566 Commits

Author SHA1 Message Date
jeremy 2bd03b54ba Update to Ruby 4.0.5
Fixes CVE-2026-46727: Use-after-free in pthread-based getaddrinfo timeout handler

Drop class.c patch added for 4.0.4, no longer needed with included rdoc update.
2026-05-22 06:20:07 +00:00
jeremy b60aabffdd Update to Ruby 4.0.4
Add a patch to remove non-ASCII characters that break the rdoc generation.
2026-05-15 00:01:29 +00:00
jeremy 4fb37dbbba Update to Ruby 4.0.3
Fixes CVE-2026-41316

OK tb@
2026-05-08 04:11:42 +00:00
jeremy 3c723c1551 Update to Ruby 3.3.11
Fixes CVE-2026-27820: Buffer overflow vulnerability in Zlib::GzipReader

One patch merged upstream.
2026-03-28 01:29:06 +00:00
sthen 1976178ed3 remove USE_NOBTCFI-aarch64 again, libffi is mended thanks to kettenis@ 2026-03-27 16:41:27 +00:00
tb e034c21a53 ruby/4.0: REVIAION -> REVISION 2026-03-26 21:50:37 +00:00
sthen cbe9fd3d84 missed bump 2026-03-25 09:01:15 +00:00
sthen 52d7cd5366 ruby 4.0 FFI also fails on aarch64 BTI machines without USE_NOBTCFI
pointed out by gkoehler/tb
2026-03-25 09:00:26 +00:00
sthen 78235cfc3b build ruby 3.x with USE_NOBTCFI on aarch64 due to crashes at runtime
when using FFI on machines which enforce BTI. (4.0 seems ok).

ok tb jeremy kn
2026-03-25 07:01:44 +00:00
jeremy 03fcf87891 Update to Ruby 4.0.2
Add a distpatch to avoid a regression, already fixed upstream.
2026-03-20 01:39:32 +00:00
jeremy 54c40e513b Update to Ruby 3.4.9
OK sthen@
2026-03-13 01:14:08 +00:00
jca fed2baf92a Fix misaligned access on mips64/sparc64/etc and enable ruby-4.0 on sparc64
Use memcpy to access unaligned longs.  ok tb@ jeremy@ (maintainer)

Tests still fail because of the --with-coroutine=pthread fallback:
[BUG] object allocation during garbage collection phase
but that is kinda expected.
2026-01-20 13:03:11 +00:00
jeremy 6440b1d43b Update to Ruby 4.0.1
OK tb@
2026-01-14 01:28:06 +00:00
jeremy 7f1790ea7c Support ruby40 FLAVOR when building ruby gem ports
OK tb@
2025-12-27 16:28:20 +00:00
jeremy 9eaca2e208 Hookup Ruby 4.0 2025-12-27 16:26:23 +00:00
jeremy 95a9d4be0a Import Ruby 4.0.0
Mark BROKEN on sparc64 as it doesn't build.

arm64 testing by tb@
sparc64 issue found by tb@

OK tb@
2025-12-27 16:25:13 +00:00
jeremy 8b93b5017b Update to Ruby 3.4.8 2025-12-19 02:51:40 +00:00
claudio d06837be7e Backport PR15113 from main branch to fix build of ruby3.3 with gcc15.
OK jeremy@
2025-11-28 12:41:57 +00:00
jeremy a17526d443 Send Ruby 3.2 to the Attic 2025-11-04 01:08:50 +00:00
jeremy 570c9924f5 Unhook Ruby 3.2 2025-11-04 01:08:34 +00:00
jeremy 084ebbaaf9 Remove support for building ruby32-* packages for Ruby ports 2025-11-04 01:08:13 +00:00
jeremy 4f4fc72e4e Update to Ruby 3.3.10
Fixes CVE-2025-61594: URI Credential Leakage Bypass

