chore(release): backmerge main → develop (v3.0.1)

CHANGELOG.md

@@ -1,5 +1,14 @@
 # Fetcher Changelog
 
+## [3.0.1](https://github.com/LerianStudio/fetcher/releases/tag/v3.0.1)
+
+Fixes:
+- Decrypt CRM `regulatory_fields` and `related_parties` PII to ensure proper handling of sensitive information. (@arthurkz)
+
+[Compare changes](https://github.com/LerianStudio/fetcher/compare/v3.0.0...v3.0.1)
+
+---
+
 ## [3.0.0](https://github.com/LerianStudio/fetcher/releases/tag/v3.0.0)
 
 Features:

go.mod

@@ -65,7 +65,7 @@ require (
 	dario.cat/mergo v1.0.2 // indirect
 	filippo.io/edwards25519 v1.2.0 // indirect
 	github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
-	github.com/LerianStudio/fetcher/pkg/engine v1.1.0-beta.2
+	github.com/LerianStudio/fetcher/pkg/engine v1.2.3
 	github.com/Microsoft/go-winio v0.6.2 // indirect
 	github.com/acobaugh/osrelease v0.1.0 // indirect
 	github.com/andybalholm/brotli v1.2.2 // indirect

go.sum

@@ -28,8 +28,8 @@ github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0 h1:XRzhVemXdgv
 github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0/go.mod h1:HKpQxkWaGLJ+D/5H8QRpyQXA1eKjxkFlOMwck5+33Jk=
 github.com/DATA-DOG/go-sqlmock v1.5.2 h1:OcvFkGmslmlZibjAjaHm3L//6LiuBgolP7OputlJIzU=
 github.com/DATA-DOG/go-sqlmock v1.5.2/go.mod h1:88MAG/4G7SMwSE3CeA0ZKzrT5CiOU3OJ+JlNzwDqpNU=
-github.com/LerianStudio/fetcher/pkg/engine v1.1.0-beta.2 h1:kSWIIuO7E7fng1Jm9JQ4jB7fXCiFq0Wctw8OJ52pDCM=
-github.com/LerianStudio/fetcher/pkg/engine v1.1.0-beta.2/go.mod h1:xXErB201MHozXYy18EHPq99vXmy+gg0rDkI8Tx9nXSk=
+github.com/LerianStudio/fetcher/pkg/engine v1.2.3 h1:cnq3puVS+u/JPXV1S4t8RGHSOpG0gHEiVu5W/bY27sM=
+github.com/LerianStudio/fetcher/pkg/engine v1.2.3/go.mod h1:xXErB201MHozXYy18EHPq99vXmy+gg0rDkI8Tx9nXSk=
 github.com/LerianStudio/lib-auth/v2 v2.9.0 h1:HB9eOtgn+deX4blOjsbb2qNCNoib3T0iIZIf24t15y8=
 github.com/LerianStudio/lib-auth/v2 v2.9.0/go.mod h1:rRMBaO19OYcNLxXULTQm+uj49/lpf9BU4TAQyvgvTJk=
 github.com/LerianStudio/lib-commons/v5 v5.10.0 h1:Z/91NMWfdYCb1B5xwChIlTC7f7aIr2YsNWdUpl2icyw=

pkg/engine/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog — github.com/LerianStudio/fetcher/pkg/engine
 
+## pkg/engine 1.2.3
+
+Released alongside parent 3.1.0.
+
+
+## pkg/engine 1.1.1
+
+Released alongside parent 3.0.2.
+
+
+## pkg/engine 1.1.0
+
+Released alongside parent 3.0.1.
+
+
 ## pkg/engine 1.1.0-beta.2
 
 Released alongside parent 3.1.0-beta.2 (beta).

scripts/release/engine-release.mjs

@@ -337,12 +337,18 @@ function doPrepare(opts) {
       }
     : {};
 
-  const off = { GOWORK: 'off', GOFLAGS: '-mod=mod' };
-  run('go', ['mod', 'download', `${ENGINE_MODULE}@v${version}`], { ...off, ...gitPrivateEnv });
-  run('go', ['mod', 'tidy'], { GOWORK: 'off', ...gitPrivateEnv });
-  run('go', ['build', './...'], { GOWORK: 'off', ...gitPrivateEnv });
+  // Skip the public checksum DB for our own engine module. sum.golang.org
+  // races on a tag pushed seconds ago (publish-then-consume in the same job)
+  // and returns 500 while it fetches the fresh tag; the proxy already serves
+  // the content — only sumdb verification is flaky. GONOSUMDB skips sumdb
+  // only (proxy/VCS resolution is unchanged) and is scoped to the engine
+  // module so every other dependency stays checksum-verified.
+  const baseEnv = { GOWORK: 'off', GONOSUMDB: ENGINE_MODULE };
+  run('go', ['mod', 'download', `${ENGINE_MODULE}@v${version}`], { ...baseEnv, GOFLAGS: '-mod=mod', ...gitPrivateEnv });
+  run('go', ['mod', 'tidy'], { ...baseEnv, ...gitPrivateEnv });
+  run('go', ['build', './...'], { ...baseEnv, ...gitPrivateEnv });
   if (process.env.ENGINE_RELEASE_SKIP_TESTS !== 'true') {
-    run('go', ['test', './...'], { GOWORK: 'off', ...gitPrivateEnv });
+    run('go', ['test', './...'], { ...baseEnv, ...gitPrivateEnv });
   }
 
   // 3b. Final wiring assertion on the exact go.mod that @semantic-release/git will