einvoicing 0.9.1 → 0.9.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a112029dd945f7dfbdc67dcf4ee76420d1708284a7bb18d6c04a2c32de2a7015
-  data.tar.gz: 6f4a1302247e1b572b9713b51d4605d4e354c9000159d5755e36c1331ba70090
+  metadata.gz: 96c1b67f435b7ca99b2716f4aba9c8dcf631302d37db1a6fa3743d993de55334
+  data.tar.gz: 0c5713cbce3d1e842b64c3361957eb2764dadd89eefd5fb361816bfbd786aa3b
 SHA512:
-  metadata.gz: ecf8f50fc15ce50e55506a7c74ab492d0a2b23987d29087a6555c229d62b9c03848d459b22da07e1428fd79ab0445da5726670f324823af36f611d61bdd0fdad
-  data.tar.gz: e7867f59abf64d56f82fe5903d5e76994986ee3e64445a49897fd25929e19b5afc245905955b749f06ecff83e893f9bfbfa676079a5ce7622f85441106ebf4db
+  metadata.gz: 9c4b6d6c1907118f2743887788ac55a6b3bade8268e7ddb8ed6a78afcb735bc7581f249166501428216af1ae0ce883a6fef338c1d6eb45f473089b7f02a07924
+  data.tar.gz: 9c4e9728880210475896ce42280595b5eecf26514dffcbc58198d97f2f0e9dee749ab3dae3b38db7780f3ec79ae8604d93c738959f6cccfd4f7961cbfb300770

data/CHANGELOG.md

@@ -5,7 +5,15 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [0.9.3] - 2026-08-31
+
+### Fixed
+- Declare `bigdecimal` and `rexml` as runtime dependencies. Both are required from `lib/` but neither was declared, so `require "einvoicing"` raised `LoadError: cannot load such file -- bigdecimal` in any consumer bundle that did not carry them, and Peppol validation failed on `rexml/document`. `rexml` is floored at 3.3.6, the release that fixed its parsing DoS.
+
+## [0.9.2] - 2026-08-06
+
+### Fixed
+- CII announced a SIRET under `schemeID="0002"`, which is SIRENE — the nine-digit SIREN. A fourteen-digit SIRET now goes out as `0009`, the ISO 6523 code that actually labels it. Neither the XSD nor the EN 16931 Schematron catches the mismatch, because both values are just strings to them; a Plateforme Agréée checks it, and refuses the document. Chorus Pro keeps the literal `SIRET` scheme it predates the codelist with
 
 ## [0.9.1] - 2026-08-06
 

data/lib/einvoicing/formats/cii.rb

@@ -125,13 +125,27 @@ module Einvoicing
       end
       private_class_method :header_trade_agreement
 
+      # ISO 6523 identifier scheme for a French legal registration (BT-30 /
+      # BT-47). The code has to match the *length* of the number it labels:
+      # 0002 is SIRENE, which is the 9-digit SIREN, and a 14-digit SIRET
+      # announced as 0002 is what a Plateforme Agréée rejects the document for.
+      # Chorus Pro predates the codelist and wants the literal word instead.
+      SIREN_SCHEME = "0002"
+      SIRET_SCHEME = "0009"
+
+      def self.legal_id_scheme(party, profile)
+        return "SIRET" if profile == :chorus_pro && party.siret
+
+        party.siret ? SIRET_SCHEME : SIREN_SCHEME
+      end
+      private_class_method :legal_id_scheme
+
       def self.party_xml(b, party, profile)
         b.text("ram:Name", party.name)
         legal_id = party.siret || party.siren
         if legal_id
           b.tag("ram:SpecifiedLegalOrganization") do
-            scheme = (profile == :chorus_pro && party.siret) ? "SIRET" : "0002"
-            b.text("ram:ID", legal_id, "schemeID" => scheme)
+            b.text("ram:ID", legal_id, "schemeID" => legal_id_scheme(party, profile))
           end
         end
         b.tag("ram:PostalTradeAddress") do

data/lib/einvoicing/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Einvoicing
-  VERSION = "0.9.1"
+  VERSION = "0.9.3"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: einvoicing
 version: !ruby/object:Gem::Version
-  version: 0.9.1
+  version: 0.9.3
 platform: ruby
 authors:
 - Nathan Le Ray
@@ -37,6 +37,34 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: bigdecimal
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rexml
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.3.6
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.3.6
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -108,7 +136,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1.16'
 - !ruby/object:Gem::Dependency
-  name: rexml
+  name: prawn
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -122,33 +150,47 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: prawn
+  name: webmock
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
 - !ruby/object:Gem::Dependency
-  name: webmock
+  name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.0'
+        version: '0.22'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.0'
+        version: '0.22'
+- !ruby/object:Gem::Dependency
+  name: bundler-audit
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.9'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.9'
 description: |
   EN 16931-compliant e-invoicing for Ruby. Generates Factur-X (PDF/A-3 + CII XML),
   UBL 2.1, and CII D16B. Validates French B2B requirements (SIREN, SIRET, TVA).
@@ -215,7 +257,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.17
+rubygems_version: 4.0.19
 specification_version: 4
 summary: EU electronic invoicing for Ruby — EN 16931, Factur-X, UBL 2.1
 test_files: []