kettle-dev 3.0.9 → 3.0.10

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b33eb850afdd492ae8078a8670f93e7f452665f60feed6fe56da0ec7501fb688
-  data.tar.gz: b9e680943a5054b237b7b747ea85af306e428ffc6d39af8b4ec316e1e254aa54
+  metadata.gz: 1e670b2a9da64f848886da0112d47c757607895c073ae8e0063583f9893c05a8
+  data.tar.gz: 9c395946450a91ee862b55922a1f5bf9bce6208c700098093d7c6050c535488b
 SHA512:
-  metadata.gz: 0254c1bd4f95fff49146664b9e2071b213b722c736ef2d196fbefc0480d06900e1494dca631c7f7afaabfeb444b964aca179d2cedfa834225aa11d6c40ac5255
-  data.tar.gz: 30b20f7364cd3e4e5fee5354cee5cb03daabc8219fe3695ae3585dd98695d1102068392a24477e11ca3423d52660206cc8b86c65b1ef50134f74ece81ecd4c75
+  metadata.gz: a9fd3e50a9f6315eec633c43dabd4447f0d2507e6b74ad9b17b3eb03497d4194895c65aa56010098e9a229e01115b4e0d3c1b3beefbaad26c76f4a6862e883c9
+  data.tar.gz: e493aa3febc35c6840001eca3b7f7ec127784b83c57e42feac1ab791a0aaac272e9094fb4589c18ba5e7e98cafb9d3fc256f059147c06f23f687768cb8191e52

data/CHANGELOG.md

@@ -30,6 +30,19 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [3.0.10] - 2026-08-23
+
+- TAG: [v3.0.10][3.0.10t]
+- COVERAGE: 91.15% -- 5688/6240 lines in 47 files
+- BRANCH COVERAGE: 76.13% -- 2175/2857 branches in 47 files
+- 50.62% documented
+
+### Fixed
+
+- Omit the standalone kettle-changelog dependency from normal release-time Bundler resolution, preventing unpublished downstream gem cycles in monorepo release waves.
+
+- Use a dependency-specific environment switch when omitting kettle-changelog from release Bundler resolution.
+
 ## [3.0.9] - 2026-08-23
 
 - TAG: [v3.0.9][3.0.9t]
@@ -3516,7 +3529,9 @@ Please file a bug if you notice a violation of semantic versioning.
   - Selecting will run the selected workflow via `act`
   - This may move to its own gem in the future.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.9...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.10...HEAD
+[3.0.10]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.9...v3.0.10
+[3.0.10t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.10
 [3.0.9]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.8...v3.0.9
 [3.0.9t]: https://github.com/kettle-dev/kettle-dev/releases/tag/v3.0.9
 [3.0.8]: https://github.com/kettle-dev/kettle-dev/compare/v3.0.7...v3.0.8

data/README.md

@@ -463,6 +463,10 @@ What it does:
       variables, known local-template toggles, and writes checksums while
       updating path-sourced and checksum-gap gems back to released registry
       versions.
+    - Release lockfile resets set `KETTLE_DEV_SKIP_CHANGELOG_DEPENDENCY=true`.
+      This does not skip changelog generation; it keeps the development-only
+      `kettle-changelog` gem out of the release bundle so unpublished family
+      gems cannot enter Bundler's resolution graph.
     - During `kettle-release`, release lockfiles are reset before the release
       prep commit. Before pushing, `kettle-release` validates those committed
       lockfiles again; if local paths or checksum gaps reappear, it prints the
@@ -1008,7 +1012,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.237-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.240-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-dev/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/dev/lockfile_reset.rb

@@ -34,18 +34,31 @@ module Kettle
         @release_platforms = {}
       end
 
-      def reset(target)
+      def reset(target, skip_changelog_dependency: false)
         BundlerEnvGuard.warn_unexpected_env!
         paths = lockfile_paths_for(target)
         force_full_update = release_lockfiles_target?(target)
+        skip_changelog_dependency ||= force_full_update
         platforms = release_platforms_for(paths) if force_full_update
         uninstall_unreleased_local_gems(paths) if force_full_update
         paths.each do |path|
-          reset_lockfile!(path, full_update: force_full_update, platforms: platforms&.fetch(path)) if force_full_update || normalization_needed?(path)
+          if force_full_update || normalization_needed?(path)
+            reset_lockfile!(
+              path,
+              full_update: force_full_update,
+              platforms: platforms&.fetch(path),
+              skip_changelog_dependency: skip_changelog_dependency
+            )
+          end
         end
         if force_full_update && uninstall_unreleased_local_gems(paths)
           paths.each do |path|
-            reset_lockfile!(path, full_update: true, platforms: platforms.fetch(path))
+            reset_lockfile!(
+              path,
+              full_update: true,
+              platforms: platforms.fetch(path),
+              skip_changelog_dependency: skip_changelog_dependency
+            )
           end
         end
         diagnostics = paths.flat_map { |path| diagnostics(path) }
@@ -54,7 +67,7 @@ module Kettle
         paths
       end
 
