head	1.2;
access;
symbols
	pkgsrc-2026Q3:1.1.0.2
	pkgsrc-2026Q3-base:1.1;
locks; strict;
comment	@# @;


1.2
date	2026.11.02.07.10.59;	author taca;	state Exp;
branches;
next	1.1;
commitid	zcgCTsi98UAd7R1H;

1.1
date	2026.07.20.05.13.18;	author taca;	state Exp;
branches;
next	;
commitid	CRpKqmnKCpz6QlOG;


desc
@@


1.2
log
@security/ruby-auth-sanitizer: update to 0.2.5

0.2.4 (2026-10-23)

Security

* SanitizedLogger now redacts configured keys in Ruby Hash#inspect output
  (both Ruby 3.4+ {"key" => "value"} / {key: "value"} and pre-3.4
  hash-rocket formats), fixes a mangling bug where the form-pair pattern
  partially matched :key=>"value" pairs, and no longer raises on
  invalid-encoded message bytes.  This closes the OAUTH_DEBUG
  cleartext-logging bypass reported for oauth2 as GHSA-cmh8-5q25-68v6, where
  Faraday renders Hash request bodies with pretty_inspect.  Reported by
  iamibi.

Other changes are too many to write here, please refer:
<https://github.com/ruby-oauth/auth-sanitizer/releases#release-v0.2.4>.


0.2.5 ((2026-10-25)

Added

* kettle-jem-template-20260720-001 - READMEs can now display configured
  corporate sponsor logos.

Changed

* [kc] kettle-jem/prepare: updated 15 project files:

	- dependencies (15)

* [kc] kettle-jem/template: updated 7 project files:

	- code and tests (1)
	- dependencies (2)
	- documentation (1)
	- other (2)
	- workflows (1)
@
text
@# $NetBSD: Makefile,v 1.1 2026/07/20 05:13:18 taca Exp $

DISTNAME=	auth-sanitizer-0.2.5
CATEGORIES=	security

MAINTAINER=	pkgsrc-users@@NetBSD.org
HOMEPAGE=	https://github.com/ruby-oauth/auth-sanitizer
COMMENT=	Configurable KV output redaction
LICENSE=	mit

DEPENDS+=	${RUBY_PKGPREFIX}-version_gem>=1.1.16<2:../../devel/ruby-version_gem

USE_LANGUAGES=	# none

.include "../../lang/ruby/gem.mk"
.include "../../mk/bsd.pkg.mk"
@


1.1
log
@security/ruby-auth-sanitizer: add version 0.2.3

This is required by newer security/ruby-oauth-tty package.


Auth::Sanitizer

auth-sanitizer provides small, dependency-light helpers for keeping OAuth
and authentication secrets out of object inspection and log output.
@
text
@d1 1
a1 1
# $NetBSD$
d3 1
a3 1
DISTNAME=	auth-sanitizer-0.2.3
d11 1
a11 1
DEPENDS+=	${RUBY_PKGPREFIX}-version_gem>=1.1.14<2:../../devel/ruby-version_gem
@