entitlements-app 1.2.8 → 1.2.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: fdad062839c6178d6b23880ddc7c7392b5023d7f783e7b3686c3c3456392ff62
4
- data.tar.gz: 924425bb54c9ffed6a6da2ff0a363e933b2351b45c2a4fa9c522ba5eb41fce39
3
+ metadata.gz: 3b4d3b6eee9dda4b360514b4fa1c48eb8fbd339061df219caf642f4854f34ef1
4
+ data.tar.gz: 661b4481979a23a15ce2e3ce49a018fef925c319ecd845b446196d3e9fc5cff6
5
5
  SHA512:
6
- metadata.gz: 74c0f06e2255e56c9a59f3a8bb6227a674b5a296ca310703c681434c78c210f658509689e41306910dfd41ae4a3247b5aeb7998654f05d17737d154fa98b453b
7
- data.tar.gz: 10b6e365e40220d1c6687ded47c603b1a2b968ccdea7dc35fa61842743668d46466359f4dc954217bed2efcf13751f419cfb6133285e5eb3370a60cbc1a26f62
6
+ metadata.gz: 85036ed3417a905cd5dd0f722c3f0df08856f5be504fe1105dc85ced1954f79dd83ccaee57af175ae40436cad7f7d668ea5948fb814e6b2d4868efc728109ad7
7
+ data.tar.gz: bf87abe96278eabe62aace13a812e2b2378620d7093181823c1947cce0e8d81359502d0cef8e7fac8c03d06cb41001f5be7532d8297ef178ba41b396aa0bdacd
@@ -1,5 +1,6 @@
1
1
  # frozen_string_literal: true
2
2
 
3
+ require "monitor"
3
4
  require_relative "calculated/base"
4
5
  require_relative "calculated/ruby"
5
6
  require_relative "calculated/text"
@@ -26,6 +27,11 @@ module Entitlements
26
27
  @groups_cache = {}
27
28
  @config_cache = {}
28
29
 
30
+ # Group calculation shares state across groups (Entitlements.cache[:calculated], the
31
+ # dependency stack used for circular-reference detection, and the caches above), so only
32
+ # one thread may calculate at a time. Re-entrant because calculation can recurse.
33
+ CALCULATION_LOCK = Monitor.new
34
+
29
35
  # Reset all module state
30
36
  #
31
37
  # Takes no arguments
@@ -63,6 +69,13 @@ module Entitlements
63
69
  skip_broken_references: C::Optional[C::Bool]
64
70
  ] => C::SetOf[String]
65
71
  def self.read_all(ou_key, cfg_obj, skip_broken_references: false)
72
+ CALCULATION_LOCK.synchronize { _read_all(ou_key, cfg_obj, skip_broken_references: skip_broken_references) }
73
+ end
74
+
75
+ Contract String, C::HashOf[String => C::Any], C::KeywordArgs[
76
+ skip_broken_references: C::Bool
77
+ ] => C::SetOf[String]
78
+ def self._read_all(ou_key, cfg_obj, skip_broken_references:)
66
79
  return read_mirror(ou_key, cfg_obj) if cfg_obj["mirror"]
67
80
 
68
81
  @config_cache[ou_key] ||= cfg_obj
data/lib/version.rb CHANGED
@@ -2,6 +2,6 @@
2
2
 
3
3
  module Entitlements
4
4
  module Version
5
- VERSION = "1.2.8"
5
+ VERSION = "1.2.9"
6
6
  end
7
7
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: entitlements-app
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.2.8
4
+ version: 1.2.9
5
5
  platform: ruby
6
6
  authors:
7
7
  - GitHub, Inc. Security Ops
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2026-11-04 00:00:00.000000000 Z
11
+ date: 2026-11-06 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: concurrent-ruby