auth-sanitizer 0.2.4 → 0.2.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 133e8f52ab2988ce4f62b80654a92286a9bc7c9edb1092790cace4b4dbd581e6
-  data.tar.gz: e0ceaea5693cf3c9ba036acdd8162b4added1e5c441ac5e726e325c0ce4a23e6
+  metadata.gz: b0218d87fe77fa1705ba06cbd2b4cb5eae0e04b7769312f2d2c8270de81eb741
+  data.tar.gz: 005dbc3a409a7d06e18943d0441526a26d29ec325daf1df0745bd3819ec4ab37
 SHA512:
-  metadata.gz: 38242e0bed6885c8b2a4855e7c46ab177e1fc272aef04425d1cec5de9674bb1c9acc38ee6c7e6d637e9a7b0c8ed3ee93052f6fccd85c9267810c3a1e27e3402f
-  data.tar.gz: 756ddde554ae8d459b4b664ab1fda0f2436a296f6610ca6d076ad76e21a620d144ad248a85203f0f949624f484e10cd1373ae2dce95ecca2602f1701e6e6bf7e
+  metadata.gz: 5b171736f3d3d7d2d3ae43c783c172527b90d19aedf4b7c11685e1617108bdbeb5b2dc443b756334fc17532d8b4152a63e29b889c00c9d9d2e5b32dea881794a
+  data.tar.gz: ac8b6d5a01d765678224f729b16fd10104e126049baaee13f5de0dbd32eb027b7e4b3d05cb84f8c32d351654c37ef79fe72ae085481e56d86bf848d2dafb0e56

data/CHANGELOG.md

@@ -30,6 +30,30 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [0.2.5] - 2026-10-25
+
+- TAG: [v0.2.5][0.2.5t]
+- COVERAGE: 100.00% -- 184/184 lines in 8 files
+- BRANCH COVERAGE: 100.00% -- 40/40 branches in 8 files
+- 98.21% documented
+
+### Added
+
+- kettle-jem-template-20260720-001 - READMEs can now display configured
+  corporate sponsor logos.
+
+### Changed
+
+- [kc] kettle-jem/prepare: updated 15 project files:
+  - dependencies (15)
+
+- [kc] kettle-jem/template: updated 7 project files:
+  - code and tests (1)
+  - dependencies (2)
+  - documentation (1)
+  - other (2)
+  - workflows (1)
+
 ## [0.2.4] - 2026-10-23
 
 - TAG: [v0.2.4][0.2.4t]
@@ -295,7 +319,9 @@ Please file a bug if you notice a violation of semantic versioning.
 
 - Initial release
 
-[Unreleased]: https://github.com/ruby-oauth/auth-sanitizer/compare/v0.2.4...HEAD
+[Unreleased]: https://github.com/ruby-oauth/auth-sanitizer/compare/v0.2.5...HEAD
+[0.2.5]: https://github.com/ruby-oauth/auth-sanitizer/compare/v0.2.4...v0.2.5
+[0.2.5t]: https://github.com/ruby-oauth/auth-sanitizer/releases/tag/v0.2.5
 [0.2.4]: https://github.com/ruby-oauth/auth-sanitizer/compare/v0.2.3...v0.2.4
 [0.2.4t]: https://github.com/ruby-oauth/auth-sanitizer/releases/tag/v0.2.4
 [0.2.3]: https://github.com/ruby-oauth/auth-sanitizer/compare/v0.2.2...v0.2.3

data/README.md

@@ -11,6 +11,7 @@
 `if ci_badges.map(&:color).all? { it == "green"}` 👇️ send money so I can do more of this. FLOSS maintenance is now my full-time job.
 
 [![OpenCollective Backers][🖇osc-backers-i]][🖇osc-backers] [![OpenCollective Sponsors][🖇osc-sponsors-i]][🖇osc-sponsors] [![Sponsor Me on Github][🖇sponsor-img]][🖇sponsor] [![Liberapay Goal Progress][⛳liberapay-img]][⛳liberapay] [![Donate on PayPal][🖇paypal-img]][🖇paypal] [![Buy me a coffee][🖇buyme-small-img]][🖇buyme] [![Donate at ko-fi.com][🖇kofi-img]][🖇kofi]
+<p><sub>Corporate sponsors: <a href="https://alpha-omega.dev"><img alt="Alpha-Omega" src="https://alpha-omega.dev/wp-content/uploads/sites/22/2023/05/logo.svg" height="24"/></a> <a href="https://serpapi.com"><img alt="SerpApi" src="https://serpapi.com/assets/media_kit/logo-with-wordmark.svg" height="24"/></a> <a href="#-floss-funding">Become a sponsor</a></sub></p>
 
 <details markdown="1">
  <summary>👣 How will this project approach the September 2025 hostile takeover of RubyGems? 🚑️</summary>
@@ -51,6 +52,15 @@ a provider, or per logger by passing `label:` to `Auth::Sanitizer::SanitizedLogg
 The library snapshots filter configuration when a redacting object is initialized. That keeps already-created objects
 and logger wrappers stable even if a host application changes its configuration later.
 
+Use `Auth::Sanitizer.sanitize` when a value needs to be redacted before it is returned or included in an exception
+message. It recursively copies hashes and arrays, redacts values under configured keys, and sanitizes strings using the
+same formats as `SanitizedLogger`:
+
+```ruby
+Auth::Sanitizer.sanitize(opts)
+Auth::Sanitizer.sanitize(opts, filtered_keys: MyClient.config.filtered_keys, label: MyClient.config.filtered_label)
+```
+
 Consumers that need to avoid defining the generic top-level `Auth` namespace can use the isolated loader:
 
 ```ruby
@@ -97,6 +107,7 @@ This gem is used by the following libraries to ensure clean output:
 
 Compatible with MRI Ruby 2.2.0+, JRuby, and TruffleRuby.
 CI workflows and Appraisals are generated for MRI Ruby 2.4+.
+The current MRI CI lane runs on Linux and macOS.
 This test floor is configured by `ruby.test_minimum` in `.kettle-jem.yml` and
 may be higher than the gem's runtime compatibility floor when legacy Rubies are
 not practical for the current toolchain.
@@ -121,23 +132,6 @@ The _amazing_ test matrix is powered by the kettle-dev stack.
 
 </details>
 
-### Runtime and Platform Support
-
-Support tiers describe what this project's CI actually exercises, not what may
-work in an untested environment:
-
-- **Parallel support**: CI runs the test suite with multiple workers available.
-- **Unsupported**: the engine/platform combination is not covered by CI and is
- not a project compatibility claim.
-
-| Ruby engine/version | Linux | macOS | Windows | Notes |
-|---------------------|-------|-------|---------|-------|
-| MRI 3.1-3.4 | Parallel support | Unsupported | Unsupported | Versioned Ruby workflows run on Linux. |
-| MRI current | Parallel support | Parallel support | Unsupported | Current Ruby workflow covers the declared OS platforms. |
-| MRI head | Parallel support | Unsupported | Unsupported | CI is allowed to fail while Ruby is in development. |
-| JRuby (all CI lanes) | Parallel support | Unsupported | Unsupported | Engine workflows run on Linux; macOS and Windows are not exercised by CI. |
-| TruffleRuby (all CI lanes) | Parallel support | Unsupported | Unsupported | Never shipped a Windows build (zero Windows assets across 66 releases scanned 2026-10-10); setup-ruby hard-fails ([source](https://github.com/ruby/setup-ruby/blob/master/README.md)) |
-
 ### Federated DVCS
 
 <details markdown="1">
@@ -153,29 +147,12 @@ work in an untested environment:
 
 ### Enterprise Support
 
-[![Tidelift](https://tidelift.com/badges/package/rubygems/auth-sanitizer)](https://tidelift.com/subscription/pkg/rubygems-auth-sanitizer?utm_source=rubygems-auth-sanitizer&utm_medium=referral&utm_campaign=readme)
-
-Available as part of the Tidelift Subscription.
-
-<details markdown="1">
- <summary>Need enterprise-level guarantees?</summary>
-
-The maintainers of this and thousands of other packages are working with Tidelift to deliver commercial support and maintenance for the open source packages you use to build your applications. Save time, reduce risk, and improve code health, while paying the maintainers of the exact packages you use.
+For enterprise support from the maintainer, use [Upwork][👨🏼‍🏫expsup-upwork] or [CodeMentor][👨🏼‍🏫expsup-codementor].
 
-[![Get help from me on Tidelift][🏙️entsup-tidelift-img]][🏙️entsup-tidelift]
-
-- 💡Subscribe for support guarantees covering _all_ your FLOSS dependencies
-- 💡Tidelift is part of [Sonar][🏙️entsup-tidelift-sonar]
-- 💡Tidelift pays maintainers to maintain the software you depend on!<br/>📊`@`Pointy Haired Boss: An [enterprise support][🏙️entsup-tidelift] subscription is "[never gonna let you down][🧮kloc]", and *supports* open source maintainers
-
-Alternatively:
+Other support channels:
 
 - [![Ruby Users Forum][✉️ruby-forum-img]][✉️ruby-forum]
 - [![Live Chat on Discord][✉️discord-invite-img-ftb]][✉️discord-invite]
-- [![Get help from me on Upwork][👨🏼‍🏫expsup-upwork-img]][👨🏼‍🏫expsup-upwork]
-- [![Get help from me on Codementor][👨🏼‍🏫expsup-codementor-img]][👨🏼‍🏫expsup-codementor]
-
-</details>
 
 ## ✨ Installation
 
@@ -217,10 +194,10 @@ Libraries and applications that need to avoid the generic top-level `Auth` names
 ```ruby
 require "auth_sanitizer/loader"
 
-AUTH_SANITIZER = AuthSanitizer::Loader.load_isolated
+auth_sanitizer = AuthSanitizer::Loader.load_isolated
 
-class TokenResponse
-  include AUTH_SANITIZER::FilteredAttributes
+token_response = Class.new do
+  include auth_sanitizer.const_get(:FilteredAttributes)
 end
 ```
 
@@ -264,7 +241,7 @@ auth_sanitizer_loader_namespace = AnonymousLoader.load_path(
   version_file: "auth/sanitizer/version.rb"
 )
 
-AUTH_SANITIZER = auth_sanitizer_loader_namespace
+auth_sanitizer = auth_sanitizer_loader_namespace
   .const_get(:AuthSanitizer)
   .const_get(:Loader)
   .load_isolated
@@ -450,10 +427,10 @@ Or load it without defining top-level `Auth`. This still defines top-level `Auth
 ```ruby
 require "auth_sanitizer/loader"
 
-AUTH_SANITIZER = AuthSanitizer::Loader.load_isolated
+auth_sanitizer = AuthSanitizer::Loader.load_isolated
 
-class TokenResponse
-  include AUTH_SANITIZER::FilteredAttributes
+token_response = Class.new do
+  include auth_sanitizer.const_get(:FilteredAttributes)
 end
 ```
 
@@ -576,19 +553,21 @@ We welcome both individual and corporate sponsors! We also offer a
 wide array of funding channels to account for your preferences.
 Currently, [Open Collective][🖇osc] is our preferred funding platform.
 
+### Corporate Sponsorship
+
+- <a href="https://alpha-omega.dev"><img alt="Alpha-Omega" src="https://alpha-omega.dev/wp-content/uploads/sites/22/2023/05/logo.svg" height="32"/></a> [Alpha-Omega](https://alpha-omega.dev) — backed by [Amazon Web Services](https://aws.amazon.com), [Google](https://www.google.com), [Microsoft](https://www.microsoft.com), [Anthropic](https://www.anthropic.com), [OpenAI](https://openai.com), [Citi](https://www.citigroup.com), [GitHub](https://github.com)
+- <a href="https://serpapi.com"><img alt="SerpApi" src="https://serpapi.com/assets/media_kit/logo-with-wordmark.svg" height="32"/></a> [SerpApi](https://serpapi.com)
+
 **If you're working in a company that's making significant use of ruby-oauth tools we'd
 appreciate it if you suggest to your company to become a ruby-oauth sponsor.**
 
+### Individual Support
+
 You can support the development of ruby-oauth tools via
 [GitHub Sponsors][🖇sponsor],
 [Liberapay][⛳liberapay],
-[PayPal][🖇paypal],
-[Open Collective][🖇osc]
-and [Tidelift][🏙️entsup-tidelift].
-
-| 📍 NOTE |
-|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
-| If doing a sponsorship in the form of donation is problematic for your company <br/> from an accounting standpoint, we'd recommend the use of Tidelift, <br/> where you can get a support-like subscription instead. |
+[Open Collective][🖇osc],
+and [PayPal][🖇paypal].
 
 ### Open Collective for Individuals
 
@@ -803,9 +782,6 @@ Thanks for RTFM. ☺️
 [👨🏼‍🏫expsup-upwork-img]: https://img.shields.io/badge/UpWork-13544E?style=for-the-badge&logo=Upwork&logoColor=white
 [👨🏼‍🏫expsup-codementor]: https://www.codementor.io/peterboling?utm_source=github&utm_medium=button&utm_term=peterboling&utm_campaign=github
 [👨🏼‍🏫expsup-codementor-img]: https://img.shields.io/badge/CodeMentor-Get_Help-1abc9c?style=for-the-badge&logo=CodeMentor&logoColor=white
-[🏙️entsup-tidelift]: https://tidelift.com/subscription/pkg/rubygems-auth-sanitizer?utm_source=rubygems-auth-sanitizer&utm_medium=referral&utm_campaign=readme
-[🏙️entsup-tidelift-img]: https://img.shields.io/badge/Tidelift_and_Sonar-Enterprise_Support-FD3456?style=for-the-badge&logo=sonar&logoColor=white
-[🏙️entsup-tidelift-sonar]: https://blog.tidelift.com/tidelift-joins-sonar
 [💁🏼‍♂️peterboling]: http://www.peterboling.com
 [🚂railsbling]: http://www.railsbling.com
 [📜src-gl-img]: https://img.shields.io/badge/GitLab-FBA326?style=for-the-badge&logo=Gitlab&logoColor=orange
@@ -921,7 +897,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-0.172-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-0.184-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/ruby-oauth/auth-sanitizer/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year
@@ -951,5 +927,5 @@ Thanks for RTFM. ☺️
 | Homepage | https://github.com/ruby-oauth/auth-sanitizer |
 | Source | https://github.com/ruby-oauth/auth-sanitizer |
 | License | `MIT` |
-| Funding | https://github.com/sponsors/pboling, https://ko-fi.com/pboling, https://liberapay.com/pboling/donate, https://opencollective.com/ruby-oauth, https://thanks.dev/u/gh/pboling, https://tidelift.com/funding/github/rubygems/auth-sanitizer, https://www.buymeacoffee.com/pboling |
+| Funding | https://github.com/sponsors/pboling, https://ko-fi.com/pboling, https://liberapay.com/pboling/donate, https://opencollective.com/ruby-oauth, https://thanks.dev/u/gh/pboling, https://www.buymeacoffee.com/pboling |
 <!-- kettle-jem:metadata:end -->

data/lib/auth/sanitizer/core.rb

@@ -62,6 +62,18 @@ module Auth
       def default_filtered_keys
         DEFAULT_FILTERED_KEYS
       end
+
+      # Sanitize a value using the configured key names and replacement label.
+      # Hashes and arrays are traversed recursively; strings are filtered using
+      # the same formats supported by {SanitizedLogger}.
+      #
+      # @param value [Object] Value to sanitize
+      # @param filtered_keys [Array<String>] Key names whose values should be redacted
+      # @param label [String] Replacement label for redacted values
+      # @return [Object] Sanitized copy of the value
+      def sanitize(value, filtered_keys: default_filtered_keys, label: filtered_label, **options)
+        ValueSanitizer.new(filtered_keys: filtered_keys, label: label, **options).sanitize(value)
+      end
     end
   end
 end

data/lib/auth/sanitizer/sanitized_logger.rb

@@ -24,7 +24,7 @@ module Auth
       #   Defaults to {Auth::Sanitizer.filtered_label}.
       def initialize(logger, filtered_keys: Auth::Sanitizer.default_filtered_keys, label: Auth::Sanitizer.filtered_label)
         @logger = logger
-        @thing_filter = ThingFilter.new(filtered_keys, label: label)
+        @value_sanitizer = ValueSanitizer.new(filtered_keys: filtered_keys, label: label)
       end
 
       # Add a log entry after sanitizing any string payloads.
@@ -200,70 +200,7 @@ module Auth
       def sanitize(message)
         return message unless message.is_a?(String)
 
-        # scrub replaces invalid byte sequences so the gsub calls below never
-        # raise on an invalid encoding while logging a request.
-        sanitized = message.dup.scrub
-        sanitized = sanitize_authorization_header(sanitized)
-        sanitized = sanitize_json_pairs(sanitized)
-        sanitized = sanitize_inspect_pairs(sanitized)
-        sanitize_form_and_query_pairs(sanitized)
-      end
-
-      # The initialized thing filter used by this logger.
-      #
-      # This is a per-logger snapshot created during initialization.
-      #
-      # @return [ThingFilter]
-      attr_reader :thing_filter
-
-      # Redact Authorization header values.
-      #
-      # @param message [String] Logger message
-      # @return [String] Sanitized logger message
-      def sanitize_authorization_header(message)
-        message.gsub(/(Authorization:\s*)(?:"[^"]*"|[^\r\n]+)/i, "\\1\"#{thing_filter.label}\"")
-      end
-
-      # Redact JSON-style values for configured sensitive key names.
-      #
-      # @param message [String] Logger message
-      # @return [String] Sanitized logger message
-      def sanitize_json_pairs(message)
-        message.gsub(/(["'])(#{thing_filter.pattern_source})\1(\s*:\s*)(["'])(.*?)\4/i) do
-          %(#{$1}#{$2}#{$1}#{$3}#{$4}#{thing_filter.label}#{$4})
-        end
-      end
-
-      # Redact values in Ruby `Hash#inspect` output for configured sensitive key names.
-      #
-      # Faraday's debug logger renders non-String bodies (such as the params Hash an OAuth client
-      # builds for a token request) with `pretty_inspect`, so secrets reach the logger in Ruby
-      # inspect syntax rather than JSON or form encoding. Handles both Ruby 3.4+ formats
-      # (`{"key" => "value"}`, `{key: "value"}`) and the pre-3.4 formats (`{"key"=>"value"}`,
-      # `{:key=>"value"}`), case-insensitively.
-      #
-      # @param message [String] Logger message
-      # @return [String] Sanitized logger message
-      def sanitize_inspect_pairs(message)
-        key = thing_filter.pattern_source
-        label = thing_filter.label
-        # Hash-rocket pairs: "key" => "value" / "key"=>"value" / :key=>"value"
-        message = message.gsub(/((?:"(?:#{key})"|:#{key})\s*=>\s*")[^"]*(")/i) { "#{$1}#{label}#{$2}" }
-        # Symbol shorthand pairs: key: "value" (not preceded by a quote, so
-        # already-sanitized JSON pairs are not reprocessed)
-        message.gsub(/(?<!["'])((?:\b(?:#{key})):\s*")[^"]*(")/i) { "#{$1}#{label}#{$2}" }
-      end
-
-      # Redact form-encoded and query-string values for configured sensitive key names.
-      #
-      # The value class excludes `"` and `>` so the pattern neither crosses
-      # into quoted strings nor mangles `Hash#inspect` hash-rocket pairs
-      # (`:key=>"value"`), which {sanitize_inspect_pairs} handles instead.
-      #
-      # @param message [String] Logger message
-      # @return [String] Sanitized logger message
-      def sanitize_form_and_query_pairs(message)
-        message.gsub(/(\b(?:#{thing_filter.pattern_source})=)([^&\s">]+)/i, "\\1#{thing_filter.label}")
+        @value_sanitizer.sanitize(message)
       end
     end
   end

data/lib/auth/sanitizer/value_sanitizer.rb

@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+
+module Auth
+  module Sanitizer
+    # Sanitizes arbitrary values using a configured {ThingFilter}.
+    class ValueSanitizer
+      # @param filtered_keys [Array<String>] Sensitive key names
+      # @param label [String] Replacement label
+      def initialize(filtered_keys: Auth::Sanitizer.default_filtered_keys, label: Auth::Sanitizer.filtered_label, **options)
+        @thing_filter = ThingFilter.new(filtered_keys, label: label)
+      end
+
+      # Return a sanitized copy. Matching Hash keys are replaced as well as
+      # their values, so a secret used as a key cannot leak through inspect.
+      #
+      # @param value [Object] Value to sanitize
+      # @return [Object]
+      def sanitize(value)
+        case value
+        when Hash
+          value.each_with_object({}) do |(key, nested), sanitized|
+            sanitized_key = sanitize(key)
+            sanitized[sanitized_key] = sensitive_key?(key) ? @thing_filter.label : sanitize(nested)
+          end
+        when Array
+          value.map { |nested| sanitize(nested) }
+        when String
+          sanitize_string(value)
+        else
+          value
+        end
+      end
+
+      private
+
+      def sensitive_key?(key)
+        @thing_filter.filtered?(key)
+      end
+
+      def sanitize_string(message)
+        sanitized = message.dup.scrub
+        sanitized = sanitized.gsub(/(Authorization:\s*)(?:"[^"]*"|[^\r\n]+)/i, "\\1\"#{@thing_filter.label}\"")
+        sanitized = sanitized.gsub(/(["'])(#{@thing_filter.pattern_source})\1(\s*:\s*)(["'])(.*?)\4/i) do
+          %(#{$1}#{$2}#{$1}#{$3}#{$4}#{@thing_filter.label}#{$4})
+        end
+        key = @thing_filter.pattern_source
+        label = @thing_filter.label
+        sanitized = sanitized.gsub(/((?:"(?:#{key})"|:#{key})\s*=>\s*")[^"]*(")/i) { "#{$1}#{label}#{$2}" }
+        sanitized = sanitized.gsub(/(?<!["'])((?:\b(?:#{key})):\s*")[^"]*(")/i) { "#{$1}#{label}#{$2}" }
+        sanitized.gsub(/(\b(?:#{key})=)([^&\s">]+)/i, "\\1#{label}")
+      end
+    end
+  end
+end

data/lib/auth/sanitizer/version.rb

@@ -5,7 +5,7 @@ module Auth
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "0.2.4"
+      VERSION = "0.2.5"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

data/lib/auth/sanitizer.rb

@@ -4,6 +4,7 @@ require "version_gem"
 
 require_relative "sanitizer/thing_filter"
 require_relative "sanitizer/core"
+require_relative "sanitizer/value_sanitizer"
 require_relative "sanitizer/filtered_attributes"
 require_relative "sanitizer/sanitized_logger"
 require_relative "sanitizer/version"

data/lib/auth_sanitizer/loader.rb

@@ -10,6 +10,7 @@ module AuthSanitizer
       auth/sanitizer/version.rb
       auth/sanitizer/thing_filter.rb
       auth/sanitizer/core.rb
+      auth/sanitizer/value_sanitizer.rb
       auth/sanitizer/filtered_attributes.rb
       auth/sanitizer/sanitized_logger.rb
     ].freeze

data/sig/auth/sanitizer.rbs

@@ -12,5 +12,8 @@ module Auth
       VERSION: String
     end
     VERSION: String
+    def self.default_filtered_keys: () -> Array[String]
+    def self.filtered_label: () -> String
+    def self.sanitize: (untyped value, ?filtered_keys: Array[String], ?label: String, **untyped options) -> untyped
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: auth-sanitizer
 version: !ruby/object:Gem::Version
-  version: 0.2.4
+  version: 0.2.5
 platform: ruby
 authors:
 - Peter H. Boling
@@ -66,7 +66,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.22
+        version: 3.1.24
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -76,7 +76,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.22
+        version: 3.1.24
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -274,6 +274,7 @@ files:
 - lib/auth/sanitizer/filtered_attributes.rb
 - lib/auth/sanitizer/sanitized_logger.rb
 - lib/auth/sanitizer/thing_filter.rb
+- lib/auth/sanitizer/value_sanitizer.rb
 - lib/auth/sanitizer/version.rb
 - lib/auth_sanitizer/loader.rb
 - sig/auth/sanitizer.rbs
@@ -282,10 +283,10 @@ licenses:
 - MIT
 metadata:
   homepage_uri: https://auth-sanitizer.galtzo.com
-  source_code_uri: https://github.com/ruby-oauth/auth-sanitizer/tree/v0.2.4
-  changelog_uri: https://github.com/ruby-oauth/auth-sanitizer/blob/v0.2.4/CHANGELOG.md
+  source_code_uri: https://github.com/ruby-oauth/auth-sanitizer/tree/v0.2.5
+  changelog_uri: https://github.com/ruby-oauth/auth-sanitizer/blob/v0.2.5/CHANGELOG.md
   bug_tracker_uri: https://github.com/ruby-oauth/auth-sanitizer/issues
-  documentation_uri: https://www.rubydoc.info/gems/auth-sanitizer/0.2.4
+  documentation_uri: https://www.rubydoc.info/gems/auth-sanitizer/0.2.5
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/ruby-oauth/auth-sanitizer/wiki
   news_uri: https://www.railsbling.com/tags/auth-sanitizer