Refactor bundle configuration and improve logging level for JSON parsing errors

Author: GrantBirki

.bundle/config

@@ -1,8 +1,7 @@
 ---
 BUNDLE_BIN: "bin"
-BUNDLE_PATH: "/home/runner/work/hooks/hooks/vendor/bundle"
+BUNDLE_PATH: "vendor/gems"
 BUNDLE_CACHE_PATH: "vendor/cache"
 BUNDLE_CACHE_ALL: "true"
 BUNDLE_SPECIFIC_PLATFORM: "true"
 BUNDLE_NO_INSTALL: "true"
-BUNDLE_DEPLOYMENT: "true"

lib/hooks.rb

@@ -2,8 +2,6 @@
 
 require_relative "hooks/version"
 require_relative "hooks/core/builder"
-
-# Load core components explicitly for better performance and security
 require_relative "hooks/core/config_loader"
 require_relative "hooks/core/config_validator"
 require_relative "hooks/core/logger_factory"
@@ -12,8 +10,6 @@
 require_relative "hooks/core/log"
 require_relative "hooks/core/failbot"
 require_relative "hooks/core/stats"
-
-# Load essential plugins explicitly
 require_relative "hooks/plugins/auth/base"
 require_relative "hooks/plugins/auth/hmac"
 require_relative "hooks/plugins/auth/shared_secret"
@@ -24,12 +20,8 @@
 require_relative "hooks/plugins/instruments/failbot_base"
 require_relative "hooks/plugins/instruments/stats"
 require_relative "hooks/plugins/instruments/failbot"
-
-# Load utils explicitly
 require_relative "hooks/utils/normalize"
 require_relative "hooks/utils/retry"
-
-# Load security module
 require_relative "hooks/security"
 require_relative "hooks/version"
 

lib/hooks/app/helpers.rb

@@ -61,7 +61,7 @@ def parse_payload(raw_body, headers, symbolize: true)
             # If JSON parsing fails or security limits exceeded, return raw body
             # Log security violations at debug level to avoid log spam
             if e.message.include?("nesting") || e.message.include?("depth")
-              log.debug("JSON parsing security limit exceeded: #{e.message}")
+              log.warn("JSON parsing security limit exceeded: #{e.message}")
             end
           end
         end

spec/unit/lib/hooks/app/helpers_spec.rb

@@ -236,7 +236,7 @@ def error!(message, code)
         # Mock logger to capture debug messages
         logger = instance_double("Logger")
         allow(helper).to receive(:log).and_return(logger)
-        expect(logger).to receive(:debug).with(/JSON parsing security limit exceeded/)
+        expect(logger).to receive(:warn).with(/JSON parsing security limit exceeded/)
 
         # Mock the safe_json_parse method to simulate nesting limit exceeded
         allow(helper).to receive(:safe_json_parse).and_raise(ArgumentError, "nesting exceeded")