kettle-dev 2.3.11 → 2.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e30ac2b82038eea94426435c99852b725d70fab0838aeaf8ab43728305a11bb2
-  data.tar.gz: 02e8ab6c76c1d443fa5f00c184d452fd6d2b4bfc44bd425a572e948ce76b9d0d
+  metadata.gz: 77a7621fa0d906b716e933205ff585081b8746345530f540a8c83f6e67d3f347
+  data.tar.gz: ae54a1e1f33347caa8c6d07eae632db0b88c95583a838fece942bd9bb1d84bfb
 SHA512:
-  metadata.gz: bfebbbb3262abd7998ab3ec508b2235ce6df8c560839a8d4e63acfbe19534ccf975bed2d0f4afe32dd72bd910d5f0a795802b43f47d4442b63801555c6f7ec15
-  data.tar.gz: 11e0ea51634549b3d1676926ea6e5abb2c5bc363de47f6e8b6c811f69e88e17253bebbaaa6f4ba5dfbfc1a527e3e61f6950db686990e0c8b90b0c5ade5c20158
+  metadata.gz: 03b528fd8d85c047d18606f023a0f9f217ca88556ed26ddbc62504a282bceda6a42ea315c0cd0fdd0e2e4307fefeda357d34fcf4fab98d83dc5214c9d202bbb2
+  data.tar.gz: d630c32d5f8cfbb28b74cdc552a9d331aa73d25de2d80298736f759f2bfe3181649c845a1d812c5ead41f9792a3169091f07ae33a2afb1610028b191effb08e7

data/CHANGELOG.md

@@ -30,6 +30,40 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [2.4.1] - 2026-07-24
+
+- TAG: [v2.4.1][2.4.1t]
+- COVERAGE: 92.29% -- 3928/4256 lines in 38 files
+- BRANCH COVERAGE: 76.09% -- 1550/2037 branches in 38 files
+- 58.66% documented
+
+### Fixed
+
+- `kettle-release` now normalizes and revalidates release lockfiles after
+  mutating setup/appraisal/doc steps, before committing or pushing, so local
+  path remotes and locally installed registry gems with empty lockfile
+  checksums cannot leak into CI.
+
+## [2.4.0] - 2026-07-23
+
+- TAG: [v2.4.0][2.4.0t]
+- COVERAGE: 92.49% -- 3830/4141 lines in 38 files
+- BRANCH COVERAGE: 76.22% -- 1516/1989 branches in 38 files
+- 58.66% documented
+
+### Added
+
+- Packaged executables now answer `-v` and bare `--version` with the
+  `kettle-dev` gem version they shipped with.
+
+### Changed
+
+- Raised the runtime dependency floor for `kettle-gha-pins` to `0.3.1`.
+- Packaged executables now share a consistent startup header on normal
+  execution paths.
+- Markdown image URL cache/live/skipped progress now uses the same multi-line
+  `tty-progressbar` output as GitHub Actions pin checks.
+
 ## [2.3.11] - 2026-07-23
 
 - TAG: [v2.3.11][2.3.11t]
@@ -2626,7 +2660,11 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.11...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.4.1...HEAD
+[2.4.1]: https://github.com/kettle-dev/kettle-dev/compare/v2.4.0...v2.4.1
+[2.4.1t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.4.1
+[2.4.0]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.11...v2.4.0
+[2.4.0t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.4.0
 [2.3.11]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.10...v2.3.11
 [2.3.11t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.3.11
 [2.3.10]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.9...v2.3.10

data/README.md

@@ -891,7 +891,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.113-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.256-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/exe/kettle-bump

@@ -15,10 +15,14 @@ rescue LoadError
 end
 
 script_basename = File.basename(__FILE__)
+repo_lib = File.expand_path("../lib", __dir__)
+$LOAD_PATH.unshift(repo_lib) if File.directory?(repo_lib) && !$LOAD_PATH.include?(repo_lib)
 
 begin
   require "kettle/dev"
-  puts "== #{script_basename} v#{Kettle::Dev::Version::VERSION} =="
+  require "kettle/dev/executable_version"
+  Kettle::Dev::ExecutableVersion.print_and_exit!(script_basename, ARGV)
+  Kettle::Dev::ExecutableVersion.print_header(script_basename)
 rescue LoadError => e
   warn("#{script_basename}: could not load dependency: #{e.class}: #{e.message}")
   warn("Hint: Ensure the host project has kettle-dev as a dependency and run bundle install.")

data/exe/kettle-changelog

@@ -36,6 +36,8 @@ rescue LoadError
 end
 
 script_basename = File.basename(__FILE__)
+repo_lib = File.expand_path("../lib", __dir__)
+$LOAD_PATH.unshift(repo_lib) if File.directory?(repo_lib) && !$LOAD_PATH.include?(repo_lib)
 
 begin
   # Standard library
@@ -46,7 +48,9 @@ begin
 
   # This library
   require "kettle/dev"
-  puts "== #{script_basename} v#{Kettle::Dev::Version::VERSION} ==" unless ARGV.include?("--json")
+  require "kettle/dev/executable_version"
+  Kettle::Dev::ExecutableVersion.print_and_exit!(script_basename, ARGV, value_option: true)
+  Kettle::Dev::ExecutableVersion.print_header(script_basename) unless ARGV.include?("--json")
 rescue LoadError => e
   warn("#{script_basename}: could not load dependency: #{e.class}: #{e.message}")
   warn("Hint: Ensure the host project has kettle-dev as a dependency and run bundle install.")

data/exe/kettle-check-eof

@@ -1,6 +1,18 @@
 #!/usr/bin/env ruby
 # frozen_string_literal: true
 
+$stdout.sync = true
+$stderr.sync = true
+
+repo_lib = File.expand_path("../lib", __dir__)
+$LOAD_PATH.unshift(repo_lib) if File.directory?(repo_lib) && !$LOAD_PATH.include?(repo_lib)
+
+require "kettle/dev/executable_version"
+
+script_basename = File.basename(__FILE__)
+Kettle::Dev::ExecutableVersion.print_and_exit!(script_basename, ARGV)
+Kettle::Dev::ExecutableVersion.print_header(script_basename)
+
 bin_dir = File.expand_path(__dir__)
 bash_script = File.join(bin_dir, "kettle-check-eof.sh")
 

data/exe/kettle-commit-msg

@@ -16,6 +16,8 @@ rescue LoadError
 end
 
 script_basename = File.basename(__FILE__)
+repo_lib = File.expand_path("../lib", __dir__)
+$LOAD_PATH.unshift(repo_lib) if File.directory?(repo_lib) && !$LOAD_PATH.include?(repo_lib)
 
 begin
   # Standard library
@@ -25,11 +27,12 @@ begin
     require "kettle/dev"
   rescue LoadError
     # Fallback: allow running from a checkout without bundler by adding ./lib to the load path
-    repo_lib = File.expand_path("../lib", __dir__)
     $LOAD_PATH.unshift(repo_lib) unless $LOAD_PATH.include?(repo_lib)
     require "kettle/dev"
   end
-  puts "== #{script_basename} v#{Kettle::Dev::Version::VERSION} =="
+  require "kettle/dev/executable_version"
+  Kettle::Dev::ExecutableVersion.print_and_exit!(script_basename, ARGV)
+  Kettle::Dev::ExecutableVersion.print_header(script_basename)
 rescue LoadError => e
   warn("#{script_basename}: could not load dependency: #{e.class}: #{e.message}")
   warn("Hint: Install the kettle-dev gem (`gem install kettle-dev`) or add it to your Gemfile. Bundler is not required for this script.")

data/exe/kettle-dev-setup

@@ -6,6 +6,15 @@
 # kettle-dev-setup has been replaced by kettle-jem setup.
 # All setup and templating functionality has moved to the kettle-jem gem.
 
