paymos 1.5.2 → 1.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 282678405698ca18531bb7b76da1926623c28453e9ab380a0315842766ca639a
-  data.tar.gz: a7ff8402c3967ce7b56de24d990130e615b13e5aacad93ef5750917184a0d5a9
+  metadata.gz: 5e0c80046042c2f9d6412a4634125c0a4394e9aab174d20d6b6a26fe60517e76
+  data.tar.gz: 52280f1bd972bf101b857e697addf3d1c115c09e87ae2287fdfc506c83606e09
 SHA512:
-  metadata.gz: 608a21f234c78e20514dae73d8fa2e685c8a50160743b23dc9a82d4c580f8ed4bce221eb6eefddc104844165f4e5f61776f220abfc940bad72121e179cb7a02c
-  data.tar.gz: 397e8461b1ccf44093b66042319346da16900d5b141d70353551cfe67d956693647b06718c75c7faba76db5cd595bd8d1c45ecaa242ab11940836c5d64aa0ec3
+  metadata.gz: 2a205a28f143426bbbedcafe4240751448d4161d60d7f30650570567a4e5eebf7232a4c0e313ad88853bcaa7e49a4170ddfafe3f0f4ad7e41d6946882e052531
+  data.tar.gz: ce658911f58df1d6b5f30bdb4f9c4c5894118019e57604b94d29ea759f3b9e2e568ddf0265b818eb33c91e1da05d0cd848fca5afe1e545c27ce3172767c3271d

data/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 ## [Unreleased]
 
+## [1.6.0] - 2026-11-03
+
+- fix(sdk): resolve preflight lint and conformance vector count for autorelease
+- feat(refunds): finalize clean merchant refunds spec, SDKs, CMS plugins, and targeted test scripts
+
+- **403 is no longer reported as an authentication failure.** `Paymos::PermissionError` (subclasses `Paymos::AuthenticationError`, so existing `rescue` blocks keep working) now carries every 403.
+- **Base URL must use HTTPS.** Plain HTTP is accepted only against a loopback host, which is what a local integration test points at. The API secret signs every request, so a plaintext base URL put that credential on the wire.
+
 ## [1.5.2] - 2026-11-02
 
 - wip: snapshot shared working tree before merging main

data/lib/paymos/client.rb

@@ -37,7 +37,6 @@ module Paymos
       @timeout = timeout
       @max_retries = max_retries
       @base_delay = base_delay
-      @refund_transport_is_default = !transport
       @transport = transport || method(:default_transport)
       @clock = clock
       @sleeper = sleeper
@@ -53,7 +52,6 @@ module Paymos
 
     def request(method, path, payload: nil, query: '')
       method = method.to_s.upcase
-      refund_transport = checked_refund_transport(method, path)
       body = payload.nil? ? '' : JSON.generate(payload)
       attempts = 0
 
@@ -67,9 +65,7 @@ module Paymos
             'Accept' => 'application/json',
             'User-Agent' => "paymos-ruby/#{VERSION}"
           }
-          response = (refund_transport || @transport).call(
-            method, "#{@base_url}#{path}#{query}", headers, body.empty? ? nil : body, @timeout
-          )
+          response = @transport.call(method, "#{@base_url}#{path}#{query}", headers, body.empty? ? nil : body, @timeout)
         rescue IOError, SystemCallError, Timeout::Error, SocketError => e
           if attempts < @max_retries && SAFE_METHODS.include?(method)
             wait(attempts, nil)
@@ -83,7 +79,7 @@ module Paymos
           raise Error, 'Paymos transport returned an invalid response'
         end
 
-        if attempts < @max_retries && retryable_request?(method, path, response.status)
+        if attempts < @max_retries && retryable?(method, response.status)
           wait(attempts, header(response.headers, 'retry-after'))
           attempts += 1
           next
@@ -140,24 +136,6 @@ module Paymos
                    headers: response.to_hash.transform_values(&:first))
     end
 
-    def refund_create?(method, path)
-      method == 'POST' && path == '/v1/refunds'
-    end
-
-    def checked_refund_transport(method, path)
-      return nil unless refund_create?(method, path)
-
-      transport = @transport
-      trusted = Paymos::Client.instance_method(:default_transport).bind(self)
-      return transport if @refund_transport_is_default && trusted == transport
-
-      raise ConfigurationError, 'Refund creation requires the standard Net::HTTP transport'
-    end
-
-    def retryable_request?(method, path, status)
-      !refund_create?(method, path) && retryable?(method, status)
-    end
-
     def retryable?(method, status)
       status == 429 || (status >= 500 && SAFE_METHODS.include?(method))
     end

data/lib/paymos/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Paymos
-  VERSION = '1.5.2'
+  VERSION = '1.6.0'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: paymos
 version: !ruby/object:Gem::Version
-  version: 1.5.2
+  version: 1.6.0
 platform: ruby
 authors:
 - Paymos Labs