algosec 0.10.0 → 0.10.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +4 -0
- data/README.md +4 -4
- data/docs/api-migration.md +1 -1
- data/docs/domain-api.md +1 -1
- data/docs/release.md +1 -1
- data/lib/algosec/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 56b0dc863c5359fb179d719e67b80ecd794e46b7924b86e36d6c751a857d1364
|
|
4
|
+
data.tar.gz: 9021c7548e60c93aff3ece81495a3195f40aa9064929167eefbf2cbb4e1e3929
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 19db9e568a65b63757656ea785d8aedaca8b2468f585369be00feb4ebda2977ebcfe33a52701c8d0c4f9eb677334790e752b530bd88d0f1befe47000833b6bcc
|
|
7
|
+
data.tar.gz: 2c422aeabfabba8c25c0f83e75616c81ad9f9a5d9874cdbc05a43e8b5efaec531d40ee634b17fea9f4466d884162abead98de271a1d07fb4c05a54aeb52f4a56
|
data/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,9 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 0.10.1 (2026-11-01)
|
|
4
|
+
|
|
5
|
+
- Publish a patch release of the existing 0.10.0 implementation. No runtime behavior changes; domain/policy/cache versions remain v30/v49/v107.
|
|
6
|
+
|
|
3
7
|
## 0.10.0 (2026-10-31)
|
|
4
8
|
|
|
5
9
|
- Reject explicit false service, device and network selectors in declaration queries before they can become unfiltered or unrestricted searches. Compare six actual Perl `FindIp` service cases while retaining exact Ruby protocol pairs and partial intersections.
|
data/README.md
CHANGED
|
@@ -8,14 +8,14 @@ service.
|
|
|
8
8
|
|
|
9
9
|
## Installation
|
|
10
10
|
|
|
11
|
-
Requires **Ruby 4.0.7 or newer**. Version 0.10.
|
|
11
|
+
Requires **Ruby 4.0.7 or newer**. Version 0.10.1 provides the current firewall object-graph lifecycle. Runtime dependencies include ctx_parser >= 0.5.1, ctx_driver >= 0.5.1, inet ~> 0.3.0, ActiveSupport 8.1 and net-connector 0.18 or newer within the
|
|
12
12
|
declared major-version bounds.
|
|
13
13
|
|
|
14
14
|
```sh
|
|
15
15
|
bundle install
|
|
16
16
|
bundle exec rake
|
|
17
17
|
bundle exec rake build
|
|
18
|
-
gem install --local pkg/algosec-0.10.
|
|
18
|
+
gem install --local pkg/algosec-0.10.1.gem
|
|
19
19
|
```
|
|
20
20
|
|
|
21
21
|
Applications can declare `gem "algosec", "~> 0.10.0"`. For development, use a locally built package or an explicit
|
|
@@ -85,8 +85,8 @@ access-controlled location.
|
|
|
85
85
|
`bundle exec rake` runs the existing Minitest domain suite, RuboCop, and offline examples. Tests use synthetic or
|
|
86
86
|
sanitized fixtures and require no application database. Rails-specific integration tests remain in the application.
|
|
87
87
|
|
|
88
|
-
`bundle exec rake build` creates `pkg/algosec-0.10.
|
|
89
|
-
`ruby script/verify_package.rb pkg/algosec-0.10.
|
|
88
|
+
`bundle exec rake build` creates `pkg/algosec-0.10.1.gem` and `pkg/SHA256SUMS`.
|
|
89
|
+
`ruby script/verify_package.rb pkg/algosec-0.10.1.gem` checks packaged source and performs an isolated install outside
|
|
90
90
|
the checkout. Test data, local backups, credentials, logs, and build outputs are excluded from the package.
|
|
91
91
|
|
|
92
92
|
Canonical objects use Palo Alto terminology while vendor adapters retain native execution semantics.
|
data/docs/api-migration.md
CHANGED
|
@@ -145,7 +145,7 @@ Memory 与 FileStore 都要求正 Integer 设备编号、有效发布 ID 和对
|
|
|
145
145
|
|
|
146
146
|
## FileStore 版本切换
|
|
147
147
|
|
|
148
|
-
当前版本为 gem `0.10.
|
|
148
|
+
当前版本为 gem `0.10.1`、领域 `firewall-domain-v30`、策略 `algosec-policy-ruby-v49`、对象缓存 `algosec-config-ruby-v107`。FileStore 元数据布局仍名为 `publication-history-v2`，但索引同时绑定语义和缓存版本；0.10 拒绝旧格式，不能在旧目录直接升级。内联历史的自动迁移分支已移除：读取、发布、预留和取消都只接受当前布局，旧格式或缺少格式的已有记录返回 `invalid_cache_entry`，保留原索引、历史和 pending。仅全新空库允许初始化；不能把旧内联历史改写成当前版本标记来绕过重建。
|
|
149
149
|
|
|
150
150
|
当前格式也须通过结构校验：已发布指针必须有一致的正整数提交序号、同设备来源、有效发布 ID 和预留 ID。历史使用方在写缓存或指针前核对条目、来源索引与完整提交前缀；合法的高序号未提交历史继续按崩溃恢复边界隔离。`current` 只校验当前元数据，不因历史增长而加载整个历史。损坏记录须恢复完整备份或从原输入重建，不能把缺失序号补为零后继续发布。
|
|
151
151
|
|
data/docs/domain-api.md
CHANGED
|
@@ -135,7 +135,7 @@
|
|
|
135
135
|
|
|
136
136
|
`Reclaimer::Observation` 必须提供 `configuration_revision` 与 `rule_digest`；缺失、过期、其他修订或规则变化的观测均不能证明当前规则未使用。
|
|
137
137
|
|
|
138
|
-
当前 gem 为 0.10.
|
|
138
|
+
当前 gem 为 0.10.1，语义版本以 Algosec::SEMANTIC_VERSION 为准（当前 firewall-domain-v30），策略修订为 algosec-policy-ruby-v49，对象缓存格式为 algosec-config-ruby-v107。FileStore 元数据布局另标记 publication-history-v2。旧写入方停止且 pending 完成恢复后，旧库保持只读，在新空目录从原始配置及完整上下文重新解析发布；旧计划重新设计、证明，不能只修改版本号。切换及回滚步骤见[迁移说明](api-migration.md#filestore-版本切换)。
|
|
139
139
|
|
|
140
140
|
## 验证范围
|
|
141
141
|
|
data/docs/release.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# 发布步骤
|
|
2
2
|
|
|
3
|
-
模块与 gem 名称为 `algosec`，源码仓库为 `gatework/algosec`。发布保留仓库现有可见性；RubyGems 包按授权公开分发。当前源码 0.10.
|
|
3
|
+
模块与 gem 名称为 `algosec`，源码仓库为 `gatework/algosec`。发布保留仓库现有可见性；RubyGems 包按授权公开分发。当前源码 0.10.1 使用 semantic v30 / policy v49 / cache v107；版本号更新不表示已经发布。升级需停止旧写入方、处理 pending、完整备份并只读保留旧库，从原始配置与完整上下文重建到新 FileStore 目录；禁止混合版本写入，详细步骤见 [API 迁移](api-migration.md#filestore-版本切换)。
|
|
4
4
|
|
|
5
5
|
1. 检查工作区、当前远程主分支与已发布版本，只整合明确的发布文件；现场配置、一次性验收报告及开发代理上下文不进入源码提交或包。
|
|
6
6
|
2. 更新版本与日期化 changelog，运行 `bundle exec rake`、构建及隔离安装验证。包白名单与实际内容、文件权限须一致。
|
data/lib/algosec/version.rb
CHANGED