bake-modernize 0.63.0 → 0.65.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f1285a821430d0892953c2d45e86f8e5d11fe8d27d8212614ddb87914599370c
-  data.tar.gz: f1c4f3edb34b0bbecc4b5cada2286f2572173db3d168d21aa0fd8193dcb60b79
+  metadata.gz: 32e279a2cd64b6db3d274c56caed5dd93cc3f8a5854c6cad52252354ab110968
+  data.tar.gz: e8314e50b8118a0d0a6f897088b791c4b1d743a648cb7d92e9ab3338e0c7c17e
 SHA512:
-  metadata.gz: f75c658d10774d709155f72b2933bcd818cad028d2cff2c80071b1b09f46e9caa3fccc82e3503d988d29d410dd08027887d4bba51d6ace5a5abd4931d2b08434
-  data.tar.gz: 35962d24b690a376da309acf3608817cee9340e1d330cf11a589153c445387e1a4e9e390d6b0836b021e5bb9f212878c7eb4a60bcdeedacb28fdce7ca23b0252
+  metadata.gz: 4c90c6778c2878f35d4ec00c79e7a17c48af5a0da3ff949db6ee8705169f3ab6c2d087633497d4ee1889e3dac1d135d53ae0bd25aace031374a23a19a6fcbaad
+  data.tar.gz: f4d0775f78dea54d1cd5ac739ecf17fe12169d39f9123fac195b1159b9e7e0c1291622782a76e4b703978445dc17a994d805d4149bb6664496812b2bb960c4c0

data/bake/modernize/gemspec.rb

@@ -24,6 +24,7 @@ def update(path: default_gemspec_path, output: $stdout)
 	spec = ::Gem::Specification.load(path)
 	
 	root = File.dirname(path)
+	signing = Bake::Modernize::Signing.new(spec)
 	version_path = version_path(root, spec.name)
 	
 	constant = File.read(File.join(root, version_path))
@@ -56,7 +57,7 @@ def update(path: default_gemspec_path, output: $stdout)
 	if File.exist?(certificate_path)
 		output.puts "\t"
 		output.puts "\tspec.cert_chain  = [\"release.cert\"]"
-		output.puts "\tspec.signing_key = File.expand_path(\"~/.gem/release.pem\")"
+		output.puts "\tspec.signing_key = #{signing.private_key_expression}"
 	end
 	
 	if spec.homepage and !spec.homepage.empty?

data/bake/modernize/signing.rb

@@ -10,10 +10,10 @@ def signing(root: Dir.pwd)
 end
 
 def update(root:)
-	release_certificate_path = File.expand_path("~/.gem/release.cert")
+	signing = Bake::Modernize::Signing.load(root)
 	certificate_path = File.expand_path("release.cert", root)
 	
-	if File.exist?(release_certificate_path)
-		FileUtils.cp(release_certificate_path, certificate_path)
+	if signing.certificate_path
+		FileUtils.cp(signing.certificate_path, certificate_path)
 	end
 end

data/context/index.yaml

@@ -7,6 +7,7 @@ metadata:
   changelog_uri: https://github.com/ioquatix/bake-modernize/blob/main/releases.md
   documentation_uri: https://ioquatix.github.io/bake-modernize/
   funding_uri: https://github.com/sponsors/ioquatix/
+  signing_owner: socketry
   source_code_uri: https://github.com/ioquatix/bake-modernize.git
 files:
 - path: getting-started.md

data/lib/bake/modernize/signing.rb

@@ -0,0 +1,85 @@
+# frozen_string_literal: true
+
+# Released under the MIT License.
+# Copyright, 2026, by Samuel Williams.
+
+module Bake
+	module Modernize
+		# Resolve the RubyGems signing certificate and private key for a project.
+		class Signing
+			GEM_CREDENTIALS_PATH = File.expand_path("~/.gem")
+			GITHUB_OWNER = %r{\Ahttps?://github\.com/([\w.-]+)/}
+			
+			# Load signing configuration from a project's gemspec.
+			# @parameter root [String] The project root.
+			# @returns [Signing] The signing configuration.
+			def self.load(root)
+				gemspec_path = Dir["*.gemspec", base: root].first
+				gemspec = Gem::Specification.load(File.join(root, gemspec_path)) if gemspec_path
+				
+				return new(gemspec)
+			end
+			
+			# @parameter gemspec [Gem::Specification | Nil] The project gemspec.
+			def initialize(gemspec)
+				@gemspec = gemspec
+			end
+			
+			# The preferred certificate, if available.
+			# @returns [String | Nil] The certificate path.
+			def certificate_path
+				paths = []
+				
+				if owner = signing_owner
+					paths << File.join(GEM_CREDENTIALS_PATH, "#{owner}-release.cert")
+				end
+				
+				paths << File.join(GEM_CREDENTIALS_PATH, "release.cert")
+				return paths.find{|path| File.file?(path)}
+			end
+			
+			# The private key path, preserving an existing gemspec setting.
+			# @returns [String] The private key path.
+			def private_key_path
+				return @gemspec.signing_key if @gemspec&.signing_key
+				
+				if certificate_path = self.certificate_path
+					return certificate_path.sub(/\.cert\z/, ".pem")
+				end
+				
+				return File.join(GEM_CREDENTIALS_PATH, "release.pem")
+			end
+			
+			# Format a private key path for use in a gemspec.
+			# @returns [String] A Ruby expression.
+			def private_key_expression
+				prefix = GEM_CREDENTIALS_PATH + File::SEPARATOR
+				path = self.private_key_path
+				
+				if path.start_with?(prefix)
+					relative_path = path.delete_prefix(prefix)
+					path = "~/.gem/#{relative_path}"
+					return "File.expand_path(#{path.inspect})"
+				end
+				
+				return path.inspect
+			end
+			
+			private
+			
+			def signing_owner
+				return unless @gemspec
+				
+				owner = @gemspec.metadata["signing_owner"]
+				return owner if owner&.match?(/\A[\w.-]+\z/)
+				
+				urls = [@gemspec.metadata["source_code_uri"], @gemspec.homepage].compact
+				urls.each do |url|
+					if match = GITHUB_OWNER.match(url)
+						return match[1]
+					end
+				end
+			end
+		end
+	end
+end

data/lib/bake/modernize/version.rb

@@ -5,6 +5,6 @@
 
 module Bake
 	module Modernize
-		VERSION = "0.63.0"
+		VERSION = "0.65.0"
 	end
 end

data/lib/bake/modernize.rb

@@ -5,6 +5,7 @@
 
 require_relative "modernize/git"
 require_relative "modernize/license"
+require_relative "modernize/signing"
 require_relative "modernize/version"
 
 require "build/files/glob"

data/readme.md

@@ -14,6 +14,10 @@ Please see the [project documentation](https://ioquatix.github.io/bake-modernize
 
 Please see the [project releases](https://ioquatix.github.io/bake-modernize/releases/index) for all releases.
 
+### v0.64.0
+
+  - Prefer the configured signing owner or GitHub owner when selecting RubyGems signing certificates and private keys.
+
 ### v0.62.0
 
   - Refresh `license.md` and Ruby copyright headers with `modernize:license` after version increments in generated release hooks.

data/releases.md

@@ -1,5 +1,9 @@
 # Releases
 
+## v0.64.0
+
+  - Prefer the configured signing owner or GitHub owner when selecting RubyGems signing certificates and private keys.
+
 ## v0.62.0
 
   - Refresh `license.md` and Ruby copyright headers with `modernize:license` after version increments in generated release hooks.

data/template/actions/.github/workflows/test.yaml

@@ -25,12 +25,6 @@ jobs:
         experimental: [false]
         
         include:
-          - os: ubuntu
-            ruby: truffleruby
-            experimental: true
-          - os: ubuntu
-            ruby: jruby
-            experimental: true
           - os: ubuntu
             ruby: head
             experimental: true
@@ -38,13 +32,6 @@ jobs:
     steps:
     - uses: actions/checkout@v7
     
-    # JRuby requires a more recent JDK than the runner provides by default:
-    - uses: actions/setup-java@v4
-      if: startsWith(matrix.ruby, 'jruby')
-      with:
-        distribution: temurin
-        java-version: "21"
-    
     - uses: ruby/setup-ruby@v1
       with:
         ruby-version: ${{matrix.ruby}}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bake-modernize
 version: !ruby/object:Gem::Version
-  version: 0.63.0
+  version: 0.65.0
 platform: ruby
 authors:
 - Samuel Williams
@@ -158,6 +158,7 @@ files:
 - lib/bake/modernize.rb
 - lib/bake/modernize/git.rb
 - lib/bake/modernize/license.rb
+- lib/bake/modernize/signing.rb
 - lib/bake/modernize/version.rb
 - license.md
 - readme.md
@@ -186,6 +187,7 @@ metadata:
   changelog_uri: https://github.com/ioquatix/bake-modernize/blob/main/releases.md
   documentation_uri: https://ioquatix.github.io/bake-modernize/
   funding_uri: https://github.com/sponsors/ioquatix/
+  signing_owner: socketry
   source_code_uri: https://github.com/ioquatix/bake-modernize.git
 rdoc_options: []
 require_paths: