hoe-gemspec2 1.2.0 → 1.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: dc68895491ef45bdf754ad599f9d89cca3ede9bf
-  data.tar.gz: 2d7c1d0699b7c8dca6baa284fef7a6196ed4ddb0
+SHA256:
+  metadata.gz: 7ea048fd72f37dd1c0d1b0e363f8936c3f8885e1d2c45f48d908fde54d66e0c4
+  data.tar.gz: 195c939582ac84986e4ba45b4ebbc13d4239a9d64f008ef2c0d40b457ef44835
 SHA512:
-  metadata.gz: 895f48e654794328be6f1b15c1e41ff4180b2b8cd3e7b5ac650bc8f151f8b9e79c56eda1461abdd6ac6dadb913ffcac6278bb4849725252f27be48c5be3a061f
-  data.tar.gz: 6d03d4853d51541fc8d96bb84cb1d90be1d5f1f42b1e725ddcc7782791d3248b01524e362d039b491da6d0c972319c559523d1c342cd816c086bb6e4fc39f877
+  metadata.gz: 1a0d00cbde59e483a5fd1e84f0fa55f980f435fa13e458db44305f266b38a27ed9a0cb1292c76e5f9152e327b0ba9ce739f281cf3942bd536b37418e0db3882d
+  data.tar.gz: 9ecc451aed677df7c4e45c38c67124cee8018750c7e0453a2623b4cf5be32fb69385747141810d75537a89543465efd04560d4b64a14264f8cf108e4ddec1cea

data/CHANGELOG.rdoc

@@ -1,3 +1,19 @@
+=== 1.4.0 / 2025-06-11
+
+* Use YAML.safe_dump.
+
+* Clear `spec.date` because a recent change to RubyGems to make builds
+  more reproducible set date to 1980. This makes builds using hoe-gemspec2
+  no longer strictly reproducible, but in recent (spring 2025) comments
+  on rubygems/rubygems it appears that `spec.date` will be deprecated in
+  the future.
+
+=== 1.3.0 / 2022-03-25
+
+* Add compatibility with modern safe versions of YAML, which makes #load
+	an alias for #safe_load. Thanks to @nevesenin, Merten Falk, for the
+	contribution!
+
 === 1.2.0 / 2014-07-18
 
 * Automatically exclude +cert_chain+ and +signing_key+, unless called as

data/README.rdoc

@@ -1,6 +1,6 @@
 = hoe-gemspec2
 
-http://rubygems.org/gems/hoe-gemspec2
+home :: http://rubygems.org/gems/hoe-gemspec2
 
 {Project}[http://rubygems.org/gems/hoe-gemspec2]
 {Documentation}[http://rubydoc.info/github/raggi/hoe-gemspec2]

data/lib/hoe/gemspec2.rb

@@ -1,22 +1,51 @@
 module Hoe::Gemspec2
-  VERSION = '1.2.0'
+  VERSION = "1.4.0"
 
   def define_gemspec2_tasks
-    gemspec = spec.name + '.gemspec'
+    gemspec = spec.name + ".gemspec"
 
     with_config do |config, _|
-      unless config["exclude"] =~ '.gemspec'
+      unless ".gemspec".match?(config["exclude"])
         warn "WARNING You should add .gemspec to your .hoerc exclude list"
       end
     end
 
     file gemspec => %w[clobber Manifest.txt] + spec.files do
-      open(gemspec, 'w') { |f|
-        spec2 = YAML.load(YAML.dump(spec))
+      open(gemspec, "w") { |f|
+        permitted_classes = [
+          Symbol, Time, Date, Gem::Dependency, Gem::Platform, Gem::Requirement,
+          Gem::Specification, Gem::Version, Gem::Version::Requirement
+        ]
+
+        permitted_symbols = %i[development runtime]
+        spec2 = begin
+          YAML.safe_load(
+            YAML.safe_dump(
+              spec,
+              :permitted_classes => permitted_classes,
+              :permitted_symbols => permitted_symbols,
+              :aliases => true
+            ),
+            :permitted_classes => permitted_classes,
+            :permitted_symbols => permitted_symbols,
+            :aliases => true
+          )
+        rescue
+          YAML.safe_load(
+            YAML.dump(spec), permitted_classes, permitted_symbols, true
+          )
+        end
+
+        # - Point the first: in service of reproducible builds, the RubyGems team made
+        #   a change that breaks hoe releases using this gemspec.
+        # - Point the second: the date field is going to be deprecated. We clear it if
+        #   the date is settable. This should make this at least partially forwards-
+        #   compatible.
+        spec2.date = nil if spec2.respond_to?(:date=)
 
         unless @include_all
-          [ :signing_key, :cert_chain ].each { |name|
-            spec2.send("#{name}=".to_sym, spec2.default_value(name))
+          [:signing_key, :cert_chain].each { |name|
+            spec2.send(:"#{name}=", spec2.default_value(name))
           }
         end
         f.write(spec2.to_ruby)
@@ -30,7 +59,7 @@ module Hoe::Gemspec2
       desc "Regenerate #{gemspec} with all keys"
       task :full do
         @include_all = true
-        Rake::Task['gemspec'].invoke
+        Rake::Task["gemspec"].invoke
       end
     end
 

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: hoe-gemspec2
 version: !ruby/object:Gem::Version
-  version: 1.2.0
+  version: 1.4.0
 platform: ruby
 authors:
 - raggi
-autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-07-18 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: hoe
@@ -30,28 +29,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '5.3'
+        version: '5.25'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '5.3'
-- !ruby/object:Gem::Dependency
-  name: rdoc
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '4.0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '4.0'
+        version: '5.25'
 - !ruby/object:Gem::Dependency
   name: hoe-doofus
   requirement: !ruby/object:Gem::Requirement
@@ -108,6 +93,26 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: rdoc
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '4.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '7'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '4.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '7'
 description: |-
   Adds support for generation of gemspec files to Hoe. By default, excludes the
   signing key and certificate chain. Use <tt>rake gemspec:full</tt> to include
@@ -129,8 +134,8 @@ files:
 homepage: http://rubygems.org/gems/hoe-gemspec2
 licenses:
 - MIT
-metadata: {}
-post_install_message: 
+metadata:
+  homepage_uri: http://rubygems.org/gems/hoe-gemspec2
 rdoc_options:
 - "--main"
 - README.rdoc
@@ -147,9 +152,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.2.0
-signing_key: 
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Adds support for generation of gemspec files to Hoe
 test_files: []