kettle-family 0.2.4 → 0.2.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 77de418bfa9adc07c6500af0e4231f28909e6480fb96b730e34ebb215add0f04
-  data.tar.gz: 3667086145e554a4d4d89e68a2c4b5b2b1b00f59c799040f69a918c236c725ec
+  metadata.gz: 2bc8f54983986ae1576f3f766324a35d5bc87b2776086a07eb3258d43bba386d
+  data.tar.gz: edc612181ca90bd0ebdfdc196d88810d82c99cdb54b752c66b3173d85fa896a2
 SHA512:
-  metadata.gz: 30f2a3b90e0fc17022b97a384277dc004b78e4cee2a4a6d1bdf515425db3f2173a846ac00f7614031fda678ceacf6dcd7e7d75fbcb6bfc582ed29ea4debeddb7
-  data.tar.gz: c1569420377c2692180d7f04a8312de902efac20b84d390514e9599a6d7a5025761abe9a9e2b647ccb713f2dbdc8fa02ee142e52a9df0389f54c7393a0a726ef
+  metadata.gz: b3f19512bb9a8b3e66ba7037a44877afc0d76eebccd50b2ea9ff233ed2a3eb74e4e0e4cc14cb2125d059c66b59ecf9f9a238b60e77cc85a81a6ab6c5dfd13749
+  data.tar.gz: 2abdfc91601545b26d5a3a392f833cb439901a4b2d33b64a1574cbb6a57ae8f71bbbfbd8610d18af80a919bdea1e776063319e6b8670cd3b678950cd4e3964d7

data/CHANGELOG.md

@@ -30,6 +30,33 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [0.2.5] - 2026-07-11
+
+- TAG: [v0.2.5][0.2.5t]
+- COVERAGE: 95.22% -- 2309/2425 lines in 23 files
+- BRANCH COVERAGE: 76.75% -- 766/998 branches in 23 files
+- 29.54% documented
+
+### Added
+
+- Family workflows now inject a derived local family path environment variable
+  by default, such as `RUBY_OAUTH_DEV=/path/to/ruby-oauth`, so in-flight family
+  members can resolve unreleased sibling gems during orchestration.
+- Family configs now expose `pre_release.image_url_skip_patterns` and pass the
+  active config path to release commands so `kettle-pre-release` can skip
+  project-specific volatile image URLs.
+- `kettle-family release --skip-bundle-audit` now forwards
+  `--skip-bundle-audit` and `KETTLE_DEV_SKIP_BUNDLE_AUDIT=true` to downstream
+  `kettle-release` commands.
+
+### Changed
+
+- `require "kettle/family"` no longer loads `version_gem` by default; require
+  `kettle/family/version_gem` for the optional `VersionGem::Basic` extension.
+- Release lockfile normalization now forces configured local path environment
+  variables off after caller overrides so release locks are cleaned
+  deterministically.
+
 ## [0.2.4] - 2026-07-04
 
 - TAG: [v0.2.4][0.2.4t]
@@ -643,7 +670,9 @@ Please file a bug if you notice a violation of semantic versioning.
 - Fixed CI load failures on engines without compatible `pty` support by falling back to Open3 for interactive release commands.
 - Fixed Ruby 3.2 version-bump support by loading Prism lazily and wiring the Prism gem only for MRI versions that need it.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v0.2.4...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v0.2.5...HEAD
+[0.2.5]: https://github.com/kettle-dev/kettle-family/compare/v0.2.4...v0.2.5
+[0.2.5t]: https://github.com/kettle-dev/kettle-family/releases/tag/v0.2.5
 [0.2.4]: https://github.com/kettle-dev/kettle-family/compare/v0.2.3...v0.2.4
 [0.2.4t]: https://github.com/kettle-dev/kettle-family/releases/tag/v0.2.4
 [0.2.3]: https://github.com/kettle-dev/kettle-family/compare/v0.2.2...v0.2.3

data/README.md

@@ -158,6 +158,17 @@ members:
     - "**/vendor/**"
 ```
 
+Pre-release checks can skip project-specific volatile image URLs with
+shell-style URL patterns. Family release commands pass the active config path
+to member release commands so this setting works when releases run from member
+directories.
+
+```yaml
+pre_release:
+  image_url_skip_patterns:
+    - https://assets.example.com/generated/*
+```
+
 Member branch-stack releases can be configured in the member repository itself:
 
 ```yaml
@@ -592,7 +603,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-2.400-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-2.425-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-family/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/family/cli.rb

@@ -146,6 +146,7 @@ module Kettle
             release_skip_steps: nil,
             release_local_ci: false,
             release_continue_ci_failures: false,
+            release_skip_bundle_audit: false,
             accept: true,
             tag: false,
             push: false,
@@ -403,6 +404,7 @@ module Kettle
         option :skip_steps, long: "--skip-steps", value: {type: String, usage: "LIST"}, desc: "Pass skip_steps=LIST through to kettle-release commands"
         option :local_ci, long: "--local-ci", desc: "Pass --local-ci through to kettle-release commands"
         option :continue_ci_failures, long: "--continue-ci-failures", desc: "Set K_RELEASE_CI_CONTINUE=true for release commands"
+        option :skip_bundle_audit, long: "--skip-bundle-audit", desc: "Skip bundle:audit/update during release rake checks"
         option :no_auto_floors, long: "--no-auto-floors", desc: "Do not raise family dependency floors between member releases" do
           options[:no_auto_floors] = true
         end
@@ -422,6 +424,7 @@ module Kettle
             release_skip_steps: options[:skip_steps],
             release_local_ci: truthy_option?(:local_ci),
             release_continue_ci_failures: truthy_option?(:continue_ci_failures),
+            release_skip_bundle_audit: truthy_option?(:skip_bundle_audit),
             release_auto_dependency_floors: !truthy_option?(:no_auto_floors),
             accept: !options.key?(:accept) || options[:accept],
             tag: truthy_option?(:tag),
@@ -559,6 +562,7 @@ module Kettle
           skip_steps: options[:release_skip_steps],
           local_ci: options[:release_local_ci],
           continue_ci_failures: options[:release_continue_ci_failures],
+          skip_bundle_audit: options[:release_skip_bundle_audit],
           auto_dependency_floors: options[:release_auto_dependency_floors],
           gha_sha_pins_upgrade: options[:gha_sha_pins_upgrade],
           gha_sha_pins_check: options[:check],
@@ -679,6 +683,8 @@ module Kettle
       end
 
       def bump_version_results(members:, options:)
+        require_relative "version_bump"
+
         results = VersionBump.new(
           members: members,
           target_version: options[:target_version],

data/lib/kettle/family/config.rb

@@ -40,6 +40,26 @@ module Kettle
         fetch_path("family", "name") || File.basename(root)
       end
 
+      def family_local_path_env_name
+        configured = fetch_path("family", "local_path_env")
+        return nil if configured == false
+        return configured.to_s unless configured.to_s.empty?
+
+        "#{family_name.gsub(/[^A-Za-z0-9]+/, "_").upcase}_DEV"
+      end
+
+      def family_local_path_root
+        configured = fetch_path("family", "local_path_root")
+        configured ? expand_config_relative_path(configured) : root
+      end
+
+      def family_local_path_env
+        name = family_local_path_env_name
+        return {} unless name
+
+        {name => family_local_path_root}
+      end
+
       def family_mode
         fetch_path("family", "mode") || "monorepo"
       end
@@ -118,6 +138,10 @@ module Kettle
         fetch_path("check", "readme_links") || {}
       end
 
