Backport the security fixes to v0.4 for a 0.4.25 release#707

Merged

nevans merged 25 commits into

v0.4-stablefrom

backport/v0.4/security-patches

Jul 2, 2026

Commits on Jul 2, 2026

🍒 pick e224fd67 (#684): 🥅 Validate that Atom and Flag are not empty
nevans
committed
🍒 pick 5c213ab7 (#675): 🏷️ Allow 64-bit Integer arguments
nevans
committed
🍒 pick 3fe06a4c (#676): 🥅 Ensure send_number_data input is an Integer
nevans
committed
🍒 pick 94c79576 (#677): 📚⚠️ Boost visibility of raw data argument warnings
nevans
committed
🍒 pick 0d508fa7 (#681): 🥅 Validate server's literal byte size format
nevans
committed
🍒 pick b02182ce (#678): ✅🐛 Fix FakeServer CommandParseError (tests only)
nevans
committed
🍒 pick ef6fde3b (#678): ✅ Handle "stream closed" as EOF (tests only)
nevans
committed
🍒 pick a27a0022 (#678): ✅ Allow test server td ignore abrupt EOF
nevans
committed
🍒 pick 95afda8f (#679): ♻️ Allow RawData.new to directly set parts array
nevans
committed
🍒 pick 257e51d0 (#679): ♻️ Extract RawData.split(string)
nevans
committed
🍒 pick 17b6463c (#493): 🧵 Join the receiver _after_ closing the socket
nevans
committed
🍒 pick 5bddf68a (#493): 📖 Document that #disconnect joins receiver thread
nevans
committed
🍒 pick 9becbf17 (#493): 🧵 Don't lock around socket close in #disconnect
nevans
committed
🍒 pick 0c919fb2 (#493): ♻️ Simplify shutdown of socket in #disconnect
nevans
committed
🍒 pick aab64f92 (#686): 🧵 Fix deadlock in `#disconnect`
nevans
committed
🍒 pick e3c50fad (#698): ♻️ Refactor RawText, add improve test coverage
nevans
committed
🍒 pick 8d9397ab (#698): 🥅 Validate QuotedString contains only valid bytes
nevans
committed
🍒 pick 1f97168b (#699): 🥅 Validate `#enable` arguments are all atoms
nevans
committed
🍒 pick d6ddd294 (#700): 🐛 Prevent trailing `{0}` in RawData validation
nevans
committed
🍒 pick 62a0da6d (#701): 🥅 Validate non-synchronizing literals support
nevans
committed
🍒 pick ae9f83b5 (#701): ♻️ Extract str.bytesize lvar in send_literal
nevans
committed
🍒 pick 0ea9eba3 (#701): ✅ Fix flaky tests for MacOS, TruffleRuby
nevans
committed
✅ Avoid endless method defs for Ruby 2.7 compatibility

hsbt
authored and
nevans
committed
🧵 Synchronize FakeServer::Connection#close to avoid double logout

hsbt
authored and
nevans
committed
🔖 Bump version to 0.4.25

hsbt
authored and
nevans
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Backport the security fixes to v0.4 for a 0.4.25 release#707

Backport the security fixes to v0.4 for a 0.4.25 release#707
nevans merged 25 commits into
v0.4-stablefrom
backport/v0.4/security-patches

Commits on Jul 2, 2026

🍒 pick e224fd67 (#684): 🥅 Validate that Atom and Flag are not empty

🍒 pick 5c213ab7 (#675): 🏷️ Allow 64-bit Integer arguments

🍒 pick 3fe06a4c (#676): 🥅 Ensure send_number_data input is an Integer

🍒 pick 94c79576 (#677): 📚⚠️ Boost visibility of raw data argument warnings

🍒 pick 0d508fa7 (#681): 🥅 Validate server's literal byte size format

🍒 pick b02182ce (#678): ✅🐛 Fix FakeServer CommandParseError (tests only)

🍒 pick ef6fde3b (#678): ✅ Handle "stream closed" as EOF (tests only)

🍒 pick a27a0022 (#678): ✅ Allow test server td ignore abrupt EOF

🍒 pick 95afda8f (#679): ♻️ Allow RawData.new to directly set parts array

🍒 pick 257e51d0 (#679): ♻️ Extract RawData.split(string)

🍒 pick 17b6463c (#493): 🧵 Join the receiver _after_ closing the socket

🍒 pick 5bddf68a (#493): 📖 Document that #disconnect joins receiver thread

🍒 pick 9becbf17 (#493): 🧵 Don't lock around socket close in #disconnect

🍒 pick 0c919fb2 (#493): ♻️ Simplify shutdown of socket in #disconnect

🍒 pick aab64f92 (#686): 🧵 Fix deadlock in `#disconnect`

🍒 pick e3c50fad (#698): ♻️ Refactor RawText, add improve test coverage

🍒 pick 8d9397ab (#698): 🥅 Validate QuotedString contains only valid bytes

🍒 pick 1f97168b (#699): 🥅 Validate `#enable` arguments are all atoms

🍒 pick d6ddd294 (#700): 🐛 Prevent trailing `{0}` in RawData validation

🍒 pick 62a0da6d (#701): 🥅 Validate non-synchronizing literals support

🍒 pick ae9f83b5 (#701): ♻️ Extract str.bytesize lvar in send_literal

🍒 pick 0ea9eba3 (#701): ✅ Fix flaky tests for MacOS, TruffleRuby

✅ Avoid endless method defs for Ruby 2.7 compatibility

🧵 Synchronize FakeServer::Connection#close to avoid double logout

🔖 Bump version to 0.4.25