gemchain 0.3.0 → 0.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1cacd44997c24011ea6c204ad739d11cea72da928bcaf7f5ebe9cd27f8b3cf96
-  data.tar.gz: a75aa99478abefb2d716b187cc24ee28104f54c46f144f20ab126472c4c2cd08
+  metadata.gz: dcead1646646bd6ae965b52847fc093e2cb2a4ed56ed5a0a3155ebb28b3cdc47
+  data.tar.gz: 9080988bd10e6263c97bdd993cd0b0e37a6af49c327ce6c0e11041a34204be2b
 SHA512:
-  metadata.gz: 9efa9ebffb78684ea4358f00900a377d903c598d2c982afdbbb749b650e6f69b41ab7cfa0fbd59c43619ffff1790287a052adaede75566e82c3f8c5d052ae34c
-  data.tar.gz: fcbf7ec2dcc638fb83c95af834f38bd5fb9a8a453c806b550401bf51d3929877c15146f2f34aaff83e14d4f0219d710cd9ac84f7beadac82cbc4c768a1843b9d
+  metadata.gz: 8ccb6c8541fdde2944698cc1b9c46f70c1874651b3eb89687f9b72826a3d82c278e638d2be6b4ae54fe2fc3bb0a6fc2b3108c0f4c5cd4cd26fab169e07e79761
+  data.tar.gz: 402900440c2500eac0ceff372cc98480ad81088bf2f08f892c3b7424a89eca618cdd6e5b5d69ec341fcd386273b1526612e9a80f5b3ac8cae17c20b43acc61f5

data/CHANGELOG.md

@@ -1,5 +1,14 @@
 ## [Unreleased]
 
+## [0.3.1] - 2026-09-25
+
+### Fixed
+
+- Dependents are no longer released when the source gem's release did not
+  happen — a failed or declined source release now skips every dependent
+  step, so no dependent is ever published with a constraint pointing at an
+  unpublished version.
+
 ## [0.3.0] - 2026-09-23
 
 ### Added

data/lib/gemchain/executor.rb

@@ -12,6 +12,12 @@ module Gemchain
   # runs test suites, and releases gems to RubyGems. On failure the
   # remaining steps for the failing gem are skipped but the cascade
   # continues to the next gem, so healthy dependents are still updated.
+  #
+  # One ordering rule overrides that continuation: a dependent is released
+  # only after the gem it depends on is itself on RubyGems. A source whose
+  # tests failed, or whose release was declined or failed, leaves every
+  # dependent untouched — a constraint pointing at an unpublished version
+  # is unresolvable for anyone bundling the dependent fresh.
   # All shell interaction goes through the +runner+ so the whole pipeline
   # is testable without touching bundler, git, or RubyGems.
   class Executor
@@ -69,6 +75,12 @@ module Gemchain
       failed = {}
       failed_gems = Set.new
 
+      # The source gem is the one the plan bumps; its steps carry no
+      # :dependency. A plan without source steps is a dependents-only
+      # cascade, where the source is already published by premise.
+      source_gem = @steps.find { |step| step[:dependency].nil? }&.fetch(:gem, nil)
+      source_released = source_gem.nil?
+
       @steps.each do |step|
         # Skip remaining steps for a gem that already failed
         if failed_gems.include?(step[:gem])
@@ -76,6 +88,15 @@ module Gemchain
           next
         end
 
+        # No source on RubyGems, no dependents released: a constraint
+        # pointing at an unpublished version cannot be resolved by anyone
+        # bundling the dependent fresh.
+        if !source_released && !source_gem.nil? && step[:gem] != source_gem
+          @output.puts "  ⏭ Skipping #{step[:gem]} — #{source_gem} was not released, so its dependents cannot be"
+          skipped << step[:gem] unless skipped.include?(step[:gem])
+          next
+        end
+
         begin
           case step[:action]
           when :bump
@@ -88,6 +109,7 @@ module Gemchain
             if release_confirmed?(step)
               progress(step) { release(step) }
               released << step[:gem]
+              source_released = true if step[:gem] == source_gem
             else
               @output.puts "  ⏭ Skipped release of #{step[:gem]} (declined)"
               skipped << step[:gem]

data/lib/gemchain/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Gemchain
-  VERSION = "0.3.0"
+  VERSION = "0.3.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: gemchain
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.3.1
 platform: ruby
 authors:
 - Kaka Ruto