From 6d800f277db95836957ff339a0268f1f505fd566 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= Date: Sun, 26 Jul 2026 22:21:53 +0200 Subject: [PATCH] fix(rotation): keep the gateway bearer's coverage guard real The rotation-coverage guard greps the script for a quoted column name. Listing the new column in the header comment satisfied that grep without the script rotating anything, which made the guard pass on a script that would have left the column behind. The comment now names it unquoted and says why. --- scripts/rotate-encryption-key.ts | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/scripts/rotate-encryption-key.ts b/scripts/rotate-encryption-key.ts index 06b10a0c5..1a2b34a32 100644 --- a/scripts/rotate-encryption-key.ts +++ b/scripts/rotate-encryption-key.ts @@ -170,8 +170,11 @@ async function main() { // "ouraClientSecretEncrypted" "stravaClientIdEncrypted" // "stravaClientSecretEncrypted" "stravaAccessTokenEncrypted" // "stravaRefreshTokenEncrypted" "aiAnthropicKeyEncrypted" - // "aiLocalKeyEncrypted" "aiOpenaiKeyEncrypted" "aiCompatKeyEncrypted" - // "insuranceNumberEncrypted" + // "aiLocalKeyEncrypted" "aiOpenaiKeyEncrypted" "insuranceNumberEncrypted" + // v1.33.1 adds the gateway bearer; it is named in the array below only. + // Quoting a column name in this comment would satisfy the coverage guard + // in encrypted-columns.test.ts without the script rotating anything, so + // the newest entry stays unquoted here on purpose. const userFields = [ "codexAccessTokenEncrypted", "codexRefreshTokenEncrypted",