kettle-dev 3.1.15 → 3.1.17

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a92c25418ab7487a902fd03260cf2c457e2d156c09f2ec9ec426998fd7a31729
-  data.tar.gz: 437b8e39726ba9a2ed4990b38217dcb1336f48eeb504e5edff13009601febc8e
+  metadata.gz: 7509713aebd3dc8b2dfce4e04399bd8a004fdf0ab9d128b9147a3060e183fa7c
+  data.tar.gz: 06d242cd7e431a629f278b3ca28f4f6347bc40561056381ccd712886cf6ea48d
 SHA512:
-  metadata.gz: ce6778cb2d3676ef46727327a08f464a6c664cec8e6d1c472ed6ef283c4e8e8d132a6b1a36012597efaf392d22785c2c559b07c107c13eb2fba142a4f21255ed
-  data.tar.gz: 8ff9fc510de127537b010179d6f67548e2df8a0b72c76e7ab1a680d9417aeb16c2f98eda05ef532b51c9604a85b98dbe03d1678220e89ea65982dd2e0e538297
+  metadata.gz: 4659485434c16e16fcddd290cfb9afb233f1b5f9e60adc4c2dc933d951ce49f324b27763189b80f8bf2004ceed4dfbb713fc9f73301da040c3f891391d53a754
+  data.tar.gz: ddf71af290de3619c7bb48e296bb41501a01e2bb5defdcf999e51c8126cd3a41471efbb413d537cc91c9236dfafbaf0c50459fdda92019cff8850748aacf161d

data/CHANGELOG.md

@@ -30,6 +30,28 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [3.1.17] - 2026-10-18
+
+- TAG: [v3.1.17][3.1.17t]
+- COVERAGE: 91.84% -- 5761/6273 lines in 48 files
+- BRANCH COVERAGE: 75.75% -- 2212/2920 branches in 48 files
+- 53.60% documented
+
+### Fixed
+
+- Family member publish materializes the release task lockfile before building: run_family_member_publish now runs the same normalize guard as the step 14/15 build entry points, so the BUNDLE_LOCKFILE snapshot copied from the committed Gemfile.lock is bundle-installed before rake build. Without it, a monorepo member build failed with: Could not find tool-old-version in locally installed gems, when the committed lockfile pinned an older release-tool resolution than the boot environment.
+
+## [3.1.16] - 2026-10-18
+
+- TAG: [v3.1.16][3.1.16t]
+- COVERAGE: 91.33% -- 5728/6272 lines in 48 files
+- BRANCH COVERAGE: 75.41% -- 2202/2920 branches in 48 files
+- 53.60% documented
+
+### Fixed
+
+- kettle-release surfaces spec failures instead of a bare exit status: kettle-changelog commands now stream output while retaining the last 30 lines, and a failure abort appends an OUTPUT tail, so a failed coverage suite reads as a spec failure in the release summary. BundlerPinning.installed_stable also reads bundler gemspecs from disk under every Gem.path: under bundle exec the spec index is scoped to the active bundle, so a lockfile that pinned a prerelease bundler (4.1.0.betaN) hid every stable version and broke update-bundler/bupb and normalize lockfiles.
+
 ## [3.1.15] - 2026-10-16
 
 - TAG: [v3.1.15][3.1.15t]
@@ -4145,7 +4167,11 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.15...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.17...HEAD
+[3.1.17]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.16...v3.1.17
+[3.1.17t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.17
+[3.1.16]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.15...v3.1.16
+[3.1.16t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.16
 [3.1.15]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.14...v3.1.15
 [3.1.15t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.15
 [3.1.14]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.13...v3.1.14

data/README.md

@@ -1084,7 +1084,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.249-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.273-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/bundler_pinning.rb

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
+require "bundler"
 require "rubygems/dependency_installer"
 
 module Kettle
@@ -21,9 +22,25 @@ module Kettle
       # Newest stable Bundler installed locally. Consults BOTH sources —
       # the activated spec and every installed spec — because bundler/setup
       # scoping can hide one from the other depending on how the process booted.
+      #
+      # The spec index itself is not enough: under `bundle exec`, Bundler
+      # replaces the index with the ACTIVE BUNDLE's specs, so a lockfile that
+      # pinned a prerelease (the 4.1.0.betaN reinfection vector) makes this
+      # lookup see only that prerelease and wrongly report "no stable bundler".
+      # The gemspec files on disk are read directly from every Gem.path to
+      # escape that scoping.
       def installed_stable
         active = Gem.loaded_specs["bundler"]&.version
         versions = Gem::Specification.find_all_by_name("bundler").map(&:version)
+        Array(Gem.path).each do |base|
+          Dir.glob(File.join(base, "specifications", "bundler-*.gemspec")).each do |path|
+            begin
+              versions << Gem::Version.new(File.basename(path, ".gemspec").delete_prefix("bundler-"))
+            rescue ArgumentError
+              nil
+            end
+          end
+        end
         versions.push(active) if active
         versions.reject(&:prerelease?).max
       end

data/lib/kettle/dev/release_cli.rb

@@ -91,8 +91,20 @@ module Kettle
           # so they inherit the current TTY and can read the user's input.
           interactive_words = effective_command_words(cmd)
           interactive = interactive_words.first(4) == ["bundle", "exec", "rake", "release"] ||
-            interactive_words.first(2) == ["gem", "push"] ||
-            interactive_words.first(2) == ["bundle", "exec"] && interactive_words[2] == "kettle-changelog"
+            interactive_words.first(2) == ["gem", "push"]
+          if interactive_words.first(3) == ["bundle", "exec", "kettle-changelog"]
+            # kettle-changelog runs the test suite for coverage data; when that
+            # suite fails, the spec summary must surface in the abort message,
+            # not just the exit status. Stream output (so the release log keeps
+            # its live tail) while retaining the last lines for diagnostics.
+            # With --yes the child never reads stdin, so a pipe is safe here.
+            ok, diag = stream_with_capture(env_hash, cmd)
+            unless ok
+              exit_code = $?.respond_to?(:exitstatus) ? $?.exitstatus : 1
+              Kettle::Dev::ExitAdapter.abort("Command failed: #{cmd} (exit #{exit_code})#{diag}")
+            end
+            return
+          end
           if interactive
             ok = system(env_hash, cmd)
             unless ok
@@ -124,6 +136,28 @@ module Kettle
 
         private
 
+        # Runs cmd with output streamed to $stdout (preserving the live release
+        # log tail) while retaining the last `tail_lines` lines. Returns
+        # [success, diagnostic] where diagnostic is an empty string on success
+        # and a formatted output tail on failure, mirroring the STDERR tail the
+        # non-interactive path appends to its abort message.
+        def stream_with_capture(env_hash, cmd, tail_lines: 30)
+          recent = []
+          success = Open3.popen2e(env_hash, cmd) do |_stdin, output, thread|
+            output.each_line do |line|
+              $stdout.print(line)
+              recent << line
+              recent.shift while recent.length > tail_lines
+            end
+            thread.value.success?
+          end
+          diag = ""
+          if !success && recent.any?
+            diag = "\n--- OUTPUT (last #{tail_lines} lines) ---\n#{recent.join}".rstrip
+          end
+          [success, diag]
+        end
+
         def command_env
           env_hash = ENV.respond_to?(:to_hash) ? ENV.to_hash : ENV.to_h
           return env_hash if debug_env_enabled?
@@ -638,6 +672,14 @@ module Kettle
 
       def run_family_member_publish
         version = detect_version
+        # The build pins BUNDLE_LOCKFILE to this run's task lockfile snapshot,
+        # copied from the committed Gemfile.lock on first use. Materialize it
+        # (bundle install against the snapshot) or the build fails on gems the
+        # snapshot pins but the boot env never installed — exactly what a
+        # stale committed lockfile plus an independently-versioned release
+        # tool produces (e.g. kettle-family 1.3.13 vs 1.3.18). Same guard the
+        # step 14/15 entry points run before `bundle exec rake build`.
+        normalize_release_lockfiles_before_publish_tasks!
         prepare_release_lockfiles_for_release_tasks!
         ensure_signing_setup_or_skip!
         ensure_release_secrets_ready_for_signing! if signing_enabled? && release_secrets_configured?

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "3.1.15"
+      VERSION = "3.1.17"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 3.1.15
+  version: 3.1.17
 platform: ruby
 authors:
 - Peter H. Boling
@@ -423,10 +423,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.1.15
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.1.15/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.1.17
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.1.17/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.1.15
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.1.17
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev