New .gitify dump-method writes "api_key" and omits original "credential_file"-location

[sebastian-marinescu]

Summary

I updated to the latest Gitify. The extraction of package-versions works great.

But on the package-provider part, instead of the old/original credential_file,
it now puts username and api_key, but uses the credential_file-filename:

Step to reproduce

Upgrade to Gitify 2.0.1 and extract a Gitify-powered setup.

Observed behavior

Instead of the old/original credential_file it adds username and api_key.
The api_key is the old/original credential_file-filename (without correct location).

Update: I just noticed it also creates the credential files in the web-root 🤔

Expected behavior

I would expect (and prefer) to have the credential_file in the package-provider-section, if provided before.
I don't want the username and api_key inside my .gitify file, as it resides in the public web-root.

Environment

Gitify 2.0.1
MODX 2.8.5
PHP 8.0.28

[sebastian-marinescu]

To clarify:

• My .gitify is in the web-root, but normally not accessible because of .htaccess-restrictions
• My .gitify is also in the repository I could give access to a client
• For now I fixed credential_file manually back, and will continue to do so on extract