kettle-dev 3.1.13 → 3.1.14

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fee58bbb5088875b1370305934e2816bc7b1f7ad5103776d7877f7bfb8383bd2
-  data.tar.gz: 75dd9745eda2bd54c6dcf1a9a5ae9bf8b36fdfcb2edd2e8a3c26ab3bde366aa6
+  metadata.gz: f91c0c4ef8cfb88983835109c778d084a739a78ed4cfc83318be404cd2ba9eee
+  data.tar.gz: c16964dc845379bc31fa3106af5567d950d00a2a2741bb79e50f816235420f41
 SHA512:
-  metadata.gz: e21b6253a77ecf67f42b54a464405baa078615cc99585f1146f432135f347f5fc0e7c4044137841f3da5f589486fc3971cd8b5dbe6285bf1f194de9b7bbd8359
-  data.tar.gz: 0dd4e28b43e6d4ba4ae3481d0464fbeb8b1c7aa39ae1628f0fc9c2ce80fe9d850a738d62414ceda91f6daf43887ee4b400c6621df7b5b1c473bfaa934ade7941
+  metadata.gz: 7b9d783784e66864cd733aa63abdfb15161b93224b81bd8d5db9a2a2dc71cd3ca45ef1bd87f389895b9ef3e78d2d7c3432b4ea78ef176e70c3e6936eac9e5ce7
+  data.tar.gz: a7fb4dedb0aeb325ffca2a717e0700ae2d37a73ef38bde1006bfd5b8926bf6b6d9ebedefbe45400ba885c1aaa523db229854b6a0f0174a42ca0229ce5b47d925

data/CHANGELOG.md

@@ -30,6 +30,42 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [3.1.14] - 2026-10-16
+
+- TAG: [v3.1.14][3.1.14t]
+- COVERAGE: 91.81% -- 5671/6177 lines in 47 files
+- BRANCH COVERAGE: 75.74% -- 2173/2869 branches in 47 files
+- 53.23% documented
+
+### Changed
+
+- [kc] kettle-jem/prepare: updated 5 project files:
+  - dependencies (5)
+
+- [kc] kettle-jem/template: updated 3 project files:
+  - code and tests (2)
+  - other (1)
+
+- ReleaseSecretsDoctor accepts an injectable provider_factory (defaulting to ReleaseSecrets::Factory) so provider construction can be faked without mocks; RSpec stubs do not cross the thread boundary the thread shape spawns, which let a real 1Password lookup escape during specs
+
+### Deprecated
+
+- [kc] kettle-changelog-transition-deprecation: Kettle::Dev::ChangelogCLI and Kettle::Dev::ChangelogEntryAdder: the transition classes retained after the kettle-changelog extraction now warn on load and will be removed in kettle-dev 4.0; use Kettle::Changelog::CLI / Kettle::Changelog::EntryAdder from the kettle-changelog gem instead. Behavior coverage lives in the extracted gem suite, and both files are excluded from this gem coverage tracking via simplecov:disable until removal
+
+### Fixed
+
+- Sync kettle-gha-pins CLI check-mode output spec with the full fix hint shipped in kettle-gha-pins 0.3.18: the recommended fix is now the copy-paste chain kettle-gha-pins --commit --push --upgrade <level> followed by the resume-command continuation line
+
+- Slim gha_sha_pins_cli_spec to the kettle-dev-owned surface (alias identity + LoadError fallback); the 900 lines of CLI behavior coverage duplicated kettle-gha-pins own suite and only went red in this repo when a release-time bundle re-resolution picked up a newer kettle-gha-pins
+
+- Cover ReleaseSecretsDoctor same-process and thread shapes, the keepalive pulse loop, and OTP lookup, restoring line coverage above the 91 percent floor in the slim release-time coverage bundle after the deprecated changelog transition classes were excluded from tracking
+
+- Spec suite can no longer trigger real 1Password authorization prompts: a globally included with-mocked-release-secrets shared context stubs ReleaseSecrets::Factory.build to the no-op base Provider, with :real_release_secrets as the opt-out tag for provider-construction specs; thread-shape doctor specs now use plain thread-safe fakes via the injected factory
+
+- Deflake GitHub-release specs on TruffleRuby: the Net::HTTP.start cardinality assertions are engine-fragile under WebMock (the start call can be recorded twice on the truffleruby lane), so they now assert at_least(:once); the request-level POST assertions carry the real contract
+
+- Keepalive pulse spec no longer depends on real-time sleep precision: the monotonic clock is stubbed to advance 5ms per read, making the loop deterministic (the real-clock version flaked on macOS CI when a 5ms sleep overshot the 20ms deadline and zero pulses ran)
+
 ## [3.1.13] - 2026-10-14
 
 - TAG: [v3.1.13][3.1.13t]
@@ -4094,7 +4130,9 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.13...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.14...HEAD
+[3.1.14]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.13...v3.1.14
+[3.1.14t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.14
 [3.1.13]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.12...v3.1.13
 [3.1.13t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.13
 [3.1.12]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.11...v3.1.12

data/README.md

@@ -1084,7 +1084,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-7.022-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.177-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/changelog_cli.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+# simplecov:disable -- deprecated transition class, removal in kettle-dev 4.0; behavior coverage lives in the kettle-changelog gem
+
 require "open3"
 require "json"
 require "net/http"
@@ -8,6 +10,8 @@ require "fileutils"
 require "yaml"
 require "kettle/ndjson"
 
+warn("Kettle::Dev::ChangelogCLI is deprecated and will be removed in kettle-dev 4.0; use Kettle::Changelog::CLI from the kettle-changelog gem instead")
+
 module Kettle
   module Dev
     # CLI for updating CHANGELOG.md with new version sections

data/lib/kettle/dev/changelog_entry_adder.rb

@@ -1,5 +1,9 @@
 # frozen_string_literal: true
 
+# simplecov:disable -- deprecated transition class, removal in kettle-dev 4.0; behavior coverage lives in the kettle-changelog gem
+
+warn("Kettle::Dev::ChangelogEntryAdder is deprecated and will be removed in kettle-dev 4.0; use Kettle::Changelog::EntryAdder from the kettle-changelog gem instead")
+
 module Kettle
   module Dev
     class ChangelogEntryAdder

data/lib/kettle/dev/release_secrets_doctor.rb

@@ -34,11 +34,12 @@ module Kettle
         }
       end
 
-      def initialize(options:, program_name:, output: $stdout, system_runner: Kernel)
+      def initialize(options:, program_name:, output: $stdout, system_runner: Kernel, provider_factory: Kettle::Dev::ReleaseSecrets::Factory)
         @options = normalize_options(options)
         @program_name = program_name
         @output = output
         @system_runner = system_runner
+        @provider_factory = provider_factory
       end
 
       def run
@@ -85,7 +86,7 @@ module Kettle
 
       private
 
-      attr_reader :options, :program_name, :output, :system_runner
+      attr_reader :options, :program_name, :output, :system_runner, :provider_factory
 
       def normalize_options(raw_options)
         {
@@ -98,7 +99,7 @@ module Kettle
       end
 
       def provider_for(current_options)
-        Kettle::Dev::ReleaseSecrets::Factory.build(provider_name: current_options.fetch(:provider))
+        provider_factory.build(provider_name: current_options.fetch(:provider))
       end
 
       def run_same_process(current_options)

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "3.1.13"
+      VERSION = "3.1.14"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 3.1.13
+  version: 3.1.14
 platform: ruby
 authors:
 - Peter H. Boling
@@ -60,7 +60,7 @@ dependencies:
         version: '0.3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.3.17
+        version: 0.3.18
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -70,7 +70,7 @@ dependencies:
         version: '0.3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.3.17
+        version: 0.3.18
 - !ruby/object:Gem::Dependency
   name: kettle-ndjson
   requirement: !ruby/object:Gem::Requirement
@@ -80,7 +80,7 @@ dependencies:
         version: '0.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.1.19
+        version: 0.1.20
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -90,7 +90,7 @@ dependencies:
         version: '0.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.1.19
+        version: 0.1.20
 - !ruby/object:Gem::Dependency
   name: kettle-rb
   requirement: !ruby/object:Gem::Requirement
@@ -100,7 +100,7 @@ dependencies:
         version: '0.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.1.17
+        version: 0.1.18
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -110,7 +110,7 @@ dependencies:
         version: '0.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.1.17
+        version: 0.1.18
 - !ruby/object:Gem::Dependency
   name: kettle-test
   requirement: !ruby/object:Gem::Requirement
@@ -120,7 +120,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.25
+        version: 2.0.27
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -130,7 +130,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.25
+        version: 2.0.27
 - !ruby/object:Gem::Dependency
   name: ruby-progressbar
   requirement: !ruby/object:Gem::Requirement
@@ -273,20 +273,20 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.2'
+        version: '4.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.17
+        version: 4.0.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.2'
+        version: '4.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.17
+        version: 4.0.0
 - !ruby/object:Gem::Dependency
   name: stone_checksums
   requirement: !ruby/object:Gem::Requirement
@@ -422,10 +422,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.1.13
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.1.13/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.1.14
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.1.14/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.1.13
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.1.14
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev