kettle-dev 2.3.9 → 2.3.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 846ffb7540c0c7d69659591baf978274184f722f726aacc6e4915c0f376dbeb4
-  data.tar.gz: '08818034dfa875f33cdc89579cf455a011ecebf25be759b31af8702458e8eb6b'
+  metadata.gz: e30ac2b82038eea94426435c99852b725d70fab0838aeaf8ab43728305a11bb2
+  data.tar.gz: 02e8ab6c76c1d443fa5f00c184d452fd6d2b4bfc44bd425a572e948ce76b9d0d
 SHA512:
-  metadata.gz: 0014c68a3e93d78a01c8b561956cbf474eaf25c6c8491b8ff1d229e7070eca06d3a3ed0282f739b1a3e4c38040f9bd8e5155e030a6baf1e7694a731a4bce5e2d
-  data.tar.gz: eeb028f65feddaac27a4f268a627d77fa686836bf368ca62c8b4b169acff3b43abf8aa432d96dc24341b4d27a61d74cd1197a529db1f2287c05661257f67880c
+  metadata.gz: bfebbbb3262abd7998ab3ec508b2235ce6df8c560839a8d4e63acfbe19534ccf975bed2d0f4afe32dd72bd910d5f0a795802b43f47d4442b63801555c6f7ec15
+  data.tar.gz: 11e0ea51634549b3d1676926ea6e5abb2c5bc363de47f6e8b6c811f69e88e17253bebbaaa6f4ba5dfbfc1a527e3e61f6950db686990e0c8b90b0c5ade5c20158

data/CHANGELOG.md

@@ -30,6 +30,46 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [2.3.11] - 2026-07-23
+
+- TAG: [v2.3.11][2.3.11t]
+- COVERAGE: 92.17% -- 3791/4113 lines in 37 files
+- BRANCH COVERAGE: 75.80% -- 1500/1979 branches in 37 files
+- 59.51% documented
+
+### Fixed
+
+- GitHub Actions release monitoring now falls back to repository-level workflow
+  runs when a per-workflow endpoint lags for the pushed HEAD, and waits up to
+  five minutes by default for workflows to appear.
+
+## [2.3.10] - 2026-07-23
+
+- TAG: [v2.3.10][2.3.10t]
+- COVERAGE: 92.35% -- 3790/4104 lines in 37 files
+- BRANCH COVERAGE: 75.95% -- 1500/1975 branches in 37 files
+- 60.00% documented
+
+### Changed
+
+- Local development tooling now uses `kettle-gha-pins` 0.2.0 or newer on
+  Ruby 3.2+, while keeping older supported Ruby bundles solvable.
+- `kettle-gha-sha-pins` now delegates GitHub Actions release-tag parsing,
+  canonicalization, cache persistence, GitHub release/tag/commit resolution,
+  and upgrade-target selection to the shared
+  `kettle-gha-pins` gem.
+- `kettle-gha-sha-pins` is now a compatibility wrapper around the
+  `kettle-gha-pins` executable.
+
+### Fixed
+
+- Restored `kettle-gha-pins` as a normal runtime dependency now that 0.2.1
+  supports the full `kettle-dev` Ruby floor.
+
+- Appraisal rake task specs now rely on kettle-test's `silent_stream`
+  integration instead of stubbing `Object#warn`, which is not supported under
+  JRuby 9.4.
+
 ## [2.3.9] - 2026-07-21
 
 - TAG: [v2.3.9][2.3.9t]
@@ -2586,7 +2626,11 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.9...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.11...HEAD
+[2.3.11]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.10...v2.3.11
+[2.3.11t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.3.11
+[2.3.10]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.9...v2.3.10
+[2.3.10t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.3.10
 [2.3.9]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.8...v2.3.9
 [2.3.9t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.3.9
 [2.3.8]: https://github.com/kettle-dev/kettle-dev/compare/v2.3.7...v2.3.8

data/LICENSE.md

@@ -3,7 +3,7 @@
 This project is made available under the following license.
 Choose the option that best fits your use case:
 
-- [AGPL-3.0-only](AGPL-3.0-only.md)
+- [AGPL-3.0-only](https://github.com/kettle-dev/kettle-dev/blob/main/AGPL-3.0-only.md)
 
 If none of the above licenses fit your use case, please [contact us](mailto:floss@galtzo.com) to discuss a custom commercial license.
 

data/README.md

@@ -94,7 +94,7 @@ bin/kettle-release
 | Works with MRI Ruby 3 | [![Ruby 3.0 Compat][💎ruby-3.0i]][🚎ruby-3.0-wf] [![Ruby 3.1 Compat][💎ruby-3.1i]][🚎ruby-3.1-wf] [![Ruby 3.2 Compat][💎ruby-3.2i]][🚎ruby-3.2-wf] [![Ruby 3.3 Compat][💎ruby-3.3i]][🚎ruby-3.3-wf] [![Ruby 3.4 Compat][💎ruby-3.4i]][🚎ruby-3.4-wf]|
 | Works with MRI Ruby 2 | [![Ruby 2.4 Compat][💎ruby-2.4i]][🚎ruby-2.4-wf] [![Ruby 2.5 Compat][💎ruby-2.5i]][🚎ruby-2.5-wf] [![Ruby 2.6 Compat][💎ruby-2.6i]][🚎ruby-2.6-wf] [![Ruby 2.7 Compat][💎ruby-2.7i]][🚎ruby-2.7-wf]|
 | Support & Community | [![Join Me on Daily.dev's RubyFriends][✉️ruby-friends-img]][✉️ruby-friends] [![Get help from RubyForum][✉️ruby-forum-img]][✉️ruby-forum] [![Live Chat on Discord][✉️discord-invite-img-ftb]][✉️discord-invite] [![Get help from me on Upwork][👨🏼‍🏫expsup-upwork-img]][👨🏼‍🏫expsup-upwork] [![Get help from me on Codementor][👨🏼‍🏫expsup-codementor-img]][👨🏼‍🏫expsup-codementor] |
-| Source | [![Source on GitLab.com][📜src-gl-img]][📜src-gl] [![Source on CodeBerg.org][📜src-cb-img]][📜src-cb] [![Source on Github.com][📜src-gh-img]][📜src-gh] [![The best SHA: dQw4w9WgXcQ!][🧮kloc-img]][🧮kloc] |
+| Source | [![Source on GitLab.com][📜src-gl-img]][📜src-gl] [![Source on CodeBerg.org][📜src-cb-img]][📜src-cb] [![Source on GitHub.com][📜src-gh-img]][📜src-gh] [![The best SHA: dQw4w9WgXcQ!][🧮kloc-img]][🧮kloc] |
 | Documentation | [![Current release on RubyDoc.info][📜docs-cr-rd-img]][🚎yard-current] [![YARD on Galtzo.com][📜docs-head-rd-img]][🚎yard-head] [![Maintainer Blog][🚂maint-blog-img]][🚂maint-blog] [![GitLab Wiki][📜gl-wiki-img]][📜gl-wiki] [![GitHub Wiki][📜gh-wiki-img]][📜gh-wiki] |
 | Compliance | [![License: AGPL-3.0-only][📄license-img]][📄license] [![Apache license compatibility: Category X][📄license-compat-img]][📄license-compat] [![📄ilo-declaration-img]][📄ilo-declaration] [![Security Policy][🔐security-img]][🔐security] [![Contributor Covenant 2.1][🪇conduct-img]][🪇conduct] [![SemVer 2.0.0][📌semver-img]][📌semver] |
 | Style | [![Enforced Code Style Linter][💎rlts-img]][💎rlts] [![Keep-A-Changelog 1.0.0][📗keep-changelog-img]][📗keep-changelog] [![Gitmoji Commits][📌gitmoji-img]][📌gitmoji] [![Compatibility appraised by: appraisal2][💎appraisal2-img]][💎appraisal2] |
@@ -470,6 +470,8 @@ What it does:
 ### Pre-release checks
 
