sqlite_crypto 2.2.0 → 2.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ed3f34d6f260bfcbe3487f7b13489eff823b0e5d0bfc3f0459a166218b76b141
-  data.tar.gz: 97ba38c69e755ffe3efee31d377e5e8cf056e833c41bdea26eea5f2bff5af120
+  metadata.gz: 5092437393d977d0bc5bd3ab75fec48c2518ff2ab0296bf6bb1abc42cdd1dfd9
+  data.tar.gz: 85e2ba284a68ee0cdf113895771788e5d60ee324631672f414f96756f08c5a9c
 SHA512:
-  metadata.gz: 36e76170a44cb93f67fc21ac758b9a5513a5d372d904564198072b9bc8f578e223f5a176ad8733c525c2db40456d1944f1ecaf68cbd5ea7bf9bb3549ae1e8bfd
-  data.tar.gz: 556b244e3c93b4b4d66f450a99d125edf20ede805b4e89831fbd21110054bab971dbf00d9a1b91a94a6891c5cb3ff1b7a01c25e60b1cc2012bb7c0254a43ae10
+  metadata.gz: 66a702bb87cf9ebb082a4f0a727df6fd3f8232e47295cf5d56d3e7a03d7604c29d7692ddd556753a4cf9a0e1076885273b748c65e67adede97f0cc8e44e7718e
+  data.tar.gz: 2d6c01a90e63dfd79947c010de863c0b0180c83056d5c72a7d9a6dd0a3e901c5ecebb6ff91c2c78c589e22a108b3183d9d382be612346ac5f3c23262fffd342d

data/CHANGELOG.md

@@ -5,6 +5,23 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.3.0] - 2026-07-15
+
+### Security
+- Refreshed lockfiles, picking up fixes for transitive CVEs in `sqlite3`, `nokogiri`, `json`, `crass`, and `concurrent-ruby`
+
+### Changed
+- Updated `.ruby-version` from `4.0.3` to `4.0.6`
+- CI: cache bundler installs per Rails version, run `bundler-audit` from the bundle, and drop the empty coverage-threshold step
+- Narrowed the runtime dependency from `rails` to `activerecord` + `railties`, dropping the `action_text-trix` pin it required
+- **Tightened ULID validation**: rejects `I`, `L`, `O`, `U`, which Crockford base32 excludes
+
+### Fixed
+- **Reads no longer raise on malformed legacy IDs**: `Type::Base#deserialize` returns stored values as-is instead of re-validating them, so a corrupted row no longer crashes every read of it. Writes (`#cast`/`#serialize`) still validate strictly
+- **Primary-key type cache invalidation**: `_sqlite_crypto_pk_type` now clears on `reset_column_information` instead of going stale after a migration
+- **Adapter guard for auto ID generation**: primary-key detection now only applies to SQLite3 connections, not any string(36/26) primary key regardless of adapter
+- **`references`/`belongs_to` with `to_table` and `foreign_key: true`**: the foreign key now targets the correct table instead of the pluralized association name
+
 ## [2.2.0] - 2026-05-08
 
 ### Added

data/README.md

@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://github.com/bart-oz/sqlite_crypto/releases">
-    <img src="https://img.shields.io/badge/version-2.2.0-blue.svg" alt="Version">
+    <img src="https://img.shields.io/badge/version-2.3.0-blue.svg" alt="Version">
   </a>
   <a href="LICENSE.txt">
     <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License">
@@ -41,7 +41,7 @@ end
 - Automatic foreign key type detection
 - Model-level ID generation
 - Clean schema.rb output
-- Lightweight runtime dependencies (`rails`, `sqlite3`, `ulid`)
+- Lightweight runtime dependencies (`activerecord`, `railties`, `sqlite3`, `ulid` — no full `rails` metagem)
 
 ## Compatibility
 
@@ -55,8 +55,8 @@ end
 | Ruby 3.4 | ✓ | ✓ | ✓ | ✓ |
 | Ruby 4.0 | ✓ | ✓ | ✓ | ✓ |
 
-**Upstream lifecycle note (as of 2026-05-08):**
-- Ruby 3.1 is EOL; Ruby 3.2 is EOL.
+**Upstream lifecycle note (as of 2026-07-15):**
+- Ruby 3.1 is EOL; Ruby 3.2 is EOL. Latest stable Ruby is 4.0.6.
 - Rails 7.1 is EOL.
 - Rails 7.2 is security-fixes-only; Rails 8.0 and 8.1 are actively supported.
 

data/lib/sqlite_crypto/migration_helpers.rb

@@ -18,13 +18,19 @@ module SqliteCrypto
     module References
       def references(*args, **options)
         ref_name = args.first
-        ref_table = options.delete(:to_table) || ref_name.to_s.pluralize
+        explicit_to_table = options.delete(:to_table)
+        ref_table = explicit_to_table || ref_name.to_s.pluralize
 
         if (primary_key_type = detect_primary_key_type(ref_table))
           options[:type] ||= :string
           options[:limit] ||= IdTypes.string_limit_for(primary_key_type)
         end
 
+        if explicit_to_table && options[:foreign_key]
+          fk_options = options[:foreign_key].is_a?(Hash) ? options[:foreign_key] : {}
+          options[:foreign_key] = fk_options.reverse_merge(to_table: explicit_to_table)
+        end
+
         super
       end
 

data/lib/sqlite_crypto/model_extensions.rb

@@ -50,11 +50,17 @@ module SqliteCrypto
         @_sqlite_crypto_pk_type = _detect_sqlite_crypto_pk_type
       end
 
+      def reset_column_information
+        remove_instance_variable(:@_sqlite_crypto_pk_type) if defined?(@_sqlite_crypto_pk_type)
+        super
+      end
+
       private
 
       def _detect_sqlite_crypto_pk_type
         return nil if abstract_class?
         return nil unless table_exists?
+        return nil unless connection.adapter_name == "SQLite"
 
         pk = primary_key
         return nil unless pk

data/lib/sqlite_crypto/type/base.rb

@@ -4,8 +4,7 @@ module SqliteCrypto
   module Type
     class Base < ActiveRecord::Type::String
       def deserialize(value)
-        return if value.nil?
-        cast(value)
+        value&.to_s
       end
 
       def cast(value)
@@ -25,7 +24,7 @@ module SqliteCrypto
       end
 
       def changed_in_place?(raw_old_value, new_value)
-        cast(raw_old_value) != cast(new_value)
+        deserialize(raw_old_value) != cast(new_value)
       end
 
       private

data/lib/sqlite_crypto/type/ulid.rb

@@ -5,7 +5,8 @@ require "sqlite_crypto/type/base"
 module SqliteCrypto
   module Type
     class ULID < Base
-      ULID_PATTERN = /\A[0-7][0-9A-Z]{25}\z/i
+      # Crockford base32 excludes I, L, O, U to avoid confusion with 1, 0.
+      ULID_PATTERN = /\A[0-7][0-9A-HJKMNP-TV-Z]{25}\z/i
 
       def type
         :ulid

data/lib/sqlite_crypto/version.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 module SqliteCrypto
-  VERSION = "2.2.0"
+  VERSION = "2.3.0"
   RUBY_MINIMUM_VERSION = "3.1.0"
   RAILS_MINIMUM_VERSION = "7.1.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: sqlite_crypto
 version: !ruby/object:Gem::Version
-  version: 2.2.0
+  version: 2.3.0
 platform: ruby
 authors:
 - BartOz
@@ -10,7 +10,21 @@ cert_chain: []
 date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: rails
+  name: activerecord
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 7.1.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 7.1.0
+- !ruby/object:Gem::Dependency
+  name: railties
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -53,8 +67,7 @@ dependencies:
         version: '1.0'
 description: UUID and ULID primary key support for Rails with SQLite3. Provides automatic
   type registration, validation, foreign key detection, and clean schema generation.
-  Supports UUIDv4 (random), UUIDv7 (time-ordered), and ULID (compact, time-sortable)
-  with zero external dependencies.
+  Supports UUIDv4 (random), UUIDv7 (time-ordered), and ULID (compact, time-sortable).
 email:
 - bartek.ozdoba@gmail.com
 executables: []
@@ -99,7 +112,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.6
+rubygems_version: 4.0.16
 specification_version: 4
 summary: UUID (v4/v7) and ULID primary keys for Rails + SQLite3
 test_files: []