kettle-dev 2.2.8 → 2.2.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 20e42b5ed4a5e7b52a046fa7cfdfe63c08963947c2414aa4cf22251419ffb853
-  data.tar.gz: e578b54456e497e115ccdb9bb54efc4d32be13e2b294d2b0857964b75bc5c7ff
+  metadata.gz: 3bee699f7f3622c9ae1e63f19cec10ec46a54fe67bd97869169b309bbbcb4bb2
+  data.tar.gz: '099d1ddeab902593baa43b8a1fe6de1b899f1ab3bdff9bd6ddba3363d5627b02'
 SHA512:
-  metadata.gz: 676baf6a4ecffe8745d94c3016b402e8c002f98ca61f9ea478b9e629d42c7c57a82795682d49c853c19fff74982e8c70af5cf75b1e0eb6b28ce2fb904995762e
-  data.tar.gz: a000e3b43e2ea900fcdb03cb2471db4a8c312113c753524ca7be658119c81bba1cfb7113e0ccb576a2cf6b471c472fc01c6b71afc4eebf7322b3760e3a848c4c
+  metadata.gz: 7af3f2c8a7a278416c97a9a006d4a45946c371fcf75d11f9e6dc29b2a29fbc629fa53fb647cc3fbab0b7a18436dd4ecfa1139fcb993f51c89c798c7f3e95a6c0
+  data.tar.gz: 78c1377327823ab8ae01bb76f4e318fc501fc0ba8e3c60ffc95dc661a68853a338bc501c9ea631992ea6cc7bf5b31b74865ed3a503770c6c9223e253ece33403

data/CHANGELOG.md

@@ -30,6 +30,23 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [2.2.9] - 2026-06-14
+
+- TAG: [v2.2.9][2.2.9t]
+- COVERAGE: 92.57% -- 3863/4173 lines in 28 files
+- BRANCH COVERAGE: 74.00% -- 1534/2073 branches in 28 files
+- 65.38% documented
+
+### Fixed
+
+- `kettle-gha-sha-pins --check` no longer fails solely because releases outside
+  the selected `--upgrade` policy exist, and `kettle-pre-release` now validates
+  workflow pins with the inclusive `major` policy used for release readiness.
+
+- `kettle-gha-sha-pins --write` now handles major-line adjacent version comments
+  such as `# v7` idempotently instead of repeatedly planning the same
+  `update_version_comment` change.
+
 ## [2.2.8] - 2026-06-13
 
 - TAG: [v2.2.8][2.2.8t]
@@ -2109,7 +2126,9 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.2.8...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v2.2.9...HEAD
+[2.2.9]: https://github.com/kettle-dev/kettle-dev/compare/v2.2.8...v2.2.9
+[2.2.9t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.2.9
 [2.2.8]: https://github.com/kettle-dev/kettle-dev/compare/v2.2.7...v2.2.8
 [2.2.8t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v2.2.8
 [2.2.7]: https://github.com/kettle-dev/kettle-dev/compare/v2.2.6...v2.2.7

data/README.md

@@ -854,7 +854,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.171-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.173-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/gha_sha_pins_cli.rb

@@ -33,6 +33,8 @@ module Kettle
       DEFAULT_UPGRADE_LEVEL = "patch"
       DEFAULT_CACHE_TTL_SECONDS = 24 * 60 * 60
       VALID_UPGRADE_LEVELS = %w[major minor patch].freeze
+      VERSION_COMMENT_SUFFIX_RE = /\A\s+#\s*v?(?<version>\d+(?:\.\d+\.\d+(?:[-.]?[0-9A-Za-z.-]+)?)?)/
+      VERSION_COMMENT_REPLACEMENT_RE = /\A(?<prefix>\s+#\s*)v?\d+(?:\.\d+\.\d+(?:[-.]?[0-9A-Za-z.-]+)?)?/
 
       def initialize(argv, err: $stderr)
         @argv = argv
@@ -215,7 +217,7 @@ module Kettle
 
         print_report(state)
         return 2 unless state[:failures].zero?
-        return 3 if @options[:check] && (state[:updates].positive? || state[:outdated_pins].any?)
+        return 3 if @options[:check] && state[:updates].positive?
 
         0
       end
@@ -745,8 +747,8 @@ module Kettle
         return nil unless token_info[:token] == old_token
 
         suffix = raw[token_info[:span]..-1].to_s
-        match = suffix.match(/\A\s+#\s*v?(\d+\.\d+\.\d+(?:[-.]?[0-9A-Za-z.-]+)?)/)
-        match && match[1]
+        match = suffix.match(VERSION_COMMENT_SUFFIX_RE)
+        match && match[:version]
       end
 
       def build_replacement_from_line(text, line, col, old_token, new_ref, new_version = nil)
@@ -767,7 +769,7 @@ module Kettle
         new_scalar = rendered[:quoted]
         if new_version && token_info[:quote] == :plain
           suffix = raw[span..-1].to_s
-          comment = suffix.match(/\A(?<prefix>\s+#\s*)v?\d+\.\d+\.\d+(?:[-.]?[0-9A-Za-z.-]+)?/)
+          comment = suffix.match(VERSION_COMMENT_REPLACEMENT_RE)
           if comment
             span += comment[0].length
             new_scalar += "#{comment[:prefix]}v#{new_version}"
@@ -902,7 +904,7 @@ module Kettle
             lines << "- #{change[:path]}:#{change[:line]} #{from} -> #{to} #{change[:reason]}"
           end
         end
-        if @options[:check] && (state[:planned_changes].any? || state[:outdated_pins].any?)
+        if @options[:check] && state[:planned_changes].any?
           lines << ""
           lines << "Recommended fix: kettle-gha-sha-pins --write --upgrade #{@options[:upgrade]}"
         end

data/lib/kettle/dev/pre_release_cli.rb

@@ -210,7 +210,7 @@ module Kettle
       # @return [void]
       def check_github_actions_sha_pins!
         puts "[kettle-pre-release] Check 1: Validate GitHub Actions SHA pins"
-        status = Kettle::Dev::GhaShaPinsCLI.new(["--root", Dir.pwd, "--check"]).run!
+        status = Kettle::Dev::GhaShaPinsCLI.new(["--root", Dir.pwd, "--check", "--upgrade", "major"]).run!
         return nil if status.zero?
 
         Kettle::Dev::ExitAdapter.abort("GitHub Actions SHA pin validation failed")

data/lib/kettle/dev/version.rb

@@ -3,7 +3,7 @@
 module Kettle
   module Dev
     module Version
-      VERSION = "2.2.8"
+      VERSION = "2.2.9"
     end
     VERSION = Version::VERSION # Traditional Constant Location
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 2.2.8
+  version: 2.2.9
 platform: ruby
 authors:
 - Peter H. Boling
@@ -338,10 +338,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.2.8
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.2.8/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v2.2.9
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v2.2.9/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.2.8
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/2.2.9
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev