govuk_app_config 9.10.0 → 9.11.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3bf6ae30aec5a886810a0b912444c0b97ea69e939cd8923f7fae4d1a29083f22
-  data.tar.gz: 7651211aa7ec14d12260e75d3d979fe706c2541d87d3d2ff58dae8cb8b6f61c5
+  metadata.gz: 2e328b8f14abd03a18e3f68c5334eca8681fd149b6572bbc30bd2336f32fa4a8
+  data.tar.gz: f31ef5725579cb25b04fcc0ddfb75a00e1efedb7e6f6ca838182edea6fdfd0ff
 SHA512:
-  metadata.gz: 50113bab587d2bbe40d045020871943cf090a9503c26c100faf642c43f06d3baeeda8f98220622f2fb8fec4c29c4ca51d181d2ff449f7a736efc3dc57ff7fb57
-  data.tar.gz: e94c092a17c03154d43f0d226f5897c88b2fcc8aefe9b3f3ffca7b0377d7b08328d474024e0d3d8c666a48d21b5b9775c4170a1f25c76f8926bfe4d148ecb0d4
+  metadata.gz: 6387c742d5b1e535e8e26b7e60f5161377e410c9a1a974aae32572546746f9e6bed7cbbf09ed2501492106d3db82bf57293f661c116d748e79e5d973f2242ca9
+  data.tar.gz: 8b5283cc08344c0975d0cdd5904f380bfd937e87f41f4f89e10c296b4f3eb906d76625160130aea6ad77f399f4e2b0e129e648dd6df1bfb278ddea65ad821704

data/.github/pull_request_template.md

@@ -0,0 +1,3 @@
+⚠️ Make sure you [release a new version of this gem](https://github.com/alphagov/govuk_app_config/pull/356/files) after merging your changes. ⚠️
+
+Refer to the [existing docs](https://docs.publishing.service.gov.uk/manual/publishing-a-ruby-gem.html#ruby-version-compatibility) if you are making changes to the supported Ruby versions.

data/.github/workflows/autorelease.yml

@@ -1,7 +1,7 @@
 on:
   workflow_dispatch: {}
   schedule:
-    - cron: '00 13 * * 2'
+    - cron: '30 10 * * 1-5' # 10:30am UTC, Mon-Fri.
 
 jobs:
   autorelease:

data/.github/workflows/ci.yml

@@ -11,17 +11,6 @@ on:
         type: string
 
 jobs:
-  snyk-security:
-    name: SNYK security analysis
-    uses: alphagov/govuk-infrastructure/.github/workflows/snyk-security.yml@main
-    with:
-      skip_sca: true
-    secrets: inherit
-    permissions:
-      contents: read
-      security-events: write
-      actions: read
-  
   codeql-sast:
     name: CodeQL SAST scan
     uses: alphagov/govuk-infrastructure/.github/workflows/codeql-analysis.yml@main

data/.gitignore

@@ -8,3 +8,5 @@
 /spec/reports/
 /tmp/
 spec/examples.txt
+# simplecov
+coverage/

data/.govuk_dependabot_merger.yml

@@ -1,10 +1,4 @@
-api_version: 1
-auto_merge:
-  - dependency: rubocop-govuk
-    allowed_semver_bumps:
-      - patch
-      - minor
-  - dependency: plek
-    allowed_semver_bumps:
-      - patch
-      - minor
+api_version: 2
+defaults:
+  auto_merge: true
+  update_external_dependencies: true

data/CHANGELOG.md

@@ -1,3 +1,11 @@
+# 9.11.1
+
+* Fix OpenTelemetry errors when using with Logstasher gem ([#372](https://github.com/alphagov/govuk_app_config/pull/372))
+
+# 9.11.0
+
+* Add GDS::SSO::PermissionDeniedError to excluded exceptions list ([#366](https://github.com/alphagov/govuk_app_config/pull/366))
+
 # 9.10.0
 
 * Simplify the logic for deciding whether to initialize `GovukPrometheusExporter`. `GovukPrometheusExporter` provides the `/metrics` webserver and "exporter" process for aggregating counters in multi-process apps. govuk_app_config will now always attempt to initialize GovukPrometheusExporter except when running under `rails console`. The `GOVUK_PROMETHEUS_EXPORTER` environment variable no longer has any effect.

data/govuk_app_config.gemspec

@@ -39,6 +39,7 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency "rake", "~> 13.0"
   spec.add_development_dependency "rspec", "~> 3.10"
   spec.add_development_dependency "rspec-its", "~> 1.3"
-  spec.add_development_dependency "rubocop-govuk", "4.16.1"
+  spec.add_development_dependency "rubocop-govuk", "4.17.1"
+  spec.add_development_dependency "simplecov"
   spec.add_development_dependency "webmock"
 end

data/lib/govuk_app_config/govuk_error/configuration.rb

@@ -40,6 +40,7 @@ module GovukError
         "CGI::Session::CookieStore::TamperedWithCookie",
         "GdsApi::HTTPIntermittentServerError",
         "GdsApi::TimedOutException",
+        "GDS::SSO::PermissionDeniedError",
         "Mongoid::Errors::DocumentNotFound",
         "Puma::HttpParserError",
         "Sinatra::NotFound",

data/lib/govuk_app_config/govuk_json_logging/rails_ext/action_controller/metal/instrumentation.rb

@@ -0,0 +1,65 @@
+# This is copied from
+# https://github.com/shadabahmed/logstasher/blob/main/lib/logstasher/rails_ext/action_controller/metal/instrumentation.rb
+# Changes have been highlight in comments, otherwise the code is the same.
+
+module ActionController
+  module Instrumentation
+    alias_method "orig_process_action", "process_action"
+
+    def process_action(*args)
+      # The raw payload has been updated to reflect the payload structure used
+      # in Rails 7.1, primarily the addition of the `headers`, `request` keys
+      # and using `request.filtered_path` instead of `request.fullpath`.
+      # https://github.com/rails/rails/blame/d39db5d1891f7509cde2efc425c9d69bbb77e670/actionpack/lib/action_controller/metal/instrumentation.rb#L60
+      raw_payload = {
+        controller: self.class.name,
+        action: action_name,
+        request:,
+        params: request.filtered_parameters,
+        headers: request.headers,
+        format: request.format.ref,
+        method: request.request_method,
+        path: begin
+          request.filtered_path
+        rescue StandardError
+          "unknown"
+        end,
+      }
+
+      LogStasher.add_default_fields_to_payload(raw_payload, request)
+
+      LogStasher.clear_request_context
+      LogStasher.add_default_fields_to_request_context(request)
+
+      ActiveSupport::Notifications.instrument("start_processing.action_controller", raw_payload.dup)
+
+      ActiveSupport::Notifications.instrument("process_action.action_controller", raw_payload) do |payload|
+        if respond_to?(:logstasher_add_custom_fields_to_request_context)
+          logstasher_add_custom_fields_to_request_context(LogStasher.request_context)
+        end
+
+        if respond_to?(:logstasher_add_custom_fields_to_payload)
+          before_keys = raw_payload.keys.clone
+          logstasher_add_custom_fields_to_payload(raw_payload)
+          after_keys = raw_payload.keys
+          # Store all extra keys added to payload hash in payload itself. This is a thread safe way
+          LogStasher::CustomFields.add(*(after_keys - before_keys))
+        end
+
+        result = super
+
+        payload[:status] = response.status
+        append_info_to_payload(payload)
+        LogStasher.store.each do |key, value|
+          payload[key] = value
+        end
+
+        LogStasher.request_context.each do |key, value|
+          payload[key] = value
+        end
+        result
+      end
+    end
+    alias_method "logstasher_process_action", "process_action"
+  end
+end

data/lib/govuk_app_config/govuk_json_logging.rb

@@ -16,6 +16,12 @@ module GovukJsonLogging
   end
 
   def self.configure(&block)
+    # Fixes the monkey patch from the logstasher gem to support Rails 7
+    config = Rails.application.config.logstasher
+    if (!config.controller_monkey_patch && config.controller_monkey_patch != false) || config.controller_monkey_patch == true
+      require_relative "./govuk_json_logging/rails_ext/action_controller/metal/instrumentation"
+    end
+
     configuration = Configuration.new
 
     configuration.instance_eval(&block) if block_given?

data/lib/govuk_app_config/version.rb

@@ -1,3 +1,3 @@
 module GovukAppConfig
-  VERSION = "9.10.0".freeze
+  VERSION = "9.11.1".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: govuk_app_config
 version: !ruby/object:Gem::Version
-  version: 9.10.0
+  version: 9.11.1
 platform: ruby
 authors:
 - GOV.UK Dev
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2024-04-10 00:00:00.000000000 Z
+date: 2024-06-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: logstasher
@@ -292,14 +292,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 4.16.1
+        version: 4.17.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 4.16.1
+        version: 4.17.1
+- !ruby/object:Gem::Dependency
+  name: simplecov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: webmock
   requirement: !ruby/object:Gem::Requirement
@@ -322,6 +336,7 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".github/dependabot.yml"
+- ".github/pull_request_template.md"
 - ".github/workflows/autorelease.yml"
 - ".github/workflows/ci.yml"
 - ".gitignore"
@@ -351,6 +366,7 @@ files:
 - lib/govuk_app_config/govuk_healthcheck/redis.rb
 - lib/govuk_app_config/govuk_healthcheck/sidekiq_redis.rb
 - lib/govuk_app_config/govuk_json_logging.rb
+- lib/govuk_app_config/govuk_json_logging/rails_ext/action_controller/metal/instrumentation.rb
 - lib/govuk_app_config/govuk_open_telemetry.rb
 - lib/govuk_app_config/govuk_prometheus_exporter.rb
 - lib/govuk_app_config/govuk_proxy/static_proxy.rb
@@ -377,7 +393,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.7
+rubygems_version: 3.5.11
 signing_key: 
 specification_version: 4
 summary: Base configuration for GOV.UK applications