Pullup ticket #6594 - requested by taca
www/ruby-rails70: security fix

Revisions pulled up:
- databases/ruby-activerecord70/distinfo                        1.2-1.3
- devel/ruby-activejob70/distinfo                              1.2-1.3
- devel/ruby-activemodel70/distinfo                            1.2-1.3
- devel/ruby-activestorage70/PLIST                              1.2
- devel/ruby-activestorage70/distinfo                          1.2-1.3
- devel/ruby-activesupport70/distinfo                          1.2-1.3
- devel/ruby-railties70/distinfo                                1.2-1.3
- lang/ruby/rails.mk                                            1.110,1.114
- mail/ruby-actionmailbox70/distinfo                            1.2-1.3
- mail/ruby-actionmailer70/distinfo                            1.2-1.3
- textproc/ruby-actiontext70/distinfo                          1.2-1.3
- www/ruby-actioncable70/distinfo                              1.2-1.3
- www/ruby-actionpack70/distinfo                                1.2-1.3
- www/ruby-actionview70/distinfo                                1.2-1.3
- www/ruby-rails70/distinfo                                    1.2-1.3

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jan 16 14:02:54 UTC 2022

  Modified Files:
  pkgsrc/lang/ruby: rails.mk

  Log Message:
  lang/ruby: start update of Ruby on Rails 7.0.1

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jan 16 14:05:14 UTC 2022

  Modified Files:
  pkgsrc/devel/ruby-activesupport70: distinfo

  Log Message:
  devel/ruby-activesupport70: update to 7.0.1

  7.0.1 (2021-01-06)

  * Fix Class#descendants and DescendantsTracker#descendants compatibilit=
  y
    with Ruby 3.1.

    The native Class#descendants was reverted prior to Ruby 3.1 release, =
  but
    Class#subclasses was kept, breaking the feature detection.

    Jean Boussier

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jan 16 14:05:44 UTC 2022

  Modified Files:
  pkgsrc/devel/ruby-activemodel70: distinfo

  Log Message:
  devel/ruby-activemodel70: update to 7.0.1

  7.0.1 (2021-01-06)

  * No change.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jan 16 14:06:14 UTC 2022

  Modified Files:
  pkgsrc/devel/ruby-activejob70: distinfo

  Log Message:
  devel/ruby-activejob70: update to 7.0.1

  7.0.1 (2021-01-06)

  * Allow testing discard_on/retry_on ActiveJob::DeserializationError

    Previously in perform_enqueued_jobs, deserialize_arguments_if_needed
    was called before calling perform_now.  When a record no longer
    exists and is serialized using GlobalID this led to raising an
    ActiveJob::DeserializationError before reaching perform_now call.
    This behaviour makes difficult testing the job discard_on/retry_on
    logic.

    Now deserialize_arguments_if_needed call is postponed to when
    perform_now is called.

    Example:

  class UpdateUserJob < ActiveJob::Base
    discard_on ActiveJob::DeserializationError

    def perform(user)
      # ...
    end
  end

  # In the test
  User.destroy_all
  assert_nothing_raised do
    perform_enqueued_jobs only: UpdateUserJob
  end

    Jacopo Beschi

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jan 16 14:06:39 UTC 2022

  Modified Files:
  pkgsrc/www/ruby-actionview70: distinfo

  Log Message:
  devel/ruby-actionview70: update to 7.0.1

  7.0.1 (2021-01-06)

  * Fix button_to to work with a hash parameter as URL.

    MingyuanQin

  * Fix link_to with a model passed as an argument twice.

    Alex Ghiculescu

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jan 16 14:07:02 UTC 2022

  Modified Files:
  pkgsrc/www/ruby-actionpack70: distinfo

  Log Message:
  devel/ruby-actionpack70: update to 7.0.1

  7.0.1 (2021-01-06)

  * Fix ActionController::Parameters methods to keep the original logger
    context when creating a new copy of the original object.

    Yutaka Kamei

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jan 16 14:07:29 UTC 2022

  Modified Files:
  pkgsrc/databases/ruby-activerecord70: distinfo

  Log Message:
  databases/ruby-activerecord70: update to 7.0.1

  7.0.1 (2021-01-06)

  * Change QueryMethods#in_order_of to drop records not listed in values.=

    in_order_of now filters down to the values provided, to match the
    behavior of the Enumerable version.

    Kevin Newton

  * Allow named expression indexes to be revertible.

    Previously, the following code would raise an error in a reversible
    migration executed while rolling back, due to the index name not
    being used in the index removal.

  add_index(:settings, "(data->'property')", using: :gin, name: :index_s=
  ettings_data_property)

    Fixes #43331.

    Oliver G=FCnther

  * Better error messages when association name is invalid in the
    argument of ActiveRecord::QueryMethods::WhereChain#missing.

    ykpythemind

  * Fix ordered migrations for single db in multi db environment.

    Himanshu

  * Extract on update CURRENT_TIMESTAMP for mysql2 adapter.

    Kazuhiro Masuda

  * Fix incorrect argument in PostgreSQL structure dump tasks.
    Updating the --no-comment argument added in Rails 7 to the correct
    --no-comments argument.

    Alex Dent

  * Fix schema dumping column default SQL values for sqlite3.

    fatkodima

  * Correctly parse complex check constraint expressions for PostgreSQL.

    fatkodima

  * Fix timestamptz attributes on PostgreSQL handle blank inputs.

    Alex Ghiculescu

    Fix migration compatibility to create SQLite references/belongs_to
    column as integer when migration version is 6.0.

    Reference/belongs_to in migrations with version 6.0 were creating
    columns as bigint instead of integer for the SQLite Adapter.

    Marcelo Lauxen

  * Fix joining through a polymorphic association.

    Alexandre Ruban

  * Fix QueryMethods#in_order_of to handle empty order list.

    Post.in_order_of(:id, []).to_a Also more explicitly set the column
    as secondary order, so that any other value is still ordered.

    Jean Boussier

  * Fix rails dbconsole for 3-tier config.

    Eileen M. Uchitelle

  * Fix quoting of column aliases generated by calculation methods.

    Since the alias is derived from the table name, we can't assume the
    result is a valid identifier.

  class Test < ActiveRecord::Base
    self.table_name =3D '1abc'
  end
  Test.group(:id).count
  # syntax error at or near "1" (ActiveRecord::StatementInvalid)
  # LINE 1: SELECT COUNT(*) AS count_all, "1abc"."id" AS 1abc_id FROM "1=
  ...

    Jean Boussier

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jan 16 14:07:49 UTC 2022

  Modified Files:
  pkgsrc/devel/ruby-activestorage70: distinfo

  Log Message:
  devel/ruby-activestorage70: update to 7.0.1

  7.0.1 (2021-01-06)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jan 16 14:08:13 UTC 2022

  Modified Files:
  pkgsrc/mail/ruby-actionmailer70: distinfo

  Log Message:
  mail/ruby-actionmailer70: update to 7.0.1

  * Keep configuration of smtp_settings consistent between 6.1 and 7.0.

    Andr=E9 Luis Leal Cardoso Junior

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jan 16 14:08:57 UTC 2022

  Modified Files:
  pkgsrc/mail/ruby-actionmailbox70: distinfo

  Log Message:
  mail/ruby-actionmailbox70: update to 7.0.1

  7.0.1 (2021-01-06)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jan 16 14:09:16 UTC 2022

  Modified Files:
  pkgsrc/www/ruby-actioncable70: distinfo

  Log Message:
  www/ruby-actioncable70: update to 7.0.1

  7.0.1 (2021-01-06)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jan 16 14:10:09 UTC 2022

  Modified Files:
  pkgsrc/devel/ruby-railties70: distinfo

  Log Message:
  devel/ruby-railties70: 7.0.1 (2021-01-06)

  * Prevent duplicate entries in plugin Gemfile.

    Jonathan Hefner

  * Fix asset pipeline errors for plugin dummy apps.

    Jonathan Hefner

  * Fix generated route revocation.

    Jonathan Hefner

  * Addresses an issue in which Sidekiq jobs could not reload certain
    namespaces.
    See fxn/zeitwerk#198 for details.

    Xavier Noria

  * Fix plugin generator to a plugin that pass all the tests.

    Rafael Mendon=E7a Fran=E7a

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jan 16 14:10:40 UTC 2022

  Modified Files:
  pkgsrc/textproc/ruby-actiontext70: distinfo

  Log Message:
  textproc/ruby-actiontext70: 7.0.1 (2021-01-06)

  7.0.1 (2021-01-06)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jan 16 14:12:56 UTC 2022

  Modified Files:
  pkgsrc/www/ruby-rails70: distinfo

  Log Message:
  www/ruby-rails70: update to 7.0.1

  This is meta gem (package) for Ruby on Rails 7.0.1.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb 13 07:39:14 UTC 2022

  Modified Files:
  pkgsrc/lang/ruby: rails.mk

  Log Message:
  lang/ruby: start update of ruby-rails70 to 7.0.2.2

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb 13 07:41:06 UTC 2022

  Modified Files:
  pkgsrc/devel/ruby-activesupport70: distinfo

  Log Message:
  devel/ruby-activesupport70: update to 7.0.2

  7.0.2 (2022-02-08)

  * Fix ActiveSupport::EncryptedConfiguration to be compatible with Psych=
    4

    Stephen Sugden

  * Improve File.atomic_write error handling.

    Daniel Pepper

  7.0.2.1 (2022-02-11)

  * No changes.

  7.0.2.2 (2022-02-11)

  * Fix Reloader method signature to work with the new Executor signature=

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb 13 07:41:59 UTC 2022

  Modified Files:
  pkgsrc/devel/ruby-activemodel70: distinfo

  Log Message:
  devel/ruby-activemodel70: update to 7.0.2

  7.0.2 (2022-02-08)

  * Use different cache namespace for proxy calls

    Models can currently have different attribute bodies for the same met=
  hod
    names, leading to conflicts. Adding a new namespace :active_model_pro=
  xy
    fixes the issue.

    Chris Salzberg

  7.0.2.1 (2022-02-11)

  * No changes.

  7.0.2.2 (2022-02-11)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb 13 07:42:23 UTC 2022

  Modified Files:
  pkgsrc/devel/ruby-activejob70: distinfo

  Log Message:
  devel/ruby-activejob70: update to 7.0.2

  7.0.2 (2022-02-08)

  * No changes.

  7.0.2.1 (2022-02-11)

  * No changes.

  7.0.2.2 (2022-02-11)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb 13 07:42:47 UTC 2022

  Modified Files:
  pkgsrc/www/ruby-actionview70: distinfo

  Log Message:
  www/ruby-actionview70: update to 7.0.2

  7.0.2 (2022-02-08)

  * Ensure preload_link_tag preloads JavaScript modules correctly.

    M=E1ximo Mussini

  * Fix stylesheet_link_tag and similar helpers are being used to work in=

    objects with a response method.

    dark-panda

  7.0.2.1 (2022-02-11)

  * No changes.

  7.0.2.2 (2022-02-11)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb 13 07:43:27 UTC 2022

  Modified Files:
  pkgsrc/www/ruby-actionpack70: distinfo

  Log Message:
  www/ruby-actionpack70: update to 7.0.2

  This update contains security fix for CVE-2022-23633.

  7.0.2 (2022-02-08)

  * No changes.

  7.0.2.1 (2022-02-11)

  * Under certain circumstances, the middleware isn't informed that the
    response body has been fully closed which result in request state
    not being fully reset before the next request

    [CVE-2022-23633]

  7.0.2.2 (2022-02-11)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb 13 07:43:55 UTC 2022

  Modified Files:
  pkgsrc/databases/ruby-activerecord70: distinfo

  Log Message:
  databases/ruby-activerecord70: update to 7.0.2

  7.0.2 (2022-02-08)

  * Fix PG.connect keyword arguments deprecation warning on ruby 2.7.

    Nikita Vasilevsky

  * Fix the ability to exclude encryption params from being autofiltered.=

    Mark Gangl

  * Dump the precision for datetime columns following the new defaults.

    Rafael Mendon=E7a Fran=E7a

  * Make sure encrypted attributes are not being filtered twice.

    Nikita Vasilevsky

  * Dump the database schema containing the current Rails version.

    Since #42297, Rails now generate datetime columns with a default prec=
  ision
    of 6.  This means that users upgrading to Rails 7.0 from 6.1, when lo=
  ading
    the database schema, would get the new precision value, which would n=
  ot
    match the production schema.

    To avoid this the schema dumper will generate the new format which wi=
  ll
    include the Rails version and will look like this:

  ActiveRecord::Schema[7.0].define

    When upgrading from Rails 6.1 to Rails 7.0, you can run the rails
    app:update task that will set the current schema version to 6.1.

    Rafael Mendon=E7a Fran=E7a

  * Fix parsing expression for PostgreSQL generated column.

    fatkodima

  * Fix Mysql2::Error: Commands out of sync; you can't run this command n=
  ow
    when bulk-inserting fixtures that exceed max_allowed_packet configura=
  tion.

    Nikita Vasilevsky

  * Fix error when saving an association with a relation named record.

    Dorian Mari=E9

  * Fix MySQL::SchemaDumper behavior about datetime precision value.

    y0t4

  * Improve associated with no reflection error.

    Nikolai

  * Fix PG.connect keyword arguments deprecation warning on ruby 2.7.

    Fixes #44307.

    Nikita Vasilevsky

  * Fix passing options to check_constraint from change_table.

    Frederick Cheung

  7.0.2.1 (2022-02-11)

  * No changes.

  7.0.2.2 (2022-02-11)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb 13 07:44:29 UTC 2022

  Modified Files:
  pkgsrc/devel/ruby-activestorage70: PLIST distinfo

  Log Message:
  devel/ruby-activestorage70: update to 7.0.2

  7.0.2 (2022-02-08)

  * Revert the ability to pass service_name param to DirectUploadsControl=
  ler
    which was introduced in 7.0.0.

    That change caused a lot of problems to upgrade Rails applications so=
    we
    decided to remove it while in work in a more backwards compatible
    implementation.

    Gannon McGibbon

  * Allow applications to opt out of precompiling Active Storage JavaScri=
  pt
    assets.

    jlestavel

  7.0.2.1 (2022-02-11)

  * No changes.

  7.0.2.2 (2022-02-11)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb 13 07:44:47 UTC 2022

  Modified Files:
  pkgsrc/mail/ruby-actionmailer70: distinfo

  Log Message:
  mail/ruby-actionmailer70: update to 7.0.2

  7.0.2 (2022-02-08)

  * No changes.

  7.0.2.1 (2022-02-11)

  * No changes.

  7.0.2.2 (2022-02-11)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb 13 07:45:05 UTC 2022

  Modified Files:
  pkgsrc/mail/ruby-actionmailbox70: distinfo

  Log Message:
  mail/ruby-actionmailbox70: update to 7.0.2

  7.0.2 (2022-02-08)

  * No changes.

  7.0.2.1 (2022-02-11)

  * No changes.

  7.0.2.2 (2022-02-11)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb 13 07:45:27 UTC 2022

  Modified Files:
  pkgsrc/www/ruby-actioncable70: distinfo

  Log Message:
  www/ruby-actioncable70: update to 7.0.2

  7.0.2 (2022-02-08)

  * No changes.

  7.0.2.1 (2022-02-11)

  * No changes.

  7.0.2.2 (2022-02-11)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb 13 07:45:49 UTC 2022

  Modified Files:
  pkgsrc/devel/ruby-railties70: distinfo

  Log Message:
  devel/ruby-railties70: update to 7.0.2

  7.0.2 (2022-02-08)

  * No changes.

  7.0.2.1 (2022-02-11)

  * No changes.

  7.0.2.2 (2022-02-11)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb 13 07:46:12 UTC 2022

  Modified Files:
  pkgsrc/textproc/ruby-actiontext70: distinfo

  Log Message:
  textproc/ruby-actiontext70: update to 7.0.2

  7.0.2 (2022-02-08)

  * No changes.

  7.0.2.1 (2022-02-11)

  * No changes.

  7.0.2.2 (2022-02-11)

  * No changes.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb 13 07:47:25 UTC 2022

  Modified Files:
  pkgsrc/www/ruby-rails70: distinfo

  Log Message:
  www/ruby-rails70: update to 7.0.2

  This gem is a meta package for Ruby on Rails 7, so no changes here.

(bsiegert)