castle_devise 0.4.3 → 0.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6843034cd0d1278d25140abc645d54dca7b8a3431829c6d7b58920ad987381a6
-  data.tar.gz: 58f4ae8fb336b3299f96b067210b788f9906efd223965c7c17143a2e2583fad3
+  metadata.gz: ec99e18ff024ed0a67da899ebb6ecd0feca90f4f4a9e9ecf482195f99473c536
+  data.tar.gz: 1936cca9eb03a1f6a70680337f9513f266fe09493d1886881ccd3d8be8a3c759
 SHA512:
-  metadata.gz: 0b8f9feca618661708bf6695d3c870c54e4fd4eb747b8ea96031e8a88bcb53c7af7b52b47ce38b92cd44bb85e352b5a9a6bc1aba6a80d4218ecee6dbbe6fdd6c
-  data.tar.gz: e81f6b014851e78444088a9949746aec347a800c39487ab4cae3c0727c6568b8a2b9691f561c7366be873725ea00f0e62e9d33e2ca919193d3c758da975b116a
+  metadata.gz: ba9db9541573aa3ce7e7dba634bae8756303f337327bd96631d73b0055fbb6159d311ba668a9ae6828392336cf2aeec49702e827134f6ba9a650095b67af9de2
+  data.tar.gz: da1ee7ab23bdd7db7b9a2975d7becd1d2dd10ad56667db657355ed49126975fabba059342f2975ae6e536fedd9fdb7479cddce81a17bb50c2d26e299cd6c3c20

data/.github/workflows/lint.yml

@@ -1,21 +1,18 @@
 name: Lint
 
-on: [pull_request]
+on:
+  pull_request:
+  push:
+    branches: [main]
 
 jobs:
   standardrb:
-    name: runner / standardrb
+    name: standardrb
     runs-on: ubuntu-latest
     steps:
-      - name: Check out code
-        uses: actions/checkout@v1
-      - name: Give permissions
-        run: |
-          sudo chown -R root:root $GITHUB_WORKSPACE
-      - name: standardrb
-        uses: SennaLabs/action-standardrb@v0.0.3
+      - uses: actions/checkout@v5
+      - uses: ruby/setup-ruby@v1
         with:
-          github_token: ${{ secrets.github_token }}
-          reporter: github-pr-review # Default is github-pr-check
-          rubocop_version: 1.1.6 # note: this actually refers to standardb version, not Rubocop
-          rubocop_flags: --format progress
+          ruby-version: "3.4"
+          bundler-cache: true
+      - run: bundle exec standardrb --format progress

data/.github/workflows/specs.yml

@@ -10,31 +10,59 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        ruby: ["2.7", "3.0", "3.1", "3.2"]
-        rails: ["6.0", "6.1", "7.0"]
-
+        include:
+          # Rails 6.0
+          - ruby: "3.2"
+            rails: "6.0"
+          # Rails 6.1
+          - ruby: "3.2"
+            rails: "6.1"
+          # Rails 7.0
+          - ruby: "3.2"
+            rails: "7.0"
+          # Rails 7.1
+          - ruby: "3.2"
+            rails: "7.1"
+          - ruby: "3.3"
+            rails: "7.1"
+          # Rails 7.2
+          - ruby: "3.2"
+            rails: "7.2"
+          - ruby: "3.3"
+            rails: "7.2"
+          # Rails 8.0
+          - ruby: "3.3"
+            rails: "8.0"
+          - ruby: "3.4"
+            rails: "8.0"
+          - ruby: "4.0"
+            rails: "8.0"
+          # Rails 8.1
+          - ruby: "3.3"
+            rails: "8.1"
+          - ruby: "3.4"
+            rails: "8.1"
+          - ruby: "4.0"
+            rails: "8.1"
     steps:
-    - uses: actions/checkout@v2
-    - name: Set up Ruby ${{ matrix.ruby }}
-      uses: ruby/setup-ruby@v1
-      with:
-        ruby-version: ${{ matrix.ruby }}
-    - name: Install dependencies
-      env:
-        BUNDLE_GEMFILE: gemfiles/rails_${{ matrix.rails }}.gemfile
-      run: |
-        gem update --system
-        bundle config path vendor/bundle
-        bundle install
-    - name: Run specs
-      env:
-        BUNDLE_GEMFILE: gemfiles/rails_${{ matrix.rails }}.gemfile
-        CASTLE_API_SECRET: ${{ secrets.CASTLE_API_SECRET }}
-      run: |
-        bundle exec rake
-    - name: Simplecov Report
-      if:
-        ${{ matrix.rails == '6.1' && matrix.ruby >= '3.0' }}
-      uses: aki77/simplecov-report-action@v1
-      with:
-        token: ${{ secrets.GITHUB_TOKEN }}
+      - uses: actions/checkout@v5
+      - name: Set up Ruby ${{ matrix.ruby }}
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.ruby }}
+      - name: Install dependencies
+        env:
+          BUNDLE_GEMFILE: gemfiles/rails_${{ matrix.rails }}.gemfile
+        run: |
+          bundle config path vendor/bundle
+          bundle install
+      - name: Run specs
+        env:
+          BUNDLE_GEMFILE: gemfiles/rails_${{ matrix.rails }}.gemfile
+        run: |
+          bundle exec rake
+      - name: Simplecov Report
+        uses: k1LoW/octocov-action@v1
+        if: matrix.ruby == '3.4' && matrix.rails == '8.1'
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}

data/.gitignore

@@ -22,3 +22,4 @@ gemfiles/*.lock
 vendor/
 
 spec/dummy_app/log/
+spec/dummy_app/tmp/

data/.octocov.yml

@@ -0,0 +1,14 @@
+# generated by octocov init
+coverage:
+  if: true
+testExecutionTime:
+  if: true
+diff:
+  datastores:
+    - artifact://${GITHUB_REPOSITORY}
+summary:
+  if: true
+report:
+  if: is_default_branch
+  datastores:
+    - artifact://${GITHUB_REPOSITORY}

data/.standard.yml

@@ -0,0 +1,3 @@
+ignore:
+  - "gemfiles/vendor/**/*"
+  - "vendor/**/*"

data/.tool-versions

@@ -0,0 +1 @@
+ruby 3.4.10

data/CHANGELOG.md

@@ -2,6 +2,34 @@
 
 ## [Unreleased][main]
 
+## [0.7.0] - 2026-09-07
+- Drop `cdn.castle.io`; load `castle.umd.js` from `/vendor/castle-js` via `castle_javascript_tag`
+- Seed `window.Castle` before a UMD script so 3.x (`name: @castleio/castle-js`) attaches to the same global
+- Support `@castleio/castle-js` 2.x (`injectTokenOnSubmit` / `createRequestToken`) and 3.x (`configure({ pk })` + `createRequestToken`)
+- Add `publishable_key` configuration and drop `app_id`
+- Bump development Gemfile.lock dependencies, including Rails 8.1.3.1, `castle-rb` 9.3.0, Standard 1.56, and SimpleCov 1.2
+- Pin Ruby 3.4.10 via `.tool-versions` and add `mise.toml` task aliases
+- Use `actions/checkout@v5` in CI
+
+## [0.6.0] - 2026-05-25
+- Add support for Rails 8.1
+- Add support for Devise 5
+- Allow `castle-rb` 9.x (constraint widened to `>= 7.2, < 10.0`); verified
+  against the upcoming 9.0 release — castle_devise uses only the
+  `#risk` / `#filter` / `#log` Client APIs and the `Castle::Error` /
+  `InvalidParametersError` / `InvalidRequestTokenError` classes, all of
+  which remain in 9.0.
+- Bump `castle-rb` to 9.1.0
+- Add Ruby 3.3, 3.4, and 4.0 to the CI matrix
+- Bump minimum required Ruby version to 3.2
+- Replace deprecated `ActiveSupport::Configurable` with plain Ruby attribute accessors (drops the Rails 8.2 deprecation warning)
+- Drop `appraisal` development dependency in favor of hand-maintained `gemfiles/*.gemfile`
+- Bump development Gemfile to Rails 8.1, Devise 5, sqlite3 ~> 2.1, Bundler 2.7.x
+
+## [0.5.0] - 2025-06-17
+- Throw a warning instead of an error for the `$login.failed` event when an exception is raised
+- Security fixes and dependency updates
+
 ## [0.4.3] - 2023-07-11
 - Fix an issue where we would send a `login.failed` event on any attempt of accessing a protected resource, not only when the user failed to log in specifically
 
@@ -29,7 +57,10 @@
 
 - Initial release
 
-[main]: https://github.com/castle/castle_devise/compare/v0.4.3...HEAD
+[main]: https://github.com/castle/castle_devise/compare/v0.7.0...HEAD
+[0.7.0]: https://github.com/castle/castle_devise/compare/v0.6.0...v0.7.0
+[0.6.0]: https://github.com/castle/castle_devise/compare/v0.5.0...v0.6.0
+[0.5.0]: https://github.com/castle/castle_devise/compare/v0.4.3...v0.5.0
 [0.4.3]: https://github.com/castle/castle_devise/compare/v0.4.2...v0.4.3
 [0.4.2]: https://github.com/castle/castle_devise/compare/v0.4.1...v0.4.2
 [0.4.1]: https://github.com/castle/castle_devise/compare/v0.4.0...v0.4.1

data/Gemfile

@@ -7,13 +7,16 @@ gemspec
 
 gem "actionmailer"
 gem "activerecord"
+# Dev/test: track castle-rb upstream develop. Gemspec uses rubygems.
+gem "castle-rb", github: "castle/castle-ruby", branch: "develop"
 gem "byebug"
-gem "railties", "~> 7.0"
+gem "devise", "~> 5.0"
+gem "railties", "~> 8.1"
 gem "rake"
 gem "rspec"
 gem "rspec-rails"
 gem "simplecov"
+gem "sqlite3", "~> 2.1"
 gem "standard"
-gem "sqlite3"
 gem "vcr"
 gem "webmock"