gitlab-glaz 2.0.0 → 2.1.0

data/Cargo.toml

@@ -4,7 +4,7 @@ members = ["ext/*"]
 resolver = "2"
 
 [workspace.package]
-version = "2.0.0"
+version = "2.1.0"
 edition = "2024"
 
 # Shared dependencies for all crates

data/ext/glaz/src/lib.rs

@@ -213,12 +213,18 @@ impl glaz_module::PolicyLookup for NoStore {
 
 /// Return the default roles embedded in the extension at build time (parsed
 /// from glaz-roles' roles/**/*.yml) as an array of hashes shaped like
-/// `{ id: String, name: String, permissions: [String, ...] }`.
+/// `{ id: String, key: String, name: String, permissions: [String, ...] }`.
+///
+/// `key` is the role's stable machine identifier (e.g. `artifact_admin`),
+/// distinct from the human-facing `name` and from the `id` callers put in
+/// relationships. Callers reference a role by `key` instead of hardcoding
+/// its UUID or matching on its display name.
 fn roles(ruby: &Ruby) -> Result<magnus::RArray, Error> {
     let array = ruby.ary_new();
     for role in glaz_roles::default_roles() {
         let hash = ruby.hash_new();
         hash.aset(ruby.sym_new("id"), role.id.to_string())?;
+        hash.aset(ruby.sym_new("key"), role.key)?;
         hash.aset(ruby.sym_new("name"), role.name)?;
         let permissions = ruby.ary_new();
         for permission in &role.permissions {

data/lib/gitlab/glaz/version.rb

@@ -2,6 +2,6 @@
 
 module Gitlab
   module Glaz
-    VERSION = "2.0.0"
+    VERSION = "2.1.0"
   end
 end

data/lib/gitlab/glaz.rb

@@ -16,7 +16,12 @@ module Gitlab
 
     # Returns the default roles embedded in the native extension at build time,
     # sourced from the glaz-roles crate's roles/**/*.yml definitions. Each entry
-    # is a hash: { id: String, name: String, permissions: Array<String> }.
+    # is a hash:
+    # { id: String, key: String, name: String, permissions: Array<String> }.
+    #
+    # :key is the role's stable machine identifier (e.g. "artifact_admin"):
+    # reference a role by it rather than hardcoding :id or matching on :name,
+    # which is human-facing and may be reworded.
     def roles
       @roles ||= ::Glaz.roles.each do |role|
         role[:permissions].freeze

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: gitlab-glaz
 version: !ruby/object:Gem::Version
-  version: 2.0.0
+  version: 2.1.0
 platform: ruby
 authors:
 - group::authorization
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-09-23 00:00:00.000000000 Z
+date: 2026-10-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-protobuf