kettle-dev 3.0.10 → 3.0.12

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1e670b2a9da64f848886da0112d47c757607895c073ae8e0063583f9893c05a8
-  data.tar.gz: 9c395946450a91ee862b55922a1f5bf9bce6208c700098093d7c6050c535488b
+  metadata.gz: 778a9528095541a29e4c6a15022c1fe312cf32ccb8f336972c046b02134bae32
+  data.tar.gz: bcc27b14726e3f17ad56b4e305e324c4ccb38df57df754f5f41b73e121f33a41
 SHA512:
-  metadata.gz: a9fd3e50a9f6315eec633c43dabd4447f0d2507e6b74ad9b17b3eb03497d4194895c65aa56010098e9a229e01115b4e0d3c1b3beefbaad26c76f4a6862e883c9
-  data.tar.gz: e493aa3febc35c6840001eca3b7f7ec127784b83c57e42feac1ab791a0aaac272e9094fb4589c18ba5e7e98cafb9d3fc256f059147c06f23f687768cb8191e52
+  metadata.gz: 4f4b916aeb6714071d76ab84ae57e08650e42fe0607df2e7b366855932c66019ad3f8a2ba37befa0089b9261eb38092ab3bc33cce61237b0d9880139da3399de
+  data.tar.gz: 238a0802ae743f219f919a9fbdd2d1500aeea06ad8a756e5e377c4bc8c275e0d80bf07911f9a78b94e0095e9809afbb8eaeb9f98d9ee2e6db72242cfc2aa5fd9

data/CHANGELOG.md

@@ -30,6 +30,34 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [3.0.12] - 2026-08-25
+
+- TAG: [v3.0.12][3.0.12t]
+- COVERAGE: 91.48% -- 5754/6290 lines in 47 files
+- BRANCH COVERAGE: 76.34% -- 2207/2891 branches in 47 files
+- 50.74% documented
+
+### Changed
+
+- Expose shared lockfile section inspection primitives for family release validation.
+
+### Fixed
+
+- Skip unresolved Kettle-Jem template image URLs during pre-release validation.
+
+## [3.0.11] - 2026-08-24
+
+- TAG: [v3.0.11][3.0.11t]
+- COVERAGE: 91.27% -- 5699/6244 lines in 47 files
+- BRANCH COVERAGE: 76.11% -- 2176/2859 branches in 47 files
+- 51.11% documented
+
+### Fixed
+
+- Run release changelog coverage against the registry-backed dependency graph instead of inheriting local templating paths.
+
+- Reset dynamic Bundler parent markers before switching a child process to another Gemfile, so release changelog coverage runs the target project specs.
+
 ## [3.0.10] - 2026-08-23
 
 - TAG: [v3.0.10][3.0.10t]
@@ -3529,7 +3557,11 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.10...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.12...HEAD
+[3.0.12]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.11...v3.0.12
+[3.0.12t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.12
+[3.0.11]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.10...v3.0.11
+[3.0.11t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.11
 [3.0.10]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.9...v3.0.10
 [3.0.10t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.10
 [3.0.9]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.8...v3.0.9

data/README.md

@@ -635,10 +635,12 @@ versions that are newer than the latest released version.
 - Checks:
     - 1) Validate GitHub Actions workflow action refs with `kettle-gha-sha-pins --check`; if pins are stale, it prints an outdated-actions summary, exits non-zero, and recommends `kettle-gha-sha-pins --write --upgrade patch`.
     - 2) Normalize Markdown image URLs.
-    - 3) Validate that all image URLs referenced by Markdown files resolve (HTTP HEAD).
+    - 3) Validate Markdown references and local heading targets.
+    - 4) Validate that all image URLs referenced by Markdown files resolve (HTTP HEAD).
 - Image URL skips:
     - Star-history image API URLs are skipped by default because they are volatile.
-    - Add project-specific shell-style URL patterns in `.kettle-family.yml` or a config path pointed to by `KETTLE_FAMILY_CONFIG`:
+    - Unresolved Kettle-Jem template tokens are skipped because they are not URLs until templating completes.
+    - Add project-specific shell-style URL patterns in `.kettle-family.yml` or a config path pointed to by `KETTLE_FAMILY_CONFIG`. `kettle-family` passes this path through when it orchestrates a member release, but `kettle-dev` owns the matching and validation:
         ```yaml
         pre_release:
           image_url_skip_patterns:
@@ -1012,7 +1014,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.240-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.290-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/bundler_env_guard.rb

