kettle-dev 2.5.23 → 2.5.25

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8cbc4ccc1b515712256e0a659fe1937aa2a048c634baf362025df8c93ddcdce3
-  data.tar.gz: 2a5d0c842d5c8e6c553b838aedfd9cf97a790432ca93f0ba26c0fd672fcfd9a0
+  metadata.gz: 56ce68001beed714f8b15c44336ffe111f1509dfffd9a7063b1bb50f0580fc08
+  data.tar.gz: 3088a81db9f6327c55fe9113f45be1768f734d2c8b05cfd0c5a55080450de63f
 SHA512:
-  metadata.gz: b265f73cfdb533146904a2330fb46623fe65cd4156c2d56b540b847351b80fa66f592273b2a5934f0bb3c1e7552c79100026cbe12369cddc11d6b2d60c7dd72e
-  data.tar.gz: 00ae01426ee619205e2d1b8c3db4c92f3a5c858641d94736e94afe42b89569b9949a57a6e014f708af937ee9a2146f54ea9a5a0b3460d4c40f025df4d3f8e558
+  metadata.gz: e9ad45713716d0583fc83e302ea574a67a7855757efc7abf9de24764abd5d66388056677a74a6fbf67a6d05894b4e7edb813c8e9919ddcdb61b03ed694bd70e2
+  data.tar.gz: 7aa96f4e87ddb6e6b0d41b19e43c56229cca35dbf470313b50f15c6a35124e4e171383c666766ad6a9a937bf3cc6d496df9be5dd71213647ebb2768937852b8f

data/CHANGELOG.md

@@ -30,6 +30,34 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [2.5.25] - 2026-08-07
+
+- TAG: [v2.5.25][2.5.25t]
+- COVERAGE: 91.48% -- 5465/5974 lines in 47 files
+- BRANCH COVERAGE: 75.95% -- 2059/2711 branches in 47 files
+- 50.90% documented
+
+### Fixed
+
+- Select the most recent GitHub Actions build when multiple runs exist for the same commit.
+
+## [2.5.24] - 2026-08-07
+
+- TAG: [v2.5.24][2.5.24t]
+- COVERAGE: 91.79% -- 5480/5970 lines in 47 files
+- BRANCH COVERAGE: 76.12% -- 2065/2713 branches in 47 files
+- 50.90% documented
+
+### Added
+
+- GitHub releases can include published gem and checksum artifacts.
+
+### Fixed
+
+- Allow family orchestration to suppress per-member GitHub releases for monorepo release trains.
+
+- Preserve successful GitHub release creation when the API response has no asset payload.
+
 ## [2.5.23] - 2026-08-07
 
 - TAG: [v2.5.23][2.5.23t]
@@ -3307,7 +3335,11 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.23...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.25...HEAD
+[2.5.25]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.24...v2.5.25
+[2.5.25t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.5.25
+[2.5.24]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.23...v2.5.24
+[2.5.24t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.5.24
 [2.5.23]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.22...v2.5.23
 [2.5.23t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.5.23
 [2.5.22]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.21...v2.5.22

data/README.md

@@ -1007,7 +1007,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-5.947-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-5.974-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/exe/kettle-gh-release

@@ -39,7 +39,7 @@ end
 # Do not guard with __FILE__ == $PROGRAM_NAME because binstubs use Kernel.load.
 if ARGV.include?("-h") || ARGV.include?("--help")
   puts <<~USAGE
-    Usage: #{script_basename} [--release-version VERSION|version=<VERSION>] [--check|--update] [--events] [--allow-unpublished]
+    Usage: #{script_basename} [--release-version VERSION|version=<VERSION>] [--asset PATH ...] [--check|--update] [--events] [--allow-unpublished]
 
     Creates a GitHub release for a gem version.
 
@@ -54,6 +54,7 @@ if ARGV.include?("-h") || ARGV.include?("--help")
       --update                    # Update an existing GitHub Release title/body from CHANGELOG.md
       --events                    # Emit the final result as one NDJSON event
       --allow-unpublished         # Skip the RubyGems publication requirement (for intentionally non-RubyGems projects)
+      --asset PATH                # Attach an artifact to the GitHub release (repeatable)
 
     Environment:
       GITHUB_TOKEN / GH_TOKEN     # Required; needs repo:public_repo (classic) or contents:write scope
@@ -75,6 +76,16 @@ if check_only && update_only
 end
 events = ARGV.delete("--events")
 allow_unpublished = ARGV.delete("--allow-unpublished")
+assets = []
+while (index = ARGV.index("--asset"))
+  asset = ARGV[index + 1].to_s.strip
+  if asset.empty?
+    warn("#{script_basename}: --asset requires a path")
+    exit 1
+  end
+  assets << asset
+  ARGV.slice!(index, 2)
+end
 version_arg = ARGV.find { |arg| arg.start_with?("version=") }
 ARGV.delete(version_arg) if version_arg
 explicit_version = version_arg&.split("=", 2)&.last&.strip
@@ -127,7 +138,7 @@ begin
   created, message = if update_only
     cli.send(:maybe_update_github_release!, version)
   else
-    cli.send(:maybe_create_github_release!, version)
+    cli.send(:maybe_create_github_release!, version, assets: assets)
   end
   if events
     puts JSON.generate(

data/lib/kettle/dev/ci_helpers.rb

@@ -106,14 +106,14 @@ module Kettle
         # Scope to the exact commit SHA when available to avoid picking up a previous run on the same branch.
         sha = head_sha || current_head_sha
         data = github_get_json(
-          "https://api.github.com/repos/#{owner}/#{repo}/actions/workflows/#{workflow_file}/runs?branch=#{URI.encode_www_form_component(b)}&per_page=5",
+          "https://api.github.com/repos/#{owner}/#{repo}/actions/workflows/#{workflow_file}/runs?branch=#{URI.encode_www_form_component(b)}&per_page=100",
           token: token
         )
         return unless data
 
         runs = Array(data["workflow_runs"]) || []
-        # Try to match by head_sha first; GitHub may return a cancelled duplicate
-        # before the replacement run created by workflow concurrency.
+        # Match by head_sha first. There may be multiple builds for one commit;
+        # always select the most recent build rather than trusting API order.
         run = if sha
           match = preferred_head_run(runs.select { |r| r["head_sha"] == sha })
           match ||= latest_repository_workflow_run(owner: owner, repo: repo, workflow_file: workflow_file, branch: b, head_sha: sha, token: token)
@@ -150,11 +150,17 @@ module Kettle
         )
       end
 
-      # Concurrency cancellation can leave an older run for the exact same
-      # commit ahead of its replacement in GitHub's API response. Prefer the
-      # replacement so a cancelled duplicate cannot mask a valid run.
+      # GitHub can return multiple builds for the same commit, including an
+      # older failed run before a later retry. Select by run recency so an old
+      # conclusion cannot mask the newest build. `updated_at` also matters for
+      # reruns, which retain the original run's creation timestamp.
       def preferred_head_run(runs)
-        runs.find { |run| run["conclusion"] != "cancelled" } || runs.first
+        runs.max_by do |run|
+          created_at = run["created_at"].to_s
+          updated_at = run["updated_at"].to_s
+          effective_at = [created_at, updated_at].max
+          [effective_at, run["run_number"].to_i, run["run_attempt"].to_i, run["id"].to_i]
+        end
       end
 
       def github_get_json(url, token:)

data/lib/kettle/dev/release_cli.rb

@@ -2355,7 +2355,12 @@ module Kettle
       # If GITHUB_TOKEN is present, create a GitHub release for the given version tag.
       # Title: v<version>
       # Body: the CHANGELOG section for this version, followed by the two link references for this version.
-      def maybe_create_github_release!(version)
+      def maybe_create_github_release!(version, assets: [])
+        if truthy_value?(ENV["KETTLE_RELEASE_SKIP_GITHUB_RELEASE"])
+          message = "GitHub release creation disabled for this release context"
+          puts "Skipping GitHub release creation: #{message}."
+          return [true, message]
+        end
         token = github_token
         if token.empty?
           message = "GITHUB_TOKEN or GH_TOKEN is not set; skipping GitHub release creation. Set a token with repo:public_repo (classic) or contents:write scope."
@@ -2390,7 +2395,7 @@ module Kettle
 
         tag = "v#{version}"
         puts "Creating GitHub release #{owner}/#{repo} #{tag}..."
-        ok, msg = github_create_release(owner: owner, repo: repo, token: token, tag: tag, title: tag, body: body)
+        ok, msg = github_create_release(owner: owner, repo: repo, token: token, tag: tag, title: tag, body: body, assets: assets)
         if ok
           puts "GitHub release created for #{tag}."
         else
@@ -2543,7 +2548,7 @@ module Kettle
 
       # POST to GitHub Releases API
       # Returns [ok(Boolean), message(String)]
-      def github_create_release(owner:, repo:, token:, tag:, title:, body:)
+      def github_create_release(owner:, repo:, token:, tag:, title:, body:, assets: [])
         uri = URI("https://api.github.com/repos/#{owner}/#{repo}/releases")
         req = Net::HTTP::Post.new(uri)
         req["Accept"] = "application/vnd.github+json"
@@ -2563,7 +2568,12 @@ module Kettle
 
         case res
         when Net::HTTPSuccess, Net::HTTPCreated
-          [true, "created"]
+          return [true, "created"] if Array(assets).empty?
+
+          release = JSON.parse(res.body)
+          asset_messages = Array(assets).map { |asset| github_upload_release_asset(release.fetch("id"), owner: owner, repo: repo, token: token, path: asset) }
+          failed_asset = asset_messages.find { |ok, _message| !ok }
+          failed_asset || [true, "created with #{asset_messages.length} assets"]
         else
           # If release already exists, treat as non-fatal
           if res.code.to_s == "422" && res.body.to_s.include?("already_exists")
@@ -2576,6 +2586,26 @@ module Kettle
         [false, "#{e.class}: #{e.message}"]
       end
 
+      def github_upload_release_asset(release_id, owner:, repo:, token:, path:)
+        path = File.expand_path(path)
+        return [false, "asset does not exist: #{path}"] unless File.file?(path)
+
+        uri = URI("https://uploads.github.com/repos/#{owner}/#{repo}/releases/#{release_id}/assets")
+        uri.query = URI.encode_www_form(name: File.basename(path))
+        req = Net::HTTP::Post.new(uri)
+        req["Accept"] = "application/vnd.github+json"
+        req["Authorization"] = "token #{token}"
+        req["Content-Type"] = "application/octet-stream"
+        req["User-Agent"] = "kettle-dev-release-cli"
+        req.body = File.binread(path)
+        res = Net::HTTP.start(uri.host, uri.port, use_ssl: true) { |http| http.request(req) }
+        return [true, File.basename(path)] if res.is_a?(Net::HTTPSuccess) || res.is_a?(Net::HTTPCreated)
+
+        [false, "asset #{File.basename(path)}: HTTP #{res.code}: #{res.body}"]
+      rescue => e
+        [false, "asset #{File.basename(path)}: #{e.class}: #{e.message}"]
+      end
+
       def github_update_release(owner:, repo:, token:, tag:, title:, body:)
         lookup = URI("https://api.github.com/repos/#{owner}/#{repo}/releases/tags/#{tag}")
         get = Net::HTTP::Get.new(lookup)

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "2.5.23"
+      VERSION = "2.5.25"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

data.tar.gz.sig

@@ -1,3 +1,4 @@
-#�*�Z:����7ݪ�
-6��s�˦��B�l`�۳���0݋�*��4�F��4^���-w����-)���P%dq`�
yu{e_���
��\�)��oq�S�g�v
 �tSN�R.�4ǑO{��"����u����R�i%C\Z�-B���VN�&�Lj�,2��9!�B��y�����ʹ�3��~rW�cn�/l���	WM
-�gT�5W����ЄH��Wn��:�B��/�2��~�>�������GX�%��$�|�I��i�PZ�_����8弲�2��wC���nf��o9O�c5����1�7�D+ۉl�D�
+bL+�^L/�
+ݼ�,��y/�I�
��k�^�;�j,3]��-�z�p���E�I��5�P�ҝ�o�12^�1I���E�oi~/C����CH��Q������T
��8�Q�Y�z�
+�����ޖ��j-w��ϯ���ܙe��B�����r��™�v
+�R6"\���@~.cf�|���c�)���=��

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 2.5.23
+  version: 2.5.25
 platform: ruby
 authors:
 - Peter H. Boling
@@ -402,10 +402,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.5.23
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.5.23/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.5.25
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.5.25/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.5.23
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.5.25
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev