superset 0.5.1 → 0.5.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a3d9470c571c5c52d7986021b754aec48a47aa96e8ba570833d7050802395550
-  data.tar.gz: 1699db0d45666f43b5e34a5090d1533aa293aa5aa4ad890cb6d8c47bc5f4e49a
+  metadata.gz: b8b34598d228f19ee769e3381bb25efdef9104659d5fabce8109521d0344a860
+  data.tar.gz: a1f4cb502c1e6c11b1c7f965f4d185c155e9a1201398a87915087c8dc12033f4
 SHA512:
-  metadata.gz: 42518d4e36fc4e46f9c570c7c6f70ce365d8ea3fd46c38de5b9d391c636425e5b95c18f8bd57712837b3d3bb9df44790e10a5ab50ef84cf7f2ba958c94ac0244
-  data.tar.gz: 5e51ed128fe8fff41e34e63a82d0039b517098d47856c2cb285cbc032e3926289a0dcde65ca56146c005f19e3bc5d88c51f38a8b0c6eed9b7eb2f9a4b22cb0da
+  metadata.gz: 9dd45b812b5883faf48b48fd4a111c7baacafee441cdc3da96a8da16f7ddf2a874824cdff178554509da49ae914549a53cafa1e3949909683b6ab7ef43c69174
+  data.tar.gz: abd065a21a68e4364484f226e5bf58ce78fd0619827b8b1f4ca28e3c6bfac2586c23a14ce0683b95346763b870c7e86ee6c4d57c800377202d8080709e4aa998

data/CHANGELOG.md

@@ -1,5 +1,27 @@
 ## Changelog
 
+## 0.5.3 - 2026-09-23
+
+* **Fix:** make the gem actually work on Faraday 2. 0.5.2 loosened the `faraday` constraint from `~> 1.10` to `>= 1.10` but adapted none of the code, so any consumer resolving Faraday 2 hit `NoMethodError: undefined method 'authorization' for an instance of Faraday::Connection` on every request through `Superset::Client` and `Superset::GuestToken`. Replaced `f.authorization :Bearer, token` with `f.request :authorization, 'Bearer', token`, which works on both Faraday 1.10+ and 2.x
+* **Fix:** `require 'faraday/multipart'` in `Superset::Client` and `Superset::Dashboard::Import`. Faraday stopped autoloading faraday-multipart in 2.0, so `f.request :multipart` raised ":multipart is not registered on Faraday::Request"; it resolved only because happi happened to require it first — the same transitive-dependency trap as the `FaradayMiddleware::ParseJson` bug in 0.5.1. This gem declares faraday-multipart itself, so it now requires it itself
+* Use `Faraday::Multipart::FilePart` instead of `Faraday::UploadIO` in `Dashboard::Import#payload`. Not a live break (faraday-multipart 1.x still aliases `UploadIO` to the same class once loaded), but FilePart is the maintained name and does not depend on that legacy alias
+* Add `Dashboard::Import#payload` specs. Every existing import example stubbed `#response`, so `#payload` had never executed under test
+* **Fix:** `require 'ostruct'` in `Dashboard::List` and `Services::DashboardLoader`. Both use `OpenStruct` but it only ever loaded transitively via activesupport <= 7.1; on activesupport 8.x the gem failed to load at all. Also declared as a gemspec dependency, since ostruct becomes a bundled gem in Ruby 3.5
+* Stop tracking `Gemfile.lock`. This is a library; the committed lockfile pinned faraday 1.10.3 and is the direct reason the widened constraint was never exercised locally
+* **Fix:** declare `happi` (`~> 1.0`) as a runtime dependency in the gemspec. `Superset::Client` subclasses `Happi::Client`, but happi was declared only in the `Gemfile` as a git ref — so the published gem listed no happi at all and raised `NameError` on first require for anyone installing it from a package host. happi 1.0.0 is on RubyGems and is byte-identical to the git tag this gem was developed against; the `Gemfile` git pin is now redundant and has been removed
+* **Fix:** declare and require `activesupport` (`>= 7.1`). `lib/` calls it in ~96 places — `present?`, `blank?`, `with_indifferent_access`, `deep_symbolize_keys`, and `humanize` in `Display#table` — but the gem neither declared nor required it; it loaded only because happi depends on activesupport. Requires the four core extensions actually used rather than `active_support/all`
+* Raise `required_ruby_version` from `>= 3` to `>= 3.2`. The old floor was never true: `Superset::Client` subclasses `Happi::Client`, and happi v1.0.0 requires ruby >= 3.2, so a bundle cannot resolve on 3.0 or 3.1. Nothing in `lib/` needs syntax newer than 3.0 — the floor is entirely happi's
+* Make eight specs ruby-version agnostic. They hardcoded ruby 3.4's `Hash#inspect` output (`"k" => v`, not `"k"=>v`), so the suite only passed on the one ruby the strings were pasted from — leaving the declared `>= 3.2` floor untested. Expectations are now derived from the same source data the code stringifies
+* Add `.github/workflows/ci.yml`, running the suite across ruby 3.2/3.3/3.4 and both ends of the declared faraday range (`gemfiles/faraday_1.gemfile`, `gemfiles/faraday_2.gemfile`). Buildkite already ran rspec on every PR, but against the committed `Gemfile.lock`, so CI only ever exercised faraday 1.10.3 — a single point inside the declared `>= 1.10` range, which is how 0.5.2 shipped a Faraday 2 break with a green build
+* **Fix:** `Superset::Client#raise_error` no longer `puts` to stdout on every failed API call. A library should not write to its consumer's console, and the message is already carried by the raised exception; it now goes to `Superset.logger` (configurable since 0.5.0). The dead `binding.pry` comment beside it is gone, and `#raise_error` has specs for the first time
+* Populate gem metadata (`homepage_uri`, `source_code_uri`, `changelog_uri`, `bug_tracker_uri`, `documentation_uri`, `rubygems_mfa_required`) — these were all commented out, so the rubygems.org page showed no links
+* Stop shipping development scaffolding in the packaged gem. Installs previously included `Dockerfile`, `docker-compose*.yml`, `.buildkite/`, `.github/`, `gemfiles/`, `Rakefile`, `AGENTS.md`, `CLAUDE.md`, `RELEASING.md` and `env.sample`; the gem now contains `lib/`, the docs, README, CHANGELOG and LICENSE
+
+## 0.5.2 - 2026-08-28
+
+* Add tag-triggered release workflow (`.github/workflows/release.yml`) that publishes to RubyGems.org via OIDC trusted publishing and to GitHub Packages via the Actions `GITHUB_TOKEN` — no long-lived credentials stored anywhere. Refuses to publish unless the pushed tag's commit is reachable from `develop`. See `RELEASING.md` for the release steps and one-time RubyGems.org Trusted Publisher setup
+* Loosen the `faraday` dependency from `~> 1.10` to `>= 1.10` so consumers aren't held back from newer Faraday releases
+
 ## 0.5.1 - 2026-08-27
 
 * **Fix:** `Superset::Client` and `Superset::GuestToken` raised `NameError: uninitialized constant FaradayMiddleware::ParseJson` on every request. Both connections used `FaradayMiddleware::ParseJson`, but this gem has never declared or required `faraday_middleware` — the constant only reached the bundle transitively via happi, and happi 1.0.0 dropped it. Replaced with Faraday's own `f.response :json`, which is equivalent (same `content_type:` option, same `respond_to?(:to_str)` guard, same `Faraday::ParsingError` on bad bodies)

data/lib/superset/client.rb

@@ -1,3 +1,4 @@
+require 'faraday/multipart'
 require 'faraday-cookie_jar'
 
 module Superset
@@ -48,8 +49,7 @@ module Superset
         response.body
       end
 
-      puts "API Error: #{message}"  # display the error message for console debugging
-      # binding.pry                 # helpfull to debug the response
+      Superset.logger.error("API Error: #{message}")
 
       raise errors[response.status].new(message, response)  # message is not being surfaced from Happi correctly, :(
     end
@@ -75,7 +75,7 @@ module Superset
 
     def connection
       @connection ||= Faraday.new(superset_host) do |f|
-        f.authorization :Bearer, access_token
+        f.request :authorization, 'Bearer', access_token
         f.use :cookie_jar  # persist the Flask session cookie across the csrf_token GET and the write
         f.response :json, content_type: 'application/json'
 

data/lib/superset/dashboard/import.rb

@@ -20,6 +20,8 @@
 # Superset::Dashboard::Import.new(source: '/tmp/dashboard').perform
 #
 
+require 'faraday/multipart'
+
 module Superset
   module Dashboard
     class Import < Request
@@ -58,7 +60,7 @@ module Superset
 
       def payload
         {
-          formData: Faraday::UploadIO.new(source_zip_file, "application/zip"),
+          formData: Faraday::Multipart::FilePart.new(source_zip_file, "application/zip"),
           overwrite: overwrite.to_s
         }
       end

data/lib/superset/dashboard/list.rb

@@ -2,6 +2,8 @@
 # Usage: Superset::Dashboard::List.new(page_num: 1, title_contains: 'Test').list
 # Usage: Superset::Dashboard::List.new(tags_equal: ['embedded', 'product:acme']).list
 
+require 'ostruct'
+
 module Superset
   module Dashboard
     class List < Superset::Request

data/lib/superset/guest_token.rb

@@ -73,7 +73,7 @@ module Superset
 
     def connection
       @connection ||= Faraday.new(authenticator.superset_host) do |f|
-        f.authorization :Bearer, access_token
+        f.request :authorization, 'Bearer', access_token
         f.use :cookie_jar  # replay the Flask session cookie from the csrf_token GET on the POST
         f.response :json, content_type: 'application/json'
         f.request :json

data/lib/superset/services/dashboard_loader.rb

@@ -1,6 +1,7 @@
 # Given a path, load all yaml files
 
 require 'superset/file_utilities'
+require 'ostruct'
 require 'yaml'
 
 module Superset

data/lib/superset/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Superset
-  VERSION = "0.5.1"
+  VERSION = "0.5.3"
 end

data/lib/superset.rb

@@ -6,6 +6,11 @@ require 'happi'
 require 'logger'
 require 'json'
 
+require 'active_support/core_ext/object/blank'
+require 'active_support/core_ext/hash/indifferent_access'
+require 'active_support/core_ext/hash/keys'
+require 'active_support/core_ext/string/inflections'
+
 require_relative "superset/configuration"
 require_rel "superset/credential"
 require_relative "superset/authenticator"

metadata

@@ -1,15 +1,42 @@
 --- !ruby/object:Gem::Specification
 name: superset
 version: !ruby/object:Gem::Version
-  version: 0.5.1
+  version: 0.5.3
 platform: ruby
 authors:
 - jbat
-autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-08-27 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: activesupport
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.1'
+- !ruby/object:Gem::Dependency
+  name: happi
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
 - !ruby/object:Gem::Dependency
   name: json
   requirement: !ruby/object:Gem::Requirement
@@ -24,6 +51,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: ostruct
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.5'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.5'
 - !ruby/object:Gem::Dependency
   name: terminal-table
   requirement: !ruby/object:Gem::Requirement
@@ -56,14 +97,14 @@ dependencies:
   name: faraday
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '1.10'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '1.10'
 - !ruby/object:Gem::Dependency
@@ -192,32 +233,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0.14'
-description: 
 email:
 - jonathon.batson@gmail.com
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".buildkite/pipeline.yml"
-- ".rspec"
-- ".rubocop.yml"
-- ".ruby-version"
-- AGENTS.md
 - CHANGELOG.md
-- CLAUDE.md
-- Dockerfile
 - LICENSE
 - README.md
-- Rakefile
 - doc/duplicate_dashboards.md
 - doc/migrating_dashboards_across_environments.md
 - doc/publishing.md
 - doc/setting_up_personal_api_credentials.md
 - doc/usage.md
-- docker-compose.override.yml
-- docker-compose.yml
-- env.sample
 - lib/superset.rb
 - lib/superset/authenticator.rb
 - lib/superset/base_put_request.rb
@@ -291,13 +320,16 @@ files:
 - lib/superset/tag/get.rb
 - lib/superset/tag/list.rb
 - lib/superset/version.rb
-- log/README.md
-- superset.gemspec
 homepage: https://github.com/rdytech/superset-client
 licenses:
 - MIT
-metadata: {}
-post_install_message: 
+metadata:
+  homepage_uri: https://github.com/rdytech/superset-client
+  source_code_uri: https://github.com/rdytech/superset-client/tree/develop
+  changelog_uri: https://github.com/rdytech/superset-client/blob/develop/CHANGELOG.md
+  bug_tracker_uri: https://github.com/rdytech/superset-client/issues
+  documentation_uri: https://github.com/rdytech/superset-client/blob/develop/README.md
+  rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths:
 - lib
@@ -305,15 +337,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '3'
+      version: '3.2'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3.1
-signing_key: 
+rubygems_version: 3.6.9
 specification_version: 4
 summary: A Ruby Client for Apache Superset API
 test_files: []

data/.buildkite/pipeline.yml

@@ -1,16 +0,0 @@
-steps:
-  - label: ":rspec:"
-    command: bin/setup && bundle exec rspec
-    plugins:
-      docker-compose#v3.0.3:
-        run: app
-        volumes:
-          - ./coverage:/app/coverage
-          - ./log:/app/log
-    timeout: 10
-    agents:
-      queue: docker-heavy
-    artifact_paths:
-      - "coverage/.resultset*.json"
-      - "log/*.log"
-      - "log/*.xml"

data/.rspec

@@ -1,3 +0,0 @@
---format documentation
---color
---require spec_helper

data/.rubocop.yml

@@ -1,13 +0,0 @@
-AllCops:
-  TargetRubyVersion: 3.0
-
-Style/StringLiterals:
-  Enabled: true
-  EnforcedStyle: double_quotes
-
-Style/StringLiteralsInInterpolation:
-  Enabled: true
-  EnforcedStyle: double_quotes
-
-Layout/LineLength:
-  Max: 120

data/.ruby-version

@@ -1 +0,0 @@
-3.4.4

data/AGENTS.md

@@ -1,105 +0,0 @@
-# Agents
-
-This file provides guidance to AI coding agents working with code in this repository.
-
-## Commands
-
-```bash
-# Install dependencies
-bundle install
-
-# Open interactive console (auto-loads .env)
-bin/console
-
-# Run full test suite
-rspec
-
-# Run a single test file
-rspec spec/path/to/test_spec.rb
-
-# Run a single test by line number
-rspec spec/path/to/test_spec.rb:42
-
-# Lint
-rubocop
-
-# Run specs + rubocop together
-rake
-```
-
-Docker equivalents: prefix commands with `docker-compose run --rm app`.
-
-### Environment Setup
-
-Copy `env.sample` to `.env` and fill in:
-- `SUPERSET_HOST` — API base URL (required)
-- `SUPERSET_API_USERNAME` / `SUPERSET_API_PASSWORD` — API credentials (required)
-- `SUPERSET_ENVIRONMENT` — optional; loads `.env-{ENVIRONMENT}` instead
-- `CONSOLE_TIMEOUT` — seconds before auto-logout in console (default 1800)
-
-## Architecture
-
-### Request Framework
-
-All API interactions inherit from `Superset::Request` (`lib/superset/request.rb`). Subclasses implement:
-- `route` — returns the API path (e.g., `"dashboard/#{id}"`)
-- `filters` — returns a filter query string or `""`
-- `list_attributes` — array of field names used for terminal table display
-
-**Patterns by HTTP verb:**
-- **GET/LIST** — inherit `Superset::Request`, implement `route` and `filters`
-- **PUT** — inherit `Superset::BasePutRequest`, takes `target_id:` and `params:`, implement `route`
-- **DELETE/POST** — call `client.delete(route)` or `client.post(route, params)` directly
-
-Pagination is built into `Superset::Request` (default page size: 100, max: 1000). List classes accept `page_num:` and `page_size:` kwargs.
-
-### Authentication Flow
-
-1. `Superset::Client` (extends `Happi::Client`) includes `Credential::ApiUser` and creates a `Superset::Authenticator`
-2. `Authenticator` POSTs to `api/v1/security/login` and extracts `access_token`
-3. `Client#connection` builds a Faraday connection with Bearer token; supports both JSON and multipart modes (`config.use_json`)
-
-### Query Filter Syntax
-
-Superset uses an ORM-like filter string format:
-```
-filters:!((col:column_name,opr:operation,value:value)),
-```
-Common operations: `ct` (contains), `eq` (equals), `neq` (not equals), `rel_o_m`, `rel_m_m`, `dashboard_tags`.
-
-### Service Layer
-
-`lib/superset/services/` contains complex multi-step workflows. The main one is `DuplicateDashboard`, which:
-1. Validates source/target IDs, schema existence, and data sovereignty rules (all chart datasets must share the same DB schema)
-2. Copies the dashboard and its charts
-3. Duplicates datasets pointing to the target schema
-4. Rewires chart JSON metadata and filter configs to the new dataset IDs
-5. Optionally sets embedded config, tags, and publishes
-6. **Rolls back all created objects on failure**
-
-`ImportDashboardAcrossEnvironment` handles cross-environment migration via export/import ZIP files.
-
-### Display Mixin
-
-`Superset::Display` (`lib/superset/display.rb`) is included in `Superset::Request` and provides `list`, `rows`, `to_h`, and `ids`. Requires `list_attributes` and `result` to be implemented by the subclass.
-
-### Resource–Relationship Model
-
-- **Dashboards** contain **Charts**
-- **Charts** reference **Datasets** (datasources)
-- **Dashboard JSON metadata** stores layout, chart positions, and filter configurations
-- **Filters** reference Datasets for filter values
-- Duplication/migration requires updating all these cross-references
-
-### Conventions
-
-- Namespace: `Superset::<ResourceType>::<Action>` (e.g., `Superset::Dashboard::List`)
-- `perform` — executes a state-changing action, returns `self`
-- `response` — raw (cached) HTTP response
-- `result` — extracts `response['result']`
-- Constructor filter params follow naming: `title_contains:`, `title_equals:`, etc.
-- Logging goes through `Superset.logger`; by default writes to `log/superset-client.log`. Consumers can inject any `::Logger`-compatible object via `Superset.configure { |c| c.logger = your_logger }`.
-
-### Console Helpers
-
-In `bin/console`: `sshelp` (alias: `superset_class_list`) lists all available `Superset::` classes. On startup, `Superset::Database::List.call` prints available DB connections.

data/CLAUDE.md

@@ -1 +0,0 @@
-See [AGENTS.md](AGENTS.md) for project context and development instructions.

data/Dockerfile

@@ -1,17 +0,0 @@
-# 1: Use ruby 3.4.4 as base:
-FROM ruby:3.4.4
-
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends \
-    build-essential
-
-ENV BUNDLER_VERSION='2.4.22'
-RUN gem install bundler -v ${BUNDLER_VERSION}
-
-# 2: We'll set the application path as the working directory
-WORKDIR /app
-
-# 3: We'll add the app's binaries path to $PATH:
-ENV PATH=$PATH:/app/bin
-
-ENV BUNDLE_GITHUB__HTTPS=true BUNDLE_MAJOR_DEPRECATIONS=true

data/Rakefile

@@ -1,12 +0,0 @@
-# frozen_string_literal: true
-
-require "bundler/gem_tasks"
-require "rspec/core/rake_task"
-
-RSpec::Core::RakeTask.new(:spec)
-
-require "rubocop/rake_task"
-
-RuboCop::RakeTask.new
-
-task default: %i[spec rubocop]

data/docker-compose.override.yml

@@ -1,10 +0,0 @@
-version: '3'
-
-volumes:
-  bundle-data:
-    driver: local
-
-services:
-  app:
-    volumes:
-      - bundle-data:/usr/local/bundle

data/docker-compose.yml

@@ -1,8 +0,0 @@
-version: '3'
-
-services:
-  app:
-    build: .
-    command: setup
-    volumes:
-      - .:/app

data/env.sample

@@ -1,9 +0,0 @@
-SUPERSET_HOST="http://localhost:8080/"
-
-# general api calls
-SUPERSET_API_USERNAME="USERNAME"
-SUPERSET_API_PASSWORD="PASSWORD"
-
-# embedded user guest token api calls
-# SUPERSET_EMBEDDED_USERNAME="EMBEDDED-USERNAME"
-# SUPERSET_EMBEDDED_PASSWORD="EMBEDDED-PASSWORD"

data/log/README.md

@@ -1,4 +0,0 @@
-Log outputs of specific superset scription processes to be sent here.
-
-Dashboard Duplication Logs current logged to
-- log/superset-client.log

data/superset.gemspec

@@ -1,61 +0,0 @@
-# frozen_string_literal: true
-
-require_relative "lib/superset/version"
-
-Gem::Specification.new do |spec|
-  spec.name = "superset"
-  spec.version = Superset::VERSION
-  spec.authors = ["jbat"]
-  spec.email = ["jonathon.batson@gmail.com"]
-
-  spec.summary = "A Ruby Client for Apache Superset API"
-  spec.homepage = "https://github.com/rdytech/superset-client"
-  spec.license = "MIT"
-  spec.required_ruby_version = ">= 3"
-
-  #spec.metadata["allowed_push_host"] = ""
-
-  #spec.metadata["homepage_uri"] = spec.homepage
-  #spec.metadata["source_code_uri"] = ""
-  #spec.metadata["changelog_uri"] = ""
-
-  # Specify which files should be added to the gem when it is released.
-  # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
-  spec.files = Dir.chdir(__dir__) do
-    `git ls-files -z`.split("\x0").reject do |f|
-      (File.expand_path(f) == __FILE__) ||
-        f.start_with?(*%w[bin/ test/ spec/ features/ .git appveyor Gemfile])
-    end
-  end
-
-  #spec.bindir = "exe"
-  #spec.executables = spec.files.grep(%r{\Aexe/}) { |f| File.basename(f) }
-  spec.require_paths = [
-    "lib"
-  ]
-
-  spec.add_dependency "json", ">= 2.0"
-  spec.add_dependency "terminal-table", "~> 4.0"
-  spec.add_dependency "require_all", ">= 3.0"
-  # >= 1.10 because the connections use Faraday's own `f.response :json`
-  # (Faraday::Response::Json), which only ships from 1.10.
-  spec.add_dependency "faraday", "~> 1.10"
-  spec.add_dependency "faraday-multipart", "~> 1.0"
-  spec.add_dependency "faraday-cookie_jar", "~> 0.0.7"  # replay the Flask session cookie for CSRF
-  spec.add_dependency "enumerate_it", ">= 1.7"
-
-  # rubyzip is only needed by the dashboard import/export feature, which lazily
-  # `require 'zip'` at call time. Kept as a dev dependency so those specs run here,
-  # but NOT a runtime dependency — consumers that don't import/export (embedders,
-  # read/write API clients) shouldn't inherit its rubyzip >= 3 pin.
-  # Apps that DO use import/export must declare rubyzip (>= 3.0) themselves.
-  spec.add_development_dependency "rubyzip", ">= 3.0"
-  spec.add_development_dependency "dotenv", ">= 2.0"
-  spec.add_development_dependency "rake", ">= 13.0"
-  spec.add_development_dependency "rspec", ">= 3.0"
-  spec.add_development_dependency "rubocop", ">= 1.0"
-  spec.add_development_dependency "pry", ">= 0.14"
-
-  # For more information and examples about making a new gem, check out our
-  # guide at: https://bundler.io/guides/creating_gem.html
-end