kettle-dev 3.0.28 → 3.0.30

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dda94d3be88afd70177ebf10e5272e19ade1b64468e8c44479145949382a954f
-  data.tar.gz: cc4a9f69fef74faad9f592909bfdc58caf913c6a7e3f52fde4a70101840b47ed
+  metadata.gz: d32d5afad3273769c6866465e43835b68691702c67e7de114aa0c641e5ba98e4
+  data.tar.gz: 182991a2de8eb82855285724435c3430a2dd52759838efbf11543061eb4336b4
 SHA512:
-  metadata.gz: b8c9a7f9b079a7c040dd025ff7093bcf74ac30a37163b32a5460353bf1d1c4cf4a0cff964f14d11eb126343e8d5eb8ef3413e580eb33605d850f23863e25639c
-  data.tar.gz: 7da28d9024ac1c4ae381ae97d6331ee21eb1bda66b720ba09c6d7af5eaf8fcd973cc98eeead7b9710884f056c63a7a981ffd6423ec4389aebbf4bc9a1a2fbf70
+  metadata.gz: 29ad4b57bc12dc971e7132a46c52a6c33492838673d53f35c4dafb7a30c915383002365ab65fc7cf0350e35a5d8bb35ce0764c2cc33913f859c9fad49e9b467a
+  data.tar.gz: 82ab1755611b6d7f645ab573554f18030766a76a07f93e8e2a9af866ec2eadb2b36426d104142de457ca6af26b4eb05df4516978a77b19de2209057de315f508

data/CHANGELOG.md

@@ -30,6 +30,32 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [3.0.30] - 2026-09-01
+
+- TAG: [v3.0.30][3.0.30t]
+- COVERAGE: 91.68% -- 6038/6586 lines in 47 files
+- BRANCH COVERAGE: 76.31% -- 2310/3027 branches in 47 files
+- 50.00% documented
+
+### Fixed
+
+- Add an isolated family-member publish mode for concurrent monorepo releases.
+
+- Add serialized family-member checksum finalization for concurrent monorepo releases.
+
+## [3.0.29] - 2026-09-01
+
+- TAG: [v3.0.29][3.0.29t]
+- COVERAGE: 91.58% -- 6003/6555 lines in 47 files
+- BRANCH COVERAGE: 76.25% -- 2302/3019 branches in 47 files
+- 50.24% documented
+
+### Fixed
+
+- Install bootstrap gems required by statically evaluated Gemfiles before isolated release lockfile resolution.
+
+- Ignore inactive nested Gemfile bootstrap requirements when their appraisal lockfile does not include the bootstrap gem.
+
 ## [3.0.28] - 2026-09-01
 
 - TAG: [v3.0.28][3.0.28t]
@@ -3773,7 +3799,11 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.28...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.30...HEAD
+[3.0.30]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.29...v3.0.30
+[3.0.30t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.30
+[3.0.29]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.28...v3.0.29
+[3.0.29t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.29
 [3.0.28]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.27...v3.0.28
 [3.0.28t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.28
 [3.0.27]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.26...v3.0.27

data/README.md

@@ -1066,7 +1066,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.542-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.586-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/lockfile_reset.rb

@@ -476,14 +476,18 @@ module Kettle
         end
       end
 
-      # Bundler evaluates a Gemfile before it resolves the gems declared in it.
-      # Install only direct, literal bootstrap requires into the reset sandbox so
-      # unrelated gems from the invoking Ruby cannot influence resolution.
+      # Bundler evaluates a Gemfile and its static eval_gemfile inputs before it
+      # resolves declared gems. Install only literal bootstrap requires into the
+      # reset sandbox so unrelated gems from the invoking Ruby cannot influence
+      # resolution.
       def install_gemfile_bootstrap_gems!(gemfile:, lockfile:, gem_home:)
-        gemfile_bootstrap_gem_names(gemfile).each do |name|
+        gemfile_bootstrap_gems(gemfile).each do |name, required_by_root_gemfile|
           version = locked_registry_gem_version(lockfile, name)
           source_url = registry_source_urls(lockfile).first
-          unless version && source_url
+          needs_install = required_by_root_gemfile || (version && source_url)
+          next unless needs_install
+
+          if !version || !source_url
             raise Error, "Cannot isolate Gemfile bootstrap #{name.inspect}: #{display_path(lockfile)} does not lock it from a registry source"
           end
 
@@ -491,9 +495,27 @@ module Kettle
         end
       end
 
-      def gemfile_bootstrap_gem_names(gemfile)
-        calls = require_calls_from_ripper(Ripper.sexp(File.read(gemfile)))
-        calls.filter_map { |method_name, argument| bootstrap_gem_name(method_name, argument) }.uniq
+      def gemfile_bootstrap_gems(gemfile)
+        gemfile_source_paths(gemfile).each_with_index.each_with_object({}) do |(path, index), gems|
+          calls = require_calls_from_ripper(Ripper.sexp(File.read(path)))
+          calls.filter_map { |method_name, argument| bootstrap_gem_name(method_name, argument) }.each do |name|
+            gems[name] = gems.fetch(name, false) || index.zero?
+          end
+        end
+      end
+
+      def gemfile_source_paths(gemfile, seen = Set.new)
+        path = File.expand_path(gemfile)
+        return [] if seen.include?(path) || !File.file?(path)
+
+        seen << path
+        calls = require_calls_from_ripper(Ripper.sexp(File.read(path)))
+        nested_paths = calls.filter_map do |method_name, argument|
+          next unless method_name == "eval_gemfile" && argument
+
+          File.expand_path(argument, File.dirname(path))
+        end
+        [path, *nested_paths.flat_map { |nested_path| gemfile_source_paths(nested_path, seen) }]
       end
 
       def require_calls_from_ripper(node, calls = [])

data/lib/kettle/dev/release_cli.rb

@@ -69,6 +69,8 @@ module Kettle
       ].freeze
       DEBUG_TRUE_VALUES = %w[1 true yes on].freeze
       RELEASE_VALIDATION_SOURCE = "https://gem.coop"
+      FAMILY_MEMBER_PUBLISH_MODE_ENV = "KETTLE_RELEASE_FAMILY_MEMBER_PUBLISH"
+      FAMILY_MEMBER_FINALIZE_MODE_ENV = "KETTLE_RELEASE_FAMILY_MEMBER_FINALIZE"
 
       class << self
         def run_cmd!(cmd)
@@ -223,6 +225,8 @@ module Kettle
         @finished_report = nil
         @changelog_generated_coverage = false
         @release_task_lockfile_paths = {}
+        @family_member_publish = truthy_value?(ENV[FAMILY_MEMBER_PUBLISH_MODE_ENV])
+        @family_member_finalize = truthy_value?(ENV[FAMILY_MEMBER_FINALIZE_MODE_ENV])
       end
 
       def run
@@ -255,6 +259,9 @@ module Kettle
       attr_reader :finished_report
 
       def run_with_release_environment
+        return run_family_member_publish if family_member_publish?
+        return run_family_member_finalize if family_member_finalize?
+
         # Changelog generation at step 0 runs the target project's test bundle
         # to collect coverage. Normalize its canonical release lockfile before
         # that subprocess starts; otherwise a local development PATH lock can
@@ -605,6 +612,41 @@ module Kettle
         @skip_bundle_audit
       end
 
+      # Kettle Family uses this mode only after it has prepared and validated
+      # the shared monorepo release commit. A member may build and publish its
+      # gem, but it must never alter the shared Git repository or release it.
+      def family_member_publish?
+        @family_member_publish
+      end
+
+      def family_member_finalize?
+        @family_member_finalize
+      end
+
+      def run_family_member_publish
+        version = detect_version
+        prepare_release_lockfiles_for_release_tasks!
+        ensure_signing_setup_or_skip!
+        ensure_release_secrets_ready_for_signing! if signing_enabled? && release_secrets_configured?
+        run_cmd!(release_project_command("bundle exec rake build"))
+
+        gem_name = detect_gem_name
+        @release_candidate = build_release_candidate(gem_name, version)
+        with_unpublished_candidate_cleanup { publish_built_gem!(version) }
+        human_output.puts "\n🚀 Published #{gem_name} v#{version} from family member mode 🚀"
+      end
+
+      # Kettle Family invokes this serially in the primary checkout after
+      # concurrent member publication. bin/gem_checksums owns its checksum
+      # commit; the family owns the one shared tag, pushes, and GitHub Release.
+      def run_family_member_finalize
+        version = detect_version
+        gem_path = checksum_gem_path_for_version!(version)
+        run_cmd!(release_child_command("bin/gem_checksums #{Shellwords.escape(gem_path)}"))
+        validate_checksums!(version, stage: "after family member publish")
+        human_output.puts "\n🔒 Finalized checksums for #{detect_gem_name} v#{version} from family member mode 🔒"
+      end
+
       def truthy_value?(value)
         return true if value == true
 
@@ -1868,6 +1910,15 @@ module Kettle
           abort("Failed to create local tag #{tag}.") unless @git.tag_annotated(tag, tag)
         end
 
+        publish_built_gem!(version)
+      end
+
+      def publish_built_gem!(version)
+        gem_path = gem_file_for_version(version)
+        unless gem_path && File.file?(gem_path)
+          abort("Unable to locate built gem for version #{version} in pkg/. Did the build succeed?")
+        end
+
         puts "Publishing #{File.basename(gem_path)} to RubyGems without pushing git refs..."
         run_cmd!("gem push #{Shellwords.escape(gem_path)}")
         gem_name = gem_name_from_gem_path(gem_path, version)

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "3.0.28"
+      VERSION = "3.0.30"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 3.0.28
+  version: 3.0.30
 platform: ruby
 authors:
 - Peter H. Boling
@@ -400,10 +400,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.0.28
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.0.28/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.0.30
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.0.30/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.0.28
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.0.30
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev