kettle-dev 2.4.3 → 2.4.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0764aba0c8669f0c075868db0109a393fb508835db1540ac2b1f3cdf0c1b4cd0
-  data.tar.gz: a5d418a258af62045142025f314820330eaa18dba697036e2c4861bbb3874fad
+  metadata.gz: 33050e9b303264a6fe036799b05426b026a3d5a46479d03dde14c4ce324f6a6e
+  data.tar.gz: 88cba7649c5199a955ebb83a13b1d9ba7a3942739beb7fb1468e8e889cee21d4
 SHA512:
-  metadata.gz: f4edf261a1f8819f89890b26eb1eb3666e388e771dde67bee0aa70d97d7920a7719493c0786267a6e651744c0a9c62462efa690105d0f7e124b612f386da9d09
-  data.tar.gz: 32423487dc0b9ea6af5d22695785f7d2ba2620b8128d6629f922f93433090d71600c4105ca5a1eecb96640c55699405edb78fea174e8bac46ef3eee1439e36cd
+  metadata.gz: 45485e2fab41bdf3ea56e9633356262da6ee839db6cdfd85d895f7a9adb6b75d59308ba64d1b20d08199a07e26e9ebda9c4eaa69eaa498407b8458e372816a9b
+  data.tar.gz: c1023667792f6eedbf3a0f246c57e9096ef0c33e09e9ac612190593a2bf4dcb5c55edd759f9db197f34f3bd773f5d1cd62a62e1e49e3e5765b6cc230cd83ddc5

data/CHANGELOG.md

@@ -30,6 +30,39 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [2.4.5] - 2026-07-25
+
+- TAG: [v2.4.5][2.4.5t]
+- COVERAGE: 92.40% -- 4096/4433 lines in 38 files
+- BRANCH COVERAGE: 76.57% -- 1598/2087 branches in 38 files
+- 59.16% documented
+
+### Fixed
+
+- `kettle-release` availability validation now uses Bundler's resolver and
+  installer without activating the just-published gem or re-entering the
+  caller's repository bundle.
+
+## [2.4.4] - 2026-07-25
+
+- TAG: [v2.4.4][2.4.4t]
+- COVERAGE: 92.01% -- 4079/4433 lines in 38 files
+- BRANCH COVERAGE: 76.04% -- 1587/2087 branches in 38 files
+- 59.16% documented
+
+### Fixed
+
+- `kettle-release` availability validation now resolves the exact published gem
+  from gem.coop without requiring it, so framework-dependent gems are not
+  mistaken for unavailable releases after RubyGems accepts the push.
+- `kettle-release` now records a candidate as published immediately after the
+  push command succeeds, preventing post-publish validation failures from
+  triggering unpublished-gem local cleanup.
+
+- Legacy-engine GitHub Actions workflows now configure Bundler to mirror
+  gem.coop to RubyGems.org during explicit CI installs, avoiding unsupported
+  gem.coop full-index requests from old Bundler/RubyGems combinations.
+
 ## [2.4.3] - 2026-07-25
 
 - TAG: [v2.4.3][2.4.3t]
@@ -2706,7 +2739,11 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.4.3...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.4.5...HEAD
+[2.4.5]: https://github.com/kettle-dev/kettle-dev/compare/v2.4.4...v2.4.5
+[2.4.5t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.4.5
+[2.4.4]: https://github.com/kettle-dev/kettle-dev/compare/v2.4.3...v2.4.4
+[2.4.4t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.4.4
 [2.4.3]: https://github.com/kettle-dev/kettle-dev/compare/v2.4.2...v2.4.3
 [2.4.3t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.4.3
 [2.4.2]: https://github.com/kettle-dev/kettle-dev/compare/v2.4.1...v2.4.2

data/README.md

@@ -891,7 +891,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.429-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.433-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/release_cli.rb

@@ -388,6 +388,7 @@ module Kettle
             puts "Running release (you may be prompted for signing key password and RubyGems MFA OTP)..."
             with_unpublished_candidate_cleanup do
               run_cmd!("bundle exec rake release")
+              @release_candidate.published = true
               confirm_release_candidate_available!(@release_candidate)
             end
             mark_gem_coop_release_cache_bust(version)
@@ -1192,8 +1193,11 @@ module Kettle
 
         puts "Publishing #{File.basename(gem_path)} to RubyGems without pushing git refs..."
         run_cmd!("gem push #{Shellwords.escape(gem_path)}")
-        confirm_release_candidate_available!(@release_candidate || build_release_candidate(gem_name_from_gem_path(gem_path, version), version))
-        mark_gem_coop_release_cache_bust(version, gem_name: gem_name_from_gem_path(gem_path, version))
+        gem_name = gem_name_from_gem_path(gem_path, version)
+        @release_candidate ||= build_release_candidate(gem_name, version)
+        @release_candidate.published = true
+        confirm_release_candidate_available!(@release_candidate)
+        mark_gem_coop_release_cache_bust(version, gem_name: gem_name)
       end
 
       def build_release_candidate(gem_name, version)
@@ -1320,15 +1324,31 @@ module Kettle
           gem_name = #{candidate.gem_name.dump}
           version = #{candidate.version.dump}
 
-          require "bundler/inline"
-
-          gemfile(true) do
-            source #{RELEASE_VALIDATION_SOURCE.dump}
-            gem gem_name, "= \#{version}"
+          require "bundler"
+          require "pathname"
+
+          Bundler.reset!
+          Bundler.unbundle_env!
+          Bundler.instance_variable_set(:@bundle_path, Pathname.new(Gem.dir))
+          Bundler::SharedHelpers.set_env("BUNDLE_GEMFILE", "Gemfile")
+          Bundler::SharedHelpers.set_env("BUNDLE_LOCKFILE", "Gemfile.lock")
+
+          builder = Bundler::Dsl.new
+          builder.source(#{RELEASE_VALIDATION_SOURCE.dump})
+          builder.gem(gem_name, "= \#{version}", require: false)
+          definition = builder.to_definition(nil, true)
+          definition.validate_runtime!
+
+          Bundler.settings.temporary(deployment: false, frozen: false, inline: true, no_install: false) do
+            installer = Bundler::Installer.install(Bundler.root, definition, system: true)
+            installer.post_install_messages.each do |name, message|
+              warn("Post-install message from \#{name}:\\n\#{message}")
+            end
           end
 
-          spec = Gem.loaded_specs.fetch(gem_name)
-          abort("loaded \#{gem_name} \#{spec.version}, expected \#{version}") unless spec.version.to_s == version
+          spec = definition.specs.find { |candidate| candidate.name == gem_name }
+          abort("resolved no \#{gem_name} spec") unless spec
+          abort("resolved \#{gem_name} \#{spec.version}, expected \#{version}") unless spec.version.to_s == version
           puts "Validated \#{gem_name} \#{version} from #{RELEASE_VALIDATION_SOURCE}"
         RUBY
       end

data/lib/kettle/dev/version.rb

@@ -3,7 +3,7 @@
 module Kettle
   module Dev
     module Version
-      VERSION = "2.4.3"
+      VERSION = "2.4.5"
     end
     VERSION = Version::VERSION # Traditional Constant Location
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 2.4.3
+  version: 2.4.5
 platform: ruby
 authors:
 - Peter H. Boling
@@ -236,7 +236,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.0
+        version: 3.2.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -246,7 +246,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.0
+        version: 3.2.1
 - !ruby/object:Gem::Dependency
   name: stone_checksums
   requirement: !ruby/object:Gem::Requirement
@@ -276,7 +276,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.4
+        version: 2.0.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -286,7 +286,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.4
+        version: 2.0.5
 description: "\U0001F372 Kettle::Dev is a meta tool from kettle-dev to streamline
   development and testing. Acts as a shim dependency, pulling in many other dependencies,
   to give you OOTB productivity with a RubyGem, or Ruby app project. Configures a
@@ -369,10 +369,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.4.3
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.4.3/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.4.5
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.4.5/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.4.3
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.4.5
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev