kettle-dev 2.3.9 → 2.3.10

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 846ffb7540c0c7d69659591baf978274184f722f726aacc6e4915c0f376dbeb4
-  data.tar.gz: '08818034dfa875f33cdc89579cf455a011ecebf25be759b31af8702458e8eb6b'
+  metadata.gz: 043a73e1a2fb35f02748261dc4d5f81865e233a982c10b73d6b957ef7a7ce66d
+  data.tar.gz: 4695065e3a9a9ce34f586fb4baeb76064b59048914a7c12e5e1590435dfe5862
 SHA512:
-  metadata.gz: 0014c68a3e93d78a01c8b561956cbf474eaf25c6c8491b8ff1d229e7070eca06d3a3ed0282f739b1a3e4c38040f9bd8e5155e030a6baf1e7694a731a4bce5e2d
-  data.tar.gz: eeb028f65feddaac27a4f268a627d77fa686836bf368ca62c8b4b169acff3b43abf8aa432d96dc24341b4d27a61d74cd1197a529db1f2287c05661257f67880c
+  metadata.gz: 555075c8b24c72b0a3ae955d790d0af6b97f265a5fcd00dd3aad16bf3c46ca315081b64d6a39553039e70c438774553826eb7e2a7ecc358e441fa1a066cadeb1
+  data.tar.gz: 896b19afe31b86aaed964605cf63767ec1d8bc4d8c214e1599835781c2f86919d1510d1601a7597cb53cf57713812779b07de550d710e0d7ac40c3c4f7d28d4b

data/CHANGELOG.md

@@ -30,6 +30,33 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [2.3.10] - 2026-07-23
+
+- TAG: [v2.3.10][2.3.10t]
+- COVERAGE: 92.35% -- 3790/4104 lines in 37 files
+- BRANCH COVERAGE: 75.95% -- 1500/1975 branches in 37 files
+- 60.00% documented
+
+### Changed
+
+- Local development tooling now uses `kettle-gha-pins` 0.2.0 or newer on
+  Ruby 3.2+, while keeping older supported Ruby bundles solvable.
+- `kettle-gha-sha-pins` now delegates GitHub Actions release-tag parsing,
+  canonicalization, cache persistence, GitHub release/tag/commit resolution,
+  and upgrade-target selection to the shared
+  `kettle-gha-pins` gem.
+- `kettle-gha-sha-pins` is now a compatibility wrapper around the
+  `kettle-gha-pins` executable.
+
+### Fixed
+
+- Restored `kettle-gha-pins` as a normal runtime dependency now that 0.2.1
+  supports the full `kettle-dev` Ruby floor.
+
+- Appraisal rake task specs now rely on kettle-test's `silent_stream`
+  integration instead of stubbing `Object#warn`, which is not supported under
+  JRuby 9.4.
+
 ## [2.3.9] - 2026-07-21
 
 - TAG: [v2.3.9][2.3.9t]
@@ -2586,7 +2613,9 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.9...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.10...HEAD
+[2.3.10]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.9...v2.3.10
+[2.3.10t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.3.10
 [2.3.9]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.8...v2.3.9
 [2.3.9t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.3.9
 [2.3.8]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.7...v2.3.8

data/README.md

@@ -470,6 +470,8 @@ What it does:
 ### Pre-release checks
 
 - Script: `exe/kettle-gha-sha-pins` (run as `kettle-gha-sha-pins`)
+- New projects should install `kettle-gha-pins` and run `kettle-gha-pins`
+  directly; this `kettle-dev` command remains as a compatibility wrapper.
 - Purpose: Validate and optionally update GitHub Actions `uses:` refs to pinned
   SHAs and current allowed release versions.
 - Usage:
@@ -889,7 +891,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.826-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.104-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/exe/kettle-gha-sha-pins

@@ -3,38 +3,12 @@
 
 # vim: set syntax=ruby
 
-$stdout.sync = true
-$stderr.sync = true
-
-# Do not rely on Bundler; allow running in repos that do not depend on kettle-dev
-begin
-  require "rubygems"
-rescue LoadError
-  # Older Rubies always have rubygems; continue anyway
-end
-
 script_basename = File.basename(__FILE__)
 
 begin
-  require "kettle/dev"
-rescue LoadError
-  repo_lib = File.expand_path("../lib", __dir__)
-  $LOAD_PATH.unshift(repo_lib) unless $LOAD_PATH.include?(repo_lib)
-  begin
-    require "kettle/dev"
-  rescue LoadError => e
-    warn("#{script_basename}: could not load dependency: #{e.class}: #{e.message}")
-    warn("Hint: Install the kettle-dev gem (`gem install kettle-dev`) or add it to your Gemfile. Bundler is not required for this script.")
-    exit(1)
-  end
-end
-
-begin
-  cli = Kettle::Dev::GhaShaPinsCLI.new(ARGV)
-  status = cli.run!
-  Kettle::Dev::ExitAdapter.exit(status)
-rescue => e
-  warn("#{script_basename}: unexpected error: #{e.class}: #{e.message}")
-  warn(e.backtrace.join("\n"))
-  Kettle::Dev::ExitAdapter.exit(1)
+  Kernel.exec(Gem.ruby, Gem.bin_path("kettle-gha-pins", "kettle-gha-pins"), *ARGV)
+rescue Gem::Exception, LoadError => e
+  warn("#{script_basename}: could not load kettle-gha-pins executable: #{e.class}: #{e.message}")
+  warn("Hint: Install the kettle-gha-pins gem (`gem install kettle-gha-pins`) or add it to your Gemfile.")
+  exit(1)
 end