kettle-dev 3.1.21 → 3.1.23

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c9043ae44ad729962dd0ba6a5712631073657cc9e4848bfccf1f3f4a0194bb41
-  data.tar.gz: 1c390e3cd5dcac0f01174ffbe3dda37e43f7ce717a69da3048990ea8b6b3df82
+  metadata.gz: 9049938008b29a89054f9b3e963f5107af4cc764ee4aa35b7a4e3bced54f992e
+  data.tar.gz: 953b52a98be4f8078ae31a6c740898c9e8cf2d041b50481d9f26f15e36a33437
 SHA512:
-  metadata.gz: 2789ca967cc4a7359a710873f544a33fdc348f0b6d0c0d3c06341da4ee4aa5bf3076c1b29cb66ecc0f64aba7efe203c80986e3248d4e5e11cc02913ec976926d
-  data.tar.gz: 369f86160601aac061a012ee9aec052d8377e084ad57d51d6f827a3180b5386360324df32be5ac752df7fb8047a347e23b62e3513be5d388a6451486424ef141
+  metadata.gz: 567e15c0dcb27db365e51ca1257e009446b3f46398234de84db23c171c7d8b8cdf57e137fbeedc04f91113a176d18f550773a76f02f0f8767234464d8fea2c37
+  data.tar.gz: c73d00e81d717387117983f47751bf96d6c04d0206dbf6f204410258821ff17ae5075ab1a796e2342520a8e2f4423aa3efba171a4898fa5cfc74239e44bc39cf

data/CHANGELOG.md

@@ -30,6 +30,28 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [3.1.23] - 2026-10-22
+
+- TAG: [v3.1.23][3.1.23t]
+- COVERAGE: 91.74% -- 5810/6333 lines in 48 files
+- BRANCH COVERAGE: 75.81% -- 2238/2952 branches in 48 files
+- 53.70% documented
+
+### Fixed
+
+- kettle-release: publish-boundary lockfile revalidation no longer commits, pushes, or re-triggers CI from a detached checkout. Family member publishes run in a detached worktree the family orchestrator owns end-to-end (branch state, CI validation, tags, GitHub release), and a bare detached HEAD has no branch to push; lockfile drift now stays local to the checkout in both topologies instead of dying in validation-PR creation against a literal HEAD ref. See https://github.com/kettle-dev/kettle-dev/issues/52
+
+## [3.1.22] - 2026-10-21
+
+- TAG: [v3.1.22][3.1.22t]
+- COVERAGE: 91.34% -- 5780/6328 lines in 48 files
+- BRANCH COVERAGE: 75.56% -- 2229/2950 branches in 48 files
+- 53.70% documented
+
+### Fixed
+
+- Release now detects tracked lockfile changes from the final dependency upgrade, commits them and reruns CI before publication, and refreshes build lockfile snapshots to use the validated versions. Unchanged lockfiles proceed without another CI run.
+
 ## [3.1.21] - 2026-10-21
 
 - TAG: [v3.1.21][3.1.21t]
@@ -4211,7 +4233,11 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.21...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.23...HEAD
+[3.1.23]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.22...v3.1.23
+[3.1.23t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.23
+[3.1.22]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.21...v3.1.22
+[3.1.22t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.22
 [3.1.21]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.20...v3.1.21
 [3.1.21t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.1.21
 [3.1.20]: https://github.com/kettle-dev/kettle-dev/compare/v3.1.19...v3.1.20

data/README.md

@@ -1084,7 +1084,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.314-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.333-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/release_cli.rb

@@ -828,10 +828,48 @@ module Kettle
         reset_release_lockfiles!(stage: "before publish tasks")
         validate_release_lockfiles!(stage: "before publish tasks")
         prepare_release_lockfiles_for_release_tasks!
+        revalidate_publish_lockfile_changes! unless changed_release_lockfile_paths.empty?
+        # Setup may already have cached task snapshots before a newer matching
+        # release became available. Build against the final canonical locks.
+        cleanup_release_task_lockfile!
         materialize_release_lockfiles_for_release_tasks!
         @release_lockfiles_normalized_before_publish = true
       end
 
+      def revalidate_publish_lockfile_changes!
+        # Release checkout topology: a family member publish runs in a
+        # detached worktree owned end-to-end by the family orchestrator (trunk
+        # sync, branch pushes, CI validation, tags, and the GitHub release all
+        # happen on the primary checkout), and a bare detached HEAD has no
+        # branch to push either. Committing or pushing branch state from here
+        # is void-to-meaningless (the worktree is deleted after the run), so
+        # drift stays local to this checkout; the built gem does not embed the
+        # development lockfile.
+        if family_member_publish? || detached_head?
+          puts "Release lockfiles changed before publication; keeping updates local to this checkout (no release branch to push)."
+          return
+        end
+
+        puts "Release lockfiles changed before publication; committing updates and rerunning CI."
+        ensure_git_user!
+        abort("Failed to commit updated release lockfiles.") unless commit_bundle_update!
+        validate_release_lockfiles!(stage: "after publish lockfile update")
+
+        if local_ci?
+          maybe_run_local_ci_before_push!(true, force: true)
+        else
+          trunk = detect_trunk_branch
+          feature = current_branch
+          ensure_trunk_synced_before_push!(trunk, feature) unless branch_stack_release_branch?(feature, trunk)
+          push!
+          monitor_workflows_after_push!
+        end
+      end
+
+      def detached_head?
+        current_branch == "HEAD"
+      end
+
       # Resetting can select a platform-specific artifact that is not installed
       # in the invoking development bundle. Materialize every canonical release
       # bundle before a release gate runs `bundle exec`. Use a disposable copy:

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "3.1.21"
+      VERSION = "3.1.23"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 3.1.21
+  version: 3.1.23
 platform: ruby
 authors:
 - Peter H. Boling
@@ -423,10 +423,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.1.21
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.1.21/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.1.23
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.1.23/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.1.21
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.1.23
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev