libhoney 2.3.0 → 2.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3fded3aff49e82adca1103c69e01bfcf6c25096f381b35b8d4506de69743a03a
-  data.tar.gz: fda0eecd31f9c23d206ad5eb85bd9a46979f2489fa2b0f6872551c3b79e898df
+  metadata.gz: 5957d117bbef8260cb635436e196e4b2b66b0301809762843e3fbe81384c8fbe
+  data.tar.gz: 6c1b8644a2465eb4f69de5255610158e903f59204d208a741879d0ab8d66080b
 SHA512:
-  metadata.gz: a60d2c1de54c08e418cd2af91dd61d3656567cf6597c7e0ae7dbb812f4d94009d35f6de83f1c0f83cc0944034a40ee777483cc3aa9994a9c5893e42334d6df79
-  data.tar.gz: 1f2ab384a92d6125c69a93b8ef537b7ce80139b68e891ff22b1ad10f7c1f5ed754cb8bfd1df7359793b801bde2c0b7342a56ffc7c6f7ca6959e1180090d50700
+  metadata.gz: 90975e09691f61d5690d1e6546d0ff065b01eeaf34783c7c639f35965e9b684267af1851cfec712eff879c2b1830be92910de0e8becf732418060794f2178db0
+  data.tar.gz: b9841e88179d4d1d1d2650f63e0b1fb6b2cad72e53e319d2cbe65b9331150904bdb21df865318ab18b32571c9139cf79a96a645e552447a897b2e5d33967fcfe

data/CHANGELOG.md

@@ -1,3 +1,13 @@
+## [2.4.0] - 2024-07-26
+
+### Fixes
+
+- fix: omit events generated by the transmission of events (#141) | [ajvondrak](https://github.com/ajvondrak)
+
+### Maintenance
+
+- docs: update vulnerability reporting process (#142) | [robbkidd](https://github.com/robbkidd)
+
 ## [2.3.0] - 2024-03-07
 
 ### Enhancements

data/SECURITY.md

@@ -1,3 +1,26 @@
-# Reporting Security Issues
+# Security Policy
 
-If you discover a security vulnerability, please open an issue with label `type: security`.
+This security policy applies to public projects under the [honeycombio organization][gh-organization] on GitHub.
+For security reports involving the services provided at `(ui|ui-eu|api|api-eu).honeycomb.io`, refer to the [Honeycomb Bug Bounty Program][bugbounty] for scope, expectations, and reporting procedures.
+
+## Security/Bugfix Versions
+
+Security and bug fixes are generally provided only for the last minor version.
+Fixes are released either as part of the next minor version or as an on-demand patch version.
+
+Security fixes are given priority and might be enough to cause a new version to be released.
+
+## Reporting a Vulnerability
+
+We encourage responsible disclosure of security vulnerabilities.
+If you find something suspicious, we encourage and appreciate your report!
+
+### Ways to report
+
+In order for the vulnerability reports to reach maintainers as soon as possible, the preferred way is to use the "Report a vulnerability" button under the "Security" tab of the associated GitHub project.
+This creates a private communication channel between the reporter and the maintainers.
+
+If you are absolutely unable to or have strong reasons not to use GitHub's vulnerability reporting workflow, please reach out to the Honeycomb security team at [security@honeycomb.io](mailto:security@honeycomb.io).
+
+[gh-organization]: https://github.com/honeycombio
+[bugbounty]: https://www.honeycomb.io/bugbountyprogram

data/lib/libhoney/event.rb

@@ -121,7 +121,12 @@ module Libhoney
     #
     # @return [self] this event.
     def send_presampled
-      @libhoney.send_event(self)
+      if Thread.current[:libhoney_transmitting]
+        @libhoney.send_dropped_response(self, 'dropped event generated during transmission')
+      else
+        @libhoney.send_event(self)
+      end
+
       self
     end
   end

data/lib/libhoney/log_transmission.rb

@@ -19,6 +19,7 @@ module Libhoney
 
     # Prints an event
     def add(event)
+      Thread.current[:libhoney_transmitting] = true
       if @verbose
         metadata = "Honeycomb dataset '#{event.dataset}' | #{event.timestamp.iso8601}"
         metadata << " (sample rate: #{event.sample_rate})" if event.sample_rate != 1
@@ -27,6 +28,8 @@ module Libhoney
       clean_data(event.data).tap do |data|
         @output.puts(data.to_json)
       end
+    ensure
+      Thread.current[:libhoney_transmitting] = false
     end
 
     # Flushes the output (but does not close it)

data/lib/libhoney/mock_transmission.rb

@@ -16,7 +16,10 @@ module Libhoney
 
     # Records an event
     def add(event)
+      Thread.current[:libhoney_transmitting] = true
       @events.push(event)
+    ensure
+      Thread.current[:libhoney_transmitting] = false
     end
 
     # Does nothing.

data/lib/libhoney/transmission.rb

@@ -53,7 +53,8 @@ module Libhoney
       ensure_threads_running
     end
 
-    def send_loop
+    def send_loop # rubocop:disable Metrics/AbcSize
+      Thread.current[:libhoney_transmitting] = true
       http_clients = build_http_clients
 
       # eat events until we run out
@@ -106,6 +107,7 @@ module Libhoney
           nil
         end
       end
+      Thread.current[:libhoney_transmitting] = false
     end
 
     def close(drain)

data/lib/libhoney/version.rb

@@ -1,3 +1,3 @@
 module Libhoney
-  VERSION = '2.3.0'.freeze
+  VERSION = '2.4.0'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: libhoney
 version: !ruby/object:Gem::Version
-  version: 2.3.0
+  version: 2.4.0
 platform: ruby
 authors:
 - The Honeycomb.io Team
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2024-03-07 00:00:00.000000000 Z
+date: 2024-07-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bump
@@ -323,7 +323,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.19
+rubygems_version: 3.5.9
 signing_key: 
 specification_version: 4
 summary: send data to Honeycomb