cpflow 5.0.0.rc.1 → 5.0.0

data/lib/github_flow_templates/bin/test-cpflow-github-flow

@@ -0,0 +1,89 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "$ROOT"
+
+cpflow_cmd=(cpflow)
+if [[ $# -gt 0 ]]; then
+  cpflow_cmd=("$@")
+fi
+
+echo "==> cpflow github-flow-readiness"
+"${cpflow_cmd[@]}" github-flow-readiness
+
+echo "==> parse generated GitHub Actions YAML"
+ruby <<'RUBY'
+require "yaml"
+
+Dir[".github/actions/**/action.yml", ".github/workflows/*.yml"].sort.each do |path|
+  YAML.load_file(path, aliases: true)
+  puts "parsed #{path}"
+end
+RUBY
+
+echo "==> check composite action input descriptions"
+ruby <<'RUBY'
+require "yaml"
+
+bad = []
+Dir[".github/actions/**/action.yml"].sort.each do |path|
+  doc = YAML.load_file(path, aliases: true)
+  doc.fetch("inputs", {}).each do |name, spec|
+    bad << "#{path}:#{name}" if spec["description"].to_s.include?("${{")
+  end
+end
+
+abort bad.join("\n") unless bad.empty?
+puts "no action metadata descriptions contain GitHub expressions"
+RUBY
+
+echo "==> check cpflow reusable workflow refs"
+ruby <<'RUBY'
+require "yaml"
+
+CONTROL_PLANE_FLOW_WORKFLOW = %r{\Ashakacode/control-plane-flow/\.github/workflows/[^@\s]+@([^\s]+)\z}
+
+refs = Hash.new { |hash, key| hash[key] = [] }
+
+Dir[".github/workflows/cpflow-*.yml"].sort.each do |path|
+  doc = YAML.load_file(path, aliases: true)
+  doc.fetch("jobs", {}).each do |job_name, job|
+    next unless job.is_a?(Hash)
+
+    with = job["with"].is_a?(Hash) ? job["with"] : {}
+    input_ref = with["control_plane_flow_ref"]
+    uses_match = job["uses"].to_s.match(CONTROL_PLANE_FLOW_WORKFLOW)
+
+    unless uses_match
+      abort "#{path}:#{job_name} has control_plane_flow_ref but no control-plane-flow reusable workflow" if input_ref
+
+      next
+    end
+
+    uses_ref = uses_match[1]
+    refs[uses_ref] << "#{path}:#{job_name}"
+
+    if input_ref
+      refs[input_ref] << "#{path}:#{job_name}"
+      abort "#{path}:#{job_name} mismatched cpflow refs: #{uses_ref}, #{input_ref}" if uses_ref != input_ref
+    elsif job.key?("secrets")
+      abort "#{path}:#{job_name} inherits secrets but is missing control_plane_flow_ref for #{uses_ref}"
+    end
+  end
+end
+
+if refs.empty?
+  puts "no upstream cpflow reusable workflow refs found"
+elsif refs.length > 1
+  refs.each do |ref, paths|
+    puts "#{ref}: #{paths.uniq.sort.join(', ')}"
+  end
+  abort "cpflow workflow wrappers use multiple upstream refs: #{refs.keys.sort.join(', ')}"
+else
+  puts "cpflow refs: #{refs.keys.sort.join(', ')}"
+end
+RUBY
+
+echo "==> actionlint"
+actionlint -ignore "SC2129" .github/workflows/cpflow-*.yml

data/rakelib/create_release.rake

@@ -45,7 +45,7 @@ desc("Releases the cpflow Ruby gem.
 task :release, %i[version dry_run override_version_policy] do |_t, args|
   args_hash = args.to_hash
   gem_root = Release.gem_root
-  is_dry_run = Release.object_to_boolean(args_hash[:dry_run])
+  is_dry_run = Release.affirmative?(args_hash[:dry_run])
   allow_version_policy_override = Release.version_policy_override_enabled?(args_hash[:override_version_policy])
   rubygems_otp = ENV.fetch("RUBYGEMS_OTP", nil)
   current_branch = Release.current_git_branch(gem_root)
@@ -121,7 +121,7 @@ desc("Creates or updates the GitHub release notes from CHANGELOG.md.
 task :sync_github_release, %i[gem_version dry_run] do |_t, args|
   args_hash = args.to_hash
   gem_root = Release.gem_root
-  is_dry_run = Release.object_to_boolean(args_hash[:dry_run])
+  is_dry_run = Release.affirmative?(args_hash[:dry_run])
   requested_gem_version = args_hash[:gem_version].to_s.strip
 
   if requested_gem_version.empty?
@@ -155,12 +155,12 @@ module Release
       File.expand_path("..", __dir__)
     end
 
-    def object_to_boolean(value)
+    def affirmative?(value)
       [true, "true", "yes", 1, "1", "t"].include?(value.instance_of?(String) ? value.downcase : value)
     end
 
     def version_policy_override_enabled?(override_flag)
-      object_to_boolean(override_flag) || object_to_boolean(ENV.fetch("RELEASE_VERSION_POLICY_OVERRIDE", nil))
+      affirmative?(override_flag) || affirmative?(ENV.fetch("RELEASE_VERSION_POLICY_OVERRIDE", nil))
     end
 
     def semver_keyword?(value)

metadata

@@ -1,15 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cpflow
 version: !ruby/object:Gem::Version
-  version: 5.0.0.rc.1
+  version: 5.0.0
 platform: ruby
 authors:
 - Justin Gordon
 - Sergey Tarasov
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-05-12 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dotenv
@@ -59,14 +58,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.4'
+        version: '1.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.4'
+        version: '1.3'
 description: CLI for providing Heroku-like platform-as-a-service on Control Plane
 email:
 - justin@shakacode.com
@@ -79,14 +78,29 @@ files:
 - ".agents/workflows/address-review.md"
 - ".claude/commands/address-review.md"
 - ".claude/commands/update-changelog.md"
+- ".github/actions/cpflow-build-docker-image/action.yml"
+- ".github/actions/cpflow-delete-control-plane-app/action.yml"
+- ".github/actions/cpflow-delete-control-plane-app/delete-app.sh"
+- ".github/actions/cpflow-detect-release-phase/action.yml"
+- ".github/actions/cpflow-setup-environment/action.yml"
+- ".github/actions/cpflow-validate-config/action.yml"
+- ".github/actions/cpflow-wait-for-health/action.yml"
 - ".github/workflows/check_cpln_links.yml"
 - ".github/workflows/claude-code-review.yml"
 - ".github/workflows/claude.yml"
 - ".github/workflows/command_docs.yml"
+- ".github/workflows/cpflow-cleanup-stale-review-apps.yml"
+- ".github/workflows/cpflow-delete-review-app.yml"
+- ".github/workflows/cpflow-deploy-review-app.yml"
+- ".github/workflows/cpflow-deploy-staging.yml"
+- ".github/workflows/cpflow-help-command.yml"
+- ".github/workflows/cpflow-promote-staging-to-production.yml"
+- ".github/workflows/cpflow-review-app-help.yml"
 - ".github/workflows/rspec-shared.yml"
 - ".github/workflows/rspec-specific.yml"
 - ".github/workflows/rspec.yml"
 - ".github/workflows/rubocop.yml"
+- ".github/workflows/trigger-docs-site.yml"
 - ".gitignore"
 - ".overcommit.yml"
 - ".rubocop.yml"
@@ -103,6 +117,7 @@ files:
 - cpflow
 - cpflow.gemspec
 - docs/ai-github-flow-prompt.md
+- docs/assets/cpflow-deploying.svg
 - docs/assets/grafana-alert.png
 - docs/assets/memcached.png
 - docs/assets/sidekiq-pre-stop-hook.png
@@ -120,6 +135,7 @@ files:
 - docs/terraform/example/.controlplane/templates/postgres.yml
 - docs/terraform/example/.controlplane/templates/rails.yml
 - docs/terraform/overview.md
+- docs/thruster.md
 - docs/tips.md
 - docs/troubleshooting.md
 - examples/circleci.yml
@@ -211,13 +227,6 @@ files:
 - lib/generator_templates_sqlite/templates/db.yml
 - lib/generator_templates_sqlite/templates/rails.yml
 - lib/generator_templates_sqlite/templates/storage.yml
-- lib/github_flow_templates/.github/actions/cpflow-build-docker-image/action.yml
-- lib/github_flow_templates/.github/actions/cpflow-delete-control-plane-app/action.yml
-- lib/github_flow_templates/.github/actions/cpflow-delete-control-plane-app/delete-app.sh
-- lib/github_flow_templates/.github/actions/cpflow-detect-release-phase/action.yml
-- lib/github_flow_templates/.github/actions/cpflow-setup-environment/action.yml
-- lib/github_flow_templates/.github/actions/cpflow-validate-config/action.yml
-- lib/github_flow_templates/.github/actions/cpflow-wait-for-health/action.yml
 - lib/github_flow_templates/.github/cpflow-help.md
 - lib/github_flow_templates/.github/workflows/cpflow-cleanup-stale-review-apps.yml
 - lib/github_flow_templates/.github/workflows/cpflow-delete-review-app.yml
@@ -226,6 +235,8 @@ files:
 - lib/github_flow_templates/.github/workflows/cpflow-help-command.yml
 - lib/github_flow_templates/.github/workflows/cpflow-promote-staging-to-production.yml
 - lib/github_flow_templates/.github/workflows/cpflow-review-app-help.yml
+- lib/github_flow_templates/bin/pin-cpflow-github-ref
+- lib/github_flow_templates/bin/test-cpflow-github-flow
 - lib/patches/array.rb
 - lib/patches/hash.rb
 - lib/patches/string.rb
@@ -256,7 +267,6 @@ licenses:
 - MIT
 metadata:
   rubygems_mfa_required: 'true'
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -267,12 +277,11 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 3.0.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
-rubygems_version: 3.4.10
-signing_key:
+rubygems_version: 4.0.8
 specification_version: 4
 summary: Control Plane Flow
 test_files: []

data/lib/github_flow_templates/.github/actions/cpflow-setup-environment/action.yml

@@ -1,98 +0,0 @@
-name: Setup Control Plane Environment
-description: Sets up Ruby, installs the Control Plane CLI and cpflow gem, and configures a default profile
-
-inputs:
-  token:
-    description: Control Plane token
-    required: true
-  org:
-    description: Control Plane organization
-    required: true
-  ruby_version:
-    description: >-
-      Ruby version used for cpflow. When empty (the default), ruby/setup-ruby auto-detects
-      from .ruby-version, .tool-versions, or the Gemfile.
-    required: false
-    default: ""
-  cpln_cli_version:
-    description: >-
-      @controlplane/cli version. Empty string falls back to the action's pinned default
-      so callers can pass `${{ vars.CPLN_CLI_VERSION }}` unconditionally.
-    required: false
-    default: ""
-  cpflow_version:
-    description: >-
-      cpflow gem version. Empty string falls back to the action's pinned default
-      so callers can pass `${{ vars.CPFLOW_VERSION }}` unconditionally.
-    required: false
-    default: ""
-
-runs:
-  using: composite
-  # Third-party actions are pinned to floating major tags (`@v4`, `@v1`, `@v7`) rather than
-  # immutable SHAs. SHA pinning is GitHub's stronger security recommendation, but for
-  # generated templates that ship into many downstream repositories floating tags are
-  # easier for users to keep current and Dependabot/Renovate already cover the SHA-pinning
-  # workflow for repositories that opt in. Repositories with stricter supply-chain
-  # requirements should replace each `uses: actions/...@vN` with the corresponding
-  # immutable commit SHA.
-  steps:
-    - name: Set up Ruby
-      uses: ruby/setup-ruby@v1
-      with:
-        ruby-version: ${{ inputs.ruby_version }}
-
-    - name: Install Control Plane CLI and cpflow gem
-      shell: bash
-      env:
-        CPLN_CLI_VERSION: ${{ inputs.cpln_cli_version }}
-        CPFLOW_VERSION: ${{ inputs.cpflow_version }}
-      run: |
-        set -euo pipefail
-
-        # Bump these defaults when a new release lands that you want to roll out by default.
-        # Override per-repo by setting `CPLN_CLI_VERSION` / `CPFLOW_VERSION` repo variables;
-        # an empty input falls back to the action's pinned default below.
-        default_cpln_cli_version="3.3.1"
-        default_cpflow_version="__CPFLOW_VERSION__"
-
-        CPLN_CLI_VERSION="${CPLN_CLI_VERSION:-${default_cpln_cli_version}}"
-        CPFLOW_VERSION="${CPFLOW_VERSION:-${default_cpflow_version}}"
-
-        npm_global_prefix="${HOME}/.npm-global"
-        mkdir -p "${npm_global_prefix}"
-        echo "${npm_global_prefix}/bin" >> "$GITHUB_PATH"
-        export PATH="${npm_global_prefix}/bin:${PATH}"
-
-        npm install --global --prefix "${npm_global_prefix}" "@controlplane/cli@${CPLN_CLI_VERSION}"
-        cpln --version
-
-        gem install cpflow -v "${CPFLOW_VERSION}" --no-document
-        cpflow --version
-
-    - name: Setup Control Plane profile and registry login
-      shell: bash
-      env:
-        # Pass the token via CPLN_TOKEN so cpln picks it up from the environment
-        # rather than `--token`, which would leak it into /proc/<pid>/cmdline and ps output.
-        CPLN_TOKEN: ${{ inputs.token }}
-        ORG: ${{ inputs.org }}
-      run: |
-        set -euo pipefail
-
-        if [[ -z "$CPLN_TOKEN" ]]; then
-          echo "Error: Control Plane token not provided" >&2
-          exit 1
-        fi
-
-        if [[ -z "$ORG" ]]; then
-          echo "Error: Control Plane organization not provided" >&2
-          exit 1
-        fi
-
-        # `cpln profile update` lists `create` as an alias (cpln profile --help) and is
-        # idempotent: it creates the profile if missing and updates it otherwise. Calling
-        # update directly avoids parsing the CLI's "already exists" English error text,
-        # which would silently swallow a real failure if the wording ever changed.
-        cpln profile update default --org "$ORG"
-        cpln image docker-login --org "$ORG"