gemchain 0.2.0 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cfa66ea15e541d38928f3f19469437e021e4e40566af6dbc68c17bdda991c986
-  data.tar.gz: c9870c9615acd4f464302d282bf50ba722f098d5ed6e4e1da3c4ef60c46ab25e
+  metadata.gz: 29cc49ef5619e2bf869d99e3785600c68fce13cac87d5f455103e82ad67964df
+  data.tar.gz: e3ee5374417db2c3bf89028b0eb2527dd698217f850bfc9402e1c68c364aed61
 SHA512:
-  metadata.gz: 0e4133d289e5b13d797ec17a8b57093e1cb0a4d74b5b65c865f9b7317d9e6714461e2b7d15cd873cbf0890fec66ec8cb7b1bd3c5290ebe247ffd63ea9c8bc9f4
-  data.tar.gz: 0e00b7f943cf3ba4f39f831eebe8b128a4a5e6582d101f9b69cf46663ebfe8b639d74a858eb39921aa6d4c31eb7b336c6b8492a3aa016e15aca7389559611a70
+  metadata.gz: 5b37952e40c01005984baae5a1d077b62af99ab7b77f9a464578dd16a02ec33b6e4c3a371ab7bdeadd99fbbc6c1e9c590f0744d0ab80e4100aa431e5a9ab9c46
+  data.tar.gz: 9f9e33a3c2cf12eeb19e0eb641523dfa6e46eadccef43a79352cb4446e6e8ffd77acad93fc1d9697de9c33fa6590634cbd67c20073ff67bafe8895cac62bec96

data/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.2.1] — 2026-08-12
+
+### Fixed
+
+- **Release staging skips gitignored `Gemfile.lock`** — `git add` failed for
+  gem repos that deliberately ignore their lockfile (e.g. ask-mcp), aborting
+  the cascade mid-release. Staging now skips files excluded via `.gitignore`.
+- **Cascade mode detection verifies the release actually happened** — a
+  failed run can leave `version.rb` bumped while the gem was never pushed;
+  the previous `version.rb == target` check then skipped the source release
+  and released dependents against a nonexistent version. `update` now checks
+  RubyGems for the published version (injectable for tests) before assuming
+  post-release mode.
+
 ## [0.2.0] — 2026-08-10
 
 ### Added

data/lib/gemchain/cascade.rb

@@ -4,8 +4,9 @@ module Gemchain
   class Cascade
     Result = Struct.new(:success, :message, :details, keyword_init: true)
 
-    def initialize(workspace)
+    def initialize(workspace, released_check: nil)
       @workspace = workspace
+      @released_check = released_check || method(:released_on_rubygems?)
     end
 
     # Pre-release guard: warns about gems that depend on +gem_name+.
@@ -44,7 +45,9 @@ module Gemchain
     end
 
     # Performs the full cascade update:
-    # 1. If the source gem isn't already at +new_version+: bump, test, release it
+    # 1. If the source gem isn't already at +new_version+ AND published on
+    #    RubyGems: bump, test, release it (a version.rb match alone is not
+    #    enough — a failed run can leave it bumped but unpublished)
     # 2. For each dependent (topological order): update constraint, test, bump, release
     #
     # With test_only: true, only the dependents' :test steps are emitted —
@@ -60,7 +63,7 @@ module Gemchain
       steps = []
       order = @workspace.cascade_order(gem_name)
 
-      if !test_only && gem.version.to_s != new_version
+      if !test_only && (gem.version.to_s != new_version || !@released_check.call(gem_name, new_version))
         # The source must be released before dependents' `bundle update`
         # can resolve the new version from RubyGems.
         steps << {action: :bump, gem: gem_name, version: new_version}
@@ -105,5 +108,17 @@ module Gemchain
 
       lines.join("\n")
     end
+
+    # True when +name+ is published at +version+ on RubyGems. When rubygems
+    # is unreachable, assume not published so the full mode (bump → test →
+    # release) is preferred — bumping an already-published version is a no-op.
+    def released_on_rubygems?(name, version)
+      require "json"
+      require "net/http"
+      body = Net::HTTP.get(URI("https://rubygems.org/api/v1/gems/#{name}.json"))
+      JSON.parse(body)["version"] == version
+    rescue StandardError
+      false
+    end
   end
 end

data/lib/gemchain/executor.rb

@@ -162,8 +162,7 @@ module Gemchain
       name = step[:gem]
       version = step[:version] || bump_dependent(dir, name)
 
-      files = [gemspec_file(dir), version_file(dir), File.join(dir, "Gemfile.lock")]
-              .select { |f| File.exist?(f) }
+      files = release_files(dir)
       @runner.run(["git", "add", *files], chdir: dir)
 
       message = if step[:dependency]
@@ -179,6 +178,21 @@ module Gemchain
       @runner.run(["git", "push", "origin", "HEAD", "--tags"], chdir: dir)
     end
 
+    # Gemspec and version file are always staged; Gemfile.lock only when it
+    # exists and isn't deliberately excluded via .gitignore (gem repos
+    # commonly ignore it).
+    def release_files(dir)
+      files = [gemspec_file(dir), version_file(dir)]
+      lockfile = File.join(dir, "Gemfile.lock")
+      files << lockfile if File.exist?(lockfile) && !git_ignored?(dir, lockfile)
+      files
+    end
+
+    def git_ignored?(dir, file)
+      _out, _err, status = Open3.capture3("git", "check-ignore", "--no-index", "-q", file, chdir: dir)
+      status.success?
+    end
+
     # Dependents get an automatic version bump (they're being re-released
     # with a tightened constraint); the source gem's version comes from the
     # :bump step.

data/lib/gemchain/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Gemchain
-  VERSION = "0.2.0"
+  VERSION = "0.2.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: gemchain
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.1
 platform: ruby
 authors:
 - Kaka Ruto