@adobe-commerce/aio-toolkit 1.0.7 → 1.0.8

package/CHANGELOG.md

@@ -5,6 +5,53 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.8] - 2025-11-18
+
+### 🔒 Security Fixes
+
+- **OnboardCommerce & OnboardEvents** `[Security]` - Removed sensitive payload logging (#94)
+  - Eliminated all sensitive data exposure in debug logs across onboarding components
+  - Modified `OnboardCommerce.subscribeToEvents()` to log only event names instead of full payloads
+  - Updated `ConfigureProvider` to log only provider/merchant IDs instead of complete configuration objects
+  - Changed `CreateRegistrations` to log only registration names instead of input payloads
+  - Modified `CreateProviders` to log only provider labels instead of full input data
+  - Prevents exposure of API keys, access tokens, client secrets, and merchant credentials
+  - Reduces security risks in console output, CI/CD logs, and debug sessions
+  - Maintains useful debugging context while protecting sensitive information
+  - 100% test coverage maintained
+
+### 🐛 Bug Fixes
+
+- **FileRepository** `[Fixed]` - Preserve file timestamps in save() method (#93)
+  - Fixed `save()` method to preserve `createdAt` timestamp when updating existing files
+  - Removed unnecessary `filesLib.delete()` call that was resetting file creation timestamp
+  - Now relies on `filesLib.write()` to overwrite content while preserving file metadata
+  - Applies to both merge mode (default) and overwrite mode (`overwrite=true`)
+  - File system's native `createdAt` timestamp is now correctly maintained across updates
+  - Updated tests to verify `delete` is never called in either mode
+  - 100% test coverage maintained
+
+### ✨ Enhancements
+
+- **GitHub Issue Templates** `[Enhanced]` - Updated with comprehensive component list (#95)
+  - Added 32+ components organized by category across all three issue templates
+  - New category headers: Commerce, Integration, Framework, I/O Events, Experience, Other
+  - Added missing components:
+    - Commerce: BasicAuthConnection, Oauth1aConnection, ImsConnection, GenerateBasicAuthToken, ShippingCarrierMethod, ShippingCarrierResponse
+    - Integration: CreateEvents, CreateRegistrations, OnboardCommerce
+    - Framework: RuntimeActionResponse, WebhookAction, WebhookActionResponse, ImsToken, RuntimeApiGatewayService, Parameters/Validator
+    - I/O Events: EventMetadataManager, ProviderManager, RegistrationManager
+    - Experience: AdminUiSdk
+  - Improved user experience with visual category separation in dropdowns
+  - Better issue triaging and component-level tracking for maintainers
+  - All templates (bug_report.yml, feature_request.yml, question.yml) updated consistently
+
+### 📊 Statistics
+
+- **Total Components**: 32+ selectable options across 5 categories
+- **Test Coverage**: 100% maintained (1679 tests passing)
+- **Files Changed**: 7 files across 3 PRs
+
 ## [1.0.7] - 2025-11-12
 
 ### 🚀 PaaS Support for Adobe Commerce Event Subscriptions

package/dist/index.js

@@ -553,7 +553,6 @@ var _FileRepository = class _FileRepository {
           const existingData = JSON.parse(buffer.toString());
           payload = { ...existingData, ...payload };
         }
-        await filesLib.delete(filepath);
       } else {
         payload = {
           id: fileId,
@@ -4434,9 +4433,7 @@ var _CreateProviders = class _CreateProviders {
     }
     try {
       const providerInput = this.preparePayload(providerData, enhancedLabel);
-      this.logger.debug(
-        `[NEW] Creating new provider with payload: ${JSON.stringify(providerInput)}`
-      );
+      this.logger.debug(`[NEW] Creating new provider: ${enhancedLabel}`);
       const createdProvider = await this.getProviderManager().create(providerInput);
       this.logger.debug(
         `[INFO] Provider created successfully! ID: ${createdProvider.id}, Instance ID: ${createdProvider.instance_id}`
@@ -4955,7 +4952,7 @@ var _CreateRegistrations = class _CreateRegistrations {
         registrationName,
         firstEvent
       );
-      this.logger.debug(`[INFO] Registration input: ${JSON.stringify(registrationInput, null, 2)}`);
+      this.logger.debug(`[INFO] Creating registration: ${registrationName}`);
       const registrationSDK = this.getRegistrationManager();
       const createdRegistration = await registrationSDK.create(registrationInput);
       this.logger.debug("[SUCCESS] Registration created successfully!");
@@ -5518,10 +5515,7 @@ var _ConfigureProvider = class _ConfigureProvider {
       description: provider.description,
       workspace_configuration: JSON.stringify(workspaceConfig)
     };
-    this.customLogger.debug(
-      `[DEBUG] Creating event provider:
-${JSON.stringify(providerData, null, 2)}`
-    );
+    this.customLogger.debug(`[DEBUG] Creating event provider: ${provider.label} (${provider.id})`);
     const createResult = await this.eventProviderService.create(providerData);
     if (!createResult.success) {
       const errorMsg = `Failed to create event provider: ${createResult.error}`;
@@ -5559,8 +5553,7 @@ ${JSON.stringify(providerData, null, 2)}`
         workspace_configuration: JSON.stringify(workspaceConfig)
       };
       this.customLogger.debug(
-        `[DEBUG] Updating configuration with payload:
-${JSON.stringify(updateConfigPayload, null, 2)}`
+        `[DEBUG] Updating workspace configuration for merchant: ${this.merchantId}`
       );
       const updateResult = await this.eventConfigurationService.update(updateConfigPayload);
       if (!updateResult.success) {
@@ -5735,10 +5728,7 @@ var _OnboardCommerce = class _OnboardCommerce {
         for (const commerceEvent of needsSubscription) {
           try {
             const preparedEvent = this.prepareEventPayload(commerceEvent, provider.id);
-            this.customLogger.debug(
-              `[DEBUG] Subscribing to event with payload:
-${JSON.stringify(preparedEvent.event, null, 2)}`
-            );
+            this.customLogger.debug(`[DEBUG] Subscribing to event: ${commerceEvent.event.name}`);
             const eventSubscribeResult = await this.eventSubscriptionService.create(
               preparedEvent.event
             );