kettle-dev 2.5.9 → 2.5.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 23c696ff4ebd7064e8fae5f30844abd9b4fd6566f254be26c5628cd54ef9bf46
-  data.tar.gz: 60daed8f719b7056eeb8516c3a68589ec596a2e901bb95f1b2c76da4b5c12e1e
+  metadata.gz: f2c0c759c751e79d77e5cf8495f9c461d514d0b120c97cd95b4ae7222afe7f0c
+  data.tar.gz: 95f799d83838660c1fa6200fe4783368a59456f1e8c6221bfdccff0eb967cecf
 SHA512:
-  metadata.gz: 509a2a71828e6a12f0cab95e6268a52f7a98398d796e94ed8ca6863d464f616f4dd3cc39eefbdfd4536ce049167b88831edb89127a0b5596c7b635d5f24d758a
-  data.tar.gz: 8ca534f658b7f5a81ae0ca955ef02a8a54cf9e0d7cd3f3d9449c40cbfb7d47ca16802a65d14ecab574cbc30d7b66c22da0a28dd93d9eaace98c85b9347c82e12
+  metadata.gz: 6e95a43755c42b2cf9e45e6d5df069aa0fd5cea4291aeae0ef9f9020a43eed84959a7c734bf8dbd0f719f9d78f6b3f135399cddb9374b616e74abbdb200c6017
+  data.tar.gz: 9bee1f5843526fc154502c909c0144c4440da1610611d6eaf9ef23a4d7f72386071e420cbe267b0ce08d0a82c59abe094b990c85e0d2a813077ab08fe8a147ec

checksums.yaml.gz.sig

@@ -1,5 +1 @@
-ԑu�����O�<�1�֞�H�X�Jr�t��Fu�1���E*+�-��A�4:���AlO�E~Q�<���j��Cm/�����̼��$����Z,��$8����Z-�N�_���ٔ�I�ѯ�Ȣ[-n蠞�p����
��"Cd�]�W� �9y~�
-ƩZ*�ĸ��=#:����;�
-il��a�Aʧ*��S��HC\�񖊤#ڮZ�fF��Xj>���s�����L�����	dͭ�s�'��ϲ�9�ɸ>�v��
-\�zʼn��s��}�բMp�Xe•G[�|�`�9�0�	�	H��S=���1�d�
-5J��A��iF�W@�QEhs���Ne�+�ϯ�k��5*��tQ%��L���Y� �\x�=�`�\��1
+j�H]��=�����1`�Q�T9��=u��4*ia.o;�������80>�4�nP^��Jm�r��M��]*���W�N�����FT.�<*-�P�ݴ�DUm	�`��{ܲ�Tjd�ZH���mS�?B.����|�9D-�lK��*0�f"���/e��HFC��K�-bw]��Rɐ'58?�d���#�;���
��t���b�2E�܃B��!��d�V���Xw����,)ޑsL݆�lhUnP�PƏh<���`ɒ~W�3��޴�T�HjW;���&0�����)٨���Q)0xS�q�FP�s]O��"n#G|�S����

data/CHANGELOG.md

@@ -30,6 +30,39 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [2.5.11] - 2026-07-30
+
+- TAG: [v2.5.11][2.5.11t]
+- COVERAGE: 91.66% -- 4756/5189 lines in 44 files
+- BRANCH COVERAGE: 76.03% -- 1802/2370 branches in 44 files
+- 53.78% documented
+
+### Fixed
+
+- RubyGems version lookups now share the 30-day local version-response cache
+  used by dependency floor checks, so release-state and changelog generation can
+  survive transient RubyGems API failures for untouched gems while still
+  refreshing recently released gems.
+- RubyGems release-state cache-bust markers now stay fresh for 30 days after
+  `kettle-release` publishes a gem, so downstream tooling can selectively
+  refresh recently released gems without refreshing untouched gems.
+
+## [2.5.10] - 2026-07-30
+
+- TAG: [v2.5.10][2.5.10t]
+- COVERAGE: 92.12% -- 4737/5142 lines in 44 files
+- BRANCH COVERAGE: 76.41% -- 1785/2336 branches in 44 files
+- 54.41% documented
+
+### Fixed
+
+- `kettle-changelog` coverage generation now clears inherited Bundler
+  environment before running the coverage-root bundle, avoiding member bundle
+  leakage in shared monorepo release changelogs.
+- `kettle-changelog` coverage generation now carries `PATH` into its cleaned
+  subprocess environment so the selected coverage-root bundle executable can be
+  resolved without inheriting Bundler state.
+
 ## [2.5.9] - 2026-07-30
 
 - TAG: [v2.5.9][2.5.9t]
@@ -3044,7 +3077,11 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.9...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.11...HEAD
+[2.5.11]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.10...v2.5.11
+[2.5.11t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.5.11
+[2.5.10]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.9...v2.5.10
+[2.5.10t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.5.10
 [2.5.9]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.8...v2.5.9
 [2.5.9t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.5.9
 [2.5.8]: https://github.com/kettle-dev/kettle-dev/compare/v2.5.7...v2.5.8

data/README.md

@@ -1005,7 +1005,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-5.142-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-5.189-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/changelog_cli.rb

@@ -740,13 +740,15 @@ module Kettle
       end
 
       def changelog_coverage_env
-        env = {
+        env = BundlerEnvGuard.unbundled_env.merge(
+          "PATH" => ENV.fetch("PATH", ""),
+          "RUBYOPT" => nil,
           "K_SOUP_COV_DO" => "true",
           "K_SOUP_COV_FORMATTERS" => "json",
           "K_SOUP_COV_MIN_HARD" => @enforce_coverage_thresholds ? "true" : "false",
           "K_SOUP_COV_MULTI_FORMATTERS" => "false",
           "K_SOUP_COV_OPEN_BIN" => ""
-        }
+        )
         gemfile = File.join(@coverage_root, "Gemfile")
         env["BUNDLE_GEMFILE"] = gemfile if File.file?(gemfile)
         env

data/lib/kettle/dev/ruby_gems_versions.rb

@@ -8,14 +8,24 @@ require "uri"
 
 module Kettle
   module Dev
+    class Error < StandardError; end unless const_defined?(:Error, false)
+    ENV_TRUE_RE = /\A(1|true|y|yes)\z/i unless const_defined?(:ENV_TRUE_RE, false)
+
     module RubyGemsVersions
-      CACHE_BUST_TTL_SECONDS = 15 * 60
+      CACHE_BUST_TTL_SECONDS = 30 * 24 * 60 * 60
+      VERSION_CACHE_TTL_SECONDS = 30 * 24 * 60 * 60
       ENV_REFRESH = "KETTLE_RUBYGEMS_REFRESH"
       ENV_MARKER_PATH = "KETTLE_RUBYGEMS_CACHE_BUST_PATH"
+      ENV_VERSION_CACHE_PATH = "KETTLE_RUBYGEMS_VERSION_CACHE_PATH"
+      ENV_LEGACY_VERSION_CACHE_PATH = "KETTLE_JEM_DEPS_FLOOR_CACHE"
 
       class << self
         def fetch(gem_name, version_hint: nil, refresh: false)
-          cache_bust = refresh || env_refresh? || fresh_release_marker?(gem_name, version_hint)
+          name = gem_name.to_s
+          cached = cached_versions(name)
+          cache_bust = refresh || env_refresh? || fresh_release_marker?(name, version_hint)
+          return cached if cached && !cache_bust
+
           uri = versions_uri(gem_name, cache_bust: cache_bust)
           request = Net::HTTP::Get.new(uri)
           if cache_bust
@@ -25,9 +35,15 @@ module Kettle
           response = Net::HTTP.start(uri.host, uri.port, use_ssl: uri.scheme == "https") do |http|
             http.request(request)
           end
-          return nil unless response.is_a?(Net::HTTPSuccess)
+          return cached unless response.is_a?(Net::HTTPSuccess)
+
+          data = JSON.parse(response.body)
+          write_versions(name, data) if data.is_a?(Array)
+          data
+        rescue => error
+          return cached if cached
 
-          JSON.parse(response.body)
+          raise error
         end
 
         def mark_released(gem_name, version)
@@ -55,6 +71,20 @@ module Kettle
           File.join(state_home, "kettle-dev", "rubygems-cache-bust.json")
         end
 
+        def version_cache_path
+          configured = ENV.fetch(ENV_VERSION_CACHE_PATH, "").to_s
+          return "" if configured.match?(/\A(?:false|0|no|off|disabled)\z/i)
+          return configured unless configured.empty?
+
+          legacy_configured = ENV.fetch(ENV_LEGACY_VERSION_CACHE_PATH, "").to_s
+          return "" if legacy_configured.match?(/\A(?:false|0|no|off|disabled)\z/i)
+          return legacy_configured unless legacy_configured.empty?
+
+          cache_home = ENV["XDG_CACHE_HOME"]
+          cache_home = File.join(Dir.home, ".cache") if cache_home.to_s.empty?
+          File.join(cache_home, "kettle-jem", "deps-floor-rubygems-versions.json")
+        end
+
         private
 
         def versions_uri(gem_name, cache_bust:)
@@ -86,6 +116,49 @@ module Kettle
         def env_refresh?
           ENV.fetch(ENV_REFRESH, "").match?(Kettle::Dev::ENV_TRUE_RE)
         end
+
+        def cached_versions(gem_name)
+          path = version_cache_path
+          return nil if path.empty?
+
+          entry = read_version_cache(path).fetch("versions", {})[gem_name]
+          return nil unless entry.is_a?(Hash)
+          return nil unless fresh_version_cache_entry?(entry)
+
+          Array(entry["entries"])
+        end
+
+        def write_versions(gem_name, entries)
+          path = version_cache_path
+          return if path.empty?
+
+          data = read_version_cache(path)
+          data["versions"] ||= {}
+          data["versions"][gem_name] = {
+            "cached_at" => Time.now.utc.iso8601,
+            "entries" => entries
+          }
+          FileUtils.mkdir_p(File.dirname(path))
+          File.write(path, JSON.pretty_generate(data) << "\n")
+        rescue => error
+          warn("[kettle-dev] could not update RubyGems.org version cache: #{error.class}: #{error.message}") if Kettle::Dev::DEBUGGING
+        end
+
+        def read_version_cache(path)
+          return {} unless File.file?(path)
+
+          parsed = JSON.parse(File.read(path))
+          parsed.is_a?(Hash) ? parsed : {}
+        rescue JSON::ParserError
+          {}
+        end
+
+        def fresh_version_cache_entry?(entry)
+          cached_at = Time.iso8601(entry["cached_at"].to_s)
+          cached_at >= Time.now.utc - VERSION_CACHE_TTL_SECONDS
+        rescue ArgumentError
+          false
+        end
       end
     end
   end

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "2.5.9"
+      VERSION = "2.5.11"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 2.5.9
+  version: 2.5.11
 platform: ruby
 authors:
 - Peter H. Boling
@@ -397,10 +397,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.5.9
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.5.9/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.5.11
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.5.11/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.5.9
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.5.11
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev