December 2022 - ruby-talk - ml.ruby-lang.org

[ruby-talk:444035] [ANN] loofah security update v2.19.1
by Mike Dalessio 13 Dec '22

13 Dec '22

loofah v2.19.1 has been released. This a security update which addresses multiple CVEs, and users are recommended to upgrade immediately. The release notes <https://github.com/flavorjones/loofah/releases/tag/v2.19.1> are reproduced below, for more information please read the linked GHSAs. --- 2.19.1 / 2022-12-13Security - Address CVE-2022-23514, inefficient regular expression complexity. See GHSA-486f-hjj9-9vhh <https://github.com/flavorjones/loofah/security/advisories/GHSA-486f-hjj9-9v…> for more information. - Address CVE-2022-23515, improper neutralization of data URIs. See GHSA-228g-948r-83gx <https://github.com/flavorjones/loofah/security/advisories/GHSA-228g-948r-83…> for more information. - Address CVE-2022-23516, uncontrolled recursion. See GHSA-3x8r-x6xp-q4vm <https://github.com/flavorjones/loofah/security/advisories/GHSA-3x8r-x6xp-q4…> for more information.

1 0

[ruby-talk:444031] Re: Scope change for NotImplementedError exception class
by SHIBATA Hiroshi 11 Dec '22

11 Dec '22

>> [2] http://lists.ruby-lang.org/pipermail/ruby-core/ I migrate above list to the following site: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.or… On Wed, Nov 16, 2022 at 1:15 AM Michał Zając <ruby-lang.org(a)quintasan.pl> wrote: > > Hello, > > Long story short, I would like to propose to extend the usecase for > NotImplementedError to account for cases when the codepath has not been > implemented for some reason (similar to Python's NotImplementedError). I > did write a proposal on Redmine [1] but I think it wasn't seen yet. If > this is not the appropriate place to discuss such things then please let > me know where should I post this. I tried browsing archives of ruby-core > to see it it would be a better place but the archive link [2] gives a > 404 so I'm not really sure if that list is still alive. > > [1] https://bugs.ruby-lang.org/issues/18915 > [2] http://lists.ruby-lang.org/pipermail/ruby-core/ > > Unsubscribe: <mailto:ruby-talk-request@ruby-lang.org?subject=unsubscribe> > <http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-talk>

1 0

[ruby-talk:444030] [ANN] Nokogiri security update v1.13.10
by Mike Dalessio 07 Dec '22

07 Dec '22

Nokogiri v1.13.10 has been released with a security update for CRuby users. The release notes[1] are reproduced here for your convenience. [1]: https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.10 --- 1.13.10 / 2022-12-07Security - [CRuby] Address CVE-2022-23476, unchecked return value from xmlTextReaderExpand. See GHSA-qv4q-mr5r-qprj <https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-qv4q-mr5…> for more information. Improvements - [CRuby] XML::Reader#attribute_hash now returns nil on parse errors. This restores the behavior of #attributes from v1.13.7 and earlier. [ #2715 <https://github.com/sparklemotion/nokogiri/issues/2715>] ------------------------------ sha256 checksums: 777ce2e80f64772e91459b943e531dfef387e768f2255f9bc7a1655f254bbaa1 nokogiri-1.13.10-aarch64-linux.gem b432ff47c51386e07f7e275374fe031c1349e37eaef2216759063bc5fa5624aa nokogiri-1.13.10-arm64-darwin.gem 73ac581ddcb680a912e92da928ffdbac7b36afd3368418f2cee861b96e8c830b nokogiri-1.13.10-java.gem 916aa17e624611dddbf2976ecce1b4a80633c6378f8465cff0efab022ebc2900 nokogiri-1.13.10-x64-mingw-ucrt.gem 0f85a1ad8c2b02c166a6637237133505b71a05f1bb41b91447005449769bced0 nokogiri-1.13.10-x64-mingw32.gem 91fa3a8724a1ce20fccbd718dafd9acbde099258183ac486992a61b00bb17020 nokogiri-1.13.10-x86-linux.gem d6663f5900ccd8f72d43660d7f082565b7ffcaade0b9a59a74b3ef8791034168 nokogiri-1.13.10-x86-mingw32.gem 81755fc4b8130ef9678c76a2e5af3db7a0a6664b3cba7d9fe8ef75e7d979e91b nokogiri-1.13.10-x86_64-darwin.gem 51d5246705dedad0a09b374d09cc193e7383a5dd32136a690a3cd56e95adf0a3 nokogiri-1.13.10-x86_64-linux.gem d3ee00f26c151763da1691c7fc6871ddd03e532f74f85101f5acedc2d099e958 nokogiri-1.13.10.gem

1 0

[ruby-talk:444029] Rroonga 12.1.0 has been released!
by 橋田貴志 06 Dec '22

06 Dec '22

Hi, Rroonga 12.1.0 has been released! Rroonga is the Ruby bindings for Groonga. https://ranguba.org/#about-rroonga Changes ------- Here are changes since 12.0.8: https://ranguba.org/rroonga/en/file.news.html#12-1-0 * Fixed a bug that Groonga::PatriciaTrie#scan returned wrong offsets if there are many hit words. About Rroonga ------------- Here are two important things in Rroonga. 1. Providing *Ruby-ish* API to use Groonga. 2. Providing *fast* operations like Groonga. They mean that Rroonga provides easy to use API without decreasing Groonga's speed. Install ------- % gem install rroonga Tutorial -------- There are a tutorial that uses irb: https://ranguba.org/rroonga/en/file.tutorial.html If you are a beginner, please try it. Thanks,

1 0

[ruby-talk:444028] [ANN] minitest-stackprofit 1.0.1 Released
by Ryan Davis 05 Dec '22

05 Dec '22

minitest-stackprofit version 1.0.1 has been released! * home: <https://github.com/seattlerb/minitest-stackprofit> * rdoc: <http://docs.seattlerb.org/minitest-stackprofit> A minitest plugin that runs your tests and outputs a stackprof profile. This lets you quickly and easily determine the bottlenecks in your code under test! * Make it right. (test first) * Make it work. (get to green) * Make it fast. (optimize) Changes: ### 1.0.1 / 2022-12-05 * 1 bug fix: * Fixed plugin method names. (lcreid)

1 0

[ruby-talk:444027] [ANN] debride 1.10.1 Released
by Ryan Davis 03 Dec '22

03 Dec '22

debride version 1.10.1 has been released! * home: <https://github.com/seattlerb/debride> * rdoc: <http://docs.seattlerb.org/debride> Analyze code for potentially uncalled / dead methods, now with auto-removal. Changes: ### 1.10.1 / 2022-12-03 * 4 minor enhancements: * Added --minimum <Nloc> flag to filter out smaller suspects. * Added line count to suspects in report and total line count to end of report. * Added processing of `delegate xs to: target` as a call to target. * Added processing of rails deliver_X -> X calls. * 3 bug fixes: * Fixed processing of colon2 (X::Y::Z) names. * Fixed processing of var splatted attr_* methods. * Possibly fixed conflation between rails route scopes and model scopes.

1 0

[ruby-talk:444026] [ANN] debride 1.10.0 Released
by Ryan Davis 03 Dec '22

03 Dec '22

debride version 1.10.0 has been released! * home: <https://github.com/seattlerb/debride> * rdoc: <http://docs.seattlerb.org/debride> Analyze code for potentially uncalled / dead methods, now with auto-removal. Changes: ### 1.10.0 / YYYY-MM-DD * 4 minor enhancements: * Added --minimum <Nloc> flag to filter out smaller suspects. * Added line count to suspects in report and total line count to end of report. * Added processing of `delegate xs to: target` as a call to target. * Added processing of rails deliver_X -> X calls. * 3 bug fixes: * Fixed processing of colon2 (X::Y::Z) names. * Fixed processing of var splatted attr_* methods. * Possibly fixed conflation between rails route scopes and model scopes.

1 0

[ruby-talk:444025] [ANN] ruby2c 1.1.1 Released
by Ryan Davis 03 Dec '22

03 Dec '22

ruby2c version 1.1.1 has been released! * home: <https://github.com/seattlerb/ruby_to_c> * rdoc: <http://ruby2c.rubyforge.org/ruby2c> ruby_to_c translates a static ruby subset to C. Hopefully it works. NOTE ! NOTE ! NOTE ! NOTE ! NOTE ! NOTE ! NOTE ! NOTE ! NOTE THIS IS BETA SOFTWARE! NOTE ! NOTE ! NOTE ! NOTE ! NOTE ! NOTE ! NOTE ! NOTE ! NOTE RubyToC has the following modules: * Rewriter - massages the sexp into a more consistent form. * TypeChecker - type inferencer for the above sexps. * RubyToRubyC - converts a ruby (subset) sexp to ruby interals C. * RubyToAnsiC - converts a ruby (subset) sexp to ANSI C. Changes: ### 1.1.1 / 2022-12-03 * 2 bug fixes: * Added support for 3.0 parser * Used ParseTreeTestCase#TEST_SUFFIX to make this always work when new versions added.

1 0

[ruby-talk:444024] [ANN] ruby_parser 3.19.2 Released
by Ryan Davis 03 Dec '22

03 Dec '22

ruby_parser version 3.19.2 has been released! * home: <https://github.com/seattlerb/ruby_parser> * bugs: <https://github.com/seattlerb/ruby_parser/issues> * rdoc: <http://docs.seattlerb.org/ruby_parser> ruby_parser (RP) is a ruby parser written in pure ruby (utilizing racc--which does by default use a C extension). It outputs s-expressions which can be manipulated and converted back to ruby via the ruby2ruby gem. As an example: def conditional1 arg1 return 1 if arg1 == 0 return 0 end becomes: s(:defn, :conditional1, s(:args, :arg1), s(:if, s(:call, s(:lvar, :arg1), :==, s(:lit, 0)), s(:return, s(:lit, 1)), nil), s(:return, s(:lit, 0))) Tested against 801,039 files from the latest of all rubygems (as of 2013-05): * 1.8 parser is at 99.9739% accuracy, 3.651 sigma * 1.9 parser is at 99.9940% accuracy, 4.013 sigma * 2.0 parser is at 99.9939% accuracy, 4.008 sigma * 2.6 parser is at 99.9972% accuracy, 4.191 sigma * 3.0 parser has a 100% parse rate. * Tested against 2,672,412 unique ruby files across 167k gems. * As do all the others now, basically. Changes: ### 3.19.2 / 2022-12-03 * 5 bug fixes: * Fixed bug parsing array patterns using %w, %i, etc. * Fixed dedenting when heredoc has only empty line and interpolation. (mvz) * Fixed dsym unescaping. (mvz) * Fixed vars in pattern matching that should be lasgn, not lvar. * find_pat mid-patterns are now splatted inline, not wrapped in an array_pat.

1 0

[ruby-talk:444013] RubyConf 2022 - Building Native GUI Apps in Ruby
by Andy Maleh 03 Dec '22

03 Dec '22

RubyConf 2022 is next week and I am giving a talk titled "Building Native GUI Apps in Ruby". Come see me present on Thursday, Dec 1, 2022 at 1:45pm in the Lanier Grand BR - G room at the Hilton Americas - Houston, Texas, USA. [image: glimmer-dsl-libui-mac-button-counter.png] https://andymaleh.blogspot.com/2022/09/rubyconf-2022-building-native-gui-ap… -- Andy Maleh LinkedIn: https://www.linkedin.com/in/andymaleh <https://www.linkedin.com/in/andymaleh> Blog: http://andymaleh.blogspot.com GitHub: http://www.github.com/AndyObtiva Twitter: @AndyObtiva <https://twitter.com/AndyObtiva>

2 2