OK rsadowski@
2025-10-24 13:26:13 +00:00
jeremy 6db83d6b2d Update to Ruby 3.4.7
Fixes CVE-2025-61594 URI Credential Leakage Bypass
2025-10-21 00:16:35 +00:00
jeremy ba8b2efffa Update to Ruby 3.4.6
OK rsadowski@
2025-09-17 00:20:33 +00:00
jeremy 0222b1234c Update to Ruby 3.2.9
Delete a file in post-extract to fix a net-imap build issue.
2025-07-27 06:34:46 +00:00
jeremy ff1e130a6e Update to Ruby 3.3.9 2025-07-27 06:29:40 +00:00
jeremy 2fec945427 Update to Ruby 3.4.5 2025-07-18 00:38:13 +00:00
jeremy 6bb58e3ae7 Switch the default ruby version in ports to Ruby 3.4
Fix from phessler@
OK phessler@ sthen@ rsadowski@
2025-06-28 00:36:08 +00:00
jeremy e2bc08c101 Fix RbConfig::CONFIG['STRIP']
The ports infrastructure places a strip executable in the path while building
that always returns true.  This negatively affects Ruby's detection of valid
strip options.  Patch configure to not accept -A -n flags to strip, so Ruby
will pick up -S -x flags instead.

OK rsadowski@
"probably the simplest way to fix it" sthen@
2025-06-22 19:30:02 +00:00
jeremy d0c834a993 Update to Ruby 3.4.4 2025-05-17 00:40:35 +00:00
jca fc4b8f5013 Fix ruby-3.2 coroutines on BT-capable arm64 hardware
Uncovered while building graphics/ruby-rmagick,ruby32
ok jeremy@ (maintainer)
2025-05-07 16:08:52 +00:00
jeremy 2942f77cd9 Update to Ruby 3.4.3 2025-04-26 00:36:52 +00:00
jeremy 5082b41fa6 Update to Ruby 3.3.8 2025-04-26 00:36:10 +00:00
jeremy f98ce2a451 Update to Ruby 3.2.8
Fixes:

* CVE-2025-27219: Denial of Service in CGI::Cookie.parse
* CVE-2025-27220: ReDoS in CGI::Util#escapeElement
* CVE-2025-27221: userinfo leakage in URI#join, URI#merge and URI#+

OK sthen@
2025-03-27 15:57:35 +00:00
jeremy 5cfbf78028 Update to Ruby 3.4.2 2025-02-17 21:20:47 +00:00
jeremy 8f9875d1c9 Update to Ruby 3.2.7 2025-02-07 07:03:29 +00:00
jeremy d32a14e148 Update to Ruby 3.3.7 2025-01-18 02:11:07 +00:00
tb 40d79f6e81 lang/ruby/3.4: align with 3.3 to build with BTI support
ok jeremy
2025-01-11 10:44:38 +00:00
tb f007bd982a lang/ruby/3.4: disable yjit on aarch64
Like in 3.3 this doesn't work and leads to build failures on modern apple
hardeware.

ok jeremy
2025-01-11 10:37:37 +00:00
jeremy e16981b2a9 Support ruby34 FLAVOR when building ruby gem ports
OK jca@
2025-01-10 03:38:07 +00:00
jeremy 34d7c0c8d0 Hook up Ruby 3.4 2025-01-10 03:37:40 +00:00
jeremy 12db6c0d6f Import Ruby 3.4.1
riscv64 and arm64 help from jca@
OK jca@
2025-01-10 03:36:59 +00:00
jca 1f56ca0253 Move ruby-3.3 to an assembly coroutine implementation on riscv64
The pthread based implementation breaks way too often with (likely) GC memory
corruptions:

[BUG] object allocation during garbage collection phase

when building graphics/rmagick,ruby33.
2025-01-08 18:45:42 +00:00
jeremy 4fbddcf961 Send Ruby 3.1 to the Attic 2024-11-21 05:54:41 +00:00
jeremy 1d287589a2 Unhook Ruby 3.1 2024-11-21 05:53:59 +00:00
jeremy de39f09296 Remove support for building ruby31-* packages for Ruby ports
Remove guard for COMPILER for building gem ext ports, now that all versions
need to use base-clang and ports-gcc.
2024-11-21 05:53:26 +00:00
jeremy 20c672611a Update to Ruby 3.3.6 2024-11-07 04:45:18 +00:00
jeremy f5e52d8329 Update to Ruby 3.2.6 2024-11-02 04:22:40 +00:00
jeremy ea30f3c42a Update to Ruby 3.3.5
Fixes the following CVEs for DoS vulnerabilities in REXML:

* CVE-2024-43398
* CVE-2024-41946
* CVE-2024-41123

Add post-install hook to remove bin/*.lock files, as they
shouldn't be in the package (not sure why this version
started to add them).
2024-09-05 16:37:20 +00:00
jeremy 776d4c0900 Update to Ruby 3.2.5
Fixes CVE-2024-39908
2024-07-28 14:46:59 +00:00