metaclean 4.2.0 → 4.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8e4ebafb7621f428c5a0d0040c2487340e2dd22b32b831bf47c957027e4d0ca9
-  data.tar.gz: e9420536e480b319833996372e9d679285289e5afdfe3555466ff8167ebf5d7f
+  metadata.gz: c428b3f2958e89cf07a3cc42602ec6f4716cc30cd7d83ca248830f46884a38a6
+  data.tar.gz: b9e573fb8bf73fd0a593ad251d7f38109a38b4c45544774e3f7176d389968bc3
 SHA512:
-  metadata.gz: 6c9b8b897058f4b86d9691d53f80f1045d78f1783861048591f6910b92cfca25a1f0e7ee531a91d22144ebf294c1240a4dd46a465412cff7c1d3dcd85d421a4f
-  data.tar.gz: 5dcdfbd96dd879ddb8c6e86f2c48b29ac43672eb5636ea2fb5e2a3260cac0bf9bad7644bb594d05834e1267850d95034ff3b4780b5a54af9e60b6cc321ea47fd
+  metadata.gz: 38c1773439adfceb3903fa989494813995a84f023c7ac7effe9122d3c603896133635fa9c9ba900cdb65f47ee7efaeb28ede85e9543c74b54ea09efcd520fcad
+  data.tar.gz: 23a2d419fd75ee953188252b3ba0ea95e27e6f888fd5a26895e267117e77d6b8d9015220bb5d9f1bc58ed18b84d833e3e4c4a7889883601d333e06be4dce1613

data/README.md

@@ -1,6 +1,6 @@
 # metaclean
 
-```
+```text
 ███╗   ███╗███████╗████████╗ █████╗  ██████╗██╗     ███████╗ █████╗ ███╗   ██╗
 ████╗ ████║██╔════╝╚══██╔══╝██╔══██╗██╔════╝██║     ██╔════╝██╔══██╗████╗  ██║
 ██╔████╔██║█████╗     ██║   ███████║██║     ██║     █████╗  ███████║██╔██╗ ██║
@@ -253,6 +253,9 @@ git push origin vX.Y.Z
   unverified candidates all exit non-zero.
 - When stdout is redirected, metadata values are redacted by default. Use
   `--show-values` only when the destination log is trusted.
+- Warnings and errors are written to stderr, so privacy notes (surviving tags,
+  the `.bak` reminder) stay visible even when normal output is piped or sent
+  to a file.
 - External tool versions are recorded in CI and shown by `metaclean --version`.
   Keep OS packages updated; release tests exercise the supported Ruby range and
   capability-check qpdf/ffmpeg output rather than trusting version strings.

data/SECURITY.md

@@ -46,7 +46,10 @@ clean while such metadata survives is a security issue.
 
 A non-standard ICC profile (one whose description is not a recognized standard
 color space) blocks commit unless the user explicitly accepts its identifying
-fields with `--allow-icc-metadata`; standard color spaces clean without it.
+fields with `--allow-icc-metadata`; standard color spaces clean without it. This
+determination trusts the profile's own `ProfileDescription`: a profile whose
+description matches a recognized color space is treated as non-identifying, so
+its remaining ICC fields are not flagged.
 
 ## Supported versions
 

data/lib/metaclean/cli.rb

@@ -25,7 +25,6 @@ module Metaclean
 
     def run
       parse!
-      Display.configure(quiet: @options[:quiet], redact_values: @options[:redact_values])
       Metaclean.ensure_tools!(in_place: @options[:in_place])
       runner = Runner.new(@options)
       if @options[:inspect_only]
@@ -104,8 +103,8 @@ module Metaclean
 
         o.separator ''
         o.separator 'Other:'
-        o.on('-h', '--help')    { Display.banner; puts o; exit }
-        o.on('-v', '--version') do
+        o.on('-h', '--help', 'Show this help and exit') { Display.banner; puts o; exit }
+        o.on('-v', '--version', 'Show metaclean and tool versions, then exit') do
           Display.banner
           puts "metaclean #{Metaclean::VERSION}"
           puts "  exiftool: #{Display.printable(Exiftool.version || 'not found')}"

data/lib/metaclean/display.rb

@@ -43,10 +43,13 @@ module Metaclean
     def color?
       return @color if defined?(@color)
 
-      no_color = ENV['NO_COLOR'].to_s
-      @color = $stdout.tty? && no_color.empty?
-      @color = true if ENV['FORCE_COLOR']
-      @color
+      @color = if !ENV['NO_COLOR'].to_s.empty?
+                 false
+               elsif !ENV['FORCE_COLOR'].to_s.empty?
+                 true
+               else
+                 $stdout.tty?
+               end
     end
 
     def c(text, color)
@@ -73,7 +76,7 @@ module Metaclean
     def section(text); puts c("▸ #{text}",  :cyan) unless quiet?;  end
     def info(text);    puts c("  #{text}",  :gray) unless quiet?;  end
     def success(text); puts c("✓ #{text}",  :green) unless quiet?; end
-    def warning(text); puts c("⚠ #{text}",  :yellow);end
+    def warning(text); warn c("⚠ #{text}",  :yellow);end
 
     def error(text); c("✗ #{text}", :red); end
 

data/lib/metaclean/runner.rb

@@ -159,9 +159,12 @@ module Metaclean
       Display.warning "Privacy-relevant tags still present (#{residual.size}):"
       unless Display.quiet?
         residual.each do |key, value|
-          puts "    #{Display.c(key, :yellow)} = #{Display.truncate(Display.visible_value(value), 60)}"
+          warn "    #{Display.c(key, :yellow)} = #{Display.truncate(Display.visible_value(value), 60)}"
         end
       end
+      if residual.keys.all? { |key| key.to_s.start_with?('ICC') }
+        Display.warning 'Only ICC profile text remains — review it and pass --allow-icc-metadata to accept it.'
+      end
       residual
     end
 
@@ -296,7 +299,7 @@ module Metaclean
       if summary[:unsupported].positive?
         Display.warning "Unsupported (not cleaned): #{summary[:unsupported]} file(s)"
       end
-      puts Display.error("Failed:  #{summary[:failed]}") if summary[:failed].positive?
+      warn Display.error("Failed:  #{summary[:failed]}") if summary[:failed].positive?
       Display.info "Total embedded tags removed: #{summary[:removed_total]}"
       if summary[:residual_files].positive?
         Display.warning "Files with privacy residual: #{summary[:residual_files]}"

data/lib/metaclean/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Metaclean
-  VERSION = '4.2.0'
+  VERSION = '4.3.1'
 end

data/lib/metaclean.rb

@@ -118,7 +118,7 @@ module Metaclean
     missing << 'exiftool' unless Exiftool.available?
     missing << 'mat2'     unless Mat2.available?
     missing << 'qpdf'     unless Qpdf.available?
-    missing << 'ffmpeg'   unless Ffmpeg.available?
+    missing << 'ffmpeg (with ffprobe)' unless Ffmpeg.available?
     missing << 'cp with metadata preservation' if in_place && !FileOps.metadata_copy_supported?
     return if missing.empty?
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: metaclean
 version: !ruby/object:Gem::Version
-  version: 4.2.0
+  version: 4.3.1
 platform: ruby
 authors:
 - Laurent Zogaj
@@ -42,6 +42,7 @@ licenses:
 metadata:
   allowed_push_host: https://rubygems.org
   bug_tracker_uri: https://github.com/26zl/metaclean/issues
+  changelog_uri: https://github.com/26zl/metaclean/releases
   documentation_uri: https://github.com/26zl/metaclean#readme
   source_code_uri: https://github.com/26zl/metaclean
   rubygems_mfa_required: 'true'