cpflow 5.3.0 → 6.0.0

data/lib/patches/hash.rb

@@ -27,8 +27,8 @@ class Hash
   private
 
   # Copied from Rails
-  def deep_transform_keys(&block)
-    deep_transform_keys_in_object(self, &block)
+  def deep_transform_keys(&)
+    deep_transform_keys_in_object(self, &)
   end
 
   # Copied from Rails

data/rakelib/create_release.rake

@@ -22,8 +22,9 @@ desc("Releases the cpflow Ruby gem.
     3. Enter the RubyGems OTP when prompted.
 
   With no version argument, the task reads the latest versioned CHANGELOG.md
-  header and uses it when it is newer than the current gem version. Otherwise,
-  it falls back to a patch bump.
+  header and uses it when it is newer than or equal to the current gem version.
+  It falls back to a patch bump only when the current version is stable and the
+  changelog does not name the current or a newer version.
 
   1st argument: Version (optional). Supported values:
                 patch, minor, major, 4.2.0, or 4.2.0.rc.1
@@ -205,10 +206,15 @@ module Release
 
       version = parse_gem_version_components(current_gem_version)
 
+      if version[:prerelease_type] && version_input.to_s.strip.casecmp?("patch")
+        abort <<~ERROR
+          Automatic patch bumps are not allowed from prerelease version #{current_gem_version}.
+          Pass an explicit version instead so a retry cannot accidentally promote a prerelease to stable.
+        ERROR
+      end
+
       case version_input.to_s.strip.downcase
       when "patch"
-        return "#{version[:major]}.#{version[:minor]}.#{version[:patch]}" if version[:prerelease_type]
-
         "#{version[:major]}.#{version[:minor]}.#{version[:patch] + 1}"
       when "minor"
         "#{version[:major]}.#{version[:minor] + 1}.0"
@@ -269,10 +275,8 @@ module Release
         return changelog_version
       end
 
-      if changelog_version &&
-         Gem::Version.new(changelog_version) == Gem::Version.new(current_version) &&
-         !version_tagged?(gem_root, changelog_version)
-        puts "Found untagged CHANGELOG.md version: #{changelog_version} (current: #{current_version})"
+      if changelog_version && Gem::Version.new(changelog_version) == Gem::Version.new(current_version)
+        puts "Found current CHANGELOG.md version: #{changelog_version}"
         return changelog_version
       end
 
@@ -308,10 +312,6 @@ module Release
       tags_output.lines.map(&:strip).filter_map { |tag| parse_release_tag_to_gem_version(tag) }.uniq
     end
 
-    def version_tagged?(gem_root, version)
-      tagged_release_gem_versions(gem_root, fetch_tags: true).include?(version)
-    end
-
     def version_bump_type(previous_stable_gem_version:, target_gem_version:)
       previous = parse_gem_version_components(previous_stable_gem_version)
       target = parse_gem_version_components(target_gem_version)
@@ -479,8 +479,8 @@ module Release
       match[:repo]
     end
 
-    def capture_gh_output(*args)
-      Open3.capture2e("gh", *args)
+    def capture_gh_output(*)
+      Open3.capture2e("gh", *)
     rescue Errno::ENOENT
       abort "GitHub CLI (`gh`) is not installed. Install it from https://cli.github.com/ and retry."
     end

data/script/check_shell_scripts

@@ -0,0 +1,66 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+repo_root=$(CDPATH='' cd -- "$(dirname -- "$0")/.." && pwd)
+cd "$repo_root"
+
+if ! command -v shellcheck >/dev/null 2>&1; then
+  echo "ShellCheck is required; install it and ensure shellcheck is on PATH." >&2
+  exit 127
+fi
+
+# Add, rename, or remove extensionless shell entrypoints here. See .agents/bin/README.md.
+extensionless_shell_files=(
+  .agents/bin/docs
+  .agents/bin/lint
+  .agents/bin/setup
+  .agents/bin/test
+  .agents/bin/validate
+  lib/github_flow_templates/bin/test-cpflow-github-flow
+  script/check_command_docs
+  script/check_cpln_links
+  script/check_shell_scripts
+  script/precommit/check_command_docs
+  script/precommit/check_cpln_links
+  script/precommit/check_trailing_newlines
+  script/precommit/get_changed_files
+  script/precommit/ruby_autofix
+  script/precommit/ruby_lint
+  spec/dummy/bin/dev
+)
+
+# A file preserves NUL-separated names while letting us check Git's exit status.
+inventory_file=$(mktemp)
+trap 'rm -f -- "$inventory_file"' EXIT
+if ! git ls-files -z -- '*.sh' '*.bash' "${extensionless_shell_files[@]}" >"$inventory_file"; then
+  echo "Unable to read tracked shell inventory." >&2
+  exit 1
+fi
+
+shell_files=()
+while IFS= read -r -d '' file; do
+  if [ ! -r "$file" ]; then
+    echo "Tracked shell script is not readable: $file" >&2
+    exit 1
+  fi
+  shell_files+=("$file")
+done < "$inventory_file"
+
+if [ "${#shell_files[@]}" -eq 0 ]; then
+  echo "No tracked shell scripts found." >&2
+  exit 1
+fi
+
+for file in "${extensionless_shell_files[@]}"; do
+  if [ ! -f "$file" ] || [ ! -r "$file" ]; then
+    echo "Declared shell entrypoint is not a readable file: $file" >&2
+    exit 1
+  fi
+done
+
+if ! git ls-files --error-unmatch -- "${extensionless_shell_files[@]}" >/dev/null; then
+  echo "Declared extensionless shell scripts must be tracked; update the inventory for renamed or removed files." >&2
+  exit 1
+fi
+
+shellcheck -- "${shell_files[@]}"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cpflow
 version: !ruby/object:Gem::Version
-  version: 5.3.0
+  version: 6.0.0
 platform: ruby
 authors:
 - Justin Gordon
@@ -82,23 +82,31 @@ files:
 - ".agents/bin/setup"
 - ".agents/bin/test"
 - ".agents/bin/validate"
+- ".agents/legacy-workflow-policy.yml"
+- ".agents/shaka.md"
+- ".agents/trusted-actions.yml"
 - ".agents/trusted-github-actors.yml"
 - ".agents/workflows/address-review.md"
 - ".agents/workflows/ai-rollout-e2e-test.md"
 - ".claude/commands/address-review.md"
 - ".claude/commands/update-changelog.md"
+- ".coderabbit.yaml"
 - ".github/actions/cpflow-build-docker-image/action.yml"
 - ".github/actions/cpflow-delete-control-plane-app/action.yml"
 - ".github/actions/cpflow-delete-control-plane-app/delete-app.sh"
 - ".github/actions/cpflow-detect-release-phase/action.yml"
+- ".github/actions/cpflow-preview-promotion/action.yml"
+- ".github/actions/cpflow-preview-promotion/preview-promotion.sh"
 - ".github/actions/cpflow-resolve-review-config/action.yml"
 - ".github/actions/cpflow-setup-environment/action.yml"
 - ".github/actions/cpflow-validate-config/action.yml"
 - ".github/actions/cpflow-wait-for-health/action.yml"
+- ".github/dependabot.yml"
 - ".github/pull_request_template.md"
 - ".github/workflows/check_cpln_links.yml"
 - ".github/workflows/claude-code-review.yml"
 - ".github/workflows/claude.yml"
+- ".github/workflows/coderabbit-lifecycle-review.yml"
 - ".github/workflows/command_docs.yml"
 - ".github/workflows/cpflow-cleanup-stale-review-apps.yml"
 - ".github/workflows/cpflow-delete-review-app.yml"
@@ -151,6 +159,7 @@ files:
 - docs/dns.md
 - docs/grafana-opentelemetry.md
 - docs/migrating-heroku-to-control-plane.md
+- docs/postgres-review-apps.md
 - docs/postgres.md
 - docs/rds-private-networking.md
 - docs/redis.md
@@ -222,6 +231,7 @@ files:
 - lib/core/controlplane.rb
 - lib/core/controlplane_api.rb
 - lib/core/controlplane_api_direct.rb
+- lib/core/disposable_postgres_helpers.rb
 - lib/core/doctor_service.rb
 - lib/core/github_flow_readiness/checks.rb
 - lib/core/github_flow_readiness_service.rb
@@ -247,9 +257,11 @@ files:
 - lib/core/terraform_config/workload/main.tf
 - lib/core/terraform_config/workload/required_providers.tf
 - lib/core/terraform_config/workload/variables.tf
+- lib/core/timed_command.rb
 - lib/cpflow.rb
 - lib/cpflow/version.rb
 - lib/deprecated_commands.json
+- lib/generator_templates/.dockerignore
 - lib/generator_templates/Dockerfile
 - lib/generator_templates/controlplane.yml
 - lib/generator_templates/entrypoint.sh
@@ -281,6 +293,7 @@ files:
 - script/add_command
 - script/check_command_docs
 - script/check_cpln_links
+- script/check_shell_scripts
 - script/precommit/check_command_docs
 - script/precommit/check_cpln_links
 - script/precommit/check_trailing_newlines
@@ -304,21 +317,9 @@ licenses:
 metadata:
   rubygems_mfa_required: 'true'
 post_install_message: |
-  cpflow 5.3.0 installed.
-
-  If this repository already uses generated cpflow GitHub Actions, update the
-  checked-in wrappers so GitHub loads the matching control-plane-flow release tag:
-
-    cpflow update-github-actions
-    bin/test-cpflow-github-flow
-
-  If you run cpflow through Bundler:
-
-    bundle exec cpflow update-github-actions
-    bin/test-cpflow-github-flow bundle exec cpflow
-
-  New repository? Run `cpflow generate-github-actions` first to create the
-  wrappers (and the `bin/test-cpflow-github-flow` script referenced above).
+  cpflow 6.0.0 installed.
+  Generated GitHub Actions users: run `cpflow update-github-actions` after upgrading.
+  Docs: https://github.com/shakacode/control-plane-flow/blob/main/docs/ci-automation.md#updating-generated-github-actions-after-gem-updates
 rdoc_options: []
 require_paths:
 - lib
@@ -326,7 +327,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.0.0
+      version: '3.2'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="