| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
databases/ruby-activerecord32: security update
devel/ruby-activemodel32: security update
devel/ruby-activesupport32: security update
devel/ruby-railties32: security update
mail/ruby-actionmailer32: security update
www/ruby-actionpack32: security update
www/ruby-activeresource32: security update
Revisions pulled up:
- databases/ruby-activerecord32/distinfo 1.17
- devel/ruby-activemodel32/distinfo 1.17
- devel/ruby-activesupport32/distinfo 1.17
- devel/ruby-railties32/distinfo 1.17
- lang/ruby/rails.mk 1.49
- mail/ruby-actionmailer32/distinfo 1.17
- www/ruby-actionpack32/distinfo 1.17
- www/ruby-activeresource32/distinfo 1.17
- www/ruby-rails32/distinfo 1.17
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Jul 6 07:36:35 UTC 2014
Modified Files:
pkgsrc/lang/ruby: rails.mk
Log Message:
Start update of Ruby on Rails to 3.2.19.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Jul 6 07:38:16 UTC 2014
Modified Files:
pkgsrc/devel/ruby-activesupport32: distinfo
Log Message:
Update ruby-activesupport32 to 3.2.19.
## Rails 3.2.19 (Jul 2, 2014) ##
* Make sure Active Support configurations are applied correctly.
Before this change configuration set using `config.active_support`
would not be set.
*Rafael Mendon=E7a Fran=E7a*
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Jul 6 07:38:50 UTC 2014
Modified Files:
pkgsrc/devel/ruby-activemodel32: distinfo
Log Message:
Update ruby-activemodel32 to 3.2.19.
## Rails 3.2.19 (Jul 2, 2014) ##
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Jul 6 07:40:52 UTC 2014
Modified Files:
pkgsrc/www/ruby-activeresource32: distinfo
Log Message:
Update ruby-activeresource32 to 3.2.19.
## Rails 3.2.19 (Jul 2, 2014) ##
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Jul 6 07:41:43 UTC 2014
Modified Files:
pkgsrc/www/ruby-actionpack32: distinfo
Log Message:
Update ruby-actionpack32 to 3.2.19.
## Rails 3.2.19 (Jul 2, 2014) ##
* Fix regression when using `ActionView::Helpers::TranslationHelper#t=
ranslate` with
`options[:raise]`.
This regression was introduced at ec16ba75a5493b9da972eea08bae630eb=
a35b62f.
*Shota Fukumori (sora_h)*
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Jul 6 07:42:15 UTC 2014
Modified Files:
pkgsrc/mail/ruby-actionmailer32: distinfo
Log Message:
Update ruby-actionmailer32 to 3.2.19.
## Rails 3.2.19 (Jul 2, 2014) ##
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Jul 6 07:42:48 UTC 2014
Modified Files:
pkgsrc/devel/ruby-railties32: distinfo
Log Message:
Update ruby-railties32 to 3.2.19.
## Rails 3.2.19 (Jul 2, 2014) ##
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Jul 6 07:43:50 UTC 2014
Modified Files:
pkgsrc/www/ruby-rails32: distinfo
Log Message:
Update ruby-rails32 to 3.2.19.
This is meta package like ruby gem.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Jul 6 07:40:12 UTC 2014
Modified Files:
pkgsrc/databases/ruby-activerecord32: distinfo
Log Message:
Update ruby-activerecord32 to 3.2.19, security fix.
## Rails 3.2.19 (Jul 2, 2014) ##
* Fix SQL Injection Vulnerability in 'bitstring' quoting.
Fixes CVE-2014-3482.
*Rafael Mendonḋa Franḋa*
|
|
No change except version number.
|
|
Update of version number only.
|
|
Only version number has updated.
|
|
## Rails 3.2.15 (Oct 16, 2013) ##
* When calling the method .find_or_initialize_by_* from a collection_proxy it
should set the inverse_of relation even when the entry was found on the db.
*arthurnn*
* Callbacks on has_many should access the in memory parent if a inverse_of is
set.
*arthurnn*
* Fix `FinderMethods#last` unscoped primary key.
Fixes #11917.
*Eugene Kalenkovich*
* Load fixtures from linked folders.
*Kassio Borges*
* When using optimistic locking, `update` was not passing the column to
`quote_value` to allow the connection adapter to properly determine how to
quote the value. This was affecting certain databases that use specific
colmn types.
Fixes: #6763
*Alfred Wong*
|
|
## Rails 3.2.14 (Jul 22, 2013) ##
* Do not re-create destroyed association when saving the parent object.
Fixes #11450. *Paul Nikitochkin*
* Do not shallow the original exception in `exec_cache` on PostgreSQL adapter.
Fixes #11260. *Rafael Mendona Frana*
* Fix `ActiveRecord::Store` incorrectly tracking changes of its attributes.
Fixes #10373. *Janko Marohni*
* Fix a bug that prevented the use of the default STI inheritance column
(ActiveRecord::Base.inheritance_column = 'some_column'.)
*chapmajs + Takehiro Adachi*
* Fix mysql2 adapter raises the correct exception when executing a query on a
closed connection. *Yves Senn*
* Fixes bug where `Company.new.contract_ids` would incorrectly load
all non-associated contracts.
Example:
company = Company.new # Company has many :contracts
# before
company.contract_ids # => SELECT ... WHERE `contracts`.`company_id` IS NULL
# after
company.contract_ids # => []
*Jared Armstrong*
* Fix the `:primary_key` option for `has_many` associations.
Fixes #10693. *Yves Senn*
* fixes bug introduced by #3329. Now, when autosaving associations,
deletions happen before inserts and saves. This prevents a 'duplicate
unique value' database error that would occur if a record being created had
the same value on a unique indexed field as that of a record being
destroyed. Backport of #10417
*Johnny Holton*
* Fix that under some conditions, Active Record could produce invalid SQL of
the sort: "SELECT DISTINCT DISTINCT". Backport of #6792. *Ben Woosley*
* Require `ActiveRecord::Base` in railtie hooks for rake_tasks, console and
runner to avoid circular constant loading issues. Backport #7695.
Fixes #7683 and #882
*Ben Holley*
* Maintain context for joins within ActiveRecord::Relation merges.
Backport #10164. *Neeraj Singh + Andrew Horner*
* Make sure the `EXPLAIN` command is never triggered by a `select_db` call.
*Daniel Schierbeck*
* Revert changes on `pluck` that was ignoring the select clause when the
relation already has one. This caused a regression since it changed the
behavior in a stable release.
Fixes #9777.
*Rafael Mendona Frana*
* Confirm a record has not already been destroyed before decrementing
counter cache. *Ben Tucker*
* Default values for PostgreSQL bigint types now get parsed and dumped to the
schema correctly. Backport #10098. *Erik Peterson*
* Removed warning when `auto_explain_threshold_in_seconds` is set and the
connection adapter doesn't support explain.
This is causing a regression since the Active Record Railtie is trying to
connect to the development database in the application boot.
*Rafael Mendona Frana*
* Do not reset `inheritance_column` when it's set explicitly.
Backport of #5327. *kennyj + Fred Wu*
* Fix a problem wrong exception is occured
when raising no translatable exception in PostgreSQL. *kennyj*
* Resets the postgres search path in the structure.sql after the structure
is dumped in order to find schema_migrations table when multiples schemas
are used.
Fixes #9796.
*Juan M. Cuello + Dembskiy Alexander*
* Reload the association target if it's stale. `@stale_state` should be nil
when a model isn't saved.
Fixes #7526.
*Larry Lv*
* Don't read CSV files during execution of `db:fixtures:load`. CSV support for
fixtures was removed some time ago but the task was still loading them, even
though later the code was looking for the related yaml file instead.
*kennyj*
|
|
This is part of security update of Ruby on Rails 3.2.13 and changes are
too many to write here. Please refer CHANGELOG.md.
|
|
## Rails 3.2.12 (unreleased) ##
* Quote numeric values being compared to non-numeric columns. Otherwise,
in some database, the string column values will be coerced to a numeric
allowing 0, 0.0 or false to match any string starting with a non-digit.
Example:
App.where(apikey: 0) # => SELECT * FROM users WHERE apikey = '0'
*Dylan Smith*
|
|
## Rails 3.2.11 ##
* Fix querying with an empty hash *Damien Mathieu* [CVE-2013-0155]
|
|
## Rails 3.2.10 ##
* CVE-2012-5664 options hashes should only be extracted if there are extra
parameters.
|
|
## Rails 3.2.9 (unreleased)
* Fix issue with collection associations calling first(n)/last(n) and attempting
to set the inverse association when `:inverse_of` was used. Fixes #8087.
*Carlos Antonio da Silva*
* Fix bug when Column is trying to type cast boolean values to integer.
Fixes #8067.
*Rafael Mendona Frana*
* Fix bug where `rake db:test:prepare` tries to load the structure.sql into development database.
Fixes #8032.
*Grace Liu + Rafael Mendona Frana*
* Fixed support for `DATABASE_URL` environment variable for rake db tasks. *Grace Liu*
* Fix bug where `update_columns` and `update_column` would not let you update the primary key column.
*Henrik Nyh*
* Decode URI encoded attributes on database connection URLs.
*Shawn Veader*
* Fix AR#dup to nullify the validation errors in the dup'ed object. Previously the original
and the dup'ed object shared the same errors.
*Christian Seiler*
* Synchronize around deleting from the reserved connections hash.
Fixes #7955
* PostgreSQL adapter correctly fetches default values when using
multiple schemas and domains in a db. Fixes #7914
*Arturo Pie*
* Fix deprecation notice when loading a collection association that
selects columns from other tables, if a new record was previously
built using that association.
*Ernie Miller*
* The postgres adapter now supports tables with capital letters.
Fix #5920
*Yves Senn*
* `CollectionAssociation#count` returns `0` without querying if the
parent record is not persisted.
Before:
person.pets.count
# SELECT COUNT(*) FROM "pets" WHERE "pets"."person_id" IS NULL
# => 0
After:
person.pets.count
# fires without sql query
# => 0
*Francesco Rodriguez*
* Fix `reset_counters` crashing on `has_many :through` associations.
Fix #7822.
*lulalala*
* ConnectionPool recognizes checkout_timeout spec key as taking
precedence over legacy wait_timeout spec key, can be used to avoid
conflict with mysql2 use of wait_timeout. Closes #7684.
*jrochkind*
* Rename field_changed? to _field_changed? so that users can create a field named field
*Akira Matsuda*, backported by *Steve Klabnik*
* Fix creation of through association models when using `collection=[]`
on a `has_many :through` association from an unsaved model.
Fix #7661.
*Ernie Miller*
* Explain only normal CRUD sql (select / update / insert / delete).
Fix problem that explains unexplainable sql. Closes #7544 #6458.
*kennyj*
* Backport test coverage to ensure that PostgreSQL auto-reconnect functionality
remains healthy.
*Steve Jorgensen*
* Use config['encoding'] instead of config['charset'] when executing
databases.rake in the mysql/mysql2. A correct option for a database.yml
is 'encoding'.
*kennyj*
* Fix ConnectionAdapters::Column.type_cast_code integer conversion,
to always convert values to integer calling #to_i. Fixes #7509.
*Thiago Pradi*
* Fix time column type casting for invalid time string values to correctly return nil.
*Adam Meehan*
* Fix `becomes` when using a configured `inheritance_column`.
*Yves Senn*
* Fix `reset_counters` when there are multiple `belongs_to` association with the
same foreign key and one of them have a counter cache.
Fixes #5200.
*Dave Desrochers*
* Round usec when comparing timestamp attributes in the dirty tracking.
Fixes #6975.
*kennyj*
* Use inversed parent for first and last child of has_many association.
*Ravil Bayramgalin*
* Fix Column.microseconds and Column.fast_string_to_date to avoid converting
timestamp seconds to a float, since it occasionally results in inaccuracies
with microsecond-precision times. Fixes #7352.
*Ari Pollak*
* Fix `increment!`, `decrement!`, `toggle!` that was skipping callbacks.
Fixes #7306.
*Rafael Mendona Frana*
* Fix AR#create to return an unsaved record when AR::RecordInvalid is
raised. Fixes #3217.
*Dave Yeu*
* Remove unnecessary transaction when assigning has_one associations with a nil or equal value.
Fix #7191.
*kennyj*
* Allow store to work with an empty column.
Fix #4840.
*Jeremy Walker*
* Remove prepared statement from system query in postgresql adapter.
Fix #5872.
*Ivan Evtuhovich*
* Make sure `:environment` task is executed before `db:schema:load` or `db:structure:load`
Fixes #4772.
*Seamus Abshere*
|
|
## Rails 3.2.8 (Aug 9, 2012) ##
* Do not consider the numeric attribute as changed if the old value is zero
and the new value is not a string.
Fixes #7237.
*Rafael Mendonça França*
* Removes the deprecation of `update_attribute`. *fxn*
* Reverted the deprecation of `composed_of`. *Rafael Mendonça França*
* Reverted the deprecation of `*_sql` association options. They will be
deprecated in 4.0 instead. *Jon Leighton*
* Do not eager load AR session store. ActiveRecord::SessionStore depends on
the abstract store in Action Pack. Eager loading this class would break
client code that eager loads Active Record standalone.
Fixes #7160
*Xavier Noria*
* Do not set RAILS_ENV to "development" when using `db:test:prepare` and
related rake tasks.
This was causing the truncation of the development database data when using
RSpec.
Fixes #7175.
*Rafael Mendonça França*
|
|
## Rails 3.2.7 (unreleased) ##
* `:finder_sql` and `:counter_sql` options on collection associations
are deprecated. Please transition to using scopes.
*Jon Leighton*
* `:insert_sql` and `:delete_sql` options on `has_and_belongs_to_many`
associations are deprecated. Please transition to using `has_many
:through`
*Jon Leighton*
* `composed_of` has been deprecated. You'll have to write your own accessor
and mutator methods if you'd like to use value objects to represent some
portion of your models.
*Steve Klabnik*
* `update_attribute` has been deprecated. Use `update_column` if
you want to bypass mass-assignment protection, validations, callbacks,
and touching of updated_at. Otherwise please use `update_attributes`.
*Steve Klabnik*
|
|
|
|
## Rails 3.2.6 (Jun 12, 2012) ##
* protect against the nesting of hashes changing the
table context in the next call to build_from_hash. This fix
covers this case as well.
CVE-2012-2695
* Revert earlier 'perf fix' (see 3.2.4 changelog / GH #6289). This
change introduced a regression (GH #6609). assoc.clear and
assoc.delete_all have loaded the association before doing the delete
since at least Rails 2.3. Doing the delete without loading the
records means that the `before_remove` and `after_remove` callbacks do
not get invoked. Therefore, this change was less a fix a more an
optimisation, which should only have gone into master.
*Jon Leighton*
|
|
3.2.4 had some regression related problem.
## Rails 3.2.4 (May 31, 2012) ##
* Perf fix: Don't load the records when doing assoc.delete_all.
GH #6289. *Jon Leighton*
* Association preloading shouldn't be affected by the current scoping.
This could cause infinite recursion and potentially other problems.
See GH #5667. *Jon Leighton*
* Datetime attributes are forced to be changed. GH #3965
* Fix attribute casting. GH #5549
* Fix #5667. Preloading should ignore scoping.
* Predicate builder should not recurse for determining where columns.
Thanks to Ben Murphy for reporting this! CVE-2012-2661
|
|
## Rails 3.2.3 (unreleased) ##
* Added find_or_create_by_{attribute}! dynamic method. *Andrew White*
* Whitelist all attribute assignment by default. Change the default for newly generated applications to whitelist all attribute assignment. Also update the generated model classes so users are reminded of the importance of attr_accessible. *NZKoz*
* Update ActiveRecord::AttributeMethods#attribute_present? to return false for empty strings. *Jacobkg*
* Fix associations when using per class databases. *larskanis*
* Revert setting NOT NULL constraints in add_timestamps *fxn*
* Fix mysql to use proper text types. Fixes #3931. *kennyj*
* Fix #5069 - Protect foreign key from mass assignment through association builder. *byroot*
|
|
## Rails 3.2.1 (January 26, 2012) ##
* The threshold for auto EXPLAIN is ignored if there's no logger. *fxn*
* Call `to_s` on the value passed to `table_name=`, in particular symbols
are supported (regression). *Sergey Nartimov*
* Fix possible race condition when two threads try to define attribute
methods for the same class. *Jon Leighton*
## Rails 3.2.0 (January 20, 2012) ##
* Added a `with_lock` method to ActiveRecord objects, which starts
a transaction, locks the object (pessimistically) and yields to the block.
The method takes one (optional) parameter and passes it to `lock!`.
Before:
class Order < ActiveRecord::Base
def cancel!
transaction do
lock!
# ... cancelling logic
end
end
end
After:
class Order < ActiveRecord::Base
def cancel!
with_lock do
# ... cancelling logic
end
end
end
*Olek Janiszewski*
* 'on' and 'ON' boolean columns values are type casted to true
*Santiago Pastorino*
* Added ability to run migrations only for given scope, which allows
to run migrations only from one engine (for example to revert changes
from engine that you want to remove).
Example:
rake db:migrate SCOPE=blog
*Piotr Sarnacki*
* Migrations copied from engines are now scoped with engine's name,
for example 01_create_posts.blog.rb. *Piotr Sarnacki*
* Implements `AR::Base.silence_auto_explain`. This method allows the user to
selectively disable automatic EXPLAINs within a block. *fxn*
* Implements automatic EXPLAIN logging for slow queries.
A new configuration parameter `config.active_record.auto_explain_threshold_in_seconds`
determines what's to be considered a slow query. Setting that to `nil` disables
this feature. Defaults are 0.5 in development mode, and `nil` in test and production
modes.
As of this writing there's support for SQLite, MySQL (mysql2 adapter), and
PostgreSQL.
*fxn*
* Implemented ActiveRecord::Relation#pluck method
Method returns Array of column value from table under ActiveRecord model
Client.pluck(:id)
*Bogdan Gusiev*
* Automatic closure of connections in threads is deprecated. For example
the following code is deprecated:
Thread.new { Post.find(1) }.join
It should be changed to close the database connection at the end of
the thread:
Thread.new {
Post.find(1)
Post.connection.close
}.join
Only people who spawn threads in their application code need to worry
about this change.
* Deprecated:
* `set_table_name`
* `set_inheritance_column`
* `set_sequence_name`
* `set_primary_key`
* `set_locking_column`
Use an assignment method instead. For example, instead of `set_table_name`, use `self.table_name=`:
class Project < ActiveRecord::Base
self.table_name = "project"
end
Or define your own `self.table_name` method:
class Post < ActiveRecord::Base
def self.table_name
"special_" + super
end
end
Post.table_name # => "special_posts"
*Jon Leighton*
* Generated association methods are created within a separate module to allow overriding and
composition using `super`. For a class named `MyModel`, the module is named
`MyModel::GeneratedFeatureMethods`. It is included into the model class immediately after
the `generated_attributes_methods` module defined in ActiveModel, so association methods
override attribute methods of the same name. *Josh Susser*
* Implemented ActiveRecord::Relation#explain. *fxn*
* Add ActiveRecord::Relation#uniq for generating unique queries.
Before:
Client.select('DISTINCT name')
After:
Client.select(:name).uniq
This also allows you to revert the unqueness in a relation:
Client.select(:name).uniq.uniq(false)
*Jon Leighton*
* Support index sort order in sqlite, mysql and postgres adapters. *Vlad Jebelev*
* Allow the :class_name option for associations to take a symbol (:Client) in addition to
a string ('Client').
This is to avoid confusing newbies, and to be consistent with the fact that other options
like :foreign_key already allow a symbol or a string.
*Jon Leighton*
* In development mode the db:drop task also drops the test database. For symmetry with
the db:create task. *Dmitriy Kiriyenko*
* Added ActiveRecord::Base.store for declaring simple single-column key/value stores *DHH*
class User < ActiveRecord::Base
store :settings, accessors: [ :color, :homepage ]
end
u = User.new(color: 'black', homepage: '37signals.com')
u.color # Accessor stored attribute
u.settings[:country] = 'Denmark' # Any attribute, even if not specified with an accessor
* MySQL: case-insensitive uniqueness validation avoids calling LOWER when
the column already uses a case-insensitive collation. Fixes #561.
*Joseph Palermo*
* Transactional fixtures enlist all active database connections. You can test
models on different connections without disabling transactional fixtures.
*Jeremy Kemper*
* Add first_or_create, first_or_create!, first_or_initialize methods to Active Record. This is a
better approach over the old find_or_create_by dynamic methods because it's clearer which
arguments are used to find the record and which are used to create it:
User.where(:first_name => "Scarlett").first_or_create!(:last_name => "Johansson")
*Andrés Mejía*
* Fix nested attributes bug where _destroy parameter is taken into account
during :reject_if => :all_blank (fixes #2937)
*Aaron Christy*
* Add ActiveSupport::Cache::NullStore for use in development and testing.
*Brian Durand*
|
