kettle-dev 1.1.30 → 1.1.32

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (21) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +0 -0
  3. data/.tool-versions +1 -1
  4. data/Appraisal.root.gemfile +1 -1
  5. data/CHANGELOG.md +33 -1
  6. data/CONTRIBUTING.md +3 -3
  7. data/Gemfile +1 -1
  8. data/Gemfile.example +1 -1
  9. data/README.md +20 -6
  10. data/README.md.example +18 -4
  11. data/REEK +2 -0
  12. data/Rakefile.example +1 -1
  13. data/gemfiles/modular/erb/r2.3/default.gemfile +1 -1
  14. data/gemfiles/modular/injected.gemfile +2 -2
  15. data/gemfiles/modular/style.gemfile +1 -1
  16. data/kettle-dev.gemspec.example +2 -2
  17. data/lib/kettle/dev/release_cli.rb +9 -7
  18. data/lib/kettle/dev/version.rb +1 -1
  19. data.tar.gz.sig +0 -0
  20. metadata +4 -4
  21. metadata.gz.sig +0 -0
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 24950b17a0a1ee458861480335acd45429b027a17fd133f72d17f732b403f415
4
- data.tar.gz: e68596a5a5055a3858b59e0c8ae8ac92f5e5bdcd5bbd3387755762b736c02f88
3
+ metadata.gz: 3e219bd6c214eadd2dcef55a5244ac3bc32be8435234511c2a56f9416ba9d490
4
+ data.tar.gz: 7d0b98b23113a3bc0f3c954e6ed548f05c3b1996246de97d99bcf7bdff4ba041
5
5
  SHA512:
6
- metadata.gz: 796b0154e4776325371c10d084145fc0e7e137dfc5dd306e11f2f7f2cf15977521530d4ea8871ad68975096e55148df10714dfda6b15a54c1b47afa5dfa35849
7
- data.tar.gz: 251c64190d20d26286d36cfbfed62c4d9243b1bd2897feb0f3ba1c438f7bcba479db53370416695f6f04cd083934ab69b8f7576125aca0e0fe7cca7b0e95837b
6
+ metadata.gz: 236fd7f51409a50d33c328cc05c69a6120fd5eb0e977dde6e0d180da3ddc123963851c4fa743f50bc4375e0d3e3db4cc8c62dcafef9b8e7af30a5d0281e4dddd
7
+ data.tar.gz: 71d927da1c6e8fdf0208ad8e00caa7b4587145d591ed411a9cfdaa8b0b1dc1ee193805f725d21302463b5e1bb74fb7d34e61121084356bdbba026b6b643b066f
checksums.yaml.gz.sig CHANGED
Binary file
data/.tool-versions CHANGED
@@ -1 +1 @@
1
- ruby 3.4.5
1
+ ruby 3.4.6
data/Appraisal.root.gemfile CHANGED
@@ -2,7 +2,7 @@
2
2
 
3
3
  git_source(:github) { |repo_name| "https://github.com/#{repo_name}" }
4
4
 
5
- source "https://rubygems.org"
5
+ source "https://gem.coop"
6
6
 
7
7
  # Appraisal Root Gemfile is for running appraisal to generate the Appraisal Gemfiles
8
8
  # in gemfiles/*gemfile.
data/CHANGELOG.md CHANGED
@@ -30,6 +30,34 @@ Please file a bug if you notice a violation of semantic versioning.
30
30
 
31
31
  ### Security
32
32
 
33
+ ## [1.1.32] - 2025-10-07
34
+
35
+ - TAG: [v1.1.32][1.1.32t]
36
+ - COVERAGE: 96.39% -- 3929/4076 lines in 26 files
37
+ - BRANCH COVERAGE: 81.07% -- 1619/1997 branches in 26 files
38
+ - 79.12% documented
39
+
40
+ ### Added
41
+
42
+ - A top-level note on gem server switch in README.md & template
43
+
44
+ ### Changed
45
+
46
+ - Switch to cooperative gem server
47
+ - https://gem.coop
48
+
49
+ ## [1.1.31] - 2025-09-21
50
+
51
+ - TAG: [v1.1.31][1.1.31t]
52
+ - COVERAGE: 96.39% -- 3929/4076 lines in 26 files
53
+ - BRANCH COVERAGE: 81.07% -- 1619/1997 branches in 26 files
54
+ - 79.12% documented
55
+
56
+ ### Fixed
57
+
58
+ - order of checksums and release / tag reversed
59
+ - remove all possibility of gem rebuild (part of reproducible builds) including checksums in the rebuilt gem
60
+
33
61
  ## [1.1.30] - 2025-09-21
34
62
 
35
63
  - TAG: [v1.1.30][1.1.30t]
@@ -1030,7 +1058,11 @@ Please file a bug if you notice a violation of semantic versioning.
1030
1058
  - Selecting will run the selected workflow via `act`
1031
1059
  - This may move to its own gem in the future.
1032
1060
 
1033
- [Unreleased]: https://github.com/kettle-rb/kettle-dev/compare/v1.1.30...HEAD
1061
+ [Unreleased]: https://github.com/kettle-rb/kettle-dev/compare/v1.1.32...HEAD
1062
+ [1.1.32]: https://github.com/kettle-rb/kettle-dev/compare/v1.1.31...v1.1.32
1063
+ [1.1.32t]: https://github.com/kettle-rb/kettle-dev/releases/tag/v1.1.32
1064
+ [1.1.31]: https://github.com/kettle-rb/kettle-dev/compare/v1.1.30...v1.1.31
1065
+ [1.1.31t]: https://github.com/kettle-rb/kettle-dev/releases/tag/v1.1.31
1034
1066
  [1.1.30]: https://github.com/kettle-rb/kettle-dev/compare/v1.1.29...v1.1.30
1035
1067
  [1.1.30t]: https://github.com/kettle-rb/kettle-dev/releases/tag/v1.1.30
1036
1068
  [1.1.29]: https://github.com/kettle-rb/kettle-dev/compare/v1.1.28...v1.1.29
data/CONTRIBUTING.md CHANGED
@@ -167,7 +167,7 @@ Also see GitLab Contributors: [https://gitlab.com/kettle-rb/kettle-dev/-/graphs/
167
167
  **IMPORTANT**: To sign a build,
168
168
  a public key for signing gems will need to be picked up by the line in the
169
169
  `gemspec` defining the `spec.cert_chain` (check the relevant ENV variables there).
170
- All releases to RubyGems.org are signed releases.
170
+ All releases are signed releases.
171
171
  See: [RubyGems Security Guide][🔒️rubygems-security-guide]
172
172
 
173
173
  NOTE: To build without signing the gem set `SKIP_GEM_SIGNING` to any value in the environment.
@@ -205,7 +205,7 @@ NOTE: To build without signing the gem set `SKIP_GEM_SIGNING` to any value in th
205
205
  12. Sanity check the SHA256, comparing with the output from the `bin/gem_checksums` command:
206
206
  - `sha256sum pkg/<gem name>-<version>.gem`
207
207
  13. Run `bundle exec rake release` which will create a git tag for the version,
208
- push git commits and tags, and push the `.gem` file to [rubygems.org][💎rubygems]
208
+ push git commits and tags, and push the `.gem` file to the gem host configured in the gemspec.
209
209
 
210
210
  [📜src-gl]: https://gitlab.com/kettle-rb/kettle-dev/
211
211
  [📜src-cb]: https://codeberg.org/kettle-rb/kettle-dev
@@ -216,7 +216,7 @@ NOTE: To build without signing the gem set `SKIP_GEM_SIGNING` to any value in th
216
216
  [🖐contributors]: https://github.com/kettle-rb/kettle-dev/graphs/contributors
217
217
  [🚎contributors-gl]: https://gitlab.com/kettle-rb/kettle-dev/-/graphs/main
218
218
  [🖐contributors-img]: https://contrib.rocks/image?repo=kettle-rb/kettle-dev
219
- [💎rubygems]: https://rubygems.org
219
+ [💎gem-coop]: https://gem.coop
220
220
  [🔒️rubygems-security-guide]: https://guides.rubygems.org/security/#building-gems
221
221
  [🔒️rubygems-checksums-pr]: https://github.com/rubygems/rubygems/pull/6022
222
222
  [🔒️rubygems-guides-pr]: https://github.com/rubygems/guides/pull/325
data/Gemfile CHANGED
@@ -1,6 +1,6 @@
1
1
  # frozen_string_literal: true
2
2
 
3
- source "https://rubygems.org"
3
+ source "https://gem.coop"
4
4
 
5
5
  git_source(:github) { |repo_name| "https://github.com/#{repo_name}" }
6
6
  git_source(:gitlab) { |repo_name| "https://gitlab.com/#{repo_name}" }
data/Gemfile.example CHANGED
@@ -1,6 +1,6 @@
1
1
  # frozen_string_literal: true
2
2
 
3
- source "https://rubygems.org"
3
+ source "https://gem.coop"
4
4
 
5
5
  git_source(:github) { |repo_name| "https://github.com/#{repo_name}" }
6
6
  git_source(:gitlab) { |repo_name| "https://gitlab.com/#{repo_name}" }
data/README.md CHANGED
@@ -1,3 +1,17 @@
1
+ | 📍 NOTE |
2
+ |-------------------------------------------------------------------------------------------------------------------------------------------------------------|
3
+ | RubyGems.org was [recently compromised][draper-security] in a [hostile takeover][draper-takeover] about which [many lies][draper-lies] have been told. |
4
+ | I'm in the process of adding warnings to some important gems because I [don't condone the theft][draper-theft] of the bundler and rubygems-update projects. |
5
+ | Once publishing to [gem.coop][gem-coop] is available I will stop publishing to RubyGems.org. |
6
+ | Please see [here][gem-coop] and [here][martin-ann] for more info on what comes next. |
7
+
8
+ [draper-security]: https://joel.drapper.me/p/ruby-central-security-measures/
9
+ [draper-takeover]: https://joel.drapper.me/p/ruby-central-takeover/
10
+ [draper-lies]: https://joel.drapper.me/p/ruby-central-fact-check/
11
+ [draper-theft]: https://joel.drapper.me/p/ruby-central/
12
+ [gem-coop]: https://gem.coop
13
+ [martin-ann]: https://martinemde.com/2025/10/05/announcing-gem-coop.html
14
+
1
15
  [![Galtzo FLOSS Logo by Aboling0, CC BY-SA 4.0][🖼️galtzo-i]][🖼️galtzo-discord] [![ruby-lang Logo, Yukihiro Matsumoto, Ruby Visual Identity Team, CC BY-SA 2.5][🖼️ruby-lang-i]][🖼️ruby-lang] [![kettle-dev Logo by Aboling0, CC BY-SA 4.0][🖼️kettle-dev-i]][🖼️kettle-dev]
2
16
 
3
17
  [🖼️galtzo-i]: https://logos.galtzo.com/assets/images/galtzo-floss/avatar-192px.svg
@@ -442,8 +456,8 @@ What it does:
442
456
  - 12: Checkout trunk and pull latest
443
457
  - 13: Signing checks and guidance (abort when signing enabled but cert missing); respect SKIP_GEM_SIGNING
444
458
  - 14: Build gem (honors SKIP_GEM_SIGNING via env prefix)
445
- - 15: Generate and validate gem checksums (bin/gem_checksums)
446
- - 16: Release via `bundle exec rake release` and validate checksums again
459
+ - 15: Release via `bundle exec rake release` (also creates git tag)
460
+ - 16: Generate and validate gem checksums (bin/gem_checksums)
447
461
  - 17: Create GitHub release from CHANGELOG when GITHUB_TOKEN present
448
462
  - 18: Push git tags to remotes (to "all" remote only when present; otherwise to each remote)
449
463
  - Examples:
@@ -782,7 +796,7 @@ Thanks for RTFM. ☺️
782
796
  [✇bundle-group-pattern]: https://gist.github.com/pboling/4564780
783
797
  [⛳️gem-namespace]: https://github.com/kettle-rb/kettle-dev
784
798
  [⛳️namespace-img]: https://img.shields.io/badge/namespace-Kettle::Dev-3C2D2D.svg?style=square&logo=ruby&logoColor=white
785
- [⛳️gem-name]: https://rubygems.org/gems/kettle-dev
799
+ [⛳️gem-name]: https://bestgems.org/gems/kettle-dev
786
800
  [⛳️name-img]: https://img.shields.io/badge/name-kettle--dev-3C2D2D.svg?style=square&logo=rubygems&logoColor=red
787
801
  [⛳️tag-img]: https://img.shields.io/github/tag/kettle-rb/kettle-dev.svg
788
802
  [⛳️tag]: http://github.com/kettle-rb/kettle-dev/releases
@@ -831,11 +845,11 @@ Thanks for RTFM. ☺️
831
845
  [📜gh-wiki]: https://github.com/kettle-rb/kettle-dev/wiki
832
846
  [📜gl-wiki-img]: https://img.shields.io/badge/wiki-examples-943CD2.svg?style=for-the-badge&logo=gitlab&logoColor=white
833
847
  [📜gh-wiki-img]: https://img.shields.io/badge/wiki-examples-943CD2.svg?style=for-the-badge&logo=github&logoColor=white
834
- [👽dl-rank]: https://rubygems.org/gems/kettle-dev
848
+ [👽dl-rank]: https://bestgems.org/gems/kettle-dev
835
849
  [👽dl-ranki]: https://img.shields.io/gem/rd/kettle-dev.svg
836
850
  [👽oss-help]: https://www.codetriage.com/kettle-rb/kettle-dev
837
851
  [👽oss-helpi]: https://www.codetriage.com/kettle-rb/kettle-dev/badges/users.svg
838
- [👽version]: https://rubygems.org/gems/kettle-dev
852
+ [👽version]: https://bestgems.org/gems/kettle-dev
839
853
  [👽versioni]: https://img.shields.io/gem/v/kettle-dev.svg
840
854
  [🏀qlty-mnt]: https://qlty.sh/gh/kettle-rb/projects/kettle-dev
841
855
  [🏀qlty-mnti]: https://qlty.sh/gh/kettle-rb/projects/kettle-dev/maintainability.svg
@@ -925,7 +939,7 @@ Thanks for RTFM. ☺️
925
939
  [📌gitmoji]:https://gitmoji.dev
926
940
  [📌gitmoji-img]:https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
927
941
  [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
928
- [🧮kloc-img]: https://img.shields.io/badge/KLOC-4.078-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
942
+ [🧮kloc-img]: https://img.shields.io/badge/KLOC-4.076-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
929
943
  [🔐security]: SECURITY.md
930
944
  [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
931
945
  [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year
data/README.md.example CHANGED
@@ -1,3 +1,17 @@
1
+ | 📍 NOTE |
2
+ |-------------------------------------------------------------------------------------------------------------------------------------------------------------|
3
+ | RubyGems.org was [recently compromised][draper-security] in a [hostile takeover][draper-takeover] about which [many lies][draper-lies] have been told. |
4
+ | I'm in the process of adding warnings to some important gems because I [don't condone the theft][draper-theft] of the bundler and rubygems-update projects. |
5
+ | Once publishing to [gem.coop][gem-coop] is available I will stop publishing to RubyGems.org. |
6
+ | Please see [here][gem-coop] and [here][martin-ann] for more info on what comes next. |
7
+
8
+ [draper-security]: https://joel.drapper.me/p/ruby-central-security-measures/
9
+ [draper-takeover]: https://joel.drapper.me/p/ruby-central-takeover/
10
+ [draper-lies]: https://joel.drapper.me/p/ruby-central-fact-check/
11
+ [draper-theft]: https://joel.drapper.me/p/ruby-central/
12
+ [gem-coop]: https://gem.coop
13
+ [martin-ann]: https://martinemde.com/2025/10/05/announcing-gem-coop.html
14
+
1
15
  [![Galtzo FLOSS Logo by Aboling0, CC BY-SA 4.0][🖼️galtzo-i]][🖼️galtzo-discord] [![ruby-lang Logo, Yukihiro Matsumoto, Ruby Visual Identity Team, CC BY-SA 2.5][🖼️ruby-lang-i]][🖼️ruby-lang] [![kettle-dev Logo by Aboling0, CC BY-SA 4.0][🖼️kettle-dev-i]][🖼️kettle-dev]
2
16
 
3
17
  [🖼️galtzo-i]: https://logos.galtzo.com/assets/images/galtzo-floss/avatar-192px.svg
@@ -371,7 +385,7 @@ Thanks for RTFM. ☺️
371
385
  [✇bundle-group-pattern]: https://gist.github.com/pboling/4564780
372
386
  [⛳️gem-namespace]: https://github.com/kettle-rb/kettle-dev
373
387
  [⛳️namespace-img]: https://img.shields.io/badge/namespace-Kettle::Dev-3C2D2D.svg?style=square&logo=ruby&logoColor=white
374
- [⛳️gem-name]: https://rubygems.org/gems/kettle-dev
388
+ [⛳️gem-name]: https://bestgems.org/gems/kettle-dev
375
389
  [⛳️name-img]: https://img.shields.io/badge/name-kettle--dev-3C2D2D.svg?style=square&logo=rubygems&logoColor=red
376
390
  [⛳️tag-img]: https://img.shields.io/github/tag/kettle-rb/kettle-dev.svg
377
391
  [⛳️tag]: http://github.com/kettle-rb/kettle-dev/releases
@@ -420,11 +434,11 @@ Thanks for RTFM. ☺️
420
434
  [📜gh-wiki]: https://github.com/kettle-rb/kettle-dev/wiki
421
435
  [📜gl-wiki-img]: https://img.shields.io/badge/wiki-examples-943CD2.svg?style=for-the-badge&logo=gitlab&logoColor=white
422
436
  [📜gh-wiki-img]: https://img.shields.io/badge/wiki-examples-943CD2.svg?style=for-the-badge&logo=github&logoColor=white
423
- [👽dl-rank]: https://rubygems.org/gems/kettle-dev
437
+ [👽dl-rank]: https://bestgems.org/gems/kettle-dev
424
438
  [👽dl-ranki]: https://img.shields.io/gem/rd/kettle-dev.svg
425
439
  [👽oss-help]: https://www.codetriage.com/kettle-rb/kettle-dev
426
440
  [👽oss-helpi]: https://www.codetriage.com/kettle-rb/kettle-dev/badges/users.svg
427
- [👽version]: https://rubygems.org/gems/kettle-dev
441
+ [👽version]: https://bestgems.org/gems/kettle-dev
428
442
  [👽versioni]: https://img.shields.io/gem/v/kettle-dev.svg
429
443
  [🏀qlty-mnt]: https://qlty.sh/gh/kettle-rb/projects/kettle-dev
430
444
  [🏀qlty-mnti]: https://qlty.sh/gh/kettle-rb/projects/kettle-dev/maintainability.svg
@@ -519,7 +533,7 @@ Thanks for RTFM. ☺️
519
533
  [📌gitmoji]:https://gitmoji.dev
520
534
  [📌gitmoji-img]:https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
521
535
  [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
522
- [🧮kloc-img]: https://img.shields.io/badge/KLOC-4.078-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
536
+ [🧮kloc-img]: https://img.shields.io/badge/KLOC-4.076-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
523
537
  [🔐security]: SECURITY.md
524
538
  [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
525
539
  [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year
data/REEK CHANGED
@@ -0,0 +1,2 @@
1
+ Bundler is using a binstub that was created for a different gem (reek).
2
+ You should run `bundle binstub flag_shih_tzu` to work around a system/bundle conflict.
data/Rakefile.example CHANGED
@@ -1,6 +1,6 @@
1
1
  # frozen_string_literal: true
2
2
 
3
- # kettle-dev Rakefile v1.1.30 - 2025-09-21
3
+ # kettle-dev Rakefile v1.1.32 - 2025-10-07
4
4
  # Ruby 2.3 (Safe Navigation) or higher required
5
5
  #
6
6
  # MIT License (see License.txt)
data/gemfiles/modular/erb/r2.3/default.gemfile CHANGED
@@ -1,5 +1,5 @@
1
1
  # The cake is a lie.
2
- # erb v2.2, the oldest release on RubyGems.org, was never compatible with Ruby 2.3.
2
+ # erb v2.2, the oldest release, was never compatible with Ruby 2.3.
3
3
  # In addition, erb does not follow SemVer, and old rubies get dropped in a patch.
4
4
  # This means we have no choice but to use the erb that shipped with Ruby 2.3
5
5
  # /opt/hostedtoolcache/Ruby/2.3.8/x64/lib/ruby/gems/2.3.0/gems/erb-2.2.2/lib/erb.rb:670:in `prepare_trim_mode': undefined method `match?' for "-":String (NoMethodError)
data/gemfiles/modular/injected.gemfile CHANGED
@@ -1,5 +1,5 @@
1
1
  # NOTE: It is preferable to list development dependencies in the gemspec due to increased
2
- # visibility and discoverability on RubyGems.org.
2
+ # visibility and discoverability on the gem server.
3
3
  # However, this gem sits underneath all my other gems, and also "depends on" many of them.
4
4
  # So instead of depending on them directly it injects them into the other gem's gemspec on install.
5
5
  # This gem, and its injected dev dependencies, will install on Ruby down to 2.3.x.
@@ -38,7 +38,7 @@ gem "stone_checksums", "~> 1.0", ">= 1.0.2" # ruby >= 2.2.0
38
38
  # Development tasks
39
39
  gem "gitmoji-regex", "~> 1.0", ">= 1.0.3" # ruby >= 2.3.0
40
40
 
41
- # The cake is a lie. erb v2.2, the oldest release on RubyGems.org, was never compatible with Ruby 2.3.
41
+ # The cake is a lie. erb v2.2, the oldest release, was never compatible with Ruby 2.3.
42
42
  # This means we have no choice but to use the erb that shipped with Ruby 2.3
43
43
  # /opt/hostedtoolcache/Ruby/2.3.8/x64/lib/ruby/gems/2.3.0/gems/erb-2.2.2/lib/erb.rb:670:in `prepare_trim_mode': undefined method `match?' for "-":String (NoMethodError)
44
44
  # gem "erb", ">= 2.2" # ruby >= 2.3.0, not SemVer, old rubies get dropped in a patch.
data/gemfiles/modular/style.gemfile CHANGED
@@ -4,7 +4,7 @@
4
4
  # but in support of the oldest supported version of Ruby
5
5
 
6
6
  gem "reek", "~> 6.5"
7
- # gem "rubocop", "~> 1.73", ">= 1.73.2" # constrained by standard
7
+ # gem "rubocop", "~> 1.80", ">= 1.80.2" # constrained by standard
8
8
  gem "rubocop-packaging", "~> 0.6", ">= 0.6.0"
9
9
  gem "standard", ">= 1.50"
10
10
  gem "rubocop-on-rbs", "~> 1.8" # ruby >= 3.1.0
data/kettle-dev.gemspec.example CHANGED
@@ -102,7 +102,7 @@ Gem::Specification.new do |spec|
102
102
  spec.add_dependency("version_gem", "~> 1.1", ">= 1.1.9") # ruby >= 2.2.0
103
103
 
104
104
  # NOTE: It is preferable to list development dependencies in the gemspec due to increased
105
- # visibility and discoverability on RubyGems.org.
105
+ # visibility and discoverability.
106
106
  # However, development dependencies in gemspec will install on
107
107
  # all versions of Ruby that will run in CI.
108
108
  # This gem, and its gemspec runtime dependencies, will install on Ruby down to {K_D_MIN_RUBY}.
@@ -141,7 +141,7 @@ Gem::Specification.new do |spec|
141
141
  # spec.add_dependency("git", ">= 1.19.1") # ruby >= 2.3
142
142
 
143
143
  # Development tasks
144
- # The cake is a lie. erb v2.2, the oldest release on RubyGems.org, was never compatible with Ruby 2.3.
144
+ # The cake is a lie. erb v2.2, the oldest release, was never compatible with Ruby 2.3.
145
145
  # This means we have no choice but to use the erb that shipped with Ruby 2.3
146
146
  # /opt/hostedtoolcache/Ruby/2.3.8/x64/lib/ruby/gems/2.3.0/gems/erb-2.2.2/lib/erb.rb:670:in `prepare_trim_mode': undefined method `match?' for "-":String (NoMethodError)
147
147
  # spec.add_development_dependency("erb", ">= 2.2") # ruby >= 2.3.0, not SemVer, old rubies get dropped in a patch.
data/lib/kettle/dev/release_cli.rb CHANGED
@@ -260,17 +260,19 @@ module Kettle
260
260
  run_cmd!("bundle exec rake build")
261
261
  end
262
262
 
263
- # 15. checksums validate
263
+ # 15. release and tag
264
264
  if @start_step <= 15
265
- run_cmd!("bin/gem_checksums")
266
- version ||= detect_version
267
- validate_checksums!(version, stage: "after build + gem_checksums")
265
+ puts "Running release (you may be prompted for signing key password and RubyGems MFA OTP)..."
266
+ run_cmd!("bundle exec rake release")
268
267
  end
269
268
 
270
- # 16. release and validate
269
+ # 16. generate checksums
270
+ # Checksums are generated after release to avoid including checksums/ in gem package
271
+ # Rationale: Running gem_checksums before release may commit checksums/ and cause Bundler's
272
+ # release build to include them in the gem, altering the artifact.
271
273
  if @start_step <= 16
272
- puts "Running release (you may be prompted for signing key password and RubyGems MFA OTP)..."
273
- run_cmd!("bundle exec rake release")
274
+ # Generate checksums for the just-built artifact, then validate
275
+ run_cmd!("bin/gem_checksums")
274
276
  version ||= detect_version
275
277
  validate_checksums!(version, stage: "after release")
276
278
  end
data/lib/kettle/dev/version.rb CHANGED
@@ -6,7 +6,7 @@ module Kettle
6
6
  module Version
7
7
  # The gem version.
8
8
  # @return [String]
9
- VERSION = "1.1.30"
9
+ VERSION = "1.1.32"
10
10
 
11
11
  module_function
12
12
 
data.tar.gz.sig CHANGED
Binary file
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: kettle-dev
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.1.30
4
+ version: 1.1.32
5
5
  platform: ruby
6
6
  authors:
7
7
  - Peter H. Boling
@@ -404,10 +404,10 @@ licenses:
404
404
  - MIT
405
405
  metadata:
406
406
  homepage_uri: https://kettle-dev.galtzo.com/
407
- source_code_uri: https://github.com/kettle-rb/kettle-dev/tree/v1.1.30
408
- changelog_uri: https://github.com/kettle-rb/kettle-dev/blob/v1.1.30/CHANGELOG.md
407
+ source_code_uri: https://github.com/kettle-rb/kettle-dev/tree/v1.1.32
408
+ changelog_uri: https://github.com/kettle-rb/kettle-dev/blob/v1.1.32/CHANGELOG.md
409
409
  bug_tracker_uri: https://github.com/kettle-rb/kettle-dev/issues
410
- documentation_uri: https://www.rubydoc.info/gems/kettle-dev/1.1.30
410
+ documentation_uri: https://www.rubydoc.info/gems/kettle-dev/1.1.32
411
411
  funding_uri: https://github.com/sponsors/pboling
412
412
  wiki_uri: https://github.com/kettle-rb/kettle-dev/wiki
413
413
  news_uri: https://www.railsbling.com/tags/kettle-dev
metadata.gz.sig CHANGED
Binary file