From 01d8f5eea9c097e88849050423531ecee3292441 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?David=20Rodr=C3=ADguez?= Date: Tue, 17 Dec 2024 19:39:59 +0100 Subject: [PATCH] Upgrade Bundler smoke test for Ruby 3.3.6 Regenerate three Bundler smoke tests These tests start failing with Ruby 3.3.6 because it provides a higher version of json by default than the recorded API responses, so that's what Dependabot resolves to. I believe the easiest way to fix that is to regenerate the tests with updated cache, so that the above situation no longer happens. --- tests/smoke-bundler-group-rules.yaml | 170 ++++++++--------------- tests/smoke-bundler-group-vendoring.yaml | 149 +++++++++++++------- tests/smoke-bundler.yaml | 18 +-- 3 files changed, 166 insertions(+), 171 deletions(-) diff --git a/tests/smoke-bundler-group-rules.yaml b/tests/smoke-bundler-group-rules.yaml index 868506dc..d72b1094 100644 --- a/tests/smoke-bundler-group-rules.yaml +++ b/tests/smoke-bundler-group-rules.yaml @@ -137,10 +137,10 @@ output: requirement: '>= 0' source: branch: null - ref: v3.0.9.1 + ref: v3.1.8 type: git url: git@github.com:rack/rack.git - version: cc95b0db910b58c0ebb7aafa957400218ffbf500 + version: 09f2f66ac1bb392ae58fd531dcb0acd01c9680be directory: /bundler updated-dependency-files: - content: | @@ -150,7 +150,7 @@ output: gem "rubocop", "1.59.0" gem "toml-rb", "2.2.0" - gem 'rack', git: 'git@github.com:rack/rack.git', tag: 'v3.0.9.1' + gem 'rack', git: 'git@github.com:rack/rack.git', tag: 'v3.1.8' content_encoding: utf-8 deleted: false directory: /bundler @@ -161,26 +161,26 @@ output: - content: | GIT remote: git@github.com:rack/rack.git - revision: cc95b0db910b58c0ebb7aafa957400218ffbf500 - tag: v3.0.9.1 + revision: 09f2f66ac1bb392ae58fd531dcb0acd01c9680be + tag: v3.1.8 specs: - rack (3.0.9.1) + rack (3.1.8) GEM remote: https://rubygems.org/ specs: ast (2.4.2) citrus (3.0.2) - json (2.7.1) + json (2.9.1) language_server-protocol (3.17.0.3) - parallel (1.24.0) - parser (3.3.0.5) + parallel (1.26.3) + parser (3.3.6.0) ast (~> 2.4.1) racc - racc (1.7.3) + racc (1.8.1) rainbow (3.1.1) - regexp_parser (2.9.0) - rexml (3.2.6) + regexp_parser (2.9.3) + rexml (3.4.0) rubocop (1.59.0) json (~> 2.3) language_server-protocol (>= 3.17.0) @@ -192,12 +192,12 @@ output: rubocop-ast (>= 1.30.0, < 2.0) ruby-progressbar (~> 1.7) unicode-display_width (>= 2.4.0, < 3.0) - rubocop-ast (1.30.0) - parser (>= 3.2.1.0) + rubocop-ast (1.37.0) + parser (>= 3.3.1.0) ruby-progressbar (1.13.0) toml-rb (2.2.0) citrus (~> 3.0, > 3.0) - unicode-display_width (2.5.0) + unicode-display_width (2.6.0) PLATFORMS ruby @@ -353,110 +353,54 @@ output:
- Updates `rack` from 2.1.4 to v3.0.9.1 -
- Release notes -

Sourced from rack's releases.

-
-

v3.0.9.1

-

What's Changed

-
    -
  • Fixed ReDoS in Accept header parsing [CVE-2024-26146]
    • -
  • Fixed ReDoS in Content Type header parsing [CVE-2024-25126]
    • -
  • Reject Range headers which are too large [CVE-2024-26141]
    • -
-

Full Changelog: https://github.com/rack/rack/compare/v3.0.9...v3.0.9.1

-

v3.0.9

-

What's Changed

-
    -
  • Fix content-length calcuation in Rack:Response#write #2150
    • -
-

Full Changelog: https://github.com/rack/rack/compare/v3.0.8...v3.0.9

-

v3.0.8

-

What's Changed

- -

New Contributors

- -

Full Changelog: https://github.com/rack/rack/compare/v3.0.7...v3.0.8

-

v3.0.7

-

What's Changed

- -

Full Changelog: https://github.com/rack/rack/compare/v3.0.6.1...v3.0.7

-

v3.0.6.1

-

No release notes provided.

-

v3.0.4.1

-

Full Changelog: https://github.com/rack/rack/compare/v3.0.4...v3.0.4.1

-

v3.0.4

-

Full Changelog: https://github.com/rack/rack/compare/v3.0.3...v3.0.4

-

v3.0.3

-

What's Changed

- -

Full Changelog: https://github.com/rack/rack/compare/v3.0.2...v3.0.3

-

v3.0.2

-

Full Changelog: https://github.com/rack/rack/compare/v3.0.1...v3.0.2

- -
-

... (truncated)

-
+ Updates `rack` from 2.1.4 to v3.1.8
Changelog

Sourced from rack's changelog.

-

Changelog

-

All notable changes to this project will be documented in this file. For info on how to format all future additions to this file please reference Keep A Changelog.

-

Unreleased

-

SPEC Changes

-
    -
  • rack.input is now optional. (#1997, [@​ioquatix])
    • -
  • Rack::Utils.escape_html is now delegated to CGI.escapeHTML. ' is escaped to [#39](https://github.com/rack/rack/issues/39); instead of #x27;. (decimal vs hexadecimal) (#2099, @​JunichiIto)
    • -
-

Changed

+

[3.1.8] - 2024-10-14

+

Fixed

    -
  • rack.input is now optional, and if missing, will raise an error. Use this to fail on multipart parsing a request without an input body. (#2018, [@​ioquatix])
    • -
  • Introduce module Rack::BadRequest which is included in multipart and query parser errors. (#2019, [@​ioquatix])
    • -
  • MIME type for JavaScript files (.js) changed from application/javascript to text/javascript (1bd0f15)
    • -
  • Add .mjs MIME type (#2057, [@​axilleas])
    • -
  • Update MIME types associated to .ttf, .woff, .woff2 and .otf extensions to use mondern font/* types. (#2065, [@​davidstosik])
    • -
  • set_cookie_header utility now supports the partitioned cookie attribute. This is required by Chrome in some embedded contexts. (#2131, [@​flavio-b])
    • -
  • Remove non-standard status codes 306, 509, & 510 and update descriptions for 413, 422, & 451. (#2137, [@​wtn])
    • -
  • Add fallback lookup and deprecation warning for obsolete status symbols. (#2137, [@​wtn])
    • +
  • Resolve deprecation warnings about uri DEFAULT_PARSER. (#2249, [@​earlopain])
-

[3.0.9] - 2024-01-31

+

[3.1.7] - 2024-07-11

+

Fixed

    -
  • Fix incorrect content-length header that was emitted when Rack::Response#write was used in some situations. (#2150, [@​mattbrictson])
    • +
  • Do not remove escaped opening/closing quotes for content-disposition filenames. (#2229, [@​jeremyevans])
    • +
  • Fix encoding setting for non-binary IO-like objects in MockRequest#env_for. (#2227, [@​jeremyevans])
    • +
  • Rack::Response should not generate invalid content-length header. (#2219, [@​ioquatix])
    • +
  • Allow empty PATH_INFO. (#2214, [@​ioquatix])
-

[3.0.8] - 2023-06-14

+

[3.1.6] - 2024-07-03

+

Fixed

-

[3.0.7] - 2023-03-16

+

[3.1.5] - 2024-07-02

+

Security

-

[3.0.6.1] - 2023-03-13

+

[3.1.4] - 2024-06-22

+

Fixed

    -
  • [CVE-2023-27539] Avoid ReDoS in header parsing
    • +
  • Fix Rack::Lint matching some paths incorrectly as authority form. (#2220, [@​ioquatix])
-

[3.0.6] - 2023-03-13

+

[3.1.3] - 2024-06-12

+

Fixed

-

[3.0.5] - 2023-03-13

+

[3.1.2] - 2024-06-11

-

[3.0.4.2] - 2023-03-02

+

[3.1.1] - 2024-06-11

    -
  • [CVE-2023-27530] Introduce multipart_total_part_limit to limit total parts
    • +
  • Oops! I shouldn't have shipped that
+

[3.1.0] - 2024-06-11

... (truncated)

@@ -464,17 +408,17 @@ output:
Commits
    -
  • a4bc5e0 bump version
    • -
  • 6efb2ce Avoid 2nd degree polynomial regexp in MediaType
    • -
  • 4849132 Return an empty array when ranges are too large
    • -
  • a227cd7 Fixing ReDoS in header parsing
    • -
  • 0b3f997 Bump patch version.
    • -
  • d3d415e Update Ruby versions for external tests: drop v2.7 and add v3.2 and v3.3. (#2...
    • -
  • c8b977f Fix content-length calcuation in Rack:Response#write (#2150)
    • -
  • 8d1bf99 Update CHANGELOG for 3.0.8 (#2086)
    • -
  • d28c464 Bump patch verison.
    • -
  • 32736d2 Fix some unused variable verbose warnings (#2084)
    • -
  • Additional commits viewable in compare view
    • +
  • 0eabeb7 Bump patch version.
    • +
  • f4f7103 Resolve deprecation warnings about uri DEFAULT_PARSER (#2242) (#2249)
    • +
  • 4bb2f72 Bump patch version.
    • +
  • 1c1e413 Ignore external tests directory.
    • +
  • b4a1036 Prepare for 3.1.7 release.
    • +
  • d0da91b Add more external tests.
    • +
  • f6f1510 Improve Rack::Response content-length header generation. (#2219)
    • +
  • fb339e0 Fix encoding setting for non-binary IO-like objects in MockRequest#env_for
    • +
  • e21872d Do not remove escaped opening/closing quotes for content-disposition filenames
    • +
  • 5c3d79f Synchronize changelog with HEAD.
    • +
  • Additional commits viewable in compare view

@@ -489,10 +433,10 @@ output: - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](https://github.com/rubocop/rubocop/compare/v0.76.0...v1.59.0) - Updates `rack` from 2.1.4 to v3.0.9.1 + Updates `rack` from 2.1.4 to v3.1.8 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - - [Commits](https://github.com/rack/rack/compare/f3cf79d6460dc592767941806d1b2b7008f73e01...cc95b0db910b58c0ebb7aafa957400218ffbf500) + - [Commits](https://github.com/rack/rack/compare/f3cf79d6460dc592767941806d1b2b7008f73e01...09f2f66ac1bb392ae58fd531dcb0acd01c9680be) dependency-group: name: ruleset - type: create_pull_request @@ -549,7 +493,7 @@ output: parallel (1.22.1) parser (3.1.2.0) ast (~> 2.4.1) - racc (1.7.3) + racc (1.8.1) rainbow (3.1.1) rubocop (0.76.0) jaro_winkler (~> 1.5.1) diff --git a/tests/smoke-bundler-group-vendoring.yaml b/tests/smoke-bundler-group-vendoring.yaml index 510dd241..cf32d954 100644 --- a/tests/smoke-bundler-group-vendoring.yaml +++ b/tests/smoke-bundler-group-vendoring.yaml @@ -127,9 +127,9 @@ output: - file: Gemfile groups: - default - requirement: 3.0.9.1 + requirement: 3.1.8 source: null - version: 3.0.9.1 + version: 3.1.8 directory: /bundler-vendored updated-dependency-files: - content: | @@ -139,7 +139,7 @@ output: gem "rubocop", "1.53.1" gem "toml-rb", "2.1.0" - gem 'rack', '3.0.9.1' + gem 'rack', '3.1.8' content_encoding: utf-8 deleted: false directory: /bundler-vendored @@ -153,17 +153,17 @@ output: specs: ast (2.4.2) citrus (3.0.2) - json (2.7.1) + json (2.9.1) language_server-protocol (3.17.0.3) - parallel (1.24.0) - parser (3.3.0.5) + parallel (1.26.3) + parser (3.3.6.0) ast (~> 2.4.1) racc - racc (1.7.3) - rack (3.0.9.1) + racc (1.8.1) + rack (3.1.8) rainbow (3.1.1) - regexp_parser (2.9.0) - rexml (3.2.6) + regexp_parser (2.9.3) + rexml (3.4.0) rubocop (1.53.1) json (~> 2.3) language_server-protocol (>= 3.17.0) @@ -175,18 +175,18 @@ output: rubocop-ast (>= 1.28.0, < 2.0) ruby-progressbar (~> 1.7) unicode-display_width (>= 2.4.0, < 3.0) - rubocop-ast (1.30.0) - parser (>= 3.2.1.0) + rubocop-ast (1.37.0) + parser (>= 3.3.1.0) ruby-progressbar (1.13.0) toml-rb (2.1.0) citrus (~> 3.0, > 3.0) - unicode-display_width (2.5.0) + unicode-display_width (2.6.0) PLATFORMS ruby DEPENDENCIES - rack (= 3.0.9.1) + rack (= 3.1.8) rubocop (= 1.53.1) toml-rb (= 2.1.0) @@ -247,11 +247,11 @@ output: operation: delete support_file: false type: file - - content: 77ff5f999ce5362336c1440b3512eff30a92e95a4d5b7e4745fc7e399c662fb4 + - content: 7f97cce93940a4fa4abb85a93e8013b4db5237b0f9909a326101d5380c74d3b9 content_encoding: sha256 deleted: false directory: /bundler-vendored - name: vendor/cache/json-2.7.1.gem + name: vendor/cache/json-2.9.1.gem operation: create support_file: false type: file @@ -265,47 +265,47 @@ output: support_file: false type: file mode: "100644" - - content: 70a7bf935f22c6c975e267836ffba4514ad24634847f307d4863fe48a05e935b + - content: d42d747dc52b03e730db490a4cb4ca4b8e195f510ff13e2b8a54e8e485a735eb content_encoding: sha256 deleted: false directory: /bundler-vendored - name: vendor/cache/parallel-1.24.0.gem + name: vendor/cache/parallel-1.26.3.gem operation: create support_file: false type: file mode: "100644" - - content: 90ad35af19f332475e69a2f1d714801534f481dfa2b530906c929f1c30055257 + - content: 33250e191ff0aefd450f3dec621777853343802d3f2ecbb7723d14fc6fa33bd3 content_encoding: sha256 deleted: false directory: /bundler-vendored - name: vendor/cache/parser-3.3.0.5.gem + name: vendor/cache/parser-3.3.6.0.gem operation: create support_file: false type: file mode: "100644" - - content: ddba660f5b6b22434f53137760d3fa3f1aea2570a1e6bfe071ee8e6b3dc9eb03 + - content: 32a6e2159284a16926fdef0771d51b66550d61a9c1e5adcd24a936bc2f05e21d content_encoding: sha256 deleted: false directory: /bundler-vendored - name: vendor/cache/racc-1.7.3.gem + name: vendor/cache/racc-1.8.1.gem operation: create support_file: false type: file mode: "100644" - - content: d68e802db7440244ab82ce10cad97085804705ac31781962d6c74c1caad1dde3 + - content: 74f609cb44dc9992d88cfa14d1f20fa0877555fcae2bf7565205479aefd1ab3e content_encoding: sha256 deleted: false directory: /bundler-vendored - name: vendor/cache/regexp_parser-2.9.0.gem + name: vendor/cache/regexp_parser-2.9.3.gem operation: create support_file: false type: file mode: "100644" - - content: 9ce07ca12b35bfbdae26026af1c25c3c7b8ec57742fc57e436bb65aa77a95455 + - content: e2654239493a0e4419cadbc29afa89f2df9412fb264ab66c3b7ef91c3a0f46ca content_encoding: sha256 deleted: false directory: /bundler-vendored - name: vendor/cache/rexml-3.2.6.gem + name: vendor/cache/rexml-3.4.0.gem operation: create support_file: false type: file @@ -319,11 +319,11 @@ output: support_file: false type: file mode: "100644" - - content: d8412614b0d36aa29f67b0bd67fd6bcde9c8cab5704c47b594984c998b475e9b + - content: a90436f53f3ab003ccddf924d7b22ef5d1e397859edccda12416a46e94a1240f content_encoding: sha256 deleted: false directory: /bundler-vendored - name: vendor/cache/rubocop-ast-1.30.0.gem + name: vendor/cache/rubocop-ast-1.37.0.gem operation: create support_file: false type: file @@ -337,11 +337,11 @@ output: support_file: false type: file mode: "100644" - - content: 9b5f8d5cd2589ff74c306ae1e680d8265216702f05b6126b772c59bbbc69ced7 + - content: dacee4eff6c956bd81d5950a93bacd0faa2083792acc807276afa776db8c015c content_encoding: sha256 deleted: false directory: /bundler-vendored - name: vendor/cache/unicode-display_width-2.5.0.gem + name: vendor/cache/unicode-display_width-2.6.0.gem operation: create support_file: false type: file @@ -354,11 +354,11 @@ output: operation: delete support_file: false type: file - - content: 8f89f09c0d0027e633b5971ae5f64727316a49dcadde58d4cc830d2f5597c74a + - content: 1317da80b59e7ca3bc319cbc120f159677b801b01f79ad13bde888d04d656b86 content_encoding: sha256 deleted: false directory: /bundler-vendored - name: vendor/cache/rack-3.0.9.1.gem + name: vendor/cache/rack-3.1.8.gem operation: create support_file: false type: file @@ -489,7 +489,7 @@ output:

- Updates `rack` from 2.1.4 to 3.0.9.1 + Updates `rack` from 2.1.4 to 3.1.8
Release notes

Sourced from rack's releases.

@@ -543,19 +543,70 @@ output:

... (truncated)

+ Changelog +

Sourced from rack's changelog.

+
+

[3.1.8] - 2024-10-14

+

Fixed

+ +

[3.1.7] - 2024-07-11

+

Fixed

+ +

[3.1.6] - 2024-07-03

+

Fixed

+
    +
  • Fix several edge cases in Rack::Request#parse_http_accept_header's implementation. (#2226, [@​ioquatix])
    • +
+

[3.1.5] - 2024-07-02

+

Security

+ +

[3.1.4] - 2024-06-22

+

Fixed

+
    +
  • Fix Rack::Lint matching some paths incorrectly as authority form. (#2220, [@​ioquatix])
    • +
+

[3.1.3] - 2024-06-12

+

Fixed

+ +

[3.1.2] - 2024-06-11

+
    +
  • Rack::Response will take in to consideration chunked encoding responses (#2204, [@​tenderlove])
    • +
+

[3.1.1] - 2024-06-11

+
    +
  • Oops! I shouldn't have shipped that
    • +
+

[3.1.0] - 2024-06-11

+ +
+

... (truncated)

+
+
Commits

@@ -570,10 +621,10 @@ output: - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](https://github.com/rubocop/rubocop/compare/v0.76.0...v1.53.1) - Updates `rack` from 2.1.4 to 3.0.9.1 + Updates `rack` from 2.1.4 to 3.1.8 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - - [Commits](https://github.com/rack/rack/compare/2.1.4...v3.0.9.1) + - [Commits](https://github.com/rack/rack/compare/2.1.4...v3.1.8) dependency-group: name: ruleset - type: create_pull_request @@ -623,7 +674,7 @@ output: parallel (1.22.1) parser (3.1.2.0) ast (~> 2.4.1) - racc (1.7.3) + racc (1.8.1) rack (2.1.4) rainbow (3.1.1) rubocop (0.76.0) @@ -664,11 +715,11 @@ output: operation: delete support_file: false type: file - - content: ddba660f5b6b22434f53137760d3fa3f1aea2570a1e6bfe071ee8e6b3dc9eb03 + - content: 32a6e2159284a16926fdef0771d51b66550d61a9c1e5adcd24a936bc2f05e21d content_encoding: sha256 deleted: false directory: /bundler-vendored - name: vendor/cache/racc-1.7.3.gem + name: vendor/cache/racc-1.8.1.gem operation: create support_file: false type: file diff --git a/tests/smoke-bundler.yaml b/tests/smoke-bundler.yaml index 0f761343..5265296c 100644 --- a/tests/smoke-bundler.yaml +++ b/tests/smoke-bundler.yaml @@ -157,16 +157,16 @@ output: specs: ast (2.4.2) citrus (3.0.2) - json (2.7.1) + json (2.9.1) netaddr (2.0.1) - parallel (1.24.0) - parser (3.3.0.5) + parallel (1.26.3) + parser (3.3.6.0) ast (~> 2.4.1) racc - racc (1.7.3) + racc (1.8.1) rainbow (3.1.1) - regexp_parser (2.9.0) - rexml (3.2.6) + regexp_parser (2.9.3) + rexml (3.4.0) rubocop (1.32.0) json (~> 2.3) parallel (~> 1.10) @@ -177,12 +177,12 @@ output: rubocop-ast (>= 1.19.1, < 2.0) ruby-progressbar (~> 1.7) unicode-display_width (>= 1.4.0, < 3.0) - rubocop-ast (1.30.0) - parser (>= 3.2.1.0) + rubocop-ast (1.37.0) + parser (>= 3.3.1.0) ruby-progressbar (1.13.0) toml-rb (2.2.0) citrus (~> 3.0, > 3.0) - unicode-display_width (2.5.0) + unicode-display_width (2.6.0) PLATFORMS ruby