kettle-dev 2.2.21 → 2.2.22

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5c84739dfdebb3ae9c5c6fd438c7cc1db6e5707d9cecfe7a3e2e754e41390301
-  data.tar.gz: 9e1f2b9e2f3c842c218977027c6cf69c1a753072f2d281e39239dc3e7097e9ee
+  metadata.gz: e8c48d8192f541834457ce29c83b4169ac7476eb14273d6591608ff9292f8ce1
+  data.tar.gz: de8058fb6e66bd6f804cdf6bc48deded0e7b0b52ec80ece2de168777844b06ba
 SHA512:
-  metadata.gz: 287be3949983f25366e89ec2de3058bc63cf14dee7ff5b45a5da6a49a09d524493e91318788a370bb6ff92d4bed313771596368638f5026802850523be74f4df
-  data.tar.gz: 20bf852b21d4fa605b151e9ee4fe91b50921fa7320ded4ec937951e3cfcc4177ae653246448139ede0188d4741d70f0b5d1b7afce04ed042442d31cbbbb4f98b
+  metadata.gz: 51b8849553e75278f25fe2193aec2a7fe88e3a6f022e58a8effba2577e85fefc4fdc536a9f81ca7e6b2fa0748145054facf4a79395072f38c3b659c26224749d
+  data.tar.gz: 5190b2c20b7d947337f5405d0f605fdb91d305a62d8bc646d2ab8c99c24050e06e4e2707219083f76aaf261636d792ac6afc0eed47fda5ab0c2f6b5af321b497

data/CHANGELOG.md

@@ -30,6 +30,18 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [2.2.22] - 2026-06-28
+
+- TAG: [v2.2.22][2.2.22t]
+- COVERAGE: 92.01% -- 4171/4533 lines in 33 files
+- BRANCH COVERAGE: 73.08% -- 1653/2262 branches in 33 files
+- 61.04% documented
+
+### Fixed
+
+- `kettle-release` now passes the exact built gem artifact to `bin/gem_checksums`
+  so stale packages in `pkg/` cannot cause checksums for the wrong version.
+
 ## [2.2.21] - 2026-06-28
 
 - TAG: [v2.2.21][2.2.21t]
@@ -2334,7 +2346,9 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.2.21...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.2.22...HEAD
+[2.2.22]: https://github.com/kettle-dev/kettle-dev/compare/v2.2.21...v2.2.22
+[2.2.22t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.2.22
 [2.2.21]: https://github.com/kettle-dev/kettle-dev/compare/v2.2.20...v2.2.21
 [2.2.21t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.2.21
 [2.2.20]: https://github.com/kettle-dev/kettle-dev/compare/v2.2.19...v2.2.20

data/README.md

@@ -874,7 +874,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.529-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.533-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/release_cli.rb

@@ -344,8 +344,9 @@ module Kettle
         #    release build to include them in the gem, thus altering the artifact, and invalidating the checksums.
         if run_step?(16)
           # Generate checksums for the just-built artifact, commit them, then validate
-          run_cmd!("bin/gem_checksums")
           version ||= detect_version
+          gem_path = checksum_gem_path_for_version!(version)
+          run_cmd!("bin/gem_checksums #{Shellwords.escape(gem_path)}")
           validate_checksums!(version, stage: "after release")
         end
 
@@ -1159,10 +1160,7 @@ module Kettle
       end
 
       def validate_checksums!(version, stage: "")
-        gem_path = gem_file_for_version(version)
-        unless gem_path && File.file?(gem_path)
-          abort("Unable to locate built gem for version #{version} in pkg/. Did the build succeed?")
-        end
+        gem_path = checksum_gem_path_for_version!(version)
         actual = compute_sha256(gem_path)
         checks_path = File.join(@root, "checksums", "#{File.basename(gem_path)}.sha256")
         unless File.file?(checks_path)
@@ -1184,6 +1182,14 @@ module Kettle
         end
       end
 
+      def checksum_gem_path_for_version!(version)
+        gem_path = gem_file_for_version(version)
+        unless gem_path && File.file?(gem_path)
+          abort("Unable to locate built gem for version #{version} in pkg/. Did the build succeed?")
+        end
+        gem_path
+      end
+
       def gem_file_for_version(version)
         pkg = File.join(@root, "pkg")
         pattern = File.join(pkg, "*.gem")

data/lib/kettle/dev/version.rb

@@ -3,7 +3,7 @@
 module Kettle
   module Dev
     module Version
-      VERSION = "2.2.21"
+      VERSION = "2.2.22"
     end
     VERSION = Version::VERSION # Traditional Constant Location
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 2.2.21
+  version: 2.2.22
 platform: ruby
 authors:
 - Peter H. Boling
@@ -208,7 +208,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.3
+        version: 1.0.4
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -218,7 +218,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.3
+        version: 1.0.4
 - !ruby/object:Gem::Dependency
   name: gitmoji-regex
   requirement: !ruby/object:Gem::Requirement
@@ -359,10 +359,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.2.21
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.2.21/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.2.22
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.2.22/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.2.21
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.2.22
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev