kettle-dev 3.0.9 → 3.0.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b33eb850afdd492ae8078a8670f93e7f452665f60feed6fe56da0ec7501fb688
-  data.tar.gz: b9e680943a5054b237b7b747ea85af306e428ffc6d39af8b4ec316e1e254aa54
+  metadata.gz: 8705b505fb67483562906f08b0f5b0364b1ca70b29dd280aa43b8d8253462c9c
+  data.tar.gz: b50dcb48986f104a45ca91ede2e689c93b4fba14488a78ab040e2697f74e3800
 SHA512:
-  metadata.gz: 0254c1bd4f95fff49146664b9e2071b213b722c736ef2d196fbefc0480d06900e1494dca631c7f7afaabfeb444b964aca179d2cedfa834225aa11d6c40ac5255
-  data.tar.gz: 30b20f7364cd3e4e5fee5354cee5cb03daabc8219fe3695ae3585dd98695d1102068392a24477e11ca3423d52660206cc8b86c65b1ef50134f74ece81ecd4c75
+  metadata.gz: 8cc4266eb73a959dee5394c22662632d7da905329221b3ac18d12b5b670eab11b96a6228f39a5280423b3fe8b5f1067c5aa8a0982c3306d3bfef85b39d647488
+  data.tar.gz: bc3e6ff554d12422ccdd5c8a3381ca8756020556466afcef1b2fa34a5e54aceba1ba8310348d0dd36927fbd391197b05306a118fb128236518f6828c546c6cbb

checksums.yaml.gz.sig

@@ -1,2 +1,2 @@
-�S���\�������Դ���.oкDaI�Hh���S����w�]�5�<ض�A߹��ot��s¸ŷ���%7cȤ���7�Q>(�r6N���3;9�YŇ\I���%*2K��a�	���Ff7#�����
-��%LEma�6�m:��z���֨��>N�.F�������-b'�طc$�;2ط����pVj&��C����-����
+�?u}N1�������(ĭ
+��3h�

data/CHANGELOG.md

@@ -30,6 +30,32 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [3.0.11] - 2026-08-24
+
+- TAG: [v3.0.11][3.0.11t]
+- COVERAGE: 91.27% -- 5699/6244 lines in 47 files
+- BRANCH COVERAGE: 76.11% -- 2176/2859 branches in 47 files
+- 51.11% documented
+
+### Fixed
+
+- Run release changelog coverage against the registry-backed dependency graph instead of inheriting local templating paths.
+
+- Reset dynamic Bundler parent markers before switching a child process to another Gemfile, so release changelog coverage runs the target project specs.
+
+## [3.0.10] - 2026-08-23
+
+- TAG: [v3.0.10][3.0.10t]
+- COVERAGE: 91.15% -- 5688/6240 lines in 47 files
+- BRANCH COVERAGE: 76.13% -- 2175/2857 branches in 47 files
+- 50.62% documented
+
+### Fixed
+
+- Omit the standalone kettle-changelog dependency from normal release-time Bundler resolution, preventing unpublished downstream gem cycles in monorepo release waves.
+
+- Use a dependency-specific environment switch when omitting kettle-changelog from release Bundler resolution.
+
 ## [3.0.9] - 2026-08-23
 
 - TAG: [v3.0.9][3.0.9t]
@@ -3516,7 +3542,11 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.9...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.11...HEAD
+[3.0.11]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.10...v3.0.11
+[3.0.11t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.11
+[3.0.10]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.9...v3.0.10
+[3.0.10t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.10
 [3.0.9]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.8...v3.0.9
 [3.0.9t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.9
 [3.0.8]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.7...v3.0.8

data/README.md

@@ -463,6 +463,10 @@ What it does:
       variables, known local-template toggles, and writes checksums while
       updating path-sourced and checksum-gap gems back to released registry
       versions.
+    - Release lockfile resets set `KETTLE_DEV_SKIP_CHANGELOG_DEPENDENCY=true`.
+      This does not skip changelog generation; it keeps the development-only
+      `kettle-changelog` gem out of the release bundle so unpublished family
+      gems cannot enter Bundler's resolution graph.
     - During `kettle-release`, release lockfiles are reset before the release
       prep commit. Before pushing, `kettle-release` validates those committed
       lockfiles again; if local paths or checksum gaps reappear, it prints the
@@ -1008,7 +1012,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.237-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.244-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/bundler_env_guard.rb

@@ -12,6 +12,14 @@ module Kettle
         BUNDLER_VERSION
       ].freeze
 
+      # Bundler uses these markers to restore the environment of the parent
+      # bundle. They are not inert when a child explicitly selects another
+      # Gemfile: Bundler can use BUNDLER_ORIG_BUNDLE_GEMFILE to reselect the
+      # parent bundle. Clear the dynamic keys along with RESET_ENV_KEYS.
+      RESET_ENV_PREFIXES = %w[
+        BUNDLER_ORIG_
+      ].freeze
+
       INERT_ENV_KEYS = %w[
         BUNDLE_DEBUG
         BUNDLE_QUIET
@@ -22,16 +30,18 @@ module Kettle
         BUNDLER_DEBUG
       ].freeze
 
-      INERT_ENV_PREFIXES = %w[
-        BUNDLER_ORIG_
-      ].freeze
-
       module_function
 
       def unbundled_env
-        RESET_ENV_KEYS.each_with_object({}) do |key, env|
+        env = RESET_ENV_KEYS.each_with_object({}) do |key, result|
+          result[key] = nil
+        end
+        ENV.each_key do |key|
+          next unless RESET_ENV_PREFIXES.any? { |prefix| key.start_with?(prefix) }
+
           env[key] = nil
         end
+        env
       end
 
       def warn_unexpected_env!(stream: $stderr)
@@ -45,6 +55,7 @@ module Kettle
         )
       end
 
+      # rubocop:disable ThreadSafety/ClassInstanceVariable -- warning state is intentionally shared by module functions.
       def reset_warning_cache!
         @warned_unexpected_env_keys = {}
       end
@@ -56,7 +67,7 @@ module Kettle
       def expected_env_key?(key)
         RESET_ENV_KEYS.include?(key) ||
           INERT_ENV_KEYS.include?(key) ||
-          INERT_ENV_PREFIXES.any? { |prefix| key.start_with?(prefix) }
+          RESET_ENV_PREFIXES.any? { |prefix| key.start_with?(prefix) }
       end
 
       def warned_unexpected_env?(keys)
@@ -67,6 +78,7 @@ module Kettle
         @warned_unexpected_env_keys[signature] = true
         false
       end
+      # rubocop:enable ThreadSafety/ClassInstanceVariable
     end
   end
 end

data/lib/kettle/dev/lockfile_reset.rb

@@ -34,18 +34,31 @@ module Kettle
         @release_platforms = {}
       end
 
-      def reset(target)
+      def reset(target, skip_changelog_dependency: false)
         BundlerEnvGuard.warn_unexpected_env!
         paths = lockfile_paths_for(target)
         force_full_update = release_lockfiles_target?(target)
+        skip_changelog_dependency ||= force_full_update
         platforms = release_platforms_for(paths) if force_full_update
         uninstall_unreleased_local_gems(paths) if force_full_update
         paths.each do |path|
-          reset_lockfile!(path, full_update: force_full_update, platforms: platforms&.fetch(path)) if force_full_update || normalization_needed?(path)
+          if force_full_update || normalization_needed?(path)
+            reset_lockfile!(
+              path,
+              full_update: force_full_update,
+              platforms: platforms&.fetch(path),
+              skip_changelog_dependency: skip_changelog_dependency
+            )
+          end
         end
         if force_full_update && uninstall_unreleased_local_gems(paths)
           paths.each do |path|
-            reset_lockfile!(path, full_update: true, platforms: platforms.fetch(path))
+            reset_lockfile!(
+              path,
+              full_update: true,
+              platforms: platforms.fetch(path),
+              skip_changelog_dependency: skip_changelog_dependency
+            )
           end
         end
         diagnostics = paths.flat_map { |path| diagnostics(path) }
@@ -54,7 +67,7 @@ module Kettle
         paths
       end
 
-      def reset_lockfile!(path, full_update: false, platforms: nil)
+      def reset_lockfile!(path, full_update: false, platforms: nil, skip_changelog_dependency: false)
         gemfile = gemfile_for_lockfile(path)
         unless gemfile && File.file?(gemfile)
           warn("Cannot reset #{display_path(path)} because its Gemfile was not found.")
@@ -67,6 +80,7 @@ module Kettle
             gemfile: gemfile,
             full_update: full_update,
             platforms: platforms,
+            skip_changelog_dependency: skip_changelog_dependency,
             isolated_gem_home: gem_home
           )
           if full_update || has_local_path_remote?(path)
@@ -77,7 +91,7 @@ module Kettle
         end
       end
 
-      def reset_command(path:, gemfile:, full_update: false, platforms: nil, isolated_gem_home: nil)
+      def reset_command(path:, gemfile:, full_update: false, platforms: nil, skip_changelog_dependency: false, isolated_gem_home: nil)
         update_gems = (full_update || has_local_path_remote?(path)) ? [] : reset_update_gems(path)
         platforms ||= reset_platforms(path)
         removed_platforms = full_update ? [] : lockfile_platforms(path) - platforms
@@ -85,6 +99,7 @@ module Kettle
           "BUNDLE_GEMFILE" => gemfile,
           "BUNDLE_LOCKFILE" => path
         )
+        env["KETTLE_DEV_SKIP_CHANGELOG_DEPENDENCY"] = "true" if skip_changelog_dependency
         if isolated_gem_home
           env["GEM_HOME"] = isolated_gem_home
           env["GEM_PATH"] = isolated_gem_home

data/lib/kettle/dev/release_cli.rb

@@ -689,7 +689,10 @@ module Kettle
           emit_release_lockfile_event(action: "reset", status: "started", stage: stage, attempt: attempt, attempts: attempts)
           puts "Resetting release lockfiles with local path dependencies disabled #{stage} (attempt #{attempt}/#{attempts})..."
           begin
-            lockfile_reset.reset(Kettle::Dev::LockfileReset::RELEASE_LOCKFILES_TARGET)
+            lockfile_reset.reset(
+              Kettle::Dev::LockfileReset::RELEASE_LOCKFILES_TARGET,
+              skip_changelog_dependency: true
+            )
             emit_release_lockfile_event(action: "reset", status: "ok", stage: stage, attempt: attempt, attempts: attempts)
             break
           rescue Kettle::Dev::Error => error
@@ -775,7 +778,7 @@ module Kettle
       end
 
       def normalize_release_lockfile!(path)
-        lockfile_reset.reset_lockfile!(path)
+        lockfile_reset.reset_lockfile!(path, skip_changelog_dependency: true)
       end
 
       def release_gemfile_for_lockfile(path)
@@ -783,7 +786,7 @@ module Kettle
       end
 
       def release_lockfile_normalization_env
-        lockfile_reset.normalization_env
+        lockfile_reset.normalization_env.merge("KETTLE_DEV_SKIP_CHANGELOG_DEPENDENCY" => "true")
       end
 
       def release_lockfile_diagnostics(path)
@@ -899,7 +902,10 @@ module Kettle
         escaped_gemfile = Shellwords.escape(gemfile)
         command = +"env -u BUNDLE_GEMFILE -u BUNDLE_LOCKFILE"
         if (local_root = release_changelog_local_root)
-          command << " KETTLE_DEV_DEV=false KETTLE_CHANGELOG_DEV_ROOT=#{Shellwords.escape(local_root)}"
+          # Changelog coverage runs before the release lockfile reset. Keep it
+          # on the registry-backed release graph instead of reintroducing local
+          # sibling paths through the inherited templating switch.
+          command << " KETTLE_DEV_DEV=false K_JEM_TEMPLATING=false KETTLE_CHANGELOG_DEV_ROOT=#{Shellwords.escape(local_root)}"
         end
         command << " BUNDLE_GEMFILE=#{escaped_gemfile} bundle exec kettle-changelog"
         command

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "3.0.9"
+      VERSION = "3.0.11"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 3.0.9
+  version: 3.0.11
 platform: ruby
 authors:
 - Peter H. Boling
@@ -400,10 +400,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.0.9
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.0.9/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.0.11
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.0.11/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.0.9
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.0.11
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev