kettle-dev 3.1.20 → 3.1.22

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9efc79f5aed2cce009a847b8054a5ce39d54bd5c11f567d5463085e1ce11fcd6
-  data.tar.gz: 28b1079640e41dbd9f7ff7c0d844f377b177c4d408b504af893cc888b5abf200
+  metadata.gz: 88d63d67c63bcf4fdb5e94c407a2aea115b573e9b727bcc5ce8d2e0e3894ab4a
+  data.tar.gz: 35e10c8f15b02a93363709c130895d6167ca9540308a13ae1a33b9ca1ff3d563
 SHA512:
-  metadata.gz: f4982d17aabae7fc0e4d970a55fac3e8403f4daceea4d6e5399380a928c270a2a80ff879c3698eb3558276c39e3fd9a540d801a6ec226ad5e8989c96dd737ded
-  data.tar.gz: 7ada13071f91419315448d6b9d03be92c8a25f68d827fb5acbf94b97aad444d7173f6eb411bf7ac6ebdd6251deb4f8f86fdba868ab1edb308ce69eaf199d5eb9
+  metadata.gz: f33f304d020f5b915f5fe2ebbedfa6a9cdbebcd7db7ea911de348cae51fef28dc93eae39e19c36b1d94f14acba07335d736614adf424a6d5492f9f0323faaa3e
+  data.tar.gz: 242c784448e83d1535fabc6e6ae47a013371f42a73ce5e7603203acbb77c9096f650afbf9287d3de9d64ec7e8e35772a56c844300418e0a80529500463aef6fa

data/CHANGELOG.md

@@ -30,6 +30,28 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [3.1.22] - 2026-10-21
+
+- TAG: [v3.1.22][3.1.22t]
+- COVERAGE: 91.34% -- 5780/6328 lines in 48 files
+- BRANCH COVERAGE: 75.56% -- 2229/2950 branches in 48 files
+- 53.70% documented
+
+### Fixed
+
+- Release now detects tracked lockfile changes from the final dependency upgrade, commits them and reruns CI before publication, and refreshes build lockfile snapshots to use the validated versions. Unchanged lockfiles proceed without another CI run.
+
+## [3.1.21] - 2026-10-21
+
+- TAG: [v3.1.21][3.1.21t]
+- COVERAGE: 91.84% -- 5799/6314 lines in 48 files
+- BRANCH COVERAGE: 75.59% -- 2224/2942 branches in 48 files
+- 53.70% documented
+
+### Fixed
+
+- Release step 18 now attaches the built gem and its checksums to the GitHub release. Standalone releases and family members excluded from the aggregate release (e.g. kettle-jem in structuredmerge-ruby) were previously created assetless; family aggregate members still get assets from the family's closing aggregate and are unaffected
+
 ## [3.1.20] - 2026-10-21
 
 - TAG: [v3.1.20][3.1.20t]
@@ -4200,7 +4222,11 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.20...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.22...HEAD
+[3.1.22]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.21...v3.1.22
+[3.1.22t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.22
+[3.1.21]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.20...v3.1.21
+[3.1.21t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.21
 [3.1.20]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.19...v3.1.20
 [3.1.20t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.20
 [3.1.19]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.18...v3.1.19

data/README.md

@@ -1084,7 +1084,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.308-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.328-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/release_cli.rb

@@ -590,7 +590,7 @@ module Kettle
         # 18. create GitHub release (optional)
         if run_step?(18)
           version ||= detect_version
-          created, message = maybe_create_github_release!(version)
+          created, message = maybe_create_github_release!(version, assets: github_release_assets(version))
           abort("GitHub release creation failed: #{message}") if github_release_required? && !created
         end
 
@@ -828,10 +828,31 @@ module Kettle
         reset_release_lockfiles!(stage: "before publish tasks")
         validate_release_lockfiles!(stage: "before publish tasks")
         prepare_release_lockfiles_for_release_tasks!
+        revalidate_publish_lockfile_changes! unless changed_release_lockfile_paths.empty?
+        # Setup may already have cached task snapshots before a newer matching
+        # release became available. Build against the final canonical locks.
+        cleanup_release_task_lockfile!
         materialize_release_lockfiles_for_release_tasks!
         @release_lockfiles_normalized_before_publish = true
       end
 
+      def revalidate_publish_lockfile_changes!
+        puts "Release lockfiles changed before publication; committing updates and rerunning CI."
+        ensure_git_user!
+        abort("Failed to commit updated release lockfiles.") unless commit_bundle_update!
+        validate_release_lockfiles!(stage: "after publish lockfile update")
+
+        if local_ci?
+          maybe_run_local_ci_before_push!(true, force: true)
+        else
+          trunk = detect_trunk_branch
+          feature = current_branch
+          ensure_trunk_synced_before_push!(trunk, feature) unless branch_stack_release_branch?(feature, trunk)
+          push!
+          monitor_workflows_after_push!
+        end
+      end
+
       # Resetting can select a platform-specific artifact that is not installed
       # in the invoking development bundle. Materialize every canonical release
       # bundle before a release gate runs `bundle exec`. Use a disposable copy:
@@ -3325,6 +3346,20 @@ module Kettle
         end
       end
 
+      # Assets attached to the GitHub release: the built gem and its
+      # checksums. Family aggregate members skip this step entirely
+      # (KETTLE_RELEASE_SKIP_GITHUB_RELEASE) and get assets from the family's
+      # closing aggregate; this covers standalone releases and
+      # aggregate-excluded members, whose releases were created assetless.
+      def github_release_assets(version)
+        gem_name = detect_gem_name
+        candidates = [gem_file_for_version(version)]
+        %w[sha256 sha512].each do |algorithm|
+          candidates << File.join(@root, "checksums", "#{gem_name}-#{version}.gem.#{algorithm}")
+        end
+        candidates.compact.select { |path| File.file?(path) }
+      end
+
       # If GITHUB_TOKEN is present, create a GitHub release for the given version tag.
       # Title: v<version>
       # Body: the CHANGELOG section for this version, followed by the two link references for this version.

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "3.1.20"
+      VERSION = "3.1.22"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 3.1.20
+  version: 3.1.22
 platform: ruby
 authors:
 - Peter H. Boling
@@ -423,10 +423,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.1.20
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.1.20/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.1.22
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.1.22/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.1.20
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.1.22
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev