ejson-rails 0.1.1 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: d6ed554914ffee19b94116f0ce94f3796b680ba0
-  data.tar.gz: 1b4f1b1f4e81b8f6bcb1b1468ba5452e0ba5f5c1
+SHA256:
+  metadata.gz: 69f79981ad2617db5951c38bdef5d9fb77dedd27e52378f3fa460e5af89435b0
+  data.tar.gz: 7ded0b73fc84ae62c508afa5e2c185f85edd83a12872a326c11a9df91292b577
 SHA512:
-  metadata.gz: d42411a44030e8b7ca186f2e69c24df8deefcad1d49195108651e8358f4f0eceeee08a5311f7f497b6cd935eefdaca6765847a7588d9603301bf2ccf5059648c
-  data.tar.gz: 90759c997260d05d7443315ab12adcd84c033aed5588450db8de6833f393dc62b2f67296cb5cf25889d989ff030edbe07faf2689b81b3461b0babec05e5c7c0e
+  metadata.gz: bbe4e714ed9a6f110a781e8f8e1fdde6a26695f949798dd8eabdd9ba59a5321a1928dc6d6b2d6f9b685c89232873b4fa00dbfac0daefd10acc7dee09baf8f2c2
+  data.tar.gz: 15e2abb7e802deeaa5358ec6cd10f52576a4402bf490bcae5121152fa1cde54d29cafd2899ccb4244274dd809f61b09331ff7e1d4d77dde38ce0fa9813f9ae1c

data/.github/workflows/ci.yml

@@ -0,0 +1,39 @@
+name: CI
+
+on: push
+
+jobs:
+  ruby-tests:
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        entry:
+          - name: Minimum Rails
+            ruby: '2.7'
+            gemfile: Gemfile.rails-min
+          - name: Latest Rails
+            ruby: '3.2'
+            gemfile: Gemfile.rails-latest
+          - name: Edge Rails
+            ruby: '3.2'
+            gemfile: "Gemfile.rails-edge"
+
+    name: ${{ matrix.entry.name }}
+    env:
+      BUNDLE_GEMFILE: gemfiles/${{ matrix.entry.gemfile }}
+    steps:
+      - uses: actions/checkout@v3
+        name: Checkout
+
+      - uses: ruby/setup-ruby@v1
+        name: Use Ruby ${{ matrix.entry.ruby }}
+        with:
+          ruby-version: ${{ matrix.entry.ruby }}
+          bundler-cache: true
+
+      - name: 💅🏼 Lint
+        run: bundle exec rubocop --fail-fast
+
+      - name: Test
+        run: bundle exec rake spec

data/.github/workflows/cla.yml

@@ -0,0 +1,22 @@
+name: Contributor License Agreement (CLA)
+
+on:
+  pull_request_target:
+    types: [opened, synchronize]
+  issue_comment:
+    types: [created]
+
+jobs:
+  cla:
+    runs-on: ubuntu-latest
+    if: |
+      (github.event.issue.pull_request
+        && !github.event.issue.pull_request.merged_at
+        && contains(github.event.comment.body, 'signed')
+      )
+      || (github.event.pull_request && !github.event.pull_request.merged)
+    steps:
+      - uses: Shopify/shopify-cla-action@v1
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          cla-token: ${{ secrets.CLA_TOKEN }}

data/.gitignore

@@ -9,6 +9,3 @@
 
 # rspec failure tracking
 .rspec_status
-
-# rubocop config
-.rubocop-http-*

data/.rubocop.yml

@@ -1,5 +1,9 @@
-inherit_from:
-  - http://shopify.github.io/ruby-style-guide/rubocop.yml
+inherit_gem:
+  rubocop-shopify: rubocop.yml
 
 AllCops:
-  TargetRubyVersion: 2.5.1
+  NewCops: disable
+  SuggestExtensions: false
+  TargetRubyVersion: 3.2
+  Exclude:
+   - vendor/bundle/**/*

data/.ruby-version

@@ -1 +1 @@
-2.5.1
+3.2.0

data/Gemfile

@@ -6,3 +6,6 @@ git_source(:github) { |repo_name| "https://github.com/#{repo_name}" }
 
 # Specify your gem's dependencies in ejson-rails.gemspec
 gemspec
+
+gem("rubocop", require: false)
+gem("rubocop-shopify", require: false)

data/Gemfile.lock

@@ -1,104 +1,150 @@
 PATH
   remote: .
   specs:
-    ejson-rails (0.1.1)
+    ejson-rails (0.2.1)
       ejson
-      railties (>= 4.1)
+      railties (>= 5.2)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    actionpack (5.2.0)
-      actionview (= 5.2.0)
-      activesupport (= 5.2.0)
-      rack (~> 2.0)
+    actionpack (7.1.2)
+      actionview (= 7.1.2)
+      activesupport (= 7.1.2)
+      nokogiri (>= 1.8.5)
+      racc
+      rack (>= 2.2.4)
+      rack-session (>= 1.0.1)
       rack-test (>= 0.6.3)
-      rails-dom-testing (~> 2.0)
-      rails-html-sanitizer (~> 1.0, >= 1.0.2)
-    actionview (5.2.0)
-      activesupport (= 5.2.0)
+      rails-dom-testing (~> 2.2)
+      rails-html-sanitizer (~> 1.6)
+    actionview (7.1.2)
+      activesupport (= 7.1.2)
       builder (~> 3.1)
-      erubi (~> 1.4)
-      rails-dom-testing (~> 2.0)
-      rails-html-sanitizer (~> 1.0, >= 1.0.3)
-    activesupport (5.2.0)
+      erubi (~> 1.11)
+      rails-dom-testing (~> 2.2)
+      rails-html-sanitizer (~> 1.6)
+    activesupport (7.1.2)
+      base64
+      bigdecimal
       concurrent-ruby (~> 1.0, >= 1.0.2)
-      i18n (>= 0.7, < 2)
-      minitest (~> 5.1)
-      tzinfo (~> 1.1)
-    ast (2.4.0)
-    builder (3.2.3)
-    concurrent-ruby (1.0.5)
-    crass (1.0.4)
-    diff-lcs (1.3)
-    ejson (1.1.0)
-    erubi (1.7.1)
-    i18n (1.0.1)
+      connection_pool (>= 2.2.5)
+      drb
+      i18n (>= 1.6, < 2)
+      minitest (>= 5.1)
+      mutex_m
+      tzinfo (~> 2.0)
+    ast (2.4.2)
+    base64 (0.2.0)
+    bigdecimal (3.1.4)
+    builder (3.2.4)
+    concurrent-ruby (1.2.2)
+    connection_pool (2.4.1)
+    crass (1.0.6)
+    diff-lcs (1.4.4)
+    drb (2.2.0)
+      ruby2_keywords
+    ejson (1.4.1)
+    erubi (1.12.0)
+    i18n (1.14.1)
       concurrent-ruby (~> 1.0)
-    loofah (2.2.2)
+    io-console (0.6.0)
+    irb (1.10.0)
+      rdoc
+      reline (>= 0.3.8)
+    json (2.6.3)
+    loofah (2.22.0)
       crass (~> 1.0.2)
-      nokogiri (>= 1.5.9)
-    method_source (0.9.0)
-    mini_portile2 (2.3.0)
-    minitest (5.11.3)
-    nokogiri (1.8.3)
-      mini_portile2 (~> 2.3.0)
-    parallel (1.12.1)
-    parser (2.5.1.0)
-      ast (~> 2.4.0)
-    powerpack (0.1.1)
-    rack (2.0.5)
-    rack-test (1.0.0)
-      rack (>= 1.0, < 3)
-    rails-dom-testing (2.0.3)
-      activesupport (>= 4.2.0)
+      nokogiri (>= 1.12.0)
+    mini_portile2 (2.8.5)
+    minitest (5.20.0)
+    mutex_m (0.2.0)
+    nokogiri (1.15.5)
+      mini_portile2 (~> 2.8.2)
+      racc (~> 1.4)
+    parallel (1.22.1)
+    parser (3.2.0.0)
+      ast (~> 2.4.1)
+    psych (5.1.1.1)
+      stringio
+    racc (1.7.3)
+    rack (3.0.8)
+    rack-session (2.0.0)
+      rack (>= 3.0.0)
+    rack-test (2.1.0)
+      rack (>= 1.3)
+    rackup (2.1.0)
+      rack (>= 3)
+      webrick (~> 1.8)
+    rails-dom-testing (2.2.0)
+      activesupport (>= 5.0.0)
+      minitest
       nokogiri (>= 1.6)
-    rails-html-sanitizer (1.0.4)
-      loofah (~> 2.2, >= 2.2.2)
-    railties (5.2.0)
-      actionpack (= 5.2.0)
-      activesupport (= 5.2.0)
-      method_source
-      rake (>= 0.8.7)
-      thor (>= 0.18.1, < 2.0)
-    rainbow (3.0.0)
-    rake (10.5.0)
-    rspec (3.7.0)
-      rspec-core (~> 3.7.0)
-      rspec-expectations (~> 3.7.0)
-      rspec-mocks (~> 3.7.0)
-    rspec-core (3.7.1)
-      rspec-support (~> 3.7.0)
-    rspec-expectations (3.7.0)
+    rails-html-sanitizer (1.6.0)
+      loofah (~> 2.21)
+      nokogiri (~> 1.14)
+    railties (7.1.2)
+      actionpack (= 7.1.2)
+      activesupport (= 7.1.2)
+      irb
+      rackup (>= 1.0.0)
+      rake (>= 12.2)
+      thor (~> 1.0, >= 1.2.2)
+      zeitwerk (~> 2.6)
+    rainbow (3.1.1)
+    rake (13.0.6)
+    rdoc (6.6.0)
+      psych (>= 4.0.0)
+    regexp_parser (2.6.1)
+    reline (0.4.1)
+      io-console (~> 0.5)
+    rexml (3.2.5)
+    rspec (3.10.0)
+      rspec-core (~> 3.10.0)
+      rspec-expectations (~> 3.10.0)
+      rspec-mocks (~> 3.10.0)
+    rspec-core (3.10.1)
+      rspec-support (~> 3.10.0)
+    rspec-expectations (3.10.1)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.7.0)
-    rspec-mocks (3.7.0)
+      rspec-support (~> 3.10.0)
+    rspec-mocks (3.10.2)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.7.0)
-    rspec-support (3.7.1)
-    rubocop (0.56.0)
+      rspec-support (~> 3.10.0)
+    rspec-support (3.10.2)
+    rubocop (1.43.0)
+      json (~> 2.3)
       parallel (~> 1.10)
-      parser (>= 2.5)
-      powerpack (~> 0.1)
+      parser (>= 3.2.0.0)
       rainbow (>= 2.2.2, < 4.0)
+      regexp_parser (>= 1.8, < 3.0)
+      rexml (>= 3.2.5, < 4.0)
+      rubocop-ast (>= 1.24.1, < 2.0)
       ruby-progressbar (~> 1.7)
-      unicode-display_width (~> 1.0, >= 1.0.1)
-    ruby-progressbar (1.9.0)
-    thor (0.20.0)
-    thread_safe (0.3.6)
-    tzinfo (1.2.5)
-      thread_safe (~> 0.1)
-    unicode-display_width (1.3.2)
+      unicode-display_width (>= 2.4.0, < 3.0)
+    rubocop-ast (1.24.1)
+      parser (>= 3.1.1.0)
+    rubocop-shopify (2.11.1)
+      rubocop (~> 1.42)
+    ruby-progressbar (1.11.0)
+    ruby2_keywords (0.0.5)
+    stringio (3.1.0)
+    thor (1.3.0)
+    tzinfo (2.0.6)
+      concurrent-ruby (~> 1.0)
+    unicode-display_width (2.4.2)
+    webrick (1.8.1)
+    zeitwerk (2.6.12)
 
 PLATFORMS
   ruby
 
 DEPENDENCIES
-  bundler (~> 1.16)
   ejson-rails!
-  rake (~> 10.0)
+  rake (~> 13.0)
   rspec (~> 3.0)
-  rubocop (~> 0.56)
+  rubocop
+  rubocop-shopify
 
 BUNDLED WITH
-   1.16.1
+   2.3.17

data/LICENSE.txt

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2018 Shopify
+Copyright (c) 2018-present Shopify Inc.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

data/README.md

@@ -1,8 +1,8 @@
 # EJSON::Rails
 
-[![Build Status](https://travis-ci.com/Shopify/ejson-rails.svg?token=ShuwwQhmf65yNstgcUSy&branch=master)](https://travis-ci.com/Shopify/ejson-rails)
+[![Build Status](https://github.com/Shopify/ejson-rails/workflows/CI/badge.svg?branch=main)](https://github.com/Shopify/ejson-rails/actions?query=branch%3Amain)
 
-Automatically injects `ejson` decrypted secrets into your `Rails.application.secrets`.
+Automatically injects [`ejson`](https://github.com/Shopify/ejson) decrypted secrets into your `Rails.application.secrets`.
 
 ## Installation
 
@@ -22,14 +22,122 @@ Or install it yourself as:
 
 ## Usage
 
-Decrypted secrets from `project/config/secrets.json` (or `project/config/secrets.{current_rails_environment}.json` if that doesn't exist) will be accessible via `Rails.application.secrets`. For example:
+Decrypted secrets and credentials from `project/config/secrets.json` (or `project/config/secrets.{current_rails_environment}.json` if that doesn't exist) will be accessible via `Rails.application.secrets`. For example:
 
+`# project/config/secrets.json`
 ```json
-// project/config/secrets.json
 { "some_secret": "key" }
 ```
 
-will be accessible via `Rails.application.secrets.some_secret` or `Rails.application.secrets[:some_secret]` on boot. JSON files are loaded once and contents are `deep_merge`'d into your app's existing rails secrets.
+will be accessible via `Rails.application.secrets.some_secret` or `Rails.application.secrets[:some_secret]` upon booting. JSON files are loaded once and contents are `deep_merge`'d into your app's existing rails secrets.
+
+Secrets will also be accessible via `Rails.application.credentials`, e.g. `Rails.application.credentials.some_secret` or `Rails.application.credentials[:some_secret]`. To avoid subtle compatibility issues, if a credential already exists, an error will occur.
+
+If you set the `EJSON_RAILS_DELETE_SECRETS` environment variable to `true` the gem will automatically delete the secrets from the filesystem after loading them into Rails. It will delete both paths (`project/config/secrets.json` and `project/config/secrets.{current_rails_environment}.json`) if the files exist and are writable.
+
+NOTE: This gem does not decrypt ejson for you. You will need to configure this as part of your deployment pipeline.
+
+## Migrating to credentials
+
+Rails 7.1 has deprecated application secrets in favor of credentials. ejson-rails can migrate secrets to application credentials.
+
+Even before running Rails 7.1, you can migrate your secrets in several steps:
+1. Convert secrets from YAML to JSON
+2. Move any ERB embedded within the YAML to the corresponding environment file
+3. Use `Rails.application.credentials` in place of Rails secrets
+
+### 1. Convert secrets from config/secrets.yml to config/secrets.json
+
+Typically, secrets share the same structure across different environments. While test secrets are often placeholders, development secrets may sometimes use environment variables to communicate with external services.
+In that case, the easiest way to migrate is to use the test secrets in all local environments, and override for development as needed:
+
+```sh-session
+# Recommended
+bin/rails runner -e test 'Rails.root.join("config/secrets.json").write(JSON.pretty_generate(Rails.application.secrets.to_h.without(:secret_key_base)))'
+```
+
+> [!NOTE]
+> Alternatively, if its necessary to configure distinct values between the development/test environment, you can use separate JSON files for the development/test environments:
+>
+> ```sh-session
+> bin/rails runner 'Rails.root.join("config/secrets.#{Rails.env}.json").write(JSON.pretty_generate(Rails.application.secrets.to_h.without(:secret_key_base)))'
+> bin/rails runner -e test 'Rails.root.join("config/secrets.#{Rails.env}.json").write(JSON.pretty_generate(Rails.application.secrets.to_h.without(:secret_key_base)))'
+> ```
+
+### 2. Move any ERB into the corresponding environment files
+
+YAML supports ERB while JSON secrets do not. If your secrets contain ERB, you will need to move that logic to the corresponding environment file:
+
+**Before**:
+
+`config/secrets.yml`
+```yaml
+development:
+  some_external_service:
+    api_token: <%= ENV.fetch(SOME_EXTERNAL_SERVICE_API_TOKEN, "12345") %>
+```
+
+**After**:
+
+`config/secrets.json` as generated by the *recommended* command above.
+```json
+{
+  "some_external_service": {
+    "api_token": "12345"
+  },
+  "something_else_entirely": "abc"
+}
+```
+
+`config/environments/development.rb`
+```ruby
+Rails.application.configure do
+  # elided
+
+  credentials.some_external_service.api_token = ENV.fetch("SOME_EXTERNAL_SERVICE_API_TOKEN", "12345")
+  credentials.something_else_entirely = ENV.fetch("SOMETHING_ELSE_ENTIRELY", "abc")
+end
+```
+
+#### Rails 7.0 Note
+> [!NOTE]
+> In Rails 7.0, credentials are accessed as a Hash with [] and []=.. This is important because the dynamic accessor methods will set values in a different object, and credentials will behave inconsistently after that:
+
+```ruby
+Rails.application.credentials.some_external_service.api_token = "foo"
+Rails.application.credentials[:some_external_service][:api_token] # => "12345"
+```
+
+Also note the code sets top-level values through `credentials.config`, because `credentials#[]=(key, value)` sets values in a different object.
+
+```ruby
+Rails.application.credentials[:something_else_entirely] = "foo"
+Rails.application.credentials[:something_else_entirely] # => "abc"
+```
+
+Make sure there's no code using the dynamic accessors before setting the configuration in the Hash, or the values won't be accessible from the dynamic accessor:
+
+```ruby
+Rails.application.credentials.something_else_entirely # just accessing is enough to cause the issue
+Rails.application.credentials[:some_external_service][:api_token] = "foo"
+Rails.application.credentials.some_external_service.api_token # => "12345"
+```
+
+### 3. Use `Rails.application.credentials`
+
+You are now ready to replace Rails secrets with Rails credentials:
+
+```sh-session
+git ls-files | xargs ruby -pi -e 'gsub("Rails.application.secrets", "Rails.application.credentials")' --
+```
+
+To avoid the deprecation warning from the use of secrets in `ejson-rails` once you're running Rails 7.1, require another file from your Gemfile:
+
+```ruby
+gem 'ejson-rails', require: 'ejson/rails/skip_secrets'
+```
+
+With this require, ejson-rails will no longer merge secrets from JSON into `Rails.application.secrets`. This will be the default in the next major version.
 
 ## Development
 

data/ejson-rails.gemspec

@@ -14,18 +14,20 @@ Gem::Specification.new do |spec|
   spec.description   = "Rails secret management by encrypting values in a JSON hash with a public/private keypair"
   spec.homepage      = "https://github.com/Shopify/ejson-rails"
   spec.license       = "MIT"
-  spec.files         = `git ls-files -z`.split("\x0").reject do |f|
+  spec.files         = %x(git ls-files -z).split("\x0").reject do |f|
     f.match(%r{^(test|spec|features)/})
   end
   spec.bindir        = "exe"
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]
 
-  spec.add_dependency "ejson"
-  spec.add_dependency "railties", ">= 4.1"
+  spec.metadata = { "allowed_push_host" => "https://rubygems.org" }
 
-  spec.add_development_dependency "bundler", "~> 1.16"
-  spec.add_development_dependency "rake", "~> 10.0"
-  spec.add_development_dependency "rspec", "~> 3.0"
-  spec.add_development_dependency "rubocop", "~> 0.56"
+  spec.required_ruby_version = ">= 2.7.0"
+
+  spec.add_dependency("ejson")
+  spec.add_dependency("railties", ">= 5.2")
+
+  spec.add_development_dependency("rake", "~> 13.0")
+  spec.add_development_dependency("rspec", "~> 3.0")
 end

data/gemfiles/Gemfile.rails-edge

@@ -0,0 +1,5 @@
+source 'https://rubygems.org'
+
+eval_gemfile('../Gemfile')
+
+gem 'railties', github: 'rails/rails', branch: 'main'

data/gemfiles/Gemfile.rails-latest

@@ -0,0 +1,5 @@
+source 'https://rubygems.org'
+
+eval_gemfile('../Gemfile')
+
+gem 'railties'

data/gemfiles/Gemfile.rails-min

@@ -0,0 +1,5 @@
+source 'https://rubygems.org'
+
+eval_gemfile('../Gemfile')
+
+gem 'railties', '5.2'

data/lib/ejson/rails/railtie.rb

@@ -6,11 +6,26 @@ module EJSON
     private_constant :Rails
 
     class Railtie < Rails::Railtie
+      singleton_class.attr_accessor(:set_secrets)
+      @set_secrets = true
+
       config.before_configuration do
-        json_files.each do |file|
-          next unless valid?(file)
-          secrets = JSON.parse(file.read, symbolize_names: true)
-          break Rails.application.secrets.deep_merge!(secrets)
+        json_file = json_files.detect { |file| valid?(file) }
+        next unless json_file
+
+        secrets = JSON.parse(json_file.read, symbolize_names: true)
+        Rails.application.secrets.deep_merge!(secrets) if set_secrets
+        # Merging into `credentials.config` because in Rails 7.0, reading a credential with
+        # Rails.application.credentials[:some_credential] won't work otherwise.
+        Rails.application.credentials.config.deep_merge!(secrets) do |key|
+          raise "A credential already exists with the same name: #{key}"
+        end
+
+        # Delete the loaded JSON files so they are no longer readable by the app.
+        if ENV["EJSON_RAILS_DELETE_SECRETS"] == "true"
+          json_files.each do |pathname|
+            File.delete(pathname) if File.writable?(pathname)
+          end
         end
       end
 

data/lib/ejson/rails/skip_secrets.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+require "ejson/rails"
+
+EJSON::Rails::Railtie.set_secrets = false

data/lib/ejson/rails/version.rb

@@ -2,6 +2,6 @@
 
 module EJSON
   module Rails
-    VERSION = "0.1.1"
+    VERSION = "0.2.1"
   end
 end

data/lib/ejson/rails.rb

@@ -1,4 +1,4 @@
 # frozen_string_literal: true
 
-require 'rails'
-require 'ejson/rails/railtie'
+require "rails"
+require "ejson/rails/railtie"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ejson-rails
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.2.1
 platform: ruby
 authors:
 - Gannon McGibbon
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2018-06-21 00:00:00.000000000 Z
+date: 2023-12-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ejson
@@ -30,42 +30,28 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '4.1'
+        version: '5.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '4.1'
-- !ruby/object:Gem::Dependency
-  name: bundler
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.16'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.16'
+        version: '5.2'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '13.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '13.0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -80,20 +66,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.0'
-- !ruby/object:Gem::Dependency
-  name: rubocop
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.56'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.56'
 description: Rails secret management by encrypting values in a JSON hash with a public/private
   keypair
 email:
@@ -102,11 +74,12 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".github/workflows/ci.yml"
+- ".github/workflows/cla.yml"
 - ".gitignore"
 - ".rspec"
 - ".rubocop.yml"
 - ".ruby-version"
-- ".travis.yml"
 - Gemfile
 - Gemfile.lock
 - LICENSE.txt
@@ -115,17 +88,19 @@ files:
 - bin/console
 - bin/setup
 - ejson-rails.gemspec
-- gemfiles/Gemfile.rails-5-0-stable
-- gemfiles/Gemfile.rails-5-1-stable
-- gemfiles/Gemfile.rails-5-2-stable
+- gemfiles/Gemfile.rails-edge
+- gemfiles/Gemfile.rails-latest
+- gemfiles/Gemfile.rails-min
 - lib/ejson/rails.rb
 - lib/ejson/rails/railtie.rb
+- lib/ejson/rails/skip_secrets.rb
 - lib/ejson/rails/version.rb
 - shipit.rubygems.yml
 homepage: https://github.com/Shopify/ejson-rails
 licenses:
 - MIT
-metadata: {}
+metadata:
+  allowed_push_host: https://rubygems.org
 post_install_message: 
 rdoc_options: []
 require_paths:
@@ -134,15 +109,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 2.7.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.6.14
+rubygems_version: 3.4.21
 signing_key: 
 specification_version: 4
 summary: Asymmetric keywise encryption for JSON on Rails

data/.travis.yml

@@ -1,57 +0,0 @@
-sudo: false
-cache: bundler
-language: ruby
-rvm:
-  - 2.0.0
-  - 2.1.10
-  - 2.2.7
-  - 2.3.4
-  - 2.4.1
-  - 2.5.0
-  - ruby-head
-  - jruby-9.1.14.0
-gemfile:
-  - gemfiles/Gemfile.rails-5-0-stable
-  - gemfiles/Gemfile.rails-5-1-stable
-  - gemfiles/Gemfile.rails-5-2-stable
-  - Gemfile
-matrix:
-  allow_failures:
-    - rvm: ruby-head
-  exclude:
-    - rvm: 2.0.0
-      gemfile: Gemfile
-    - rvm: 2.1.10
-      gemfile: Gemfile
-    - rvm: jruby-9.1.14.0
-      gemfile: Gemfile
-    - rvm: 1.9.3
-      gemfile: gemfiles/Gemfile.rails-5-0-stable
-    - rvm: 2.0.0
-      gemfile: gemfiles/Gemfile.rails-5-0-stable
-    - rvm: 2.1.10
-      gemfile: gemfiles/Gemfile.rails-5-0-stable
-    - rvm: jruby-9.1.14.0
-      gemfile: gemfiles/Gemfile.rails-5-0-stable
-    - rvm: jruby-9.1.14.0
-      gemfile: gemfiles/Gemfile.rails-5-1-stable
-    - rvm: 1.9.3
-      gemfile: gemfiles/Gemfile.rails-5-1-stable
-    - rvm: 2.0.0
-      gemfile: gemfiles/Gemfile.rails-5-1-stable
-    - rvm: 2.1.10
-      gemfile: gemfiles/Gemfile.rails-5-1-stable
-    - rvm: jruby-9.1.14.0
-      gemfile: gemfiles/Gemfile.rails-5-2-stable
-    - rvm: 1.9.3
-      gemfile: gemfiles/Gemfile.rails-5-2-stable
-    - rvm: 2.0.0
-      gemfile: gemfiles/Gemfile.rails-5-2-stable
-    - rvm: 2.1.10
-      gemfile: gemfiles/Gemfile.rails-5-2-stable
-
-before_install:
-  - gem update --system
-
-notifications:
-  email: false

data/gemfiles/Gemfile.rails-5-0-stable

@@ -1,10 +0,0 @@
-source 'https://rubygems.org'
-
-gemspec path: '..'
-
-platforms :rbx do
-  gem 'rubysl', '~> 2.0'
-  gem 'rubinius-developer_tools'
-end
-
-gem 'railties', github: 'rails/rails', branch: '5-0-stable'

data/gemfiles/Gemfile.rails-5-1-stable

@@ -1,10 +0,0 @@
-source 'https://rubygems.org'
-
-gemspec path: '..'
-
-platforms :rbx do
-  gem 'rubysl', '~> 2.0'
-  gem 'rubinius-developer_tools'
-end
-
-gem 'railties', github: 'rails/rails', branch: '5-1-stable'

data/gemfiles/Gemfile.rails-5-2-stable

@@ -1,10 +0,0 @@
-source 'https://rubygems.org'
-
-gemspec path: '..'
-
-platforms :rbx do
-  gem 'rubysl', '~> 2.0'
-  gem 'rubinius-developer_tools'
-end
-
-gem 'railties', github: 'rails/rails', branch: '5-2-stable'