kettle-dev 2.3.8 → 2.3.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fb500cfcc82a5cb325eb83ae9a5464e8333cce1c3ec03814b597063d41ec0e8a
-  data.tar.gz: 124a6c4ad4a3dd9172c131d6d5276a685d7e15f2be8f5fc51722c028fc83f136
+  metadata.gz: 846ffb7540c0c7d69659591baf978274184f722f726aacc6e4915c0f376dbeb4
+  data.tar.gz: '08818034dfa875f33cdc89579cf455a011ecebf25be759b31af8702458e8eb6b'
 SHA512:
-  metadata.gz: 1dd9b51023413bc9301d87dfc989dcec0844190b0cccfa90d8344bcd428403c70837f3972fdedc0cf2b4dee103af88923cc41ec43f80a869098a8a20da8a579d
-  data.tar.gz: 94084430abf75c714d2b5be26a25f1a9c1be691fc9c4f2fa760fc767e7ce1698e01ab71f5b978ec744f9981eeedc7b474a663b51504c6d842c0569ffe7e79cb0
+  metadata.gz: 0014c68a3e93d78a01c8b561956cbf474eaf25c6c8491b8ff1d229e7070eca06d3a3ed0282f739b1a3e4c38040f9bd8e5155e030a6baf1e7694a731a4bce5e2d
+  data.tar.gz: eeb028f65feddaac27a4f268a627d77fa686836bf368ca62c8b4b169acff3b43abf8aa432d96dc24341b4d27a61d74cd1197a529db1f2287c05661257f67880c

data/CHANGELOG.md

@@ -30,6 +30,24 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [2.3.9] - 2026-07-21
+
+- TAG: [v2.3.9][2.3.9t]
+- COVERAGE: 92.06% -- 4443/4826 lines in 37 files
+- BRANCH COVERAGE: 74.09% -- 1733/2339 branches in 37 files
+- 54.64% documented
+
+### Fixed
+
+- `kettle-release` now records a short-lived gem.coop release-state cache-bust
+  marker after publishing, and `kettle-changelog --release-state` uses it to
+  refresh just-published gem version lookups.
+
+- `dep-heads.yml` now runs each engine directly from
+  `gemfiles/dep_heads.gemfile`, avoiding `Appraisal.root.gemfile` bootstrap
+  failures with RubyGems/Bundler and gem.coop before the dep-heads appraisal is
+  selected.
+
 ## [2.3.8] - 2026-07-21
 
 - TAG: [v2.3.8][2.3.8t]
@@ -2568,7 +2586,9 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.8...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.9...HEAD
+[2.3.9]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.8...v2.3.9
+[2.3.9t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.3.9
 [2.3.8]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.7...v2.3.8
 [2.3.8t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.3.8
 [2.3.7]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.6...v2.3.7

data/README.md

@@ -889,7 +889,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.761-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.826-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/exe/kettle-changelog

@@ -55,7 +55,7 @@ end
 
 if ARGV.include?("-h") || ARGV.include?("--help")
   puts <<~USAGE
-    Usage: kettle-changelog [--version VERSION] [--update-prep] [--pending-release] [--release-state] [--add-unreleased-entry --section SECTION --entry TEXT] [--json] [--no-strict] [--no-coverage-threshold]
+    Usage: kettle-changelog [--version VERSION] [--update-prep] [--pending-release] [--release-state] [--refresh-cache] [--add-unreleased-entry --section SECTION --entry TEXT] [--json] [--no-strict] [--no-coverage-threshold]
 
     Detects the current version from lib/**/version.rb, the latest live release, and
     the most recent CHANGELOG.md release section, then prompts to confirm the selected plan:
@@ -70,6 +70,7 @@ if ARGV.include?("-h") || ARGV.include?("--help")
       --pending-release         Query whether the changelog has release work pending; exits 0 for yes, 1 for no
       --release-state,
       --release-status          Print changelog release state, including latest published release and pending sources
+      --refresh-cache           Bypass cached gem.coop version data for this invocation
       --add-unreleased-entry    Add one entry to an existing section under ## [Unreleased]
       --section SECTION         Unreleased section to receive the entry (Added, Changed, Deprecated, Removed, Fixed, Security)
       --entry TEXT              Changelog entry text; "- " is added when omitted
@@ -82,6 +83,7 @@ if ARGV.include?("-h") || ARGV.include?("--help")
       K_CHANGELOG_COVERAGE_HARD=false       Disable coverage threshold hard-failure
       K_CHANGELOG_VERSION_FILE=path         Read VERSION from this file instead of lib/**/version.rb
       K_CHANGELOG_GEM_NAME=name             Read live release data as this gem instead of root .gemspec
+      KETTLE_GEM_COOP_REFRESH=true          Bypass cached gem.coop version data
 
     Data generation:
       Strict mode is the default. Release plans remove stale coverage output,
@@ -131,6 +133,7 @@ begin
   update_prep = ARGV.delete("--update-prep")
   pending_release_query = ARGV.delete("--pending-release")
   release_state_query = ARGV.delete("--release-state") || ARGV.delete("--release-status")
+  refresh_cache = ARGV.delete("--refresh-cache")
   add_unreleased_entry = ARGV.delete("--add-unreleased-entry") || ARGV.delete("--add-changelog-entry")
   json_output = ARGV.delete("--json")
   coverage_threshold_disabled = ARGV.include?("--no-coverage-threshold") || ARGV.include?("--no-coverage-thresholds")
@@ -167,7 +170,7 @@ begin
     exit(0)
   end
 
-  cli = Kettle::Dev::ChangelogCLI.new(strict: strict_mode, enforce_coverage_thresholds: coverage_hard, update_prep: update_prep, version: version_override)
+  cli = Kettle::Dev::ChangelogCLI.new(strict: strict_mode, enforce_coverage_thresholds: coverage_hard, update_prep: update_prep, version: version_override, refresh_cache: refresh_cache)
   if release_state_query
     state = cli.release_state
     puts(json_output ? JSON.pretty_generate(state) : cli.release_state_table(state))

data/lib/kettle/dev/changelog_cli.rb

@@ -27,7 +27,7 @@ module Kettle
       # @param enforce_coverage_thresholds [Boolean] when true, fail strict coverage generation below project thresholds
       # @param update_prep [Boolean] when true, update the most recent prepared release section in place
       # @param version [String, nil] explicit version override for gems without a literal VERSION constant
-      def initialize(strict: true, enforce_coverage_thresholds: true, update_prep: false, version: nil, root: Kettle::Dev::CIHelpers.project_root)
+      def initialize(strict: true, enforce_coverage_thresholds: true, update_prep: false, version: nil, root: Kettle::Dev::CIHelpers.project_root, refresh_cache: false)
         @root = root
         @changelog_path = File.join(@root, "CHANGELOG.md")
         @coverage_path = File.join(@root, "coverage", "coverage.json")
@@ -35,6 +35,7 @@ module Kettle
         @enforce_coverage_thresholds = enforce_coverage_thresholds
         @update_prep = update_prep
         @version_override = Kettle::Dev::Versioning.normalize_explicit_version(version)
+        @refresh_cache = refresh_cache
       end
 
       # Main entry point to update CHANGELOG.md
@@ -399,11 +400,9 @@ module Kettle
       end
 
       def latest_released_versions(gem_name, current_version)
-        uri = URI("https://gem.coop/api/v1/versions/#{gem_name}.json")
-        res = Net::HTTP.get_response(uri)
-        return [nil, nil] unless res.is_a?(Net::HTTPSuccess)
+        data = Kettle::Dev::GemCoopVersions.fetch(gem_name, version_hint: current_version, refresh: @refresh_cache)
+        return [nil, nil, nil] unless data.is_a?(Array)
 
-        data = JSON.parse(res.body)
         versions = data.map { |h| h["number"] }.compact
         versions.reject! { |v| v.to_s.include?("-pre") || v.to_s.include?(".pre") || v.to_s.match?(/[a-zA-Z]/) }
         gversions = versions.map { |s| Gem::Version.new(s) }.sort

data/lib/kettle/dev/gem_coop_versions.rb

@@ -0,0 +1,92 @@
+# frozen_string_literal: true
+
+require "fileutils"
+require "json"
+require "net/http"
+require "time"
+require "uri"
+
+module Kettle
+  module Dev
+    module GemCoopVersions
+      CACHE_BUST_TTL_SECONDS = 15 * 60
+      ENV_REFRESH = "KETTLE_GEM_COOP_REFRESH"
+      ENV_MARKER_PATH = "KETTLE_GEM_COOP_CACHE_BUST_PATH"
+
+      class << self
+        def fetch(gem_name, version_hint: nil, refresh: false)
+          cache_bust = refresh || env_refresh? || fresh_release_marker?(gem_name, version_hint)
+          uri = versions_uri(gem_name, cache_bust: cache_bust)
+          request = Net::HTTP::Get.new(uri)
+          if cache_bust
+            request["Cache-Control"] = "no-cache"
+            request["Pragma"] = "no-cache"
+          end
+          response = Net::HTTP.start(uri.host, uri.port, use_ssl: uri.scheme == "https") do |http|
+            http.request(request)
+          end
+          return nil unless response.is_a?(Net::HTTPSuccess)
+
+          JSON.parse(response.body)
+        end
+
+        def mark_released(gem_name, version)
+          return if gem_name.to_s.empty? || version.to_s.empty?
+
+          path = marker_path
+          data = read_marker(path)
+          data["releases"] ||= {}
+          data["releases"][gem_name.to_s] = {
+            "version" => version.to_s,
+            "released_at" => Time.now.utc.iso8601
+          }
+          FileUtils.mkdir_p(File.dirname(path))
+          File.write(path, JSON.pretty_generate(data) << "\n")
+        rescue => error
+          warn("[kettle-dev] could not update gem.coop cache-bust marker: #{error.class}: #{error.message}") if Kettle::Dev::DEBUGGING
+        end
+
+        def marker_path
+          configured = ENV.fetch(ENV_MARKER_PATH, "").to_s
+          return configured unless configured.empty?
+
+          state_home = ENV["XDG_STATE_HOME"]
+          state_home = File.join(Dir.home, ".local", "state") if state_home.to_s.empty?
+          File.join(state_home, "kettle-dev", "gem-coop-cache-bust.json")
+        end
+
+        private
+
+        def versions_uri(gem_name, cache_bust:)
+          uri = URI("https://gem.coop/api/v1/versions/#{gem_name}.json")
+          uri.query = "_kettle_cache_bust=#{Time.now.to_i}" if cache_bust
+          uri
+        end
+
+        def fresh_release_marker?(gem_name, version_hint)
+          entry = read_marker(marker_path).fetch("releases", {})[gem_name.to_s]
+          return false unless entry
+          return false if version_hint && entry["version"].to_s != version_hint.to_s
+
+          released_at = Time.iso8601(entry["released_at"].to_s)
+          released_at >= Time.now.utc - CACHE_BUST_TTL_SECONDS
+        rescue ArgumentError
+          false
+        end
+
+        def read_marker(path)
+          return {} unless File.file?(path)
+
+          parsed = JSON.parse(File.read(path))
+          parsed.is_a?(Hash) ? parsed : {}
+        rescue JSON::ParserError
+          {}
+        end
+
+        def env_refresh?
+          ENV.fetch(ENV_REFRESH, "").match?(Kettle::Dev::ENV_TRUE_RE)
+        end
+      end
+    end
+  end
+end

data/lib/kettle/dev/release_cli.rb

@@ -344,6 +344,7 @@ module Kettle
           else
             puts "Running release (you may be prompted for signing key password and RubyGems MFA OTP)..."
             run_cmd!("bundle exec rake release")
+            mark_gem_coop_release_cache_bust(version || detect_version)
           end
         end
 
