google-cloud-storage 1.56.0 → 1.57.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 37d818583b06d396a9b237a24187b677bb5261c31e3a139714ef4f8fd868e4ec
-  data.tar.gz: d8ed3812b144e20a747c79147fd26642a7f8d4c9a5e017e925144f9e33afa717
+  metadata.gz: 86a7f1131dc71cb9b5db56afce6c3b9e25a9a21544500367cdcd39ac8eb8ef46
+  data.tar.gz: 070b6c33b09fb8af9eb8a59f5d074b3b5929fd6d61233f1cf738ac4b6c0809a2
 SHA512:
-  metadata.gz: 519fe7bc2cf869c804bbfac6ce300b300f99f065a594673d36cf344b3cacff1ff1fb4eec086903ddcbc4a4be108c66082f05d539ef9508570d43ec9c678893be
-  data.tar.gz: a82b8ddd47b64d71c5035491a87021912419213538a0b2105de3facf4a09aac927379b1c980e5612629426cc7e0ec5de3590480fcdc265fb1bdf172f28d1be05
+  metadata.gz: 9c6370f20e62e933a41fbab067870c29c4e28bde041c97e53edb7a9e0280d1a029bf8d6ce238877cf14114b202535e7c9d0407192dbbfb4af8d071d9a3c3f575
+  data.tar.gz: 7da8c7b4afed6c3b0504c33c14bac1ce04a43e3740119af18c7c30c4eca540287da4e59798f6358f4e15098ab1476c09dcd9377c988ed063f47ff5846689eb84

data/AUTHENTICATION.md

@@ -28,6 +28,12 @@ providing **Project ID** and **Service Account Credentials** directly in code.
 
 **Credentials** are discovered in the following order:
 
+> [!WARNING]
+> If you accept a credential configuration (JSON file or Hash) from an
+> external source for authentication to Google Cloud, you must validate it before
+> providing it to a Google API client library. Providing an unvalidated credential
+> configuration to Google APIs can compromise the security of your systems and data.
+
 1. Specify credentials in method arguments
 2. Specify credentials in configuration
 3. Discover credentials path in environment variables
@@ -81,11 +87,17 @@ The **Project ID** and the path to the **Credentials JSON** file can be configur
 instead of placing them in environment variables or providing them as arguments.
 
 ```ruby
+require "googleauth"
 require "google/cloud/storage"
 
+credentials = ::Google::Auth::ServiceAccountCredentials.make_creds(
+  json_key_io: ::File.open("/path/to/keyfile.json"),
+  scope: "https://www.googleapis.com/auth/devstorage.full_control"
+)
+
 Google::Cloud::Storage.configure do |config|
   config.project_id  = "my-project-id"
-  config.credentials = "path/to/keyfile.json"
+  config.credentials = credentials
 end
 
 storage = Google::Cloud::Storage.new

data/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Release History
 
+### 1.57.1 (2025-11-04)
+
+#### Documentation
+
+* add warning about loading unvalidated credentials ([#31776](https://github.com/googleapis/google-cloud-ruby/issues/31776)) 
+
+### 1.57.0 (2025-08-15)
+
+#### Features
+
+* Require Ruby 3.1 or later ([#30765](https://github.com/googleapis/google-cloud-ruby/issues/30765)) 
+* Support for using Faraday for HTTP requests ([#30759](https://github.com/googleapis/google-cloud-ruby/issues/30759)) 
+
 ### 1.56.0 (2025-04-21)
 
 #### Features

data/OVERVIEW.md

@@ -14,11 +14,17 @@ your code or via environment variables. Read more about the options for
 connecting in the {file:AUTHENTICATION.md Authentication Guide}.
 
 ```ruby
+require "googleauth"
 require "google/cloud/storage"
 
+credentials = ::Google::Auth::ServiceAccountCredentials.make_creds(
+  json_key_io: ::File.open("/path/to/keyfile.json"),
+  scope: "https://www.googleapis.com/auth/devstorage.full_control"
+)
+
 storage = Google::Cloud::Storage.new(
   project_id: "my-project",
-  credentials: "/path/to/keyfile.json"
+  credentials: credentials
 )
 
 bucket = storage.bucket "my-bucket"
@@ -531,14 +537,23 @@ created and owns the topic.)
 require "google/cloud/pubsub"
 require "google/cloud/storage"
 
-pubsub = Google::Cloud::Pubsub.new
+pubsub = Google::Cloud::PubSub.new
 storage = Google::Cloud::Storage.new
 
-topic = pubsub.create_topic "my-topic"
-topic.policy do |p|
-  p.add "roles/pubsub.publisher",
-        "serviceAccount:#{storage.service_account_email}"
-end
+topic_admin = pubsub.topic_admin
+topic_path = pubsub.topic_path "my-topic"
+topic = topic_admin.create_topic name: topic_path
+
+policy = {
+  bindings: [
+    {
+      role: "roles/pubsub.publisher",
+      members: ["serviceAccount:#{storage.service_account_email}"]
+    }
+  ]
+}
+
+pubsub.iam.set_iam_policy resource: topic_path, policy: policy
 
 bucket = storage.bucket "my-bucket"
 

data/lib/google/cloud/storage/bucket/acl.rb

@@ -352,7 +352,7 @@ module Google
           def auth! if_metageneration_match: nil
             update_predefined_acl! "authenticatedRead", if_metageneration_match: if_metageneration_match
           end
-          alias authenticatedRead! auth!
+          alias authenticatedRead! auth! # rubocop:disable Naming/MethodName
           alias auth_read! auth!
           alias authenticated! auth!
           alias authenticated_read! auth!
@@ -390,7 +390,7 @@ module Google
           def project_private! if_metageneration_match: nil
             update_predefined_acl! "projectPrivate", if_metageneration_match: if_metageneration_match
           end
-          alias projectPrivate! project_private!
+          alias projectPrivate! project_private! # rubocop:disable Naming/MethodName
 
           ##
           # Convenience method to apply the `publicRead` predefined ACL
@@ -408,7 +408,7 @@ module Google
           def public! if_metageneration_match: nil
             update_predefined_acl! "publicRead", if_metageneration_match: if_metageneration_match
           end
-          alias publicRead! public!
+          alias publicRead! public! # rubocop:disable Naming/MethodName
           alias public_read! public!
 
           # Convenience method to apply the `publicReadWrite` predefined ACL
@@ -426,7 +426,7 @@ module Google
           def public_write! if_metageneration_match: nil
             update_predefined_acl! "publicReadWrite", if_metageneration_match: if_metageneration_match
           end
-          alias publicReadWrite! public_write!
+          alias publicReadWrite! public_write! # rubocop:disable Naming/MethodName
 
           protected
 
@@ -718,7 +718,7 @@ module Google
           def auth! if_metageneration_match: nil
             update_predefined_default_acl! "authenticatedRead", if_metageneration_match: if_metageneration_match
           end
-          alias authenticatedRead! auth!
+          alias authenticatedRead! auth! # rubocop:disable Naming/MethodName
           alias auth_read! auth!
           alias authenticated! auth!
           alias authenticated_read! auth!
@@ -739,7 +739,7 @@ module Google
           def owner_full! if_metageneration_match: nil
             update_predefined_default_acl! "bucketOwnerFullControl", if_metageneration_match: if_metageneration_match
           end
-          alias bucketOwnerFullControl! owner_full!
+          alias bucketOwnerFullControl! owner_full! # rubocop:disable Naming/MethodName
 
           ##
           # Convenience method to apply the default `bucketOwnerRead`
@@ -757,7 +757,7 @@ module Google
           def owner_read! if_metageneration_match: nil
             update_predefined_default_acl! "bucketOwnerRead", if_metageneration_match: if_metageneration_match
           end
-          alias bucketOwnerRead! owner_read!
+          alias bucketOwnerRead! owner_read! # rubocop:disable Naming/MethodName
 
           ##
           # Convenience method to apply the default `private`
@@ -792,7 +792,7 @@ module Google
           def project_private! if_metageneration_match: nil
             update_predefined_default_acl! "projectPrivate", if_metageneration_match: if_metageneration_match
           end
-          alias projectPrivate! project_private!
+          alias projectPrivate! project_private! # rubocop:disable Naming/MethodName
 
           ##
           # Convenience method to apply the default `publicRead`
@@ -810,7 +810,7 @@ module Google
           def public! if_metageneration_match: nil
             update_predefined_default_acl! "publicRead", if_metageneration_match: if_metageneration_match
           end
-          alias publicRead! public!
+          alias publicRead! public! # rubocop:disable Naming/MethodName
           alias public_read! public!
 
           protected

data/lib/google/cloud/storage/credentials.rb

@@ -25,18 +25,29 @@ module Google
       # Storage API.
       #
       # @example
+      #   # The recommended way to provide credentials is to use the `make_creds` method
+      #   # on the appropriate credentials class for your environment.
+      #
+      #   require "googleauth"
       #   require "google/cloud/storage"
       #
-      #   keyfile = "/path/to/keyfile.json"
-      #   creds = Google::Cloud::Storage::Credentials.new keyfile
+      #   credentials = ::Google::Auth::ServiceAccountCredentials.make_creds(
+      #     json_key_io: ::File.open("/path/to/keyfile.json"),
+      #     scope: "https://www.googleapis.com/auth/devstorage.full_control"
+      #   )
       #
       #   storage = Google::Cloud::Storage.new(
       #     project_id: "my-project",
-      #     credentials: creds
+      #     credentials: credentials
       #   )
       #
       #   storage.project_id #=> "my-project"
       #
+      # @note Warning: If you accept a credential configuration (JSON file or Hash) from an
+      #   external source for authentication to Google Cloud, you must validate it before
+      #   providing it to a Google API client library. Providing an unvalidated credential
+      #   configuration to Google APIs can compromise the security of your systems and data.
+      #
       class Credentials < Google::Auth::Credentials
         SCOPE = ["https://www.googleapis.com/auth/devstorage.full_control"].freeze
         PATH_ENV_VARS = [

data/lib/google/cloud/storage/file/acl.rb

@@ -335,7 +335,7 @@ module Google
                                    if_metageneration_match: if_metageneration_match,
                                    if_metageneration_not_match: if_metageneration_not_match
           end
-          alias authenticatedRead! auth!
+          alias authenticatedRead! auth! # rubocop:disable Naming/MethodName
           alias auth_read! auth!
           alias authenticated! auth!
           alias authenticated_read! auth!
@@ -382,7 +382,7 @@ module Google
                                    if_metageneration_match: if_metageneration_match,
                                    if_metageneration_not_match: if_metageneration_not_match
           end
-          alias bucketOwnerFullControl! owner_full!
+          alias bucketOwnerFullControl! owner_full! # rubocop:disable Naming/MethodName
 
           ##
           # Convenience method to apply the `bucketOwnerRead` predefined ACL
@@ -426,7 +426,7 @@ module Google
                                    if_metageneration_match: if_metageneration_match,
                                    if_metageneration_not_match: if_metageneration_not_match
           end
-          alias bucketOwnerRead! owner_read!
+          alias bucketOwnerRead! owner_read! # rubocop:disable Naming/MethodName
 
           ##
           # Convenience method to apply the `private` predefined ACL
@@ -513,7 +513,7 @@ module Google
                                    if_metageneration_match: if_metageneration_match,
                                    if_metageneration_not_match: if_metageneration_not_match
           end
-          alias projectPrivate! project_private!
+          alias projectPrivate! project_private! # rubocop:disable Naming/MethodName
 
           ##
           # Convenience method to apply the `publicRead` predefined ACL
@@ -557,7 +557,7 @@ module Google
                                    if_metageneration_match: if_metageneration_match,
                                    if_metageneration_not_match: if_metageneration_not_match
           end
-          alias publicRead! public!
+          alias publicRead! public! # rubocop:disable Naming/MethodName
           alias public_read! public!
 
           protected

data/lib/google/cloud/storage/policy/bindings.rb

@@ -168,10 +168,10 @@ module Google
           #     puts binding.role
           #   end
           #
-          def each &block
+          def each(&)
             return enum_for :each unless block_given?
 
-            @bindings.each(&block)
+            @bindings.each(&)
           end
 
           ##

data/lib/google/cloud/storage/version.rb

@@ -16,7 +16,7 @@
 module Google
   module Cloud
     module Storage
-      VERSION = "1.56.0".freeze
+      VERSION = "1.57.1".freeze
     end
   end
 end

data/lib/google/cloud/storage.rb

@@ -42,9 +42,12 @@ module Google
       # @param [String] project_id Project identifier for the Storage service
       #   you are connecting to. If not present, the default project for the
       #   credentials is used.
-      # @param [String, Hash, Google::Auth::Credentials] credentials The path to
-      #   the keyfile as a String, the contents of the keyfile as a Hash, or a
-      #   Google::Auth::Credentials object. (See {Storage::Credentials})
+      # @param [Google::Auth::Credentials] credentials A Google::Auth::Credentials
+      #   object. (See {Storage::Credentials})
+      # @note Warning: Passing a `String` to a keyfile path or a `Hash` of
+      #   credentials is deprecated. Providing an unvalidated credential
+      #   configuration to Google APIs can compromise the security of your
+      #   systems and data.
       # @param [String, Array<String>] scope The OAuth 2.0 scopes controlling
       #   the set of resources and operations that the connection can access.
       #   See [Using OAuth 2.0 to Access Google

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-storage
 version: !ruby/object:Gem::Version
-  version: 1.56.0
+  version: 1.57.1
 platform: ruby
 authors:
 - Mike Moore
 - Chris Smith
 bindir: bin
 cert_chain: []
-date: 2025-04-21 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-cloud-core
@@ -28,16 +28,22 @@ dependencies:
   name: google-apis-core
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.18'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '0.13'
+        version: '2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.18'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '0.13'
+        version: '2'
 - !ruby/object:Gem::Dependency
   name: google-apis-iamcredentials_v1
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +134,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.30.0
+        version: 1.31.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.30.0
+        version: 1.31.1
 - !ruby/object:Gem::Dependency
   name: minitest
   requirement: !ruby/object:Gem::Requirement
@@ -331,14 +337,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.0.0
+      version: 3.1.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.5
+rubygems_version: 3.6.9
 specification_version: 4
 summary: API Client library for Google Cloud Storage
 test_files: []