@@ -12,6 +12,14 @@ module Kettle
         BUNDLER_VERSION
       ].freeze
 
+      # Bundler uses these markers to restore the environment of the parent
+      # bundle. They are not inert when a child explicitly selects another
+      # Gemfile: Bundler can use BUNDLER_ORIG_BUNDLE_GEMFILE to reselect the
+      # parent bundle. Clear the dynamic keys along with RESET_ENV_KEYS.
+      RESET_ENV_PREFIXES = %w[
+        BUNDLER_ORIG_
+      ].freeze
+
       INERT_ENV_KEYS = %w[
         BUNDLE_DEBUG
         BUNDLE_QUIET
@@ -22,16 +30,18 @@ module Kettle
         BUNDLER_DEBUG
       ].freeze
 
-      INERT_ENV_PREFIXES = %w[
-        BUNDLER_ORIG_
-      ].freeze
-
       module_function
 
       def unbundled_env
-        RESET_ENV_KEYS.each_with_object({}) do |key, env|
+        env = RESET_ENV_KEYS.each_with_object({}) do |key, result|
+          result[key] = nil
+        end
+        ENV.each_key do |key|
+          next unless RESET_ENV_PREFIXES.any? { |prefix| key.start_with?(prefix) }
+
           env[key] = nil
         end
+        env
       end
 
       def warn_unexpected_env!(stream: $stderr)
@@ -45,6 +55,7 @@ module Kettle
         )
       end
 
+      # rubocop:disable ThreadSafety/ClassInstanceVariable -- warning state is intentionally shared by module functions.
       def reset_warning_cache!
         @warned_unexpected_env_keys = {}
       end
@@ -56,7 +67,7 @@ module Kettle
       def expected_env_key?(key)
         RESET_ENV_KEYS.include?(key) ||
           INERT_ENV_KEYS.include?(key) ||
-          INERT_ENV_PREFIXES.any? { |prefix| key.start_with?(prefix) }
+          RESET_ENV_PREFIXES.any? { |prefix| key.start_with?(prefix) }
       end
 
       def warned_unexpected_env?(keys)
@@ -67,6 +78,7 @@ module Kettle
         @warned_unexpected_env_keys[signature] = true
         false
       end
+      # rubocop:enable ThreadSafety/ClassInstanceVariable
     end
   end
 end

data/lib/kettle/dev/lockfile_reset.rb

@@ -28,6 +28,84 @@ module Kettle
         RUBYOPT
       ]).freeze
 
+      class << self
+        def local_path_remote_lines_from_source(lockfile_source)
+          in_path = false
+          lockfile_source.each_line.with_index(1).filter_map do |line, index|
+            stripped = line.strip
+            if stripped.match?(/\A[A-Z][A-Z ]*\z/)
+              in_path = stripped == "PATH"
+              next
+            end
+            next unless in_path
+            next unless stripped.start_with?("remote:")
+            next if stripped == "remote: ."
+            next unless stripped.start_with?("remote: /", "remote: ./", "remote: ../")
+
+            index
+          end
+        end
+
+        def checksum_entries_from_source(lockfile_source)
+          in_checksums = false
+          entries = {}
+          lockfile_source.each_line do |line|
+            stripped = line.chomp
+            if stripped == "CHECKSUMS"
+              in_checksums = true
+              next
+            end
+            next unless in_checksums
+            break if !stripped.empty? && stripped == stripped.upcase && !stripped.start_with?(" ")
+            next unless stripped.start_with?("  ")
+
+            parsed = parse_lockfile_spec_line(stripped)
+            entries[[parsed.fetch(:name), parsed.fetch(:version)]] = parsed.fetch(:suffix) if parsed
+          end
+          in_checksums ? entries : nil
+        end
+
+        def gem_specs_from_source(lockfile_source)
+          in_gem = false
+          in_specs = false
+          specs = []
+          lockfile_source.each_line do |line|
+            stripped = line.chomp
+            if stripped == "GEM"
+              in_gem = true
+              in_specs = false
+              next
+            end
+            next unless in_gem
+            break if !stripped.empty? && stripped == stripped.upcase && !stripped.start_with?(" ")
+
+            if stripped == "  specs:"
+              in_specs = true
+              next
+            end
+            next unless in_specs
+            next unless line.start_with?("    ") && !line.start_with?("      ")
+
+            parsed = parse_lockfile_spec_line(stripped)
+            specs << [parsed.fetch(:name), parsed.fetch(:version)] if parsed
+          end
+          specs.uniq
+        end
+
+        private
+
+        def parse_lockfile_spec_line(line)
+          stripped = line.to_s.strip
+          return nil if stripped.empty? || !stripped.include?(" (")
+
+          name, remainder = stripped.split(" (", 2)
+          version, suffix = remainder.to_s.split(")", 2)
+          return nil if name.to_s.empty? || version.to_s.empty?
+
+          {name: name, version: version, suffix: suffix.to_s.strip}
+        end
+      end
+
       def initialize(root:, command_runner:)
         @root = root
         @command_runner = command_runner
@@ -248,20 +326,7 @@ module Kettle
       end
 
       def local_path_remote_lines(path)
-        in_path = false
-        File.readlines(path).filter_map.with_index(1) do |line, index|
-          stripped = line.strip
-          if stripped.match?(/\A[A-Z][A-Z ]*\z/)
-            in_path = stripped == "PATH"
-            next
-          end
-          next unless in_path
-          next unless stripped.start_with?("remote:")
-          next if stripped == "remote: ."
-          next unless stripped.start_with?("remote: /", "remote: ./", "remote: ../")
-
-          index
-        end
+        self.class.local_path_remote_lines_from_source(File.read(path))
       end
 
       def empty_registry_checksums(path)

data/lib/kettle/dev/pre_release_cli.rb

@@ -511,6 +511,9 @@ module Kettle
       end
 
       def configured_image_url_skip_patterns
+        # Keep generic release safety in kettle-dev. Family-specific patterns
+        # are optional policy loaded from the family config when present, so a
+        # standalone kettle-release remains complete without kettle-family.
         DEFAULT_IMAGE_URL_SKIP_PATTERNS + family_configured_image_url_skip_patterns
       end
 
@@ -539,6 +542,10 @@ module Kettle
       end
 
       def image_url_skipped?(url)
+        # Unresolved Kettle-Jem tokens are valid in template source files and
+        # are not real URLs until templating. This rule must live here because
+        # direct kettle-dev releases do not run through kettle-family.
+        return true if url.to_s.include?("{KJ|")
         return true if github_actions_badge_for_local_workflow?(url)
 
         @image_url_skip_patterns.any? do |pattern|

data/lib/kettle/dev/release_cli.rb

@@ -902,7 +902,10 @@ module Kettle
         escaped_gemfile = Shellwords.escape(gemfile)
         command = +"env -u BUNDLE_GEMFILE -u BUNDLE_LOCKFILE"
         if (local_root = release_changelog_local_root)
-          command << " KETTLE_DEV_DEV=false KETTLE_CHANGELOG_DEV_ROOT=#{Shellwords.escape(local_root)}"
+          # Changelog coverage runs before the release lockfile reset. Keep it
+          # on the registry-backed release graph instead of reintroducing local
+          # sibling paths through the inherited templating switch.
+          command << " KETTLE_DEV_DEV=false K_JEM_TEMPLATING=false KETTLE_CHANGELOG_DEV_ROOT=#{Shellwords.escape(local_root)}"
         end
         command << " BUNDLE_GEMFILE=#{escaped_gemfile} bundle exec kettle-changelog"
         command

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "3.0.10"
+      VERSION = "3.0.12"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 3.0.10
+  version: 3.0.12
 platform: ruby
 authors:
 - Peter H. Boling
@@ -400,10 +400,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.0.10
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.0.10/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.0.12
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.0.12/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.0.10
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.0.12
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev