configure_trusted_publisher 0.1.9 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '069cf11b54abc980ac845968c09a93b3779aa4153ca6ae8c4e58093352fd5270'
-  data.tar.gz: 4da5f62636b14c6837fadb4847f27e3267b13797ba4e4c66a4e9bbbfe35adc48
+  metadata.gz: d4063894eb8d32f89d80f648495ec44f371bcc25bf2d99271561fee8f6eb16aa
+  data.tar.gz: 0d4614f796f4f458c13ccef078958157cbda475921dc4623ba3d701c22389602
 SHA512:
-  metadata.gz: 146c6c690a138f3c837aa7aee7fa39e25b9cbc08a30884a2441fcf796ca46e691814ca1c039d10e2ecc8fe4309b91aebd67152a95fc062e050cb41957f4fe9b9
-  data.tar.gz: 9aeff4f526331e46da39edba8bacc5eebfea0f6d2ab6b703195032dec8c0c4842ca34136a4cca35e995741864a12ad484a0e99781a941eb1c8ddb4d1f151c1f0
+  metadata.gz: 108346ca991c5646cc1254ebf9e3b4de2d2b3022df22d9371f358af971d0a84088c3bdf6376b9c02c964953142a74a5996cb852b58eaa154870fd5f06ba90836
+  data.tar.gz: 281d5f2a87faff016123879c0184dae205bd55eec0724128d816ef89ef925673c1ad4e74df6a3e1141fe62e327e897e76090ad2b2c17efcd1351e14e4588a9f0

data/lib/configure_trusted_publisher/cli.rb

@@ -169,7 +169,7 @@ module ConfigureTrustedPublisher
                             },
           terminate_interaction: lambda { |msg|
                                    puts
-                                   exit msg
+                                   abort msg
                                  },
           otp: options[:otp]
         )
@@ -253,8 +253,8 @@ module ConfigureTrustedPublisher
                                     "prerequisites for the action?")
 
         if Bundler.which("gh").nil?
-          exit "The GitHub CLI (gh) is required to add a GitHub environment. " \
-               "Please install it from https://cli.github.com/ and try again."
+          abort "The GitHub CLI (gh) is required to add a GitHub environment. " \
+                "Please install it from https://cli.github.com/ and try again."
         end
 
         env_name = "rubygems.org"
@@ -262,7 +262,7 @@ module ConfigureTrustedPublisher
         owner, name = github_repository
         puts "Adding GitHub environment to #{owner}/#{name} to protect the action"
         if (env = Open3.capture2e("gh", "api", "repos/#{owner}/#{name}/environments").then do |output, status|
-              exit "Failed to list environments for #{owner}/#{name} using `gh api`:\n#{output}" unless status.success?
+              abort "Failed to list environments for #{owner}/#{name} using `gh api`:\n#{output}" unless status.success?
 
               JSON.parse(output)["environments"].find { |e| e["name"] == env_name }
             end)
@@ -273,7 +273,7 @@ module ConfigureTrustedPublisher
           Open3.capture2e("gh", "api", "--method", "PUT",
                           "repos/#{owner}/#{name}/environments/#{env_name}").then do |output, status|
             unless status.success?
-              exit "Failed to create rubygems.org environment for #{owner}/#{name} using `gh api`:\n#{output}"
+              abort "Failed to create rubygems.org environment for #{owner}/#{name} using `gh api`:\n#{output}"
             end
 
             env = JSON.parse(output)
@@ -294,10 +294,12 @@ module ConfigureTrustedPublisher
       def write_release_action(repository, rubygem_name, environment: nil)
         tag = "Automatically when a new tag matching v* is pushed"
         manual = "Manually by running a GitHub Action"
+        release = "Automatically when a new GitHub release is published"
         puts
         response = ask_multiple_choice(
           "How would you like releases for #{rubygem_name} to be triggered?", [
             tag,
+            release,
             manual
           ],
           default: "2"
@@ -312,7 +314,12 @@ module ConfigureTrustedPublisher
             "name: Push Gem",
             nil,
             "on:",
-            "  #{response == tag ? "push:\n    tags:\n      - 'v*'" : 'workflow_dispatch:'}",
+            (case response
+             when tag then "    push:\n      tags:\n        - 'v*'"
+             when release then "    release:\n      types:\n        - published"
+             when manual then "    workflow_dispatch:"
+             else raise "Unknown response: #{response.inspect}"
+             end),
             nil,
             "permissions:",
             "  contents: read",
@@ -331,13 +338,13 @@ module ConfigureTrustedPublisher
             "    steps:",
             "      # Set up",
             "      - name: Harden Runner",
-            "        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1",
+            "        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2",
             "        with:",
             "          egress-policy: audit",
             nil,
-            "      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4",
+            "      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2",
             "      - name: Set up Ruby",
-            "        uses: ruby/setup-ruby@cacc9f1c0b3f4eb8a16a6bb0ed10897b43b9de49 # v1.176.0",
+            "        uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc # v1.202.0",
             "        with:",
             "          bundler-cache: true",
             "          ruby-version: ruby",

data/lib/configure_trusted_publisher/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module ConfigureTrustedPublisher
-  VERSION = "0.1.9"
+  VERSION = "0.2.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: configure_trusted_publisher
 version: !ruby/object:Gem::Version
-  version: 0.1.9
+  version: 0.2.0
 platform: ruby
 authors:
 - Samuel Giddins
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2024-06-14 00:00:00.000000000 Z
+date: 2024-11-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -73,7 +73,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '3.5'
 requirements: []
-rubygems_version: 3.5.9
+rubygems_version: 3.5.22
 signing_key: 
 specification_version: 4
 summary: A small CLI to automate the process of configuring a trusted publisher for