audiences 3.2.0 → 3.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 772d8496fc779d86cc53c50e02bea87dfaeac00483d13a2bf301415160d8254d
-  data.tar.gz: 31d137e6332e906dba696ab61fba1ec7c35362b6b663c123ae1a87192e9cf3c5
+  metadata.gz: d5e06a1b5a2d461aaaadb42a0b4c476d244a534a631e1bcfd0fbeea035597376
+  data.tar.gz: 721a4d4909c843134a8a38f062a3261845b7ea6ecf11254cd1bbb2054db97293
 SHA512:
-  metadata.gz: fc0c07c9cd9a8a672b38d4a6be95e504a55ddc7d96a7644c24cc076bc72e2eab4e8462ef2b28e4e243ddadfca29016ea436be19cf6d298dd2d5725c18a64ed59
-  data.tar.gz: da35f519039d7932891b25925095f31cd4655f27ffd1274575b074f14084577d95f81fafd3196e6f0e83fd0b9646ab09d072717264ab27625a954e050fa0d2c1
+  metadata.gz: 27976c3456b6c6e562d88baefd1ee465987c9152922545d3b89252b0f4828e53a1b07bc6900c336c69bc78ed3f11076eb5091cf52a9f491ff4238882bb121a8a
+  data.tar.gz: edef95656c3580a61ce9612d648a36651d55b868995dbfb6d9998181d401c84d7478afc038d86da2aad09fdc9bf592cedfcc9b414cf934e965eb6483a143e3b6

data/app/models/audiences/external_user.rb

@@ -45,13 +45,16 @@ module Audiences
     end
 
     scope :matching, ->(criterion) do
-      return none if criterion.groups.empty?
-
-      criterion.groups
-               .group_by(&:resource_type)
-               .values
-               .reduce(self) do |scope, groups|
-        scope.members_of(groups)
+      # Load the groups once: checking emptiness and loading separately lets a
+      # concurrent criteria update empty the groups in between, and reducing
+      # over no groups would match every user.
+      groups = criterion.groups.to_a
+      return none if groups.empty?
+
+      groups.group_by(&:resource_type)
+            .values
+            .reduce(self) do |scope, type_groups|
+        scope.members_of(type_groups)
       end
     end
 

data/docs/CHANGELOG.md

@@ -1,3 +1,13 @@
+# Version 3.2.2 (2026-11-04)
+
+**Bug Fixes:**
+- Fix a race where a criterion could match every user when a concurrent context update replaced the criteria while the audience was being resolved. `ExternalUser.matching` now loads a criterion's groups once, so a criterion with no groups always matches no one.
+
+# Version 3.2.1 (2026-10-22)
+
+**Compatibility:**
+- Restore Rails 7.1 support so applications can adopt the pluggable read source while transitioning to Rails 7.2. Audiences development remains on Rails 8.1, and Rails 7.1 is covered by the compatibility test matrix.
+
 # Version 3.2.0 (2026-10-21)
 
 **Breaking Changes:**

data/lib/audiences/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Audiences
-  VERSION = "3.2.0"
+  VERSION = "3.2.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: audiences
 version: !ruby/object:Gem::Version
-  version: 3.2.0
+  version: 3.2.2
 platform: ruby
 authors:
 - Carlos Palhares
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-22 00:00:00.000000000 Z
+date: 2026-11-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aether_observatory
@@ -30,14 +30,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '7.2'
+        version: '7.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '7.2'
+        version: '7.1'
 description: Audiences notify the Rails app when a SCIM backend updates a user affecting
   matching audiences
 email:
@@ -126,7 +126,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.16
+rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
 summary: Audiences system