-      def reset_lockfile!(path, full_update: false, platforms: nil)
+      def reset_lockfile!(path, full_update: false, platforms: nil, skip_changelog_dependency: false)
         gemfile = gemfile_for_lockfile(path)
         unless gemfile && File.file?(gemfile)
           warn("Cannot reset #{display_path(path)} because its Gemfile was not found.")
@@ -67,6 +80,7 @@ module Kettle
             gemfile: gemfile,
             full_update: full_update,
             platforms: platforms,
+            skip_changelog_dependency: skip_changelog_dependency,
             isolated_gem_home: gem_home
           )
           if full_update || has_local_path_remote?(path)
@@ -77,7 +91,7 @@ module Kettle
         end
       end
 
-      def reset_command(path:, gemfile:, full_update: false, platforms: nil, isolated_gem_home: nil)
+      def reset_command(path:, gemfile:, full_update: false, platforms: nil, skip_changelog_dependency: false, isolated_gem_home: nil)
         update_gems = (full_update || has_local_path_remote?(path)) ? [] : reset_update_gems(path)
         platforms ||= reset_platforms(path)
         removed_platforms = full_update ? [] : lockfile_platforms(path) - platforms
@@ -85,6 +99,7 @@ module Kettle
           "BUNDLE_GEMFILE" => gemfile,
           "BUNDLE_LOCKFILE" => path
         )
+        env["KETTLE_DEV_SKIP_CHANGELOG_DEPENDENCY"] = "true" if skip_changelog_dependency
         if isolated_gem_home
           env["GEM_HOME"] = isolated_gem_home
           env["GEM_PATH"] = isolated_gem_home

data/lib/kettle/dev/release_cli.rb

@@ -689,7 +689,10 @@ module Kettle
           emit_release_lockfile_event(action: "reset", status: "started", stage: stage, attempt: attempt, attempts: attempts)
           puts "Resetting release lockfiles with local path dependencies disabled #{stage} (attempt #{attempt}/#{attempts})..."
           begin
-            lockfile_reset.reset(Kettle::Dev::LockfileReset::RELEASE_LOCKFILES_TARGET)
+            lockfile_reset.reset(
+              Kettle::Dev::LockfileReset::RELEASE_LOCKFILES_TARGET,
+              skip_changelog_dependency: true
+            )
             emit_release_lockfile_event(action: "reset", status: "ok", stage: stage, attempt: attempt, attempts: attempts)
             break
           rescue Kettle::Dev::Error => error
@@ -775,7 +778,7 @@ module Kettle
       end
 
       def normalize_release_lockfile!(path)
-        lockfile_reset.reset_lockfile!(path)
+        lockfile_reset.reset_lockfile!(path, skip_changelog_dependency: true)
       end
 
       def release_gemfile_for_lockfile(path)
@@ -783,7 +786,7 @@ module Kettle
       end
 
       def release_lockfile_normalization_env
-        lockfile_reset.normalization_env
+        lockfile_reset.normalization_env.merge("KETTLE_DEV_SKIP_CHANGELOG_DEPENDENCY" => "true")
       end
 
       def release_lockfile_diagnostics(path)

data/lib/kettle/dev/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "3.0.9"
+      VERSION = "3.0.10"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-dev
 version: !ruby/object:Gem::Version
-  version: 3.0.9
+  version: 3.0.10
 platform: ruby
 authors:
 - Peter H. Boling
@@ -400,10 +400,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-dev.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.0.9
-  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.0.9/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-dev/tree/v3.0.10
+  changelog_uri: https://github.com/kettle-dev/kettle-dev/blob/v3.0.10/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-dev/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.0.9
+  documentation_uri: https://www.rubydoc.info/gems/kettle-dev/3.0.10
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-dev/wiki
   news_uri: https://www.railsbling.com/tags/kettle-dev