Version in base suite: 7.2.2.1+dfsg-7 Base version: rails_7.2.2.1+dfsg-7 Target version: rails_7.2.2.2+dfsg-2~deb13u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/r/rails/rails_7.2.2.1+dfsg-7.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/r/rails/rails_7.2.2.2+dfsg-2~deb13u1.dsc Gemfile.lock | 106 ++++---- RAILS_VERSION | 2 actioncable/CHANGELOG.md | 5 actioncable/lib/action_cable/gem_version.rb | 2 actioncable/package.json | 2 actionmailbox/CHANGELOG.md | 5 actionmailbox/lib/action_mailbox/gem_version.rb | 2 actionmailer/CHANGELOG.md | 5 actionmailer/lib/action_mailer/gem_version.rb | 2 actionpack/CHANGELOG.md | 5 actionpack/lib/action_pack/gem_version.rb | 2 actiontext/CHANGELOG.md | 5 actiontext/lib/action_text/gem_version.rb | 2 actiontext/package.json | 2 actionview/CHANGELOG.md | 5 actionview/lib/action_view/gem_version.rb | 2 activejob/CHANGELOG.md | 5 activejob/lib/active_job/gem_version.rb | 2 activemodel/CHANGELOG.md | 5 activemodel/lib/active_model/gem_version.rb | 2 activerecord/CHANGELOG.md | 8 activerecord/lib/active_record/core.rb | 2 activerecord/lib/active_record/gem_version.rb | 2 activerecord/lib/active_record/relation/finder_methods.rb | 7 activerecord/test/cases/associations/has_many_through_associations_test.rb | 2 activerecord/test/cases/finder_test.rb | 4 activestorage/CHANGELOG.md | 8 activestorage/lib/active_storage.rb | 3 activestorage/lib/active_storage/gem_version.rb | 2 activestorage/package.json | 2 activestorage/test/models/variant_test.rb | 6 activesupport/CHANGELOG.md | 5 activesupport/lib/active_support/gem_version.rb | 2 debian/changelog | 48 +++ debian/control | 5 debian/copyright | 26 -- debian/gbp.conf | 5 debian/salsa-ci.yml | 5 guides/CHANGELOG.md | 5 railties/CHANGELOG.md | 5 railties/lib/rails/gem_version.rb | 2 yarn.lock | 127 +++++----- 42 files changed, 279 insertions(+), 170 deletions(-) diff -Nru rails-7.2.2.1+dfsg/Gemfile.lock rails-7.2.2.2+dfsg/Gemfile.lock --- rails-7.2.2.1+dfsg/Gemfile.lock 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/Gemfile.lock 2025-08-13 20:32:36.000000000 +0000 @@ -19,29 +19,29 @@ PATH remote: . specs: - actioncable (7.2.2.1) - actionpack (= 7.2.2.1) - activesupport (= 7.2.2.1) + actioncable (7.2.2.2) + actionpack (= 7.2.2.2) + activesupport (= 7.2.2.2) nio4r (~> 2.0) websocket-driver (>= 0.6.1) zeitwerk (~> 2.6) - actionmailbox (7.2.2.1) - actionpack (= 7.2.2.1) - activejob (= 7.2.2.1) - activerecord (= 7.2.2.1) - activestorage (= 7.2.2.1) - activesupport (= 7.2.2.1) + actionmailbox (7.2.2.2) + actionpack (= 7.2.2.2) + activejob (= 7.2.2.2) + activerecord (= 7.2.2.2) + activestorage (= 7.2.2.2) + activesupport (= 7.2.2.2) mail (>= 2.8.0) - actionmailer (7.2.2.1) - actionpack (= 7.2.2.1) - actionview (= 7.2.2.1) - activejob (= 7.2.2.1) - activesupport (= 7.2.2.1) + actionmailer (7.2.2.2) + actionpack (= 7.2.2.2) + actionview (= 7.2.2.2) + activejob (= 7.2.2.2) + activesupport (= 7.2.2.2) mail (>= 2.8.0) rails-dom-testing (~> 2.2) - actionpack (7.2.2.1) - actionview (= 7.2.2.1) - activesupport (= 7.2.2.1) + actionpack (7.2.2.2) + actionview (= 7.2.2.2) + activesupport (= 7.2.2.2) nokogiri (>= 1.8.5) racc rack (>= 2.2.4, < 3.2) @@ -50,35 +50,35 @@ rails-dom-testing (~> 2.2) rails-html-sanitizer (~> 1.6) useragent (~> 0.16) - actiontext (7.2.2.1) - actionpack (= 7.2.2.1) - activerecord (= 7.2.2.1) - activestorage (= 7.2.2.1) - activesupport (= 7.2.2.1) + actiontext (7.2.2.2) + actionpack (= 7.2.2.2) + activerecord (= 7.2.2.2) + activestorage (= 7.2.2.2) + activesupport (= 7.2.2.2) globalid (>= 0.6.0) nokogiri (>= 1.8.5) - actionview (7.2.2.1) - activesupport (= 7.2.2.1) + actionview (7.2.2.2) + activesupport (= 7.2.2.2) builder (~> 3.1) erubi (~> 1.11) rails-dom-testing (~> 2.2) rails-html-sanitizer (~> 1.6) - activejob (7.2.2.1) - activesupport (= 7.2.2.1) + activejob (7.2.2.2) + activesupport (= 7.2.2.2) globalid (>= 0.3.6) - activemodel (7.2.2.1) - activesupport (= 7.2.2.1) - activerecord (7.2.2.1) - activemodel (= 7.2.2.1) - activesupport (= 7.2.2.1) + activemodel (7.2.2.2) + activesupport (= 7.2.2.2) + activerecord (7.2.2.2) + activemodel (= 7.2.2.2) + activesupport (= 7.2.2.2) timeout (>= 0.4.0) - activestorage (7.2.2.1) - actionpack (= 7.2.2.1) - activejob (= 7.2.2.1) - activerecord (= 7.2.2.1) - activesupport (= 7.2.2.1) + activestorage (7.2.2.2) + actionpack (= 7.2.2.2) + activejob (= 7.2.2.2) + activerecord (= 7.2.2.2) + activesupport (= 7.2.2.2) marcel (~> 1.0) - activesupport (7.2.2.1) + activesupport (7.2.2.2) base64 benchmark (>= 0.3) bigdecimal @@ -90,23 +90,23 @@ minitest (>= 5.1) securerandom (>= 0.3) tzinfo (~> 2.0, >= 2.0.5) - rails (7.2.2.1) - actioncable (= 7.2.2.1) - actionmailbox (= 7.2.2.1) - actionmailer (= 7.2.2.1) - actionpack (= 7.2.2.1) - actiontext (= 7.2.2.1) - actionview (= 7.2.2.1) - activejob (= 7.2.2.1) - activemodel (= 7.2.2.1) - activerecord (= 7.2.2.1) - activestorage (= 7.2.2.1) - activesupport (= 7.2.2.1) + rails (7.2.2.2) + actioncable (= 7.2.2.2) + actionmailbox (= 7.2.2.2) + actionmailer (= 7.2.2.2) + actionpack (= 7.2.2.2) + actiontext (= 7.2.2.2) + actionview (= 7.2.2.2) + activejob (= 7.2.2.2) + activemodel (= 7.2.2.2) + activerecord (= 7.2.2.2) + activestorage (= 7.2.2.2) + activesupport (= 7.2.2.2) bundler (>= 1.15.0) - railties (= 7.2.2.1) - railties (7.2.2.1) - actionpack (= 7.2.2.1) - activesupport (= 7.2.2.1) + railties (= 7.2.2.2) + railties (7.2.2.2) + actionpack (= 7.2.2.2) + activesupport (= 7.2.2.2) irb (~> 1.13) rackup (>= 1.0.0) rake (>= 12.2) diff -Nru rails-7.2.2.1+dfsg/RAILS_VERSION rails-7.2.2.2+dfsg/RAILS_VERSION --- rails-7.2.2.1+dfsg/RAILS_VERSION 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/RAILS_VERSION 2025-08-13 20:32:36.000000000 +0000 @@ -1 +1 @@ -7.2.2.1 +7.2.2.2 diff -Nru rails-7.2.2.1+dfsg/actioncable/CHANGELOG.md rails-7.2.2.2+dfsg/actioncable/CHANGELOG.md --- rails-7.2.2.1+dfsg/actioncable/CHANGELOG.md 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/actioncable/CHANGELOG.md 2025-08-13 20:32:36.000000000 +0000 @@ -1,3 +1,8 @@ +## Rails 7.2.2.2 (August 13, 2025) ## + +* No changes. + + ## Rails 7.2.2.1 (December 10, 2024) ## * No changes. diff -Nru rails-7.2.2.1+dfsg/actioncable/lib/action_cable/gem_version.rb rails-7.2.2.2+dfsg/actioncable/lib/action_cable/gem_version.rb --- rails-7.2.2.1+dfsg/actioncable/lib/action_cable/gem_version.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/actioncable/lib/action_cable/gem_version.rb 2025-08-13 20:32:36.000000000 +0000 @@ -12,7 +12,7 @@ MAJOR = 7 MINOR = 2 TINY = 2 - PRE = "1" + PRE = "2" STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".") end diff -Nru rails-7.2.2.1+dfsg/actioncable/package.json rails-7.2.2.2+dfsg/actioncable/package.json --- rails-7.2.2.1+dfsg/actioncable/package.json 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/actioncable/package.json 2025-08-13 20:32:36.000000000 +0000 @@ -1,6 +1,6 @@ { "name": "@rails/actioncable", - "version": "7.2.201", + "version": "7.2.202", "description": "WebSocket framework for Ruby on Rails.", "module": "app/assets/javascripts/actioncable.esm.js", "main": "app/assets/javascripts/actioncable.js", diff -Nru rails-7.2.2.1+dfsg/actionmailbox/CHANGELOG.md rails-7.2.2.2+dfsg/actionmailbox/CHANGELOG.md --- rails-7.2.2.1+dfsg/actionmailbox/CHANGELOG.md 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/actionmailbox/CHANGELOG.md 2025-08-13 20:32:36.000000000 +0000 @@ -1,3 +1,8 @@ +## Rails 7.2.2.2 (August 13, 2025) ## + +* No changes. + + ## Rails 7.2.2.1 (December 10, 2024) ## * No changes. diff -Nru rails-7.2.2.1+dfsg/actionmailbox/lib/action_mailbox/gem_version.rb rails-7.2.2.2+dfsg/actionmailbox/lib/action_mailbox/gem_version.rb --- rails-7.2.2.1+dfsg/actionmailbox/lib/action_mailbox/gem_version.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/actionmailbox/lib/action_mailbox/gem_version.rb 2025-08-13 20:32:36.000000000 +0000 @@ -10,7 +10,7 @@ MAJOR = 7 MINOR = 2 TINY = 2 - PRE = "1" + PRE = "2" STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".") end diff -Nru rails-7.2.2.1+dfsg/actionmailer/CHANGELOG.md rails-7.2.2.2+dfsg/actionmailer/CHANGELOG.md --- rails-7.2.2.1+dfsg/actionmailer/CHANGELOG.md 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/actionmailer/CHANGELOG.md 2025-08-13 20:32:36.000000000 +0000 @@ -1,3 +1,8 @@ +## Rails 7.2.2.2 (August 13, 2025) ## + +* No changes. + + ## Rails 7.2.2.1 (December 10, 2024) ## * No changes. diff -Nru rails-7.2.2.1+dfsg/actionmailer/lib/action_mailer/gem_version.rb rails-7.2.2.2+dfsg/actionmailer/lib/action_mailer/gem_version.rb --- rails-7.2.2.1+dfsg/actionmailer/lib/action_mailer/gem_version.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/actionmailer/lib/action_mailer/gem_version.rb 2025-08-13 20:32:36.000000000 +0000 @@ -10,7 +10,7 @@ MAJOR = 7 MINOR = 2 TINY = 2 - PRE = "1" + PRE = "2" STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".") end diff -Nru rails-7.2.2.1+dfsg/actionpack/CHANGELOG.md rails-7.2.2.2+dfsg/actionpack/CHANGELOG.md --- rails-7.2.2.1+dfsg/actionpack/CHANGELOG.md 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/actionpack/CHANGELOG.md 2025-08-13 20:32:36.000000000 +0000 @@ -1,3 +1,8 @@ +## Rails 7.2.2.2 (August 13, 2025) ## + +* No changes. + + ## Rails 7.2.2.1 (December 10, 2024) ## * Add validation to content security policies to disallow spaces and semicolons. diff -Nru rails-7.2.2.1+dfsg/actionpack/lib/action_pack/gem_version.rb rails-7.2.2.2+dfsg/actionpack/lib/action_pack/gem_version.rb --- rails-7.2.2.1+dfsg/actionpack/lib/action_pack/gem_version.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/actionpack/lib/action_pack/gem_version.rb 2025-08-13 20:32:36.000000000 +0000 @@ -12,7 +12,7 @@ MAJOR = 7 MINOR = 2 TINY = 2 - PRE = "1" + PRE = "2" STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".") end diff -Nru rails-7.2.2.1+dfsg/actiontext/CHANGELOG.md rails-7.2.2.2+dfsg/actiontext/CHANGELOG.md --- rails-7.2.2.1+dfsg/actiontext/CHANGELOG.md 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/actiontext/CHANGELOG.md 2025-08-13 20:32:36.000000000 +0000 @@ -1,3 +1,8 @@ +## Rails 7.2.2.2 (August 13, 2025) ## + +* No changes. + + ## Rails 7.2.2.1 (December 10, 2024) ## * Update vendored trix version to 2.1.10 diff -Nru rails-7.2.2.1+dfsg/actiontext/lib/action_text/gem_version.rb rails-7.2.2.2+dfsg/actiontext/lib/action_text/gem_version.rb --- rails-7.2.2.1+dfsg/actiontext/lib/action_text/gem_version.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/actiontext/lib/action_text/gem_version.rb 2025-08-13 20:32:36.000000000 +0000 @@ -12,7 +12,7 @@ MAJOR = 7 MINOR = 2 TINY = 2 - PRE = "1" + PRE = "2" STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".") end diff -Nru rails-7.2.2.1+dfsg/actiontext/package.json rails-7.2.2.2+dfsg/actiontext/package.json --- rails-7.2.2.1+dfsg/actiontext/package.json 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/actiontext/package.json 2025-08-13 20:32:36.000000000 +0000 @@ -1,6 +1,6 @@ { "name": "@rails/actiontext", - "version": "7.2.201", + "version": "7.2.202", "description": "Edit and display rich text in Rails applications", "module": "app/assets/javascripts/actiontext.esm.js", "main": "app/assets/javascripts/actiontext.js", diff -Nru rails-7.2.2.1+dfsg/actionview/CHANGELOG.md rails-7.2.2.2+dfsg/actionview/CHANGELOG.md --- rails-7.2.2.1+dfsg/actionview/CHANGELOG.md 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/actionview/CHANGELOG.md 2025-08-13 20:32:36.000000000 +0000 @@ -1,3 +1,8 @@ +## Rails 7.2.2.2 (August 13, 2025) ## + +* No changes. + + ## Rails 7.2.2.1 (December 10, 2024) ## * No changes. diff -Nru rails-7.2.2.1+dfsg/actionview/lib/action_view/gem_version.rb rails-7.2.2.2+dfsg/actionview/lib/action_view/gem_version.rb --- rails-7.2.2.1+dfsg/actionview/lib/action_view/gem_version.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/actionview/lib/action_view/gem_version.rb 2025-08-13 20:32:36.000000000 +0000 @@ -10,7 +10,7 @@ MAJOR = 7 MINOR = 2 TINY = 2 - PRE = "1" + PRE = "2" STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".") end diff -Nru rails-7.2.2.1+dfsg/activejob/CHANGELOG.md rails-7.2.2.2+dfsg/activejob/CHANGELOG.md --- rails-7.2.2.1+dfsg/activejob/CHANGELOG.md 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activejob/CHANGELOG.md 2025-08-13 20:32:36.000000000 +0000 @@ -1,3 +1,8 @@ +## Rails 7.2.2.2 (August 13, 2025) ## + +* No changes. + + ## Rails 7.2.2.1 (December 10, 2024) ## * No changes. diff -Nru rails-7.2.2.1+dfsg/activejob/lib/active_job/gem_version.rb rails-7.2.2.2+dfsg/activejob/lib/active_job/gem_version.rb --- rails-7.2.2.1+dfsg/activejob/lib/active_job/gem_version.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activejob/lib/active_job/gem_version.rb 2025-08-13 20:32:36.000000000 +0000 @@ -10,7 +10,7 @@ MAJOR = 7 MINOR = 2 TINY = 2 - PRE = "1" + PRE = "2" STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".") end diff -Nru rails-7.2.2.1+dfsg/activemodel/CHANGELOG.md rails-7.2.2.2+dfsg/activemodel/CHANGELOG.md --- rails-7.2.2.1+dfsg/activemodel/CHANGELOG.md 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activemodel/CHANGELOG.md 2025-08-13 20:32:36.000000000 +0000 @@ -1,3 +1,8 @@ +## Rails 7.2.2.2 (August 13, 2025) ## + +* No changes. + + ## Rails 7.2.2.1 (December 10, 2024) ## * No changes. diff -Nru rails-7.2.2.1+dfsg/activemodel/lib/active_model/gem_version.rb rails-7.2.2.2+dfsg/activemodel/lib/active_model/gem_version.rb --- rails-7.2.2.1+dfsg/activemodel/lib/active_model/gem_version.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activemodel/lib/active_model/gem_version.rb 2025-08-13 20:32:36.000000000 +0000 @@ -10,7 +10,7 @@ MAJOR = 7 MINOR = 2 TINY = 2 - PRE = "1" + PRE = "2" STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".") end diff -Nru rails-7.2.2.1+dfsg/activerecord/CHANGELOG.md rails-7.2.2.2+dfsg/activerecord/CHANGELOG.md --- rails-7.2.2.1+dfsg/activerecord/CHANGELOG.md 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activerecord/CHANGELOG.md 2025-08-13 20:32:36.000000000 +0000 @@ -1,3 +1,11 @@ +## Rails 7.2.2.2 (August 13, 2025) ## + +* Call inspect on ids in RecordNotFound error + + [CVE-2025-55193] + + *Gannon McGibbon*, *John Hawthorn* + ## Rails 7.2.2.1 (December 10, 2024) ## * No changes. diff -Nru rails-7.2.2.1+dfsg/activerecord/lib/active_record/core.rb rails-7.2.2.2+dfsg/activerecord/lib/active_record/core.rb --- rails-7.2.2.1+dfsg/activerecord/lib/active_record/core.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activerecord/lib/active_record/core.rb 2025-08-13 20:32:36.000000000 +0000 @@ -265,7 +265,7 @@ return super if StatementCache.unsupported_value?(id) cached_find_by([primary_key], [id]) || - raise(RecordNotFound.new("Couldn't find #{name} with '#{primary_key}'=#{id}", name, primary_key, id)) + raise(RecordNotFound.new("Couldn't find #{name} with '#{primary_key}'=#{id.inspect}", name, primary_key, id)) end def find_by(*args) # :nodoc: diff -Nru rails-7.2.2.1+dfsg/activerecord/lib/active_record/gem_version.rb rails-7.2.2.2+dfsg/activerecord/lib/active_record/gem_version.rb --- rails-7.2.2.1+dfsg/activerecord/lib/active_record/gem_version.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activerecord/lib/active_record/gem_version.rb 2025-08-13 20:32:36.000000000 +0000 @@ -10,7 +10,7 @@ MAJOR = 7 MINOR = 2 TINY = 2 - PRE = "1" + PRE = "2" STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".") end diff -Nru rails-7.2.2.1+dfsg/activerecord/lib/active_record/relation/finder_methods.rb rails-7.2.2.2+dfsg/activerecord/lib/active_record/relation/finder_methods.rb --- rails-7.2.2.1+dfsg/activerecord/lib/active_record/relation/finder_methods.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activerecord/lib/active_record/relation/finder_methods.rb 2025-08-13 20:32:36.000000000 +0000 @@ -424,12 +424,13 @@ error << " with#{conditions}" if conditions raise RecordNotFound.new(error, name, key) elsif Array.wrap(ids).size == 1 - error = "Couldn't find #{name} with '#{key}'=#{ids}#{conditions}" + id = Array.wrap(ids)[0] + error = "Couldn't find #{name} with '#{key}'=#{id.inspect}#{conditions}" raise RecordNotFound.new(error, name, key, ids) else error = +"Couldn't find all #{name.pluralize} with '#{key}': " - error << "(#{ids.join(", ")})#{conditions} (found #{result_size} results, but was looking for #{expected_size})." - error << " Couldn't find #{name.pluralize(not_found_ids.size)} with #{key.to_s.pluralize(not_found_ids.size)} #{not_found_ids.join(', ')}." if not_found_ids + error << "(#{ids.map(&:inspect).join(", ")})#{conditions} (found #{result_size} results, but was looking for #{expected_size})." + error << " Couldn't find #{name.pluralize(not_found_ids.size)} with #{key.to_s.pluralize(not_found_ids.size)} #{not_found_ids.map(&:inspect).join(', ')}." if not_found_ids raise RecordNotFound.new(error, name, key, ids) end end diff -Nru rails-7.2.2.1+dfsg/activerecord/test/cases/associations/has_many_through_associations_test.rb rails-7.2.2.2+dfsg/activerecord/test/cases/associations/has_many_through_associations_test.rb --- rails-7.2.2.1+dfsg/activerecord/test/cases/associations/has_many_through_associations_test.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activerecord/test/cases/associations/has_many_through_associations_test.rb 2025-08-13 20:32:36.000000000 +0000 @@ -1061,7 +1061,7 @@ author = authors(:david) ids = [categories(:general).name, "Unknown"] e = assert_raises(ActiveRecord::RecordNotFound) { author.essay_category_ids = ids } - msg = "Couldn't find all Categories with 'name': (General, Unknown) (found 1 results, but was looking for 2). Couldn't find Category with name Unknown." + msg = %{Couldn't find all Categories with 'name': ("General", "Unknown") (found 1 results, but was looking for 2). Couldn't find Category with name "Unknown".} assert_equal msg, e.message end diff -Nru rails-7.2.2.1+dfsg/activerecord/test/cases/finder_test.rb rails-7.2.2.2+dfsg/activerecord/test/cases/finder_test.rb --- rails-7.2.2.1+dfsg/activerecord/test/cases/finder_test.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activerecord/test/cases/finder_test.rb 2025-08-13 20:32:36.000000000 +0000 @@ -1698,7 +1698,7 @@ e = assert_raises(ActiveRecord::RecordNotFound) do model.find "Hello World!" end - assert_equal "Couldn't find MercedesCar with 'name'=Hello World!", e.message + assert_equal %{Couldn't find MercedesCar with 'name'="Hello World!"}, e.message end end @@ -1708,7 +1708,7 @@ e = assert_raises(ActiveRecord::RecordNotFound) do model.find "Hello", "World!" end - assert_equal "Couldn't find all MercedesCars with 'name': (Hello, World!) (found 0 results, but was looking for 2).", e.message + assert_equal %{Couldn't find all MercedesCars with 'name': ("Hello", "World!") (found 0 results, but was looking for 2).}, e.message end end diff -Nru rails-7.2.2.1+dfsg/activestorage/CHANGELOG.md rails-7.2.2.2+dfsg/activestorage/CHANGELOG.md --- rails-7.2.2.1+dfsg/activestorage/CHANGELOG.md 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activestorage/CHANGELOG.md 2025-08-13 20:32:36.000000000 +0000 @@ -1,3 +1,11 @@ +## Rails 7.2.2.2 (August 13, 2025) ## + + Remove dangerous transformations + + [CVE-2025-24293] + + *Zack Deveau* + ## Rails 7.2.2.1 (December 10, 2024) ## * No changes. diff -Nru rails-7.2.2.1+dfsg/activestorage/lib/active_storage/gem_version.rb rails-7.2.2.2+dfsg/activestorage/lib/active_storage/gem_version.rb --- rails-7.2.2.1+dfsg/activestorage/lib/active_storage/gem_version.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activestorage/lib/active_storage/gem_version.rb 2025-08-13 20:32:36.000000000 +0000 @@ -10,7 +10,7 @@ MAJOR = 7 MINOR = 2 TINY = 2 - PRE = "1" + PRE = "2" STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".") end diff -Nru rails-7.2.2.1+dfsg/activestorage/lib/active_storage.rb rails-7.2.2.2+dfsg/activestorage/lib/active_storage.rb --- rails-7.2.2.1+dfsg/activestorage/lib/active_storage.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activestorage/lib/active_storage.rb 2025-08-13 20:32:36.000000000 +0000 @@ -72,7 +72,6 @@ "annotate", "antialias", "append", - "apply", "attenuate", "authenticate", "auto_gamma", @@ -213,7 +212,6 @@ "linewidth", "liquid_rescale", "list", - "loader", "log", "loop", "lowlight_color", @@ -276,7 +274,6 @@ "rotate", "sample", "sampling_factor", - "saver", "scale", "scene", "screen", diff -Nru rails-7.2.2.1+dfsg/activestorage/package.json rails-7.2.2.2+dfsg/activestorage/package.json --- rails-7.2.2.1+dfsg/activestorage/package.json 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activestorage/package.json 2025-08-13 20:32:36.000000000 +0000 @@ -1,6 +1,6 @@ { "name": "@rails/activestorage", - "version": "7.2.201", + "version": "7.2.202", "description": "Attach cloud and local files in Rails applications", "module": "app/assets/javascripts/activestorage.esm.js", "main": "app/assets/javascripts/activestorage.js", diff -Nru rails-7.2.2.1+dfsg/activestorage/test/models/variant_test.rb rails-7.2.2.2+dfsg/activestorage/test/models/variant_test.rb --- rails-7.2.2.1+dfsg/activestorage/test/models/variant_test.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activestorage/test/models/variant_test.rb 2025-08-13 20:32:36.000000000 +0000 @@ -257,7 +257,7 @@ process_variants_with :mini_magick do blob = create_file_blob(filename: "racecar.jpg") assert_raise(ActiveStorage::Transformers::ImageProcessingTransformer::UnsupportedImageProcessingArgument) do - blob.variant(saver: { "-write": "/tmp/file.erb" }).processed + blob.variant(resize: { "-write": "/tmp/file.erb" }).processed end end end @@ -266,11 +266,11 @@ process_variants_with :mini_magick do blob = create_file_blob(filename: "racecar.jpg") assert_raise(ActiveStorage::Transformers::ImageProcessingTransformer::UnsupportedImageProcessingArgument) do - blob.variant(saver: { "something": { "-write": "/tmp/file.erb" } }).processed + blob.variant(resize: { "something": { "-write": "/tmp/file.erb" } }).processed end assert_raise(ActiveStorage::Transformers::ImageProcessingTransformer::UnsupportedImageProcessingArgument) do - blob.variant(saver: { "something": ["-write", "/tmp/file.erb"] }).processed + blob.variant(resize: { "something": ["-write", "/tmp/file.erb"] }).processed end end end diff -Nru rails-7.2.2.1+dfsg/activesupport/CHANGELOG.md rails-7.2.2.2+dfsg/activesupport/CHANGELOG.md --- rails-7.2.2.1+dfsg/activesupport/CHANGELOG.md 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activesupport/CHANGELOG.md 2025-08-13 20:32:36.000000000 +0000 @@ -1,3 +1,8 @@ +## Rails 7.2.2.2 (August 13, 2025) ## + +* No changes. + + ## Rails 7.2.2.1 (December 10, 2024) ## * No changes. diff -Nru rails-7.2.2.1+dfsg/activesupport/lib/active_support/gem_version.rb rails-7.2.2.2+dfsg/activesupport/lib/active_support/gem_version.rb --- rails-7.2.2.1+dfsg/activesupport/lib/active_support/gem_version.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/activesupport/lib/active_support/gem_version.rb 2025-08-13 20:32:36.000000000 +0000 @@ -10,7 +10,7 @@ MAJOR = 7 MINOR = 2 TINY = 2 - PRE = "1" + PRE = "2" STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".") end diff -Nru rails-7.2.2.1+dfsg/debian/changelog rails-7.2.2.2+dfsg/debian/changelog --- rails-7.2.2.1+dfsg/debian/changelog 2025-04-22 07:05:07.000000000 +0000 +++ rails-7.2.2.2+dfsg/debian/changelog 2025-12-01 20:45:40.000000000 +0000 @@ -1,3 +1,51 @@ +rails (2:7.2.2.2+dfsg-2~deb13u1) trixie-security; urgency=medium + + * Team upload + * New upstream release + * Fix CVE-2025-24293 (Closes: #1111106) + Active Record connects classes to relational database tables. + The ID passed to find or similar methods may be logged without + escaping. If this is directly to the terminal it may include + unescaped ANSI sequences. + * Fix CVE-2025-55193. + Active Storage attempts to prevent the use of potentially unsafe image + transformation methods and parameters by default. + The default allowed list contains three methods allowing + for the circumvention of the safe defaults which enables potential + command injection vulnerabilities in cases where arbitrary + user supplied input is accepted as valid transformation methods + or parameters. + * Target trixie in salsaCI + + -- Bastien Roucariès Mon, 01 Dec 2025 21:45:40 +0100 + +rails (2:7.2.2.2+dfsg-2) unstable; urgency=medium + + [ Santiago Vila ] + * Fixes FTBFS with nocheck (Closes: #1116891) + + -- Antonio Terceiro Sun, 19 Oct 2025 12:49:32 -0300 + +rails (2:7.2.2.2+dfsg-1) unstable; urgency=medium + + * Team upload. + + [ Soren Stoutner ] + * New upstream release (fixes CVE-2025-24293 and CVE-2025-55193). + * debian/control: Remove "Breaks: ruby-actionpack-action-caching (<< 1.2.2)" + (see https://lists.debian.org/debian-ruby/2025/08/msg00017.html). + * debian/copyright: + - Add Soren Stoutner to the debian/* stanza. + - Add Lucas Nussbaum to the debian/* stanza. + - Remove the unused GPL license. + + [ Lucas Nussbaum ] + * Remove unnecessary debian/.gitattributes. + * debian/gbp.conf: Make compliant with DEP-14 defaults. + * debian/salsa-ci.yml: Change to use the team-specific include. + + -- Soren Stoutner Mon, 15 Sep 2025 15:28:33 -0700 + rails (2:7.2.2.1+dfsg-7) unstable; urgency=medium * Team upload diff -Nru rails-7.2.2.1+dfsg/debian/control rails-7.2.2.2+dfsg/debian/control --- rails-7.2.2.1+dfsg/debian/control 2025-04-22 07:05:07.000000000 +0000 +++ rails-7.2.2.2+dfsg/debian/control 2025-12-01 20:45:40.000000000 +0000 @@ -83,7 +83,7 @@ ruby-webrick (>= 1.7~) , ruby-websocket-driver , sqlite3 , - ruby-zeitwerk (>= 2.6~) , + ruby-zeitwerk (>= 2.6~), # For activesupport tests # starting and stopping redis don't check nocheck profile redis-server, @@ -199,8 +199,7 @@ ruby-rails-html-sanitizer (>= 1.6~), ruby-useragent (>= 0.16~), ${misc:Depends} -Breaks: ruby-actionpack-action-caching (<< 1.2.2), - ruby-actionpack-page-caching (<< 1.2.4), +Breaks: ruby-actionpack-page-caching (<< 1.2.4), ruby-rails-controller-testing (<< 1.0.5-2~) Description: web-flow and rendering framework putting the VC in MVC (part of Rails) Action Pack is a framework for web apps on Rails. Simple, diff -Nru rails-7.2.2.1+dfsg/debian/copyright rails-7.2.2.2+dfsg/debian/copyright --- rails-7.2.2.1+dfsg/debian/copyright 2025-04-22 07:05:07.000000000 +0000 +++ rails-7.2.2.2+dfsg/debian/copyright 2025-12-01 20:45:40.000000000 +0000 @@ -53,7 +53,9 @@ Files: debian/* Copyright: 2011 Ondřej Surý , - 2019-2020, Utkarsh Gupta + 2019-2020 Utkarsh Gupta + 2025 Lucus Nussbaum + 2025 Soren Stoutner License: Expat Files: debian/missing-sources/jquery.js @@ -80,28 +82,6 @@ TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. -License: GPL - This program is free software; you can redistribute it - and/or modify it under the terms of the GNU General Public - License as published by the Free Software Foundation; either - version 2 of the License, or (at your option) any later - version. - . - This program is distributed in the hope that it will be - useful, but WITHOUT ANY WARRANTY; without even the implied - warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR - PURPOSE. See the GNU General Public License for more - details. - . - You should have received a copy of the GNU General Public - License along with this package; if not, write to the Free - Software Foundation, Inc., 51 Franklin St, Fifth Floor, - Boston, MA 02110-1301 USA - . - On Debian systems, the full text of the GNU General Public - License version 2 can be found in the file - `/usr/share/common-licenses/GPL-2'. - License: CC-BY-3.0 THE WORK (AS DEFINED BELOW) IS PROVIDED UNDER THE TERMS OF THIS CREATIVE COMMONS PUBLIC LICENSE ("CCPL" OR "LICENSE"). THE diff -Nru rails-7.2.2.1+dfsg/debian/gbp.conf rails-7.2.2.2+dfsg/debian/gbp.conf --- rails-7.2.2.1+dfsg/debian/gbp.conf 2025-04-22 07:05:07.000000000 +0000 +++ rails-7.2.2.2+dfsg/debian/gbp.conf 2025-12-01 20:45:40.000000000 +0000 @@ -1,10 +1,9 @@ [DEFAULT] +debian-branch = debian/latest +upstream-branch = upstream/latest pristine-tar = True sign-tags = True upstream-tag = upstream/%(version)s -upstream-branch = upstream -debian-branch = master - [pq] patch-numbers = False diff -Nru rails-7.2.2.1+dfsg/debian/salsa-ci.yml rails-7.2.2.2+dfsg/debian/salsa-ci.yml --- rails-7.2.2.1+dfsg/debian/salsa-ci.yml 2025-04-22 07:05:07.000000000 +0000 +++ rails-7.2.2.2+dfsg/debian/salsa-ci.yml 2025-12-01 20:45:40.000000000 +0000 @@ -1,4 +1,5 @@ --- include: - - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/salsa-ci.yml - - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/pipeline-jobs.yml + - https://salsa.debian.org/ruby-team/meta/raw/master/salsa-ci.yml +variables: + RELEASE: trixie diff -Nru rails-7.2.2.1+dfsg/guides/CHANGELOG.md rails-7.2.2.2+dfsg/guides/CHANGELOG.md --- rails-7.2.2.1+dfsg/guides/CHANGELOG.md 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/guides/CHANGELOG.md 2025-08-13 20:32:36.000000000 +0000 @@ -1,3 +1,8 @@ +## Rails 7.2.2.2 (August 13, 2025) ## + +* No changes. + + ## Rails 7.2.2.1 (December 10, 2024) ## * No changes. diff -Nru rails-7.2.2.1+dfsg/railties/CHANGELOG.md rails-7.2.2.2+dfsg/railties/CHANGELOG.md --- rails-7.2.2.1+dfsg/railties/CHANGELOG.md 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/railties/CHANGELOG.md 2025-08-13 20:32:36.000000000 +0000 @@ -1,3 +1,8 @@ +## Rails 7.2.2.2 (August 13, 2025) ## + +* No changes. + + ## Rails 7.2.2.1 (December 10, 2024) ## * No changes. diff -Nru rails-7.2.2.1+dfsg/railties/lib/rails/gem_version.rb rails-7.2.2.2+dfsg/railties/lib/rails/gem_version.rb --- rails-7.2.2.1+dfsg/railties/lib/rails/gem_version.rb 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/railties/lib/rails/gem_version.rb 2025-08-13 20:32:36.000000000 +0000 @@ -10,7 +10,7 @@ MAJOR = 7 MINOR = 2 TINY = 2 - PRE = "1" + PRE = "2" STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".") end diff -Nru rails-7.2.2.1+dfsg/yarn.lock rails-7.2.2.2+dfsg/yarn.lock --- rails-7.2.2.1+dfsg/yarn.lock 2024-12-10 21:40:12.000000000 +0000 +++ rails-7.2.2.2+dfsg/yarn.lock 2025-08-13 20:32:36.000000000 +0000 @@ -70,18 +70,18 @@ "@jridgewell/resolve-uri" "^3.1.0" "@jridgewell/sourcemap-codec" "^1.4.14" -"@rails/actioncable@file:/Users/jhawthorn/src/rails-release/actioncable": - version "7.2.201" +"@rails/actioncable@file:/Users/jhawthorn/src/rails/actioncable": + version "7.2.202" resolved "file:actioncable" -"@rails/actiontext@file:/Users/jhawthorn/src/rails-release/actiontext": - version "7.2.201" +"@rails/actiontext@file:/Users/jhawthorn/src/rails/actiontext": + version "7.2.202" resolved "file:actiontext" dependencies: "@rails/activestorage" ">= 7.2.0-alpha" -"@rails/activestorage@>= 7.2.0-alpha", "@rails/activestorage@file:/Users/jhawthorn/src/rails-release/activestorage": - version "7.2.201" +"@rails/activestorage@>= 7.2.0-alpha", "@rails/activestorage@file:/Users/jhawthorn/src/rails/activestorage": + version "7.2.202" resolved "file:activestorage" dependencies: spark-md5 "^3.0.1" @@ -125,15 +125,10 @@ resolved "https://registry.npmjs.org/@socket.io/component-emitter/-/component-emitter-3.1.2.tgz" integrity sha512-9BCxFwvbGg/RsZK9tjXd8s4UcwR0MWeFQ1XEKIQVVvAGJyINdrqKMcTRyLoK8Rse1GjzLV9cwjWV1olXRWEXVA== -"@types/cookie@^0.4.1": - version "0.4.1" - resolved "https://registry.npmjs.org/@types/cookie/-/cookie-0.4.1.tgz" - integrity sha512-XW/Aa8APYr6jSVVA1y/DEIZX0/GMKLEVekNG727R8cs56ahETkRAy/3DR7+fJyh7oUgGwNQaRfXCun0+KbWY7Q== - "@types/cors@^2.8.12": - version "2.8.17" - resolved "https://registry.npmjs.org/@types/cors/-/cors-2.8.17.tgz" - integrity sha512-8CGDvrBj1zgo2qE+oS3pOCyYNqCPryMWY2bGfwA0dcfopWGgxs+78df0Rs3rc9THP4JkOhLsAa+15VdpAqkcUA== + version "2.8.19" + resolved "https://registry.npmjs.org/@types/cors/-/cors-2.8.19.tgz" + integrity sha512-mFNylyeyqN93lfe/9CSxOGREz8cpzAhH+E93xJ4xWQf62V8sQ/24reV2nyzUWM6H6Xji+GGHpkbLe7pVoUEskg== dependencies: "@types/node" "*" @@ -390,7 +385,17 @@ resolved "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-3.5.2.tgz" integrity sha512-5p6WTN0DdTGVQk6VjcEju19IgaHudalcfabD7yhDGeA6bcQnmL+CpveLJq/3hvfwd1aof6L386Ougkx6RfyMIQ== -ajv@^5.0.0, ajv@^5.2.3, ajv@^5.3.0: +ajv@^5.0.0, ajv@^5.2.3: + version "5.5.2" + resolved "https://registry.npmjs.org/ajv/-/ajv-5.5.2.tgz" + integrity sha512-Ajr4IcMXq/2QmMkEmSvxqfLN5zGmJ92gHXAeOXq1OekoH2rfDNsgdDoL2f7QaRCy7G/E6TpxBVdRuNraMztGHw== + dependencies: + co "^4.6.0" + fast-deep-equal "^1.0.0" + fast-json-stable-stringify "^2.0.0" + json-schema-traverse "^0.3.0" + +ajv@^5.3.0: version "5.5.2" resolved "https://registry.npmjs.org/ajv/-/ajv-5.5.2.tgz" integrity sha512-Ajr4IcMXq/2QmMkEmSvxqfLN5zGmJ92gHXAeOXq1OekoH2rfDNsgdDoL2f7QaRCy7G/E6TpxBVdRuNraMztGHw== @@ -1018,16 +1023,7 @@ strip-ansi "^3.0.0" supports-color "^2.0.0" -chalk@^2.0.0, chalk@^2.1.0: - version "2.4.2" - resolved "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz" - integrity sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ== - dependencies: - ansi-styles "^3.2.1" - escape-string-regexp "^1.0.5" - supports-color "^5.3.0" - -chalk@^2.4.2: +chalk@^2.0.0, chalk@^2.1.0, chalk@^2.4.2: version "2.4.2" resolved "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz" integrity sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ== @@ -1425,7 +1421,28 @@ dependencies: ms "^2.1.1" -debug@^4.3.4, debug@~4.3.1, debug@~4.3.2, debug@~4.3.4: +debug@^4.3.4: + version "4.4.1" + resolved "https://registry.npmjs.org/debug/-/debug-4.4.1.tgz" + integrity sha512-KcKCqiftBJcZr++7ykoDIEwSa3XWowTfNPo92BYxjXiyYEVrUQh2aLyhxBCwww+heortUFxEJYcRzosstTEBYQ== + dependencies: + ms "^2.1.3" + +debug@~4.3.1: + version "4.3.7" + resolved "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz" + integrity sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ== + dependencies: + ms "^2.1.3" + +debug@~4.3.2: + version "4.3.7" + resolved "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz" + integrity sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ== + dependencies: + ms "^2.1.3" + +debug@~4.3.4: version "4.3.7" resolved "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz" integrity sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ== @@ -1624,11 +1641,10 @@ integrity sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q== engine.io@~6.6.0: - version "6.6.2" - resolved "https://registry.npmjs.org/engine.io/-/engine.io-6.6.2.tgz" - integrity sha512-gmNvsYi9C8iErnZdVcJnvCpSKbWTt1E8+JZo8b+daLninywUWi5NQ5STSHZ9rFjFO7imNcvb8Pc5pe/wMR5xEw== + version "6.6.4" + resolved "https://registry.npmjs.org/engine.io/-/engine.io-6.6.4.tgz" + integrity sha512-ZCkIjSYNDyGn0R6ewHDtXgns/Zre/NT6Agvq1/WobF7JXgFff4SeDroKiCO3fNJreU9YG429Sc81o4w5ok/W5g== dependencies: - "@types/cookie" "^0.4.1" "@types/cors" "^2.8.12" "@types/node" ">=10.0.0" accepts "~1.3.4" @@ -2125,9 +2141,9 @@ write "^0.2.1" flatted@^3.2.7: - version "3.3.1" - resolved "https://registry.npmjs.org/flatted/-/flatted-3.3.1.tgz" - integrity sha512-X8cqMLLie7KsNUDSdzeN8FYK9rEt4Dt67OsG/DNGnYTSDBG4uFAJFBnUeiV+zCVAvwFy56IjM9sH51jVaEhNxw== + version "3.3.3" + resolved "https://registry.npmjs.org/flatted/-/flatted-3.3.3.tgz" + integrity sha512-GX+ysw4PBCz0PzosHDepZGANEuFCMLrnRTiEy9McGjmkCQYwRq4A/X786G/fjM/+OjsWSU1ZrY5qyARZmO/uwg== flush-write-stream@^1.0.0: version "1.1.1" @@ -4115,12 +4131,7 @@ dependencies: rx-lite "*" -rx-lite@*: - version "3.1.2" - resolved "https://registry.npmjs.org/rx-lite/-/rx-lite-3.1.2.tgz" - integrity sha512-1I1+G2gteLB8Tkt8YI1sJvSIfa0lWuRtC8GjvtyPBcLSF5jBCCJJqKrpER5JU5r6Bhe+i9/pK3VMuUcXu0kdwQ== - -rx-lite@^4.0.8: +rx-lite@*, rx-lite@^4.0.8: version "4.0.8" resolved "https://registry.npmjs.org/rx-lite/-/rx-lite-4.0.8.tgz" integrity sha512-Cun9QucwK6MIrp3mry/Y7hqD1oFqTYLQ4pGxaHTjIdaFDWRGGLikqp6u8LcWJnzpoALg9hap+JGk8sFIUuEGNA== @@ -4341,9 +4352,9 @@ debug "~4.3.1" socket.io@^4.7.2: - version "4.8.0" - resolved "https://registry.npmjs.org/socket.io/-/socket.io-4.8.0.tgz" - integrity sha512-8U6BEgGjQOfGz3HHTYaC/L1GaxDCJ/KM0XTkJly0EhZ5U/du9uNEZy4ZgYzEzIqlx2CMm25CrCqr1ck899eLNA== + version "4.8.1" + resolved "https://registry.npmjs.org/socket.io/-/socket.io-4.8.1.tgz" + integrity sha512-oZ7iUCxph8WYRHHcjBEc9unw3adt5CmSNlppj/5Q4k2RIrhl8Z5yY2Xr4j9zj0+wzVZ0bxmYoGSzKJnRl6A4yg== dependencies: accepts "~1.3.4" base64id "~2.0.0" @@ -4527,7 +4538,16 @@ is-fullwidth-code-point "^2.0.0" strip-ansi "^4.0.0" -string-width@^4.1.0, string-width@^4.2.0: +string-width@^4.1.0: + version "4.2.3" + resolved "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz" + integrity sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g== + dependencies: + emoji-regex "^8.0.0" + is-fullwidth-code-point "^3.0.0" + strip-ansi "^6.0.1" + +string-width@^4.2.0: version "4.2.3" resolved "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz" integrity sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g== @@ -4578,14 +4598,7 @@ dependencies: ansi-regex "^3.0.0" -strip-ansi@^6.0.0: - version "6.0.1" - resolved "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz" - integrity sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A== - dependencies: - ansi-regex "^5.0.1" - -strip-ansi@^6.0.1: +strip-ansi@^6.0.0, strip-ansi@^6.0.1: version "6.0.1" resolved "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz" integrity sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A== @@ -4729,9 +4742,9 @@ os-tmpdir "~1.0.2" tmp@^0.2.1: - version "0.2.3" - resolved "https://registry.npmjs.org/tmp/-/tmp-0.2.3.tgz" - integrity sha512-nZD7m9iCPC5g0pYmcaxogYKggSfLsdxl8of3Q/oIbqCqLLIO9IAF0GWjX1z9NZRHPiXv8Wex4yDCaZsgEw0Y8w== + version "0.2.5" + resolved "https://registry.npmjs.org/tmp/-/tmp-0.2.5.tgz" + integrity sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow== to-arraybuffer@^1.0.0: version "1.0.1" @@ -4882,9 +4895,9 @@ integrity sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA== ua-parser-js@^0.7.30: - version "0.7.39" - resolved "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.39.tgz" - integrity sha512-IZ6acm6RhQHNibSt7+c09hhvsKy9WUr4DVbeq9U8o71qxyYtJpQeDxQnMrVqnIFMLcQjHO0I9wgfO2vIahht4w== + version "0.7.40" + resolved "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.40.tgz" + integrity sha512-us1E3K+3jJppDBa3Tl0L3MOJiGhe1C6P0+nIvQAFYbxlMAx0h81eOwLmU57xgqToduDDPx3y5QsdjPfDu+FgOQ== unbox-primitive@^1.0.2: version "1.0.2"