karafka-core 2.4.9 → 2.4.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +0 -0
  3. data/.github/CODEOWNERS +3 -0
  4. data/.github/workflows/ci.yml +32 -8
  5. data/.github/workflows/verify-action-pins.yml +16 -0
  6. data/CHANGELOG.md +3 -0
  7. data/Gemfile.lock +3 -3
  8. data/karafka-core.gemspec +1 -1
  9. data/lib/karafka/core/version.rb +1 -1
  10. data/renovate.json +10 -0
  11. data.tar.gz.sig +0 -0
  12. metadata +6 -4
  13. metadata.gz.sig +0 -0
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: d0e90f463a548ad08a58967cd865248a1b3b0bffff728f2b3c03d603e2262880
4
- data.tar.gz: af754176e11801b8bbb0154e832e5becf7206c96c62c13e4a6751ea01bf23e38
3
+ metadata.gz: 798eaca53e61de396b7cf8d5a0ccf2350a8388016a7e8bc91056249622c81a4d
4
+ data.tar.gz: 8213135229dcaddbeeb87cfeb02a6301849b8ec5184fa72f5283dbc86da8be84
5
5
  SHA512:
6
- metadata.gz: 2aa2d5fbb1fac0a05846ba767c77469f154e3b3db91743ad3e056896eed578ff6ccf3f9fa8cdb52a136f6d421b2a3d20a18e9369ac0eab543cc6ff3e7488ebdd
7
- data.tar.gz: fc819a1e76de4d77c9cccd6aaaede1b8796105ab8d570dfa35f38fdde7a484945138839d4178c1628d6a9fabe615e75a417f22001a8169d1a65bea41d2449bb4
6
+ metadata.gz: a0c0ce5c5724470370578cc48c38e06bcf714730cec7d488db61e5651e8d47e9525cebb8c1219fb515432e7390f34879deb8b8abc87130e9dbc88b48bf715f73
7
+ data.tar.gz: b004561540f9689926bfc248fc13bf9e1b874c33d7607f3803915822bd09c4864386608e1074f0ab53128c659b7f2ac9aef9c97d37e794ebe43c27a906d6a0e2
checksums.yaml.gz.sig CHANGED
Binary file
data/.github/CODEOWNERS ADDED
@@ -0,0 +1,3 @@
1
+ /.github @mensfeld
2
+ /.github/workflows/ @mensfeld
3
+ /.github/actions/ @mensfeld
data/.github/workflows/ci.yml CHANGED
@@ -6,12 +6,18 @@ concurrency:
6
6
 
7
7
  on:
8
8
  pull_request:
9
+ branches: [ main, master ]
9
10
  push:
11
+ branches: [ main, master ]
10
12
  schedule:
11
- - cron: '0 1 * * *'
13
+ - cron: '0 1 * * *'
14
+
15
+ permissions:
16
+ contents: read
12
17
 
13
18
  jobs:
14
19
  specs:
20
+ timeout-minutes: 15
15
21
  runs-on: ubuntu-latest
16
22
  needs: diffend
17
23
  strategy:
@@ -26,19 +32,23 @@ jobs:
26
32
  - ruby: '3.4'
27
33
  coverage: 'true'
28
34
  steps:
29
- - uses: actions/checkout@v4
35
+ - uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2
36
+ with:
37
+ fetch-depth: 0
38
+
30
39
  - name: Install package dependencies
31
40
  run: "[ -e $APT_DEPS ] || sudo apt-get install -y --no-install-recommends $APT_DEPS"
41
+
32
42
  - name: Set up Ruby
33
- uses: ruby/setup-ruby@v1
43
+ uses: ruby/setup-ruby@6c79f721fa26dd64559c2700086ac852c18e0756
34
44
  with:
35
45
  ruby-version: ${{matrix.ruby}}
36
46
  bundler: 'latest'
47
+
37
48
  - name: Install latest bundler
38
49
  run: |
39
50
  gem install bundler --no-document
40
51
  gem update --system --no-document
41
-
42
52
  bundle config set without 'tools benchmarks docs'
43
53
 
44
54
  - name: Bundle install
@@ -52,15 +62,16 @@ jobs:
52
62
  run: bundle exec rspec
53
63
 
54
64
  diffend:
65
+ timeout-minutes: 5
55
66
  runs-on: ubuntu-latest
56
67
  strategy:
57
68
  fail-fast: false
58
69
  steps:
59
- - uses: actions/checkout@v4
70
+ - uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2
60
71
  with:
61
72
  fetch-depth: 0
62
73
  - name: Set up Ruby
63
- uses: ruby/setup-ruby@v1
74
+ uses: ruby/setup-ruby@6c79f721fa26dd64559c2700086ac852c18e0756
64
75
  with:
65
76
  ruby-version: 3.4
66
77
  - name: Install latest bundler
@@ -71,12 +82,25 @@ jobs:
71
82
  run: bundle secure
72
83
 
73
84
  coditsu:
85
+ timeout-minutes: 5
74
86
  runs-on: ubuntu-latest
75
87
  strategy:
76
88
  fail-fast: false
77
89
  steps:
78
- - uses: actions/checkout@v4
90
+ - uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2
79
91
  with:
80
92
  fetch-depth: 0
93
+ - name: Download Coditsu script
94
+ run: |
95
+ curl -sSL https://api.coditsu.io/run/ci -o coditsu_script.sh
96
+ chmod +x coditsu_script.sh
97
+ - name: Verify Coditsu script checksum
98
+ run: |
99
+ EXPECTED_SHA256="0aecc5aa010f53fca264548a41467a2b0a1208d750ce1da3e98a217304cacbbc"
100
+ ACTUAL_SHA256=$(sha256sum coditsu_script.sh | awk '{ print $1 }')
101
+ if [ "$ACTUAL_SHA256" != "$EXPECTED_SHA256" ]; then
102
+ echo "::error::Checksum verification failed. Expected $EXPECTED_SHA256 but got $ACTUAL_SHA256."
103
+ exit 1
104
+ fi
81
105
  - name: Run Coditsu
82
- run: \curl -sSL https://api.coditsu.io/run/ci | bash
106
+ run: ./coditsu_script.sh
data/.github/workflows/verify-action-pins.yml ADDED
@@ -0,0 +1,16 @@
1
+ name: Verify Action Pins
2
+ on:
3
+ pull_request:
4
+ paths:
5
+ - '.github/workflows/**'
6
+ jobs:
7
+ verify:
8
+ runs-on: ubuntu-latest
9
+ steps:
10
+ - uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2
11
+ - name: Check SHA pins
12
+ run: |
13
+ if grep -E -r "uses: .*/.*@(v[0-9]+|main|master)" .github/workflows/; then
14
+ echo "::error::Actions should use SHA pins, not tags or branch names"
15
+ exit 1
16
+ fi
data/CHANGELOG.md CHANGED
@@ -1,5 +1,8 @@
1
1
  # Karafka Core Changelog
2
2
 
3
+ ## 2.4.10 (2025-03-14)
4
+ - Relax lock on `karafka-rdkafka`
5
+
3
6
  ## 2.4.9 (2025-03-03)
4
7
  - [Enhancement] Remove `RspecLocator` dependency on `activesupport`.
5
8
 
data/Gemfile.lock CHANGED
@@ -1,8 +1,8 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- karafka-core (2.4.9)
5
- karafka-rdkafka (>= 0.17.6, < 0.19.0)
4
+ karafka-core (2.4.10)
5
+ karafka-rdkafka (>= 0.17.6, < 0.20.0)
6
6
  logger (>= 1.6.0)
7
7
 
8
8
  GEM
@@ -22,7 +22,7 @@ GEM
22
22
  ffi (1.17.1-x86_64-darwin)
23
23
  ffi (1.17.1-x86_64-linux-gnu)
24
24
  ffi (1.17.1-x86_64-linux-musl)
25
- karafka-rdkafka (0.18.1)
25
+ karafka-rdkafka (0.19.0)
26
26
  ffi (~> 1.15)
27
27
  mini_portile2 (~> 2.6)
28
28
  rake (> 12)
data/karafka-core.gemspec CHANGED
@@ -16,7 +16,7 @@ Gem::Specification.new do |spec|
16
16
  spec.description = 'A toolset of small support modules used throughout the Karafka ecosystem'
17
17
  spec.licenses = %w[MIT]
18
18
 
19
- spec.add_dependency 'karafka-rdkafka', '>= 0.17.6', '< 0.19.0'
19
+ spec.add_dependency 'karafka-rdkafka', '>= 0.17.6', '< 0.20.0'
20
20
  spec.add_dependency 'logger', '>= 1.6.0'
21
21
 
22
22
  spec.required_ruby_version = '>= 3.1.0'
data/lib/karafka/core/version.rb CHANGED
@@ -4,6 +4,6 @@ module Karafka
4
4
  module Core
5
5
  # Current Karafka::Core version
6
6
  # We follow the versioning schema of given Karafka version
7
- VERSION = '2.4.9'
7
+ VERSION = '2.4.10'
8
8
  end
9
9
  end
data/renovate.json CHANGED
@@ -2,5 +2,15 @@
2
2
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
3
3
  "extends": [
4
4
  "config:base"
5
+ ],
6
+ "github-actions": {
7
+ "enabled": true,
8
+ "pinDigests": true
9
+ },
10
+ "packageRules": [
11
+ {
12
+ "matchManagers": ["github-actions"],
13
+ "minimumReleaseAge": "7 days"
14
+ }
5
15
  ]
6
16
  }
data.tar.gz.sig CHANGED
Binary file
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: karafka-core
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.4.9
4
+ version: 2.4.10
5
5
  platform: ruby
6
6
  authors:
7
7
  - Maciej Mensfeld
@@ -34,7 +34,7 @@ cert_chain:
34
34
  i9zWxov0mr44TWegTVeypcWGd/0nxu1+QHVNHJrpqlPBRvwQsUm7fwmRInGpcaB8
35
35
  ap8wNYvryYzrzvzUxIVFBVM5PacgkFqRmolCa8I7tdKQN+R1
36
36
  -----END CERTIFICATE-----
37
- date: 2025-03-03 00:00:00.000000000 Z
37
+ date: 2025-03-14 00:00:00.000000000 Z
38
38
  dependencies:
39
39
  - !ruby/object:Gem::Dependency
40
40
  name: karafka-rdkafka
@@ -45,7 +45,7 @@ dependencies:
45
45
  version: 0.17.6
46
46
  - - "<"
47
47
  - !ruby/object:Gem::Version
48
- version: 0.19.0
48
+ version: 0.20.0
49
49
  type: :runtime
50
50
  prerelease: false
51
51
  version_requirements: !ruby/object:Gem::Requirement
@@ -55,7 +55,7 @@ dependencies:
55
55
  version: 0.17.6
56
56
  - - "<"
57
57
  - !ruby/object:Gem::Version
58
- version: 0.19.0
58
+ version: 0.20.0
59
59
  - !ruby/object:Gem::Dependency
60
60
  name: logger
61
61
  requirement: !ruby/object:Gem::Requirement
@@ -80,10 +80,12 @@ files:
80
80
  - ".coditsu/ci.yml"
81
81
  - ".console_irbrc"
82
82
  - ".diffend.yml"
83
+ - ".github/CODEOWNERS"
83
84
  - ".github/FUNDING.yml"
84
85
  - ".github/ISSUE_TEMPLATE/bug_report.md"
85
86
  - ".github/ISSUE_TEMPLATE/feature_request.md"
86
87
  - ".github/workflows/ci.yml"
88
+ - ".github/workflows/verify-action-pins.yml"
87
89
  - ".gitignore"
88
90
  - ".rspec"
89
91
  - ".ruby-gemset"
metadata.gz.sig CHANGED
Binary file