pundit 2.5.0 → 2.5.1

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pundit
 version: !ruby/object:Gem::Version
-  version: 2.5.0
+  version: 2.5.1
 platform: ruby
 authors:
 - Jonas Nicklas
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-03-03 00:00:00.000000000 Z
+date: 2025-09-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -33,25 +33,10 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".github/ISSUE_TEMPLATE/bug_report.md"
-- ".github/ISSUE_TEMPLATE/feature_request.md"
-- ".github/PULL_REQUEST_TEMPLATE/gem_release_template.md"
-- ".github/pull_request_template.md"
-- ".github/workflows/main.yml"
-- ".github/workflows/push_gem.yml"
-- ".gitignore"
-- ".rubocop.yml"
-- ".rubocop_ignore_git.yml"
-- ".yardopts"
 - CHANGELOG.md
-- CODE_OF_CONDUCT.md
-- CONTRIBUTING.md
-- Gemfile
 - LICENSE.txt
 - README.md
-- Rakefile
 - SECURITY.md
-- config/rubocop-rspec.yml
 - lib/generators/pundit/install/USAGE
 - lib/generators/pundit/install/install_generator.rb
 - lib/generators/pundit/install/templates/application_policy.rb.tt
@@ -68,61 +53,12 @@ files:
 - lib/pundit/cache_store/legacy_store.rb
 - lib/pundit/cache_store/null_store.rb
 - lib/pundit/context.rb
+- lib/pundit/error.rb
+- lib/pundit/helper.rb
 - lib/pundit/policy_finder.rb
 - lib/pundit/railtie.rb
 - lib/pundit/rspec.rb
 - lib/pundit/version.rb
-- pundit.gemspec
-- spec/authorization_spec.rb
-- spec/generators_spec.rb
-- spec/policies/post_policy_spec.rb
-- spec/policy_finder_spec.rb
-- spec/pundit/helper_spec.rb
-- spec/pundit_spec.rb
-- spec/rspec_dsl_spec.rb
-- spec/simple_cov_check_action_formatter.rb
-- spec/spec_helper.rb
-- spec/support/lib/controller.rb
-- spec/support/lib/custom_cache.rb
-- spec/support/lib/instance_tracking.rb
-- spec/support/models/article.rb
-- spec/support/models/article_tag.rb
-- spec/support/models/artificial_blog.rb
-- spec/support/models/blog.rb
-- spec/support/models/comment.rb
-- spec/support/models/comment_four_five_six.rb
-- spec/support/models/comment_scope.rb
-- spec/support/models/comments_relation.rb
-- spec/support/models/customer/post.rb
-- spec/support/models/default_scope_contains_error.rb
-- spec/support/models/dummy_current_user.rb
-- spec/support/models/foo.rb
-- spec/support/models/post.rb
-- spec/support/models/post_four_five_six.rb
-- spec/support/models/project_one_two_three/avatar_four_five_six.rb
-- spec/support/models/project_one_two_three/tag_four_five_six.rb
-- spec/support/models/wiki.rb
-- spec/support/policies/article_tag_other_name_policy.rb
-- spec/support/policies/base_policy.rb
-- spec/support/policies/blog_policy.rb
-- spec/support/policies/comment_policy.rb
-- spec/support/policies/criteria_policy.rb
-- spec/support/policies/default_scope_contains_error_policy.rb
-- spec/support/policies/denier_policy.rb
-- spec/support/policies/dummy_current_user_policy.rb
-- spec/support/policies/nil_class_policy.rb
-- spec/support/policies/post_policy.rb
-- spec/support/policies/project/admin/comment_policy.rb
-- spec/support/policies/project/comment_policy.rb
-- spec/support/policies/project/criteria_policy.rb
-- spec/support/policies/project/post_policy.rb
-- spec/support/policies/project_one_two_three/avatar_four_five_six_policy.rb
-- spec/support/policies/project_one_two_three/comment_four_five_six_policy.rb
-- spec/support/policies/project_one_two_three/criteria_four_five_six_policy.rb
-- spec/support/policies/project_one_two_three/post_four_five_six_policy.rb
-- spec/support/policies/project_one_two_three/tag_four_five_six_policy.rb
-- spec/support/policies/publication_policy.rb
-- spec/support/policies/wiki_policy.rb
 homepage: https://github.com/varvet/pundit
 licenses:
 - MIT

data/.github/ISSUE_TEMPLATE/bug_report.md

@@ -1,20 +0,0 @@
----
-name: Bug report
-about: Create a bug report to report a problem
-title: ''
-labels: problem
-assignees: ''
-
----
-
-**Describe the bug**
-A clear and concise description of what the bug is.
-
-**To Reproduce**
-Steps or runnable code to reproduce the problem.
-
-**Expected behavior**
-A clear and concise description of what you expected to happen.
-
-**Additional context**
-Add any other context about the problem here.

data/.github/ISSUE_TEMPLATE/feature_request.md

@@ -1,26 +0,0 @@
----
-name: Feature request
-about: Suggest an idea
-title: ''
-labels: ['feature request']
-assignees: ''
----
-
-**Please consider**
-- Could this feature break backwards-compatibility?
-- Could this feature benefit the many who use Pundit?
-- Could this feature be useful in _most_ projects that use Pundit?
-- Would this feature require Rails?
-- Am I open to creating a Pull Request with the necessary changes?
-
-**Is your feature request related to a problem? Please describe.**
-A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
-
-**Describe the solution you'd like**
-A clear and concise description of how you'd like to approach solving the problem.
-
-**Describe alternatives you've considered**
-A clear and concise description of any alternative solutions or features you've considered.
-
-**Additional context**
-Add any other context. Ex. if you've solved this problem in your own projects already, how that worked, and why the feature should be moved and maintained in Pundit instead.

data/.github/PULL_REQUEST_TEMPLATE/gem_release_template.md

@@ -1,8 +0,0 @@
-## To do
-
-- [ ] Make changes:
-  - [ ] Bump `Pundit::VERSION` in `lib/pundit/version.rb`.
-  - [ ] Update `CHANGELOG.md`.
-- [ ] Open pull request 🚀 and merge it.
-- [ ] Run [push gem](https://github.com/varvet/pundit/actions/workflows/push_gem.yml) GitHub Action.
-- [ ] Make an announcement in [Pundit discussions](https://github.com/varvet/pundit/discussions/categories/announcements)

data/.github/pull_request_template.md

@@ -1,9 +0,0 @@
-## To do
-
-- [ ] I have read the [contributing guidelines](https://github.com/varvet/pundit/contribute).
-- [ ] I have added relevant tests.
-- [ ] I have adjusted relevant documentation.
-- [ ] I have made sure the individual commits are meaningful.
-- [ ] I have added relevant lines to the CHANGELOG.
-
-PS: Thank you for contributing to Pundit ❤️

data/.github/workflows/main.yml

@@ -1,147 +0,0 @@
-name: Main
-
-on:
-  push:
-    branches: ["main"]
-  pull_request:
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-env:
-  CC_TEST_REPORTER_ID: "ac477089fe20ab4fc7e0d304cab75f72d73d58a7596d366935d18fcc7d51f8f9"
-
-  # `github.ref` points to the *merge commit* when running tests on a pull request, which will be a commit
-  # that doesn't exists in our code base. Since this workflow triggers from a PR, we use the HEAD SHA instead.
-  #
-  # NOTE: These are both used by Code Climate (cc-test-reporter).
-  GIT_COMMIT_SHA: ${{ github.event.pull_request.head.sha }}
-  GIT_BRANCH: ${{ github.head_ref }}
-
-jobs:
-  matrix-test:
-    runs-on: ubuntu-latest
-    continue-on-error: ${{ matrix.allow-failure || false }}
-    strategy:
-      fail-fast: false
-      matrix:
-        ruby-version:
-          - "3.1"
-          - "3.2"
-          - "3.3"
-          - "jruby-9.3.15"
-          - "jruby"
-        include: # HEAD-versions
-          - ruby-version: "head"
-            allow-failure: true
-          - ruby-version: "jruby-head"
-            allow-failure: true
-          - ruby-version: "truffleruby-head"
-            allow-failure: true
-
-    steps:
-      - uses: actions/checkout@v4
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
-        with:
-          rubygems: latest
-          ruby-version: ${{ matrix.ruby-version }}
-          bundler-cache: true
-      - name: Run tests
-        run: bundle exec rspec
-
-  test:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
-        with:
-          rubygems: latest
-          ruby-version: "ruby"
-          bundler-cache: true
-      - name: "Download cc-test-reporter from codeclimate.com"
-        run: |
-          curl -L https://codeclimate.com/downloads/test-reporter/test-reporter-latest-linux-amd64 > ./cc-test-reporter
-          chmod +x ./cc-test-reporter
-      - name: "Report to Code Climate that we will send a coverage report."
-        run: ./cc-test-reporter before-build
-      - name: Run tests
-        run: bundle exec rspec
-        env:
-          COVERAGE: 1
-      - name: Upload coverage results
-        uses: actions/upload-artifact@v4
-        with:
-          include-hidden-files: true
-          name: coverage-results
-          path: coverage
-          retention-days: 1
-      - name: Upload code coverage to Code Climate
-        run: |
-          ./cc-test-reporter after-build \
-            --coverage-input-type simplecov \
-            ./coverage/.resultset.json
-
-  coverage-check:
-    permissions:
-      contents: read
-      checks: write
-    needs: test
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - name: Download coverage results
-        uses: actions/download-artifact@v4
-        with:
-          name: coverage-results
-          path: coverage
-      - uses: joshmfrankel/simplecov-check-action@be89e11889202cc59efb14aab2a7091622fa9aad
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          minimum_suite_coverage: 100
-          minimum_file_coverage: 100
-          coverage_json_path: coverage/simplecov-check-action.json
-
-  rubocop:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
-        with:
-          rubygems: default
-          ruby-version: "ruby"
-          bundler-cache: false
-      - run: bundle install
-      - name: Run RuboCop
-        run: bundle exec rubocop
-
-  docs:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
-        with:
-          rubygems: default
-          ruby-version: "ruby"
-          bundler-cache: false
-      - run: bundle install
-      - run: rake yard
-
-  required-checks:
-    runs-on: ubuntu-latest
-    if: ${{ always() }}
-    needs:
-      - test
-      - matrix-test
-      - docs
-      - rubocop
-    steps:
-      - name: failure
-        if: ${{ failure() || contains(needs.*.result, 'failure') }}
-        run: exit 1
-      - name: success
-        run: exit 0

data/.github/workflows/push_gem.yml

@@ -1,33 +0,0 @@
-name: Push Gem
-
-on:
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-jobs:
-  push:
-    if: github.repository == 'varvet/pundit'
-    runs-on: ubuntu-latest
-
-    permissions:
-      contents: write
-      id-token: write
-
-    steps:
-      # Set up
-      - name: Harden Runner
-        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
-        with:
-          egress-policy: audit
-
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # v1.190.0
-        with:
-          bundler-cache: true
-          ruby-version: ruby
-
-      # Release
-      - uses: rubygems/release-gem@612653d273a73bdae1df8453e090060bb4db5f31 # v1+ unreleased

data/.gitignore

@@ -1,19 +0,0 @@
-*.gem
-*.rbc
-.bundle
-.config
-.coverage
-.yardoc
-Gemfile.lock
-InstalledFiles
-_yardoc
-coverage
-doc/
-lib/bundler/man
-pkg
-rdoc
-spec/reports
-test/tmp
-test/version_tmp
-tmp
-bin

data/.rubocop.yml

@@ -1,73 +0,0 @@
-inherit_from: .rubocop_ignore_git.yml
-
-AllCops:
-  TargetRubyVersion: 3.1
-  SuggestExtensions: false
-  NewCops: disable
-
-Gemspec/DeprecatedAttributeAssignment:
-  Enabled: true
-
-Gemspec/DevelopmentDependencies:
-  Enabled: true
-
-Metrics/BlockLength:
-  Exclude:
-    - "**/*_spec.rb"
-    - pundit.gemspec
-
-Metrics/MethodLength:
-  Max: 40
-
-Metrics/ModuleLength:
-  Max: 200
-  Exclude:
-    - "**/*_spec.rb"
-
-Layout/LineLength:
-  Max: 120
-
-Gemspec/RequiredRubyVersion:
-  Enabled: false
-
-Layout/ParameterAlignment:
-  EnforcedStyle: with_fixed_indentation
-
-Layout/CaseIndentation:
-  EnforcedStyle: case
-  SupportedStyles:
-    - case
-    - end
-  IndentOneStep: true
-
-Layout/FirstArrayElementIndentation:
-  EnforcedStyle: consistent
-
-Layout/FirstHashElementIndentation:
-  EnforcedStyle: consistent
-
-Layout/EndAlignment:
-  EnforcedStyleAlignWith: variable
-
-Style/PercentLiteralDelimiters:
-  PreferredDelimiters:
-    "%w": "[]"
-    "%W": "[]"
-
-Style/StringLiterals:
-  EnforcedStyle: double_quotes
-
-Style/StringLiteralsInInterpolation:
-  EnforcedStyle: double_quotes
-
-Style/StructInheritance:
-  Enabled: false
-
-Style/DoubleNegation:
-  Enabled: false
-
-Style/Documentation:
-  Enabled: false # TODO: Enable again once we have more docs
-
-Style/HashSyntax:
-  EnforcedShorthandSyntax: never

data/.rubocop_ignore_git.yml

@@ -1,7 +0,0 @@
-# This is here so we can keep YAML syntax highlight in the main file.
-AllCops:
-  Exclude:
-    - "lib/generators/**/templates/**/*"
-    <% `git status --ignored --porcelain`.lines.grep(/^!! /).each do |path| %>
-    - <%= path.sub(/^!! /, '').sub(/\/$/, '/**/*') %>
-    <% end %>

data/.yardopts

@@ -1 +0,0 @@
---no-private --private --protected --hide-void-return --markup markdown --fail-on-warning

data/CODE_OF_CONDUCT.md

@@ -1,28 +0,0 @@
-# Contributor Code of Conduct
-
-As contributors and maintainers of this project, we pledge to respect all
-people who contribute through reporting issues, posting feature requests,
-updating documentation, submitting pull requests or patches, and other
-activities.
-
-We are committed to making participation in this project a harassment-free
-experience for everyone, regardless of level of experience, gender, gender
-identity and expression, sexual orientation, disability, personal appearance,
-body size, race, age, or religion.
-
-Examples of unacceptable behavior by participants include the use of sexual
-language or imagery, derogatory comments or personal attacks, trolling, public
-or private harassment, insults, or other unprofessional conduct.
-
-Project maintainers have the right and responsibility to remove, edit, or
-reject comments, commits, code, wiki edits, issues, and other contributions
-that are not aligned to this Code of Conduct. Project maintainers who do not
-follow the Code of Conduct may be removed from the project team.
-
-Instances of abusive, harassing, or otherwise unacceptable behavior may be
-reported by opening an issue or contacting one or more of the project
-maintainers.
-
-This Code of Conduct is adapted from the [Contributor
-Covenant](http:contributor-covenant.org), version 1.0.0, available at
-[https://contributor-covenant.org/version/1/0/0/](https://contributor-covenant.org/version/1/0/0/)

data/CONTRIBUTING.md

@@ -1,31 +0,0 @@
-## Security issues
-
-If you have found a security related issue, please do not file an issue on GitHub or send a PR addressing the issue. Refer to [SECURITY.md](./SECURITY.md) for instructions.
-
-## Reporting issues
-
-Please try to answer the following questions in your bug report:
-
-- What did you do?
-- What did you expect to happen?
-- What happened instead?
-
-Make sure to include as much relevant information as possible. Ruby version,
-Pundit version, OS version and any stack traces you have are very valuable.
-
-## Pull Requests
-
-- **Add tests!** Your patch won't be accepted if it doesn't have tests.
-
-- **Document any change in behaviour**. Make sure the README and any other
-  relevant documentation are kept up-to-date.
-
-- **Create topic branches**. Please don't ask us to pull from your main branch.
-
-- **One pull request per feature**. If you want to do more than one thing, send
-  multiple pull requests.
-
-- **Send coherent history**. Make sure each individual commit in your pull
-  request is meaningful. If you had to make multiple intermediate commits while
-  developing, please squash them before sending them to us.
-- **Update the CHANGELOG.** Don't forget to add your new changes to the CHANGELOG.

data/Gemfile

@@ -1,28 +0,0 @@
-# frozen_string_literal: true
-
-source "https://rubygems.org"
-
-gemspec
-
-# Rails-related - for testing purposes
-gem "actionpack", ">= 3.0.0" # Used to test strong parameters
-gem "activemodel", ">= 3.0.0" # Used to test ActiveModel::Naming
-gem "railties", ">= 3.0.0" # Used to test generators
-
-# Testing
-gem "rspec", ">= 3.0.0"
-gem "simplecov", ">= 0.17.0"
-
-# Development tools
-gem "bundler"
-gem "rake"
-gem "rubocop"
-gem "rubocop-performance"
-gem "rubocop-rspec"
-gem "yard"
-gem "zeitwerk"
-
-# Affects us on JRuby 9.3.15.
-#
-# @see https://github.com/rails/rails/issues/54260
-gem "logger"

data/Rakefile

@@ -1,21 +0,0 @@
-# frozen_string_literal: true
-
-require "rubygems"
-require "bundler/gem_tasks"
-require "rspec/core/rake_task"
-require "yard"
-require "rubocop/rake_task"
-
-RuboCop::RakeTask.new
-
-desc "Run all examples"
-RSpec::Core::RakeTask.new(:spec) do |t|
-  t.rspec_opts = %w[--color]
-end
-
-YARD::Rake::YardocTask.new do |t|
-  t.files = ["lib/**/*.rb"]
-  t.stats_options = ["--list-undoc"]
-end
-
-task default: :spec

data/config/rubocop-rspec.yml

@@ -1,5 +0,0 @@
-RSpec:
-  Language:
-    ExampleGroups:
-      Regular:
-        - permissions

data/pundit.gemspec

@@ -1,31 +0,0 @@
-# frozen_string_literal: true
-
-lib = File.expand_path("lib", __dir__)
-$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
-require "pundit/version"
-
-Gem::Specification.new do |gem|
-  gem.name          = "pundit"
-  gem.version       = Pundit::VERSION
-  gem.authors       = ["Jonas Nicklas", "Varvet AB"]
-  gem.email         = ["jonas.nicklas@gmail.com", "info@varvet.com"]
-  gem.description   = "Object oriented authorization for Rails applications"
-  gem.summary       = "OO authorization for Rails"
-  gem.homepage      = "https://github.com/varvet/pundit"
-  gem.license       = "MIT"
-
-  gem.files         = `git ls-files`.split($INPUT_RECORD_SEPARATOR)
-  gem.executables   = gem.files.grep(%r{^bin/}).map { |f| File.basename(f) }
-  gem.require_paths = ["lib"]
-
-  gem.metadata      = {
-    "rubygems_mfa_required" => "true",
-    "bug_tracker_uri" => "https://github.com/varvet/pundit/issues",
-    "changelog_uri" => "https://github.com/varvet/pundit/blob/main/CHANGELOG.md",
-    "documentation_uri" => "https://github.com/varvet/pundit/blob/main/README.md",
-    "homepage_uri" => "https://github.com/varvet/pundit",
-    "source_code_uri" => "https://github.com/varvet/pundit"
-  }
-
-  gem.add_dependency "activesupport", ">= 3.0.0"
-end