[SEC] [ANN] Rack 1.3.4, a modular Ruby webserver interface

[James Tucker]

Hello, 

Today we are proud to announce the release of Rack 1.3.4.

= Rack, a modular Ruby webserver interface 

Rack provides a minimal, modular and adaptable interface for developing web applications in Ruby.  By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between (the so-called middleware) into a single method call.

The exact details of this are described in the Rack specification, which all Rack applications should conform to. 

== Changes

* October 1, 2011: Nineteenth public release 1.3.4

  * Backport security fix from 1.9.3, also fixes some roundtrip issues in URI

  * Small documentation update

  * Fix an issue where BodyProxy could cause an infinite recursion

  * Add some supporting files for travis-ci

== Where can I get it? 

You can download Rack 1.3.4 at 

        http://chneukirchen.org/releases/rack-1.3.4.tar.gz   (upload pending at time of writing)

                  http://rubyforge.org/projects/rack

Alternatively, you can checkout from the development repository with:

    git clone git://github.com/rack/rack.git

    cd rack && git checkout rack-1.3   # for this release

Happy hacking and have a nice day,

James Tucker

on behalf of the Rack Core Team.

bdd02c8185c0c184e56b05489554f91b0f5feb4a  rack-1.3.4.tar.gz

98a5fce89ebb77650e00f756e76370a5d51f93a1  rack-1.3.4.gem

[Matthias Wächter]

On 01.10.2011 22:49, James Tucker wrote:
> You can download Rack 1.3.4 at
> http://chneukirchen.org/releases/rack-1.3.4.tar.gz (upload pending at
> time of writing)
> http://rubyforge.org/projects/rack

How about updating [http://rack.rubyforge.org/]? After all, it�s the
official homepage, and it gives a false impression that development has
stopped in June 2010 (rack-1.2.0).

� Matthias

[James Tucker]

I'll get around to it sometime. I'd really like to add a bunch more automation to the release process that would include this kind of update.

On Oct 2, 2011, at 3:57 AM, Matthias Wächter wrote:

> On 01.10.2011 22:49, James Tucker wrote:
>> You can download Rack 1.3.4 at
>> http://chneukirchen.org/releases/rack-1.3.4.tar.gz (upload pending at
>> time of writing)
>> http://rubyforge.org/projects/rack
>

> How about updating [http://rack.rubyforge.org/]? After all, it’s the official homepage, and it gives a false impression that development has stopped in June 2010 (rack-1.2.0).
>
> – Matthias

[Matthias Wächter]

On 18.10.2011 07:53, James Tucker wrote:
> I'll get around to it sometime. I'd really like to add a bunch more automation to the release process that would include this kind of update.

As a first step, someone granted access rights to the webserver could remove all those outdated
references from the webpage and instead just point to the github location. Later, once there was
time to set up automation, all those references could come back again in an up-to-date way.

– Matthias