head	1.18;
access;
symbols
	pkgsrc-2026Q2:1.16.0.2
	pkgsrc-2026Q2-base:1.16
	pkgsrc-2026Q1:1.12.0.2
	pkgsrc-2026Q1-base:1.12
	pkgsrc-2025Q4:1.10.0.2
	pkgsrc-2025Q4-base:1.10
	pkgsrc-2025Q3:1.8.0.2
	pkgsrc-2025Q3-base:1.8
	pkgsrc-2025Q2:1.7.0.2
	pkgsrc-2025Q2-base:1.7
	pkgsrc-2025Q1:1.4.0.2
	pkgsrc-2025Q1-base:1.4
	pkgsrc-2024Q4:1.1.0.2
	pkgsrc-2024Q4-base:1.1;
locks; strict;
comment	@# @;


1.18
date	2026.09.02.17.00.15;	author taca;	state Exp;
branches;
next	1.17;
commitid	BumTjg3dyfJVk4UG;

1.17
date	2026.08.11.15.54.04;	author taca;	state Exp;
branches;
next	1.16;
commitid	q13F4Uni6q65GeRG;

1.16
date	2026.06.16.14.37.34;	author taca;	state Exp;
branches;
next	1.15;
commitid	2p4xkeO95Zur32KG;

1.15
date	2026.04.08.14.54.20;	author taca;	state Exp;
branches;
next	1.14;
commitid	hX8Fj5fOuWsHmaBG;

1.14
date	2026.04.08.14.29.34;	author taca;	state Exp;
branches;
next	1.13;
commitid	xF7soDI6tGxceaBG;

1.13
date	2026.03.29.13.59.31;	author taca;	state Exp;
branches;
next	1.12;
commitid	37zstE4sEoBPnSzG;

1.12
date	2026.02.11.07.51.14;	author taca;	state Exp;
branches
	1.12.2.1;
next	1.11;
commitid	V9sohjKsFVi7PVtG;

1.11
date	2026.01.18.15.51.11;	author taca;	state Exp;
branches;
next	1.10;
commitid	lE7JXqnTKIkCfTqG;

1.10
date	2025.11.03.07.13.52;	author taca;	state Exp;
branches;
next	1.9;
commitid	nK22Ku3fwheDP4hG;

1.9
date	2025.10.08.14.09.47;	author taca;	state Exp;
branches;
next	1.8;
commitid	eEGpoc5xDgP7YLdG;

1.8
date	2025.08.11.08.38.44;	author taca;	state Exp;
branches
	1.8.2.1;
next	1.7;
commitid	QoVbLTBv8ZK80i6G;

1.7
date	2025.06.12.14.28.30;	author taca;	state Exp;
branches;
next	1.6;
commitid	uJc9IJLZf6gzRBYF;

1.6
date	2025.05.26.15.54.07;	author taca;	state Exp;
branches;
next	1.5;
commitid	FFcmDb6D4PQXSqWF;

1.5
date	2025.05.17.07.25.35;	author taca;	state Exp;
branches;
next	1.4;
commitid	PXtmBbP01Q5rmeVF;

1.4
date	2025.03.16.12.29.39;	author taca;	state Exp;
branches;
next	1.3;
commitid	J9OBfIjpP9Ti2iNF;

1.3
date	2025.02.09.10.31.30;	author taca;	state Exp;
branches;
next	1.2;
commitid	bF5YcAkXawMwvMIF;

1.2
date	2025.01.20.14.29.19;	author taca;	state Exp;
branches;
next	1.1;
commitid	skKWGPZuepKXseGF;

1.1
date	2024.12.13.17.19.28;	author taca;	state Exp;
branches;
next	;
commitid	MiBSDMHsHdJ1DmBF;

1.12.2.1
date	2026.03.31.13.07.12;	author maya;	state Exp;
branches;
next	;
commitid	LgnFjI9MGE9V18AG;

1.8.2.1
date	2025.10.23.02.28.51;	author maya;	state Exp;
branches;
next	;
commitid	t7v5gru4P32NBDfG;


desc
@@


1.18
log
@develr/ruby-redmine60: update to 6.0.11

6.0.11 (2026-08-25)

Security fixes:

* Defect #44249: API requests can affect a user's session and circumvent
  security policies

* Defect #44308: Stored XSS in Redmine Textile Formatter via < notextile >
  Tag-Restoration ("Frankenstein tag")

* Defect #44309: Nested issue-relations endpoints bypass source issue
  visibility

* Defect #44310: Child project inherit_members updates bypass
  member-management authorization

* Patch #44371: Filter key parameter from logging
@
text
@# $NetBSD: Makefile,v 1.17 2026/08/11 15:54:04 taca Exp $

DISTNAME=	redmine-${RM_VERSION}
PKGNAME=	${RUBY_PKGPREFIX}-${DISTNAME:S/redmine/redmine${RM_VER}/}
CATEGORIES=	devel
MASTER_SITES=	https://www.redmine.org/releases/

MAINTAINER=	pkgsrc-users@@NetBSD.org
HOMEPAGE=	https://www.redmine.org/
COMMENT=	Flexible project management web application
LICENSE=	gnu-gpl-v2 # and so on.

RM_VERSION=	6.0.11

NO_BUILD=	yes

USE_LANGUAGES=	# none

RUBY_VERSIONS_ACCEPTED=	33
RUBY_RAILS_ACCEPTED=	72

PYTHON_VERSIONS_INCOMPATIBLE=	27

OVERRIDE_GEMSPEC+=	mini-magick>=4.11.0 nokogiri>=1.19.1<1.20 zip>=2.4.0

#DEPENDS+=	${RUBY_PKGPREFIX}-bundler>=1.12.0:../../misc/ruby-bundler
DEPENDS+=	${RUBY_RAILS_DEPENDS}
DEPENDS+=	${RUBY_PKGPREFIX}-rouge>=4.5.0<5:../../www/ruby-rouge

# ruby-mail depends it.
#DEPENDS+=	${RUBY_PKGPREFIX}-mini_mime>=1.1.0<1.2:../../mail/ruby-mini_mime
DEPENDS+=	${RUBY_PKGPREFIX}-actionpack-xml_parser>=2.0:../../textproc/ruby-actionpack-xml_parser
DEPENDS+=	${RUBY_PKGPREFIX}-roadie-rails32_${RUBY_RAILS}>=3.2.0<3.3:../../mail/ruby-roadie-rails32
DEPENDS+=	${RUBY_PKGPREFIX}-marcel>=1.0.0:../../devel/ruby-marcel
DEPENDS+=	${RUBY_PKGPREFIX}-mail>=2.8.1<2.9:../../mail/ruby-mail
DEPENDS+=	${RUBY_PKGPREFIX}-nokogiri>=1.19.1<1.20:../../textproc/ruby-nokogiri
#DEPENDS+=	${RUBY_PKGPREFIX}-i18n>=1.14.1:../../devel/ruby-i18n
DEPENDS+=	${RUBY_PKGPREFIX}-rbpdf>=1.21.4<1.22:../../print/ruby-rbpdf
DEPENDS+=	${RUBY_PKGPREFIX}-addressable>=0:../../net/ruby-addressable
DEPENDS+=	${RUBY_PKGPREFIX}-zip24>=2.4.0<3:../../archivers/ruby-zip24
DEPENDS+=	${RUBY_PKGPREFIX}-propshaft11>=1.1.0<1.2:../../www/ruby-propshaft11
DEPENDS+=	${RUBY_PKGPREFIX}-rack>=3.1.3:../../www/ruby-rack
#
DEPENDS+=	${RUBY_PKGPREFIX}-rotp>=6.2.0:../../security/ruby-rotp
DEPENDS+=	${RUBY_PKGPREFIX}-rqrcode>=1.2.0:../../textproc/ruby-rqrcode
DEPENDS+=	${RUBY_PKGPREFIX}-html-pipeline>=2.13.2<3:../../textproc/ruby-html-pipeline
DEPENDS+=	${RUBY_PKGPREFIX}-sanitize>=6.0<7:../../textproc/ruby-sanitize
#
DEPENDS+=	${RUBY_PKGPREFIX}-net-ldap>=0.17.0:../../net/ruby-net-ldap
DEPENDS+=	${RUBY_PKGPREFIX}-mini-magick>=5.0.1<6:../../graphics/ruby-mini-magick
DEPENDS+=	${RUBY_PKGPREFIX}-commonmarker0>=0.23.8<1:../../textproc/ruby-commonmarker0
DEPENDS+=	${RUBY_PKGPREFIX}-deckar01-task_list>=2.3.2:../../textproc/ruby-deckar01-task_list

REPLACE_RUBY+=	bin/*
REPLACE_RUBY+=	extra/mail_handler/rdm-mailhandler.rb
REPLACE_RUBY+=	extra/svn/reposman.rb

SUBST_CLASSES+=		path
SUBST_FILES.path+=	${DESTDIR}${PREFIX}/bin/redmine60_*${RUBY_SUFFIX}.sh
SUBST_FILES.path+=	${DESTDIR}${PREFIX}/${RM_DIR}/README-pkgsrc
SUBST_MESSAGE.path=	Fixing paths in helper shell scripts and documents.
SUBST_VARS.path=	PREFIX RM_DIR RM_VER RUBY RUBY_SUFFIX RCD_SCRIPTS_DIR
SUBST_STAGE.path=	post-install

EGDIR=		${PREFIX}/share/examples/${RUBY_PKGPREFIX}-redmine60
INSTALLATION_DIRS=	bin ${EGDIR} ${RM_DIR} ${RM_DIR}/config

CONF_FILES+=	${EGDIR}/configuration.yml.example \
			${RM_DIR}/config/configuration.yml
CONF_FILES+=	${EGDIR}/database.yml.example \
			${RM_DIR}/config/database.yml
CONF_FILES+=	${EGDIR}/additional_environment.rb.example \
			${RM_DIR}/config/additional_environment.rb
REQD_FILES+=	/dev/null ${RM_DIR}/Gemfile.lock
OWN_DIRS+=	${RM_DIR}/.bundle

PKG_GROUPS=	${APACHE_GROUP}
PKG_USERS=	${APACHE_USER}:${APACHE_GROUP}
BUILD_DEFS+=	APACHE_GROUP APACHE_USER
FILES_SUBST+=	WWWGRP=${APACHE_GROUP} WWWOWN=${APACHE_USER} \
		RM_DIR=${RM_DIR}

do-install:
	cd ${WRKSRC} && ${FIND} . -type d | ${XARGS} -I {} ${INSTALL_DATA_DIR} \
		${DESTDIR}${PREFIX}/${RM_DIR}/{}
	cd ${WRKSRC} && ${FIND} . -type f ! -name "*.orig" | ${XARGS} -I {} \
		${INSTALL_DATA} {} ${DESTDIR}${PREFIX}/${RM_DIR}/{}
	${INSTALL_SCRIPT} ${FILESDIR}/redmine60_migrate_plugins.sh \
		${DESTDIR}${PREFIX}/bin/redmine60_migrate_plugins${RUBY_SUFFIX}.sh
	${INSTALL_SCRIPT} ${FILESDIR}/redmine60_generate_secret_token.sh \
		${DESTDIR}${PREFIX}/bin/redmine60_generate_secret_token${RUBY_SUFFIX}.sh
	${INSTALL_SCRIPT} ${FILESDIR}/redmine60_migrate_db.sh \
		${DESTDIR}${PREFIX}/bin/redmine60_migrate_db${RUBY_SUFFIX}.sh
	${INSTALL_SCRIPT} ${FILESDIR}/redmine60_load_default_data.sh \
		${DESTDIR}${PREFIX}/bin/redmine60_load_default_data${RUBY_SUFFIX}.sh
	${INSTALL_DATA} ${FILESDIR}/README-pkgsrc ${DESTDIR}${PREFIX}/${RM_DIR}

post-install: unicorn-post-install
	${FIND} ${DESTDIR}${PREFIX} -name '.*' -exec ${RM} -rf {} +
	${MV} ${DESTDIR}${PREFIX}/${RM_DIR}/config/configuration.yml.example \
		${DESTDIR}/${EGDIR}
	${MV} ${DESTDIR}${PREFIX}/${RM_DIR}/config/database.yml.example \
		${DESTDIR}/${EGDIR}
	${MV} ${DESTDIR}${PREFIX}/${RM_DIR}/config/additional_environment.rb.example \
		${DESTDIR}/${EGDIR}

.include "../../devel/ruby-redmine/redmine.mk"
.include "options.mk"
.include "../../lang/ruby/modules.mk"
.include "../../lang/python/pyversion.mk"
.include "../../mk/bsd.pkg.mk"
@


1.17
log
@devel/ruby-redmine60: update dependency

Depends on databases/ruby-with_advisory_lock since there was no reason to
restrict to 5.x.

Bump PKGREVISION.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.16 2026/06/16 14:37:34 taca Exp $
a4 1
PKGREVISION=	1
d13 1
a13 1
RM_VERSION=	6.0.10
d24 1
a24 1
OVERRIDE_GEMSPEC+=	mini-magick>=4.11.0 nokogiri>=1.18.3<1.20 zip>=2.4.0
d36 1
a36 1
DEPENDS+=	${RUBY_PKGPREFIX}-nokogiri>=1.18.3<1.20:../../textproc/ruby-nokogiri
d42 1
a42 1
DEPENDS+=	${RUBY_PKGPREFIX}-rack>=3.1.2:../../www/ruby-rack
@


1.16
log
@devel/ruby-redmine60: update to 6.0.10

Redmine 6.0.10 (2026-06-15)

This release addresss multiple security vulnerabilities along with various
bug fixes and improvements.

Code cleanup/refactoring

* Defect #43985: Flaky IssuesSystemTest caused by `!page.has_css?`
* Defect #44010: Too much INFO log of asset paths when starting Rails

Documentation

* Defect #43906: Wiki help does not display localized content for locales
  with a region subtag
* Patch #43896: Remove obsolete db:migrate:upgrade_plugin_migrations step
  from doc/UPGRADING
* Patch #43930: Add blockquote formatting in CommonMark wiki help pages

Projects

* Defect #43910: Projects with the identifiers "autocomplete" or
  "bulk_destroy" cannot perform some operations

Rails support

* Patch #43909: Update Rails to 7.2.3.1

SCM

* Patch #43966: Tighten SVN repository URL validation

Security

* Patch #43986: Improve the `config.filter_parameters` setting
* Defect #43951: Bulk attachment download bypasses View files permission for
  project/version attachments
* Defect #44109: PreAuth leak name of private Projects
* Defect #44118: Any project member with add_issue_notes permission can add
  notes to private issues they cannot view, via the MailHandler reply
  dispatch
* Defect #44138: Stored XSS in Textile formatter due to restore_redmine_links
* Defect #44145: PostScript execution in Redmine::Thumbnail.generate via %%
  DSC-comment prefix
* Defect #44146: Time-entry API hidden custom-field leak

Translations

* Patch #44005: Fix French translation of label_auto_watch_on_issue_created

UI

* Defect #44170: Toggling between board and list in projects query do not
  work properly
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.15 2026/04/08 14:54:20 taca Exp $
d5 1
@


1.15
log
@Remove dependencies for ruby32.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.14 2026/04/08 14:29:34 taca Exp $
d13 1
a13 1
RM_VERSION=	6.0.9
@


1.14
log
@Remove support for ruby32.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.13 2026/03/29 13:59:31 taca Exp $
a107 8

# for older Ruby
.if ${RUBY_VER} < 33
DEPENDS+=	${RUBY_PKGPREFIX}-csv>=3.2.8:../../textproc/ruby-csv
DEPENDS+=	${RUBY_PKGPREFIX}-net-imap>=0.4.20:../../net/ruby-net-imap
DEPENDS+=	${RUBY_PKGPREFIX}-net-smtp>=0.4.0:../../net/ruby-net-smtp
.endif

@


1.13
log
@devel/ruby-redmine60: update to 6.0.9

6.0.9 (2026-03-16)

This release contains security fixes.

[Code cleanup/refactoring]

* Patch #43872: Update GitHub Actions workflow dependencies

[Database]

* Patch #43668: Serialize address limit checks during email_addresses#create

[Issues]

* Feature #43837: Add a hint to the issue relation add form that clarifies
  multiple comma-separated issue IDs are accepted

[Issues filter]

* Patch #43736: author.group filter test fix

[Issues list]

* Defect #31972: An empty group_count badge is displayed when grouped with
  created_on

[Permissions and roles]

* Feature #43659: Set minimum width for Permission column in permission
  report

[Security]

* Defect #43661: Unsafe eval usage in AttachmentsHelper
* Defect #43690: Directory Traversal via Backslash-Separated Paths in
  Filesystem SCM
* Defect #43691: DOM (Stored) XSS in @@mention autocomplete via unescaped
  user name
* Defect #43692: LDAP Injection (Unescaped Input in LDAP Search Filter)
* Defect #43694: DOM XSS: HTML Injection via Custom Field Name in Query
  Filter Generation
* Defect #43830: User who is allowed to view only their own time entries can
  retrieve other users' time entry details by directly specifying the
  TimeEntry ID via the REST API
* Defect #43840: Update Nokogiri to 1.19.1

[Text formatting]

* Defect #40918: Wiki "Edit this section" does not extract SeText headings
  correctly in CommonMark Markdown

[UI]

* Defect #43804: Custom field preview does not work on bulk issue edit
* Defect #43869: Default assignee selected by category is not shown in UI
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.12 2026/02/11 07:51:14 taca Exp $
d19 1
a19 1
RUBY_VERSIONS_ACCEPTED=	32 33
@


1.12
log
@devel/ruby-redmine60: package overhaul

* Move MESSAGE to README-pkgsrc.
* Change dependency to textproc/ruby-actionpack-xml_parser.
* Fix various dependency in Gemfile.
* Add dependency to databases/ruby-with_advisory_lock53 with mysql option.

Bump PKGREVISION.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.11 2026/01/18 15:51:11 taca Exp $
a4 1
PKGREVISION=	1
d13 1
a13 1
RM_VERSION=	6.0.8
@


1.12.2.1
log
@Pullup ticket #7064 - requested by taca
devel/ruby-redmine60: Security fix

Revisions pulled up:
- devel/ruby-redmine60/Makefile                                 1.13
- devel/ruby-redmine60/PLIST                                    1.7
- devel/ruby-redmine60/distinfo                                 1.9
- devel/ruby-redmine60/patches/patch-Gemfile                    1.7

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Mar 29 13:59:32 UTC 2026

   Modified Files:
   	pkgsrc/devel/ruby-redmine60: Makefile PLIST distinfo
   	pkgsrc/devel/ruby-redmine60/patches: patch-Gemfile

   Log Message:
   devel/ruby-redmine60: update to 6.0.9

   6.0.9 (2026-03-16)

   This release contains security fixes.

   [Code cleanup/refactoring]

   * Patch #43872: Update GitHub Actions workflow dependencies

   [Database]

   * Patch #43668: Serialize address limit checks during email_addresses#create

   [Issues]

   * Feature #43837: Add a hint to the issue relation add form that clarifies
     multiple comma-separated issue IDs are accepted

   [Issues filter]

   * Patch #43736: author.group filter test fix

   [Issues list]

   * Defect #31972: An empty group_count badge is displayed when grouped with
     created_on

   [Permissions and roles]

   * Feature #43659: Set minimum width for Permission column in permission
     report

   [Security]

   * Defect #43661: Unsafe eval usage in AttachmentsHelper
   * Defect #43690: Directory Traversal via Backslash-Separated Paths in
     Filesystem SCM
   * Defect #43691: DOM (Stored) XSS in @@mention autocomplete via unescaped
     user name
   * Defect #43692: LDAP Injection (Unescaped Input in LDAP Search Filter)
   * Defect #43694: DOM XSS: HTML Injection via Custom Field Name in Query
     Filter Generation
   * Defect #43830: User who is allowed to view only their own time entries can
     retrieve other users' time entry details by directly specifying the
     TimeEntry ID via the REST API
   * Defect #43840: Update Nokogiri to 1.19.1

   [Text formatting]

   * Defect #40918: Wiki "Edit this section" does not extract SeText headings
     correctly in CommonMark Markdown

   [UI]

   * Defect #43804: Custom field preview does not work on bulk issue edit
   * Defect #43869: Default assignee selected by category is not shown in UI
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.12 2026/02/11 07:51:14 taca Exp $
d5 1
d14 1
a14 1
RM_VERSION=	6.0.9
@


1.11
log
@devel/ruby-redmine60: update to 6.0.8

6.0.8 (2026-01-05)

Code cleanup/refactoring

* Defect #43441: Fix failures in test/system/issues_test.rb
* Patch #43638: Update copyright year to 2026

Custom fields

* Defect #43521: Saving a custom field fails with 500 when regular
  expression is invalid

Gems support

* Defect #43609: Tests fail with minitest 6.0

Issues list

* Defect #43283: Overdue due date text does not turn light gray when issue
  is selected

No category

* Patch #43275: Remove continue-on-error: true from the system test job in
  GitHub CI

Rails support

* Patch #43633: Update Rails to 7.2.3

Security

* Defect #43451: PostScript disguised as PDF can lead to arbitrary file
  operations via thumbnail generation
* Defect #43634: Authorization bypass in Redmine allows modification of
  attachment metadata on invisible issues
* Defect #43635: Authorization bypass in Redmine allows deletion of
  attachment on invisible issues external

SCM

* Defect #43525: "label_added" is not translated in the repository revision
  view legend

Text formatting

* Defect #43612: Inline code rendering does not preserve multiple spaces

Translations

* Patch #43490: Japanese translation update (jstoolbar-ja.js) for 6.0-stable

UI

* Defect #43378: Column headers are slightly shifted to the right in tables
  in list views
* Defect #43527: Login and Email columns are unexpectedly center-aligned on
  the Users page since Redmine 5.1
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.10 2025/11/03 07:13:52 taca Exp $
d5 1
d33 1
a33 1
DEPENDS+=	${RUBY_PKGPREFIX}-actionpack${RUBY_RAILS}-xml_parser>=2.0:../../textproc/ruby-actionpack-xml_parser
d59 6
a64 5
SUBST_CLASSES+=		shell
SUBST_FILES.shell=	${DESTDIR}${PREFIX}/bin/redmine60_*${RUBY_SUFFIX}.sh
SUBST_MESSAGE.shell=	Fixing paths in helper shell scripts.
SUBST_VARS.shell=	PREFIX RUBY RM_DIR
SUBST_STAGE.shell=	post-install
d76 1
d97 1
@


1.10
log
@devel/ruby-redmine60: update dependency

Update dependency to archivers/ruby-zip24, ruby-roadie-rails32 and
textproc/ruby-commonmarker0.

Bump PKGREVISION.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.9 2025/10/08 14:09:47 taca Exp $
a4 1
PKGREVISION=	1
d13 1
a13 1
RM_VERSION=	6.0.7
d24 1
a24 1
OVERRIDE_GEMSPEC+=	mini-magick>=4.11.0 zip>=2.4.0
d36 3
a38 3
DEPENDS+=	${RUBY_PKGPREFIX}-nokogiri>=1.18.3<1.19:../../textproc/ruby-nokogiri
DEPENDS+=	${RUBY_PKGPREFIX}-i18n>=1.14.1:../../devel/ruby-i18n
DEPENDS+=	${RUBY_PKGPREFIX}-rbpdf>=1.21.3<1.22:../../print/ruby-rbpdf
d41 3
d46 3
d51 1
a52 3
DEPENDS+=	${RUBY_PKGPREFIX}-html-pipeline>=2.13.2<3:../../textproc/ruby-html-pipeline
DEPENDS+=	${RUBY_PKGPREFIX}-commonmarker0>=0.23.8<1:../../textproc/ruby-commonmarker0
DEPENDS+=	${RUBY_PKGPREFIX}-sanitize>=6.0<7:../../textproc/ruby-sanitize
d108 3
a110 2
DEPENDS+=	${RUBY_PKGPREFIX}-csv>=3.2.8<4:../../textproc/ruby-csv
DEPENDS+=	${RUBY_PKGPREFIX}-net-imap>=0.5.8:../../net/ruby-net-imap
@


1.9
log
@devel/ruby-redmine60: update to 6.0.7

6.0.7 (2025-09-21)

[Administration]

* Defect #43174: CookieOverflow error when deleting a tracker used by
  many projects

[Code cleanup/refactoring]

* Patch #43035: Remove empty rubyonrails.yml on 6.0-stable branch

[Documentation]

* Defect #43204: Adds missing documentation for issue macro to fr and
  ru languages

[Gantt]

* Defect #43014: Content in selected columns overflows to the right in
  Gantt chart

[Importers]

* Defect #42957: Incorrect "for" attribute in labels of issue
  relations import

[Issues]

* Defect #43192: Done ratio interval in issue context menu does not
  respect Done Ratio Interval setting

[Rails support]

* Patch #43141: Update Rails to 7.2.2.2

[Security]

* Defect #42998: Username and password stored in login form
* Defect #43083: Information disclosure in Two-Factor Authentication
* Defect #43161: When copying issues, all existing custom values are
  set to the new issue without sufficient validation

[SCM]

* Defect #43002: RepositoriesSubversionControllerTest fails in
  5.1-stable due to missing foo.js in test repository

[Translations]

* Patch #42971: Italian translation update for 6.0-stable

[UI]

* Defect #43004: Watchers list is not properly displayed in Gantt table
* Defect #43175: Fix some issues with missing or misplaced html tags
* Patch #43008: Display icon-actions on hover with the same color as links
* Patch #43196: Improve spacing of checkboxes in CSV export options dialog
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.8 2025/08/11 08:38:44 taca Exp $
d5 1
d25 1
a25 1
OVERRIDE_GEMSPEC+=	mini-magick>=4.11.0
d34 1
a34 1
DEPENDS+=	${RUBY_PKGPREFIX}-roadie-rails${RUBY_RAILS}>=3.2.0<3.3:../../mail/ruby-roadie-rails
d41 1
a41 1
DEPENDS+=	${RUBY_PKGPREFIX}-zip>=2.3.0<2.4:../../archivers/ruby-zip
d48 1
a48 1
DEPENDS+=	${RUBY_PKGPREFIX}-commonmarker>=0.23.8<1:../../textproc/ruby-commonmarker
@