@@ -954,6 +955,7 @@ module Kettle
 
         puts "Publishing #{File.basename(gem_path)} to RubyGems without pushing git refs..."
         run_cmd!("gem push #{Shellwords.escape(gem_path)}")
+        mark_gem_coop_release_cache_bust(version, gem_name: gem_name_from_gem_path(gem_path, version))
       end
 
       def detect_version
@@ -971,11 +973,9 @@ module Kettle
       end
 
       def latest_released_versions(gem_name, current_version)
-        uri = URI("https://gem.coop/api/v1/versions/#{gem_name}.json")
-        res = Net::HTTP.get_response(uri)
-        return [nil, nil] unless res.is_a?(Net::HTTPSuccess)
+        data = Kettle::Dev::GemCoopVersions.fetch(gem_name, version_hint: current_version)
+        return [nil, nil] unless data.is_a?(Array)
 
-        data = JSON.parse(res.body)
         versions = data.map { |h| h["number"] }.compact
         versions.reject! { |v| v.to_s.include?("-pre") || v.to_s.include?(".pre") || /[a-zA-Z]/.match?(v.to_s) }
         gversions = versions.map { |s| Gem::Version.new(s) }.sort
@@ -991,6 +991,18 @@ module Kettle
         [nil, nil]
       end
 
+      def mark_gem_coop_release_cache_bust(version, gem_name: nil)
+        gem_name ||= detect_gem_name
+        Kettle::Dev::GemCoopVersions.mark_released(gem_name, version)
+      rescue => error
+        warn("[kettle-release] could not mark gem.coop cache-bust for release-state: #{error.class}: #{error.message}") if Kettle::Dev::DEBUGGING
+      end
+
+      def gem_name_from_gem_path(gem_path, version)
+        basename = File.basename(gem_path, ".gem")
+        basename.delete_suffix("-#{version}")
+      end
+
       def commit_release_prep!(version)
         msg = "🔖 Prepare release v#{version}"
         # Stage all changes (including new/untracked files) prior to committing

data/lib/kettle/dev/version.rb

@@ -3,7 +3,7 @@
 module Kettle
   module Dev
     module Version
-      VERSION = "2.3.8"
+      VERSION = "2.3.9"
     end
     VERSION = Version::VERSION # Traditional Constant Location
   end

data/lib/kettle/dev.rb

@@ -5,6 +5,7 @@ require_relative "dev/version"
 if Gem.ruby_version < Gem::Version.new("2.7")
   begin
     require "backports/2.7.0/enumerable/filter_map"
+    require "backports/2.5.0/string/delete_suffix"
   rescue LoadError => error
     message = "kettle-dev on Ruby <= 2.6 requires the backports gem; " \
       "add `gem \"backports\", \">= 3.25\"` to your Gemfile (#{error.message})"
@@ -33,6 +34,7 @@ module Kettle
     autoload :CommitMsg, "kettle/dev/commit_msg"
     autoload :DvcsCLI, "kettle/dev/dvcs_cli"
     autoload :ExitAdapter, "kettle/dev/exit_adapter"
+    autoload :GemCoopVersions, "kettle/dev/gem_coop_versions"
     autoload :GemSpecReader, "kettle/dev/gem_spec_reader"
     autoload :GitAdapter, "kettle/dev/git_adapter"
     autoload :GitCommitFooter, "kettle/dev/git_commit_footer"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 2.3.8
+  version: 2.3.9
 platform: ruby
 authors:
 - Peter H. Boling
@@ -282,6 +282,7 @@ files:
 - lib/kettle/dev/commit_msg.rb
 - lib/kettle/dev/dvcs_cli.rb
 - lib/kettle/dev/exit_adapter.rb
+- lib/kettle/dev/gem_coop_versions.rb
 - lib/kettle/dev/gem_spec_reader.rb
 - lib/kettle/dev/gha_sha_pins_cli.rb
 - lib/kettle/dev/git_adapter.rb
@@ -313,10 +314,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.3.8
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.3.8/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.3.9
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.3.9/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.3.8
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.3.9
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev