devise_masquerade 2.1.5 → 2.1.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 12249cac77636a1f1a78ca80d034d2503da1ef6b027716de2574edc52320e061
-  data.tar.gz: 17f61840c09c65fdf7094005c3f0aec2f288fb3e54fd0a82243bab2f5c8cad24
+  metadata.gz: 145b9b98124a0c8b287d968fd82397b1868e332d86b68168f166d2eee11a5a22
+  data.tar.gz: f261d51e39690087981dd276691488801de1c029cfbc3e6d6f28988fbbd2542a
 SHA512:
-  metadata.gz: 003fc161d5bbf6c0e863656d93852d7182659178f96b0ebbf1a727c7ecfe3250341f1161e209d7f3043d39111339f60c94794def6632140de7594dc05c7d5d6a
-  data.tar.gz: f55e5af3381c5be54944015489f216a818257721a6fea09725cbfb63e66c616f31e7f9093126f1755c2f9cbaa6b84f8c47d02442cc027018df4719f236d53096
+  metadata.gz: 230af3d8893659daebfe1ab9d641a4f8ae5067b839f3954977bd85e91a81f2938812b4fdee019eac87f0e1e9e94ed5e3525d4a7c17d65105da992eac325b094a
+  data.tar.gz: 78b65a1e433b15a1d04247cc8ee8316889138a4c51463c64afd0320f558f0114264d79127a1f987c02ad8ac4bc9db5e892611717c5bf46cd167addb2a357b0df

data/.github/workflows/brakeman-analysis.yml

@@ -3,42 +3,48 @@
 
 name: Brakeman Scan
 
-# This section configures the trigger for the workflow. Feel free to customize depending on your convention
 on:
   push:
     branches: [ "master", "main" ]
   pull_request:
     branches: [ "master", "main" ]
 
+permissions:
+  contents: read
+
 jobs:
   brakeman-scan:
     name: Brakeman Scan
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
+      actions: read
     steps:
-    # Checkout the repository to the GitHub Actions runner
     - name: Checkout
       uses: actions/checkout@v4
 
-    # Customize the ruby version depending on your needs
     - name: Setup Ruby
       uses: ruby/setup-ruby@v1
       with:
         ruby-version: '3.2'
 
     - name: Setup Brakeman
-      env:
-        BRAKEMAN_VERSION: '4.10' # SARIF support is provided in Brakeman version 4.10+
-      run: |
-        gem install brakeman --version $BRAKEMAN_VERSION
+      run: gem install brakeman
 
-    # Execute Brakeman CLI and generate a SARIF output with the security issues identified during the analysis
+    # Scan the dummy Rails app. The gem root is not a Rails application, so
+    # `brakeman .` exits before writing SARIF. --no-exit-on-warn/error keeps
+    # findings in the report instead of failing the job.
     - name: Scan
-      continue-on-error: true
       run: |
-        brakeman -f sarif -o output.sarif.json .
+        brakeman --path spec/dummy \
+          -f sarif \
+          -o output.sarif.json \
+          --no-exit-on-warn \
+          --no-exit-on-error
 
-    # Upload the SARIF file generated in the previous step
     - name: Upload SARIF
       uses: github/codeql-action/upload-sarif@v4
       with:
         sarif_file: output.sarif.json
+        category: brakeman

data/.github/workflows/rubocop-analysis.yml

@@ -2,9 +2,16 @@ name: "Rubocop"
 
 on: push
 
+permissions:
+  contents: read
+
 jobs:
   rubocop:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
+      actions: read
     strategy:
       fail-fast: false
 
@@ -12,16 +19,15 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@v4
 
-    # If running on a self-hosted runner, check it meets the requirements
-    # listed at https://github.com/ruby/setup-ruby#using-self-hosted-runners
     - name: Set up Ruby
       uses: ruby/setup-ruby@v1
       with:
         ruby-version: 3.2
 
-    # This step is not necessary if you add the gem to your Gemfile
+    # 0.6.1 maps last_column 0 to real_column; 0.3.0 emitted endColumn 0
+    # which github/codeql-action/upload-sarif@v4 rejects (must be >= 1).
     - name: Install Code Scanning integration
-      run: bundle add code-scanning-rubocop --version 0.3.0 --skip-install
+      run: bundle add code-scanning-rubocop --version 0.6.1 --skip-install
 
     - name: Install dependencies
       run: bundle install
@@ -33,7 +39,32 @@ jobs:
           [[ $? -ne 2 ]]
         "
 
+    - name: Normalize SARIF columns
+      run: |
+        python3 - <<'PY'
+        import json
+        from pathlib import Path
+        path = Path("rubocop.sarif")
+        data = json.loads(path.read_text())
+
+        def fix(node):
+            if isinstance(node, dict):
+                for key in ("startColumn", "endColumn"):
+                    value = node.get(key)
+                    if isinstance(value, int) and value < 1:
+                        node[key] = 1
+                for value in node.values():
+                    fix(value)
+            elif isinstance(node, list):
+                for item in node:
+                    fix(item)
+
+        fix(data)
+        path.write_text(json.dumps(data))
+        PY
+
     - name: Upload Sarif output
       uses: github/codeql-action/upload-sarif@v4
       with:
         sarif_file: rubocop.sarif
+        category: rubocop

data/Gemfile

@@ -6,7 +6,6 @@ gemspec
 group :test do
   gem 'activerecord', '>= 8.0.5.1'
   gem 'actionmailer', '>= 8.0.5.1'
-  gem 'bson_ext', '~> 1.3'
   gem 'sqlite3', '>= 2.9.6'
 
   gem 'test-unit'

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    devise_masquerade (2.1.5)
+    devise_masquerade (2.1.6)
       devise (>= 4.7.0)
       globalid (>= 0.3.6)
       railties (>= 5.2.0)
@@ -61,9 +61,6 @@ GEM
     base64 (0.3.0)
     bcrypt (3.1.22)
     bigdecimal (4.1.3)
-    bson (1.12.5)
-    bson_ext (1.12.5)
-      bson (~> 1.12.5)
     builder (3.3.0)
     byebug (13.0.0)
       reline (>= 0.6.0)
@@ -349,7 +346,6 @@ DEPENDENCIES
   activerecord (>= 8.0.5.1)
   addressable (>= 2.9.0)
   bcrypt (>= 3.1.22)
-  bson_ext (~> 1.3)
   bundler (>= 2.0.0)
   capybara (>= 3.38.0)
   chromedriver-helper

data/lib/devise_masquerade/version.rb

@@ -1,3 +1,3 @@
 module DeviseMasquerade
-  VERSION = '2.1.5'.freeze
+  VERSION = '2.1.6'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: devise_masquerade
 version: !ruby/object:Gem::Version
-  version: 2.1.5
+  version: 2.1.6
 platform: ruby
 authors:
 - Alexandr Korsak
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-09-15 00:00:00.000000000 Z
+date: 2026-09-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler