startback 2.1.2 → 2.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8d29c7de7c7ebfb8c5cc68d73da62108b88cee7e24f0e59712601ed8ca8d776f
-  data.tar.gz: 4b3e850a0465313739cb45662983e6af17edeb3dce768f2dcb4a9227085a8362
+  metadata.gz: 6faa6fe4856146f74795957a004c60e81db8a19a70ce6bcb874f9490c9012f99
+  data.tar.gz: 94debf9522beae906f8a725f9549d9acaebecbf6702969c1ea7ab73c6d0df926
 SHA512:
-  metadata.gz: 2f6b32627f15af41212ec13844db638f0d78bb5786d5151e6b0fab86b522ae294ede73bffb6cf2aff839f805eac9c85a9a6dde70a723f35d3b8da35124019c6d
-  data.tar.gz: 0070c3a2dc460fe286090ebaf0428a8697b2d0429df770542eda1b5c9f69e6c733caad05e230ab6be5d12ac75967a37be35b7264c28d3fc1f05da0c5f003e328
+  metadata.gz: 1e0e25409e12e35623aba0fc4dbdeaa9cdeef0cbe4f78b0a29b98c47445100776708b58e13ac28251d5a36b13cb9cb9323b6dcacda18df51c237eed903fe9766
+  data.tar.gz: b290c7942c9a985da8aa40904547b73dc7e6388bdb21c65a95bfb4d6ffd135577457f3914c61300c4a55d4dbf3052900d38be04862e18005a1461a1578264462

data/CHANGELOG.md

@@ -1,3 +1,32 @@
+## 2.1.3 - 2026-10-29
+
+A one-character fix to AutoCaching's production policy. **Nothing to do, and
+nothing changes for an application that kept the default** -- but the knob it
+unlocks is worth knowing about.
+
+### `s-maxage`, not `s-max-age`
+
+The default production policy read `public, must-revalidate, max-age=3600,
+s-max-age=3600`. There is no `s-max-age` directive: caches skip what they do
+not recognise, so a shared cache had nothing but `max-age` to go by. Same
+hour either way, which is why this went unnoticed -- the two values were
+equal.
+
+It matters the moment they should not be. A page whose reverse proxy should
+hold it for an hour while the browser comes back in a minute is exactly what
+`s-maxage` is for, and overriding the policy to say so had no effect on the
+proxy:
+
+```ruby
+# Now does what it says: one minute in the browser, one hour in nginx.
+use Startback::Web::AutoCaching, production: "public, max-age=60, s-maxage=3600"
+```
+
+Worth a look if your application already overrides
+`PRODUCTION_CACHE_CONTROL`, or sets
+`STARTBACK_AUTOCACHING_PRODUCTION_CACHE_CONTROL`, with a `s-max-age` copied
+from the default: it was being ignored, and now it is not.
+
 ## 2.1.2 - 2026-10-27
 
 A crawler could take a page down for everyone. **AutoCaching's fix needs

data/lib/startback/version.rb

@@ -2,7 +2,7 @@ module Startback
   module Version
     MAJOR = 2
     MINOR = 1
-    TINY  = 2
+    TINY  = 3
   end
   VERSION = "#{Version::MAJOR}.#{Version::MINOR}.#{Version::TINY}"
 end

data/lib/startback/web/auto_caching.rb

@@ -51,9 +51,13 @@ module Startback
       DEVELOPMENT_CACHE_CONTROL = ENV['STARTBACK_AUTOCACHING_DEVELOPMENT_CACHE_CONTROL'] || \
                                   "no-cache, no-store, max-age=0, must-revalidate"
 
-      # Cache-Control header to use in production mode
+      # Cache-Control header to use in production mode. `s-maxage`, and not
+      # `s-max-age`: the latter is not a directive any cache knows, so it was
+      # silently dropped and a shared cache had nothing but `max-age` to go by
+      # -- the very knob an application needs to keep a page in its reverse
+      # proxy for an hour while the browser comes back in a minute.
       PRODUCTION_CACHE_CONTROL = ENV['STARTBACK_AUTOCACHING_PRODUCTION_CACHE_CONTROL'] ||\
-                                 "public, must-revalidate, max-age=3600, s-max-age=3600"
+                                 "public, must-revalidate, max-age=3600, s-maxage=3600"
 
       # Cache-Control header to use on an error response, in either mode
       ERROR_CACHE_CONTROL = ENV['STARTBACK_AUTOCACHING_ERROR_CACHE_CONTROL'] ||\

data/spec/unit/web/test_auto_caching.rb

@@ -30,7 +30,7 @@ module Startback
 
         it 'sets the production Cache-Control' do
           get '/'
-          expect(last_response['Cache-Control']). to eql("public, must-revalidate, max-age=3600, s-max-age=3600")
+          expect(last_response['Cache-Control']). to eql("public, must-revalidate, max-age=3600, s-maxage=3600")
         end
       end
 
@@ -88,7 +88,7 @@ module Startback
         end
 
         it 'still makes a redirect cacheable' do
-          expect(cache_control_for(301)).to eql("public, must-revalidate, max-age=3600, s-max-age=3600")
+          expect(cache_control_for(301)).to eql("public, must-revalidate, max-age=3600, s-maxage=3600")
         end
       end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: startback
 version: !ruby/object:Gem::Version
-  version: 2.1.2
+  version: 2.1.3
 platform: ruby
 authors:
 - Bernard Lambeau
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-27 00:00:00.000000000 Z
+date: 2026-10-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec