🚀 Modern Security & Configuration Overhaul

[voltechs]

🚀 Modern Security & Configuration Overhaul

This major release modernizes the rubysu gem with comprehensive security fixes, a flexible configuration system, and enhanced Ruby compatibility.

🔒 Security Improvements

• Fix command injection vulnerabilities in kill, unlink, and check methods using array-form system calls
• Secure socket paths using SecureRandom instead of predictable object_id
• Array-form system calls throughout to prevent shell injection attacks

✨ New Features

Configuration System

• Global configuration with Sudo.configure block syntax
• Per-wrapper overrides for all configuration options
• Hash-like Configuration class with method_missing for clean property access
• Configurable options: timeout, socket_dir, sudo_askpass, load_gems

Enhanced DSL

• Sudo.as_root convenience method for simple operations
• Graphical password prompts via sudo -A and sudo_askpass configuration
• Flexible timeouts for connection establishment

Ruby Compatibility

• Ruby 2.7+ support with modern keyword arguments
• Fixed Bundler marshaling issues in Ruby 3.2+
• Modernized code following current Ruby best practices

💥 Breaking Changes

• Minimum Ruby version: 2.7+ (EOL compliance)
• CI migration: Travis CI → GitHub Actions + Qlty

🔧 Internal Improvements

• 78% test coverage with comprehensive edge case testing
• Robust error handling with safe navigation and proper cleanup
• Modern CI/CD with matrix testing across Ruby 2.7-3.3
• Code quality integration with Qlty analysis

📚 Documentation

• Updated README with v0.4.0 feature examples
• Comprehensive CHANGELOG with emoji categorization
• Configuration examples for all new features

Usage Examples

Simple DSL

Sudo.as_root(timeout: 30) do |sudo|
  sudo[FileUtils].mkdir_p '/secure/path'
end

Configuration

Sudo.configure do |config|
  config.timeout = 15
  config.sudo_askpass = '/usr/bin/ssh-askpass'
end

Per-wrapper overrides

Sudo::Wrapper.run(load_gems: false, socket_dir: '/var/run') do |sudo|
  sudo[File].write('/etc/config', data)
end

[gderosa]

This look absolutely great. Thanks for running this. Okay to merge imho.