auth-sanitizer 0.2.0 → 0.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ee9c13c8e833242ae444802320b2a44204222f09529c8d7d588bbb7f725e2dff
-  data.tar.gz: 7fc39449d814609f58f5c7b6ce432bbb14fb532e5cf84e0a3f296e7e2e770763
+  metadata.gz: e553dcb05812a620438872bb9726ae4b87806b78e4a188f475db2962fb3ace16
+  data.tar.gz: c6f928c8ede605a82cce0bb88238eb855529d5464b0655372b6662b90770f537
 SHA512:
-  metadata.gz: 1c3fdbb99b0835a7694818b891daebe08bdc6e1cd95348e214970bf02c3ece6caa41fc9ae9d22a118720c9064baf16c066c0a7718121362b7d7141622ec2ccd9
-  data.tar.gz: 9057c5111136395c5418bfbd2acde6206d42a7c4b19d67e7fff8ae5449675019608557d4582ac53bd62f9b1792cdf56a186ffaac10989b5148a180e2cc48efcd
+  metadata.gz: '018736223d93b251e19b6b47f87ade2c70dd033762a97830cd73c13ea40dce3c175d4629140ca151d04ee64672fc3a46423ab70ea25d59b5e368078cbf119f3b'
+  data.tar.gz: '0897d315fefb00a8fd951e58a8a9ed0e85f97444394357b2a98d0e4b122cbff788da6fef4250512170eb18ee03bd5ba263bc6cb6512328527b7de0d1e9ad80bd'

data/CHANGELOG.md

@@ -30,6 +30,38 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [0.2.2] - 2026-06-18
+
+- TAG: [v0.2.2][0.2.2t]
+- COVERAGE: 100.00% -- 145/145 lines in 6 files
+- BRANCH COVERAGE: 100.00% -- 28/28 branches in 6 files
+- 84.62% documented
+
+### Changed
+
+- Documented the released `anonymous_loader` gem as the preferred reusable
+  helper for zero-`auth-sanitizer`-namespace loading.
+
+### Fixed
+
+- Documented the `$LOAD_PATH` fallback needed by isolated loader consumers when
+  Bundler standalone setup provides `auth_sanitizer/loader.rb` without a
+  matching `Gem.loaded_specs` or `GEM_PATH` entry.
+
+## [0.2.1] - 2026-06-06
+
+- TAG: [v0.2.1][0.2.1t]
+- COVERAGE: 100.00% -- 145/145 lines in 6 files
+- BRANCH COVERAGE: 100.00% -- 28/28 branches in 6 files
+- 84.62% documented
+
+### Fixed
+
+- Removed the duplicate RBS declaration for `Auth::Sanitizer::VERSION`, fixing
+  `RBS::DuplicatedDeclarationError` in downstream projects.
+- Fixed the README support table to list Ruby 2.3 as supported but untested,
+  matching the current runtime support and CI policy.
+
 ## [0.2.0] - 2026-06-04
 
 - TAG: [v0.2.0][0.2.0t]
@@ -137,7 +169,11 @@ Please file a bug if you notice a violation of semantic versioning.
 
 - Initial release
 
-[Unreleased]: https://github.com/ruby-oauth/auth-sanitizer/compare/v0.2.0...HEAD
+[Unreleased]: https://github.com/ruby-oauth/auth-sanitizer/compare/v0.2.2...HEAD
+[0.2.2]: https://github.com/ruby-oauth/auth-sanitizer/compare/v0.2.1...v0.2.2
+[0.2.2t]: https://github.com/ruby-oauth/auth-sanitizer/releases/tag/v0.2.2
+[0.2.1]: https://github.com/ruby-oauth/auth-sanitizer/compare/v0.2.0...v0.2.1
+[0.2.1t]: https://github.com/ruby-oauth/auth-sanitizer/releases/tag/v0.2.1
 [0.2.0]: https://github.com/ruby-oauth/auth-sanitizer/compare/v0.1.5...v0.2.0
 [0.2.0t]: https://github.com/ruby-oauth/auth-sanitizer/releases/tag/v0.2.0
 [0.1.5]: https://github.com/ruby-oauth/auth-sanitizer/compare/v0.1.4...v0.1.5

data/LICENSE.md

@@ -7,4 +7,4 @@ Choose the option that best fits your use case:
 
 ## Copyright Notice
 
-Copyright (c) 2026 Peter H. Boling
+- Copyright (c) 2026 Peter H. Boling

data/README.md

@@ -63,12 +63,18 @@ The returned module is an anonymously namespaced `Auth::Sanitizer`, suitable for
 Use `require: false` in gems that want to avoid every new top-level namespace, including `AuthSanitizer`; see
 [Zero Top-Level Namespace Additions](#zero-top-level-namespace-additions).
 
+Consumers that want a reusable resolver for that stricter loading mode can use
+[`anonymous_loader`](https://github.com/ruby-oauth/anonymous_loader). It handles
+explicit paths, RubyGems metadata, and `$LOAD_PATH` fallback resolution while evaluating
+the loader under an anonymous namespace.
+
 This gem is used by the following libraries to ensure clean output:
 
 - oauth
 - oauth-tty
 - oauth2
 - omniauth-ldap
+- omniauth-identity
 
 ## 💡 Info you can shake a stick at
 
@@ -78,7 +84,7 @@ This gem is used by the following libraries to ensure clean output:
 | Works with Truffle Ruby | [![Truffle Ruby 22.3 Compat][💎truby-22.3i]][🚎truby-22.3-wf] [![Truffle Ruby 23.0 Compat][💎truby-23.0i]][🚎truby-23.0-wf] [![Truffle Ruby 23.1 Compat][💎truby-23.1i]][🚎truby-23.1-wf] <br/> [![Truffle Ruby 24.2 Compat][💎truby-24.2i]][🚎truby-24.2-wf] [![Truffle Ruby 25.0 Compat][💎truby-25.0i]][🚎truby-25.0-wf] [![Truffle Ruby current Compat][💎truby-c-i]][🚎9-t-wf]|
 | Works with MRI Ruby 4 | [![Ruby 4.0 Compat][💎ruby-4.0i]][🚎11-c-wf] [![Ruby current Compat][💎ruby-c-i]][🚎11-c-wf] [![Ruby HEAD Compat][💎ruby-headi]][🚎3-hd-wf]|
 | Works with MRI Ruby 3 | [![Ruby 3.0 Compat][💎ruby-3.0i]][🚎ruby-3.0-wf] [![Ruby 3.1 Compat][💎ruby-3.1i]][🚎ruby-3.1-wf] [![Ruby 3.2 Compat][💎ruby-3.2i]][🚎ruby-3.2-wf] [![Ruby 3.3 Compat][💎ruby-3.3i]][🚎ruby-3.3-wf] [![Ruby 3.4 Compat][💎ruby-3.4i]][🚎ruby-3.4-wf]|
-| Works with MRI Ruby 2 | ![Ruby 2.2 Compat][💎ruby-2.2i] <br/> [![Ruby 2.4 Compat][💎ruby-2.4i]][🚎ruby-2.4-wf] [![Ruby 2.5 Compat][💎ruby-2.5i]][🚎ruby-2.5-wf] [![Ruby 2.6 Compat][💎ruby-2.6i]][🚎ruby-2.6-wf] [![Ruby 2.7 Compat][💎ruby-2.7i]][🚎ruby-2.7-wf]|
+| Works with MRI Ruby 2 | ![Ruby 2.2 Compat][💎ruby-2.2i] ![Ruby 2.3 Compat][💎ruby-2.3i] <br/> [![Ruby 2.4 Compat][💎ruby-2.4i]][🚎ruby-2.4-wf] [![Ruby 2.5 Compat][💎ruby-2.5i]][🚎ruby-2.5-wf] [![Ruby 2.6 Compat][💎ruby-2.6i]][🚎ruby-2.6-wf] [![Ruby 2.7 Compat][💎ruby-2.7i]][🚎ruby-2.7-wf]|
 | Support & Community | [![Join Me on Daily.dev's RubyFriends][✉️ruby-friends-img]][✉️ruby-friends] [![Live Chat on Discord][✉️discord-invite-img-ftb]][✉️discord-invite] [![Get help from me on Upwork][👨🏼‍🏫expsup-upwork-img]][👨🏼‍🏫expsup-upwork] [![Get help from me on Codementor][👨🏼‍🏫expsup-codementor-img]][👨🏼‍🏫expsup-codementor] |
 | Source | [![Source on GitLab.com][📜src-gl-img]][📜src-gl] [![Source on CodeBerg.org][📜src-cb-img]][📜src-cb] [![Source on Github.com][📜src-gh-img]][📜src-gh] [![The best SHA: dQw4w9WgXcQ!][🧮kloc-img]][🧮kloc] |
 | Documentation | [![Current release on RubyDoc.info][📜docs-cr-rd-img]][🚎yard-current] [![YARD on Galtzo.com][📜docs-head-rd-img]][🚎yard-head] [![Maintainer Blog][🚂maint-blog-img]][🚂maint-blog] [![GitLab Wiki][📜gl-wiki-img]][📜gl-wiki] [![GitHub Wiki][📜gh-wiki-img]][📜gh-wiki] |
@@ -204,27 +210,26 @@ gem "auth-sanitizer", require: "auth_sanitizer/loader"
 Use `require: false` when the consuming library will decide which loading mode to use internally. Use
 `require: "auth_sanitizer/loader"` when Bundler should make the isolated loader available during `Bundler.require`.
 
+When Bundler standalone setup is loaded directly, a dependency can be present on `$LOAD_PATH` without a matching
+`Gem.loaded_specs` entry or `GEM_PATH` entry. Consumers that locate the isolated loader themselves should therefore
+use `AnonymousLoader.load_path`, or otherwise fall back to `Gem.find_files("auth_sanitizer/loader.rb")`, before failing.
+
 #### Zero Top-Level Namespace Additions
 
-A gem that needs zero new top-level namespaces from this dependency can load the loader itself inside an anonymous
-namespace. On Ruby 3.1+, use `Kernel.load(path, module)`:
+For a gem that needs zero new top-level namespaces from `auth-sanitizer`, use `anonymous_loader` to evaluate
+`auth_sanitizer/loader.rb` inside an anonymous namespace, then call `AuthSanitizer::Loader.load_isolated` from that
+anonymous namespace:
 
 ```ruby
-auth_sanitizer_requirement = Gem::Requirement.new("~> 0.1", ">= 0.1.3")
-auth_sanitizer_spec = Gem.loaded_specs["auth-sanitizer"]
-unless auth_sanitizer_spec && auth_sanitizer_requirement.satisfied_by?(auth_sanitizer_spec.version)
-  auth_sanitizer_spec = Gem::Specification.find_by_name("auth-sanitizer", auth_sanitizer_requirement)
-end
-auth_sanitizer_loader_path = File.join(
-  auth_sanitizer_spec.full_gem_path,
-  "lib/auth_sanitizer/loader.rb"
+require "anonymous_loader"
+
+auth_sanitizer_requirement = Gem::Requirement.new("~> 0.2", ">= 0.2.1")
+auth_sanitizer_loader_namespace = AnonymousLoader.load_path(
+  gem_name: "auth-sanitizer",
+  require_path: "auth_sanitizer/loader.rb",
+  version_requirement: auth_sanitizer_requirement,
+  version_file: "auth/sanitizer/version.rb"
 )
-unless File.file?(auth_sanitizer_loader_path)
-  raise LoadError, "auth-sanitizer #{auth_sanitizer_requirement} loader not found at #{auth_sanitizer_loader_path}"
-end
-
-auth_sanitizer_loader_namespace = Module.new
-Kernel.load(auth_sanitizer_loader_path, auth_sanitizer_loader_namespace)
 
 AUTH_SANITIZER = auth_sanitizer_loader_namespace
   .const_get(:AuthSanitizer)
@@ -233,42 +238,26 @@ AUTH_SANITIZER = auth_sanitizer_loader_namespace
 ```
 
 That pattern leaves both `Auth` and `AuthSanitizer` undefined at top level. The consuming gem should assign the returned
-module under its own namespace and use that internal constant.
+module under its own namespace and use that internal constant. It does define `AnonymousLoader`, whose namespace is
+specific to the resolver gem and intentionally much less collision-prone than `Auth`.
 
-<details markdown="1">
-  <summary>Ruby 2.2-compatible zero-top-level loading</summary>
-
-Ruby 2.2 through Ruby 3.0 do not support `Kernel.load(path, module)`. For those versions, evaluate the loader source
-inside an anonymous namespace with `Module#module_eval`:
+Declare both dependencies with `require: false` when the consuming library owns its loading path:
 
 ```ruby
-auth_sanitizer_requirement = Gem::Requirement.new("~> 0.1", ">= 0.1.3")
-auth_sanitizer_spec = Gem.loaded_specs["auth-sanitizer"]
-unless auth_sanitizer_spec && auth_sanitizer_requirement.satisfied_by?(auth_sanitizer_spec.version)
-  auth_sanitizer_spec = Gem::Specification.find_by_name("auth-sanitizer", auth_sanitizer_requirement)
-end
-auth_sanitizer_loader_path = File.join(
-  auth_sanitizer_spec.full_gem_path,
-  "lib/auth_sanitizer/loader.rb"
-)
-unless File.file?(auth_sanitizer_loader_path)
-  raise LoadError, "auth-sanitizer #{auth_sanitizer_requirement} loader not found at #{auth_sanitizer_loader_path}"
-end
+gem "anonymous_loader", "~> 0.1", ">= 0.1.0", require: false
+gem "auth-sanitizer", "~> 0.2", ">= 0.2.1", require: false
+```
 
-auth_sanitizer_loader_namespace = Module.new
-auth_sanitizer_loader_namespace.module_eval(
-  File.read(auth_sanitizer_loader_path),
-  auth_sanitizer_loader_path,
-  1
-)
+If the host application uses `Bundler.require`, use:
 
-AUTH_SANITIZER = auth_sanitizer_loader_namespace
-  .const_get(:AuthSanitizer)
-  .const_get(:Loader)
-  .load_isolated
+```ruby
+gem "anonymous_loader", "~> 0.1", ">= 0.1.0"
+gem "auth-sanitizer", "~> 0.2", ">= 0.2.1", require: false
 ```
 
-</details>
+`AnonymousLoader.load_path` raises `AnonymousLoader::FileNotFoundError` when it cannot resolve the loader, and
+`AnonymousLoader::VersionMismatchError` when it finds a load-path candidate whose adjacent version file does not satisfy
+the requested range.
 
 ### Filtered Label
 
@@ -423,7 +412,7 @@ require "auth/sanitizer"
 ```
 
 Or load it without defining top-level `Auth`. This still defines top-level `AuthSanitizer`; see
-[Zero Top-Level Namespace Additions](#zero-top-level-namespace-additions) for the stricter loading pattern.
+[Zero Top-Level Namespace Additions](#zero-top-level-namespace-additions) for the stricter `anonymous_loader` pattern.
 
 ```ruby
 require "auth_sanitizer/loader"
@@ -586,6 +575,10 @@ NOTE: [kettle-readme-backers][kettle-readme-backers] updates this list every day
 
 <!-- OPENCOLLECTIVE-ORGANIZATIONS:START -->
 No sponsors yet. Be the first!
+
+### Open Collective for Donors
+
+[Bill Woika](https://opencollective.com/bill-woika) [Philipp Ebneter](https://opencollective.com/guest-e77282f7) [Grigoriy](https://opencollective.com/guest-c93e0c48)
 <!-- OPENCOLLECTIVE-ORGANIZATIONS:END -->
 
 [kettle-readme-backers]: https://github.com/ruby-oauth/auth-sanitizer/blob/main/exe/kettle-readme-backers
@@ -862,6 +855,7 @@ Thanks for RTFM. ☺️
 [🚎15-🪪-wf]: https://github.com/ruby-oauth/auth-sanitizer/actions/workflows/license-eye.yml
 [🚎15-🪪-wfi]: https://github.com/ruby-oauth/auth-sanitizer/actions/workflows/license-eye.yml/badge.svg
 [💎ruby-2.2i]: https://img.shields.io/badge/Ruby-2.2_(%F0%9F%9A%ABCI)-AABBCC?style=for-the-badge&logo=ruby&logoColor=white
+[💎ruby-2.3i]: https://img.shields.io/badge/Ruby-2.3_(%F0%9F%9A%ABCI)-AABBCC?style=for-the-badge&logo=ruby&logoColor=white
 [💎ruby-2.4i]: https://img.shields.io/badge/Ruby-2.4-DF00CA?style=for-the-badge&logo=ruby&logoColor=white
 [💎ruby-2.5i]: https://img.shields.io/badge/Ruby-2.5-DF00CA?style=for-the-badge&logo=ruby&logoColor=white
 [💎ruby-2.6i]: https://img.shields.io/badge/Ruby-2.6-DF00CA?style=for-the-badge&logo=ruby&logoColor=white
@@ -932,3 +926,14 @@ Thanks for RTFM. ☺️
 [💎appraisal2]: https://github.com/appraisal-rb/appraisal2
 [💎appraisal2-img]: https://img.shields.io/badge/appraised_by-appraisal2-34495e.svg?plastic&logo=ruby&logoColor=white
 [💎d-in-dvcs]: https://railsbling.com/posts/dvcs/put_the_d_in_dvcs/
+
+<!-- kettle-jem:metadata:start -->
+| Field | Value |
+|---|---|
+| Package | auth-sanitizer |
+| Description | 💎 Configurable KV output redaction. Sanitize/filter your secrets. |
+| Homepage | https://github.com/ruby-oauth/auth-sanitizer |
+| Source | https://github.com/ruby-oauth/auth-sanitizer/tree/v0.2.0 |
+| License | `MIT` |
+| Funding | https://github.com/sponsors/pboling, https://issuehunt.io/u/pboling, https://ko-fi.com/pboling, https://liberapay.com/pboling/donate, https://opencollective.com/ruby-oauth, https://patreon.com/galtzo, https://polar.sh/pboling, https://thanks.dev/u/gh/pboling, https://tidelift.com/funding/github/rubygems/auth-sanitizer, https://www.buymeacoffee.com/pboling |
+<!-- kettle-jem:metadata:end -->

data/lib/auth/sanitizer/version.rb

@@ -3,7 +3,7 @@
 module Auth
   module Sanitizer
     module Version
-      VERSION = "0.2.0"
+      VERSION = "0.2.2"
     end
     VERSION = Version::VERSION # Traditional Constant Location
   end

data/sig/auth/sanitizer.rbs

@@ -1,10 +1,3 @@
-module Auth
-  module Sanitizer
-    VERSION: String
-    # See the writing guide of rbs: https://github.com/ruby/rbs#guides
-  end
-end
-
 module AuthSanitizer
   module Loader
     FILES: Array[String]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: auth-sanitizer
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.2
 platform: ruby
 authors:
 - Peter H. Boling
@@ -46,7 +46,7 @@ dependencies:
         version: '1.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.1.9
+        version: 1.1.10
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -56,27 +56,27 @@ dependencies:
         version: '1.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.1.9
+        version: 1.1.10
 - !ruby/object:Gem::Dependency
   name: kettle-dev
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '2.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.8
+        version: 2.1.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '2.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.8
+        version: 2.1.0
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -131,20 +131,20 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.0'
+        version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.0.6
+        version: 3.1.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.0'
+        version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.0.6
+        version: 3.1.1
 - !ruby/object:Gem::Dependency
   name: kettle-test
   requirement: !ruby/object:Gem::Requirement
@@ -279,10 +279,10 @@ licenses:
 - MIT
 metadata:
   homepage_uri: https://auth-sanitizer.galtzo.com
-  source_code_uri: https://github.com/ruby-oauth/auth-sanitizer/tree/v0.2.0
-  changelog_uri: https://github.com/ruby-oauth/auth-sanitizer/blob/v0.2.0/CHANGELOG.md
+  source_code_uri: https://github.com/ruby-oauth/auth-sanitizer/tree/v0.2.2
+  changelog_uri: https://github.com/ruby-oauth/auth-sanitizer/blob/v0.2.2/CHANGELOG.md
   bug_tracker_uri: https://github.com/ruby-oauth/auth-sanitizer/issues
-  documentation_uri: https://www.rubydoc.info/gems/auth-sanitizer/0.2.0
+  documentation_uri: https://www.rubydoc.info/gems/auth-sanitizer/0.2.2
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/ruby-oauth/auth-sanitizer/wiki
   news_uri: https://www.railsbling.com/tags/auth-sanitizer