standard_id-apple 0.3.0 → 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: d28b3018e3f7fc20688cfddeb71fbe217a4582cda164801c248e33ea9186b14b
4
- data.tar.gz: aa60781200a04bffbc7fe7e3103a2db6cb7309856cf7129f17442f98af4ad6d5
3
+ metadata.gz: 75dbd2b3cec3ede939959396e75f19d8aea74524af5d94a19ceb3a88ac35fea5
4
+ data.tar.gz: a8cbbae0a326e7289c8bd537ab61451a90c39bd93ecca72d6f6aff4c4cc34736
5
5
  SHA512:
6
- metadata.gz: c2e6d33e993110034869730d54aba8f507ffb4871ca9f4c6049dd85da2c744e8e0ef097d6954bef6d0ed13fd7f2ac5f7e3504fa7b61ad542358ff03b941442ef
7
- data.tar.gz: 2d586fd41238374119a596c002cb2718b7ed81c405e8b8eb4927fd9190fedc621a4cd0998f2867582ad73cf2b6eec022be825a3f9edfadfdfed62a9d88429784
6
+ metadata.gz: b34faef3f56f6b1f8e6753b99dbdf5ed11170ecd6d666f3096d3c206b09ccbde0ed9177868c737abd401b8e5025699268b2e9272e106053b87cf355932ad57c9
7
+ data.tar.gz: 98dededac1c594d78d430c0c0ccb103912f997cce6369642921fd5568a078ecf9f375bea01535b6373b76e8cc9ac6cf1a3ffd0ddd92fcd78b24eac9a9892b704
data/CHANGELOG.md CHANGED
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
7
7
 
8
8
  ## [Unreleased]
9
9
 
10
+ ## [0.4.0] - 2026-05-19
11
+
12
+ ### Changed
13
+
14
+ - Relaxed `jwt` dependency constraint from `~> 2.7` to `>= 2.7, < 4`, allowing consumers to satisfy the GHSA security advisory for `jwt` 2.x by upgrading to `jwt` 3.x. The provider's `JWT.encode` / `JWT.decode` call sites already pass an explicit algorithm and are compatible with the 3.x API surface.
15
+
10
16
  ## [0.3.0] - 2026-04-29
11
17
 
12
18
  ### Added
data/CLAUDE.md CHANGED
@@ -24,3 +24,9 @@ Then work inside `.worktrees/<name>/` for the rest of the session.
24
24
  **Why this matters:** Working directly on the main checkout causes cross-contamination between sessions — uncommitted changes, wrong branches, and dirty state leak into unrelated work. Worktrees eliminate this entirely.
25
25
 
26
26
  See the `/worktree` and `/start` skills for full conventions and flags.
27
+
28
+ ## Consumers
29
+
30
+ `standard_id-apple` is currently consumed by `luminality-web` only in the rarebit-one workspace. Apple Sign In is a Luminality-only feature; `fundbright-web` and `nutripod-web` do not consume this gem.
31
+
32
+ After publishing a new version via `/publish-gem`, roll it out with the workspace-level `/rollout-gem standard_id-apple [<version>]` skill (defined at the rarebit-one workspace root, one directory above this repo). The canonical consumer matrix — including version constraints — lives in that skill's `SKILL.md`.
@@ -137,7 +137,7 @@ module StandardId
137
137
  id_token,
138
138
  jwk.public_key,
139
139
  true,
140
- algorithm: "RS256",
140
+ algorithms: ["RS256"],
141
141
  iss: ISSUER,
142
142
  verify_iss: true,
143
143
  aud: client_id,
@@ -2,6 +2,6 @@
2
2
 
3
3
  module StandardId
4
4
  module Apple
5
- VERSION = "0.3.0"
5
+ VERSION = "0.4.0"
6
6
  end
7
7
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: standard_id-apple
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.3.0
4
+ version: 0.4.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Jaryl Sim
@@ -27,16 +27,22 @@ dependencies:
27
27
  name: jwt
28
28
  requirement: !ruby/object:Gem::Requirement
29
29
  requirements:
30
- - - "~>"
30
+ - - ">="
31
31
  - !ruby/object:Gem::Version
32
32
  version: '2.7'
33
+ - - "<"
34
+ - !ruby/object:Gem::Version
35
+ version: '4'
33
36
  type: :runtime
34
37
  prerelease: false
35
38
  version_requirements: !ruby/object:Gem::Requirement
36
39
  requirements:
37
- - - "~>"
40
+ - - ">="
38
41
  - !ruby/object:Gem::Version
39
42
  version: '2.7'
43
+ - - "<"
44
+ - !ruby/object:Gem::Version
45
+ version: '4'
40
46
  - !ruby/object:Gem::Dependency
41
47
  name: standard_id
42
48
  requirement: !ruby/object:Gem::Requirement