kettle-dev 1.1.30 → 1.1.31

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +0 -0
  3. data/CHANGELOG.md +15 -1
  4. data/README.md +3 -3
  5. data/README.md.example +1 -1
  6. data/Rakefile.example +1 -1
  7. data/lib/kettle/dev/release_cli.rb +9 -7
  8. data/lib/kettle/dev/version.rb +1 -1
  9. data.tar.gz.sig +0 -0
  10. metadata +4 -4
  11. metadata.gz.sig +1 -1
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 24950b17a0a1ee458861480335acd45429b027a17fd133f72d17f732b403f415
4
- data.tar.gz: e68596a5a5055a3858b59e0c8ae8ac92f5e5bdcd5bbd3387755762b736c02f88
3
+ metadata.gz: 94de7d823ad51d4a1b86c9b982c7d91b01af35e16d2f042682c1ba792774a066
4
+ data.tar.gz: f8e64e6615a0dd2ce0315cc56ee5095aa6c786e8767d7aefadbe90f2362054c5
5
5
  SHA512:
6
- metadata.gz: 796b0154e4776325371c10d084145fc0e7e137dfc5dd306e11f2f7f2cf15977521530d4ea8871ad68975096e55148df10714dfda6b15a54c1b47afa5dfa35849
7
- data.tar.gz: 251c64190d20d26286d36cfbfed62c4d9243b1bd2897feb0f3ba1c438f7bcba479db53370416695f6f04cd083934ab69b8f7576125aca0e0fe7cca7b0e95837b
6
+ metadata.gz: 964a6e1a5b82820272c9638039566609f3ef78a44800355db416b3cef0414a44985fc3720e34279e430322f70f6b188689b53008998cc5b0227185ad38e1969f
7
+ data.tar.gz: f4316fc97d2443957f63f9d19407ac97ba948a4f7702636d165cf507c8313dba5e043175cb443a2716ea6f60b6f2d1b6a2f96669d498c09499675c017435d69a
checksums.yaml.gz.sig CHANGED
Binary file
data/CHANGELOG.md CHANGED
@@ -30,6 +30,18 @@ Please file a bug if you notice a violation of semantic versioning.
30
30
 
31
31
  ### Security
32
32
 
33
+ ## [1.1.31] - 2025-09-21
34
+
35
+ - TAG: [v1.1.31][1.1.31t]
36
+ - COVERAGE: 96.39% -- 3929/4076 lines in 26 files
37
+ - BRANCH COVERAGE: 81.07% -- 1619/1997 branches in 26 files
38
+ - 79.12% documented
39
+
40
+ ### Fixed
41
+
42
+ - order of checksums and release / tag reversed
43
+ - remove all possibility of gem rebuild (part of reproducible builds) including checksums in the rebuilt gem
44
+
33
45
  ## [1.1.30] - 2025-09-21
34
46
 
35
47
  - TAG: [v1.1.30][1.1.30t]
@@ -1030,7 +1042,9 @@ Please file a bug if you notice a violation of semantic versioning.
1030
1042
  - Selecting will run the selected workflow via `act`
1031
1043
  - This may move to its own gem in the future.
1032
1044
 
1033
- [Unreleased]: https://github.com/kettle-rb/kettle-dev/compare/v1.1.30...HEAD
1045
+ [Unreleased]: https://github.com/kettle-rb/kettle-dev/compare/v1.1.31...HEAD
1046
+ [1.1.31]: https://github.com/kettle-rb/kettle-dev/compare/v1.1.30...v1.1.31
1047
+ [1.1.31t]: https://github.com/kettle-rb/kettle-dev/releases/tag/v1.1.31
1034
1048
  [1.1.30]: https://github.com/kettle-rb/kettle-dev/compare/v1.1.29...v1.1.30
1035
1049
  [1.1.30t]: https://github.com/kettle-rb/kettle-dev/releases/tag/v1.1.30
1036
1050
  [1.1.29]: https://github.com/kettle-rb/kettle-dev/compare/v1.1.28...v1.1.29
data/README.md CHANGED
@@ -442,8 +442,8 @@ What it does:
442
442
  - 12: Checkout trunk and pull latest
443
443
  - 13: Signing checks and guidance (abort when signing enabled but cert missing); respect SKIP_GEM_SIGNING
444
444
  - 14: Build gem (honors SKIP_GEM_SIGNING via env prefix)
445
- - 15: Generate and validate gem checksums (bin/gem_checksums)
446
- - 16: Release via `bundle exec rake release` and validate checksums again
445
+ - 15: Release via `bundle exec rake release` (also creates git tag)
446
+ - 16: Generate and validate gem checksums (bin/gem_checksums)
447
447
  - 17: Create GitHub release from CHANGELOG when GITHUB_TOKEN present
448
448
  - 18: Push git tags to remotes (to "all" remote only when present; otherwise to each remote)
449
449
  - Examples:
@@ -925,7 +925,7 @@ Thanks for RTFM. ☺️
925
925
  [📌gitmoji]:https://gitmoji.dev
926
926
  [📌gitmoji-img]:https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
927
927
  [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
928
- [🧮kloc-img]: https://img.shields.io/badge/KLOC-4.078-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
928
+ [🧮kloc-img]: https://img.shields.io/badge/KLOC-4.076-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
929
929
  [🔐security]: SECURITY.md
930
930
  [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
931
931
  [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year
data/README.md.example CHANGED
@@ -519,7 +519,7 @@ Thanks for RTFM. ☺️
519
519
  [📌gitmoji]:https://gitmoji.dev
520
520
  [📌gitmoji-img]:https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
521
521
  [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
522
- [🧮kloc-img]: https://img.shields.io/badge/KLOC-4.078-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
522
+ [🧮kloc-img]: https://img.shields.io/badge/KLOC-4.076-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
523
523
  [🔐security]: SECURITY.md
524
524
  [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
525
525
  [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year
data/Rakefile.example CHANGED
@@ -1,6 +1,6 @@
1
1
  # frozen_string_literal: true
2
2
 
3
- # kettle-dev Rakefile v1.1.30 - 2025-09-21
3
+ # kettle-dev Rakefile v1.1.31 - 2025-09-22
4
4
  # Ruby 2.3 (Safe Navigation) or higher required
5
5
  #
6
6
  # MIT License (see License.txt)
data/lib/kettle/dev/release_cli.rb CHANGED
@@ -260,17 +260,19 @@ module Kettle
260
260
  run_cmd!("bundle exec rake build")
261
261
  end
262
262
 
263
- # 15. checksums validate
263
+ # 15. release and tag
264
264
  if @start_step <= 15
265
- run_cmd!("bin/gem_checksums")
266
- version ||= detect_version
267
- validate_checksums!(version, stage: "after build + gem_checksums")
265
+ puts "Running release (you may be prompted for signing key password and RubyGems MFA OTP)..."
266
+ run_cmd!("bundle exec rake release")
268
267
  end
269
268
 
270
- # 16. release and validate
269
+ # 16. generate checksums
270
+ # Checksums are generated after release to avoid including checksums/ in gem package
271
+ # Rationale: Running gem_checksums before release may commit checksums/ and cause Bundler's
272
+ # release build to include them in the gem, altering the artifact.
271
273
  if @start_step <= 16
272
- puts "Running release (you may be prompted for signing key password and RubyGems MFA OTP)..."
273
- run_cmd!("bundle exec rake release")
274
+ # Generate checksums for the just-built artifact, then validate
275
+ run_cmd!("bin/gem_checksums")
274
276
  version ||= detect_version
275
277
  validate_checksums!(version, stage: "after release")
276
278
  end
data/lib/kettle/dev/version.rb CHANGED
@@ -6,7 +6,7 @@ module Kettle
6
6
  module Version
7
7
  # The gem version.
8
8
  # @return [String]
9
- VERSION = "1.1.30"
9
+ VERSION = "1.1.31"
10
10
 
11
11
  module_function
12
12
 
data.tar.gz.sig CHANGED
Binary file
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: kettle-dev
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.1.30
4
+ version: 1.1.31
5
5
  platform: ruby
6
6
  authors:
7
7
  - Peter H. Boling
@@ -404,10 +404,10 @@ licenses:
404
404
  - MIT
405
405
  metadata:
406
406
  homepage_uri: https://kettle-dev.galtzo.com/
407
- source_code_uri: https://github.com/kettle-rb/kettle-dev/tree/v1.1.30
408
- changelog_uri: https://github.com/kettle-rb/kettle-dev/blob/v1.1.30/CHANGELOG.md
407
+ source_code_uri: https://github.com/kettle-rb/kettle-dev/tree/v1.1.31
408
+ changelog_uri: https://github.com/kettle-rb/kettle-dev/blob/v1.1.31/CHANGELOG.md
409
409
  bug_tracker_uri: https://github.com/kettle-rb/kettle-dev/issues
410
- documentation_uri: https://www.rubydoc.info/gems/kettle-dev/1.1.30
410
+ documentation_uri: https://www.rubydoc.info/gems/kettle-dev/1.1.31
411
411
  funding_uri: https://github.com/sponsors/pboling
412
412
  wiki_uri: https://github.com/kettle-rb/kettle-dev/wiki
413
413
  news_uri: https://www.railsbling.com/tags/kettle-dev
metadata.gz.sig CHANGED
@@ -1 +1 @@
1
- %�0Y�˕�X���,��F�?���1x���5�����n۵��M���vѿ����N�J��h�0@|�!^�wR\i`�Ef��%�5�GA+��g�=�jO�of:*�"�fiK��WB�9^&��K�3'��bA9;�K�7��d��E� �m��i��TJֆdbm��"�/#�i�lT*Rm�8 -ּƩN4jh��-< j2��DP�� *T>Z��*f�����1�����H�+��1�v�A�aG+��������������;:���AJt�}��)y�~��� <7g3�(�6��o�XS���k���^�aK�+�_�á�5����������`�1L��q�ac�s��ŨJ>v�_��N���VA�F�x
1
+ ��S�3Y�!�pynq�Yll�v�Nb���i0