kettle-dev 3.1.17 → 3.1.18

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7509713aebd3dc8b2dfce4e04399bd8a004fdf0ab9d128b9147a3060e183fa7c
-  data.tar.gz: 06d242cd7e431a629f278b3ca28f4f6347bc40561056381ccd712886cf6ea48d
+  metadata.gz: 672f320446b4068e5c3baac7ee9a30443791328de854e1d917d7cefc0168ea39
+  data.tar.gz: 368787c9c87aa440b03dab7c3b4a0df2d9a91be96be1de6056a83c62d5e7b929
 SHA512:
-  metadata.gz: 4659485434c16e16fcddd290cfb9afb233f1b5f9e60adc4c2dc933d951ce49f324b27763189b80f8bf2004ceed4dfbb713fc9f73301da040c3f891391d53a754
-  data.tar.gz: ddf71af290de3619c7bb48e296bb41501a01e2bb5defdcf999e51c8126cd3a41471efbb413d537cc91c9236dfafbaf0c50459fdda92019cff8850748aacf161d
+  metadata.gz: 97b7bbc123483bf583d88ef67a30e8edbc923b6aab487e1cea2d890716f1a25e95657ab3f308209e61c0fbe42c4d9b06594172ebfb71442e3ce219434e528000
+  data.tar.gz: 02d2b63b536624d834fde01bedc077425bcb248ae4a169ac24e5ca6479130dba398dc1df8caa24e652fb692361c530849e84911cfe57923de0ede14511ee2a15

data/CHANGELOG.md

@@ -30,6 +30,17 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [3.1.18] - 2026-10-19
+
+- TAG: [v3.1.18][3.1.18t]
+- COVERAGE: 91.72% -- 5763/6283 lines in 48 files
+- BRANCH COVERAGE: 75.73% -- 2216/2926 branches in 48 files
+- 53.60% documented
+
+### Added
+
+- kettle-release aborts with an explicit outdated-tool error when a newer release of kettle-dev exists in the same minor series (registry lookup; failures never block; newer minors only warn; KETTLE_DEV_SKIP_TOOL_CURRENCY_CHECK skips), so a stale copy resolved from an old lockfile can no longer silently run without lockfile materialization and self-heal fixes.
+
 ## [3.1.17] - 2026-10-18
 
 - TAG: [v3.1.17][3.1.17t]
@@ -4167,7 +4178,9 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.17...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.18...HEAD
+[3.1.18]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.17...v3.1.18
+[3.1.18t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.18
 [3.1.17]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.16...v3.1.17
 [3.1.17t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.17
 [3.1.16]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.15...v3.1.16

data/README.md

@@ -1084,7 +1084,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.273-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.283-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/release_cli.rb

@@ -268,6 +268,7 @@ module Kettle
 
       def run
         @started_at = monotonic_time
+        ensure_release_tool_current!
         emit_run_start
         status = "ok"
         error = nil
@@ -2322,6 +2323,34 @@ module Kettle
         m[2]
       end
 
+      # Refuse to run a release with an outdated release tool. kettle-release
+      # is resolved from the invoking bundle (for family releases, the family
+      # root's Gemfile, which each family version-manages); a stale copy
+      # silently misses lockfile materialization and self-heal behavior added
+      # in later patch releases. When a newer release of this gem exists in
+      # the same minor series, abort with the reason instead of misbehaving.
+      # Newer releases in other minor series only warn: a family may
+      # deliberately track an older minor. Registry lookup failure never
+      # blocks a release. Skippable with KETTLE_DEV_SKIP_TOOL_CURRENCY_CHECK
+      # for intentionally offline runs.
+      def ensure_release_tool_current!
+        return if truthy_value?(ENV["KETTLE_DEV_SKIP_TOOL_CURRENCY_CHECK"])
+
+        gem_name = "kettle-dev"
+        current = Gem::Version.new(Kettle::Dev::VERSION)
+        latest_overall, latest_series = latest_released_versions(gem_name, current.to_s)
+
+        if latest_series && Gem::Version.new(latest_series) > current
+          raise Error,
+            "kettle-release (#{gem_name} #{current}) is outdated: #{latest_series} is available in " \
+            "the same minor series. Update the invoking Gemfile (bundle update #{gem_name}) and retry."
+        end
+
+        if latest_overall && Gem::Version.new(latest_overall) > current
+          warn("[kettle-release] #{gem_name} #{latest_overall} is available (running #{current} in the #{current.segments[0, 2].join(".")} series).")
+        end
+      end
+
       def latest_released_versions(gem_name, current_version)
         data = Kettle::Dev::RubyGemsVersions.fetch(gem_name, version_hint: current_version)
         return [nil, nil] unless data.is_a?(Array)

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "3.1.17"
+      VERSION = "3.1.18"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 3.1.17
+  version: 3.1.18
 platform: ruby
 authors:
 - Peter H. Boling
@@ -423,10 +423,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.1.17
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.1.17/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.1.18
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.1.18/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.1.17
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.1.18
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev