:01 UTC 2024 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.3.5
This is a routine update that includes minor bug fixes.
We recommend upgrading your Ruby version at your earliest
convenience.
https://github.com/ruby/ruby/releases/tag/v3_3_5
-------------------------------------------------------------------
Tue Jul 9 09:35:15 UTC 2024 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.3.4
This release fixes a regression in Ruby 3.3.3 that dependencies
are missing in the gemspec of some bundled gems: net-pop,
net-ftp, net-imap, and prime [Bug #20581]. The fix allows Bundler
to successfully install those gems on platforms like Heroku. If
your bundle install runs correctly now, you may not have this
issue.
https://github.com/ruby/ruby/releases/tag/v3_3_4
-------------------------------------------------------------------
Wed Jun 12 09:32:13 UTC 2024 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.3.3
- RubyGems 3.5.11
- Bundler 2.5.11
- REXML 3.2.8
- strscan 3.0.9
- --dump=prism_parsetree is replaced by --parser=prism
--dump=parsetree
- Invalid encoding symbols raise SyntaxError instead of
EncodingError
- Memory leak fix in Ripper parsing
- Bugfixes for YJIT, **{}, Ripper.tokenize,
RubyVM::InstructionSequence#to_binary, --with-gmp, and some
build environments
-------------------------------------------------------------------
Tue Jun 5 11:59:12 UTC 2024 - José Gómez <jose.gomez@suse.com>
- Add Provides for yjit-enabled builds.
-------------------------------------------------------------------
Thu May 30 22:20:12 UTC 2024 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.3.2
- Bug #20493: Segfault on rb_io_getline_fast
- Bug #20450: Ruby 3.3.1 broken with bootsnap
- Bug #20169: GC.compact can raises EFAULT on IO
- Bug #20192: YJIT in 3.3.0 miscompiles yield with keyword splats
- Bug #20307: Hash#update from compare_by_identity hash can have
unfrozen string keys
- Bug #20511: Update bundled reline gem version to v0.5.7
- Bug #20204: 3.3.0 YJIT rises TypeError instead of ArgumentError
with some incorrect calls
- Bug #20195: 3.3.0 YJIT mishandles ruby2_keywords splat into
methods taking a rest parameter
- Bug #20288: rb_fiber_scheduler_close exceptions are not handled
in rb_fiber_scheduler_set.
- Bug #20286: TracePoint does not emit thread_end event when
thread exits with exception
- Bug #20292: Abort ruby by String#initialize
- Bug #20445: Reduce if for decreasing counter on OP_REPEAT_INC
- Bug #20296: Complex(:sym, exception: false) generate exception
with weird timing
- Bug #20322: rb_enc_interned_str_cstr doesn't accept null
pointer for encoding
- Bug #20289: Bug in Zlib::GzipReader#eof? breaks reading certain
sizes of gzipped files.
- Bug #20393: after_fork_ruby clears all pending interrupts for
both parent and child process.
- Bug #20305: commit 1d2d25dcadda0764f303183ac091d0c87b432566
breaks grapheme_clusters
- Bug #20342: Top level public, private and ruby2_keywords do not
work in wrapped load
- Bug #20413: Enumerator can block fiber scheduler.
- Bug #20427: Backport: Heap buffer overflow in Array#sort! when
block modifies target array
- Bug #20414: Fiber#raise should recurse to resumed_fiber rather
than failing.
- Bug #20453: Pointer being freed was not allocated in Regexp
timeout
- Bug #20494: Non-default directories are not searched when
checking for a gmp header
- Bug #20094: Inline while loop behavior changed unexpectedly in
3.3.0
- Bug #20502: Backport pthread_kill fix to Ruby 3.3
- Bug #20431: Ruby 3.3.0 build fail with make: *** [io_buffer.o]
Error 1
- Bug #20500: Non-system directories are not searched when
checking for jemalloc headers and libs, and building enc
- drop fix-gvl-save-restore.patch: included upstream
-------------------------------------------------------------------
Sun May 19 09:51:02 UTC 2024 - José Gómez <jose.gomez@suse.com>
- Backport for fix segfault caused by stack pointers not
saved/restored properly when yielding execution from Ruby to C.
https://bugs.ruby-lang.org/issues/20493
https://github.com/ruby/ruby/pull/10798
Adds fix-gvl-save-restore.patch
-------------------------------------------------------------------
Thu May 16 10:02:02 UTC 2024 - Marcus Rueckert <mrueckert@suse.de>
- fix typo in the macros file. this only affected people building
without the OBS as this macro was shadowed by the macro that is
in the prjconf
-------------------------------------------------------------------
Tue Apr 23 16:24:04 UTC 2024 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.3.1 (boo#1221851 boo#1221852 boo#1223314)
https://www.ruby-lang.org/en/news/2024/04/23/ruby-3-3-1-released/
https://www.ruby-lang.org/en/news/2024/04/23/arbitrary-memory-address-read-regexp-cve-2024-27282/
https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/
https://www.ruby-lang.org/en/news/2024/03/21/buffer-overread-cve-2024-27280/
https://github.com/ruby/ruby/releases/tag/v3_3_1
-------------------------------------------------------------------
Wed Jan 31 09:55:13 UTC 2024 - Guillaume GARDET <guillaume.gardet@opensuse.org>
- Add additionnal flags: cflags, cppflags and ASFLAGS
-------------------------------------------------------------------
Mon Dec 25 07:06:28 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.3.0
https://www.ruby-lang.org/en/news/2023/12/25/ruby-3-3-0-released/
- update use-pie.patch to apply cleanly again
-------------------------------------------------------------------
Mon Dec 11 10:53:42 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.3.0~rc1
https://www.ruby-lang.org/en/news/2023/12/11/ruby-3-3-0-rc1-released/
-------------------------------------------------------------------
Sun Nov 12 23:02:07 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.3.0~preview3
https://www.ruby-lang.org/en/news/2023/11/12/ruby-3-3-0-preview3-released/
-------------------------------------------------------------------
Sat Nov 4 00:43:54 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
- add Provides that we can differentiate between between jemalloc
enabled and non enabled ruby
-------------------------------------------------------------------
Tue Sep 26 10:03:26 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
- Add the `+0` bit to the rubygem ABI macro. This has to be removed
with the final release
-------------------------------------------------------------------
Thu Sep 14 14:23:21 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.3.0~preview2
https://www.ruby-lang.org/en/news/2023/09/14/ruby-3-3-0-preview2-released/
-------------------------------------------------------------------
Fri May 12 12:07:57 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
- Initial package of the 3.3 branch 3.3.0~preview1
https://www.ruby-lang.org/en/news/2023/05/12/ruby-3-3-0-preview1-released/
-------------------------------------------------------------------
Thu Mar 30 14:23:04 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
- update to 3.2.2 (boo#1209891 CVE-2023-28755 boo#1209967 CVE-2023-28756)
https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/
https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755/
https://www.ruby-lang.org/en/news/2023/03/30/ruby-3-2-2-released/
- drop ruby-3.1.3-remove-timezone-test.patch
solved differently upstream
-------------------------------------------------------------------
Wed Feb 8 13:05:41 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.2.1
https://www.ruby-lang.org/en/news/2023/02/08/ruby-3-2-1-released/
-------------------------------------------------------------------
Mon Jan 9 16:27:29 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
- Fix Source url (3.1 vs 3.2)
-------------------------------------------------------------------
Tue Dec 27 13:39:48 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- Set the correct ABI version
-------------------------------------------------------------------
Sun Dec 25 09:19:30 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.2.0
https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/
- Drop ruby-3.1.3-remove-timezone-test.patch:
Fix included in update
- Refreshed use-pie.patch
-------------------------------------------------------------------
Thu Dec 22 10:20:24 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- Added ruby-3.1.3-remove-timezone-test.patch:
Disable tests that rely on singapore's old TZ data
-------------------------------------------------------------------
Tue Dec 6 13:19:33 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- disable yjit
-------------------------------------------------------------------
Tue Dec 6 12:44:02 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- disable readline/reline tests as they require system ruby
-------------------------------------------------------------------
Tue Dec 6 12:43:30 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- rust edition 2021 is supported since 1.56.0. Change buildrequires
accordingly
-------------------------------------------------------------------
Tue Dec 6 10:48:43 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.2.0~rc1
https://www.ruby-lang.org/en/news/2022/12/06/ruby-3-2-0-rc1-released/
-------------------------------------------------------------------
Mon Dec 5 09:12:11 UTC 2022 - Andreas Schwab <schwab@suse.de>
- Update rb_arch_short macro
-------------------------------------------------------------------
Fri Dec 2 13:48:19 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- Use the correct ABI version in the macros
-------------------------------------------------------------------
Thu Nov 24 16:05:11 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- remove the bundled gems workaround
-------------------------------------------------------------------
Thu Nov 17 12:02:15 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- bump ruby-common dependency to the version with the ruby 3.2
fixes
-------------------------------------------------------------------
Thu Nov 17 10:27:43 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- bump version in the macro files to 3.2
-------------------------------------------------------------------
Fri Nov 11 18:34:56 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- limit yjit to x86_64 and aarch64 as those are the only to
platforms it supports
-------------------------------------------------------------------
Fri Nov 11 17:13:14 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- enable yjit so we can test it before the final release and see if
we want to leave it on in the package.
-------------------------------------------------------------------
Fri Nov 11 15:57:31 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- Branch off ruby 3.2 package with preview 3
-------------------------------------------------------------------
Tue May 3 23:49:37 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- turn off jemalloc again until we figure out how to do the dlopen
on libruby properly like vim and yast do
-------------------------------------------------------------------
Fri Apr 29 13:25:14 UTC 2022 - Martin Liška <mliska@suse.cz>
- Do not depend on binutils-gold as it will be removed
in the future as it's obsoleted. Use lld instead of it
for clang build.
-------------------------------------------------------------------
Wed Apr 13 13:41:18 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- use rb_soname instead of hard coding the ruby package name
-------------------------------------------------------------------
Wed Apr 13 10:09:28 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- add buildignore for ruby and ruby-common so we do not pull
gem2rpm for the testsuite
-------------------------------------------------------------------
Wed Apr 13 08:16:06 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.1.2 (boo#1198441 boo#1198440)
https://www.ruby-lang.org/en/news/2022/04/12/ruby-3-1-2-released/
- CVE-2022-28738: Double free in Regexp compilation
- CVE-2022-28739: Buffer overrun in String-to-Float conversion
-------------------------------------------------------------------
Tue Mar 29 17:41:48 UTC 2022 - Dirk Müller <dmueller@suse.com>
- move tests into separate testsuite _multibuild:
* reduces buildrequires on main package (procps which is behind systemd:mini)
* reduces depth of distro rebuild chain
- exclude more tests that require network
- make test failures fatal, they pass now
- light subset of spec-cleaner cleanups
- prefer %%global over %%define, they get evaluated at parse time
-------------------------------------------------------------------
Tue Mar 8 08:39:20 UTC 2022 - Dirk Müller <dmueller@suse.com>
- use valgrind for more supported platforms
- run tests in parallel for better build times
- set PATH for test to just built ruby interpreter
- skip network tests, they hang on timeouts, slowing down the build
- remove exceptions for armv7 testing, these are all fixed
-------------------------------------------------------------------
Tue Feb 22 15:32:13 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.1.1
https://www.ruby-lang.org/en/news/2022/02/18/ruby-3-1-1-released/
- drop 77fe1fca0abb56f7f07725c0a3803d53a315c853.patch:
included in update
-------------------------------------------------------------------
Sun Feb 6 18:40:18 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- Build ruby with jemalloc for sle 15 up
-------------------------------------------------------------------
Wed Feb 2 15:45:00 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- Added https://github.com/ruby/ipaddr/commit/77fe1fca0abb56f7f07725c0a3803d53a315c853.patch
Fix vagrant with ruby 3.1
-------------------------------------------------------------------
Sun Dec 26 19:48:49 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- renable LTO
- apply workaround from https://bugs.ruby-lang.org/issues/18373#note-8
-------------------------------------------------------------------
Sun Dec 26 03:28:38 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.1.0
https://www.ruby-lang.org/en/news/2021/12/25/ruby-3-1-0-released/
- disable LTO for now as it makes debugging the mkmf/rbinstall
problem easier
-------------------------------------------------------------------
Tue Dec 14 10:08:35 UTC 2021 - Stephan Kulow <coolo@suse.com>
- Initial 3.1 preview - currently failing, hoping for the next preview
-------------------------------------------------------------------
Thu Nov 25 11:23:08 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- update to 3.0.3 (boo#1193081 boo#1193080 boo#1193035)
https://www.ruby-lang.org/en/news/2021/11/24/ruby-3-0-3-released/
- CVE-2021-41817: Regular Expression Denial of Service
Vulnerability of Date Parsing Methods
- CVE-2021-41816: Buffer Overrun in CGI.escape_html
- CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse
-------------------------------------------------------------------
Wed Nov 10 17:02:48 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- provide the correct rubygems version
-------------------------------------------------------------------
Sat Nov 6 18:59:17 UTC 2021 - Klaus Kämpf <kkaempf@suse.com>
- update to 3.0.2
https://www.ruby-lang.org/en/news/2021/07/07/ruby-3-0-2-released/
* CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP
* CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP
* CVE-2021-31799: A command injection vulnerability in RDoc
-------------------------------------------------------------------
Tue Aug 24 07:26:12 UTC 2021 - Stephan Kulow <coolo@suse.com>
- Do not create links for /etc/alternatives at all but rely on
rpm's %ghosts being creating at runtime in %post
This aligns ruby3.0 with ruby2.7 and ruby-common
-------------------------------------------------------------------
Thu Jul 8 12:46:56 UTC 2021 - Stephan Kulow <coolo@suse.com>
- Fix links in /etc/alternatives not to point to itself
-------------------------------------------------------------------
Tue Apr 13 11:30:03 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- update to ruby 3.0.1 (boo#1184644)
https://www.ruby-lang.org/en/news/2021/04/05/ruby-3-0-1-released/
- CVE-2021-28965: XML round-trip vulnerability in REXML
Complete list of changes at
https://github.com/ruby/ruby/compare/v3_0_0...v3_0_1
- drop https://github.com/rubygems/rubygems/pull/4317.patch
included in update
-------------------------------------------------------------------
Mon Jan 25 18:09:45 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>
- add https://github.com/rubygems/rubygems/pull/4317.patch
make sure the gem plugins path does not contain the buildroot
-------------------------------------------------------------------
Fri Dec 25 06:28:46 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- update to ruby 3.0.0
https://www.ruby-lang.org/en/news/2020/12/25/ruby-3-0-0-released/
-------------------------------------------------------------------
Fri Dec 25 00:18:54 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- Update to ruby 3.0.0~rc1
https://www.ruby-lang.org/en/news/2020/12/20/ruby-3-0-0-rc1-released/
-------------------------------------------------------------------
Wed Dec 9 14:29:31 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- Update to ruby 3.0.0~preview2
https://www.ruby-lang.org/en/news/2020/12/08/ruby-3-0-0-preview2-released/
- 3972.patch
-------------------------------------------------------------------
Tue Oct 27 11:30:47 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- fix typo in the ruby macros file
-------------------------------------------------------------------
Tue Oct 27 11:22:03 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- no longer luse the url for the 3972.patch, as the code in the PR
was rebased and no longer applies to the code in preview 1.
-------------------------------------------------------------------
Sun Oct 25 18:07:26 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- fix the macros to actually use 3.0.0
-------------------------------------------------------------------
Mon Sep 28 11:34:08 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- added https://patch-diff.githubusercontent.com/raw/rubygems/rubygems/pull/3972.patch
to fix regression in rubygems buildroot support
https://github.com/rubygems/rubygems/issues/3971
-------------------------------------------------------------------
Mon Sep 28 00:51:49 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- Update to 3.0.0~preview1
https://www.ruby-lang.org/en/news/2020/09/25/ruby-3-0-0-preview1-released/
-------------------------------------------------------------------
Tue Apr 28 17:59:59 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- make sure that update-alternative weight for the default
distribution is always greater than our normal weight
-------------------------------------------------------------------
Tue Apr 28 17:18:35 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- make the update-alternative weight based on the ruby version
-------------------------------------------------------------------
Tue Apr 14 07:47:25 UTC 2020 - Bernhard Wiedemann <bwiedemann@suse.com>
- Add ruby2.7-drop-build-date.patch (boo#1047218)
-------------------------------------------------------------------
Tue Apr 7 22:53:35 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
- Update to 2.7.1 (boo#1167244 boo#1168938)
- CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON
(Additional fix)
- CVE-2020-10933: Heap exposure vulnerability in the socket
library
https://github.com/ruby/ruby/compare/v2_7_0...v2_7_1
-------------------------------------------------------------------
Tue Feb 18 13:54:37 UTC 2020 - Stefan Brüns <stefan.bruens@rwth-aachen.de>
- Apply fixes/changes from ruby2.6 package lost in ruby2.7 switch:
* Fix mangling of shebangs, do not replace shell invocations with
ruby, correcly replace "/usr/bin/env ruby". (bnc#1156797)
* Cleanup spec file:
+ Drop support for obsolete distro versions
+ use license macro, remove defattr
* Use valgrind-client-headers instead of full valgrind-devel
package where available, reducing build package footprint.
* Remove unused libX11-devel BuildRequires.
-------------------------------------------------------------------
Sat Dec 28 08:03:54 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- update to final release of 2.7.0
http://www.ruby-lang.org/en/news/2019/12/25/ruby-2-7-0-released/
- update the use-pie.patch to apply cleanly again
-------------------------------------------------------------------
Tue Jul 9 14:16:36 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- fix running tests (boo#1140844)
just passing the DISABLED_TESTS variable is wrong. probably a
relict from calling the test scripts directly. use TESTOPTS now.
-------------------------------------------------------------------
Sun Jun 23 02:59:03 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- add gmp to the buildrequires
-------------------------------------------------------------------
Sat Jun 22 21:07:33 UTC 2019 - Marcus Rueckert <mrueckert@suse.de>
- starting package with 2.7.0-preview1
