ecoportal-api 0.10.18 → 0.10.19

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 6b3c598464285e2aa0a6b7758451fa2770a58c6c46c5dfdf6666f63e091a2572
4
- data.tar.gz: 369895aab3cce451742e49db3baa99c791027aa9ff37b18db11ffab9135650d2
3
+ metadata.gz: fc93a32fe44f4a745aa6142c5963c3f6f80bd740bc2439728161f3287ea068b5
4
+ data.tar.gz: bd9a21e9631556d9eb0213d1460c6c3b088b4423568b9405c4a357e75b350d6c
5
5
  SHA512:
6
- metadata.gz: bb2d8b203f5d0639d8c66a064f04e93a9d7c70795948dd24bec986db85f3f4a5c63632025a037d7bae03a0bf997fa0353d14f9d0b001083b09b1024c3e50831d
7
- data.tar.gz: 80c3c78b5feb49cd9b90bc18d847a0bf2b529de586671a1bf04e37c8fafd006c4c2fff6722dbcfa1406ab10cc837f3a324a1de4b57ff0d042f657c5445ed14cb
6
+ metadata.gz: 881aa1ca8bb2dd35236f8da1f1b5a9a9a7b398c1e49eff09b3271d4ae89e72ea585177c1e03334adfc82b52b297b03f2f40cceb6c68085988448ecdd7e9146e3
7
+ data.tar.gz: 7b0cc3dd4730fe3b9177271a364b704c3b5b940e7a1202e8b89b94bcd24f6b9b8aa5662a83f31a40d173b9f1d1d048ffc57b38829727cd7582829090c0bd6e92
data/CHANGELOG.md CHANGED
@@ -2,12 +2,30 @@
2
2
 
3
3
  All notable changes to this project will be documented in this file.
4
4
 
5
+ ## [Unreleased]
6
+
7
+ ## [0.10.19] - 2026-09-30
8
+
9
+ Security republish of 0.10.18 -- backwards-compatible, no code change: removes customer and
10
+ internal identifiers from shipped comments and this changelog; includes the full-path
11
+ packaging allowlist.
12
+
13
+ ### Fixed
14
+
15
+ - **`spec.files` is now allowlisted by full path, not by root directory.** The `0.10.18`
16
+ fix replaced the old denylist with `f.start_with?('lib/', 'exe/')`, which still ships
17
+ anything dropped into `lib/` regardless of what it is -- a directory prefix asserts
18
+ nothing about extension. This repo has not leaked under that rule, but a sibling gem's
19
+ identically-shaped root allowlist shipped five `CLAUDE.md` files out of its `lib/` in a
20
+ later release. `spec.files` now also requires `.rb` for anything under `lib/`, closing
21
+ the same hole here pre-emptively, with `spec/packaging_spec.rb` added to pin the rule.
22
+
5
23
  ## [0.10.18] - 2026-08-13
6
24
 
7
25
  ### Fixed
8
26
 
9
27
  - Packaging-only republish with the allowlisted gemspec. `0.10.17` shipped internal repository
10
- content (`.ai-assistance/`, `docs/self-docs/`, `docs/worklog.md`, `CLAUDE.md`,
28
+ content (the repo's internal docs, `docs/self-docs/`, `docs/worklog.md`, `CLAUDE.md`,
11
29
  `.claude/settings.json`) to rubygems.org via the old denylist `spec.files`. `0.10.18` is the
12
30
  identical `lib/` code packaged clean; `0.10.17` will be yanked.
13
31
 
@@ -22,7 +40,7 @@ All notable changes to this project will be documented in this file.
22
40
  - `WithRetry` never retried timeouts: `HTTP::TimeoutError` (and so `HTTP::ConnectTimeoutError`)
23
41
  is a sibling of `HTTP::ConnectionError` in the `http` gem hierarchy, not a subclass — a
24
42
  transient connect/read/write timeout propagated immediately and killed whole batches mid-loop
25
- (live-confirmed on the Farmers native card, 2026-07-30). Added `HTTP::TimeoutError` to
43
+ (live-confirmed on a customer integration, 2026-07-30). Added `HTTP::TimeoutError` to
26
44
  `HANDLED_CONNECTION_ERRORS`; applies to all downstream gems that inherit this retry layer
27
45
  (`ecoportal-api-v2`, `ecoportal-api-graphql`, `eco-helpers`).
28
46
 
@@ -8,8 +8,8 @@ module Ecoportal
8
8
  # HTTP::TimeoutError is a SIBLING of HTTP::ConnectionError in the http gem's
9
9
  # hierarchy (ConnectTimeoutError < TimeoutError < Error), so it must be listed
10
10
  # explicitly: without it a transient connect/read/write timeout is never retried
11
- # and kills a whole batch mid-loop (live-confirmed on the Farmers native card,
12
- # 2026-07-30 — see multi_org_api FARMERS_NATIVE_MIGRATION.md).
11
+ # and kills a whole batch mid-loop (live-confirmed on a customer integration,
12
+ # 2026-07-30 — see internal script repos' migration notes).
13
13
  HANDLED_CONNECTION_ERRORS = [
14
14
  HTTP::ConnectionError,
15
15
  HTTP::TimeoutError,
@@ -1,5 +1,5 @@
1
1
  module Ecoportal
2
2
  module API
3
- VERSION = '0.10.18'.freeze
3
+ VERSION = '0.10.19'.freeze
4
4
  end
5
5
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: ecoportal-api
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.10.18
4
+ version: 0.10.19
5
5
  platform: ruby
6
6
  authors:
7
7
  - Tapio Saarinen