kettle-dev 3.0.11 → 3.0.12

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8705b505fb67483562906f08b0f5b0364b1ca70b29dd280aa43b8d8253462c9c
-  data.tar.gz: b50dcb48986f104a45ca91ede2e689c93b4fba14488a78ab040e2697f74e3800
+  metadata.gz: 778a9528095541a29e4c6a15022c1fe312cf32ccb8f336972c046b02134bae32
+  data.tar.gz: bcc27b14726e3f17ad56b4e305e324c4ccb38df57df754f5f41b73e121f33a41
 SHA512:
-  metadata.gz: 8cc4266eb73a959dee5394c22662632d7da905329221b3ac18d12b5b670eab11b96a6228f39a5280423b3fe8b5f1067c5aa8a0982c3306d3bfef85b39d647488
-  data.tar.gz: bc3e6ff554d12422ccdd5c8a3381ca8756020556466afcef1b2fa34a5e54aceba1ba8310348d0dd36927fbd391197b05306a118fb128236518f6828c546c6cbb
+  metadata.gz: 4f4b916aeb6714071d76ab84ae57e08650e42fe0607df2e7b366855932c66019ad3f8a2ba37befa0089b9261eb38092ab3bc33cce61237b0d9880139da3399de
+  data.tar.gz: 238a0802ae743f219f919a9fbdd2d1500aeea06ad8a756e5e377c4bc8c275e0d80bf07911f9a78b94e0095e9809afbb8eaeb9f98d9ee2e6db72242cfc2aa5fd9

data/CHANGELOG.md

@@ -30,6 +30,21 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [3.0.12] - 2026-08-25
+
+- TAG: [v3.0.12][3.0.12t]
+- COVERAGE: 91.48% -- 5754/6290 lines in 47 files
+- BRANCH COVERAGE: 76.34% -- 2207/2891 branches in 47 files
+- 50.74% documented
+
+### Changed
+
+- Expose shared lockfile section inspection primitives for family release validation.
+
+### Fixed
+
+- Skip unresolved Kettle-Jem template image URLs during pre-release validation.
+
 ## [3.0.11] - 2026-08-24
 
 - TAG: [v3.0.11][3.0.11t]
@@ -3542,7 +3557,9 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.11...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.12...HEAD
+[3.0.12]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.11...v3.0.12
+[3.0.12t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.12
 [3.0.11]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.10...v3.0.11
 [3.0.11t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.11
 [3.0.10]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.9...v3.0.10

data/README.md

@@ -635,10 +635,12 @@ versions that are newer than the latest released version.
 - Checks:
     - 1) Validate GitHub Actions workflow action refs with `kettle-gha-sha-pins --check`; if pins are stale, it prints an outdated-actions summary, exits non-zero, and recommends `kettle-gha-sha-pins --write --upgrade patch`.
     - 2) Normalize Markdown image URLs.
-    - 3) Validate that all image URLs referenced by Markdown files resolve (HTTP HEAD).
+    - 3) Validate Markdown references and local heading targets.
+    - 4) Validate that all image URLs referenced by Markdown files resolve (HTTP HEAD).
 - Image URL skips:
     - Star-history image API URLs are skipped by default because they are volatile.
-    - Add project-specific shell-style URL patterns in `.kettle-family.yml` or a config path pointed to by `KETTLE_FAMILY_CONFIG`:
+    - Unresolved Kettle-Jem template tokens are skipped because they are not URLs until templating completes.
+    - Add project-specific shell-style URL patterns in `.kettle-family.yml` or a config path pointed to by `KETTLE_FAMILY_CONFIG`. `kettle-family` passes this path through when it orchestrates a member release, but `kettle-dev` owns the matching and validation:
         ```yaml
         pre_release:
           image_url_skip_patterns:
@@ -1012,7 +1014,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.244-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.290-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/lockfile_reset.rb

@@ -28,6 +28,84 @@ module Kettle
         RUBYOPT
       ]).freeze
 
+      class << self
+        def local_path_remote_lines_from_source(lockfile_source)
+          in_path = false
+          lockfile_source.each_line.with_index(1).filter_map do |line, index|
+            stripped = line.strip
+            if stripped.match?(/\A[A-Z][A-Z ]*\z/)
+              in_path = stripped == "PATH"
+              next
+            end
+            next unless in_path
+            next unless stripped.start_with?("remote:")
+            next if stripped == "remote: ."
+            next unless stripped.start_with?("remote: /", "remote: ./", "remote: ../")
+
+            index
+          end
+        end
+
+        def checksum_entries_from_source(lockfile_source)
+          in_checksums = false
+          entries = {}
+          lockfile_source.each_line do |line|
+            stripped = line.chomp
+            if stripped == "CHECKSUMS"
+              in_checksums = true
+              next
+            end
+            next unless in_checksums
+            break if !stripped.empty? && stripped == stripped.upcase && !stripped.start_with?(" ")
+            next unless stripped.start_with?("  ")
+
+            parsed = parse_lockfile_spec_line(stripped)
+            entries[[parsed.fetch(:name), parsed.fetch(:version)]] = parsed.fetch(:suffix) if parsed
+          end
+          in_checksums ? entries : nil
+        end
+
+        def gem_specs_from_source(lockfile_source)
+          in_gem = false
+          in_specs = false
+          specs = []
+          lockfile_source.each_line do |line|
+            stripped = line.chomp
+            if stripped == "GEM"
+              in_gem = true
+              in_specs = false
+              next
+            end
+            next unless in_gem
+            break if !stripped.empty? && stripped == stripped.upcase && !stripped.start_with?(" ")
+
+            if stripped == "  specs:"
+              in_specs = true
+              next
+            end
+            next unless in_specs
+            next unless line.start_with?("    ") && !line.start_with?("      ")
+
+            parsed = parse_lockfile_spec_line(stripped)
+            specs << [parsed.fetch(:name), parsed.fetch(:version)] if parsed
+          end
+          specs.uniq
+        end
+
+        private
+
+        def parse_lockfile_spec_line(line)
+          stripped = line.to_s.strip
+          return nil if stripped.empty? || !stripped.include?(" (")
+
+          name, remainder = stripped.split(" (", 2)
+          version, suffix = remainder.to_s.split(")", 2)
+          return nil if name.to_s.empty? || version.to_s.empty?
+
+          {name: name, version: version, suffix: suffix.to_s.strip}
+        end
+      end
+
       def initialize(root:, command_runner:)
         @root = root
         @command_runner = command_runner
@@ -248,20 +326,7 @@ module Kettle
       end
 
       def local_path_remote_lines(path)
-        in_path = false
-        File.readlines(path).filter_map.with_index(1) do |line, index|
-          stripped = line.strip
-          if stripped.match?(/\A[A-Z][A-Z ]*\z/)
-            in_path = stripped == "PATH"
-            next
-          end
-          next unless in_path
-          next unless stripped.start_with?("remote:")
-          next if stripped == "remote: ."
-          next unless stripped.start_with?("remote: /", "remote: ./", "remote: ../")
-
-          index
-        end
+        self.class.local_path_remote_lines_from_source(File.read(path))
       end
 
       def empty_registry_checksums(path)

data/lib/kettle/dev/pre_release_cli.rb

@@ -511,6 +511,9 @@ module Kettle
       end
 
       def configured_image_url_skip_patterns
+        # Keep generic release safety in kettle-dev. Family-specific patterns
+        # are optional policy loaded from the family config when present, so a
+        # standalone kettle-release remains complete without kettle-family.
         DEFAULT_IMAGE_URL_SKIP_PATTERNS + family_configured_image_url_skip_patterns
       end
 
@@ -539,6 +542,10 @@ module Kettle
       end
 
       def image_url_skipped?(url)
+        # Unresolved Kettle-Jem tokens are valid in template source files and
+        # are not real URLs until templating. This rule must live here because
+        # direct kettle-dev releases do not run through kettle-family.
+        return true if url.to_s.include?("{KJ|")
         return true if github_actions_badge_for_local_workflow?(url)
 
         @image_url_skip_patterns.any? do |pattern|

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "3.0.11"
+      VERSION = "3.0.12"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 3.0.11
+  version: 3.0.12
 platform: ruby
 authors:
 - Peter H. Boling
@@ -400,10 +400,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.0.11
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.0.11/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.0.12
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.0.12/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.0.11
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.0.12
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev