gapic-common 1.5.0 → 1.5.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f9cc2de9bcbe93a62a1706acc73f6d37064bbde7a81a5c9fd434570ed8c6e22f
-  data.tar.gz: 3be68b0522ce0e3465bfb555820c7c73882f2e1bf36ac009fd4bb4f31c0bb3bd
+  metadata.gz: 3906b246e3ecacee83c366fee3cd10077a56a72b29c3490ca8ff01ac4e124d65
+  data.tar.gz: c0a72cf00fa758234a196d385f53303d41c82cd895a17a339b185b7db529cf3b
 SHA512:
-  metadata.gz: f958c2009dead1a09f0f20a9dda26f65d1698399657462b47b501297aff0e6af7496b4b0314237485bbb4f9a61d3866b9ee8e61ac26469c0ee69184c53cddd5b
-  data.tar.gz: e8fd4368fab545fbc33636d5999e73bd9f8b664006f5967929cd8e09b25cfafb22e34a17d58ce1481b94474d952d2c7add11ba7644ba77ffab23b98c2b83728a
+  metadata.gz: 4aaff885138cd52a4f822ebb51af2f2c658700e7ba71d3b1199ada4c3871343e16cb66c1fc65a44606cf178316a07bb61f553a40bcf1ffd80e98a00758e18d51
+  data.tar.gz: 59232d7d58c9711b6e0e9e0b1da7ca3f0d69abbda9d10d4fa72412e463d8a57062a45f46131c5c24a392cbbc5e8e99be63b7491c4bcf668f77ed48b4e44a235f

data/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Release History
 
+### 1.5.1 (2026-09-30)
+
+#### Bug Fixes
+
+* tighten path template matching in the REST transcoder ([#83](https://github.com/googleapis/ruby-core-libraries/issues/83)) 
+
 ### 1.5.0 (2026-09-29)
 
 #### Features

data/lib/gapic/common/version.rb

@@ -14,6 +14,6 @@
 
 module Gapic
   module Common
-    VERSION = "1.5.0".freeze
+    VERSION = "1.5.1".freeze
   end
 end

data/lib/gapic/rest/grpc_transcoder.rb

@@ -111,7 +111,7 @@ module Gapic
       # @return [Hash{String, String}]
       #   Name to value hash of the variables for the uri template expansion.
       #   The values are percent-escaped with slashes potentially preserved.
-      # @raise [Gapic::Common::Error] If any parameter value fails path traversal or injection validation.
+      # @raise [Gapic::Common::Error] If any parameter value fails path traversal validation.
       def bind_uri_values! http_binding, request_hash
         http_binding.field_bindings.to_h do |field_binding|
           field_path_camel = field_binding.field_path.split(".").map { |part| camel_name_for part }.join(".")
@@ -252,7 +252,7 @@ module Gapic
       # Returns nil if:
       # - the field is not found
       # - the field is a Message or an array,
-      # - the regex does not match
+      # - the regex does not match the entire string representation
       # @param request_hash [Hash]
       #   A hash of the GRPC request or the sub-request with the unset
       #   proto3_optional fields removed.
@@ -266,7 +266,9 @@ module Gapic
 
         # Covers the case where in `foo.bar.baz`, `baz` is still a submessage or an array.
         return nil if value.is_a?(::Hash) || value.is_a?(::Array)
-        value.to_s if value.to_s =~ regex
+        str = value.to_s
+        match = regex.match str
+        str if match && match.pre_match.empty? && match.post_match.empty?
       end
 
       # Finds a value in the hash by path.

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: gapic-common
 version: !ruby/object:Gem::Version
-  version: 1.5.0
+  version: 1.5.1
 platform: ruby
 authors:
 - Google API Authors