support boxsdk > v4

[saquibsaifee]

Closes #160 #173

Motivation

• Add compatibility for a newer/generated Box SDK while preserving support for the legacy boxsdk API.
• Remove the strict <4.0.0 upper bound on the boxsdk[jwt] dependency to allow newer releases.
• Bump package/version references used by pre-commit configs to the new internal release.

Testing

• Ran the plugin unit tests pytest tests/plugins/box_test.py

❯ source .venv/bin/activate && PYTHONPATH=`pwd` pytest tests/plugins/box_test.py -v

============================= test session starts =============================
collected 21 items                                                            

tests/plugins/box_test.py::TestBoxDetector::test_analyze_line["clientSecret": "12345678abcdefgh12345678ABCDEFGH"-True] PASSED [  4%]
tests/plugins/box_test.py::TestBoxDetector::test_analyze_line[client_secret = 12345678abcdefgh12345678ABCDEFGH-True] PASSED [  9%]
tests/plugins/box_test.py::TestBoxDetector::test_analyze_line[CLIENT-SECRET=12345678abcdefgh12345678ABCDEFGH-True] PASSED [ 14%]
tests/plugins/box_test.py::TestBoxDetector::test_analyze_line["clientsecret":="12345678abcdefgh12345678ABCDEFGH"-True] PASSED [ 19%]
tests/plugins/box_test.py::TestBoxDetector::test_analyze_line["clientSecret": "12345678abcdefgh12345678ABCDEFG2many"-True] PASSED [ 23%]
tests/plugins/box_test.py::TestBoxDetector::test_analyze_line["clientSecret": "12345678abcdnotenough"-False] PASSED [ 28%]
tests/plugins/box_test.py::TestBoxDetector::test_get_box_user PASSED    [ 33%]
tests/plugins/box_test.py::TestBoxDetector::test_get_box_user_auth_format PASSED [ 38%]
tests/plugins/box_test.py::TestBoxDetector::test_get_box_user_invalid_creds PASSED [ 42%]
tests/plugins/box_test.py::TestBoxDetector::test_verify PASSED          [ 47%]
tests/plugins/box_test.py::TestBoxDetector::test_verify_invalid PASSED  [ 52%]
tests/plugins/box_test.py::TestBoxDetector::test_verify_unverified_missing_clientid PASSED [ 57%]
tests/plugins/box_test.py::TestBoxDetector::test_verify_unverified_missing_publickeyid PASSED [ 61%]
tests/plugins/box_test.py::TestBoxDetector::test_verify_unverified_missing_passphrase PASSED [ 66%]
tests/plugins/box_test.py::TestBoxDetector::test_verify_unverified_missing_privatekey PASSED [ 71%]
tests/plugins/box_test.py::TestBoxDetector::test_verify_unverified_missing_enterpriseid PASSED [ 76%]
tests/plugins/box_test.py::TestBoxDetector::test_find_other_factor["clientID": "abcd1234abcd1234abcd1234abcd1234"-(?:client)-(?:id)-([a-z0-9]{32})-expected_result0] PASSED [ 80%]
tests/plugins/box_test.py::TestBoxDetector::test_find_other_factor["publicKeyID": "abcd1234"-(?:public(?:-|_|)key)-(?:id)-([a-z0-9]{8})-expected_result1] PASSED [ 85%]
tests/plugins/box_test.py::TestBoxDetector::test_find_other_factor["privateKey": "-----BEGIN ENCRYPTED PRIVATE KEY----- key -----END ENCRYPTED PRIVATE KEY-----\n"-(?:private)-(?:key)-(-----BEGIN ENCRYPTED PRIVATE KEY-----(?:.|\\n)+-----END ENCRYPTED PRIVATE KEY-----(?:\\n|))-expected_result2] PASSED [ 90%]
tests/plugins/box_test.py::TestBoxDetector::test_find_other_factor["passphrase": "abcd1234abcd1234abcd1234abcd1234"-(?:pass)-(?:phrase)-([a-z0-9]{32})-expected_result3] PASSED [ 95%]
tests/plugins/box_test.py::TestBoxDetector::test_find_other_factor["enterpriseID": "1234"-(?:enterprise)-(?:id)-([0-9]+)-expected_result4] PASSED [100%]

[saquibsaifee]

@williamsbritt @krkazmier @jwhett @rossgrady @sclinnell

[nagalakshmisa]

This repo is on lights on mode. No new feature requests are accepted unless they are strictly necessary.

[kyleg907]

Any plan for boxsdk 4 deprecation in 2027? Remove of the box function here? Also mentioned in #160.

https://github.com/box/box-python-sdk/tree/combined-sdk#deprecation-of-boxsdk-package

[RobertColquhoun]

Any plan for boxsdk 4 deprecation in 2027? Remove of the box function here? Also mentioned in #160.

https://github.com/box/box-python-sdk/tree/combined-sdk#deprecation-of-boxsdk-package

The boxsdk 3 that detect secrets forces is already deprecated and unsupported/EOL as of 23 Oct 2025.
see here https://github.com/box/box-python-sdk#versioning

[nagalakshmisa]

Re-opened this PR as per comments/request from the community. This project (in lights on state) just got new maintainers and it was decided that only strictly essential changes would be accepted and maintainers would update dependencies in the coming weeks on a case by case basis.

Will merge or close again by end of day based on internal discussions. Thank you for your patience. Please start planning to use recommended/approved alternatives for your secret detection use cases/needs (what these are, is to be determined by the business, but its coming). If you are an IBMer feel free to reach out on slack with questions.

We will update the main readme shortly.

[nagalakshmisa]

This is still in progress....will post updates here.