head	1.2;
access;
symbols
	pkgsrc-2026Q3:1.1.0.2
	pkgsrc-2026Q3-base:1.1;
locks; strict;
comment	@# @;


1.2
date	2026.11.02.07.10.59;	author taca;	state Exp;
branches;
next	1.1;
commitid	zcgCTsi98UAd7R1H;

1.1
date	2026.07.20.05.13.18;	author taca;	state Exp;
branches;
next	;
commitid	CRpKqmnKCpz6QlOG;


desc
@@


1.2
log
@security/ruby-auth-sanitizer: update to 0.2.5

0.2.4 (2026-10-23)

Security

* SanitizedLogger now redacts configured keys in Ruby Hash#inspect output
  (both Ruby 3.4+ {"key" => "value"} / {key: "value"} and pre-3.4
  hash-rocket formats), fixes a mangling bug where the form-pair pattern
  partially matched :key=>"value" pairs, and no longer raises on
  invalid-encoded message bytes.  This closes the OAUTH_DEBUG
  cleartext-logging bypass reported for oauth2 as GHSA-cmh8-5q25-68v6, where
  Faraday renders Hash request bodies with pretty_inspect.  Reported by
  iamibi.

Other changes are too many to write here, please refer:
<https://github.com/ruby-oauth/auth-sanitizer/releases#release-v0.2.4>.


0.2.5 ((2026-10-25)

Added

* kettle-jem-template-20260720-001 - READMEs can now display configured
  corporate sponsor logos.

Changed

* [kc] kettle-jem/prepare: updated 15 project files:

	- dependencies (15)

* [kc] kettle-jem/template: updated 7 project files:

	- code and tests (1)
	- dependencies (2)
	- documentation (1)
	- other (2)
	- workflows (1)
@
text
@@@comment $NetBSD: PLIST,v 1.1 2026/07/20 05:13:18 taca Exp $
${GEM_HOME}/cache/${GEM_NAME}.gem
${GEM_LIBDIR}/CHANGELOG.md
${GEM_LIBDIR}/LICENSE.md
${GEM_LIBDIR}/README.md
${GEM_LIBDIR}/lib/auth/sanitizer.rb
${GEM_LIBDIR}/lib/auth/sanitizer/core.rb
${GEM_LIBDIR}/lib/auth/sanitizer/filtered_attributes.rb
${GEM_LIBDIR}/lib/auth/sanitizer/sanitized_logger.rb
${GEM_LIBDIR}/lib/auth/sanitizer/thing_filter.rb
${GEM_LIBDIR}/lib/auth/sanitizer/value_sanitizer.rb
${GEM_LIBDIR}/lib/auth/sanitizer/version.rb
${GEM_LIBDIR}/lib/auth_sanitizer/loader.rb
${GEM_LIBDIR}/sig/auth/sanitizer.rbs
${GEM_HOME}/specifications/${GEM_NAME}.gemspec
@


1.1
log
@security/ruby-auth-sanitizer: add version 0.2.3

This is required by newer security/ruby-oauth-tty package.


Auth::Sanitizer

auth-sanitizer provides small, dependency-light helpers for keeping OAuth
and authentication secrets out of object inspection and log output.
@
text
@d1 1
a1 1
@@comment $NetBSD$
a3 4
${GEM_LIBDIR}/CITATION.cff
${GEM_LIBDIR}/CODE_OF_CONDUCT.md
${GEM_LIBDIR}/CONTRIBUTING.md
${GEM_LIBDIR}/FUNDING.md
a4 1
${GEM_LIBDIR}/MIT.md
a5 3
${GEM_LIBDIR}/RUBOCOP.md
${GEM_LIBDIR}/SECURITY.md
${GEM_LIBDIR}/certs/pboling.pem
d11 1
a14 1
${GEM_LIBDIR}/sig/auth/sanitizer/version.rbs
@