[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=trunk 2022-12-04T16:26:47Z 2022-12-04T16:26:47Z taca taca@pkgsrc.org 2022-12-04T16:26:47Z urn:sha1:f8c501425ef9577314df7b6b33c572ad0e68b761 6.0.0 (2022-10-14) Breaking Changes * Dropping Ruby 2.2 and 2.3 support (now 2.4+) (#2919) * Remote_addr functionality has changed (#2652, #2653) * No longer supporting Java 1.7 or below (JRuby 9.1 was the last release to support this) (#2849) * Remove nakayoshi GC (#2933, #2925) * wait_for_less_busy_worker is now default on (#2940) * Prefix all environment variables with PUMA_ (#2924, #2853) * Removed some constants (#2957, #2958, #2959, #2960) * The following classes are now part of Puma's private API: Client, Cluster::Worker, Cluster::Worker, HandleRequest. (#2988) * Configuration constants like DefaultRackup removed (#2928) * Extracted LogWriter from Events (#2798) * Only accept the standard 8 HTTP methods, others rejected with 501. (#2932) Features * Increase throughput on large (100kb+) response bodies by 3-10x (#2896, #2892) * Increase throughput on file responses (#2923) * Add support for streaming bodies in Rack. (#2740) * Allow OpenSSL session reuse via a 'reuse' ssl_bind method or bind string query parameter (#2845) * Allow run_hooks to pass a hash to blocks for use later (#2917, #2915) * Allow using preload_app! with fork_worker (#2907) * Support request_body_wait metric with higher precision (#2953) * Allow header values to be arrays (Rack 3) (#2936, #2931) * Export Puma/Ruby versions in /stats (#2875) * Allow configuring request uri max length & request path max length (#2840) * Add a couple of public accessors (#2774) * Log entire backtrace when worker start fails (#2891) * [jruby] Enable TLSv1.3 support (#2886) * [jruby] support setting TLS protocols + rename ssl_cipher_list (#2899) * [jruby] Support a truststore option (#2849, #2904, #2884) Bugfixes * Load the configuration before passing it to the binder (#2897) * Do not raise error raised on HTTP methods we don't recognize or support, like CONNECT (#2932, #1441) * Fixed a memory leak when creating a new SSL listener (#2956) Refactor * log_writer.rb - add internal_write method (#2888) * Extract prune_bundler code into it's own class. (#2797) * Refactor Launcher#run to increase readability (no logic change) (#2795) * Ruby 3.2 will have native IO#wait_* methods, don't require io/wait (#2903) * Various internal API refactorings (#2942, #2921, #2922, #2955) 2022-08-31T15:46:43Z taca taca@pkgsrc.org 2022-08-31T15:46:43Z urn:sha1:423ef4ae4aba666161e524e89399e6f9fa8214d8 5.6.5 (2022-08-23) Bugfixes * NullIO#closed should return false ([#2883]) * Puma::ControlCLI - allow refork command to be sent as a request ([#2868], [#2866]) * [jruby] Fix TLS verification hang ([#2890], [#2729]) * extconf.rb - don't use pkg_config('openssl') if '--with-openssl-dir' is used ([#2885], [#2839]) * MiniSSL - detect SSL_CTX_set_dh_auto ([#2864], [#2863]) * Fix rack.after_reply exceptions breaking connections ([#2861], [#2856]) * Escape SSL cert and filenames ([#2855]) * Fail hard if SSL certs or keys are invalid ([#2848]) * Fail hard if SSL certs or keys cannot be read by user ([#2847]) * Fix build with Opaque DH in LibreSSL 3.5. ([#2838]) * Pre-existing socket file removed when TERM is issued after USR2 (if puma is running in cluster mode) ([#2817]) * Fix Puma::StateFile#load incompatibility ([#2810]) 2022-04-24T14:43:10Z taca taca@pkgsrc.org 2022-04-24T14:43:10Z urn:sha1:eafd0d7bc0f14f846d3174e58d2d734656e57e86 5.6.4 (2022-03-30) Security * Close several HTTP Request Smuggling exploits (CVE-2022-24790) 5.6.2 (2022-02-11) Bugfix/Security * Response body will always be closed. (GHSA-rmj8-8hhh-gv5h, related to #2809) 5.6.1 (2022-01-26) Bugfixes * Reverted a commit which appeared to be causing occasional blank header values (#2809) 5.6.0 (2022-01-25) Features * Support localhost integration in ssl_bind (#2764, #2708) * Allow backlog parameter to be set with ssl_bind DSL (#2780) * Remove yaml (psych) requirement in StateFile (#2784) * Allow culling of oldest workers, previously was only youngest (#2773, #2794) * Add worker_check_interval configuration option (#2759) * Always send lowlevel_error response to client (#2731, #2341) * Support for cert_pem and key_pem with ssl_bind DSL (#2728) Bugfixes * Keep thread names under 15 characters, prevents breakage on some OSes (#2733) * Fix two 'old-style-definition' compile warning (#2807, #2806) * Log environment correctly using option value (#2799) * Fix warning from Ruby master (will be 3.2.0) (#2785) * extconf.rb - fix openssl with old Windows builds (#2757) * server.rb - rescue handling (Errno::EBADF) for @notify.close (#2745) Refactor * server.rb - refactor code using @options[:remote_address] (#2742) * [jruby] a couple refactorings - avoid copy-ing bytes (#2730) 2021-12-11T15:38:56Z taca taca@pkgsrc.org 2021-12-11T15:38:56Z urn:sha1:f7564b4a9988cea5b8b0ca717754d7da43e96fa0 5.5.2 (2021-10-12) Bugfixes * Allow UTF-8 in HTTP header values 5.5.1 (2021-10-12) Feature (added as mistake - we don't normally do this on bugfix releases, sorry!) * Allow setting APP_ENV in preference to RACK_ENV or RAILS_ENV (#2702) Security * Do not allow LF as a line ending in a header (CVE-2021-41136) 5.5.0 (2021-09-19) Features * Automatic SSL certificate provisioning for localhost, via localhost gem (#2610, #2257) * add support for the PROXY protocol (v1 only) (#2654, #2651) * Add a semantic CLI option for no config file (#2689) Bugfixes * More elaborate exception handling - lets some dead pumas die. (#2700, #2699) * allow multiple after_worker_fork hooks (#2690) * Preserve BUNDLE_APP_CONFIG on worker fork (#2688, #2687) Performance * Fix performance of server-side SSL connection close. (#2675) 2021-10-26T11:29:14Z nia nia@pkgsrc.org 2021-10-26T11:29:14Z urn:sha1:a88baee537adeb6ed56fb33e935f06be82d128d8 All checksums have been double-checked against existing RMD160 and SHA512 hashes Not committed (merge conflicts): www/nghttp2/distinfo Unfetchable distfiles (almost certainly fetched conditionally...): ./www/nginx-devel/distinfo array-var-nginx-module-0.05.tar.gz ./www/nginx-devel/distinfo echo-nginx-module-0.62.tar.gz ./www/nginx-devel/distinfo encrypted-session-nginx-module-0.08.tar.gz ./www/nginx-devel/distinfo form-input-nginx-module-0.12.tar.gz ./www/nginx-devel/distinfo headers-more-nginx-module-0.33.tar.gz ./www/nginx-devel/distinfo lua-nginx-module-0.10.19.tar.gz ./www/nginx-devel/distinfo naxsi-1.3.tar.gz ./www/nginx-devel/distinfo nginx-dav-ext-module-3.0.0.tar.gz ./www/nginx-devel/distinfo nginx-rtmp-module-1.2.2.tar.gz ./www/nginx-devel/distinfo nginx_http_push_module-1.2.10.tar.gz ./www/nginx-devel/distinfo ngx_cache_purge-2.5.1.tar.gz ./www/nginx-devel/distinfo ngx_devel_kit-0.3.1.tar.gz ./www/nginx-devel/distinfo ngx_http_geoip2_module-3.3.tar.gz ./www/nginx-devel/distinfo njs-0.5.0.tar.gz ./www/nginx-devel/distinfo set-misc-nginx-module-0.32.tar.gz ./www/nginx/distinfo array-var-nginx-module-0.05.tar.gz ./www/nginx/distinfo echo-nginx-module-0.62.tar.gz ./www/nginx/distinfo encrypted-session-nginx-module-0.08.tar.gz ./www/nginx/distinfo form-input-nginx-module-0.12.tar.gz ./www/nginx/distinfo headers-more-nginx-module-0.33.tar.gz ./www/nginx/distinfo lua-nginx-module-0.10.19.tar.gz ./www/nginx/distinfo naxsi-1.3.tar.gz ./www/nginx/distinfo nginx-dav-ext-module-3.0.0.tar.gz ./www/nginx/distinfo nginx-rtmp-module-1.2.2.tar.gz ./www/nginx/distinfo nginx_http_push_module-1.2.10.tar.gz ./www/nginx/distinfo ngx_cache_purge-2.5.1.tar.gz ./www/nginx/distinfo ngx_devel_kit-0.3.1.tar.gz ./www/nginx/distinfo ngx_http_geoip2_module-3.3.tar.gz ./www/nginx/distinfo njs-0.5.0.tar.gz ./www/nginx/distinfo set-misc-nginx-module-0.32.tar.gz 2021-10-07T15:06:57Z nia nia@pkgsrc.org 2021-10-07T15:06:57Z urn:sha1:7311336acb262cd6e1f705bea0b0277e85bb155c 2021-09-19T17:56:43Z taca taca@pkgsrc.org 2021-09-19T17:56:43Z urn:sha1:8f313d089c41441824a881384930f4176f95ae36 5.4.0 (2021-07-28) Features * Better/expanded names for threadpool threads (#2657) * Allow pkg_config for OpenSSL (#2648, #1412) * Add rack_url_scheme to Puma::DSL, allows setting of rack.url_scheme header (#2586, #2569) Bugfixes * Binder#parse - allow for symlinked unix path, add create_activated_fds debug ENV (#2643, #2638) * Fix deprecation warning: minissl.c - Use Random.bytes if available (#2642) * Client certificates: set session id context while creating SSLContext (#2633) * Fix deadlock issue in thread pool (#2656) Refactor * Replace IO.select with IO#wait_* when checking a single IO (#2666) 2021-06-02T15:13:54Z taca taca@pkgsrc.org 2021-06-02T15:13:54Z urn:sha1:434ef992c85c38f2ef89c3ba3dd34a8ddcdaa117 5.3.2 (2021-05-21) Bugfixes * Gracefully handle Rack not accepting CLI options (#2630, #2626) * Fix sigterm misbehavior (#2629) * Improvements to keepalive-connection shedding (#2628) 5.3.1 (2021-05-11) Security * Close keepalive connections after the maximum number of fast inlined requests (CVE-2021-29509) (#2625) 5.3.0 (2021-05-07) Features * Add support for Linux's abstract sockets (#2564, #2526) * Add debug to worker timeout and startup (#2559, #2528) * Print warning when running one-worker cluster (#2565, #2534) * Don't close systemd activated socket on pumactl restart (#2563, #2504) Bugfixes * systemd - fix event firing (#2591, #2572) * Immediately unlink temporary files (#2613) * Improve parsing of HTTP_HOST header (#2605, #2584) * Handle fatal error that has no backtrace (#2607, #2552) * Fix timing out requests too early (#2606, #2574) * Handle segfault in Ruby 2.6.6 on thread-locals (#2567, #2566) * Server#closed_socket? - parameter may be a MiniSSL::Socket (#2596) * Define UNPACK_TCP_STATE_FROM_TCP_INFO in the right place (#2588, #2556) * request.rb - fix chunked assembly for ascii incompatible encodings, add test (#2585, #2583) Performance * Reset peerip only if remote_addr_header is set (#2609) * Reduce puma_parser struct size (#2590) Refactor * Refactor drain on shutdown (#2600) * Micro optimisations in wait_for_less_busy_worker feature (#2579) * Lots of test fixes 2021-03-07T10:12:15Z taca taca@pkgsrc.org 2021-03-07T10:12:15Z urn:sha1:db3e317a313c48415a6a905efb16b67ea50608d1 5.2.2 / 2021-02-22 Bugfixes * Add #flush and #sync methods to Puma::NullIO (#2553) * Restore sync=true on STDOUT and STDERR streams (# 2021-02-14T13:47:26Z taca taca@pkgsrc.org 2021-02-14T13:47:26Z urn:sha1:4e641dd2828bfec1ff3d1fb08a4ec5e89d170c40 5.2.1 (2021-02-05) Bugfixes * Fix TCP cork/uncork operations to work with ssl clients ([#2550]) * Require rack/common_logger explicitly if :verbose is true ([#2547]) * MiniSSL::Socket#write - use data.byteslice(wrote..-1) ([#2543]) * Set @env[CONTENT_LENGTH] value as string. ([#2549])