forge_ops_tracker 0.19.0 → 0.20.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3d585c1acbde6c8bb06ec05505e21bf4d784974ed8e655c9398fef0c7e595d03
-  data.tar.gz: af67478c90a33dd594bbccf712e48dc817d5e99ae6b61edf0a0fca62e816e4ec
+  metadata.gz: d0c84fc309e7191793314f8b54488442383610eefe41df5f793cbfeb660bd9d5
+  data.tar.gz: e0cb23777cadde88f2c47180d86beede097d904f592e344b20703c4cc1a19541
 SHA512:
-  metadata.gz: ae806f1ba9cb14102494df6f6efca7685ce4900c281fda85c72fe9ad595f5ce3b03b7daf74762ef69de002e0c229d3155027eee4bd3c8d876646b824f4ee1ab4
-  data.tar.gz: b774e7abc22663d23f728c71ee7d358180994ccc31b23eb334d393c39da7d403561456b4b484bbe34f3f1678c7f619a40ac94c977a4086ccac66f852790cdb85
+  metadata.gz: d0be76c8e1855c31d3949e7c8ef337bf90a34067c78be75c30498a8b0624083c2df69a61ecae76f793cfe15e30552ca66410dc2a527a6d18768760247621573b
+  data.tar.gz: 7345a1130c32bc7cc8a261d2c1d0f3940edf3b92f99a8472521211805d6a282a65e445d6b03e12819516b89537c292c8fe9f0800a9117afb944073b3f465044d

data/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 0.20.0 (2026-10-22)
+
+- Strict privacy: the message fingerprint now also replaces email addresses with `<email>` and quoted
+  values (`"..."`, and `'...'` when the quotes aren't part of a word) with `<str>`, before the existing
+  steps. `KeyError: 'Jane Doe'` and `KeyError: 'Bob Smith'` now group together, and no guessable value sits
+  behind the hash. Errors whose messages contain quotes or emails get new fingerprints once, so they open
+  new issues after upgrading.
+
+## 0.19.1 (2026-10-22)
+
+- Strict privacy now also turns off slow query plans (`explain_slow_queries`): no EXPLAIN is run and no
+  plan is sent, since a plan carries the SQL. Before, a plan could still be sent, with its values masked.
+- The README says what strict privacy does in its opening lines.
+- The source is public at https://github.com/Luke-Popwell/forge-ops-tracker-ruby, and the package links to it.
+
 ## 0.19.0 (2026-10-20)
 
 - Strict privacy: a raw request path now keeps only its first segment, and the rest is sent as

data/README.md

@@ -3,6 +3,8 @@
 Exception reporting client for [ForgeOps](https://getforgeops.net), for Rails, plain Rack and
 Sinatra apps, and scripts.
 
+> For health or personal data, turn on [strict privacy](#strict-privacy): the SDK then sends only structured facts about each error (its type, stack trace, release and route), never the message, a raw path, breadcrumbs, or context you haven't allowed.
+
 ## Installation
 
 ```ruby

data/lib/forge_ops_tracker/query_explainer.rb

@@ -98,7 +98,8 @@ module ForgeOpsTracker
     # checks first, so a fast query costs one comparison. Returns true only when an EXPLAIN was
     # queued; never raises.
     def consider(payload, duration_ms:)
-      return false unless configuration.explain_slow_queries
+      # Strict privacy sends no SQL at all, masked or not (sdks/STRICT_PRIVACY.md).
+      return false unless configuration.explain_slow_queries && !configuration.strict_privacy
       return false unless duration_ms && duration_ms >= configuration.explain_threshold_ms.to_f
 
       connection = payload[:connection]

data/lib/forge_ops_tracker/strict_privacy.rb

@@ -18,6 +18,11 @@ module ForgeOpsTracker
     # ASCII "word" characters; boundaries are defined against these, the same in every SDK, so
     # Ruby's own idea of a word never changes the result.
     WORD = "A-Za-z0-9_".freeze
+    EMAIL = /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/
+    # A quoted value (KeyError: 'Jane Doe') is data, not the shape of the error. Single quotes only open
+    # and close at a word boundary, so a contraction (Couldn't) or the `email' style never starts one.
+    DOUBLE_QUOTED = /"[^"\r\n]*"/
+    SINGLE_QUOTED = /(?<![#{WORD}])'[^'\r\n]*'(?![#{WORD}])/
     HEX_OBJECT_ID = /0x[0-9a-fA-F]{4,}/
     UUID = /(?<![#{WORD}])[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}(?![#{WORD}])/
     NUMBER = /(?<![#{WORD}])[0-9]+(?![#{WORD}])/
@@ -34,9 +39,11 @@ module ForgeOpsTracker
 
     module_function
 
-    # The message with hex object ids, UUIDs and standalone numbers replaced, in that order.
+    # The message with emails, quoted values, hex object ids, UUIDs and standalone numbers replaced, in
+    # that order (sdks/STRICT_PRIVACY.md).
     def normalize_message(message)
-      message.to_s.gsub(HEX_OBJECT_ID, "0x").gsub(UUID, "<uuid>").gsub(NUMBER, "<n>")
+      message.to_s.gsub(EMAIL, "<email>").gsub(DOUBLE_QUOTED, "<str>").gsub(SINGLE_QUOTED, "<str>")
+        .gsub(HEX_OBJECT_ID, "0x").gsub(UUID, "<uuid>").gsub(NUMBER, "<n>")
     end
 
     # Lets ForgeOps group errors without ever seeing their message: the first 32 hex characters of

data/lib/forge_ops_tracker/version.rb

@@ -1,3 +1,3 @@
 module ForgeOpsTracker
-  VERSION = "0.19.0"
+  VERSION = "0.20.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: forge_ops_tracker
 version: !ruby/object:Gem::Version
-  version: 0.19.0
+  version: 0.20.0
 platform: ruby
 authors:
 - ForgeOps
@@ -147,6 +147,8 @@ licenses:
 metadata:
   homepage_uri: https://getforgeops.net
   rubygems_mfa_required: 'true'
+  source_code_uri: https://github.com/Luke-Popwell/forge-ops-tracker-ruby
+  changelog_uri: https://github.com/Luke-Popwell/forge-ops-tracker-ruby/blob/main/CHANGELOG.md
 rdoc_options: []
 require_paths:
 - lib