 - Script: `exe/kettle-gha-sha-pins` (run as `kettle-gha-sha-pins`)
+- New projects should install `kettle-gha-pins` and run `kettle-gha-pins`
+  directly; this `kettle-dev` command remains as a compatibility wrapper.
 - Purpose: Validate and optionally update GitHub Actions `uses:` refs to pinned
   SHAs and current allowed release versions.
 - Usage:
@@ -664,7 +666,7 @@ See [CHANGELOG.md][📌changelog] for a list of releases.
 
 ## 📄 License
 
-The gem is available under the following license: [AGPL-3.0-only](AGPL-3.0-only.md).
+The gem is available under the following license: [AGPL-3.0-only](https://github.com/kettle-dev/kettle-dev/blob/main/AGPL-3.0-only.md).
 See [LICENSE.md][📄license] for details.
 
 If none of the available licenses suit your use case, please [contact us](mailto:floss@galtzo.com) to discuss a custom commercial license.
@@ -781,7 +783,7 @@ Thanks for RTFM. ☺️
 [📜src-gl]: https://gitlab.com/kettle-dev/kettle-dev
 [📜src-cb-img]: https://img.shields.io/badge/CodeBerg-4893CC?style=for-the-badge&logo=CodeBerg&logoColor=blue
 [📜src-cb]: https://codeberg.org/kettle-dev/kettle-dev
-[📜src-gh-img]: https://img.shields.io/badge/GitHub-238636?style=for-the-badge&logo=Github&logoColor=green
+[📜src-gh-img]: https://img.shields.io/badge/GitHub-238636?style=for-the-badge&logo=GitHub&logoColor=green
 [📜src-gh]: https://github.com/kettle-dev/kettle-dev
 [📜docs-cr-rd-img]: https://img.shields.io/badge/RubyDoc-Current_Release-943CD2?style=for-the-badge&logo=readthedocs&logoColor=white
 [📜docs-head-rd-img]: https://img.shields.io/badge/YARD_on_Galtzo.com-HEAD-943CD2?style=for-the-badge&logo=readthedocs&logoColor=white
@@ -889,12 +891,12 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.826-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.113-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year
 [📄license]: LICENSE.md
-[📄license-ref]: AGPL-3.0-only.md
+[📄license-ref]: https://github.com/kettle-dev/kettle-dev/blob/main/AGPL-3.0-only.md
 [📄license-img]: https://img.shields.io/badge/License-AGPL--3.0--only-259D6C.svg
 [📄license-compat]: https://www.apache.org/legal/resolved.html#category-x
 [📄license-compat-img]: https://img.shields.io/badge/Apache_Incompatible:_Category_X-%E2%9C%97-C0392B.svg?style=flat&logo=Apache

data/exe/kettle-gha-sha-pins

@@ -3,38 +3,12 @@
 
 # vim: set syntax=ruby
 
-$stdout.sync = true
-$stderr.sync = true
-
-# Do not rely on Bundler; allow running in repos that do not depend on kettle-dev
-begin
-  require "rubygems"
-rescue LoadError
-  # Older Rubies always have rubygems; continue anyway
-end
-
 script_basename = File.basename(__FILE__)
 
 begin
-  require "kettle/dev"
-rescue LoadError
-  repo_lib = File.expand_path("../lib", __dir__)
-  $LOAD_PATH.unshift(repo_lib) unless $LOAD_PATH.include?(repo_lib)
-  begin
-    require "kettle/dev"
-  rescue LoadError => e
-    warn("#{script_basename}: could not load dependency: #{e.class}: #{e.message}")
-    warn("Hint: Install the kettle-dev gem (`gem install kettle-dev`) or add it to your Gemfile. Bundler is not required for this script.")
-    exit(1)
-  end
-end
-
-begin
-  cli = Kettle::Dev::GhaShaPinsCLI.new(ARGV)
-  status = cli.run!
-  Kettle::Dev::ExitAdapter.exit(status)
-rescue => e
-  warn("#{script_basename}: unexpected error: #{e.class}: #{e.message}")
-  warn(e.backtrace.join("\n"))
-  Kettle::Dev::ExitAdapter.exit(1)
+  Kernel.exec(Gem.ruby, Gem.bin_path("kettle-gha-pins", "kettle-gha-pins"), *ARGV)
+rescue Gem::Exception, LoadError => e
+  warn("#{script_basename}: could not load kettle-gha-pins executable: #{e.class}: #{e.message}")
+  warn("Hint: Install the kettle-gha-pins gem (`gem install kettle-gha-pins`) or add it to your Gemfile.")
+  exit(1)
 end

data/lib/kettle/dev/ci_helpers.rb

@@ -97,19 +97,17 @@ module Kettle
 
         # Scope to the exact commit SHA when available to avoid picking up a previous run on the same branch.
         sha = head_sha || current_head_sha
-        base_url = "https://api.github.com/repos/#{owner}/#{repo}/actions/workflows/#{workflow_file}/runs?branch=#{URI.encode_www_form_component(b)}&per_page=5"
-        uri = URI(base_url)
-        req = Net::HTTP::Get.new(uri)
-        req["User-Agent"] = "kettle-dev/ci-helpers"
-        req["Authorization"] = "token #{token}" if token && !token.empty?
-        res = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) { |http| http.request(req) }
-        return unless res.is_a?(Net::HTTPSuccess)
+        data = github_get_json(
+          "https://api.github.com/repos/#{owner}/#{repo}/actions/workflows/#{workflow_file}/runs?branch=#{URI.encode_www_form_component(b)}&per_page=5",
+          token: token
+        )
+        return unless data
 
-        data = JSON.parse(res.body)
         runs = Array(data["workflow_runs"]) || []
         # Try to match by head_sha first; fall back to first run (branch-scoped) if none matches yet.
         run = if sha
           match = runs.find { |r| r["head_sha"] == sha }
+          match ||= latest_repository_workflow_run(owner: owner, repo: repo, workflow_file: workflow_file, branch: b, head_sha: sha, token: token)
           require_head ? match : (match || runs.first)
         else
           runs.first unless require_head
@@ -128,6 +126,30 @@ module Kettle
         nil
       end
 
+      def latest_repository_workflow_run(owner:, repo:, workflow_file:, branch:, head_sha:, token:)
+        data = github_get_json(
+          "https://api.github.com/repos/#{owner}/#{repo}/actions/runs?branch=#{URI.encode_www_form_component(branch)}&per_page=100",
+          token: token
+        )
+        return unless data
+
+        workflow_path = ".github/workflows/#{workflow_file}"
+        Array(data["workflow_runs"]).find do |run|
+          run["head_sha"] == head_sha && run["path"] == workflow_path
+        end
+      end
+
+      def github_get_json(url, token:)
+        uri = URI(url)
+        req = Net::HTTP::Get.new(uri)
+        req["User-Agent"] = "kettle-dev/ci-helpers"
+        req["Authorization"] = "token #{token}" if token && !token.empty?
+        res = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) { |http| http.request(req) }
+        return unless res.is_a?(Net::HTTPSuccess)
+
+        JSON.parse(res.body)
+      end
+
       # Whether a run has completed successfully.
       # @param run [Hash, nil]
       # @return [Boolean]

data/lib/kettle/dev/ci_monitor.rb

@@ -352,7 +352,7 @@ module Kettle
         rescue
           nil
         end
-        (seconds && seconds >= 0) ? seconds : 120
+        (seconds && seconds >= 0) ? seconds : 300
       end
       module_function :github_start_timeout