nexus_semantic_logger 1.17.0 → 1.34.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3868c4fe94f7eca85f77a015f5cf2d8e9b6ed2ef97667de52ee2fc194999421b
-  data.tar.gz: dd16b36754be0d34c5b705a2771677d127984712ddf7adb01d960073204057e6
+  metadata.gz: 2fec2fab7ed4208841df5e24feb89f5492dcf7e7da927a66c213ba320f10d70c
+  data.tar.gz: 560a758d31cf9bf3d773f85f588c977ba74b5acfd18a417dc2ce7fbd50c3762f
 SHA512:
-  metadata.gz: 8ac8fd1cb30a5ff48caf5ab7e049c652507ba58e1596b60a79279934ceaf7e95c8e4d4cdebba8f65bdb0bab3e9830c9443cc9e09cd0d5fac7be53e631d75a1c1
-  data.tar.gz: ac48fb7f2a1bed19cc6d05ef22cd4c5e9d193cf4d02e700bf00f48d2df8ce2c44d9e2fca48c2a6c088b6fb0889d02b960af17fc8448cc70841cb092a597e4485
+  metadata.gz: 00c2dc1aa81205934c9ddc44e8a9c1135bc75f8a3191cb2d0b23c38af98ac2da1c311f034d54eb0f865a7b7237da1ec056658a4031300ed67e4e79e0700fd2c4
+  data.tar.gz: 54421ea76eb1c16ad584b4a547452bfa0ecb430ef37ccbcd15ada51f63a30c89f8e800bb6404a3c94fc830dcfe22277540a8fbf557c4a8d28c0d5038456c6d27

data/.gitignore

@@ -1,5 +1,3 @@
 .idea/
 .vscode/
 results/
-Gemfile.lock
-gemfiles/*.gemfile.lock

data/.gitlab-ci.yml

@@ -0,0 +1,36 @@
+image: "ruby:3.2.2"
+
+stages:
+  - release
+  - test
+
+before_script:
+  - gem install bundler --no-document
+  - bundle install --jobs $(nproc)  "${FLAGS[@]}"
+
+rspec:
+  script:
+    - bundle exec rspec
+
+rubocop:
+  script:
+    - bundle exec rubocop
+
+release:
+  stage: release
+  rules:
+    - if: '$CI_COMMIT_TAG'
+  script:
+    - mkdir -p ~/.gem
+    - cp $RUBYGEMS_CREDENTIALS ~/.gem/credentials
+    - chmod 0600 ~/.gem/credentials
+    - gem update --system
+    - ruby --version
+    - gem env version
+    - sed -i "s/0.0.0/$CI_COMMIT_TAG/g" lib/nexus_semantic_logger/version.rb
+    - gem build nexus_semantic_logger.gemspec
+    - gem push nexus_semantic_logger*.gem
+  artifacts:
+    paths:
+      - nexus_semantic_logger*.gem
+    expire_in: 30 days

data/Gemfile

@@ -3,7 +3,6 @@ source 'https://rubygems.org'
 
 gemspec
 
-gem 'appraisal'
 gem 'rubocop'
 gem 'rubocop-shopify', "~> 1.0.4", require: false
 

data/README.md

@@ -60,20 +60,6 @@ For example, to increment a count:
 NexusSemanticLogger.metrics.increment('nexus.users.registration.complete')
 ```
 
-### Running shell commands
-
-Use `NexusSemanticLogger.shell.capture3` as a drop-in replacement for `Open3.capture3`:
-
-```
-stdout, stderr, status = NexusSemanticLogger.shell.capture3('7z', 'x', archive_path)
-```
-
-Each call is wrapped in a Datadog APM span (`shell.exec`) and emits `nexus.shell.duration_ms`,
-`nexus.shell.peak_rss_mb` (the child's peak RSS, sampled from procfs) and `nexus.shell.executions`
-metrics tagged with `command:<binary>` and `outcome:<success|failure|signaled|exception>`, plus an
-info log line. A child killed by the kernel OOM killer shows up as `outcome:signaled` with
-`termsig: 9` and its last-observed peak RSS.
-
 # Local gem development
 
 Steps to run this gem from local sources in one the nexus 'staged build' rails components:

data/lib/nexus_semantic_logger/application.rb

@@ -46,7 +46,6 @@ module NexusSemanticLogger
       config.after_initialize do
         require("nexus_semantic_logger/extensions/action_dispatch/debug_exceptions") if defined?(
           ::ActionDispatch::DebugExceptions)
-        warn_on_incompatible_rails_semantic_logger
       end
     end
 
@@ -86,29 +85,5 @@ module NexusSemanticLogger
       # Ensure logging is immediately flushed.
       $stdout.sync = true
     end
-
-    # Rails 8.1 needs rails_semantic_logger 5.x and no gemspec can express that, so detect the
-    # broken pairing at boot.
-    def self.warn_on_incompatible_rails_semantic_logger
-      return unless incompatible_rails_semantic_logger?
-
-      logger.warn(
-        'rails_semantic_logger 4.x cannot log ActiveRecord events on this Rails version, every ' \
-        'sql.active_record event will log a NoMethodError instead of the query. Add ' \
-        '`gem "rails_semantic_logger", ">= 5.1"` to your Gemfile so bundler refuses this ' \
-        'pairing, then `bundle update rails_semantic_logger semantic_logger`.'
-      )
-    end
-
-    # Rails 8.1 moved ActiveRecord::RuntimeRegistry.sql_runtime onto a stats object, which
-    # rails_semantic_logger only handles from 5.0. Apps carrying their own shim restore
-    # sql_runtime and so read as compatible here.
-    def self.incompatible_rails_semantic_logger?
-      defined?(::ActiveRecord::RuntimeRegistry) &&
-        !::ActiveRecord::RuntimeRegistry.respond_to?(:sql_runtime) &&
-        Gem::Version.new(RailsSemanticLogger::VERSION) < Gem::Version.new('5.0')
-    end
-
-    private_class_method :warn_on_incompatible_rails_semantic_logger, :incompatible_rails_semantic_logger?
   end
 end

data/lib/nexus_semantic_logger/datadog_formatter.rb

@@ -22,6 +22,7 @@ module NexusSemanticLogger
       hash[:source] = :rails
       level = hash.delete(:level)
       hash[:status] = level
+      hash[:railsenv] = Rails.env
       hash[:service] = @service
       hash.delete(:application)
       hash.delete(:environment)

data/lib/nexus_semantic_logger/datadog_tracer.rb

@@ -18,6 +18,7 @@ module NexusSemanticLogger
           # Note that 'env' is NOT sent- that is set as the default on the agent e.g. staging, canary, production.
           # It does not necessarily align with the Rails env, and we do not want to double tag the env.
           global_tags = [
+            "railsenv:#{Rails.env}",
             "service:#{service}",
             "container_name:#{container_name}",
             "pod_name:#{pod_name}",
@@ -41,6 +42,7 @@ module NexusSemanticLogger
           # Trace tags API is Hash<String,String>, see https://www.rubydoc.info/gems/ddtrace/Datadog/Tracing
           # Should match the global tags, but as a Hash.
           c.tags = {
+            railsenv: Rails.env,
             service: service,
             container_name: container_name,
             pod_name: pod_name,
@@ -56,7 +58,7 @@ module NexusSemanticLogger
           c.profiling.enabled = dd_tracer_enabled
         end
 
-        c.tracing.instrument(:rails, service_name: service, request_queuing: true, web_service_name: service)
+        c.tracing.instrument(:rails, service_name: service)
 
         c.logger.level = Logger::WARN # datadog info logging is too verbose.
       end

data/lib/nexus_semantic_logger/extensions/action_dispatch/debug_exceptions.rb

@@ -14,19 +14,8 @@ module ActionDispatch
       # log_rescued_responses? is a rails7 feature, but this gem is also used on rails6. Check for its existence.
       return if respond_to?('log_rescued_responses?') && !log_rescued_responses?(request) && wrapper.rescue_response?
 
-      # Silence deprecations emitted while logging the exception. The API changed in Rails 7.1: the
-      # ActiveSupport::Deprecation singleton was deprecated and its class-level `silence` was removed in 7.2,
-      # replaced by Rails.application.deprecators. Calling the removed singleton on >= 7.2 raises NoMethodError
-      # inside render_exception (before the exception is logged), which swallowed all exception logging and
-      # produced empty 500s. Use whichever API the Rails version provides, mirroring rails_semantic_logger.
-      if (Rails::VERSION::MAJOR == 7 && Rails::VERSION::MINOR >= 1) || Rails::VERSION::MAJOR > 7
-        Rails.application.deprecators.silence do
-          ActionController::Base.logger.fatal(wrapper.exception)
-        end
-      else
-        ActiveSupport::Deprecation.silence do
-          ActionController::Base.logger.fatal(wrapper.exception)
-        end
+      ActiveSupport::Deprecation.silence do
+        ActionController::Base.logger.fatal(wrapper.exception)
       end
     end
   end

data/lib/nexus_semantic_logger/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 module NexusSemanticLogger
-  # Leave this as 1.17.0 in order for CI process to replace with the tagged version.
-  VERSION = '1.17.0'
+  # Leave this as 1.34.4 in order for CI process to replace with the tagged version.
+  VERSION = '1.34.4'
 end

data/lib/nexus_semantic_logger.rb

@@ -5,18 +5,12 @@ require 'nexus_semantic_logger/datadog_formatter'
 require 'nexus_semantic_logger/datadog_singleton'
 require 'nexus_semantic_logger/datadog_tracer'
 require 'nexus_semantic_logger/logger_metrics_subscriber'
-require 'nexus_semantic_logger/traced_shell'
 
 module NexusSemanticLogger
   # Get application wide object for sending metrics.
   def self.metrics
     DatadogSingleton.instance
   end
-
-  # Get application wide object for running instrumented shell commands.
-  def self.shell
-    @shell ||= TracedShell.new
-  end
 end
 
 # Patch access to LEVELS array.

data/nexus_semantic_logger.gemspec

@@ -14,14 +14,11 @@ Gem::Specification.new do |spec|
   end
   spec.require_paths = ['lib']
   spec.add_dependency('amazing_print', '~> 1.4.0')
-  spec.add_dependency('datadog', '~> 2.24') # For datadog tracing/profiling.
-  spec.add_dependency('dogstatsd-ruby', '~> 5.7') # For custom application metrics.
-  spec.add_dependency('google-protobuf', '>= 3.25.5') # 3.25.x doesn't support ruby >= 3.4; allow 4.x too.
+  spec.add_dependency('datadog', '~> 2.7.0') # For datadog tracing/profiling.
+  spec.add_dependency('dogstatsd-ruby', '~> 5.6.1') # For custom application metrics.
+  spec.add_dependency('google-protobuf', '~> 3.25.5')
   spec.add_dependency('net_tcp_client', '~> 2.2.0') # For TCP logging.
-  # Widened so bundler can resolve per app. Rails 8.1 needs rails_semantic_logger >= 5.1 (no 4.x
-  # release supports it), and 5.x requires railties >= 7.2 plus semantic_logger >= 5.1, so apps on
-  # Rails 7.1 still resolve 4.x and newer apps take 5.x.
-  spec.add_dependency('rails_semantic_logger', '>= 4.17', '< 6')
-  spec.add_dependency('semantic_logger', '>= 4.16.1', '< 6')
+  spec.add_dependency('rails_semantic_logger', '~> 4.17.0')
+  spec.add_dependency('semantic_logger', '<= 4.16.0')
   spec.required_ruby_version = Gem::Requirement.new('>= 2.7.0')
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: nexus_semantic_logger
 version: !ruby/object:Gem::Version
-  version: 1.17.0
+  version: 1.34.4
 platform: ruby
 authors:
 - Johnathon Harris
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-07-29 00:00:00.000000000 Z
+date: 2024-12-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: amazing_print
@@ -30,40 +30,40 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.24'
+        version: 2.7.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.24'
+        version: 2.7.0
 - !ruby/object:Gem::Dependency
   name: dogstatsd-ruby
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '5.7'
+        version: 5.6.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '5.7'
+        version: 5.6.1
 - !ruby/object:Gem::Dependency
   name: google-protobuf
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 3.25.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 3.25.5
 - !ruby/object:Gem::Dependency
@@ -84,59 +84,41 @@ dependencies:
   name: rails_semantic_logger
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '4.17'
-    - - "<"
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '6'
+        version: 4.17.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '4.17'
-    - - "<"
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '6'
+        version: 4.17.0
 - !ruby/object:Gem::Dependency
   name: semantic_logger
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "<="
       - !ruby/object:Gem::Version
-        version: 4.16.1
-    - - "<"
-      - !ruby/object:Gem::Version
-        version: '6'
+        version: 4.16.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 4.16.1
-    - - "<"
+    - - "<="
       - !ruby/object:Gem::Version
-        version: '6'
+        version: 4.16.0
 description:
 email: john.harris@nexusmods.com
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".github/workflows/ci.yml"
 - ".gitignore"
-- ".rspec"
+- ".gitlab-ci.yml"
 - ".rubocop.yml"
-- Appraisals
 - Gemfile
 - README.md
-- gemfiles/rails_7_1.gemfile
-- gemfiles/rails_7_2.gemfile
-- gemfiles/rails_8_0.gemfile
-- gemfiles/rails_8_1.gemfile
 - lib/nexus_semantic_logger.rb
 - lib/nexus_semantic_logger/appender_filter.rb
 - lib/nexus_semantic_logger/application.rb
@@ -146,12 +128,10 @@ files:
 - lib/nexus_semantic_logger/extensions/action_dispatch/debug_exceptions.rb
 - lib/nexus_semantic_logger/logger_metrics_subscriber.rb
 - lib/nexus_semantic_logger/sneakers_metrics.rb
-- lib/nexus_semantic_logger/traced_shell.rb
 - lib/nexus_semantic_logger/version.rb
 - lib/puma/plugin/README.md
 - lib/puma/plugin/nexus_puma_statsd.rb
 - nexus_semantic_logger.gemspec
-- renovate.json
 homepage:
 licenses: []
 metadata: {}
@@ -170,7 +150,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
+rubygems_version: 3.5.23
 signing_key:
 specification_version: 4
 summary: semantic_logger usage for nexus

data/.github/workflows/ci.yml

@@ -1,52 +0,0 @@
-name: CI
-
-on:
-  push:
-    branches: [main]
-    tags: ["*"]
-  pull_request:
-
-jobs:
-  rspec:
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        gemfile: [rails_7_1, rails_7_2, rails_8_0, rails_8_1]
-    env:
-      BUNDLE_GEMFILE: gemfiles/${{ matrix.gemfile }}.gemfile
-    steps:
-      - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: "3.2.2"
-      - run: bundle install --jobs 4
-      - run: bundle exec rspec
-
-  rubocop:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: "3.2.2"
-      - run: bundle install --jobs 4
-      - run: bundle exec rubocop
-
-  release:
-    needs: [rspec, rubocop]
-    if: startsWith(github.ref, 'refs/tags/')
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: "3.2.2"
-      - run: bundle install --jobs 4
-      - name: Build and push gem to RubyGems
-        env:
-          GEM_HOST_API_KEY: ${{ secrets.RUBYGEMS_API_KEY }}
-        run: |
-          sed -i "s/0.0.0/${GITHUB_REF_NAME}/g" lib/nexus_semantic_logger/version.rb
-          gem build nexus_semantic_logger.gemspec
-          gem push nexus_semantic_logger-*.gem

data/.rspec

@@ -1,2 +0,0 @@
---require spec_helper
---format documentation

data/Appraisals

@@ -1,20 +0,0 @@
-# frozen_string_literal: true
-
-appraise "rails-7-1" do
-  gem "railties", "~> 7.1.0"
-end
-
-appraise "rails-7-2" do
-  gem "railties", "~> 7.2.0"
-end
-
-appraise "rails-8-0" do
-  gem "railties", "~> 8.0.0"
-end
-
-appraise "rails-8-1" do
-  gem "railties", "~> 8.1.0"
-  # No 4.x release of rails_semantic_logger works on Rails 8.1, and bundler will not upgrade past
-  # 4.x on its own when an older lockfile exists.
-  gem "rails_semantic_logger", "~> 5.1"
-end

data/gemfiles/rails_7_1.gemfile

@@ -1,11 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "appraisal"
-gem "rubocop"
-gem "rubocop-shopify", "~> 1.0.4", require: false
-gem "rspec"
-gem "railties", "~> 7.1.0"
-
-gemspec path: "../"

data/gemfiles/rails_7_2.gemfile

@@ -1,11 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "appraisal"
-gem "rubocop"
-gem "rubocop-shopify", "~> 1.0.4", require: false
-gem "rspec"
-gem "railties", "~> 7.2.0"
-
-gemspec path: "../"

data/gemfiles/rails_8_0.gemfile

@@ -1,11 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "appraisal"
-gem "rubocop"
-gem "rubocop-shopify", "~> 1.0.4", require: false
-gem "rspec"
-gem "railties", "~> 8.0.0"
-
-gemspec path: "../"

data/gemfiles/rails_8_1.gemfile

@@ -1,12 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "appraisal"
-gem "rubocop"
-gem "rubocop-shopify", "~> 1.0.4", require: false
-gem "rspec"
-gem "railties", "~> 8.1.0"
-gem "rails_semantic_logger", "~> 5.1"
-
-gemspec path: "../"

data/lib/nexus_semantic_logger/traced_shell.rb

@@ -1,163 +0,0 @@
-# frozen_string_literal: true
-require 'open3'
-require 'semantic_logger'
-
-module NexusSemanticLogger
-  # Instrumented replacement for Open3.capture3, so child processes (7z, unrar, yara, ...) are
-  # observable. Each call produces:
-  #   - a Datadog APM span ('shell.exec', resource = binary basename) tagged with the command line,
-  #     exit status, terminating signal and peak RSS
-  #   - statsd metrics: nexus.shell.duration_ms (timing), nexus.shell.peak_rss_mb (distribution)
-  #     and nexus.shell.executions (count), tagged with command:<binary> and
-  #     outcome:<success|failure|signaled|exception>
-  #   - an info log line with the same payload
-  #
-  # Peak RSS is the child's kernel-maintained high-water mark (VmHWM in /proc/<pid>/status),
-  # sampled while the child runs. Linux only; nil elsewhere. Direct child only - grandchildren
-  # are not measured. A process killed by the kernel OOM killer reports outcome:signaled with
-  # termsig 9 and the last-sampled peak RSS, which is exactly the evidence an OOM postmortem needs.
-  class TracedShell
-    include SemanticLogger::Loggable
-
-    SPAN_NAME = 'shell.exec'
-    METRIC_PREFIX = 'nexus.shell'
-    RSS_POLL_INTERVAL_SECONDS = 0.05
-    COMMAND_LOG_MAX_CHARS = 500
-
-    # Drop-in replacement for Open3.capture3.
-    # A leading env Hash and trailing spawn options are supported as with Open3; the env Hash is
-    # excluded from spans/logs since it may hold secrets.
-    # @return [Array(String, String, Process::Status)] stdout, stderr, status.
-    def capture3(*cmd, stdin_data: '', binmode: false, **opts)
-      binary = command_basename(cmd)
-      started_at = Process.clock_gettime(Process::CLOCK_MONOTONIC)
-      outcome = 'exception'
-      status = nil
-      peak_rss_kb = nil
-      trace(binary, cmd) do |span|
-        stdout, stderr, status, peak_rss_kb = run_capture3(cmd, stdin_data, binmode, opts)
-        outcome = outcome_for(status)
-        annotate_span(span, status, peak_rss_kb)
-        [stdout, stderr, status]
-      end
-    ensure
-      duration_ms = ((Process.clock_gettime(Process::CLOCK_MONOTONIC) - started_at) * 1000).round
-      record(cmd, outcome, duration_ms, status, peak_rss_kb)
-    end
-
-    private
-
-    def trace(binary, cmd, &block)
-      return yield(nil) unless defined?(Datadog::Tracing)
-
-      Datadog::Tracing.trace(SPAN_NAME, resource: binary, type: 'system') do |span|
-        span.set_tag('shell.command', command_string(cmd))
-        block.call(span)
-      end
-    end
-
-    # Open3.capture3 semantics, reimplemented over popen3 so the child pid is available to the
-    # RSS poller while it runs.
-    def run_capture3(cmd, stdin_data, binmode, opts)
-      Open3.popen3(*cmd, **opts) do |stdin, stdout, stderr, wait_thr|
-        if binmode
-          stdin.binmode
-          stdout.binmode
-          stderr.binmode
-        end
-        poller = start_rss_poller(wait_thr)
-        out_reader = Thread.new { stdout.read }
-        err_reader = Thread.new { stderr.read }
-        begin
-          stdin.write(stdin_data) if stdin_data && !stdin_data.empty?
-        rescue Errno::EPIPE
-          # Child exited without consuming stdin; Open3.capture3 ignores this too.
-        end
-        stdin.close
-        status = wait_thr.value
-        [out_reader.value, err_reader.value, status, poller&.value]
-      end
-    end
-
-    def start_rss_poller(wait_thr)
-      return nil unless procfs?
-
-      pid = wait_thr.pid
-      Thread.new do
-        peak_kb = nil
-        while wait_thr.alive?
-          sample = read_vm_hwm_kb(pid)
-          peak_kb = sample if sample && (peak_kb.nil? || sample > peak_kb)
-          sleep(RSS_POLL_INTERVAL_SECONDS)
-        end
-        peak_kb
-      end
-    end
-
-    # VmHWM is the process's peak RSS as maintained by the kernel, so each sample is itself a
-    # high-water mark; the true peak can only be missed by the process exiting within one poll.
-    def read_vm_hwm_kb(pid)
-      File.read("/proc/#{pid}/status")[/^VmHWM:\s*(\d+)\s*kB/, 1]&.to_i
-    rescue SystemCallError, IOError
-      nil
-    end
-
-    def procfs?
-      return @procfs if defined?(@procfs)
-
-      @procfs = File.exist?('/proc/self/status')
-    end
-
-    def outcome_for(status)
-      return 'success' if status.success?
-      return 'signaled' if status.signaled?
-
-      'failure'
-    end
-
-    def annotate_span(span, status, peak_rss_kb)
-      return unless span
-
-      span.set_tag('shell.exit_status', status.exitstatus) if status.exitstatus
-      span.set_tag('shell.termsig', status.termsig) if status.signaled?
-      span.set_tag('shell.peak_rss_mb', to_mb(peak_rss_kb)) if peak_rss_kb
-    end
-
-    def record(cmd, outcome, duration_ms, status, peak_rss_kb)
-      tags = ["command:#{command_basename(cmd)}", "outcome:#{outcome}"]
-      metrics = NexusSemanticLogger.metrics
-      metrics.timing("#{METRIC_PREFIX}.duration_ms", duration_ms, tags: tags)
-      metrics.increment("#{METRIC_PREFIX}.executions", tags: tags)
-      peak_rss_mb = peak_rss_kb && to_mb(peak_rss_kb)
-      metrics.distribution("#{METRIC_PREFIX}.peak_rss_mb", peak_rss_mb, tags: tags) if peak_rss_mb
-
-      payload = {
-        command: command_string(cmd),
-        outcome: outcome,
-        duration_ms: duration_ms,
-        exit_status: status&.exitstatus,
-        termsig: status&.signaled? ? status.termsig : nil,
-        peak_rss_mb: peak_rss_mb,
-      }.compact
-      logger.info('Shell command finished.', payload)
-    end
-
-    # Binary basename for span resource and metric tags; deliberately low cardinality.
-    def command_basename(cmd)
-      first = cmd.first.is_a?(Hash) ? cmd[1] : cmd.first
-      first = first.first if first.is_a?(Array) # [binary, argv0] form
-      return 'unknown' unless first.is_a?(String)
-
-      File.basename(first.split(' ').first.to_s)
-    end
-
-    def command_string(cmd)
-      parts = cmd.reject { |part| part.is_a?(Hash) }
-      parts.flatten.join(' ').slice(0, COMMAND_LOG_MAX_CHARS)
-    end
-
-    def to_mb(kb)
-      kb.fdiv(1024).round(1)
-    end
-  end
-end

data/renovate.json

@@ -1,20 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:recommended"
-  ],
-  "vulnerabilityAlerts": {
-    "dependencyDashboardApproval": false,
-    "labels": ["security"]
-  },
-  "osvVulnerabilityAlerts": true,
-  "reviewers": ["team:platform-engineering"],
-  "assignees": ["team:platform-engineering"],
-  "packageRules": [
-    {
-      "matchManagers": ["github-actions"],
-      "groupName": "GitHub Actions",
-      "dependencyDashboardApproval": false
-    }
-  ]
-}