backup_nexus 0.1.0 → 0.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 8eb79bf4aa85274b82292897294246021d89ee85ae8c5f09e080ae82bd526129
4
- data.tar.gz: a087f50f451ca3e635830042c04e7ccaa56c541b75d0dbbf88f3a27717bea340
3
+ metadata.gz: a55d809602677680bd59bafaca040d526e4e9ae4cab6c345d39487bbbfb65583
4
+ data.tar.gz: 2fcc2b7a20f57f12e3f381bab23eae7fc64453d8f09aabe21f43d87d7b9be663
5
5
  SHA512:
6
- metadata.gz: 8b2338600d937308f2ca82d7bdf7b1c3d769bbf339b40800a1535a9f65e3cf5a7d1658e14cd0aa6f25a10669c73cd04b29912f0060ee02ef18b0b84fa7478871
7
- data.tar.gz: 37829dbe4fa5b948f9c00fff551b15d67d6ae27a6bbecf841af7ee43170d0d83342d272b915808930ef5197e8afc9b68f2c58d8b5d2476c7f4d75000cc5e909d
6
+ metadata.gz: 8647104eac8011090fed5bd07be7a4e61a163e9d1fe2e719d1621ce90788dfdcc4c4ad3af68e534f580bb25a2b246898a63d424f258ba50d206f95ec50f7402b
7
+ data.tar.gz: 1dd17d939526b496dfe63bc62d6f33da3ee739c523faef869a9250be43eb88eeed224a939e8af1dff599c4ce052b6cb613ff1543bf45f476bb84ac38b7f7a0c2
data/CHANGELOG.md CHANGED
@@ -1,5 +1,10 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.1.1
4
+
5
+ - Publish releases non-interactively through GitHub Actions with a scoped RubyGems API key.
6
+ - Document secure first-release key rotation and OTP-free CI configuration.
7
+
3
8
  ## 0.1.0
4
9
 
5
10
  - Extract backup management from RailsNexus into the BackupNexus engine.
data/README.md CHANGED
@@ -73,10 +73,21 @@ gem build backup_nexus.gemspec
73
73
  GitHub Actions runs the test suite on pushes and pull requests. A matching
74
74
  version tag publishes the gem to RubyGems and creates a GitHub release.
75
75
 
76
- Create a scoped RubyGems API key that can push only the `backup_nexus` gem,
77
- then add it to the GitHub repository (or its `release` environment) as an
78
- Actions secret named `RUBYGEMS_API_KEY`. Never commit the key to the
79
- repository.
76
+ Set the RubyGems account's MFA level to **UI and gem signin**, then create an
77
+ API key with only the **Push rubygems** scope, limited to the `backup_nexus`
78
+ gem. Leave MFA disabled for this CI key so RubyGems does not request a one-time
79
+ password during automated releases. Add the key to the GitHub repository (or
80
+ its `release` environment) as an Actions secret named `RUBYGEMS_API_KEY`.
81
+ Never commit the key to the repository.
82
+
83
+ For the first publication, RubyGems cannot limit the key to `backup_nexus`
84
+ until the gem exists. Use a push-only key without a gem limit for that first
85
+ release, then revoke it and replace the GitHub secret with a new key limited to
86
+ `backup_nexus`.
87
+
88
+ The publish command has no interactive input. A missing key or an account/key
89
+ that requires API MFA therefore fails the release instead of waiting for an
90
+ OTP prompt.
80
91
 
81
92
  To release a version, update `lib/backup_nexus/version.rb`, merge the change to
82
- `main`, and push a matching tag such as `v0.1.0`.
93
+ `main`, and push a matching tag such as `v0.1.1`.
@@ -1,3 +1,3 @@
1
1
  module BackupNexus
2
- VERSION = "0.1.0"
2
+ VERSION = "0.1.1"
3
3
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: backup_nexus
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.0
4
+ version: 0.1.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Tamiru Hailu
@@ -132,7 +132,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
132
132
  - !ruby/object:Gem::Version
133
133
  version: '0'
134
134
  requirements: []
135
- rubygems_version: 4.0.10
135
+ rubygems_version: 3.6.9
136
136
  specification_version: 4
137
137
  summary: Backup management for Rails applications
138
138
  test_files: []