patch_retention 0.3.1 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9642c7116bc29f3cc1e9368c861ac11d13b2357ab778b4f9395fa2bb14c3edb3
-  data.tar.gz: 7dc040049c15f9b32eb83d06a986daa0da1c4c881d1dfd2553dc764d9fbba494
+  metadata.gz: a4e08ff07a6967ecf42cb39dc2996ac46076344f46ed37c546f8dc2f676da7bb
+  data.tar.gz: bc86913cf3b560d6eefe94fa722996b7d5442de0200d1060bb5607c1384ad492
 SHA512:
-  metadata.gz: cd6b62c587f1ad1ed68b579bfcd70403a916de81593248d4850664b4495dc2ff316d279b338952dfb332f038f1c3b63240907345544298becbf14fe749345806
-  data.tar.gz: 82fe4b41064b55979b281ad05e48459ae3230e04d91f32065ecab1bf030e337bc56b791a6786ba09fb6bee7b7ec75a808485b8f986713cb888543248278e43f0
+  metadata.gz: 931fdeb3e17af3b102cd5cf749530c1c3f8601e3ac9a33dd7e74af53618b0a5d95a68366ec694280052263d06d28f6e073efb11df3a3f1896df69a6dd86b0a20
+  data.tar.gz: 1a8e1c80c352bb5e936abe07f922e688e63559e4670d98c2e2e7273f91124e0a16317d946e82638066898a349bf17582c94832a7d5c4a70dddc7b46127bb4c2a

data/CHANGELOG.md

@@ -1,5 +1,20 @@
 ## [Unreleased]
 
+## [0.4.0] - 2025-12-30
+
+### Changed
+- **BREAKING**: Upgraded Faraday from 1.x to 2.x (`~> 2.7`)
+- Simplified HTTP request/response handling using Faraday 2.x JSON middleware
+- Refactored `util.rb` to handle pre-parsed JSON responses
+
+### Security
+- Fixed rexml security vulnerability (CVE-2025-58767) by requiring version >= 3.4.2
+
+## [0.3.2] - 2025-01-19
+
+### Added
+- Added `next_billing_at` field support to `Memberships.create` method for setting the next billing date
+
 ## [0.3.1] - 2025-09-04
 
 ### Added

data/Gemfile.lock

@@ -1,8 +1,8 @@
 PATH
   remote: .
   specs:
-    patch_retention (0.3.1)
-      faraday (~> 1.10)
+    patch_retention (0.4.0)
+      faraday (~> 2.7)
       zeitwerk (~> 2.6)
 
 GEM
@@ -23,34 +23,19 @@ GEM
       rexml
     diff-lcs (1.5.0)
     dotenv (2.8.1)
-    faraday (1.10.4)
-      faraday-em_http (~> 1.0)
-      faraday-em_synchrony (~> 1.0)
-      faraday-excon (~> 1.1)
-      faraday-httpclient (~> 1.0)
-      faraday-multipart (~> 1.0)
-      faraday-net_http (~> 1.0)
-      faraday-net_http_persistent (~> 1.0)
-      faraday-patron (~> 1.0)
-      faraday-rack (~> 1.0)
-      faraday-retry (~> 1.0)
-      ruby2_keywords (>= 0.0.4)
-    faraday-em_http (1.0.0)
-    faraday-em_synchrony (1.0.1)
-    faraday-excon (1.1.0)
-    faraday-httpclient (1.0.1)
-    faraday-multipart (1.1.1)
-      multipart-post (~> 2.0)
-    faraday-net_http (1.0.2)
-    faraday-net_http_persistent (1.2.0)
-    faraday-patron (1.0.0)
-    faraday-rack (1.0.0)
-    faraday-retry (1.0.3)
+    faraday (2.14.0)
+      faraday-net_http (>= 2.0, < 3.5)
+      json
+      logger
+    faraday-net_http (3.4.2)
+      net-http (~> 0.5)
     hashdiff (1.2.0)
     json (2.7.0)
     language_server-protocol (3.17.0.3)
+    logger (1.7.0)
     method_source (1.0.0)
-    multipart-post (2.4.1)
+    net-http (0.9.1)
+      uri (>= 0.11.1)
     parallel (1.23.0)
     parser (3.2.2.4)
       ast (~> 2.4.1)
@@ -63,7 +48,7 @@ GEM
     rainbow (3.1.1)
     rake (13.1.0)
     regexp_parser (2.8.2)
-    rexml (3.4.1)
+    rexml (3.4.4)
     rspec (3.12.0)
       rspec-core (~> 3.12.0)
       rspec-expectations (~> 3.12.0)
@@ -93,9 +78,9 @@ GEM
     rubocop-shopify (2.15.1)
       rubocop (~> 1.51)
     ruby-progressbar (1.13.0)
-    ruby2_keywords (0.0.5)
     thor (1.4.0)
     unicode-display_width (2.5.0)
+    uri (1.1.1)
     vcr (6.3.1)
       base64
     webmock (3.25.1)
@@ -115,7 +100,7 @@ DEPENDENCIES
   patch_retention!
   pry
   rake (~> 13.0)
-  rexml (>= 3.3.9)
+  rexml (>= 3.4.2)
   rspec (~> 3.0)
   rubocop (~> 1.21)
   rubocop-shopify (~> 2.15)

data/README.md

@@ -278,6 +278,7 @@ membership = PatchRetention::Memberships.create(
   product_id: "65de5xxxxxxxxxxxxx", # Required, ID of the product (e.g., from product creation)
   start_at: Time.now.xmlschema, # Optional, ISO8601 timestamp
   end_at: (Time.now + 30*24*60*60).xmlschema, # Optional, ISO8601 timestamp (e.g., 30 days from now)
+  next_billing_at: (Time.now + 7*24*60*60).xmlschema, # Optional, ISO8601 timestamp for next billing date
   external_id: "MEM123", # Optional
   data: {
     "is_trial" => true,

data/lib/patch_retention/calendar_items.rb

@@ -19,11 +19,10 @@ module PatchRetention
         payload[:tags] = tags if tags
 
         response = PatchRetention.connection(config).post("/v2/calendar_items") do |req|
-          req.body = payload.to_json
-          req.headers["Content-Type"] = "application/json"
+          req.body = payload
         end
 
-        JSON.parse(response.body)
+        response.body
       rescue Faraday::Error => e
         raise Error, "Failed to create calendar item: #{e.message}"
       end
@@ -40,11 +39,10 @@ module PatchRetention
         payload[:tags] = tags if tags
 
         response = PatchRetention.connection(config).patch("/v2/calendar_items/#{calendar_item_id}") do |req|
-          req.body = payload.to_json
-          req.headers["Content-Type"] = "application/json"
+          req.body = payload
         end
 
-        JSON.parse(response.body)
+        response.body
       rescue Faraday::Error => e
         raise Error, "Failed to update calendar item: #{e.message}"
       end
@@ -52,7 +50,7 @@ module PatchRetention
       def find(calendar_item_id:, config: nil)
         response = PatchRetention.connection(config).get("/v2/calendar_items/#{calendar_item_id}")
 
-        JSON.parse(response.body)
+        response.body
       rescue Faraday::Error => e
         raise Error, "Failed to find calendar item: #{e.message}"
       end
@@ -77,7 +75,7 @@ module PatchRetention
 
         response = PatchRetention.connection(config).get("/v2/calendar_items", params)
 
-        JSON.parse(response.body)
+        response.body
       rescue Faraday::Error => e
         raise Error, "Failed to retrieve calendar items: #{e.message}"
       end

data/lib/patch_retention/contacts/update.rb

@@ -7,7 +7,7 @@ module PatchRetention::Contacts::Update
   def call(id, contact_params, config = nil)
     raise_error_if_present do
       PatchRetention.connection(config).put("#{PatchRetention::Contacts::API_PATH}/#{id}") do |req|
-        req.body = contact_params.to_json
+        req.body = contact_params
       end
     end
   end

data/lib/patch_retention/memberships.rb

@@ -3,24 +3,24 @@
 module PatchRetention
   class Memberships
     class << self
-      def create(contact_id:, product_id:, start_at: nil, end_at: nil, external_id: nil, tags: nil, data: nil,
-        config: nil)
+      def create(contact_id:, product_id:, start_at: nil, end_at: nil, next_billing_at: nil, external_id: nil,
+        tags: nil, data: nil, config: nil)
         payload = {
           contact_id: contact_id,
           product_id: product_id,
         }
         payload[:start_at] = start_at if start_at
         payload[:end_at] = end_at if end_at
+        payload[:next_billing_at] = next_billing_at if next_billing_at
         payload[:external_id] = external_id if external_id
         payload[:tags] = tags if tags
         payload[:data] = data if data
 
         response = PatchRetention.connection(config).post("/v2/memberships") do |req|
-          req.body = payload.to_json
-          req.headers["Content-Type"] = "application/json"
+          req.body = payload
         end
 
-        JSON.parse(response.body)
+        response.body
       rescue Faraday::Error => e
         # You might want to handle different types of Faraday errors differently
         # or raise a custom error class
@@ -38,11 +38,10 @@ module PatchRetention
         payload[:status] = status if status
 
         response = PatchRetention.connection(config).patch("/v2/memberships/#{membership_id}") do |req|
-          req.body = payload.to_json
-          req.headers["Content-Type"] = "application/json"
+          req.body = payload
         end
 
-        JSON.parse(response.body)
+        response.body
       rescue Faraday::Error => e
         raise Error, "Failed to update membership: #{e.message}"
       end
@@ -50,7 +49,7 @@ module PatchRetention
       def find(membership_id:, config: nil)
         response = PatchRetention.connection(config).get("/v2/memberships/#{membership_id}")
 
-        JSON.parse(response.body)
+        response.body
       rescue Faraday::Error => e
         raise Error, "Failed to find membership: #{e.message}"
       end

data/lib/patch_retention/products.rb

@@ -17,11 +17,10 @@ module PatchRetention
         payload[:external_data] = external_data if external_data
 
         response = PatchRetention.connection(config).post("/v2/products") do |req|
-          req.body = payload.to_json
-          req.headers["Content-Type"] = "application/json"
+          req.body = payload
         end
 
-        JSON.parse(response.body)
+        response.body
       rescue Faraday::Error => e
         # You might want to handle different types of Faraday errors differently
         # or raise a custom error class
@@ -41,11 +40,10 @@ module PatchRetention
         payload[:external_data] = external_data if external_data
 
         response = PatchRetention.connection(config).patch("/v2/products/#{product_id}") do |req|
-          req.body = payload.to_json
-          req.headers["Content-Type"] = "application/json"
+          req.body = payload
         end
 
-        JSON.parse(response.body)
+        response.body
       rescue Faraday::Error => e
         raise Error, "Failed to update product: #{e.message}"
       end
@@ -53,7 +51,7 @@ module PatchRetention
       def find(product_id:, config: nil)
         response = PatchRetention.connection(config).get("/v2/products/#{product_id}")
 
-        JSON.parse(response.body)
+        response.body
       rescue Faraday::Error => e
         raise Error, "Failed to find product: #{e.message}"
       end

data/lib/patch_retention/util.rb

@@ -11,24 +11,23 @@ module PatchRetention
       response = yield
       raise PatchRetention::Error, parse_error_message(response) unless response.status.between?(200, 206)
 
-      begin
-        JSON.parse(response.body)
-      rescue JSON::ParserError
-        true
+      case response.body
+      when Hash, Array then response.body
+      else true
       end
     end
 
-    # Parses the error message from the response.
-    # Raises a PatchRetention::Error if the response status is 502 and the body is blank.
+    # Extracts error message from the response.
     # @param response [Object] The response to parse the error message from.
     # @return [String] The error message parsed from the response body.
     def parse_error_message(response)
-      if response.status == 502 && response.body.blank?
-        raise PatchRetention::Error,
-          "Internal Server Error: Patch API"
+      if response.body.is_a?(Hash) && response.body["error"]
+        response.body["error"]
+      elsif response.status == 502
+        "Internal Server Error: Patch API"
+      else
+        "Request failed with status #{response.status}"
       end
-
-      JSON.parse(response.body)["error"]
     end
   end
 end

data/lib/patch_retention/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PatchRetention
-  VERSION = "0.3.1"
+  VERSION = "0.4.0"
 end

data/lib/patch_retention.rb

@@ -37,6 +37,7 @@ module PatchRetention
         },
       ) do |builder|
         builder.request(:json)
+        builder.response(:json)
       end
     end
   end

data/patch_retention.gemspec

@@ -5,8 +5,8 @@ require_relative "lib/patch_retention/version"
 Gem::Specification.new do |spec|
   spec.name = "patch_retention"
   spec.version = PatchRetention::VERSION
-  spec.authors = ["Playbypoint", "Gerardo Ortega"]
-  spec.email = ["webmaster@playbypoint.com", "g3ortega@gmail.com"]
+  spec.authors = ["Playbypoint", "Gerardo Ortega", "Segundo Rebaza"]
+  spec.email = ["webmaster@playbypoint.com", "g3ortega@gmail.com", "alvaro.rp1593@gmail.com"]
 
   spec.summary = "Patch Retention API wrapper."
   spec.description = "Patch Retention API wrapper."
@@ -32,7 +32,7 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
 
   # Runtime dependencies
-  spec.add_dependency("faraday", "~> 1.10")
+  spec.add_dependency("faraday", "~> 2.7")
   spec.add_dependency("zeitwerk", "~> 2.6")
 
   # Development dependencies
@@ -50,7 +50,7 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency("webmock", "~> 3.0")
 
   # Security update for rexml
-  spec.add_development_dependency("rexml", ">= 3.3.9")
+  spec.add_development_dependency("rexml", ">= 3.4.2")
 
   # For more information and examples about making a new gem, check out our
   # guide at: https://bundler.io/guides/creating_gem.html

metadata

@@ -1,15 +1,16 @@
 --- !ruby/object:Gem::Specification
 name: patch_retention
 version: !ruby/object:Gem::Version
-  version: 0.3.1
+  version: 0.4.0
 platform: ruby
 authors:
 - Playbypoint
 - Gerardo Ortega
+- Segundo Rebaza
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-09-04 00:00:00.000000000 Z
+date: 2025-12-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -17,14 +18,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.10'
+        version: '2.7'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.10'
+        version: '2.7'
 - !ruby/object:Gem::Dependency
   name: zeitwerk
   requirement: !ruby/object:Gem::Requirement
@@ -213,18 +214,19 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.3.9
+        version: 3.4.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.3.9
+        version: 3.4.2
 description: Patch Retention API wrapper.
 email:
 - webmaster@playbypoint.com
 - g3ortega@gmail.com
+- alvaro.rp1593@gmail.com
 executables: []
 extensions: []
 extra_rdoc_files: []