kettle-dev 3.1.16 → 3.1.17

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 16802c87427ef8443571014a94b2d7720f246f01ea22cf2821b2b9598f4b804b
-  data.tar.gz: 9ced61074b0241db2b225d5bbbe6d3c1e359a16e587a949e47339a4b8a65f144
+  metadata.gz: 7509713aebd3dc8b2dfce4e04399bd8a004fdf0ab9d128b9147a3060e183fa7c
+  data.tar.gz: 06d242cd7e431a629f278b3ca28f4f6347bc40561056381ccd712886cf6ea48d
 SHA512:
-  metadata.gz: 78fab6bbe0cca35be2a872350840b9bcbdc907bbd697ba245c5a47e406790bc72663161bd42518268386bf7df7c8e50900f31ddae2b4b2818670b259db7a7aee
-  data.tar.gz: 6f2fc6046be6343e41ce2b917f274b0f6e726a145a09c6273bace66ecf525fee5567bb3ea4a25cce9fa344e9061e1f6d6cc7327efa8946804191eac783aee588
+  metadata.gz: 4659485434c16e16fcddd290cfb9afb233f1b5f9e60adc4c2dc933d951ce49f324b27763189b80f8bf2004ceed4dfbb713fc9f73301da040c3f891391d53a754
+  data.tar.gz: ddf71af290de3619c7bb48e296bb41501a01e2bb5defdcf999e51c8126cd3a41471efbb413d537cc91c9236dfafbaf0c50459fdda92019cff8850748aacf161d

data/CHANGELOG.md

@@ -30,6 +30,17 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [3.1.17] - 2026-10-18
+
+- TAG: [v3.1.17][3.1.17t]
+- COVERAGE: 91.84% -- 5761/6273 lines in 48 files
+- BRANCH COVERAGE: 75.75% -- 2212/2920 branches in 48 files
+- 53.60% documented
+
+### Fixed
+
+- Family member publish materializes the release task lockfile before building: run_family_member_publish now runs the same normalize guard as the step 14/15 build entry points, so the BUNDLE_LOCKFILE snapshot copied from the committed Gemfile.lock is bundle-installed before rake build. Without it, a monorepo member build failed with: Could not find tool-old-version in locally installed gems, when the committed lockfile pinned an older release-tool resolution than the boot environment.
+
 ## [3.1.16] - 2026-10-18
 
 - TAG: [v3.1.16][3.1.16t]
@@ -4156,7 +4167,9 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.16...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.17...HEAD
+[3.1.17]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.16...v3.1.17
+[3.1.17t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.17
 [3.1.16]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.15...v3.1.16
 [3.1.16t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.16
 [3.1.15]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.14...v3.1.15

data/README.md

@@ -1084,7 +1084,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.272-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.273-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/release_cli.rb

@@ -672,6 +672,14 @@ module Kettle
 
       def run_family_member_publish
         version = detect_version
+        # The build pins BUNDLE_LOCKFILE to this run's task lockfile snapshot,
+        # copied from the committed Gemfile.lock on first use. Materialize it
+        # (bundle install against the snapshot) or the build fails on gems the
+        # snapshot pins but the boot env never installed — exactly what a
+        # stale committed lockfile plus an independently-versioned release
+        # tool produces (e.g. kettle-family 1.3.13 vs 1.3.18). Same guard the
+        # step 14/15 entry points run before `bundle exec rake build`.
+        normalize_release_lockfiles_before_publish_tasks!
         prepare_release_lockfiles_for_release_tasks!
         ensure_signing_setup_or_skip!
         ensure_release_secrets_ready_for_signing! if signing_enabled? && release_secrets_configured?

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "3.1.16"
+      VERSION = "3.1.17"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 3.1.16
+  version: 3.1.17
 platform: ruby
 authors:
 - Peter H. Boling
@@ -423,10 +423,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.1.16
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.1.16/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.1.17
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.1.17/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.1.16
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.1.17
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev