forge_ops_tracker 0.19.1 → 0.20.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a07d319688ef560a28c82ff70a822a2a171d1fe9d4c47973d51093e528e548e2
-  data.tar.gz: 6272b6ee64197d04a056a7d34ac4fe5de069be87dea1992f32d30700164ab95a
+  metadata.gz: d0c84fc309e7191793314f8b54488442383610eefe41df5f793cbfeb660bd9d5
+  data.tar.gz: e0cb23777cadde88f2c47180d86beede097d904f592e344b20703c4cc1a19541
 SHA512:
-  metadata.gz: dfe88a94c2008f6ee5af0f47581322647a90253d4d25a2a768e6bfb6bfd759766c15c81315ffb4b030dfd593f893a924ec8c6b7b4be71ad77ff825086c1fc998
-  data.tar.gz: 6f087c6828f7a8d45d895d9e26749337dd6683247021187b89281065c5d10e838eb9de985a3fc15aaac2b9a023eceefbc3e7a50878738f13e318bba55390e77e
+  metadata.gz: d0be76c8e1855c31d3949e7c8ef337bf90a34067c78be75c30498a8b0624083c2df69a61ecae76f793cfe15e30552ca66410dc2a527a6d18768760247621573b
+  data.tar.gz: 7345a1130c32bc7cc8a261d2c1d0f3940edf3b92f99a8472521211805d6a282a65e445d6b03e12819516b89537c292c8fe9f0800a9117afb944073b3f465044d

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.20.0 (2026-10-22)
+
+- Strict privacy: the message fingerprint now also replaces email addresses with `<email>` and quoted
+  values (`"..."`, and `'...'` when the quotes aren't part of a word) with `<str>`, before the existing
+  steps. `KeyError: 'Jane Doe'` and `KeyError: 'Bob Smith'` now group together, and no guessable value sits
+  behind the hash. Errors whose messages contain quotes or emails get new fingerprints once, so they open
+  new issues after upgrading.
+
 ## 0.19.1 (2026-10-22)
 
 - Strict privacy now also turns off slow query plans (`explain_slow_queries`): no EXPLAIN is run and no

data/lib/forge_ops_tracker/strict_privacy.rb

@@ -18,6 +18,11 @@ module ForgeOpsTracker
     # ASCII "word" characters; boundaries are defined against these, the same in every SDK, so
     # Ruby's own idea of a word never changes the result.
     WORD = "A-Za-z0-9_".freeze
+    EMAIL = /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/
+    # A quoted value (KeyError: 'Jane Doe') is data, not the shape of the error. Single quotes only open
+    # and close at a word boundary, so a contraction (Couldn't) or the `email' style never starts one.
+    DOUBLE_QUOTED = /"[^"\r\n]*"/
+    SINGLE_QUOTED = /(?<![#{WORD}])'[^'\r\n]*'(?![#{WORD}])/
     HEX_OBJECT_ID = /0x[0-9a-fA-F]{4,}/
     UUID = /(?<![#{WORD}])[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}(?![#{WORD}])/
     NUMBER = /(?<![#{WORD}])[0-9]+(?![#{WORD}])/
@@ -34,9 +39,11 @@ module ForgeOpsTracker
 
     module_function
 
-    # The message with hex object ids, UUIDs and standalone numbers replaced, in that order.
+    # The message with emails, quoted values, hex object ids, UUIDs and standalone numbers replaced, in
+    # that order (sdks/STRICT_PRIVACY.md).
     def normalize_message(message)
-      message.to_s.gsub(HEX_OBJECT_ID, "0x").gsub(UUID, "<uuid>").gsub(NUMBER, "<n>")
+      message.to_s.gsub(EMAIL, "<email>").gsub(DOUBLE_QUOTED, "<str>").gsub(SINGLE_QUOTED, "<str>")
+        .gsub(HEX_OBJECT_ID, "0x").gsub(UUID, "<uuid>").gsub(NUMBER, "<n>")
     end
 
     # Lets ForgeOps group errors without ever seeing their message: the first 32 hex characters of

data/lib/forge_ops_tracker/version.rb

@@ -1,3 +1,3 @@
 module ForgeOpsTracker
-  VERSION = "0.19.1"
+  VERSION = "0.20.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: forge_ops_tracker
 version: !ruby/object:Gem::Version
-  version: 0.19.1
+  version: 0.20.0
 platform: ruby
 authors:
 - ForgeOps