hoe-gemspec2 1.3.0 → 1.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cefaeb9a03fd6b440d9c8a4d3513a43bdf8d0611bd5d4804d1c3055d20591628
-  data.tar.gz: 995d01304b2acdd816d11f68a1ed2efc6ce6a1335de80ce98f5d538ac16d1b9c
+  metadata.gz: 7ea048fd72f37dd1c0d1b0e363f8936c3f8885e1d2c45f48d908fde54d66e0c4
+  data.tar.gz: 195c939582ac84986e4ba45b4ebbc13d4239a9d64f008ef2c0d40b457ef44835
 SHA512:
-  metadata.gz: 4360cf0f9e2be46afa9bff3ae06e579e5c20e352313f26756817d357fd3ba3a7c6a3bfbaac8b480ee2270153a31d928cf60af13d22a37eab7afcdb90c460a450
-  data.tar.gz: 315d46fb85fdacc2b4cc2ceecb5eb6cebb710d361b829f5654d40c90f83943de1b13915937c01ac57983ec5d3b0d14464fb3af9dcddb14da1afe736a41f3c71d
+  metadata.gz: 1a0d00cbde59e483a5fd1e84f0fa55f980f435fa13e458db44305f266b38a27ed9a0cb1292c76e5f9152e327b0ba9ce739f281cf3942bd536b37418e0db3882d
+  data.tar.gz: 9ecc451aed677df7c4e45c38c67124cee8018750c7e0453a2623b4cf5be32fb69385747141810d75537a89543465efd04560d4b64a14264f8cf108e4ddec1cea

data/CHANGELOG.rdoc

@@ -1,7 +1,18 @@
+=== 1.4.0 / 2025-06-11
+
+* Use YAML.safe_dump.
+
+* Clear `spec.date` because a recent change to RubyGems to make builds
+  more reproducible set date to 1980. This makes builds using hoe-gemspec2
+  no longer strictly reproducible, but in recent (spring 2025) comments
+  on rubygems/rubygems it appears that `spec.date` will be deprecated in
+  the future.
+
 === 1.3.0 / 2022-03-25
 
 * Add compatibility with modern safe versions of YAML, which makes #load
-  an alias for #safe_load.
+	an alias for #safe_load. Thanks to @nevesenin, Merten Falk, for the
+	contribution!
 
 === 1.2.0 / 2014-07-18
 

data/lib/hoe/gemspec2.rb

@@ -1,39 +1,51 @@
 module Hoe::Gemspec2
-  VERSION = '1.3.0'
+  VERSION = "1.4.0"
 
   def define_gemspec2_tasks
-    gemspec = spec.name + '.gemspec'
+    gemspec = spec.name + ".gemspec"
 
     with_config do |config, _|
-      unless config["exclude"] =~ '.gemspec'
+      unless ".gemspec".match?(config["exclude"])
         warn "WARNING You should add .gemspec to your .hoerc exclude list"
       end
     end
 
     file gemspec => %w[clobber Manifest.txt] + spec.files do
-      open(gemspec, 'w') { |f|
-        permitted_classes = %w[
-          Symbol Time Date Gem::Dependency Gem::Platform Gem::Requirement
-          Gem::Specification Gem::Version Gem::Version::Requirement
-          YAML::Syck::DefaultKey Syck::DefaultKey
+      open(gemspec, "w") { |f|
+        permitted_classes = [
+          Symbol, Time, Date, Gem::Dependency, Gem::Platform, Gem::Requirement,
+          Gem::Specification, Gem::Version, Gem::Version::Requirement
         ]
-        permitted_symbols = %w[development runtime]
+
+        permitted_symbols = %i[development runtime]
         spec2 = begin
-                  YAML.safe_load(
-                    YAML.dump(spec),
-                    :permitted_classes => permitted_classes,
-                    :permitted_symbols => permitted_symbols,
-                    :aliases => true
-                  )
-                rescue
-                  YAML.safe_load(
-                    YAML.dump(spec), permitted_classes, permitted_symbols, true
-                  )
-                end
+          YAML.safe_load(
+            YAML.safe_dump(
+              spec,
+              :permitted_classes => permitted_classes,
+              :permitted_symbols => permitted_symbols,
+              :aliases => true
+            ),
+            :permitted_classes => permitted_classes,
+            :permitted_symbols => permitted_symbols,
+            :aliases => true
+          )
+        rescue
+          YAML.safe_load(
+            YAML.dump(spec), permitted_classes, permitted_symbols, true
+          )
+        end
+
+        # - Point the first: in service of reproducible builds, the RubyGems team made
+        #   a change that breaks hoe releases using this gemspec.
+        # - Point the second: the date field is going to be deprecated. We clear it if
+        #   the date is settable. This should make this at least partially forwards-
+        #   compatible.
+        spec2.date = nil if spec2.respond_to?(:date=)
 
         unless @include_all
-          [ :signing_key, :cert_chain ].each { |name|
-            spec2.send("#{name}=".to_sym, spec2.default_value(name))
+          [:signing_key, :cert_chain].each { |name|
+            spec2.send(:"#{name}=", spec2.default_value(name))
           }
         end
         f.write(spec2.to_ruby)
@@ -47,7 +59,7 @@ module Hoe::Gemspec2
       desc "Regenerate #{gemspec} with all keys"
       task :full do
         @include_all = true
-        Rake::Task['gemspec'].invoke
+        Rake::Task["gemspec"].invoke
       end
     end
 

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: hoe-gemspec2
 version: !ruby/object:Gem::Version
-  version: 1.3.0
+  version: 1.4.0
 platform: ruby
 authors:
 - raggi
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-03-26 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: hoe
@@ -30,14 +29,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '5.15'
+        version: '5.25'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '5.15'
+        version: '5.25'
 - !ruby/object:Gem::Dependency
   name: hoe-doofus
   requirement: !ruby/object:Gem::Requirement
@@ -137,7 +136,6 @@ licenses:
 - MIT
 metadata:
   homepage_uri: http://rubygems.org/gems/hoe-gemspec2
-post_install_message:
 rdoc_options:
 - "--main"
 - README.rdoc
@@ -154,8 +152,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.6
-signing_key:
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Adds support for generation of gemspec files to Hoe
 test_files: []