* fix: ensure percent-encoded secrets get masked
Co-authored-by: Gregor Martynus <39992+gr2m@users.noreply.github.com>
* fix: mask secrets in the exact form url.format() embeds them in git URLs
The authenticated repository URL is built with the legacy url.format(),
which encodes the auth field like encodeURIComponent() except that ":"
separators are kept as is. A GIT_CREDENTIALS value such as
"user:abc@def-secret" therefore appears as "user:abc%40def-secret" in a
failing git command, a form matched by neither the raw value, encodeURI(),
nor encodeURIComponent() candidates, and leaked unmasked.
Add the colon-preserving encoded form to the redaction candidates, assert
the unit tests against URLs built the same way get-git-auth-url.js builds
them, and add an integration test reproducing the leak end-to-end with a
git remote on a closed loopback port.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---------
Co-authored-by: Matt Travi <programmer@travi.org>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
* refactor: remove obsolete branch, error, and plugin definitions
- Deleted the branches.js file, removing maintenance, prerelease, and release definitions.
- Removed errors.js, eliminating various error handling functions related to semantic-release.
- Eliminated plugins.js, which contained definitions for plugin configurations and behaviors.
- Cleaned up get-commits.js, get-config.js, get-error.js, get-last-release.js, get-next-version.js, get-release-to-add.js, and plugins/index.js, removing unused functions and streamlining the codebase.
- Refactored plugin normalization and pipeline execution logic in plugins/normalize.js and plugins/pipeline.js.
- Removed utility functions in plugins/utils.js that were no longer necessary.
- Cleaned up verify.js to remove redundant checks and streamline the verification process.
* refactor(tests): remove obsolete tests for plugins and verification
- Deleted tests for normalize, pipeline, and plugin utilities as they are no longer needed.
- Removed tests for verify functionality that were outdated and not aligned with current implementation.
- Cleaned up test files to streamline the testing process and improve maintainability.
* refactor: remove obsolete Git-related utilities and logging functions
* refactor: remove obsolete test files for logger, git, sensitive data handling, and utility functions
- Deleted `get-logger.test.js` as it is no longer needed.
- Removed `git.test.js` which contained extensive tests for git-related functionalities.
- Eliminated `hide-sensitive.test.js` that tested the sensitive data masking functionality.
- Purged `utils.test.js` which included various utility function tests.
* refactor: remove obsolete release type constants and notes separator
* refactor: integrate `core`; remove unused imports and restructuring the main export function
* test: add tests for core delegation and dry-run policy handling
* refactor: replace direct logger and env-ci replacements with a mockCore function for better test organization
* fix(code-quality): add missing comma in context object for consistency
* docs: update README to include information about the new core engine integration
* fix(revert): next (#4200)
* Revert "docs: update README to include information about the new core engine integration"
This reverts commit 4e476dee14.
* Revert "fix(code-quality): add missing comma in context object for consistency"
This reverts commit 493d6cdaa1.
* Revert "refactor: replace direct logger and env-ci replacements with a mockCore function for better test organization"
This reverts commit d05e160668.
* Revert "test: add tests for core delegation and dry-run policy handling"
This reverts commit 4f464a72ae.
* Revert "refactor: integrate `core`; remove unused imports and restructuring the main export function"
This reverts commit 3f5d1b785b.
* Revert "refactor: remove obsolete release type constants and notes separator"
This reverts commit 7d71f2eb14.
* Revert "refactor: remove obsolete test files for logger, git, sensitive data handling, and utility functions"
This reverts commit 1ae1a19cdf.
* Revert "refactor: remove obsolete Git-related utilities and logging functions"
This reverts commit bedddc4091.
* Revert "refactor(tests): remove obsolete tests for plugins and verification"
This reverts commit 7172195d12.
* Revert "refactor: remove obsolete branch, error, and plugin definitions"
This reverts commit 51d1f5f9b2.
* Merge branch 'master' of https://github.com/semantic-release/semantic-release into fix(revert)/next
* Revert "Merge branch 'master' of https://github.com/semantic-release/semantic-release into fix(revert)/next"
This reverts commit bbfdc36be6.
---------
Co-authored-by: babblebey <babblebey@gmail.com>
* Revert "docs: update README to include information about the new core engine integration"
This reverts commit 4e476dee14.
* Revert "fix(code-quality): add missing comma in context object for consistency"
This reverts commit 493d6cdaa1.
* Revert "refactor: replace direct logger and env-ci replacements with a mockCore function for better test organization"
This reverts commit d05e160668.
* Revert "test: add tests for core delegation and dry-run policy handling"
This reverts commit 4f464a72ae.
* Revert "refactor: integrate `core`; remove unused imports and restructuring the main export function"
This reverts commit 3f5d1b785b.
* Revert "refactor: remove obsolete release type constants and notes separator"
This reverts commit 7d71f2eb14.
* Revert "refactor: remove obsolete test files for logger, git, sensitive data handling, and utility functions"
This reverts commit 1ae1a19cdf.
* Revert "refactor: remove obsolete Git-related utilities and logging functions"
This reverts commit bedddc4091.
* Revert "refactor(tests): remove obsolete tests for plugins and verification"
This reverts commit 7172195d12.
* Revert "refactor: remove obsolete branch, error, and plugin definitions"
This reverts commit 51d1f5f9b2.
* Merge branch 'master' of https://github.com/semantic-release/semantic-release into fix(revert)/next
* Revert "Merge branch 'master' of https://github.com/semantic-release/semantic-release into fix(revert)/next"
This reverts commit bbfdc36be6.
- Deleted `get-logger.test.js` as it is no longer needed.
- Removed `git.test.js` which contained extensive tests for git-related functionalities.
- Eliminated `hide-sensitive.test.js` that tested the sensitive data masking functionality.
- Purged `utils.test.js` which included various utility function tests.
babblebey