+repo_lib = File.expand_path("../lib", __dir__)
+$LOAD_PATH.unshift(repo_lib) if File.directory?(repo_lib) && !$LOAD_PATH.include?(repo_lib)
+
+require "kettle/dev/executable_version"
+
+script_basename = File.basename(__FILE__)
+Kettle::Dev::ExecutableVersion.print_and_exit!(script_basename, ARGV)
+Kettle::Dev::ExecutableVersion.print_header(script_basename)
+
 warn <<~MSG
   kettle-dev-setup has been removed.
   Setup and templating functionality has moved to the kettle-jem gem.

data/exe/kettle-dvcs

@@ -20,10 +20,14 @@ rescue LoadError
 end
 
 script_basename = File.basename(__FILE__)
+repo_lib = File.expand_path("../lib", __dir__)
+$LOAD_PATH.unshift(repo_lib) if File.directory?(repo_lib) && !$LOAD_PATH.include?(repo_lib)
 
 begin
   require "kettle/dev"
-  puts "== #{script_basename} v#{Kettle::Dev::Version::VERSION} =="
+  require "kettle/dev/executable_version"
+  Kettle::Dev::ExecutableVersion.print_and_exit!(script_basename, ARGV)
+  Kettle::Dev::ExecutableVersion.print_header(script_basename)
 rescue LoadError => e
   warn("#{script_basename}: could not load dependency: #{e.class}: #{e.message}")
   warn("Hint: Ensure the host project has kettle-dev as a dependency and run bundle install.")

data/exe/kettle-gh-release

@@ -21,10 +21,14 @@ rescue LoadError
 end
 
 script_basename = File.basename(__FILE__)
+repo_lib = File.expand_path("../lib", __dir__)
+$LOAD_PATH.unshift(repo_lib) if File.directory?(repo_lib) && !$LOAD_PATH.include?(repo_lib)
 
 begin
   require "kettle/dev"
-  puts "== #{script_basename} v#{Kettle::Dev::Version::VERSION} =="
+  require "kettle/dev/executable_version"
+  Kettle::Dev::ExecutableVersion.print_and_exit!(script_basename, ARGV)
+  Kettle::Dev::ExecutableVersion.print_header(script_basename)
 rescue LoadError => e
   warn("#{script_basename}: could not load dependency: #{e.class}: #{e.message}")
   warn("Hint: Ensure the host project has kettle-dev as a dependency and run bundle install.")

data/exe/kettle-gha-sha-pins

@@ -3,9 +3,18 @@
 
 # vim: set syntax=ruby
 
+$stdout.sync = true
+$stderr.sync = true
+
 script_basename = File.basename(__FILE__)
+repo_lib = File.expand_path("../lib", __dir__)
+$LOAD_PATH.unshift(repo_lib) if File.directory?(repo_lib) && !$LOAD_PATH.include?(repo_lib)
 
 begin
+  require "kettle/dev/executable_version"
+  Kettle::Dev::ExecutableVersion.print_and_exit!(script_basename, ARGV)
+  Kettle::Dev::ExecutableVersion.print_header(script_basename)
+
   Kernel.exec(Gem.ruby, Gem.bin_path("kettle-gha-pins", "kettle-gha-pins"), *ARGV)
 rescue Gem::Exception, LoadError => e
   warn("#{script_basename}: could not load kettle-gha-pins executable: #{e.class}: #{e.message}")

data/exe/kettle-pre-release

@@ -23,10 +23,14 @@ rescue LoadError
 end
 
 script_basename = File.basename(__FILE__)
+repo_lib = File.expand_path("../lib", __dir__)
+$LOAD_PATH.unshift(repo_lib) if File.directory?(repo_lib) && !$LOAD_PATH.include?(repo_lib)
 
 begin
   require "kettle/dev"
-  puts "== #{script_basename} v#{Kettle::Dev::Version::VERSION} =="
+  require "kettle/dev/executable_version"
+  Kettle::Dev::ExecutableVersion.print_and_exit!(script_basename, ARGV)
+  Kettle::Dev::ExecutableVersion.print_header(script_basename)
 rescue => e
   warn("#{script_basename}: could not load dependency: #{e.class}: #{e.message}")
   warn("Hint: Ensure the host project has kettle-dev as a dependency and run bundle install.")

data/exe/kettle-readme-backers

@@ -14,10 +14,14 @@ rescue LoadError
 end
 
 script_basename = File.basename(__FILE__)
+repo_lib = File.expand_path("../lib", __dir__)
+$LOAD_PATH.unshift(repo_lib) if File.directory?(repo_lib) && !$LOAD_PATH.include?(repo_lib)
 
 begin
   require "kettle/dev"
-  puts "== #{script_basename} v#{Kettle::Dev::Version::VERSION} =="
+  require "kettle/dev/executable_version"
+  Kettle::Dev::ExecutableVersion.print_and_exit!(script_basename, ARGV)
+  Kettle::Dev::ExecutableVersion.print_header(script_basename)
 rescue LoadError => e
   warn("kettle/dev: failed to load: #{e.message}")
   warn("Hint: Ensure the host project has kettle-dev as a dependency and run bundle install.")

data/exe/kettle-release

@@ -29,10 +29,14 @@ rescue LoadError
 end
 
 script_basename = File.basename(__FILE__)
+repo_lib = File.expand_path("../lib", __dir__)
+$LOAD_PATH.unshift(repo_lib) if File.directory?(repo_lib) && !$LOAD_PATH.include?(repo_lib)
 
 begin
   require "kettle/dev"
-  puts "== #{script_basename} v#{Kettle::Dev::Version::VERSION} =="
+  require "kettle/dev/executable_version"
+  Kettle::Dev::ExecutableVersion.print_and_exit!(script_basename, ARGV, value_option: true)
+  Kettle::Dev::ExecutableVersion.print_header(script_basename)
 rescue LoadError => e
   warn("#{script_basename}: could not load dependency: #{e.class}: #{e.message}")
   warn("Hint: Ensure the host project has kettle-dev as a dependency and run bundle install.")

data/lib/kettle/dev/cache_progress.rb

@@ -1,47 +1,60 @@
 # frozen_string_literal: true
 
-require "ruby-progressbar"
+require "tty-progressbar"
 
 module Kettle
   module Dev
     class CacheProgress
-      FORMAT = "%t %b %c/%C"
-      LENGTH = 30
+      FORMAT = "%<title>s [:bar] :current/:total"
+      WIDTH = 30
 
       def initialize(total:, cached_title:, live_title:, output:, enabled: true, skipped_title: nil)
         @total = total.to_i
         @cached_count = 0
         @live_count = 0
         @skipped_count = 0
-        @cached_bar = progress_bar(cached_title, output, enabled)
-        @live_bar = progress_bar(live_title, output, enabled)
-        @skipped_bar = skipped_title ? progress_bar(skipped_title, output, enabled) : nil
+        @multibar = progress_enabled?(enabled, output) ? TTY::ProgressBar::Multi.new(output: output, width: WIDTH) : nil
+        @cached_bar = progress_bar(cached_title)
+        @live_bar = progress_bar(live_title)
+        @skipped_bar = skipped_title ? progress_bar(skipped_title) : nil
       end
 
       attr_reader :cached_count, :live_count, :skipped_count
 
       def cached
         @cached_count += 1
-        @cached_bar&.increment
+        @cached_bar&.advance
       end
 
       def live
         @live_count += 1
-        @live_bar&.increment
+        @live_bar&.advance
       end
 
       def skipped
         @skipped_count += 1
-        @skipped_bar&.increment
+        @skipped_bar&.advance
+      end
+
+      def stop
+        @multibar&.stop
       end
 
       private
 
-      def progress_bar(title, output, enabled)
-        return unless enabled
+      def progress_enabled?(enabled, output)
+        enabled && @total.positive? && output.respond_to?(:tty?) && output.tty?
+      end
+
+      def progress_bar(title)
+        return unless @multibar
         return unless @total.positive?
 
-        ProgressBar.create(title: title, total: @total, format: FORMAT, length: LENGTH, output: output)
+        @multibar.register(bar_format(title), total: @total)
+      end
+
+      def bar_format(title)
+        Kernel.format(FORMAT, title: title)
       end
     end
   end

data/lib/kettle/dev/executable_version.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+require_relative "version"
+
+module Kettle
+  module Dev
+    module ExecutableVersion
+      module_function
+
+      def print_and_exit!(script_basename, argv, value_option: false)
+        return unless requested?(argv, value_option: value_option)
+
+        puts "#{script_basename} #{Kettle::Dev::Version::VERSION}"
+        exit(0)
+      end
+
+      def print_header(script_basename)
+        puts header(script_basename)
+      end
+
+      def header(script_basename)
+        "== #{script_basename} v#{Kettle::Dev::Version::VERSION} =="
+      end
+
+      def requested?(argv, value_option: false)
+        argv.each_with_index.any? do |arg, index|
+          arg == "-v" || bare_long_version?(argv, arg, index, value_option: value_option)
+        end
+      end
+
+      def bare_long_version?(argv, arg, index, value_option:)
+        return false unless arg == "--version"
+        return true unless value_option
+
+        index == argv.length - 1 || argv[index + 1].to_s.start_with?("-")
+      end
+    end
+  end
+end

data/lib/kettle/dev/pre_release_cli.rb

@@ -375,25 +375,29 @@ module Kettle
           output: $stdout
         )
         failures = []
-        urls.each do |url|
-          if image_url_skipped?(url)
-            skipped << url
-            progress.skipped
-            next
-          end
+        begin
+          urls.each do |url|
+            if image_url_skipped?(url)
+              skipped << url
+              progress.skipped
+              next
+            end
 
-          if cache && !@refresh_image_url_cache && cache.fresh_success?(url)
-            progress.cached
-            next
-          end
+            if cache && !@refresh_image_url_cache && cache.fresh_success?(url)
+              progress.cached
+              next
+            end
 
-          ok = HTTP.head_ok?(url)
-          progress.live
-          if ok
-            cache&.write_success(url)
-          else
-            failures << url
+            ok = HTTP.head_ok?(url)
+            progress.live
+            if ok
+              cache&.write_success(url)
+            else
+              failures << url
+            end
           end
+        ensure
+          progress.stop
         end
         puts "[kettle-pre-release] Image URL checks: #{progress.cached_count} cached, #{progress.live_count} live."
         puts "[kettle-pre-release] Skipped #{progress.skipped_count} image URL check(s)." if skipped.any?

data/lib/kettle/dev/release_cli.rb

@@ -10,6 +10,7 @@ require "net/http"
 require "json"
 require "uri"
 require "yaml"
+require "set"
 
 # External gems
 require "kettle/rb/compat_matrix"
@@ -256,6 +257,7 @@ module Kettle
 
         # 6. git user + commit release prep
         if run_step?(6)
+          prepare_release_lockfiles_for_commit!
           ensure_git_user!
           version ||= detect_version
           committed = commit_release_prep!(version)
@@ -279,10 +281,16 @@ module Kettle
         end
 
         # 9. push branches
-        push! if run_step?(9) && !local_ci?
+        if run_step?(9) && !local_ci?
+          validate_release_lockfiles!(stage: "before push")
+          push!
+        end
 
         # 10. monitor CI after push
-        monitor_workflows_after_push! if run_step?(10) && !local_ci?
+        if run_step?(10) && !local_ci?
+          validate_release_lockfiles!(stage: "before CI monitoring")
+          monitor_workflows_after_push!
+        end
 
         # 11. merge feature into trunk and push
         if run_step?(11) && !local_ci?
@@ -505,6 +513,187 @@ module Kettle
         run_changelog!
       end
 
+      def prepare_release_lockfiles_for_commit!
+        dirty_lockfiles = release_lockfile_paths.select { |path| release_lockfile_normalization_needed?(path) }
+        unless dirty_lockfiles.empty?
+          puts "Normalizing release lockfiles with local path dependencies disabled..."
+          dirty_lockfiles.each { |path| normalize_release_lockfile!(path) }
+        end
+
+        validate_release_lockfiles!(stage: "before release prep commit")
+      end
+
+      def validate_release_lockfiles!(stage:)
+        diagnostics = release_lockfile_paths.flat_map { |path| release_lockfile_diagnostics(path) }
+        return if diagnostics.empty?
+
+        abort(<<~MSG)
+          Release lockfile validation failed #{stage}:
+          #{diagnostics.map { |diagnostic| "  - #{diagnostic}" }.join("\n")}
+          Re-run bundle lock/update with local path development env disabled before releasing.
+        MSG
+      end
+
+      def release_lockfile_paths
+        candidates = [
+          File.join(@root, "Gemfile.lock"),
+          File.join(@root, "Appraisal.root.gemfile.lock")
+        ]
+        candidates.select { |path| File.file?(path) }.sort
+      end
+
+      def release_lockfile_normalization_needed?(path)
+        release_lockfile_has_local_path_remote?(path) || !release_lockfile_empty_registry_checksums(path).empty?
+      end
+
+      def normalize_release_lockfile!(path)
+        gemfile = release_gemfile_for_lockfile(path)
+        unless gemfile && File.file?(gemfile)
+          warn("Cannot normalize #{Kettle::Dev.display_path(path)} because its Gemfile was not found.")
+          return
+        end
+
+        update_gems = release_lockfile_empty_registry_checksums(path).map(&:first).uniq.sort
+        env = release_lockfile_normalization_env.merge("BUNDLE_GEMFILE" => gemfile)
+        command = +"env"
+        env.each do |key, value|
+          command << " #{key}=#{Shellwords.escape(value)}"
+        end
+        command << " bundle lock"
+        command << " --update #{update_gems.map { |gem_name| Shellwords.escape(gem_name) }.join(" ")}" unless update_gems.empty?
+        run_cmd!(command)
+      end
+
+      def release_gemfile_for_lockfile(path)
+        basename = File.basename(path)
+        return File.join(@root, "Gemfile") if basename == "Gemfile.lock"
+
+        path.delete_suffix(".lock")
+      end
+
+      def release_lockfile_normalization_env
+        {
+          "KETTLE_DEV_DEV" => "false",
+          "K_JEM_TEMPLATING" => "false",
+          "STRUCTUREDMERGE_DEV" => "false",
+          "TREE_SITTER_LANGUAGE_PACK_DEV" => "false",
+          "RUBOCOP_LTS_LOCAL" => "false",
+          "GALTZO_FLOSS_DEV" => "false",
+          "UR_BRAIN_DEV" => "false"
+        }
+      end
+
+      def release_lockfile_diagnostics(path)
+        diagnostics = []
+        release_lockfile_local_path_remote_lines(path).each do |line_number|
+          diagnostics << "#{release_lockfile_label(path)} has local path remote at line #{line_number}"
+        end
+        release_lockfile_empty_registry_checksums(path).each do |name, version, line_number|
+          diagnostics << "#{release_lockfile_label(path)} CHECKSUMS has no sha256 for #{name} #{version} at line #{line_number}"
+        end
+        diagnostics
+      end
+
+      def release_lockfile_has_local_path_remote?(path)
+        !release_lockfile_local_path_remote_lines(path).empty?
+      end
+
+      def release_lockfile_local_path_remote_lines(path)
+        File.readlines(path).filter_map.with_index(1) do |line, index|
+          next unless line.start_with?("  remote: /", "  remote: ./", "  remote: ../")
+
+          index
+        end
+      end
+
+      def release_lockfile_empty_registry_checksums(path)
+        path_gems = release_lockfile_path_source_gems(path) | release_lockfile_path_dependency_gems(path)
+        in_checksums = false
+        entries = File.readlines(path).filter_map.with_index(1) do |line, index|
+          stripped = line.strip
+          if stripped == "CHECKSUMS"
+            in_checksums = true
+            next
+          end
+          next unless in_checksums
+          next if stripped.empty?
+          next if stripped == "BUNDLED WITH"
+
+          match = stripped.match(/\A([A-Za-z0-9_.-]+) \(([^)]+)\)(?:\s+(sha256=.*))?\z/)
+          next unless match
+
+          name = match[1]
+          checksum = match[3].to_s
+          next if !checksum.empty?
+          next if path_gems.include?(name)
+
+          [name, match[2], index]
+        end
+        return [] unless release_lockfile_has_any_sha_checksum?(path)
+
+        entries
+      end
+
+      def release_lockfile_has_any_sha_checksum?(path)
+        in_checksums = false
+        File.readlines(path).any? do |line|
+          stripped = line.strip
+          if stripped == "CHECKSUMS"
+            in_checksums = true
+            next false
+          end
+          next false unless in_checksums
+
+          stripped.include?("sha256=")
+        end
+      end
+
+      def release_lockfile_path_source_gems(path)
+        gems = Set.new
+        in_path = false
+        in_specs = false
+        File.readlines(path).each do |line|
+          header = line.strip
+          if header.match?(/\A[A-Z][A-Z ]*\z/)
+            in_path = header == "PATH"
+            in_specs = false
+            next
+          end
+          next unless in_path
+
+          if header == "specs:"
+            in_specs = true
+            next
+          end
+          next unless in_specs
+
+          match = line.match(/\A    ([A-Za-z0-9_.-]+) \([^)]+\)/)
+          gems << match[1] if match
+        end
+        gems
+      end
+
+      def release_lockfile_path_dependency_gems(path)
+        gems = Set.new
+        in_dependencies = false
+        File.readlines(path).each do |line|
+          header = line.strip
+          if header.match?(/\A[A-Z][A-Z ]*\z/)
+            in_dependencies = header == "DEPENDENCIES"
+            next
+          end
+          next unless in_dependencies
+
+          match = line.match(/\A  ([A-Za-z0-9_.-]+)!\z/)
+          gems << match[1] if match
+        end
+        gems
+      end
+
+      def release_lockfile_label(path)
+        Kettle::Dev.display_path(path)
+      end
+
       def run_changelog!
         cmd = "bundle exec kettle-changelog"
         cmd = "#{cmd} --version #{Shellwords.escape(@version_override)}" if @version_override

data/lib/kettle/dev/version.rb

@@ -3,7 +3,7 @@
 module Kettle
   module Dev
     module Version
-      VERSION = "2.3.11"
+      VERSION = "2.4.1"
     end
     VERSION = Version::VERSION # Traditional Constant Location
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 2.3.11
+  version: 2.4.1
 platform: ruby
 authors:
 - Peter H. Boling
@@ -57,20 +57,20 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.2'
+        version: '0.3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.2.1
+        version: 0.3.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.2'
+        version: '0.3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.2.1
+        version: 0.3.1
 - !ruby/object:Gem::Dependency
   name: kettle-rb
   requirement: !ruby/object:Gem::Requirement
@@ -125,6 +125,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.13'
+- !ruby/object:Gem::Dependency
+  name: tty-progressbar
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.18'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.18'
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -301,6 +315,7 @@ files:
 - lib/kettle/dev/ci_monitor.rb
 - lib/kettle/dev/commit_msg.rb
 - lib/kettle/dev/dvcs_cli.rb
+- lib/kettle/dev/executable_version.rb
 - lib/kettle/dev/exit_adapter.rb
 - lib/kettle/dev/gem_coop_versions.rb
 - lib/kettle/dev/gem_spec_reader.rb
@@ -334,10 +349,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.3.11
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.3.11/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.4.1
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.4.1/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.3.11
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.4.1
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev