gapless-crypto-data 5.0.2__tar.gz → 5.0.3__tar.gz

{gapless_crypto_data-5.0.2 → gapless_crypto_data-5.0.3}/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to gapless-crypto-data will be documented in this file.
 
+## [5.0.3](https://github.com/terrylica/gapless-crypto-data/compare/v5.0.2...v5.0.3) (2026-10-16)
+
+### Bug Fixes
+
+* **notify:** pass the Pushover token and user key to curl on stdin, not argv ([12b462f](https://github.com/terrylica/gapless-crypto-data/commit/12b462f7dcadb73beaf333bcaa3058111e6b4d57))
+
 ## [5.0.2](https://github.com/terrylica/gapless-crypto-data/compare/v5.0.1...v5.0.2) (2026-08-31)
 
 ### Bug Fixes

{gapless_crypto_data-5.0.2 → gapless_crypto_data-5.0.3}/Earthfile

@@ -76,11 +76,13 @@ pushover-notify:
     FROM alpine:3.19
     RUN apk add --no-cache curl
 
-    # Send Pushover notification
+    # Send Pushover notification. The token and user key reach curl as a config on stdin (-K -),
+    # never as arguments (argv is readable by `ps`). Pushover keys are alphanumeric; anything else
+    # is refused so it cannot break the config syntax.
     RUN --no-cache --secret PUSHOVER_USER_KEY --secret PUSHOVER_APP_TOKEN \
-        curl -s \
-        --form-string "token=$PUSHOVER_APP_TOKEN" \
-        --form-string "user=$PUSHOVER_USER_KEY" \
+        case "$PUSHOVER_APP_TOKEN$PUSHOVER_USER_KEY" in *[!A-Za-z0-9]*) echo "Pushover key is not alphanumeric" >&2; exit 1 ;; esac && \
+        printf 'form-string = "token=%s"\nform-string = "user=%s"\n' "$PUSHOVER_APP_TOKEN" "$PUSHOVER_USER_KEY" \
+        | curl -s -K - \
         --form-string "title=$TITLE" \
         --form-string "message=Version $VERSION released successfully" \
         --form-string "url=$RELEASE_URL" \

{gapless_crypto_data-5.0.2 → gapless_crypto_data-5.0.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: gapless-crypto-data
-Version: 5.0.2
+Version: 5.0.3
 Summary: Cryptocurrency OHLCV data collection with gap-free guarantee. Retrieves microstructure-enriched kline data from Binance Public Data Repository with automatic gap detection and filling.
 Project-URL: Homepage, https://github.com/terrylica/gapless-crypto-data
 Project-URL: Documentation, https://github.com/terrylica/gapless-crypto-data#readme

{gapless_crypto_data-5.0.2 → gapless_crypto_data-5.0.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "gapless-crypto-data"
-version = "5.0.2"
+version = "5.0.3"
 description = "Cryptocurrency OHLCV data collection with gap-free guarantee. Retrieves microstructure-enriched kline data from Binance Public Data Repository with automatic gap detection and filling."
 readme = { file = "README.md", content-type = "text/markdown" }
 authors = [

{gapless_crypto_data-5.0.2 → gapless_crypto_data-5.0.3}/scripts/test-pushover.sh

@@ -39,10 +39,12 @@ PUSHOVER_APP_TOKEN=$(doppler secrets get PUSHOVER_APP_TOKEN --project notificati
     exit 1
 }
 
-# Send test notification
-RESPONSE=$(curl -s \
-    --form-string "token=$PUSHOVER_APP_TOKEN" \
-    --form-string "user=$PUSHOVER_USER_KEY" \
+# Send test notification. The token and user key reach curl as a config on stdin (-K -), never
+# as arguments (argv is readable by every user's `ps`); escaped for curl's config syntax.
+PO_TOK=${PUSHOVER_APP_TOKEN//\\/\\\\}; PO_TOK=${PO_TOK//\"/\\\"}
+PO_USR=${PUSHOVER_USER_KEY//\\/\\\\}; PO_USR=${PO_USR//\"/\\\"}
+RESPONSE=$(printf 'form-string = "token=%s"\nform-string = "user=%s"\n' "$PO_TOK" "$PO_USR" \
+    | curl -s -K - \
     --form-string "title=gapless-crypto-data Test" \
     --form-string "message=Test notification for version $VERSION" \
     --form-string "url=$RELEASE_URL" \

{gapless_crypto_data-5.0.2 → gapless_crypto_data-5.0.3}/src/gapless_crypto_data/__init__.py

@@ -34,7 +34,7 @@ Usage:
     result = collector.collect_timeframe_data("1h")
 """
 
-__version__ = "5.0.2"
+__version__ = "5.0.3"
 __author__ = "Eon Labs"
 __email__ = "terry@eonlabs.com"
 

{gapless_crypto_data-5.0.2 → gapless_crypto_data-5.0.3}/uv.lock

@@ -1,5 +1,5 @@
 version = 1
-revision = 3
+revision = 5
 requires-python = ">=3.9"
 resolution-markers = [
     "python_full_version >= '3.12'",
@@ -368,7 +368,7 @@ wheels = [
 
 [[package]]
 name = "gapless-crypto-data"
-version = "5.0.2"
+version = "5.0.3"
 source = { editable = "." }
 dependencies = [
     { name = "duckdb" },