keeper_secrets_manager 17.0.4 → 17.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ddbd2b3419194d82c9009195e55244eca8e4e1c26777f2ca15b2f90104e05175
-  data.tar.gz: c09ac60fc93608a86ee952c5b94db388a8f7f7e35e9084b1594e34a0d3a52b1d
+  metadata.gz: a75902de495889b3464731f65dc951d778b7b6cde7be9efd6360fde92da3d7e1
+  data.tar.gz: 0e181c7f3bb27e2e43c57bfaf6690ddd3f0b2ecc7791fb9b62d900c3392ba865
 SHA512:
-  metadata.gz: 996b709dde829319aaed4f95451daed5735aede678853d15e95b0532cb40983197bcf3530ea5d96e25236480b07e240b8fb3b2980c82c1189568f949814da85d
-  data.tar.gz: 3202157c12e07246de5a4a1d707804c2d4bf1edecdf4b24b1db1895c3f5adb2dbf08e7e92c1b0b4121d86f300ccad361405909e2db591241516cbc416cca3d8d
+  metadata.gz: 35d50e5905926f05914d111465835dbe7996dc1c2de12480b092f9acc0569faab6140bce76811c2c085c5b4ea8875dff5d5f196555de95bd3dafc8c578dba606
+  data.tar.gz: 5425415543c572dcc55029c83c2d37c17d471df72da10da1f4da32bed3661c74f3778e50db91bedad4d76a480c82eb8e2dfd0ef3cc4e249b6d1682c3f68dcfce

data/CHANGELOG.md

@@ -1,21 +1,42 @@
 # Changelog
 
-All notable changes to this project will be documented in this file.
+## [Unreleased]
 
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+### Fixed
+- `update_secret` now correctly encrypts record data before sending to server
+- `update_secret` now calls `finalize_secret_update` endpoint to persist changes
+- Local record's revision number is automatically refreshed after successful update
+- Consecutive updates on the same record object now work without manual refetching
+- `download_file` now properly respects SSL certificate verification settings and disables CRL checking
+- `upload_file` now uses correct `add_file` endpoint and includes required `ownerRecordRevision` in payload
+- `create_folder` now properly encrypts folder key with AES-CBC and sets correct parent_uid (nil for root-level folders)
+- Fixed AES-CBC encryption to not double-pad data (OpenSSL handles padding automatically)
+
+## [17.1.0] - 2025-01-06
+
+### Changed
+- **BREAKING**: Minimum Ruby version increased to 3.1.0 (from 2.6.0)
+    - Users on older Ruby versions should upgrade or pin to keeper_secrets_manager <= 17.0.4
+
+### Fixed
+- ECC key generation now correctly returns 32-byte raw private keys (was returning 121-byte DER format)
+- Client version now dynamically uses VERSION constant instead of hardcoded value
+- Fixed Tests
+
+## [17.0.4] - 2025-10-20
+
+### Changed
+- Maintenance release with internal improvements
 
 ## [17.0.3] - 2025-06-25
 
 ### Changed
 - Cleaned up directory structure
 - Removed development and debug files from distribution
-- Professional gem organization
 
 ## [17.0.2] - 2025-06-25
 
 ### Security
-- Removed hardcoded credentials from example files
 - Updated all examples to use environment variables or placeholders
 
 ## [17.0.1] - 2025-06-25
@@ -27,16 +48,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 - Initial release of Keeper Secrets Manager Ruby SDK
-- Full compatibility with Keeper Secrets Manager API
-- Dynamic record handling with JavaScript-style flexibility
-- Support for all field types (login, password, url, host, etc.)
-- File upload and download capabilities
-- Folder management and hierarchy operations
-- CRUD operations for records and folders
-- Multiple storage backends (file, in-memory, environment, caching)
-- Notation support for field access
-- TOTP support (optional, requires base32 gem)
-- Comprehensive error handling
 - Ruby 2.6+ compatibility
 
 ### Security

data/Gemfile

@@ -4,10 +4,10 @@ source 'https://rubygems.org'
 gemspec
 
 group :development, :test do
-  gem 'rspec', '~> 3.12'
   gem 'rake', '~> 13.0'
+  gem 'rspec', '~> 3.12'
+  gem 'rubocop', '~> 1.12.0'
   gem 'simplecov', '~> 0.22'
   gem 'webmock', '~> 3.18'
-  gem 'rubocop', '~> 1.12.0'
   gem 'yard', '~> 0.9'
-end
+end

data/README.md

@@ -4,7 +4,7 @@ The Ruby SDK for Keeper Secrets Manager provides a flexible, dynamic interface f
 
 ## Features
 
-- **Ruby 2.7+ Compatible**: Works with Chef, Puppet, and modern Ruby applications
+- **Ruby 3.1+ Compatible**: Works with Chef, Puppet, and modern Ruby applications
 - **Dynamic Record Handling**: JavaScript-style flexible records with no rigid class hierarchies
 - **Minimal Dependencies**: Uses only Ruby standard library (no external runtime dependencies)
 - **Comprehensive Crypto**: Full encryption/decryption support using OpenSSL

data/Rakefile

@@ -27,4 +27,4 @@ task :rubocop do
 end
 
 desc 'Run all quality checks'
-task ci: [:rubocop, :spec]
+task ci: %i[rubocop spec]

data/lib/keeper_secrets_manager/config_keys.rb

@@ -10,7 +10,7 @@ module KeeperSecretsManager
     KEY_APP_KEY                 = 'appKey'.freeze
     KEY_OWNER_PUBLIC_KEY        = 'appOwnerPublicKey'.freeze
     KEY_APP_UID                 = 'appUid'.freeze
-    
+
     # All valid keys
     ALL_KEYS = [
       KEY_URL,
@@ -24,4 +24,4 @@ module KeeperSecretsManager
       KEY_APP_UID
     ].freeze
   end
-end
+end