Merge release version of Rubygems 2.7.0.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@60608 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
hsbt 2017-11-02 04:25:37 +00:00
Родитель 279948f622
Коммит 9e475eef86
3 изменённых файлов: 7 добавлений и 3 удалений

3
NEWS
Просмотреть файл

@ -189,7 +189,8 @@ with all sufficient information, see the ChangeLog file or Redmine
* Rubygems
* Update Rubygems 2.6.14.
* Update Rubygems 2.7.0.
* http://blog.rubygems.org/2017/11/01/2.7.0-released.html
* http://blog.rubygems.org/2017/08/27/2.6.13-released.html
* http://blog.rubygems.org/2017/10/09/unsafe-object-deserialization-vulnerability.html

Просмотреть файл

@ -10,7 +10,7 @@ require 'rbconfig'
require 'thread'
module Gem
VERSION = "2.6.14"
VERSION = "2.7.0"
end
# Must be first since it unloads the prelude from 1.9.2

Просмотреть файл

@ -35,7 +35,10 @@ module Gem
::YAML.safe_load(input, [::Symbol])
end
else
warn "YAML safe loading is not available. Please upgrade psych to a version that supports safe loading (>= 2.0)."
unless Gem::Deprecate.skip
warn "YAML safe loading is not available. Please upgrade psych to a version that supports safe loading (>= 2.0)."
end
def self.safe_load input, *args
::YAML.load input
end