1.8
log
@devel/ruby-redmine60: update to 6.0.6

6.0.6 (2025-07-07)

Attachments

* Defect #42920: Missing icon in attachments upload form

Code cleanup/refactoring

* Defect #42687: Fix random failures in several system tests with Chrome 133 and later
* Patch #42422: Use Capybara's assert_current_path in "log_user" steps to wait for page in ApplicationSystemTestCase
* Patch #42600: Suppress "Change your password" popup for stable system tests
* Patch #42756: Update tests for rails-dom-testing 2.3.0 whitespace collapsing

[Database]

* Defect #42622: Joining both atom_token and api_token on the User model causes an error due to the ambiguous column name "action"

[Documentation]

* Defect #42644: Noto Sans fonts are not applied on Wiki syntax help pages
* Defect #42657: Update documentation links and fix config flag typo
* Patch #42618: Add missing allowed CSS properties to the CommonMark Markdown help

[Email receiving]

* Defect #42962: Mail handler fails to create issues from emails over 4MB on Rack >= 3.1.14

[Gems support]

* Defect #42606: RuboCop warning about deprecated EnsureNode#body with rubocop-ast >= 1.41

[I18n]

* Defect #42815: Limit available locales to those defined by Redmine itself no longer works

[Issues list]

* Defect #42807: Progress Bar in issues list has a border above it

[Issues workflow]

* Defect #42875: "Page not found" error when saving workflows with many statuses on Rack >= 3.1.14

[No category]

* Patch #42688: Run system tests on GitHub CI

[Performance]

* Defect #42933: Fix N+1 query issue in Wiki history page when loading authors of Wiki content versions

[SCM]

* Defect #42839: Downloading .js files from the repository browser fails with a 422 error due to ActionController::InvalidCrossOriginRequest
* Patch #42597: Skip some Mercurial tests when using Mercurial 5.1 or later in Redmine 6.0 or 5.1

[Security]

* Patch #42662: Require net-imap gem 0.2.5, 0.3.9, 0.4.20, 0.5.7, or later to address CVE-2025-43857

[Text formatting]

* Defect #42332: "Edit this section" button is missing for headings rendered as multiline HTML
* Defect #42648: Wiki/CommonMark: Broken references for multiple footnote usage

[Translations]

* Patch #42739: Persian translate update for 6.0-stable
* Patch #42754: Swedish translation update for 6.0-stable

[UI]

* Defect #42640: Query totals overlaps query buttons when an RTL language is used
* Defect #42654: Text in project jump box is vertically misaligned
* Defect #42773: Padding in the Preview tab is larger than in the actual rendered content
* Defect #42786: "Clear" button for custom queries has incorrect styling inside the flyout menu
* Defect #42797: Loading and waiting icons use legacy icons and overlap filename when attaching files
* Defect #42953: Replace legacy other download icon with SVG icon
* Patch #42641: Improve SVG contrast when an item is selected in administration sidebar
* Patch #42794: Hide irrelevant information when printing

[Wiki]

* Defect #42558: JPEG images are not shown in exported PDF files
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.7 2025/06/12 14:28:30 taca Exp $
d13 1
a13 1
RM_VERSION=	6.0.6
@


1.8.2.1
log
@Pullup ticket #7021 - requested by taca
devel/ruby-redmine60: Security fix

Revisions pulled up:
- devel/ruby-redmine60/Makefile                                 1.9
- devel/ruby-redmine60/distinfo                                 1.6
- devel/ruby-redmine60/patches/patch-Gemfile                    1.4

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Oct  8 14:09:48 UTC 2025

   Modified Files:
   	pkgsrc/devel/ruby-redmine60: Makefile distinfo
   	pkgsrc/devel/ruby-redmine60/patches: patch-Gemfile

   Log Message:
   devel/ruby-redmine60: update to 6.0.7

   6.0.7 (2025-09-21)

   [Administration]

   * Defect #43174: CookieOverflow error when deleting a tracker used by
     many projects

   [Code cleanup/refactoring]

   * Patch #43035: Remove empty rubyonrails.yml on 6.0-stable branch

   [Documentation]

   * Defect #43204: Adds missing documentation for issue macro to fr and
     ru languages

   [Gantt]

   * Defect #43014: Content in selected columns overflows to the right in
     Gantt chart

   [Importers]

   * Defect #42957: Incorrect "for" attribute in labels of issue
     relations import

   [Issues]

   * Defect #43192: Done ratio interval in issue context menu does not
     respect Done Ratio Interval setting

   [Rails support]

   * Patch #43141: Update Rails to 7.2.2.2

   [Security]

   * Defect #42998: Username and password stored in login form
   * Defect #43083: Information disclosure in Two-Factor Authentication
   * Defect #43161: When copying issues, all existing custom values are
     set to the new issue without sufficient validation

   [SCM]

   * Defect #43002: RepositoriesSubversionControllerTest fails in
     5.1-stable due to missing foo.js in test repository

   [Translations]

   * Patch #42971: Italian translation update for 6.0-stable

   [UI]

   * Defect #43004: Watchers list is not properly displayed in Gantt table
   * Defect #43175: Fix some issues with missing or misplaced html tags
   * Patch #43008: Display icon-actions on hover with the same color as links
   * Patch #43196: Improve spacing of checkboxes in CSV export options dialog
@
text
@d1 1
a1 1
# $NetBSD$
d13 1
a13 1
RM_VERSION=	6.0.7
@


1.7
log
@devel/ruby-redmine60: correct REPLACE_RUBY

* DESCR should be end with a newline.
* Make REPLACE_RUBY to really work.

Bump PKGREVISION.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.6 2025/05/26 15:54:07 taca Exp $
a4 1
PKGREVISION=	1
d13 1
a13 1
RM_VERSION=	6.0.5
d105 1
a105 1
DEPENDS+=	${RUBY_PKGPREFIX}-net-imap>=0.4.8:../../net/ruby-net-imap
@


1.6
log
@devel/ruby-redmine60: remove support for Ruby 3.1
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.5 2025/05/17 07:25:35 taca Exp $
d5 1
d51 3
a53 14
.include "../../lang/ruby/modules.mk"

# for older Ruby
.if ${RUBY_VER} < 33
DEPENDS+=	${RUBY_PKGPREFIX}-csv>=3.2.8<4:../../textproc/ruby-csv
DEPENDS+=	${RUBY_PKGPREFIX}-net-imap>=0.4.8:../../net/ruby-net-imap
.endif

.include "options.mk"

REPLACE_RUBY+=	${DISTNAME}/bin/*
REPLACE_RUBY+=	${DISTNAME}/extra/mail_handler/rdm-mailhandler.rb
REPLACE_RUBY+=	${DISTNAME}/extra/svn/reposman.rb
REPLACE_RUBY+=	${DISTNAME}/public/dispatch.fcgi.example
d102 9
@


1.5
log
@devel/ruby-redmine60: update to 6.0.5

6.0.5 (2025-04-20)

[Administration]

* Defect #42584: NoMethodError when creating a user with an invalid email
  address and domain restrictions are enabled

[Attachments]

* Defect #42394: Inconsistent behaviour between attachment download routes
  with and without filename

[Code cleanup/refactoring]

* Patch #42562: Fix random test failure in ProjectAdminQueryTest due to
  missing language setting
* Patch #42572: Fix random test failure in
  MemberTest#test_update_roles_with_inherited_roles due to non-deterministic
  ordering

[Custom fields]

* Defect #42342: Missing thousands separator in Integer and Float custom
  field totals
* Patch #41935: Add "editable" attribute in the custom fields API response

[Gantt]

* Defect #42145: MiniMagick (> 5) removed cli_path, result crash when
  supplied imagemagick_convert_command

[Issues]

* Defect #42458: "For all projects" checkbox should be disabled when editing
  an existing query in which the checkbox is already checked

[Performance]

* Defect #40728: Slow loading of global spent time list in MySQL
* Feature #42574: Optimize autocomplete issue listing triggered by typing
  "##" by eager loading trackers

[Plugin API]

* Defect #42509: Plugin activity icons broken when multiple plugins are
  loaded

[Projects]

* Patch #42440: Fix project selector focus by explicitly targeting the first
  selected item

[SCM]

* Patch #42500: Skip repository tests when the SCM client command is
  unavailable

[Text formatting]

* Defect #42545: Commit message in issue history might be rendered in
  incorrect context

[UI]

* Defect #41828: In mobile view, delete relation svg icon in 'Related
  Issues' on an issue page, overflow text
* Defect #41833: Tabs left / right buttons use legacy icons
* Defect #41947: Collapse arrow shows the wrong direction at /workflows/edit
* Defect #41952: Flash notice icons use the legacy icons
* Defect #41967: Replace SCM action legacy icons with SVG icons in the tree
  view of the repository browser
* Defect #42181: Project jump box uses legacy caret icons
* Defect #42285: Icon expanded for closed fixed versions missing
* Defect #42286: Context menu right arrow uses the legacy icon
* Defect #42369: Expander icons not switch in Collapse all/Expand all
* Defect #42465: Improve SVG icon compatibility with RTL languages
* Defect #42487: Improve SVG contrast when a row is selected on table list
* Defect #42520: PNG icon displayed instead of SVG in subtasks list when
  viewing all tasks
* Defect #42532: Expander icon not working in repository tree
* Defect #42575: Fix sidebar switch button display in RTL language
* Defect #42576: Newly attached files are displayed using the legacy icons
* Patch #42497: Adjust the position of the news comment delete button
* Patch #42577: Replace legacy Atom icon with SVG icon
* Patch #42596: Do not show user icon in add watchers modal when gravatar is
  disabled
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2025/03/16 12:29:39 taca Exp $
d19 1
a19 1
RUBY_VERSIONS_ACCEPTED=	31 32 33
a55 4
.  if ${RUBY_VER} < 32
DEPENDS+=	${RUBY_PKGPREFIX}-net-pop>=0.1.2:../../net/ruby-net-pop
DEPENDS+=	${RUBY_PKGPREFIX}-net-smtp>=0.3.3:../../net/ruby-net-smtp
.  endif
@


1.4
log
@lang/ruby-redmine60: update to 6.0.4

This is security release.

6.0.4 (2025-03-10)

[Administration]

* Feature #42008: Expose default Rails health check endpoint "/up" for load
  balancers and uptime monitoring

[Code cleanup/refactoring]

* Defect #42200: InlineAutocompleteSystemTest login test fails randomly
* Patch #42244: Fix random failures in IssuesTest#test_bulk_copy due to
  StaleElementReferenceError

[Custom fields]

* Defect #42233: Float custom values with ',' as decimal separator are not
  converted to '.' and cause SQL errors when sorting or summing

[Gems support]

* Defect #42245: 5.1-stable: Redmine fails to start with error: Unknown
  database adapter `"mysql2"` found in config/database.yml

[No category]

* Feature #30069: Use GitHub Actions as a secondary CI solution to run tests
  through the existing mirroring

[Project settings]

* Defect #42192: Project settings members tab may raise ArgumentError if
  orphaned member records exist

[Security]

* Defect #42238: Stored Cross-Site Scripting (XSS) in custom query
* Defect #42326: Stored Cross-Site Scripting (XSS) in macros
* Defect #42352: ProjectQuery leaks details of private projects
* Defect #42194: /my/account does not correctly enforce sudo mode
* Patch #42333: Update Nokogiri to 1.18.3

[Time tracking]

* Defect #42172: `format_hours` method produces incorrect output for
  negative time values when `Setting.timespan_format` is "minutes"

[Translations]

* Defect #42170: Fix Turkish translation of field_assignable
* Patch #42239: Czech translation update for 6.0-stable

[UI]

* Defect #42229: Latest news box on home page misses icons

[UI - Responsive]

* Defect #42182: Poor color contrast of icons on flyout menu
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.3 2025/02/09 10:31:30 taca Exp $
d13 1
a13 1
RM_VERSION=	6.0.4
d52 1
a52 1
# not for ruby33
@


1.3
log
@devel/ruby-redmine60: update to 6.0.3

6.0.3 (2025-01-29)

Accounts / authentication

* Defect #41930: Redirection after signing in fails when the back_url
  includes a port number

Activity view

* Defect #42003: Misalignment of icons and titles in Activity view
* Defect #42070: Whitespace missing after hyphen between project name and
  event title in Activity view
* Feature #42038: Improve readability by adjusting font sizes and colors in
  activity view and search results

Attachments

* Defect #42084: Placeholder icon for non-existent thumbnail flickers
  rapidly on hover

Code cleanup/refactoring

* Defect #42088: Fix incorrect syntax in application.css on 6.0-stable
* Patch #41961: Use "fixtures :all" to ensure consistent test data and
  improve test reliability
* Patch #42089: Fix Lint workflow error on 6.0-stable due to unsupported
  ruby/setup-ruby on Ubuntu 24.04
* Patch #42140: Update footer copyright year to 2025

Gantt

* Defect #41925: Context menu submenus close unexpectedly on Gantt chart due
  to z-index conflict

Gems support

* Defect #42013: Redmine fails to start with error: Unknown database adapter
  "mysql2" found in config/database.yml

Issues

* Defect #42066: NoMethodError exception occurs in IssuePriority#high and
  #low when both default and active priorities are absent

Permissions and roles

* Defect #42106: Member roles are incorrectly added when a user's
  memberships are updated

Rails support

* Defect #42113: Redmine 5.x not starting with ActiveSupport Logger error
* Patch #41970: Updates Rails to 7.2.2.1

UI

* Defect #42023: Search results page uses legacy icons
* Defect #42051: "Font used for text areas" setting causes inconsistent font
  size
* Defect #42117: Key-value list reorder icon uses legacy icon
* Defect #42126: The member table layout breaks due to .icon class on td
  elements
* Defect #42130: Multiselect toggle uses legacy icons
* Feature #42005: Improve readability of error pages by updating fonts and
  layout
* Feature #42072: Adjust font size for breadcrumb and subtitle to improve
  readability and consistency
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.2 2025/01/20 14:29:19 taca Exp $
d13 1
a13 1
RM_VERSION=	6.0.3
d24 1
a24 1
OVERRIDE_GEMSPEC+=	mini-magick>=4.11.0 nokogiri>=1.13.4
d36 1
a36 1
DEPENDS+=	${RUBY_PKGPREFIX}-nokogiri>=1.16<2:../../textproc/ruby-nokogiri
@


1.2
log
@devel/ruby-redmine60: relax dependency

Allow depends on ruby-minimagick 5.1.

Bump PKGREVISION.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.1 2024/12/13 17:19:28 taca Exp $
a4 1
PKGREVISION=	1
d13 1
a13 1
RM_VERSION=	6.0.2
@


1.1
log
@devel/ruby-redmine60: add package version 6.0.2

Redmine is a flexible project management web application using the
Ruby on Rails framework, it is cross-platform and cross-database.

Redmine 6.0 introduces these new features in these categories:

* Redmine 6 has been upgraded to Rails 7.2
* Ruby 3.3 is now supported and support for Ruby 2.7 and 3.0 has been dropped
* Asset pipeline integration using Propshaft has been enabled
* Support for Markdown has been removed
* Icons have been replaced with SVG icons provided by Tabler
* UI tweaks
* New features and enhancements, some of them being long awaited features
* API changes
* Security improvement:
  User visibility changed from "all" to "member of visible projects" for new
  roles and existing builtin roles (#38853)
@
text
@d1 1
a1 1
# $NetBSD$
d5 1
d45 1
a45 1
DEPENDS+=	${RUBY_PKGPREFIX}-mini-magick>=5.0.1<5.1:../../graphics/ruby-mini-magick
@