kettle-dev 2.5.13 → 2.5.14

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 76cf339458385418bcf752559dbb9c6278f3b95ebfa27b26781591564179f263
-  data.tar.gz: 66cae3bfb62ecd922bf2b6ecc16049389a860a20dbaa8492fd6578bdcf3b4922
+  metadata.gz: fd42849120d31c48755d543918cd96ea2abb0f61d550983853ae6827940099f6
+  data.tar.gz: 5bfc7a99f63937031b7999db6d6a35aa9583f7fc3547db425196fb18d3819458
 SHA512:
-  metadata.gz: 0ae8aa5d0113e226dab9dbb332b42328bfe738c84ce88a21d919c3a0249d2ad3f70d905aa4cbd76c903608846da8a485a6e68c710934e7eac2443517d71d6a96
-  data.tar.gz: 4470d0bd47c7c95a616b8513a6b590911a4086e6d6f31330e96c45059774ac4d172a0c98ccf5aad53384208cf40fb02de237c68c6326a430acaf89adfe9a89c2
+  metadata.gz: 91ae2809e3092c93f6feaa5b20f4dbc562497917244f95f388ababfe72403f9af76f924314a561c85dc39f8e0f987ed4d19580675612bb01c117fa1e8f1be58e
+  data.tar.gz: 0c77a71e021fe4657903384d45ecf8da00c136b78bc0a6cb7531ecc584606bb9fa7abd0ad7a683ea844ee6d3a0be59ecfe388c3cdce1dafbf65989a72b4b6063

data/CHANGELOG.md

@@ -30,6 +30,19 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [2.5.14] - 2026-07-31
+
+- TAG: [v2.5.14][2.5.14t]
+- COVERAGE: 91.94% -- 5146/5597 lines in 46 files
+- BRANCH COVERAGE: 76.13% -- 1946/2556 branches in 46 files
+- 50.41% documented
+
+### Fixed
+
+- `kettle-reset release-lockfiles` now requires SHA-256 checksums only for
+  registry-sourced gems, allowing valid Git-sourced dependencies such as the
+  `simplecov` fork to remain checksumless.
+
 ## [2.5.13] - 2026-07-31
 
 - TAG: [v2.5.13][2.5.13t]
@@ -3160,7 +3173,9 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.13...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.14...HEAD
+[2.5.14]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.13...v2.5.14
+[2.5.14t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.5.14
 [2.5.13]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.12...v2.5.13
 [2.5.13t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.5.13
 [2.5.12]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.11...v2.5.12

data/README.md

@@ -1005,7 +1005,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-5.595-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-5.597-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/lockfile_reset.rb

@@ -221,7 +221,7 @@ module Kettle
       end
 
       def empty_registry_checksums(path)
-        path_gems = path_source_gems(path) | path_dependency_gems(path) | self_path_source_gems(path)
+        non_registry_gems = non_registry_source_gems(path) | path_dependency_gems(path)
         in_checksums = false
         entries = File.readlines(path).filter_map.with_index(1) do |line, index|
           stripped = line.strip
@@ -239,7 +239,7 @@ module Kettle
           name = match[1]
           checksum = match[3].to_s
           next unless checksum.empty?
-          next if path_gems.include?(name)
+          next if non_registry_gems.include?(name)
 
           [name, match[2], index]
         end
@@ -282,6 +282,12 @@ module Kettle
         end
       end
 
+      def non_registry_source_gems(path)
+        lockfile_parser(path).specs.each_with_object(Set.new) do |spec, gems|
+          gems << spec.name unless registry_source?(spec.source)
+        end
+      end
+
       def path_dependency_gems(path)
         lockfile_parser(path).dependencies.each_value.each_with_object(Set.new) do |dependency, gems|
           source = dependency.source
@@ -289,12 +295,6 @@ module Kettle
         end
       end
 
-      def self_path_source_gems(path)
-        lockfile_parser(path).specs.each_with_object(Set.new) do |spec, gems|
-          gems << spec.name if self_path_source?(spec.source)
-        end
-      end
-
       def display_path(path)
         Kettle::Dev.display_path(path)
       end
@@ -332,6 +332,10 @@ module Kettle
         source.instance_of?(::Bundler::Source::Path)
       end
 
+      def registry_source?(source)
+        source.instance_of?(::Bundler::Source::Rubygems)
+      end
+
       def self_path_source?(source)
         path_source?(source) && source.path.to_s == "."
       end

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "2.5.13"
+      VERSION = "2.5.14"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 2.5.13
+  version: 2.5.14
 platform: ruby
 authors:
 - Peter H. Boling
@@ -401,10 +401,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.5.13
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.5.13/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.5.14
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.5.14/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.5.13
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.5.14
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev