httpigeon 2.4.3 → 2.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 25a65b398f4af0053c9a47fece2a1aca8a50de2f7dfab47ea0c268c77490071d
-  data.tar.gz: 49025c5b1963273e6711357e97271801ada1db14655b4d45de9c15eb29598efc
+  metadata.gz: d974d75f6942b6ef6b52e44a68f28712beaae150d1737c60d32aed8f1a139dfb
+  data.tar.gz: 84e6d7c7c22183135d7d5efc4fc4ab2f1fcb93efdcf20db4f50e9b3e402bdc87
 SHA512:
-  metadata.gz: 3b4db4d3a51b01651c495a9519f9e45af9af83909f8d322f607b9371df4ba2231d7add72a9f57fed4ead40b922b4611224e2658d4bfc2becf4678e00136e0f2e
-  data.tar.gz: f05f26331d38ed6c88f1d17a1ddbe55a40b7fe2bb686a8cc664674e1beb3287159567f8c1c5e279eb00e4b5e195e21b3d5bfa0d04371208a401ed3cce4745065
+  metadata.gz: 964b248375adbb313cf40c6102e884cbd0f5adedcbd6e5d148d724b4c5e6058c920d02c62593c6516806f7f72d83f722f1d17da36bea9d7ec0a5002ae2104306
+  data.tar.gz: 3a09eb4595ca7b579bd8ceb970a972267e9d86d758b8c14ff65381959dd1fce51d5bce4c33ababedd0c0024f13ca9a7b3e6e9d670ef3717eed115f26f9f5184f

data/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [2.5.0](https://github.com/dailypay/httpigeon/compare/v2.4.4...v2.5.0) (2026-11-05)
+
+
+### Features
+
+* **AX-2975:** Allow activesupport 8.0 and 8.1 ([#68](https://github.com/dailypay/httpigeon/issues/68)) ([50b9965](https://github.com/dailypay/httpigeon/commit/50b9965a6660e6fb780f99a9c35a745affd27b30))
+
+## [2.4.4](https://github.com/dailypay/httpigeon/compare/v2.4.3...v2.4.4) (2026-07-17)
+
+
+### Bug Fixes
+
+* **ASV-4361:** close five log-redaction and dispatch findings ([#64](https://github.com/dailypay/httpigeon/issues/64)) ([ef56054](https://github.com/dailypay/httpigeon/commit/ef5605465787d5cea1cce6f39ffd96763502a968))
+
 ## [2.4.3](https://github.com/dailypay/httpigeon/compare/v2.4.2...v2.4.3) (2026-05-01)
 
 

data/httpigeon.gemspec

@@ -28,7 +28,7 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
 
   spec.add_dependency "faraday", "~> 2.14.1"
-  spec.add_dependency "activesupport", "~> 7.2.0"
+  spec.add_dependency "activesupport", ">= 7.2", "< 8.2"
 
   spec.add_development_dependency "rake", "~> 13.3"
   spec.add_development_dependency "rspec", "~> 3.4"

data/lib/httpigeon/log_redactor.rb

@@ -48,15 +48,21 @@ module HTTPigeon
 
         if filter.present?
           replacement = filter.split('::')[1].presence
-          v = replacement.present? ? replacement : redact_value(v)
-        end
-
-        if v.is_a?(Hash)
-          [k, redact_hash(v)]
-        elsif v.is_a?(Array)
-          [k, v.map { |val| redact(val) }]
-        else
+          # Replace collections wholesale; partial redaction leaks bytes of
+          # nested secrets.
+          v = if replacement.present?
+                replacement
+              elsif v.is_a?(Hash) || v.is_a?(Array)
+                HTTPigeon.redactor_string
+              else
+                redact_value(v)
+              end
           [k, v]
+        else
+          # Recurse through the dispatcher so nested values redact like
+          # top-level ones. This runs content/regex filters over string
+          # values too (e.g. secrets in JSON bodies).
+          [k, redact(v)]
         end
       end
     end
@@ -67,13 +73,23 @@ module HTTPigeon
 
         next unless pattern.match?(%r{^/.*/([guysim]*)$})
 
+        regex = regex_for(pattern)
+
         data = if replacement.present?
-                 data.gsub(regex_for(pattern), replacement)
+                 # Block form keeps the replacement literal; the string form
+                 # expands backreferences (\1, \&) and re-emits the secret.
+                 data.gsub(regex) { replacement }
                else
-                 data.gsub(regex_for(pattern)) do |sub|
-                   captures = sub.match(regex_for(pattern))&.captures
-
-                   captures.present? ? captures[0] + redact_value(captures[1]) : sub
+                 data.gsub(regex) do |sub|
+                   captures = Regexp.last_match&.captures
+
+                   # A zero-width capture yields nil; skip it rather than
+                   # concatenating nil and raising TypeError.
+                   if captures.present? && !captures[1].nil?
+                     captures[0] + redact_value(captures[1])
+                   else
+                     sub
+                   end
                  end
                end
       end

data/lib/httpigeon/request.rb

@@ -84,12 +84,12 @@ module HTTPigeon
 
       raw_response = if HTTPigeon.mount_circuit_breaker
                        fuse.execute(request_id: connection.headers[REQUEST_ID_HEADER]) do
-                         connection.send(method, path, payload) do |request|
+                         connection.send(sym_method, path, payload) do |request|
                            yield(request) if block_given?
                          end
                        end
                      else
-                       connection.send(method, path, payload) do |request|
+                       connection.send(sym_method, path, payload) do |request|
                          yield(request) if block_given?
                        end
                      end

data/lib/httpigeon/version.rb

@@ -1,3 +1,3 @@
 module HTTPigeon
-  VERSION = "2.4.3".freeze
+  VERSION = "2.5.0".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: httpigeon
 version: !ruby/object:Gem::Version
-  version: 2.4.3
+  version: 2.5.0
 platform: ruby
 authors:
 - 2k-joker
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-05-01 00:00:00.000000000 Z
+date: 2026-11-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -28,16 +28,22 @@ dependencies:
   name: activesupport
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.2'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: 7.2.0
+        version: '8.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.2'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: 7.2.0
+        version: '8.2'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement