kettle-dev 2.3.2 → 2.3.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6ba4f6b3299cb459bcce65c44f6f92b5c6d236dd5727a49d82d6449b5fa9ff93
-  data.tar.gz: 86eb850d690c27d1b35dec86a9a98405ca72280af38fae07067aa86ff3942755
+  metadata.gz: f7172c979c02777b2a8844c66fd3af014b2fe18662b898c316859779cdd85f06
+  data.tar.gz: 4c618b9fad44e5745be41022796cea545c45e182b1c372cfffbf94dd5abffcfe
 SHA512:
-  metadata.gz: dd700832452037747c9253b1682734e0d27ef865c2d422ffd1031a89fd714344601ab2c251eeef5bdc577d1f328963dde505ac5d2c76bbbf492dc70526c30cd9
-  data.tar.gz: 0d520f7cad4f5e81393e21bb6ecbf86f3dfe98270ab4a4d112ad9fb29aae8cfd0d3bcab6f1d89a317c64866f465613575e9f217a4af9813d1cf49ca929d44231
+  metadata.gz: 94627c6be29716a603b7b07ebb3d122fb8d41cdee4829838674048e6145c0610b61969e15dacb0c8f592ef20ebcbc25befcc81d47f28fbc7f58ef2e38ea90522
+  data.tar.gz: fc9482cf2a3af6daad305f2ec6341d9649be9aade0329c4d91f4498f3c373ac6af99244ed00abbf218ee1337d220222495e1c8a5200c7d04a900ea2986bd2d33

data/CHANGELOG.md

@@ -30,6 +30,31 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [2.3.4] - 2026-07-14
+
+- TAG: [v2.3.4][2.3.4t]
+- COVERAGE: 91.96% -- 4292/4667 lines in 36 files
+- BRANCH COVERAGE: 74.22% -- 1687/2273 branches in 36 files
+- 56.88% documented
+
+### Fixed
+
+- GitHub Actions release monitoring now ignores `scorecard-analysis.yml` by
+  default, matching other maintenance workflows that may not start on release
+  commits.
+
+## [2.3.3] - 2026-07-13
+
+- TAG: [v2.3.3][2.3.3t]
+- COVERAGE: 91.62% -- 4276/4667 lines in 36 files
+- BRANCH COVERAGE: 72.80% -- 1678/2305 branches in 36 files
+- 56.88% documented
+
+### Fixed
+
+- AST-based version edits now apply Prism byte offsets as byte offsets, avoiding
+  corrupted Ruby when non-ASCII content appears before the edited string.
+
 ## [2.3.2] - 2026-07-13
 
 - TAG: [v2.3.2][2.3.2t]
@@ -2454,7 +2479,11 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.2...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.4...HEAD
+[2.3.4]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.3...v2.3.4
+[2.3.4t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.3.4
+[2.3.3]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.2...v2.3.3
+[2.3.3t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.3.3
 [2.3.2]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.1...v2.3.2
 [2.3.2t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.3.2
 [2.3.1]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.0...v2.3.1

data/README.md

@@ -882,7 +882,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.663-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.667-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/SECURITY.md

@@ -4,7 +4,7 @@
 
 | Version  | Supported |
 |----------|-----------|
-| 2.2.latest | ✅         |
+| 2.3.latest | ✅         |
 
 ## Security contact information
 

data/lib/kettle/dev/ci_helpers.rb

@@ -78,6 +78,7 @@ module Kettle
           dependency-review.yml
           discord-notifier.yml
           opencollective.yml
+          scorecard-analysis.yml
         ]
       end
 

data/lib/kettle/dev/version.rb

@@ -3,7 +3,7 @@
 module Kettle
   module Dev
     module Version
-      VERSION = "2.3.2"
+      VERSION = "2.3.4"
     end
     VERSION = Version::VERSION # Traditional Constant Location
   end

data/lib/kettle/dev/version_bump.rb

@@ -127,11 +127,22 @@ module Kettle
           edits.group_by { |edit| edit.fetch(:path) }.each_value do |file_edits|
             source = file_edits.first.fetch(:source)
             file_edits.sort_by { |edit| -edit.fetch(:start_offset) }.each do |edit|
-              source[edit.fetch(:start_offset)...edit.fetch(:end_offset)] = edit.fetch(:replacement)
+              source = replace_byte_range(
+                source,
+                edit.fetch(:start_offset),
+                edit.fetch(:end_offset),
+                edit.fetch(:replacement)
+              )
             end
             File.write(file_edits.first.fetch(:path), source)
           end
         end
+
+        def replace_byte_range(source, start_offset, end_offset, replacement)
+          before = source.byteslice(0, start_offset) || +""
+          after = source.byteslice(end_offset, source.bytesize - end_offset) || +""
+          "#{before}#{replacement}#{after}"
+        end
       end
 
       def initialize(root:, target_version:, current_version: nil, from_version: nil)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 2.3.2
+  version: 2.3.4
 platform: ruby
 authors:
 - Peter H. Boling
@@ -105,26 +105,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.13'
-- !ruby/object:Gem::Dependency
-  name: version_gem
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.1'
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 1.1.13
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.1'
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 1.1.13
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -182,7 +162,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.3
+        version: 3.1.4
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -192,7 +172,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.3
+        version: 3.1.4
 - !ruby/object:Gem::Dependency
   name: turbo_tests2
   requirement: !ruby/object:Gem::Requirement
@@ -202,7 +182,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.5
+        version: 3.1.7
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -212,7 +192,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.5
+        version: 3.1.7
 - !ruby/object:Gem::Dependency
   name: stone_checksums
   requirement: !ruby/object:Gem::Requirement
@@ -222,7 +202,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.4
+        version: 1.0.6
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -232,7 +212,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.4
+        version: 1.0.6
 - !ruby/object:Gem::Dependency
   name: gitmoji-regex
   requirement: !ruby/object:Gem::Requirement
@@ -242,7 +222,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.3
+        version: 2.0.4
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -252,7 +232,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.3
+        version: 2.0.4
 description: "\U0001F372 Kettle::Dev is a meta tool from kettle-rb to streamline development
   and testing. Acts as a shim dependency, pulling in many other dependencies, to give
   you OOTB productivity with a RubyGem, or Ruby app project. Configures a complete
@@ -377,10 +357,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.3.2
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.3.2/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.3.4
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.3.4/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.3.2
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.3.4
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev