RubyGems - unit-ruby - Versions diffs - 1.0.0 → 1.1.1 - Mend

unit-ruby 1.0.0 → 1.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (11) hide show

checksums.yaml +4 -4
data/.github/workflows/ci.yml +4 -3
data/.github/workflows/release.yml +86 -0
data/.gitignore +4 -0
data/.rubocop.yml +1 -1
data/CHANGELOG.md +20 -2
data/README.md +7 -9
data/lib/unit-ruby/version.rb +1 -1
data/unit-ruby.gemspec +2 -2
metadata +16 -14
data/Gemfile.lock +0 -95

checksums.yaml CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1497f1a94c4658c70e2902a5c8d50f12d129002b02ca7e05bcc8f1d89a601fd8
-  data.tar.gz: f203bc0ba92691c088ae423ed712be0a24ca6b1676baf8d0d89c3ed60b9afcb8
+  metadata.gz: 25b9811586fc39305b1c82248f0ad8f509b160f68cd1af3f4e5b8e9b39a93197
+  data.tar.gz: 160a4495282bf05385e221ae4d6a816c67669093d40de86cd8cdea6006fa1673
 SHA512:
-  metadata.gz: f1edfa3ff3615560ff396d44314d7c4551b427da4ace19502e819ab7c4af366e1d371bdddbd73fefa33d4acaf0d0e51a784e6120cc3bab020527460426597def
-  data.tar.gz: '07246815b370ca22e46d055a455911d4fde32ee56b53f99997e1f0797e5f4e3b346a6ea77cf80b9da959af72570957e0615e288d60ac9992ce0c0877f57ae960'
+  metadata.gz: 5b007e90dc256b5b099c2d4a665bf64335130471b6a642cf4cf276ced33d8ecec8eec2d9e9560736b53acbd847bd4320ac0a278b1d4dc867b0056664fe536513
+  data.tar.gz: 78240e4d1fa34353ea59eb2ff7f1febce20fea424a1bb4fc209f0915185f2851e357de6ae4013b42c91f325fe7daa28d1987ca740b24289bd3052e00dc5ca333

data/.github/workflows/ci.yml CHANGED Viewed

@@ -23,13 +23,14 @@ jobs:
   test:
     runs-on: ubuntu-latest
     strategy:
+      fail-fast: false
       matrix:
-        ruby-version: ["3.3", "3.4"]
+        ruby-version: ["3.4", "4.0"]
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1.312.0
         with:
           ruby-version: ${{ matrix.ruby-version }}
           bundler-cache: true # runs 'bundle install' and caches installed gems automatically

data/.github/workflows/release.yml ADDED Viewed

@@ -0,0 +1,86 @@
+# Publishes the gem to RubyGems.org via OIDC trusted publishing whenever
+# lib/unit-ruby/version.rb changes on main. No long-lived API key is stored:
+# configure-rubygems-credentials exchanges a short-lived GitHub OIDC token for
+# RubyGems credentials by assuming the OIDC API key role configured on
+# rubygems.org. `bundle exec rake release` then builds the gem, creates and
+# pushes the vX.Y.Z tag, and publishes to RubyGems.org.
+name: Release
+on:
+  push:
+    branches: [main]
+    paths:
+      - lib/unit-ruby/version.rb
+# Never run two releases at once.
+concurrency:
+  group: release
+  cancel-in-progress: false
+jobs:
+  push:
+    name: Push gem to RubyGems.org
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write # push the version tag
+      id-token: write # mint the OIDC token for trusted publishing
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+          persist-credentials: false
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1.312.0
+        with:
+          ruby-version: "3.4"
+          bundler-cache: true
+      - name: Read and validate gem version
+        id: version
+        run: |
+          version="$(ruby -e 'require "./lib/unit-ruby/version"; print Unit::VERSION')"
+          # Enforce semver before the value is used anywhere else, so a crafted
+          # version string can't smuggle shell metacharacters into later steps.
+          if [[ ! "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.-]+)?(\+[0-9A-Za-z.-]+)?$ ]]; then
+            echo "Invalid version format: $version" >&2
+            exit 1
+          fi
+          echo "version=$version" >> "$GITHUB_OUTPUT"
+      - name: Check whether this version is already tagged
+        id: tag
+        env:
+          VERSION: ${{ steps.version.outputs.version }}
+        run: |
+          if git rev-parse "v$VERSION" >/dev/null 2>&1; then
+            echo "Version v$VERSION already released; skipping."
+            echo "exists=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "exists=false" >> "$GITHUB_OUTPUT"
+          fi
+      - name: Configure RubyGems credentials
+        if: steps.tag.outputs.exists == 'false'
+        uses: rubygems/configure-rubygems-credentials@762a4b77c3300434bb57c7ce80b20e36231927aa # v2.0.0
+        with:
+          role-to-assume: rg_oidc_akr_54hgswsa4knajxk89skj
+      - name: Set git identity and push URL
+        if: steps.tag.outputs.exists == 'false'
+        run: |
+          # Attribute the release tag to the last committer on HEAD.
+          git config --global user.email "$(git log -1 --pretty=format:'%ae')"
+          git config --global user.name "$(git log -1 --pretty=format:'%an')"
+          # Restore push credentials (checkout ran with persist-credentials: false)
+          # so `rake release` can push the tag.
+          git remote set-url origin "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@github.com/$GITHUB_REPOSITORY"
+      - name: Release
+        if: steps.tag.outputs.exists == 'false'
+        run: bundle exec rake release
+      - name: Wait for release to propagate
+        if: steps.tag.outputs.exists == 'false'
+        run: |
+          gem install rubygems-await
+          gem_tuple="$(ruby -rbundler/setup -rbundler -e '
+              spec = Bundler.definition.specs.find {|s| s.name == ARGV[0] }
+              raise "No spec for #{ARGV[0]}" unless spec
+              print [spec.name, spec.version, spec.platform].join(":")
+            ' "unit-ruby")"
+          gem await "${gem_tuple}"

data/.gitignore CHANGED Viewed

@@ -11,3 +11,7 @@
 # rspec failure tracking
 .rspec_status
 .env
+# Library gem: dependencies are resolved by the consuming app against the
+# gemspec, so the lockfile is not committed. CI resolves fresh on each run.
+Gemfile.lock

data/.rubocop.yml CHANGED Viewed

@@ -9,7 +9,7 @@ Style/MutableConstant:
 Layout/LineLength:
     Max: 100
-    IgnoredPatterns: ['(\A|\s)#']
+    AllowedPatterns: ['(\A|\s)#']
 Style/Documentation:
     Enabled: false

data/CHANGELOG.md CHANGED Viewed

@@ -1,5 +1,23 @@
 # Changelog
-## 0.1.0
+## 1.1.1
-Initial release
+- Publish releases automatically to RubyGems.org via OIDC trusted publishing when `version.rb` changes on `main`.
+## 1.1.0
+- Support Rails 8 / Active Support 8 (widen the `activesupport` dependency to `>= 7.0, < 9`).
+- Stop committing `Gemfile.lock` so applications resolve dependencies against the gemspec
+## 1.0.1
+- Resolve dependency vulnerabilities by bumping vulnerable transitive dependencies.
+## 1.0.0
+- First stable release, promoting the 0.12.x API to 1.0 with no breaking changes.
+- Expanded README documentation and cleaned up the gemspec and CI configuration.
+## 0.1.0
+Initial release

data/README.md CHANGED Viewed

@@ -1,6 +1,6 @@
 # Unit Ruby
-![Gem Version](https://img.shields.io/gem/v/unit-ruby)
+[![Gem Version](https://img.shields.io/gem/v/unit-ruby)](https://rubygems.org/gems/unit-ruby/)
 [![Ruby](https://github.com/retirable/unit-ruby/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/retirable/unit-ruby/actions/workflows/ci.yml)
 ![GitHub License](https://img.shields.io/github/license/retirable/unit-ruby)
@@ -8,7 +8,7 @@ A Ruby SDK for the [Unit's Banking-as-a-Service API](https://docs.unit.co/).
 > [!IMPORTANT]
 >
-> The development of the `unit-ruby` gem is sponsored and used in production by [Retirable](https://retirable).
+> The development of the [`unit-ruby`](https://rubygems.org/gems/unit-ruby/) gem is sponsored and used in production by [Retirable](https://retirable).
 >
 > If you are starting a new project, you might want to consider Unit's officially supported gem, [`unit-ruby-sdk`](https://github.com/unit-finance/unit-ruby-sdk)
@@ -129,15 +129,13 @@ $ bundle exec rake install
 ## Releasing
-In order to publish this gem on [RubyGems.org](https://rubygems.org/), you will need to create a RubyGems account. Note that multi-factor authentication must be set up on your account before a gem can be published.
+Releases are minted automatically. When a change to `lib/unit-ruby/version.rb` lands on `main`, the [Release workflow](.github/workflows/release.yml) builds the gem, tags the commit `vX.Y.Z`, and publishes to [RubyGems.org](https://rubygems.org/gems/unit-ruby/). No manual `gem push` is required, and no RubyGems API key is stored — the workflow authenticates via [OIDC trusted publishing](https://guides.rubygems.org/trusted-publishing/).
-Once your account is set up, the following operations will facilitate publishing the latest version of the gem:
+To cut a release:
-1. After making your changes to the gem, update the version number in `version.rb` and open a PR for review using semantic versioning
-2. Ensure that PR request is approved by appropriate member(s) of the engineering team before publishing the gem in the below steps
-3. Run `gem build unit-ruby`. This will build a version of the gem called `unit-ruby-[gem version number].gem`
-4. Push this latest version of the gem to RubyGems.org by calling `gem push unit-ruby-[gem version number].gem`
-5. Merge PR into `main` branch
+1. Make your changes, then bump the version in `lib/unit-ruby/version.rb` following [semantic versioning](https://semver.org/) and add an entry to `CHANGELOG.md`.
+2. Open a PR and get it approved by the appropriate member(s) of the engineering team.
+3. Merge to `main`. The Release workflow publishes the new version automatically. If the version is unchanged, no release is cut.
 ## Contributing

data/lib/unit-ruby/version.rb CHANGED Viewed

@@ -1,3 +1,3 @@
 module Unit
-  VERSION = '1.0.0'
+  VERSION = '1.1.1'
 end

data/unit-ruby.gemspec CHANGED Viewed

@@ -29,11 +29,11 @@ Gem::Specification.new do |spec|
   spec.required_ruby_version = '>= 3.3'
-  spec.add_dependency 'activesupport', '~> 7'
+  spec.add_dependency 'activesupport', '>= 7.0', '< 9'
   spec.add_dependency 'faraday', '~> 2'
   spec.add_dependency 'faraday-retry', '~> 2'
-  spec.add_development_dependency 'dotenv', '~> 2'
+  spec.add_development_dependency 'dotenv', '~> 3'
   spec.add_development_dependency 'pry', '~> 0.15'
   spec.add_development_dependency 'rake', '~> 13'
   spec.add_development_dependency 'rspec', '~> 3'

metadata CHANGED Viewed

@@ -1,31 +1,36 @@
 --- !ruby/object:Gem::Specification
 name: unit-ruby
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.1.1
 platform: ruby
 authors:
 - Chloe Isacke
 - Ian Yamey
 - Trevor Nelson
-autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-06-05 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.0'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '7'
+        version: '9'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.0'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '7'
+        version: '9'
 - !ruby/object:Gem::Dependency
   name: faraday
   requirement: !ruby/object:Gem::Requirement
@@ -60,14 +65,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2'
+        version: '3'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2'
+        version: '3'
 - !ruby/object:Gem::Dependency
   name: pry
   requirement: !ruby/object:Gem::Requirement
@@ -138,7 +143,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1'
-description:
 email:
 - chloe@retirable.com
 - ian@retirable.com
@@ -149,13 +153,13 @@ extra_rdoc_files: []
 files:
 - ".env.example"
 - ".github/workflows/ci.yml"
+- ".github/workflows/release.yml"
 - ".gitignore"
 - ".rspec"
 - ".rubocop.yml"
 - CHANGELOG.md
 - CODE_OF_CONDUCT.md
 - Gemfile
-- Gemfile.lock
 - LICENSE.txt
 - README.md
 - Rakefile
@@ -220,7 +224,6 @@ metadata:
   source_code_uri: https://github.com/retirable/unit-ruby
   changelog_uri: https://github.com/retirable/unit-ruby/blob/main/CHANGELOG.md
   rubygems_mfa_required: 'true'
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -235,8 +238,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.22
-signing_key:
+rubygems_version: 3.6.9
 specification_version: 4
 summary: A Ruby gem for communicating with the Unit API.
 test_files: []

data/Gemfile.lock DELETED Viewed

@@ -1,95 +0,0 @@
-PATH
-  remote: .
-  specs:
-    unit-ruby (1.0.0)
-      activesupport (~> 7)
-      faraday (~> 2)
-      faraday-retry (~> 2)
-GEM
-  remote: https://rubygems.org/
-  specs:
-    activesupport (7.0.8.7)
-      concurrent-ruby (~> 1.0, >= 1.0.2)
-      i18n (>= 1.6, < 2)
-      minitest (>= 5.1)
-      tzinfo (~> 2.0)
-    ast (2.4.2)
-    coderay (1.1.3)
-    concurrent-ruby (1.3.4)
-    diff-lcs (1.5.1)
-    dotenv (2.7.6)
-    faraday (2.12.2)
-      faraday-net_http (>= 2.0, < 3.5)
-      json
-      logger
-    faraday-net_http (3.4.0)
-      net-http (>= 0.5.0)
-    faraday-retry (2.2.1)
-      faraday (~> 2.0)
-    i18n (1.14.6)
-      concurrent-ruby (~> 1.0)
-    json (2.9.1)
-    logger (1.6.4)
-    method_source (1.1.0)
-    minitest (5.25.4)
-    net-http (0.6.0)
-      uri
-    parallel (1.26.3)
-    parser (3.3.6.0)
-      ast (~> 2.4.1)
-      racc
-    pry (0.15.2)
-      coderay (~> 1.1)
-      method_source (~> 1.0)
-    racc (1.8.1)
-    rainbow (3.1.1)
-    rake (13.2.1)
-    regexp_parser (2.10.0)
-    rexml (3.4.0)
-    rspec (3.13.0)
-      rspec-core (~> 3.13.0)
-      rspec-expectations (~> 3.13.0)
-      rspec-mocks (~> 3.13.0)
-    rspec-core (3.13.2)
-      rspec-support (~> 3.13.0)
-    rspec-expectations (3.13.3)
-      diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.13.0)
-    rspec-file_fixtures (0.1.9)
-      rspec (~> 3.12)
-    rspec-mocks (3.13.2)
-      diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.13.0)
-    rspec-support (3.13.2)
-    rubocop (1.24.1)
-      parallel (~> 1.10)
-      parser (>= 3.0.0.0)
-      rainbow (>= 2.2.2, < 4.0)
-      regexp_parser (>= 1.8, < 3.0)
-      rexml
-      rubocop-ast (>= 1.15.1, < 2.0)
-      ruby-progressbar (~> 1.7)
-      unicode-display_width (>= 1.4.0, < 3.0)
-    rubocop-ast (1.37.0)
-      parser (>= 3.3.1.0)
-    ruby-progressbar (1.13.0)
-    tzinfo (2.0.6)
-      concurrent-ruby (~> 1.0)
-    unicode-display_width (2.6.0)
-    uri (1.0.3)
-PLATFORMS
-  ruby
-DEPENDENCIES
-  dotenv (~> 2)
-  pry (~> 0.15)
-  rake (~> 13)
-  rspec (~> 3)
-  rspec-file_fixtures (~> 0.1.9)
-  rubocop (~> 1)
-  unit-ruby!
-BUNDLED WITH
-   2.4.19