ethos-gemkit 0.3.0 → 0.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b4df86371c7d4ec7fff974c09607c9c9913619c43a346fbeb942b15e1f2cd459
-  data.tar.gz: 6714316c9084400d143c62eac48fc8396f8bc12341cf456a3b13926782d4dfae
+  metadata.gz: a6874e64af38ffa0301d9db238dc2a7a4a95e4de66df211003491ec5c68f74a0
+  data.tar.gz: 1ef1d85750e28953db05b02d142b4dd728879a3f7c6bfc79525b1fae7c29bcf0
 SHA512:
-  metadata.gz: ba5baf95b85294435d3cc4b833ca5a9279411a4678a39596b26208c397db544ff76e674fd90e9d2999908d602f90d41e919574818d101cd45b56830aa9658c0e
-  data.tar.gz: 035744fbe210f66bc5b02d4f1eceb10b0470afd8d18b1fdda6505fdefdd176242f00155ae36fd5b1c042bfb4c912e5fc1d1f82df179e59e622065fcd117a2a7c
+  metadata.gz: 13b6137a5f8de672582a52d84c8084d60e9af03718bae99f4d1b3274ccaeac3a97a93a50217e04ade33cdb8421f8b27a9e7c70aa0614582ba061879f677d7994
+  data.tar.gz: f12acfadd4abb54a6f99a9c6eed7ac94747e497bc575c59018ab68ac0631cd6f7e46b4255773d0d9a45af9646d8d79108bbfc01118332483e92f0f90793e8065

data/CHANGELOG.md

@@ -5,6 +5,19 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.1] - 2026-11-05
+
+### Changed
+
+- remove unused package and changelog entries
+- provision consumer dependencies before checks
+- run checks locally to preserve Actions budget
+
+
+### Fixed
+
+- normalize generated release notes
+
 ## [0.3.0] - 2026-11-05
 
 ### Changed

data/README.md

@@ -53,10 +53,13 @@ release tasks while a repository is adopting the toolkit.
 `bundle exec rake verify` runs lint, registered checks, a disposable native gem
 build, and git-cliff validation.
 
-Ordinary pull requests call `.github/workflows/consumer.yml`. Its optional
-`build-setup` input provisions system dependencies before verification, such as
-browser packages or a disposable database. Keep the caller's permissions at
-`contents: read`; this workflow does not need publishing credentials.
+Run verification locally before pushing and when preparing a release. GitHub
+Actions checks commit messages on ordinary PRs and main pushes; it does not run
+tests, lint, browser checks or integration suites. Release workflows validate
+release source and package integrity, then tag and publish without repeating
+the locally completed checks. Commitlint checks out Gemkit at the caller's
+`toolkit-ref` and runs its Ruby CLI without installing the consumer bundle. Set
+that input to the same immutable commit as the workflow pin.
 
 ## Private gem access
 
@@ -78,7 +81,7 @@ token. See [GitHub's registry guide](https://docs.github.com/en/packages/working
 **Run `release:prepare` from clean, up-to-date `main`.** It creates the conventional
 release branch and opens a PR. **Merging that release PR starts publication.**
 This is the same process for Gemkit itself and its adopted consumer gems.
-Ordinary feature/fix PRs run verification; only a release PR starts publication.
+Ordinary feature/fix PRs run commitlint; only a release PR starts publication.
 
 ### One-time prerequisites
 
@@ -111,11 +114,10 @@ against `main` and `push: tags: ["v*"]`, and pin the commit matching the install
 Gemkit release.
 See the [Tunnel caller](https://github.com/ethos-link/cloudflare-tunnel/blob/main/.github/workflows/release.yml).
 
-Projects keep their own checks. Engines can register `checks: [ci:local]` in
-`.ethos-gemkit.yml` and have that task run `bin/ci`. Set the release caller's
-optional `build-setup` input to provision those checks' dependencies, such as
-PostgreSQL or browser packages. Setup runs only in the read-only build job;
-publishing credentials remain in the separate publish job.
+Projects keep their own local checks. Engines can register `checks: [ci:local]`
+in `.ethos-gemkit.yml` and have that task run `bin/ci`. Provision PostgreSQL or
+browser dependencies locally before running verification. Release callers do
+not install test dependencies or accept `build-setup`.
 
 ### RubyGems trusted-publisher settings
 
@@ -177,7 +179,8 @@ When starting from main, a leftover local release branch is recreated only if
 all its commits are already in main; unmerged work is preserved and stops the task.
 
 Review the generated notes, lockfile and version in the PR. Add or adjust upgrade
-notes in a follow-up commit when needed, and wait for CI before merging. The task
+notes in a follow-up commit when needed, rerun affected checks locally, and wait
+for commitlint before merging. The task
 prints the PR URL and makes clear that merging it publishes the release.
 
 ### Merge and publish
@@ -185,8 +188,9 @@ prints the PR URL and makes clear that merging it publishes the release.
 Merging a same-repository `chore/release-vX.Y.Z` PR into main runs the shared
 workflow against its exact merge commit, including squash and rebase merges:
 
-1. Verify the expected version, main ancestry, notes, committed package bytes and
-   all registered checks; build one release artifact through Bundler.
+1. Verify the expected version, main ancestry, notes and committed package bytes;
+   build one release artifact through Bundler. Tests and lint already ran locally
+   during `release:prepare` and are not repeated in Actions.
 2. Create and push the annotated `vX.Y.Z` tag without overwriting existing tags
    or following unrelated local tags.
 3. In an isolated job, verify the artifact's SHA-256 checksums, obtain the proper

data/UPGRADE.md

@@ -1,5 +1,17 @@
 # Upgrading Gemkit
 
+## 0.3.1
+
+Run `bundle exec rake verify` locally before pushing. `release:prepare` still
+runs the complete local verification gate. `release:build` validates release
+source and packages it without repeating tests or lint in GitHub Actions.
+
+Delete verification workflow callers (`ruby.yml` or `verify.yml`) and retain
+commitlint and release callers. Pin the installed Gemkit and remaining callers
+to the same release. Pass that immutable commit as `toolkit-ref` to the commitlint
+caller; commitlint runs the pinned Ruby CLI without a bundle install. Remove the release caller's `build-setup` input; databases,
+browsers and other test dependencies are now provisioned only locally.
+
 ## 0.2.1
 
 Release preparation now fetches registry checksums with Bundler instead of

data/lib/ethos/gemkit/release_tasks.rb

@@ -10,7 +10,7 @@ task "release:prepare", [:target] do |_task, args|
 end
 
 desc "Verify release source and build using Bundler's native task"
-task "release:build" => :verify do
+task "release:build" do
   release = Ethos::Gemkit::Release.new(config)
   notes = release.verify(ENV.fetch("RELEASE_TAG"), tagged: ENV["RELEASE_FROM_PR"] != "true")
   Rake::Task[:build].invoke

data/lib/ethos/gemkit/version.rb

@@ -2,6 +2,6 @@
 
 module Ethos
   module Gemkit
-    VERSION = "0.3.0"
+    VERSION = "0.3.1"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ethos-gemkit
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.3.1
 platform: ruby
 authors:
 - Ethos Link