faithteams-api 4.6.1 → 4.6.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7094affc4f1e85b777c3c0753bb70419dbfc5fc837026f3eadce7c4e5016fde7
-  data.tar.gz: 23d30acf16c0e1873848e13600ebb7ec5c7224ed30bfa60f5534d08fe429d1d5
+  metadata.gz: 1aec219baf9e280f2684ac5457185faa130dbab2dd6c1df7697eab9ba64531fe
+  data.tar.gz: 1d33fb74c60916e51b80508aaa1d1f13ee505809def08ec53680ffb487802553
 SHA512:
-  metadata.gz: e5821e8131f2a41b8049095e177dd1ef60585d9ee9713e4d3d254e68ca1d87794ee561aa6608d8ccd819faba90828b914eb269bde83676cc06dae1f780405bdb
-  data.tar.gz: d7d99a29756dbd95b214694029f1cd7b35c3a1f42d57a99fc40bcb5ae5fa64b56d25f68af8430c36d1a97eb9274d4dc95dd669fce69ef628baafd1cc28ee657d
+  metadata.gz: 19e2536a3ca5cdc975367d79fe171d1910b970ea5bbcea2551fa10e62c706bace12100c485bae76397ed32f35adf245b263b8ba907d2e88de2dbd5ee7c157ed0
+  data.tar.gz: a9bbddfba4867de680cdd08ff34a59c566af5673040dceaa198394be1cf8cdeec7bce8ec396d71d16d252e072b76e8608384a050654d388cf43dd6cbb795209a

data/CHANGELOG.md

@@ -7,6 +7,16 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.6.2]
+
+### Removed
+
+1. Remove `thunder-tests/`, a dead Thunder Client collection fully superseded by the Bruno collection already checked in - it held a live FaithTeams test-tenant `auth_token` in a committed, unencrypted environment file, which the gem's file filter didn't exclude, so it shipped inside every published gem version on RubyGems. (SEC25-778)
+
+### Fixed
+
+1. Switch the gemspec's packaging filter from a denylist (`reject test/spec/features`) to an allowlist (`lib/`, `exe/`, plus README/LICENSE/CHANGELOG). The denylist required remembering to add every new dev-tooling directory - that's exactly how `thunder-tests/` went unnoticed. The Bruno collection, `AGENTS.md`, `CLAUDE.md`, `Guardfile`, `.github/`, and other dev-only content were also shipping in the gem unintentionally; none of them are needed at runtime. (SEC25-778)
+
 ## [4.6.1]
 
 ### Changed

data/faithteams-api.gemspec

@@ -24,9 +24,15 @@ Gem::Specification.new do |spec|
   spec.metadata["documentation_uri"] = "https://github.com/tithely/faithteams-api/blob/master/README.md"
 
   # Specify which files should be added to the gem when it is released.
-  # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
+  # Allowlisted, not denylisted: only what the gem needs at runtime plus a
+  # few standard root docs. A denylist has to be remembered and updated
+  # every time a new dev-tooling directory shows up in the repo - that's
+  # how thunder-tests/ (and its live test-tenant credential) ended up
+  # shipping in the published gem unnoticed.
   spec.files         = Dir.chdir(File.expand_path("..", __FILE__)) do
-    `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
+    `git ls-files -z`.split("\x0").select do |f|
+      f.match(%r{^(lib|exe)/}) || %w[README.md LICENSE CHANGELOG.md faithteams-api.gemspec].include?(f)
+    end
   end
   spec.bindir        = "exe"
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }

data/lib/faithteams/version.rb

@@ -2,5 +2,5 @@
 
 module FaithTeams
   # Current version number.
-  VERSION = "4.6.1"
+  VERSION = "4.6.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: faithteams-api
 version: !ruby/object:Gem::Version
-  version: 4.6.1
+  version: 4.6.2
 platform: ruby
 authors:
 - Tithe.ly Integrations
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-03-30 00:00:00.000000000 Z
+date: 2026-08-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -199,79 +199,10 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".editorconfig"
-- ".github/CODEOWNERS"
-- ".github/CONTRIBUTING.md"
-- ".github/PULL_REQUEST_TEMPLATE.md"
-- ".github/workflows/editorconfig.yml"
-- ".github/workflows/rubocop.yml"
-- ".github/workflows/rubygems.yml"
-- ".github/workflows/tester.yml"
-- ".github/workflows/yard.yml"
-- ".gitignore"
-- ".rspec"
-- ".rubocop.yml"
-- ".tool-versions"
 - CHANGELOG.md
-- CODE_OF_CONDUCT.md
-- Gemfile
-- Gemfile.lock
-- Guardfile
 - LICENSE
 - README.md
-- Rakefile
-- bin/console
-- bin/setup
 - faithteams-api.gemspec
-- faithteams-api/.env.template
-- faithteams-api/Authenticate.bru
-- faithteams-api/api-v2.faithteams.com/Batch/Batch Create.bru
-- faithteams-api/api-v2.faithteams.com/Batch/Batch Totals.bru
-- faithteams-api/api-v2.faithteams.com/Batch/Batch Update.bru
-- faithteams-api/api-v2.faithteams.com/Batch/Batch.bru
-- faithteams-api/api-v2.faithteams.com/Batch/Batches.bru
-- faithteams-api/api-v2.faithteams.com/Batch/folder.bru
-- faithteams-api/api-v2.faithteams.com/Contribution Type/Contribution Type.bru
-- faithteams-api/api-v2.faithteams.com/Contribution Type/Contribution Types.bru
-- faithteams-api/api-v2.faithteams.com/Contribution Type/folder.bru
-- faithteams-api/api-v2.faithteams.com/Contribution/Contribution Create.bru
-- faithteams-api/api-v2.faithteams.com/Contribution/Contribution.bru
-- faithteams-api/api-v2.faithteams.com/Contribution/Contributions.bru
-- faithteams-api/api-v2.faithteams.com/Contribution/folder.bru
-- faithteams-api/api-v2.faithteams.com/Error/Integer Too Big.bru
-- faithteams-api/api-v2.faithteams.com/Error/Not Found.bru
-- faithteams-api/api-v2.faithteams.com/Error/folder.bru
-- faithteams-api/api-v2.faithteams.com/Fund/Fund Create.bru
-- faithteams-api/api-v2.faithteams.com/Fund/Fund Update.bru
-- faithteams-api/api-v2.faithteams.com/Fund/Fund.bru
-- faithteams-api/api-v2.faithteams.com/Fund/Funds.bru
-- faithteams-api/api-v2.faithteams.com/Fund/folder.bru
-- faithteams-api/api-v2.faithteams.com/folder.bru
-- faithteams-api/app.faithteams.com-api-v2/Authenticate.bru
-- faithteams-api/app.faithteams.com-api-v2/Checkins.bru
-- faithteams-api/app.faithteams.com-api-v2/Error/Not Found 2.bru
-- faithteams-api/app.faithteams.com-api-v2/Error/Not Found.bru
-- faithteams-api/app.faithteams.com-api-v2/Error/folder.bru
-- faithteams-api/app.faithteams.com-api-v2/People/Create Person.bru
-- faithteams-api/app.faithteams.com-api-v2/People/People Memberships.bru
-- faithteams-api/app.faithteams.com-api-v2/People/People.bru
-- faithteams-api/app.faithteams.com-api-v2/People/Person Tags.bru
-- faithteams-api/app.faithteams.com-api-v2/People/Person.bru
-- faithteams-api/app.faithteams.com-api-v2/People/Update Person.bru
-- faithteams-api/app.faithteams.com-api-v2/People/folder.bru
-- faithteams-api/app.faithteams.com-api-v2/Rules.bru
-- faithteams-api/app.faithteams.com-api-v2/Team & Organization/Organization.bru
-- faithteams-api/app.faithteams.com-api-v2/Team & Organization/Teams.bru
-- faithteams-api/app.faithteams.com-api-v2/Team & Organization/folder.bru
-- faithteams-api/app.faithteams.com-api-v2/Unsubscribes.bru
-- faithteams-api/app.faithteams.com-api-v2/User/User.bru
-- faithteams-api/app.faithteams.com-api-v2/User/Users.bru
-- faithteams-api/app.faithteams.com-api-v2/User/folder.bru
-- faithteams-api/app.faithteams.com-api-v2/folder.bru
-- faithteams-api/bruno.json
-- faithteams-api/environments/FaithTeams.bru
-- guides/api_client_interface.md
-- guides/release-process.md
 - lib/faithteams.rb
 - lib/faithteams/api.rb
 - lib/faithteams/api/v2.rb
@@ -297,11 +228,6 @@ files:
 - lib/faithteams/api/v2/resource/fund.rb
 - lib/faithteams/api/v2/resource/person.rb
 - lib/faithteams/version.rb
-- thunder-tests/.gitignore
-- thunder-tests/collections/tc_col_faithteams-api.json
-- thunder-tests/collections/tc_col_faithteams-app.json
-- thunder-tests/environments/tc_env_faithteams.json
-- thunder-tests/faithteams.env.template
 homepage: https://github.com/tithely/faithteams-api
 licenses:
 - MIT

data/.editorconfig

@@ -1,11 +0,0 @@
-[*]
-end_of_line = lf
-trim_trailing_whitespace = true
-insert_final_newline = true
-indent_style = space
-indent_size = 2
-charset = utf-8
-
-[*.{json,md}]
-indent_style = space
-indent_size = 4

data/.github/CODEOWNERS

@@ -1 +0,0 @@
-* @tithely/integrations

data/.github/CONTRIBUTING.md

@@ -1,35 +0,0 @@
-# Introduction
-
-First off, thank you for considering contributing to Tithely open source. We strive to be the best platform for developers to build tools for the church and want to thank you for your bug report or pull requests.
-
-Following these guidelines helps to communicate that you respect the time of the developers managing and developing this open source project. In return, they should reciprocate that respect in addressing your issue, assessing changes, and helping you finalize your pull requests.
-
-## What We Look For
-
-We welcome any bug reports and documentation corrections or additions. If you have a fix or a bit of functionality you would like to see introduced, please follow our guidelines for submitting a PR. We will work with you to determine if we can incorporate your work right now or plan for it in the future.
-
-# Ground Rules
-
-* We respect all members and welcome diverse viewpoints and contributions. For more information, check out our [Code of Conduct](https://github.com/tithely/tithely-transaction-gem/blob/master/CODE_OF_CONDUCT.md).
-* Keep pull requests as short and direct as possible.
-* Tests must accompany any pull request to show additional or changed behavior.
-
-# Reporting a Bug
-
-If you find a security vulnerability, do NOT open an issue. Email integrations@tithe.ly instead.
-
-For any other bug report, please open an issue [here](https://github.com/tithely/tithely-transaction-gem/issues/new?assignees=&labels=fix&template=bug_report.md&title=).
-
-Follow along with the template and please provide as much information as possible.
-
-# Suggesting a Feature
-
-Before submitting a feature request, check out our [Roadmap](https://github.com/tithely/tithely-transaction-gem/wiki/2020-Roadmap) and active [Projects](https://github.com/tithely/tithely-transaction-gem/projects) to make sure that we aren't currently working on it.
-
-For any other requests, please open an issue [here](https://github.com/tithely/tithely-transaction-gem/issues/new?assignees=&labels=new&template=feature_request.md&title=).
-
-Follow along with the template and please provide as much information as possible.
-
-# Submitting a Pull Request
-
-When submitting a pull request, please follow along with our template and ensure that everything is passing. As a rule, we generally will not take a look at code before all checks have passed.

data/.github/PULL_REQUEST_TEMPLATE.md

@@ -1,8 +0,0 @@
-# Summary
-
-
-
-## Checklist
-
-* [ ] Did we think two weeks into the future and not two years? Is this addition malleable to be changed tomorrow without being over-engineered today?
-* [ ] Have you updated the changelog with this behavior?

data/.github/workflows/editorconfig.yml

@@ -1,23 +0,0 @@
-name: EditorConfig
-
-on:
-  pull_request:
-    types: [ opened, reopened, synchronize ]
-  workflow_dispatch:
-
-jobs:
-  build:
-    name: Check
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout Code
-        uses: actions/checkout@v6
-      - name: Setup Node
-        uses: actions/setup-node@v4
-        with:
-          node-version: 24
-      - name: Install editorconfig-checker
-        run: npm install --global editorconfig-checker
-      - name: Run editorconfig-checker
-        run: |
-          editorconfig-checker -verbose -exclude "(thunder-tests|Gemfile.lock|.csv)"

data/.github/workflows/rubocop.yml

@@ -1,21 +0,0 @@
-name: Rubocop
-
-on:
-  pull_request:
-    types: [ opened, reopened, synchronize ]
-  workflow_dispatch:
-
-jobs:
-  check:
-    name: Check
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v6
-    - name: Set up Ruby
-      uses: ruby/setup-ruby@v1
-      with:
-        ruby-version: 3.3
-    - name: Install dependencies
-      run: bundle install
-    - name: Run Rubocop
-      run: bundle exec rubocop --parallel

data/.github/workflows/rubygems.yml

@@ -1,36 +0,0 @@
-# Builds and pushes a gem to RubyGems.
-name: RubyGems
-
-on:
-  pull_request:
-    # Only on the production branch
-    branches:
-      - production
-    # Only when closed
-    types:
-      - closed
-  workflow_dispatch:
-
-jobs:
-  push:
-    if: github.event.pull_request.merged == true
-    runs-on: ubuntu-latest
-
-    permissions:
-      contents: write
-      id-token: write
-
-    # If you configured a GitHub environment on RubyGems, you must use it here.
-    environment: release
-
-    steps:
-      # Set up
-      - uses: actions/checkout@v6
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
-        with:
-          bundler-cache: true
-          ruby-version: 3.3
-
-      # Release
-      - uses: rubygems/release-gem@v1

data/.github/workflows/tester.yml

@@ -1,21 +0,0 @@
-name: Tester
-
-on:
-  pull_request:
-    types: [ opened, reopened, synchronize ]
-  workflow_dispatch:
-
-jobs:
-  build:
-    name: Test
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v6
-    - name: Set up Ruby
-      uses: ruby/setup-ruby@v1
-      with:
-        ruby-version: 3.3
-    - name: Install dependencies
-      run: bundle install
-    - name: Run tests
-      run: bundle exec rake

data/.github/workflows/yard.yml

@@ -1,21 +0,0 @@
-name: Yard
-
-on:
-  pull_request:
-    types: [ opened, reopened, synchronize ]
-  workflow_dispatch:
-
-jobs:
-  check:
-    name: Check
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v6
-    - name: Set up Ruby
-      uses: ruby/setup-ruby@v1
-      with:
-        ruby-version: 3.3
-    - name: Install dependencies
-      run: bundle install
-    - name: Run Yard
-      run: bundle exec yard stats --list-undoc --fail-on-warning

data/.gitignore

@@ -1,17 +0,0 @@
-/.bundle/
-/.byebug_history
-/.yardoc
-/_yardoc/
-/doc/
-/coverage/
-/pkg/
-/spec/reports/
-/tmp/
-/faithteams-api/*.env
-
-# rspec failure tracking
-.rspec_status
-
-.idea/*
-
-.DS_Store

data/.rspec

@@ -1,2 +0,0 @@
---color
---require spec_helper

data/.rubocop.yml

@@ -1,228 +0,0 @@
-plugins:
-  - rubocop-performance
-  - rubocop-rake
-  - rubocop-rspec
-
-AllCops:
-  # RuboCop has a bunch of cops enabled by default. This setting tells RuboCop
-  # to ignore them, so only the ones explicitly set in this file are enabled.
-  DisabledByDefault: true
-
-Performance:
-  Exclude:
-    - "**/test/**/*"
-
-# Prefer &&/|| over and/or.
-Style/AndOr:
-  Enabled: true
-  EnforcedStyle: conditionals
-
-# Align `when` with `case`.
-Layout/CaseIndentation:
-  Enabled: true
-  EnforcedStyle: end
-
-Layout/ClosingHeredocIndentation:
-  Enabled: true
-
-# Align comments with method definitions.
-Layout/CommentIndentation:
-  Enabled: true
-
-Layout/ElseAlignment:
-  Enabled: true
-
-# Align `end` with the matching keyword or starting expression except for
-# assignments, where it should be aligned with the LHS.
-Layout/EndAlignment:
-  Enabled: true
-  EnforcedStyleAlignWith: variable
-  AutoCorrect: true
-
-Layout/EmptyLineAfterMagicComment:
-  Enabled: true
-
-Layout/EmptyLinesAroundAccessModifier:
-  Enabled: false
-  EnforcedStyle: only_before
-
-Layout/EmptyLinesAroundBlockBody:
-  Enabled: true
-
-# In a regular class definition, no empty lines around the body.
-Layout/EmptyLinesAroundClassBody:
-  Enabled: true
-
-# In a regular method definition, no empty lines around the body.
-Layout/EmptyLinesAroundMethodBody:
-  Enabled: true
-
-# In a regular module definition, no empty lines around the body.
-Layout/EmptyLinesAroundModuleBody:
-  Enabled: true
-
-# Use Ruby >= 1.9 syntax for hashes. Prefer { a: :b } over { :a => :b }.
-Style/HashSyntax:
-  Enabled: true
-  EnforcedStyle: ruby19
-  EnforcedShorthandSyntax: never # Ruby 3.1 allows omission of value name, but we want to support prior Ruby versions
-
-Layout/FirstArgumentIndentation:
-  Enabled: true
-
-# Method definitions after `private` or `protected` isolated calls need one
-# extra level of indentation.
-Layout/IndentationConsistency:
-  Enabled: false
-
-# Two spaces, no tabs (for indentation).
-Layout/IndentationWidth:
-  Enabled: true
-
-Layout/LeadingCommentSpace:
-  Enabled: true
-
-Layout/SpaceAfterColon:
-  Enabled: true
-
-Layout/SpaceAfterComma:
-  Enabled: true
-
-Layout/SpaceAfterSemicolon:
-  Enabled: true
-
-Layout/SpaceAroundEqualsInParameterDefault:
-  Enabled: true
-
-Layout/SpaceAroundKeyword:
-  Enabled: true
-
-Layout/SpaceBeforeComma:
-  Enabled: true
-
-Layout/SpaceBeforeComment:
-  Enabled: true
-
-Layout/SpaceBeforeFirstArg:
-  Enabled: true
-
-Style/DefWithParentheses:
-  Enabled: true
-
-# Defining a method with parameters needs parentheses.
-Style/MethodDefParentheses:
-  Enabled: true
-
-Style/FrozenStringLiteralComment:
-  Enabled: true
-  EnforcedStyle: always
-
-Style/RedundantFreeze:
-  Enabled: true
-
-# Use `foo {}` not `foo{}`.
-Layout/SpaceBeforeBlockBraces:
-  Enabled: true
-
-# Use `foo { bar }` not `foo {bar}`.
-Layout/SpaceInsideBlockBraces:
-  Enabled: true
-  EnforcedStyleForEmptyBraces: space
-
-# Use `{ a: 1 }` not `{a:1}`.
-Layout/SpaceInsideHashLiteralBraces:
-  Enabled: true
-
-Layout/SpaceInsideParens:
-  Enabled: true
-
-# Check quotes usage according to lint rule below.
-Style/StringLiterals:
-  Enabled: true
-  EnforcedStyle: double_quotes
-
-# Detect hard tabs, no hard tabs.
-Layout/IndentationStyle:
-  Enabled: true
-
-# Empty lines should not have any spaces.
-Layout/TrailingEmptyLines:
-  Enabled: true
-
-# No trailing whitespace.
-Layout/TrailingWhitespace:
-  Enabled: true
-
-# Use quotes for string literals when they are enough.
-Style/RedundantPercentQ:
-  Enabled: true
-
-Lint/AmbiguousOperator:
-  Enabled: true
-
-Lint/AmbiguousRegexpLiteral:
-  Enabled: true
-
-Lint/ErbNewArguments:
-  Enabled: true
-
-# Use my_method(my_arg) not my_method( my_arg ) or my_method my_arg.
-Lint/RequireParentheses:
-  Enabled: true
-
-Lint/ShadowingOuterLocalVariable:
-  Enabled: true
-
-Lint/RedundantStringCoercion:
-  Enabled: true
-
-Lint/UriEscapeUnescape:
-  Enabled: true
-
-Lint/UselessAssignment:
-  Enabled: true
-
-Lint/DeprecatedClassMethods:
-  Enabled: true
-
-Style/ParenthesesAroundCondition:
-  Enabled: true
-
-Style/RedundantBegin:
-  Enabled: true
-
-Style/RedundantReturn:
-  Enabled: true
-  AllowMultipleReturnValues: true
-
-Style/Semicolon:
-  Enabled: true
-  AllowAsExpressionSeparator: true
-
-# Prefer Foo.method over Foo::method
-Style/ColonMethodCall:
-  Enabled: true
-
-Style/TrivialAccessors:
-  Enabled: true
-
-Performance/FlatMap:
-  Enabled: true
-
-Performance/RedundantMerge:
-  Enabled: true
-
-Performance/StartWith:
-  Enabled: true
-
-Performance/EndWith:
-  Enabled: true
-
-Performance/RegexpMatch:
-  Enabled: true
-
-Performance/ReverseEach:
-  Enabled: true
-
-Performance/UnfreezeString:
-  Enabled: true

data/.tool-versions

@@ -1 +0,0 @@
-ruby 3.3.0