v0.7.0

[eschultink]

rc-v0.6.10 back to main, as v0.7.0

Test Plan

AWS

cd infra/examples-dev/aws
./apply
./test-all.sh

Confirm everything worked:

• Microsoft API connector
• Google Workspace API connector
• Token-based API connector
• API connector with async
• Webhook collector
• Bulk connector

GCP

cd infra/examples-dev/gcp
./apply
./test-all.sh

Confirm everything worked:

• Microsoft API connector
• Google Workspace API connector
• Token-based API connector
• API connector with async
• Webhook collector
• Bulk connector

Next steps, after that's merged to main:

1. publish the release: /Users/erik/code/proxy-dev-s233-copy-out-release-tooling/tools/release/publish.sh v0.7.0

[Copilot]

🟡 Changes recommended

Source API error redaction should decompress gzipped responses before string redaction/logging to avoid missed PII and corrupted error bodies.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

This PR prepares the v0.7.0 release by updating release tooling to support RC branches whose version doesn’t match the release tag, bumping core version constants/dependencies, and expanding connector rules/docs (notably Google Drive scope change, Anthropic Claude sessions support, and additional Microsoft Graph sanitization + test tooling).

Changes:

• Release tooling: add --rc-branch / explicit RC branch plumbing across QA + rc-to-main flow; introduce shared rc-branch.sh helper.
• Connector updates: Anthropic Claude Compliance API sessions (local/remote) endpoints; Microsoft Teams callRecords UPN pseudonymization; OneDrive delta continuation shape support; Google Drive OAuth scope change to drive.readonly.
• Versioning & maintenance: bump to v0.7.0, update multiple Java dependencies/plugins, add log PII redaction for source API error bodies, and refine Terraform test-script outputs to avoid local_file interpolation pitfalls.

File summaries

File	Description
tools/release/run-release-qa.sh	Adds --rc-branch support and threads RC branch into verification + PR creation steps.
tools/release/release-qa.md	Documents RC-branch/tag mismatch handling and updated script invocation patterns.
tools/release/rc-to-main.sh	Accepts optional RC branch and resolves RC branch more flexibly during PR creation.
tools/release/qa/verify-release-refs.sh	Supports explicit RC branch and generalizes stale rc ref detection.
tools/release/publish.sh	Offers to delete any local rc-v* branches post-publish (not just rc-$RELEASE).
tools/release/prep.sh	Clarifies/handles cases where substituted release strings don’t match the git branch name.
tools/release/lib/rc-branch.sh	New shared helper to resolve RC branch and warn on RC/tag mismatches.
tools/psoxy-test/find-msft-teams-example-values.js	New CLI utility to discover real Teams IDs for example calls (callRecord/meeting/channel/chat).
tools/psoxy-test/find-msft-onedrive-example-values.js	New CLI utility to discover real OneDrive drive + driveItem IDs for example calls.
tools/init-tfvars.sh	Bumps script version string to v0.7.0.
java/pom.xml	Bumps proxy revision to 0.7.0 and updates multiple dependency versions.
java/impl/gcp/pom.xml	Updates GCP function Maven plugin version.
java/impl/aws/pom.xml	Updates New Relic AWS Lambda instrumentation dependency.
java/gateway-core/src/test/java/com/avaulta/gateway/rules/JsonSchemaValidationUtilsTest.java	Updates test to use the new JsonSchemaValidationUtils construction.
java/gateway-core/src/main/java/com/avaulta/gateway/rules/JsonSchemaValidationUtils.java	Migrates NetworkNT JSON schema validation to 3.x (Jackson 3 tools.jackson-based).
java/gateway-core/pom.xml	Bumps json-schema-validator dependency and documents Jackson2/Jackson3 coexistence.
java/core/src/test/java/co/worklytics/psoxy/utils/LogSanitizationUtilsTest.java	Adds coverage for PII-like redaction (UUIDs/emails) in free-text logs.
java/core/src/test/java/co/worklytics/psoxy/rules/msft/TeamsTests.java	Strengthens Teams callRecords tests to assert UPN pseudonymization.
java/core/src/test/java/co/worklytics/psoxy/rules/msft/Teams_NoUserIds_Tests.java	Extends no-userIds variant tests for UPN pseudonymization expectations.
java/core/src/test/java/co/worklytics/psoxy/rules/msft/OneDriveTests.java	Updates fixtures/examples for OneDrive drives and delta continuation shape coverage.
java/core/src/test/java/co/worklytics/psoxy/rules/msft/OneDrive_NoAppIds_Tests.java	Ensures no-app-ids rules handle @odata.nextLink shapes and tokenization constraints.
java/core/src/test/java/co/worklytics/psoxy/rules/anthropic/ClaudeTests.java	Adds examples + allowlist tests for new Claude Compliance API query params/endpoints.
java/core/src/test/java/co/worklytics/psoxy/gateway/impl/ApiDataRequestHandlerTest.java	Updates expected proxy version header to v0.7.0.
java/core/src/main/java/co/worklytics/psoxy/utils/LogSanitizationUtils.java	New utility to redact email/UUID patterns from free-text prior to logging.
java/core/src/main/java/co/worklytics/psoxy/rules/msft/PrebuiltSanitizerRules.java	Adds Teams callRecords UPN pseudonymization transform to prebuilt rules.
java/core/src/main/java/co/worklytics/psoxy/PsoxyModule.java	Updates DI wiring for JsonSchemaValidationUtils construction.
java/core/src/main/java/co/worklytics/psoxy/gateway/ProxyConstants.java	Bumps Java source code version constant to v0.7.0.
java/core/src/main/java/co/worklytics/psoxy/gateway/impl/ApiDataRequestHandler.java	Redacts PII-like patterns from source API error bodies before logging/returning.
infra/modules/worklytics-connector-specs/msft-365.tf	Updates example Graph paths (group members/calendarView) to use concrete GUID locals.
infra/modules/worklytics-connector-specs/main.tf	Adds Claude sessions endpoints to connector specs example calls.
infra/modules/worklytics-connector-specs/google-workspace.tf	Updates Drive OAuth scope to drive.readonly.
infra/modules/gcp-webhook-collector/main.tf	Moves test script content to a local and fixes outputs to avoid local_file interpolation deletion.
infra/modules/gcp-proxy-bulk/main.tf	Adjusts test_script output to avoid local_file interpolation dependency issues.
infra/modules/gcp-proxy-api/main.tf	Moves test script content to a local; adds test_script_content output; avoids local_file interpolation pitfalls.
infra/modules/gcp-proxy-api/external_lb_endpoints.tftest.hcl	Adds test ensuring test_script output doesn’t depend on local_file.
infra/modules/gcp-host/output.tf	Removes sensitive = true on external_api_alb output.
infra/modules/gcp-host/main.tf	Clarifies not to interpolate local_file-derived module outputs to avoid test-script deletion.
infra/modules/gcp-external-api-alb/outputs.tf	Clarifies cert output description; removes sensitive = true.
infra/examples-dev/gcp/msft-365.tf	Updates commented example module ref to v0.7.0.
infra/examples-dev/gcp/main.tf	Updates commented example module ref to v0.7.0 and removes sensitive flag in commented output.
infra/examples-dev/gcp/google-workspace.tf	Updates commented example module ref to v0.7.0.
infra/examples-dev/aws/msft-365.tf	Updates commented example module ref to v0.7.0.
infra/examples-dev/aws/main.tf	Updates commented example module ref to v0.7.0.
infra/examples-dev/aws/google-workspace.tf	Updates commented example module ref to v0.7.0.
docs/sources/microsoft-365/outlook-mail/README.md	Fixes example-responses folder reference to match connector.
docs/sources/microsoft-365/outlook-cal/README.md	Fixes example-responses folder reference to match connector.
docs/sources/microsoft-365/msft-teams/README.md	Expands Teams example endpoints and documents new example-value discovery script.
docs/sources/microsoft-365/msft-teams/msft-teams.yaml	Adds pseudonymization for user.userPrincipalName in callRecords responses.
docs/sources/microsoft-365/msft-teams/msft-teams_no-userIds.yaml	Adds pseudonymization for user.userPrincipalName in callRecords responses (no-userIds variant).
docs/sources/microsoft-365/msft-teams/example-api-responses/sanitized/Communications_callRecords_v1.0.json	Updates sanitized fixture to include pseudonymized userPrincipalName and participants_v2.
docs/sources/microsoft-365/msft-teams/example-api-responses/sanitized/Communications_callRecord_v1.0.json	Updates sanitized fixture to include pseudonymized userPrincipalName + v2 organizer/participants.
docs/sources/microsoft-365/msft-teams/example-api-responses/sanitized_no-userIds/Communications_callRecords_v1.0.json	Updates no-userIds sanitized fixture with pseudonymized UPN + participants_v2.
docs/sources/microsoft-365/msft-teams/example-api-responses/sanitized_no-userIds/Communications_callRecord_v1.0.json	Updates no-userIds sanitized fixture with pseudonymized UPN + v2 organizer/participants.
docs/sources/microsoft-365/msft-teams/example-api-responses/original/Communications_callRecords_v1.0.json	Updates original fixture to include userPrincipalName and participants_v2.
docs/sources/microsoft-365/msft-teams/example-api-responses/original/Communications_callRecord_v1.0.json	Updates original fixture to include userPrincipalName + v2 organizer/participants.
docs/sources/microsoft-365/msft-onedrive/README.md	Documents new OneDrive example-value discovery script and clarifies Terraform placeholders.
docs/sources/microsoft-365/msft-onedrive/msft-onedrive.yaml	Adds support for OData function-call continuation path segment for /root/delta.
docs/sources/microsoft-365/msft-onedrive/msft-onedrive_no-app-ids.yaml	Adds continuation-path support and @odata.nextLink tokenization handling for no-app-ids mode.
docs/sources/microsoft-365/msft-onedrive/example-api-responses/sanitized/list_user_drives.json	Adds captured @odata.nextLink to fixture.
docs/sources/microsoft-365/msft-onedrive/example-api-responses/sanitized/list_groups_drives.json	Adds new groups drives fixture with @odata.nextLink.
docs/sources/microsoft-365/msft-onedrive/example-api-responses/sanitized_no-app-ids/list_user_drives.json	Adds new no-app-ids user drives fixture with tokenized user ID in @odata.nextLink.
docs/sources/microsoft-365/msft-onedrive/example-api-responses/sanitized_no-app-ids/list_groups_drives.json	Adds captured @odata.nextLink to fixture.
docs/sources/microsoft-365/msft-onedrive/example-api-responses/original/list_user_drives.json	Adds captured @odata.nextLink to fixture.
docs/sources/microsoft-365/msft-onedrive/example-api-responses/original/list_groups_drives.json	Adds new original groups drives fixture with @odata.nextLink.
docs/sources/google-workspace/README.md	Updates Drive scope documentation and shared-scope string; calls out v0.7.0 action required.
docs/sources/google-workspace/gdrive/README.md	Documents breaking scope change to drive.readonly and explains why/upgrade steps.
docs/sources/anthropic/claude/README.md	Documents new Claude sessions endpoints and adds example-response links.
docs/sources/anthropic/claude/example-api-responses/sanitized/remote-sessions-response.json	Adds sanitized example response for remote sessions.
docs/sources/anthropic/claude/example-api-responses/sanitized/remote-session-messages-response.json	Adds sanitized example response for remote session messages.
docs/sources/anthropic/claude/example-api-responses/sanitized/local-sessions-response.json	Adds sanitized example response for local sessions.
docs/sources/anthropic/claude/example-api-responses/sanitized/local-session-messages-response.json	Adds sanitized example response for local session messages.
docs/sources/anthropic/claude/example-api-responses/original/remote-sessions-response.json	Adds original example response for remote sessions.
docs/sources/anthropic/claude/example-api-responses/original/remote-session-messages-response.json	Adds original example response for remote session messages.
docs/sources/anthropic/claude/example-api-responses/original/local-sessions-response.json	Adds original example response for local sessions.
docs/sources/anthropic/claude/example-api-responses/original/local-session-messages-response.json	Adds original example response for local session messages.
docs/sources/anthropic/claude/claude.yaml	Adds sessions endpoints, expands allowed query params, and adds schemas for sessions/messages.
docs/README.md	Updates Google Drive connector scope in the top-level docs table.
docs/guides/testing.md	Documents how to use the new MSFT Teams/OneDrive example-value discovery scripts.
docs/guides/psoxy-test-tool.md	Adds detailed sections for MSFT Teams/OneDrive discovery scripts and flags.
docs/development/releases.md	Clarifies release prep when RC branch name differs from tag; updates rc-to-main usage.
CHANGELOG.md	Adds v0.7.0 notes including breaking Drive scope change and Claude sessions support.
.cursor/skills/release-qa/SKILL.md	Updates skill doc to reflect RC-branch/tag mismatch support during QA.

Review details

• Files reviewed: 82/84 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.