finrb 1.0.0 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e783eb0696497a848cc5506b4bd0d75e4327b383a8a4c998fd34ed86c3092a8c
-  data.tar.gz: ca82637abc1703af93554215a2704469af63a3e4d95c4659da9ab86df289bdf2
+  metadata.gz: b167e3a39320ed5f8026b7451063d08f6eeb8e1047dc06f7688e4afc617434c2
+  data.tar.gz: 9407136f5589353ab3704f9bd7bb37b802191aa3aa51ca2bc3248cf359a276da
 SHA512:
-  metadata.gz: a1b6da22366494309440b3095f6ea046512c27bf1aed43586701788f87c4fd25e67a246e35172419077cdf2c2a074c5bc9f2ae23ec110a2c3d4a65d690bdf0c0
-  data.tar.gz: 2d3fa7f43260c6d00767e899a37ca977e86a4b146cb500dd6f1fa9ffaeabcc1dbed38fa2a7f1e38168e0a86c4f69e960131e96d9d2e8f3dedffe24f2c3064cd8
+  metadata.gz: 9ec1ff7159e4d1aadd5dde4fcb168a0f1a7679e20f59c50bb26a642ccbee1e6aa65b021e67906586382e64aca23a240e566625ea359dc48e9aa2987e24a9c433
+  data.tar.gz: 671ae01b065e636c0bf8ef60e851e53866b02e09238d3a233443150a11f09851af493a2462e891a305ce174c6cb57ba492f09f6cfef48ded3693a120e448c410

data/CHANGELOG.md

@@ -1,5 +1,22 @@
 # finrb changelog
 
+## 1.0.1
+
+### Runtime compatibility
+
+- Test Ruby 3.3, 3.4, and 4.0 across x86-64, native ARM64, and Docker environments.
+- Add experimental JRuby and TruffleRuby compatibility suites and isolated development/test images.
+- Add Docker Buildx tasks for developing and running the ARM64 image on x86-64 hosts.
+- Add version-selectable, failure-aware Docker build, test, and run tasks.
+
+### Packaging and assurance
+
+- Verify gem metadata, packaged licenses, attribution, RBS declarations, and runtime dependencies.
+- Install the built gem into an isolated gem home and smoke-test version loading, NPV, IRR, and opt-in core extensions.
+- Add dependency review, ruby-advisory-db auditing, grouped Dependabot updates, workflow timeouts, and concurrency controls.
+- Simplify CodeQL analysis and add reusable package and security verification tasks.
+- Declare `ostruct` as a runtime dependency because it is required by `flt` and is no longer bundled with Ruby 4.
+
 ## 1.0.0
 
 This release intentionally breaks parts of the 0.1 public API.

data/README.md

@@ -208,12 +208,65 @@ Install the bundle and run the self-contained quality checks:
 bundle install
 bundle exec rake quality
 bundle exec rubocop
+bundle exec rake security:audit
+bundle exec rake package:verify
 ```
 
 The quality task runs the RSpec suite with line and branch coverage, generated
 IRR/XIRR properties, committed SciPy/QuantLib reference fixtures, and RBS
 validation.
 
+`security:audit` updates ruby-advisory-db and checks the locked dependencies.
+`package:verify` builds the gem, validates its contents and metadata, installs
+it with only its declared runtime dependencies, and runs packaged API smoke
+tests without publishing or retaining the temporary installation.
+
+CI runs every supported MRI version on x86-64, native ARM64, and Docker, plus
+compatibility specs and Docker builds for the current stable JRuby and
+TruffleRuby. Alternative Ruby jobs are initially informational while their
+dependency and numerical compatibility is assessed.
+
+Select the MRI version used by the ordinary Docker tasks with `RUBY_VER`:
+
+```shell
+RUBY_VER=3.3 bundle exec rake docker:build
+RUBY_VER=3.3 bundle exec rake docker:test
+RUBY_VER=3.3 bundle exec rake docker:run
+```
+
+On an x86-64 development machine with Docker Buildx and ARM64 emulation
+available, build, test, and run the ARM64 development image with:
+
+```shell
+bundle exec rake docker:arm64:build
+bundle exec rake docker:arm64:test
+bundle exec rake docker:arm64:run
+```
+
+Docker Desktop normally provides the required emulation. A Linux Docker Engine
+installation must have an ARM64-capable Buildx builder and binfmt/QEMU support
+configured by the operator.
+
+The alternative Ruby development images share a minimal, package-manager-
+independent Dockerfile. Build, test, and run either implementation with:
+
+```shell
+bundle exec rake docker:jruby:build
+bundle exec rake docker:jruby:test
+bundle exec rake docker:jruby:run
+
+bundle exec rake docker:truffleruby:build
+bundle exec rake docker:truffleruby:test
+bundle exec rake docker:truffleruby:run
+```
+
+The defaults track JRuby 10 on JDK 21 and the current TruffleRuby Community
+image. Override them with `JRUBY_IMAGE` or `TRUFFLERUBY_IMAGE` when testing a
+specific release. These images use `gemfiles/engines.gemfile`, which contains
+only finrb's runtime dependencies and RSpec; MRI-only development tooling such
+as RBS, RuboCop, and coverage is deliberately excluded from engine
+compatibility runs.
+
 Maintainers with the optional Python environment can run the larger seeded
 solver verification campaign:
 

data/lib/finrb/version.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
 module Finrb
-  VERSION = '1.0.0'
+  VERSION = '1.0.1'
   public_constant :VERSION
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: finrb
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.1
 platform: ruby
 authors:
 - Nadir Cohen
@@ -37,6 +37,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: ostruct
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: amazing_print
   requirement: !ruby/object:Gem::Requirement
@@ -52,7 +66,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: ostruct
+  name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="