faithteams-api 4.4.0 → 4.6.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5eebefdf4e9bede5d027923cd5a90d20ee1e127d75108e1ac1fa9959137a17c4
-  data.tar.gz: f9856698e3a8f6121de80db4d0b5d1ec3d650a42fd75e36a22e811ee36173b95
+  metadata.gz: 1aec219baf9e280f2684ac5457185faa130dbab2dd6c1df7697eab9ba64531fe
+  data.tar.gz: 1d33fb74c60916e51b80508aaa1d1f13ee505809def08ec53680ffb487802553
 SHA512:
-  metadata.gz: ab0dc289ad48586c3c82db322fdddfde8c35f62e5dc62746a274f792f10552dcd09bb4ee3df932f751c5c05559f96d0f6245cb160ad34c208eae6127cc0dcc89
-  data.tar.gz: e36503ba66dae11eb177f88d102c7a3ff394ca81bcf10b699e486f001bde8267e867892fe2e86b2ae6e14af665e281e67d354c7fbd6974406e8310ad1bda46af
+  metadata.gz: 19e2536a3ca5cdc975367d79fe171d1910b970ea5bbcea2551fa10e62c706bace12100c485bae76397ed32f35adf245b263b8ba907d2e88de2dbd5ee7c157ed0
+  data.tar.gz: a9bbddfba4867de680cdd08ff34a59c566af5673040dceaa198394be1cf8cdeec7bce8ec396d71d16d252e072b76e8608384a050654d388cf43dd6cbb795209a

data/CHANGELOG.md

@@ -7,6 +7,39 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.6.2]
+
+### Removed
+
+1. Remove `thunder-tests/`, a dead Thunder Client collection fully superseded by the Bruno collection already checked in - it held a live FaithTeams test-tenant `auth_token` in a committed, unencrypted environment file, which the gem's file filter didn't exclude, so it shipped inside every published gem version on RubyGems. (SEC25-778)
+
+### Fixed
+
+1. Switch the gemspec's packaging filter from a denylist (`reject test/spec/features`) to an allowlist (`lib/`, `exe/`, plus README/LICENSE/CHANGELOG). The denylist required remembering to add every new dev-tooling directory - that's exactly how `thunder-tests/` went unnoticed. The Bruno collection, `AGENTS.md`, `CLAUDE.md`, `Guardfile`, `.github/`, and other dev-only content were also shipping in the gem unintentionally; none of them are needed at runtime. (SEC25-778)
+
+## [4.6.1]
+
+### Changed
+
+1. Use GH actions for Node 24. (ISG-92)
+
+### Fixed
+
+1. Lock rubygems.yml ruby version to 3.3. (ISG-92)
+
+## [4.6.0]
+
+### Changed
+
+1. Relax patch-level dependency pins to minor-level to allow security patch updates. (ISG-92)
+1. Remove transitive dependencies (logger, ostruct, rexml, thor) from gemspec; add rexml and thor as Gemfile security floor constraints. (ISG-92)
+
+## [4.5.0]
+
+### Added
+
+1. Add Bruno API Client (to eventually replace ThunderClient). (IN-2728)
+
 ## [4.4.0]
 
 ### Changed

data/README.md

@@ -29,6 +29,25 @@ Or install it yourself as:
 
 `gem install faithteams`
 
+## VS Code Bruno Extension
+
+We are now using the [Bruno API Client](https://docs.usebruno.com/introduction/what-is-bruno) for developing and testing 2nd party API requests. You can use a desktop app or VS Code extension to use Bruno.
+
+### Desktop App
+
+1. Simply follow these instructions for your desktop app [installation options](https://docs.usebruno.com/get-started/bruno-basics/download).
+
+### VS Code Extension
+
+1. If you don't already have it, install the VS Code Bruno Extension.
+1. After opening the extension, click the + button to open a "collection".
+    1. Find the root level '[second_party]-api' directory. (ie 'faithteams-api')
+1. Make a copy of the .env.template file (and make sure to just call it .env) and fill in the necessary values from 1Password.
+1. In the left pane, open the ... menu beside faithteams-api and select *settings*.
+1. Select your desired environment to use with this collection in the upper right (most likely *FaithTeams*).
+1. You should now be ready to make some API calls!
+1. See Bruno's [VS Code Extension Documentation](https://docs.usebruno.com/vs-code-extension/overview) for more details.
+
 ## Contributing
 
 ### How to Contribute

data/faithteams-api.gemspec

@@ -24,30 +24,32 @@ Gem::Specification.new do |spec|
   spec.metadata["documentation_uri"] = "https://github.com/tithely/faithteams-api/blob/master/README.md"
 
   # Specify which files should be added to the gem when it is released.
-  # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
+  # Allowlisted, not denylisted: only what the gem needs at runtime plus a
+  # few standard root docs. A denylist has to be remembered and updated
+  # every time a new dev-tooling directory shows up in the repo - that's
+  # how thunder-tests/ (and its live test-tenant credential) ended up
+  # shipping in the published gem unnoticed.
   spec.files         = Dir.chdir(File.expand_path("..", __FILE__)) do
-    `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
+    `git ls-files -z`.split("\x0").select do |f|
+      f.match(%r{^(lib|exe)/}) || %w[README.md LICENSE CHANGELOG.md faithteams-api.gemspec].include?(f)
+    end
   end
   spec.bindir        = "exe"
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]
 
-  spec.add_dependency "activesupport", "~> 7.2.2"
+  spec.add_dependency "activesupport", "~> 7.2"
   spec.add_dependency "http", "~> 5.1"
-  spec.add_dependency "logger", "~> 1.6.1"
-  spec.add_dependency "ostruct", "~> 0.6.0"
-  spec.add_dependency "rexml", "~> 3.3.9" # only needs to be specified to address security warning
-  spec.add_dependency "thor", "~> 1.4.0"
 
   spec.add_development_dependency "byebug", "~> 11.1"
   spec.add_development_dependency "guard-rspec", "~> 4.7"
   spec.add_development_dependency "simplecov", "~> 0.21"
   spec.add_development_dependency "rake", "~> 13.0"
   spec.add_development_dependency "rspec", "~> 3.12"
-  spec.add_development_dependency "rubocop", "~> 1.73.2"
-  spec.add_development_dependency "rubocop-performance", "~> 1.24.0"
-  spec.add_development_dependency "rubocop-rake", "~> 0.7.1"
-  spec.add_development_dependency "rubocop-rspec", "~> 3.5.0"
+  spec.add_development_dependency "rubocop", "~> 1.73"
+  spec.add_development_dependency "rubocop-performance", "~> 1.24"
+  spec.add_development_dependency "rubocop-rake", "~> 0.7"
+  spec.add_development_dependency "rubocop-rspec", "~> 3.5"
   spec.add_development_dependency "webmock", "~> 3.18"
-  spec.add_development_dependency "yard", "~> 0.9.36"
+  spec.add_development_dependency "yard", "~> 0.9"
 end

data/lib/faithteams/version.rb

@@ -2,5 +2,5 @@
 
 module FaithTeams
   # Current version number.
-  VERSION = "4.4.0"
+  VERSION = "4.6.2"
 end

metadata

@@ -1,13 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: faithteams-api
 version: !ruby/object:Gem::Version
-  version: 4.4.0
+  version: 4.6.2
 platform: ruby
 authors:
 - Tithe.ly Integrations
+autorequire:
 bindir: exe
 cert_chain: []
-date: 1980-01-02 00:00:00.000000000 Z
+date: 2026-08-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -15,14 +16,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 7.2.2
+        version: '7.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 7.2.2
+        version: '7.2'
 - !ruby/object:Gem::Dependency
   name: http
   requirement: !ruby/object:Gem::Requirement
@@ -37,62 +38,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '5.1'
-- !ruby/object:Gem::Dependency
-  name: logger
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 1.6.1
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 1.6.1
-- !ruby/object:Gem::Dependency
-  name: ostruct
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 0.6.0
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 0.6.0
-- !ruby/object:Gem::Dependency
-  name: rexml
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 3.3.9
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 3.3.9
-- !ruby/object:Gem::Dependency
-  name: thor
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 1.4.0
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 1.4.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -169,56 +114,56 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.73.2
+        version: '1.73'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.73.2
+        version: '1.73'
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.24.0
+        version: '1.24'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.24.0
+        version: '1.24'
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.7.1
+        version: '0.7'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.7.1
+        version: '0.7'
 - !ruby/object:Gem::Dependency
   name: rubocop-rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.5.0
+        version: '3.5'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.5.0
+        version: '3.5'
 - !ruby/object:Gem::Dependency
   name: webmock
   requirement: !ruby/object:Gem::Requirement
@@ -239,14 +184,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.9.36
+        version: '0.9'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.9.36
+        version: '0.9'
 description: Provides methods and utilities for interacting with the faithteams API.
 email:
 - integrations@tithe.ly
@@ -254,32 +199,10 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".editorconfig"
-- ".github/CODEOWNERS"
-- ".github/CONTRIBUTING.md"
-- ".github/PULL_REQUEST_TEMPLATE.md"
-- ".github/workflows/editorconfig.yml"
-- ".github/workflows/rubocop.yml"
-- ".github/workflows/rubygems.yml"
-- ".github/workflows/tester.yml"
-- ".github/workflows/yard.yml"
-- ".gitignore"
-- ".rspec"
-- ".rubocop.yml"
-- ".tool-versions"
 - CHANGELOG.md
-- CODE_OF_CONDUCT.md
-- Gemfile
-- Gemfile.lock
-- Guardfile
 - LICENSE
 - README.md
-- Rakefile
-- bin/console
-- bin/setup
 - faithteams-api.gemspec
-- guides/api_client_interface.md
-- guides/release-process.md
 - lib/faithteams.rb
 - lib/faithteams/api.rb
 - lib/faithteams/api/v2.rb
@@ -305,11 +228,6 @@ files:
 - lib/faithteams/api/v2/resource/fund.rb
 - lib/faithteams/api/v2/resource/person.rb
 - lib/faithteams/version.rb
-- thunder-tests/.gitignore
-- thunder-tests/collections/tc_col_faithteams-api.json
-- thunder-tests/collections/tc_col_faithteams-app.json
-- thunder-tests/environments/tc_env_faithteams.json
-- thunder-tests/faithteams.env.template
 homepage: https://github.com/tithely/faithteams-api
 licenses:
 - MIT
@@ -321,6 +239,7 @@ metadata:
   changelog_uri: https://github.com/tithely/faithteams-api/blob/master/CHANGELOG.md
   bug_tracker_uri: https://github.com/tithely/faithteams-api/issues
   documentation_uri: https://github.com/tithely/faithteams-api/blob/master/README.md
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -335,7 +254,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.9
+rubygems_version: 3.5.22
+signing_key:
 specification_version: 4
 summary: A Faithteams API client gem.
 test_files: []

data/.editorconfig

@@ -1,11 +0,0 @@
-[*]
-end_of_line = lf
-trim_trailing_whitespace = true
-insert_final_newline = true
-indent_style = space
-indent_size = 2
-charset = utf-8
-
-[*.{json,md}]
-indent_style = space
-indent_size = 4

data/.github/CODEOWNERS

@@ -1 +0,0 @@
-* @tithely/integrations

data/.github/CONTRIBUTING.md

@@ -1,35 +0,0 @@
-# Introduction
-
-First off, thank you for considering contributing to Tithely open source. We strive to be the best platform for developers to build tools for the church and want to thank you for your bug report or pull requests.
-
-Following these guidelines helps to communicate that you respect the time of the developers managing and developing this open source project. In return, they should reciprocate that respect in addressing your issue, assessing changes, and helping you finalize your pull requests.
-
-## What We Look For
-
-We welcome any bug reports and documentation corrections or additions. If you have a fix or a bit of functionality you would like to see introduced, please follow our guidelines for submitting a PR. We will work with you to determine if we can incorporate your work right now or plan for it in the future.
-
-# Ground Rules
-
-* We respect all members and welcome diverse viewpoints and contributions. For more information, check out our [Code of Conduct](https://github.com/tithely/tithely-transaction-gem/blob/master/CODE_OF_CONDUCT.md).
-* Keep pull requests as short and direct as possible.
-* Tests must accompany any pull request to show additional or changed behavior.
-
-# Reporting a Bug
-
-If you find a security vulnerability, do NOT open an issue. Email integrations@tithe.ly instead.
-
-For any other bug report, please open an issue [here](https://github.com/tithely/tithely-transaction-gem/issues/new?assignees=&labels=fix&template=bug_report.md&title=).
-
-Follow along with the template and please provide as much information as possible.
-
-# Suggesting a Feature
-
-Before submitting a feature request, check out our [Roadmap](https://github.com/tithely/tithely-transaction-gem/wiki/2020-Roadmap) and active [Projects](https://github.com/tithely/tithely-transaction-gem/projects) to make sure that we aren't currently working on it.
-
-For any other requests, please open an issue [here](https://github.com/tithely/tithely-transaction-gem/issues/new?assignees=&labels=new&template=feature_request.md&title=).
-
-Follow along with the template and please provide as much information as possible.
-
-# Submitting a Pull Request
-
-When submitting a pull request, please follow along with our template and ensure that everything is passing. As a rule, we generally will not take a look at code before all checks have passed.

data/.github/PULL_REQUEST_TEMPLATE.md

@@ -1,8 +0,0 @@
-# Summary
-
-
-
-## Checklist
-
-* [ ] Did we think two weeks into the future and not two years? Is this addition malleable to be changed tomorrow without being over-engineered today?
-* [ ] Have you updated the changelog with this behavior?

data/.github/workflows/editorconfig.yml

@@ -1,23 +0,0 @@
-name: EditorConfig
-
-on:
-  pull_request:
-    types: [ opened, reopened, synchronize ]
-  workflow_dispatch:
-
-jobs:
-  build:
-    name: Check
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout Code
-        uses: actions/checkout@v4
-      - name: Setup Node
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-      - name: Install editorconfig-checker
-        run: npm install --global editorconfig-checker
-      - name: Run editorconfig-checker
-        run: |
-          editorconfig-checker -verbose -exclude "(thunder-tests|Gemfile.lock|.csv)"

data/.github/workflows/rubocop.yml

@@ -1,21 +0,0 @@
-name: Rubocop
-
-on:
-  pull_request:
-    types: [ opened, reopened, synchronize ]
-  workflow_dispatch:
-
-jobs:
-  check:
-    name: Check
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v4
-    - name: Set up Ruby
-      uses: ruby/setup-ruby@v1
-      with:
-        ruby-version: 3.3
-    - name: Install dependencies
-      run: bundle install
-    - name: Run Rubocop
-      run: bundle exec rubocop --parallel

data/.github/workflows/rubygems.yml

@@ -1,36 +0,0 @@
-# Builds and pushes a gem to RubyGems.
-name: RubyGems
-
-on:
-  pull_request:
-    # Only on the production branch
-    branches:
-      - production
-    # Only when closed
-    types:
-      - closed
-  workflow_dispatch:
-
-jobs:
-  push:
-    if: github.event.pull_request.merged == true
-    runs-on: ubuntu-latest
-
-    permissions:
-      contents: write
-      id-token: write
-
-    # If you configured a GitHub environment on RubyGems, you must use it here.
-    environment: release
-
-    steps:
-      # Set up
-      - uses: actions/checkout@v4
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
-        with:
-          bundler-cache: true
-          ruby-version: ruby
-
-      # Release
-      - uses: rubygems/release-gem@v1

data/.github/workflows/tester.yml

@@ -1,21 +0,0 @@
-name: Tester
-
-on:
-  pull_request:
-    types: [ opened, reopened, synchronize ]
-  workflow_dispatch:
-
-jobs:
-  build:
-    name: Test
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v4
-    - name: Set up Ruby
-      uses: ruby/setup-ruby@v1
-      with:
-        ruby-version: 3.3
-    - name: Install dependencies
-      run: bundle install
-    - name: Run tests
-      run: bundle exec rake

data/.github/workflows/yard.yml

@@ -1,21 +0,0 @@
-name: Yard
-
-on:
-  pull_request:
-    types: [ opened, reopened, synchronize ]
-  workflow_dispatch:
-
-jobs:
-  check:
-    name: Check
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v4
-    - name: Set up Ruby
-      uses: ruby/setup-ruby@v1
-      with:
-        ruby-version: 3.3
-    - name: Install dependencies
-      run: bundle install
-    - name: Run Yard
-      run: bundle exec yard stats --list-undoc --fail-on-warning

data/.gitignore

@@ -1,16 +0,0 @@
-/.bundle/
-/.byebug_history
-/.yardoc
-/_yardoc/
-/doc/
-/coverage/
-/pkg/
-/spec/reports/
-/tmp/
-
-# rspec failure tracking
-.rspec_status
-
-.idea/*
-
-.DS_Store

data/.rspec

@@ -1,2 +0,0 @@
---color
---require spec_helper