google-cloud-logging 2.6.0 → 2.6.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ca9ac0a8f2d6ea841d775c3aacc3913b6f8ddaeb938bb6c1792ea9b8fec83bc8
-  data.tar.gz: 742cd54d99be989270fc9afe8a9ffcee60e7e581479402d0afe60de58b9ea311
+  metadata.gz: 2816c11f44d21e93dd932e1b404d09672e941c2a41b504d564bd9706b7cda23b
+  data.tar.gz: d2a9a2c155f111f69eebe90ccefbe0f16bbebfe83baef825df2c4030fd39dbc0
 SHA512:
-  metadata.gz: a78b0502fe81b9d886b2d4798be34b2c41365961c3fd2ddf93c36f97a3366b778d578c984f5bcfffb87b5f751df3a64f373e5fa751366db31de380c3118f5b27
-  data.tar.gz: d7ab6c4f585264b1453608d6d1073e6482ab47dd20d0aa0d001a4cdd0938c1e5b87d7db513818d91dc081f95610f3f6a6c3bc163946e4d84f27181cd9a30632f
+  metadata.gz: 25c01fe153ae282da7abd367f7292a95e93847ca1c2f6219f57632d83a85e5baac2c5722077e40a1094771ff26022eef640fa9f4d2d053e72aa9bb320a0b3db5
+  data.tar.gz: f52e922267736277b2ec5c2c213addcec76e247a0286c31144b83dbbfe6b200bdb75abb501e73d309b7a5a0d03622502f485897e214ee2c96d0ca7da430f9d11

data/AUTHENTICATION.md

@@ -46,6 +46,12 @@ code.
 
 **Credentials** are discovered in the following order:
 
+> [!WARNING]
+> If you accept a credential configuration (JSON file or Hash) from an
+> external source for authentication to Google Cloud, you must validate it before
+> providing it to a Google API client library. Providing an unvalidated credential
+> configuration to Google APIs can compromise the security of your systems and data.
+
 1. Specify credentials in method arguments
 2. Specify credentials in configuration
 3. Discover credentials path in environment variables
@@ -100,11 +106,16 @@ The **Project ID** and the path to the **Credentials JSON** file can be configur
 instead of placing them in environment variables or providing them as arguments.
 
 ```ruby
+require "googleauth"
 require "google/cloud/logging"
 
+credentials = ::Google::Auth::ServiceAccountCredentials.make_creds(
+  json_key_io: ::File.open("/path/to/keyfile.json")
+)
+
 Google::Cloud::Logging.configure do |config|
   config.project_id  = "my-project-id"
-  config.credentials = "path/to/keyfile.json"
+  config.credentials = credentials
 end
 
 client = Google::Cloud::Logging.new

data/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Release History
 
+### 2.6.1 (2025-11-04)
+
+#### Documentation
+
+* add warning about loading unvalidated credentials ([#32121](https://github.com/googleapis/google-cloud-ruby/issues/32121)) 
+
 ### 2.6.0 (2025-03-04)
 
 #### Features

data/lib/google/cloud/logging/version.rb

@@ -16,7 +16,7 @@
 module Google
   module Cloud
     module Logging
-      VERSION = "2.6.0".freeze
+      VERSION = "2.6.1".freeze
     end
   end
 end

data/lib/google/cloud/logging.rb

@@ -50,9 +50,27 @@ module Google
       # @param [String] project_id Project identifier for the Stackdriver
       #   Logging service you are connecting to. If not present, the default
       #   project for the credentials is used.
-      # @param [String, Hash, Google::Auth::Credentials] credentials The path to
-      #   the keyfile as a String, the contents of the keyfile as a Hash, or a
-      #   Google::Auth::Credentials object. (See {Logging::Credentials})
+      # @param [Google::Auth::Credentials] credentials A Google::Auth::Credentials
+      #   object. (See {Logging::Credentials})
+      #   @note Warning: Passing a `String` to a keyfile path or a `Hash` of credentials
+      #     is deprecated. Providing an unvalidated credential configuration to
+      #     Google APIs can compromise the security of your systems and data.
+      #
+      #   @example
+      #
+      #     # The recommended way to provide credentials is to use the `make_creds` method
+      #     # on the appropriate credentials class for your environment.
+      #
+      #     require "googleauth"
+      #
+      #     credentials = ::Google::Auth::ServiceAccountCredentials.make_creds(
+      #       json_key_io: ::File.open("/path/to/keyfile.json")
+      #     )
+      #
+      #     logging = Google::Cloud::Logging.new(
+      #       project_id: "my-project-id",
+      #       credentials: credentials
+      #     )
       # @param [String, Array<String>] scope The OAuth 2.0 scopes controlling
       #   the set of resources and operations that the connection can access.
       #   See [Using OAuth 2.0 to Access Google

data/lib/google-cloud-logging.rb

@@ -80,9 +80,25 @@ module Google
     # @param [String] project_id Project identifier for the Stackdriver Logging
     #   service you are connecting to. If not present, the default project for
     #   the credentials is used.
-    # @param [String, Hash, Google::Auth::Credentials] credentials The path to
-    #   the keyfile as a String, the contents of the keyfile as a Hash, or a
-    #   Google::Auth::Credentials object. (See {Logging::Credentials})
+    # @param [Google::Auth::Credentials] credentials A Google::Auth::Credentials
+    #   object. (See {Logging::Credentials})
+    #   @note Warning: Passing a `String` to a keyfile path or a `Hash` of credentials
+    #     is deprecated. Providing an unvalidated credential configuration to
+    #     Google APIs can compromise the security of your systems and data.
+    #
+    #   @example
+    #
+    #     # The recommended way to provide credentials is to use the `make_creds` method
+    #     # on the appropriate credentials class for your environment.
+    #
+    #     credentials = ::Google::Auth::ServiceAccountCredentials.make_creds(
+    #       json_key_io: ::File.open("/path/to/keyfile.json")
+    #     )
+    #
+    #     logging = Google::Cloud::Logging.new(
+    #       project_id: "my-project-id",
+    #       credentials: credentials
+    #     )
     # @param [String, Array<String>] scope The OAuth 2.0 scopes controlling the
     #   set of resources and operations that the connection can access. See
     #   [Using OAuth 2.0 to Access Google

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-logging
 version: !ruby/object:Gem::Version
-  version: 2.6.0
+  version: 2.6.1
 platform: ruby
 authors:
 - Mike Moore
 - Chris Smith
 bindir: bin
 cert_chain: []
-date: 2025-03-04 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-cloud-core
@@ -133,7 +133,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.5
+rubygems_version: 3.6.9
 specification_version: 4
 summary: API Client library for Stackdriver Logging
 test_files: []