kms_encrypted 1.5.1 → 1.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b3cd6e5aed4d2b4abd0ea948b36a5d4d70e216f189dd24553329aefca77ada32
-  data.tar.gz: 9a54c6f72bcbc605d3a88ced3a1bd17b5b9a375824d22f61a9d47f98ff1595f9
+  metadata.gz: b4755c4aff4e6bf830d6adb1fb1e81588b5c862de45ab4c72c43f2b95e9c6917
+  data.tar.gz: dea7d38ed29b406a44f4e92d9a8059e1e517f6a36877718d7b7960a0aa4aedb2
 SHA512:
-  metadata.gz: 41d90475acb864ab2c59b7cb8afb0ef86e46baf20bcadfcbabffb1a12770883e02a7254926c5fa2eb83a2b6802a3d586b7c567e3a127e3ef3946616d37590a1a
-  data.tar.gz: b8e15761db942481f13768f112d3adc2154b6c3647e24c8155ebf2a3138104eaec0d8f36a95a6cfc117a7014cb5e1936b372dcfe0dea20ea5a621db1bf0ae48d
+  metadata.gz: e8c5e7b8f0cbd544bd00dc1a786c391943fb41fbcc4ed454711b240e7abd365004170ced0b7dfe5604d16852482b6a72472aac16f32dbe5c070f4a5d864fa5be
+  data.tar.gz: ff7e871de0c9ad6738a6d126991c38679916f17770d88c1132f5a6a3381db1e8db80f40c032cf00ea2b040692cdc64d29d45c08793e747a639ec939caf240b9e

data/CHANGELOG.md

@@ -1,3 +1,11 @@
+## 1.7.0 (2025-04-03)
+
+- Dropped support for Ruby < 3.2 and Rails < 7.1
+
+## 1.6.0 (2024-06-24)
+
+- Dropped support for Ruby < 3.1 and Rails < 6.1
+
 ## 1.5.1 (2023-09-05)
 
 - Fixed deprecation warning with Active Support 7.1

data/LICENSE.txt

@@ -1,4 +1,4 @@
-Copyright (c) 2017-2023 Andrew Kane
+Copyright (c) 2017-2025 Andrew Kane
 
 MIT License
 

data/README.md

@@ -14,7 +14,7 @@ Supports [AWS KMS](https://aws.amazon.com/kms/), [Google Cloud KMS](https://clou
 
 Check out [this post](https://ankane.org/sensitive-data-rails) for more info on securing sensitive data with Rails
 
-[![Build Status](https://github.com/ankane/kms_encrypted/workflows/build/badge.svg?branch=master)](https://github.com/ankane/kms_encrypted/actions)
+[![Build Status](https://github.com/ankane/kms_encrypted/actions/workflows/build.yml/badge.svg)](https://github.com/ankane/kms_encrypted/actions)
 
 ## How It Works
 
@@ -480,34 +480,6 @@ kms.decrypt(ciphertext, context: {model_name: "User", model_id: 123})
 
 To securely search encrypted data, check out [Blind Index](https://github.com/ankane/blind_index).
 
-## Upgrading
-
-### 1.0
-
-KMS Encrypted 1.0 brings a number of improvements. Here are a few breaking changes to be aware of:
-
-- There’s now a default encryption context with the model name and id
-- ActiveSupport notifications were changed from `generate_data_key` and `decrypt_data_key` to `encrypt` and `decrypt`
-- AWS KMS uses the `Encrypt` operation instead of `GenerateDataKey`
-
-If you didn’t previously use encryption context, add the `upgrade_context` option to your models:
-
-```ruby
-class User < ApplicationRecord
-  has_kms_key upgrade_context: true
-end
-```
-
-Then run:
-
-```ruby
-User.where("encrypted_kms_key NOT LIKE 'v1:%'").find_each do |user|
-  user.rotate_kms_key!
-end
-```
-
-And remove the `upgrade_context` option.
-
 ## History
 
 View the [changelog](CHANGELOG.md)

data/lib/kms_encrypted/model.rb

@@ -81,8 +81,12 @@ module KmsEncrypted
                 key = SecureRandom.random_bytes(32)
 
                 if eager_encrypt == :fetch_id
-                  raise ArgumentError, ":fetch_id only works with Postgres" unless self.class.connection.adapter_name =~ /postg/i
-                  self.id ||= self.class.connection.execute("select nextval('#{self.class.sequence_name}')").first["nextval"]
+                  unless self.class.connection_db_config.adapter.to_s.match?(/postg/i)
+                    raise ArgumentError, ":fetch_id only works with Postgres"
+                  end
+
+                  sequence_name = self.class.sequence_name
+                  self.id ||= self.class.connection_pool.with_connection { |c| c.execute("select nextval('#{sequence_name}')").first["nextval"] }
                 end
 
                 if eager_encrypt == true || ([:try, :fetch_id].include?(eager_encrypt) && id)

data/lib/kms_encrypted/version.rb

@@ -1,3 +1,3 @@
 module KmsEncrypted
-  VERSION = "1.5.1"
+  VERSION = "1.7.0"
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: kms_encrypted
 version: !ruby/object:Gem::Version
-  version: 1.5.1
+  version: 1.7.0
 platform: ruby
 authors:
 - Andrew Kane
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-09-05 00:00:00.000000000 Z
+date: 2025-04-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,15 +15,28 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '6'
+        version: '7.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '6'
-description:
+        version: '7.1'
+- !ruby/object:Gem::Dependency
+  name: base64
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 email: andrew@ankane.org
 executables: []
 extensions: []
@@ -49,7 +61,6 @@ homepage: https://github.com/ankane/kms_encrypted
 licenses:
 - MIT
 metadata: {}
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -57,15 +68,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '3'
+      version: '3.2'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
-signing_key:
+rubygems_version: 3.6.2
 specification_version: 4
 summary: Simple, secure key management for Lockbox and attr_encrypted
 test_files: []