bake-modernize 0.63.0 → 0.64.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f1285a821430d0892953c2d45e86f8e5d11fe8d27d8212614ddb87914599370c
-  data.tar.gz: f1c4f3edb34b0bbecc4b5cada2286f2572173db3d168d21aa0fd8193dcb60b79
+  metadata.gz: e1aadc6454ab0888d86a24dd830c3923d6aad289ad86feb368f24c7bfb53e211
+  data.tar.gz: 7c80f3d12f4d215a56b2eefad74a0157a97a4d1add74ea14cea17ed70413df33
 SHA512:
-  metadata.gz: f75c658d10774d709155f72b2933bcd818cad028d2cff2c80071b1b09f46e9caa3fccc82e3503d988d29d410dd08027887d4bba51d6ace5a5abd4931d2b08434
-  data.tar.gz: 35962d24b690a376da309acf3608817cee9340e1d330cf11a589153c445387e1a4e9e390d6b0836b021e5bb9f212878c7eb4a60bcdeedacb28fdce7ca23b0252
+  metadata.gz: 6f99b9120cb5cb55ea2d6dbb7f652b364a86d7c32cfe55e21b66f50fe8180e7779e330496d3c61bd909c5e794c8e938a87c550d21205ced641b5043a5c5a92fd
+  data.tar.gz: 0a2aa4783d673e20fbb7c778e385cbfe6c2c49e3c768deeaa01451eea65b75bc85148d68df3e080a194feba9e7fdc6159bbefe17cbf404f6e48ff5727eca9644

data/bake/modernize/gemspec.rb

@@ -24,6 +24,7 @@ def update(path: default_gemspec_path, output: $stdout)
 	spec = ::Gem::Specification.load(path)
 	
 	root = File.dirname(path)
+	signing = Bake::Modernize::Signing.new(spec)
 	version_path = version_path(root, spec.name)
 	
 	constant = File.read(File.join(root, version_path))
@@ -56,7 +57,7 @@ def update(path: default_gemspec_path, output: $stdout)
 	if File.exist?(certificate_path)
 		output.puts "\t"
 		output.puts "\tspec.cert_chain  = [\"release.cert\"]"
-		output.puts "\tspec.signing_key = File.expand_path(\"~/.gem/release.pem\")"
+		output.puts "\tspec.signing_key = #{signing.private_key_expression}"
 	end
 	
 	if spec.homepage and !spec.homepage.empty?

data/bake/modernize/signing.rb

@@ -10,10 +10,10 @@ def signing(root: Dir.pwd)
 end
 
 def update(root:)
-	release_certificate_path = File.expand_path("~/.gem/release.cert")
+	signing = Bake::Modernize::Signing.load(root)
 	certificate_path = File.expand_path("release.cert", root)
 	
-	if File.exist?(release_certificate_path)
-		FileUtils.cp(release_certificate_path, certificate_path)
+	if signing.certificate_path
+		FileUtils.cp(signing.certificate_path, certificate_path)
 	end
 end

data/context/index.yaml

@@ -7,6 +7,7 @@ metadata:
   changelog_uri: https://github.com/ioquatix/bake-modernize/blob/main/releases.md
   documentation_uri: https://ioquatix.github.io/bake-modernize/
   funding_uri: https://github.com/sponsors/ioquatix/
+  signing_owner: socketry
   source_code_uri: https://github.com/ioquatix/bake-modernize.git
 files:
 - path: getting-started.md

data/lib/bake/modernize/signing.rb

@@ -0,0 +1,85 @@
+# frozen_string_literal: true
+
+# Released under the MIT License.
+# Copyright, 2026, by Samuel Williams.
+
+module Bake
+	module Modernize
+		# Resolve the RubyGems signing certificate and private key for a project.
+		class Signing
+			GEM_CREDENTIALS_PATH = File.expand_path("~/.gem")
+			GITHUB_OWNER = %r{\Ahttps?://github\.com/([\w.-]+)/}
+			
+			# Load signing configuration from a project's gemspec.
+			# @parameter root [String] The project root.
+			# @returns [Signing] The signing configuration.
+			def self.load(root)
+				gemspec_path = Dir["*.gemspec", base: root].first
+				gemspec = Gem::Specification.load(File.join(root, gemspec_path)) if gemspec_path
+				
+				return new(gemspec)
+			end
+			
+			# @parameter gemspec [Gem::Specification | Nil] The project gemspec.
+			def initialize(gemspec)
+				@gemspec = gemspec
+			end
+			
+			# The preferred certificate, if available.
+			# @returns [String | Nil] The certificate path.
+			def certificate_path
+				paths = []
+				
+				if owner = signing_owner
+					paths << File.join(GEM_CREDENTIALS_PATH, "#{owner}-release.cert")
+				end
+				
+				paths << File.join(GEM_CREDENTIALS_PATH, "release.cert")
+				return paths.find{|path| File.file?(path)}
+			end
+			
+			# The private key path, preserving an existing gemspec setting.
+			# @returns [String] The private key path.
+			def private_key_path
+				return @gemspec.signing_key if @gemspec&.signing_key
+				
+				if certificate_path = self.certificate_path
+					return certificate_path.sub(/\.cert\z/, ".pem")
+				end
+				
+				return File.join(GEM_CREDENTIALS_PATH, "release.pem")
+			end
+			
+			# Format a private key path for use in a gemspec.
+			# @returns [String] A Ruby expression.
+			def private_key_expression
+				prefix = GEM_CREDENTIALS_PATH + File::SEPARATOR
+				path = self.private_key_path
+				
+				if path.start_with?(prefix)
+					relative_path = path.delete_prefix(prefix)
+					path = "~/.gem/#{relative_path}"
+					return "File.expand_path(#{path.inspect})"
+				end
+				
+				return path.inspect
+			end
+			
+			private
+			
+			def signing_owner
+				return unless @gemspec
+				
+				owner = @gemspec.metadata["signing_owner"]
+				return owner if owner&.match?(/\A[\w.-]+\z/)
+				
+				urls = [@gemspec.metadata["source_code_uri"], @gemspec.homepage].compact
+				urls.each do |url|
+					if match = GITHUB_OWNER.match(url)
+						return match[1]
+					end
+				end
+			end
+		end
+	end
+end

data/lib/bake/modernize/version.rb

@@ -5,6 +5,6 @@
 
 module Bake
 	module Modernize
-		VERSION = "0.63.0"
+		VERSION = "0.64.0"
 	end
 end

data/lib/bake/modernize.rb

@@ -5,6 +5,7 @@
 
 require_relative "modernize/git"
 require_relative "modernize/license"
+require_relative "modernize/signing"
 require_relative "modernize/version"
 
 require "build/files/glob"

data/readme.md

@@ -14,6 +14,10 @@ Please see the [project documentation](https://ioquatix.github.io/bake-modernize
 
 Please see the [project releases](https://ioquatix.github.io/bake-modernize/releases/index) for all releases.
 
+### v0.64.0
+
+  - Prefer the configured signing owner or GitHub owner when selecting RubyGems signing certificates and private keys.
+
 ### v0.62.0
 
   - Refresh `license.md` and Ruby copyright headers with `modernize:license` after version increments in generated release hooks.

data/releases.md

@@ -1,5 +1,9 @@
 # Releases
 
+## v0.64.0
+
+  - Prefer the configured signing owner or GitHub owner when selecting RubyGems signing certificates and private keys.
+
 ## v0.62.0
 
   - Refresh `license.md` and Ruby copyright headers with `modernize:license` after version increments in generated release hooks.

data.tar.gz.sig

@@ -1,2 +1 @@
-f�Fa���"�(ŋ��a�!�9u-�s�v��T�J�vLn��6�)�7�>+Z�M0��0�Ae��`�����5qnې"�a���H���n0u��;
-0����_��9Ê�ѯ�������h��	O���o0~ր�<�ʱ��(r2��\[߫@D:*Nq�~�"5��y���`"I��Z��'D�.���C��5oț�*K�[>�=4�յ����p��D����0�y�
+2 ���0�Z�c�#�Q��'�����L�T��o��� �k,���󢠲3xy

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bake-modernize
 version: !ruby/object:Gem::Version
-  version: 0.63.0
+  version: 0.64.0
 platform: ruby
 authors:
 - Samuel Williams
@@ -158,6 +158,7 @@ files:
 - lib/bake/modernize.rb
 - lib/bake/modernize/git.rb
 - lib/bake/modernize/license.rb
+- lib/bake/modernize/signing.rb
 - lib/bake/modernize/version.rb
 - license.md
 - readme.md
@@ -186,6 +187,7 @@ metadata:
   changelog_uri: https://github.com/ioquatix/bake-modernize/blob/main/releases.md
   documentation_uri: https://ioquatix.github.io/bake-modernize/
   funding_uri: https://github.com/sponsors/ioquatix/
+  signing_owner: socketry
   source_code_uri: https://github.com/ioquatix/bake-modernize.git
 rdoc_options: []
 require_paths: