entitlements-app 1.1.0 → 1.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b65ef59f26ece50f2a7924ff8fb852ee89878bc88d6a7546d66928416da99029
-  data.tar.gz: 3a9a391bc53f96ed3b09f0e206a9a4d6d0eeb5e0cff7013c3372c9f47e96a5fb
+  metadata.gz: f374fa7a4154693db9513b354103b917e1a12d58ab9644e75f52bbfb63156e61
+  data.tar.gz: a942f1ece43a9e3fc3552d9144ce3ce7c095276ecb0706d3e8de975fcfd5288b
 SHA512:
-  metadata.gz: ea71dab3560473cf24819f74dc146eb8b357c96a6751f45f1bdef5c565cfb383afd0603a9deca5ede3cf6212fc82e2ade13b3ca70bf67486bcf067d111ac173f
-  data.tar.gz: 2e8ee03e6577a7a798b13af0f66571792a32a6087194f0952691b6511ebea19cc268976083ce231fad67a01494ec0a2eb4fbb097241bec62001fc98aa5fbf8f5
+  metadata.gz: 50a19c9c040154f27ea8bdd86dfccf015a2eac1fc6c2f38796c60f6192a0e094e5afd78bcf65e3d5bebaa4e7966662c52e7eb1d135c599d723e23a27d1c08157
+  data.tar.gz: f4a2256185eaf9b0a1950450e62cee75679aa62e6d208ea50795bc4972bc30348c4877b6befd8f848f55d85702d865f3f3b1c285ea8ecd2e1c39c82384bcbee1

data/lib/entitlements/data/groups/cached.rb

@@ -51,6 +51,8 @@ module Entitlements
             Entitlements.cache[:predictive_state][:by_ou][ou] ||= {}
             Entitlements.cache[:predictive_state][:by_ou][ou][identifier] = member_set
             Entitlements.cache[:predictive_state][:by_dn][dn] = { members: member_set, metadata: metadata }
+          rescue => e
+            raise "Failed to load predictive state cache file #{filename}: #{e.message}"
           end
 
           Entitlements.logger.debug "Loaded #{Entitlements.cache[:predictive_state][:by_ou].keys.size} OU(s) from cache"

data/lib/entitlements/data/groups/calculated/yaml.rb

@@ -34,6 +34,28 @@ module Entitlements
             parsed_data.fetch("description", "")
           end
 
+          # Standard interface: Get the schema version of this group.
+          #
+          # Takes no arguments.
+          # Examples: "entitlements/v1", "entitlements/v1.2.3", "entitlements/1.2.3"
+          # Format: namespace/major.minor.patch
+          #
+          # Returns a String with the schema version (k8s-style), or "entitlements/v1" if undefined.
+          Contract C::None => String
+          def schema_version
+            schema_version = parsed_data.fetch("schema_version", "entitlements/v1").to_s
+
+            namespace, version = schema_version.split("/")
+
+            unless namespace.match?(/\A[a-zA-Z0-9]+\z/) && version.match?(/\A(v?\d+(\.\d+){0,2})\z/)
+              raise "Invalid schema version format: #{schema_version} - Expected format is '<namespace>/<version>' " \
+                    "- Examples: entitlements/v1, entitlements/v1.2.3, entitlements/1.2.3"
+            end
+
+            # rebuild the schema version string to ensure it's in the correct format and return it
+            return "#{namespace}/#{version}"
+          end
+
           # Files can support modifiers that act independently of rules.
           # This returns the modifiers from the file as a hash.
           #

data/lib/version.rb

@@ -2,6 +2,6 @@
 
 module Entitlements
   module Version
-    VERSION = "1.1.0"
+    VERSION = "1.2.1"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: entitlements-app
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 1.2.1
 platform: ruby
 authors:
 - GitHub, Inc. Security Ops
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-09-27 00:00:00.000000000 Z
+date: 2025-11-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: concurrent-ruby
@@ -526,7 +526,7 @@ homepage: https://github.com/github/entitlements-app
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -542,7 +542,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubygems_version: 3.5.9
-signing_key: 
+signing_key:
 specification_version: 4
 summary: git-managed LDAP group configurations
 test_files: []