Pullup ticket #3401 - requested by taca
databases/ruby-activerecord3: security update
devel/ruby-activemodel: security update
devel/ruby-activesupport3: security update
devel/ruby-railties: security update
lang/ruby: security update
mail/ruby-actionmailer3: security update
www/ruby-actionpack3: security update
www/ruby-activeresource3: security update
www/ruby-rails3: security update

Revisions pulled up:
- databases/ruby-activerecord3/distinfo                        1.5
- devel/ruby-activemodel/distinfo                              1.5
- devel/ruby-activemodel/patches/patch-.._activemodel.gemspec  1.2
- devel/ruby-activesupport3/distinfo                            1.5
- devel/ruby-railties/distinfo                                  1.5
- lang/ruby/rails.mk                                            1.3
- mail/ruby-actionmailer3/distinfo                              1.5
- www/ruby-actionpack3/distinfo                                1.5
- www/ruby-actionpack3/patches/patch-.._actionpack.gemspec      1.2
- www/ruby-activeresource3/distinfo                            1.5
- www/ruby-rails3/distinfo                                      1.6

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Wed Apr  6 13:23:03 UTC 2011

  Modified Files:
  pkgsrc/lang/ruby: rails.mk

  Log Message:
  Start update of Ruby on Rails 3.0.6.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Wed Apr  6 13:23:30 UTC 2011

  Modified Files:
  pkgsrc/devel/ruby-activesupport3: distinfo

  Log Message:
  Update ruby-activesupport3 package to 3.0.6.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Wed Apr  6 13:24:48 UTC 2011

  Modified Files:
  pkgsrc/devel/ruby-activemodel: distinfo
  pkgsrc/devel/ruby-activemodel/patches: patch-.._activemodel.gemspec

  Log Message:
  Update ruby-activemodel package to 3.0.6.

  *Rails 3.0.6 (April 5, 2011)

  * Fix when database column name has some symbolic characters
    (e.g. Oracle CASE# VARCHAR2(20)) #5818 #6850 [Robert Pankowecki,
    Santiago Pastorino]

  * Fix length validation for fixnums #6556 [Andriy Tyurnikov]

  * Fix i18n key collision with namespaced models #6448 [yves.senn]

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Wed Apr  6 13:26:04 UTC 2011

  Modified Files:
  pkgsrc/www/ruby-actionpack3: distinfo
  pkgsrc/www/ruby-actionpack3/patches: patch-.._actionpack.gemspec

  Log Message:
  Update ruby-actionpack3 pacakge to 3.0.6.

  *Rails 3.0.6 (April 5, 2011)

  * Fixed XSS vulnerability in `auto_link`.  `auto_link` no longer marks input as
    html safe.  Please make sure that calls to auto_link() are wrapped in a
    sanitize(), or a raw() depending on the type of input passed to auto_link().
    For example:

      <%= sanitize(auto_link(some_user_input)) %>

    Thanks to Torben Schulz for reporting this.  The fix can be found here:
    61ee3449674c591747db95f9b3472c5c3bd9e84d

  * Fixes the output of `rake routes` to be correctly match to the
    behavior of the application, as the regular expression used to match
    the path is greedy and won't capture the format part by default
    [Prem Sichanugrist]

  * Fixes an issue with number_to_human when converting values which are
    less than 1 but greater than -1 [Josh Kalderimis]

  * Sensitive query string parameters (specified in
    config.filter_parameters) will now be filtered out from the request
    paths in the log file. [Prem Sichanugrist, fxn]

  * URL parameters which return nil for to_param are now removed from
    the query string [Andrew White]

  * Don't allow i18n to change the minor version, version now set to ~>
    0.5.0 [Santiago Pastorino]

  * Make TranslationHelper#translate use the :rescue_format option in
    I18n 0.5.0 [Sven Fuchs]

  * Fix regression: javascript_include_tag shouldn't raise if you
    register an expansion key with nil or [] value [Santiago Pastorino]

  * Fix Action caching bug where an action that has a non-cacheable
    response always renders a nil response body. It now correctly
    renders the response body. [Cheah Chu Yeow]

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Wed Apr  6 13:27:01 UTC 2011

  Modified Files:
  pkgsrc/databases/ruby-activerecord3: distinfo

  Log Message:
  Update ruby-activerecord3 package to 3.0.6.

  *Rails 3.0.6 (April 5, 2011)

  * Un-deprecate reorder method [Sebastian Martinez]

  * Extensions are applied when calling +except+ or +only+ on relations.
    Thanks to Iain Hecker.

  * Schemas set in set_table_name are respected by the mysql adapter. LH #5322

  * Fixed a bug when empty? was called on a grouped Relation that wasn't loaded.
    LH #5829

  * Reapply extensions when using except and only. Thanks Iain Hecker.

  * Binary data is escaped when being inserted to SQLite3 Databases. Thanks
    Naruse!

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Wed Apr  6 13:27:56 UTC 2011

  Modified Files:
  pkgsrc/www/ruby-activeresource3: distinfo

  Log Message:
  Update ruby-activeresource3 pacakge to 3.0.6.

  No changes but version.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Wed Apr  6 13:28:53 UTC 2011

  Modified Files:
  pkgsrc/mail/ruby-actionmailer3: distinfo

  Log Message:
  Update ruby-actionmailer3 package to 3.0.6.

  *Rails 3.0.6 (April 5, 2011)

  * Don't allow i18n to change the minor version, version now set to ~>
    0.5.0 [Santiago Pastorino]

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Wed Apr  6 13:29:48 UTC 2011

  Modified Files:
  pkgsrc/devel/ruby-railties: distinfo

  Log Message:
  Update ruby-railties package to 3.0.6.

  No chagne but version.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Wed Apr  6 13:31:02 UTC 2011

  Modified Files:
  pkgsrc/www/ruby-rails3: distinfo

  Log Message:
  Update ruby-rails3 package to 3.0.6.

  (Ruby on Rails meta pacakge, no change but version.)

(tron)