+      def pre_release_image_url_skip_patterns
+        Array(fetch_path("pre_release", "image_url_skip_patterns")).map(&:to_s)
+      end
+
       def changelog_mode
         fetch_path("changelog", "mode") || "member"
       end
@@ -250,7 +274,7 @@ module Kettle
       private
 
       def default_release_disable_local_path_env
-        %w[
+        local_envs = %w[
           K_JEM_TEMPLATING
           SMORG_RB_DEV
           TSLP_DEV
@@ -260,6 +284,7 @@ module Kettle
           GALTZO_FLOSS_DEV
           UR_BRAIN_DEV
         ]
+        [family_local_path_env_name, *local_envs].compact
       end
 
       def expand_config_relative_path(value)

data/lib/kettle/family/version.rb

@@ -3,7 +3,7 @@
 module Kettle
   module Family
     module Version
-      VERSION = "0.2.4"
+      VERSION = "0.2.5"
     end
     VERSION = Version::VERSION # Traditional Constant Location
   end

data/lib/kettle/family/version_gem.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+require "version_gem"
+require_relative "version"
+
+Kettle::Family::Version.class_eval do
+  extend VersionGem::Basic
+end

data/lib/kettle/family/workflow.rb

@@ -44,7 +44,7 @@ module Kettle
         "BUNDLE_SUPPRESS_INSTALL_USING_MESSAGES" => "true"
       }.freeze
 
-      def initialize(command:, config:, members:, execute: false, accept: true, commit: true, allow_dirty: false, publish: false, push: false, tag: false, start_step: nil, skip_steps: nil, local_ci: false, continue_ci_failures: false, auto_dependency_floors: nil, gha_sha_pins_upgrade: "patch", gha_sha_pins_check: false, env_overrides: {}, debug: false, gem_signing_password: nil, jobs: nil, progress_io: nil, bup_args: [], bex_args: [], start_member: nil, start_branch: nil)
+      def initialize(command:, config:, members:, execute: false, accept: true, commit: true, allow_dirty: false, publish: false, push: false, tag: false, start_step: nil, skip_steps: nil, local_ci: false, continue_ci_failures: false, skip_bundle_audit: false, auto_dependency_floors: nil, gha_sha_pins_upgrade: "patch", gha_sha_pins_check: false, env_overrides: {}, debug: false, gem_signing_password: nil, jobs: nil, progress_io: nil, bup_args: [], bex_args: [], start_member: nil, start_branch: nil)
         @command = command
         @config = config
         @members = members
@@ -59,6 +59,7 @@ module Kettle
         @skip_steps = skip_steps
         @local_ci = local_ci
         @continue_ci_failures = continue_ci_failures
+        @skip_bundle_audit = skip_bundle_audit
         @auto_dependency_floors = auto_dependency_floors.nil? ? config.release_auto_dependency_floors? : auto_dependency_floors
         @gha_sha_pins_upgrade = gha_sha_pins_upgrade
         @gha_sha_pins_check = gha_sha_pins_check
@@ -86,7 +87,7 @@ module Kettle
 
       private
 
-      attr_reader :command, :config, :members, :execute, :accept, :commit, :allow_dirty, :publish, :push, :tag, :start_step, :skip_steps, :local_ci, :continue_ci_failures, :auto_dependency_floors, :gha_sha_pins_upgrade, :gha_sha_pins_check, :env_overrides, :debug, :jobs, :progress_io, :bup_args, :bex_args, :start_member, :start_branch
+      attr_reader :command, :config, :members, :execute, :accept, :commit, :allow_dirty, :publish, :push, :tag, :start_step, :skip_steps, :local_ci, :continue_ci_failures, :skip_bundle_audit, :auto_dependency_floors, :gha_sha_pins_upgrade, :gha_sha_pins_check, :env_overrides, :debug, :jobs, :progress_io, :bup_args, :bex_args, :start_member, :start_branch
 
       def current_branch_results(workflow_members)
         return check_results(workflow_members) if command == "check"
@@ -287,6 +288,7 @@ module Kettle
           skip_steps: skip_steps,
           local_ci: local_ci,
           continue_ci_failures: continue_ci_failures,
+          skip_bundle_audit: skip_bundle_audit,
           auto_dependency_floors: auto_dependency_floors,
           gha_sha_pins_upgrade: gha_sha_pins_upgrade,
           gha_sha_pins_check: gha_sha_pins_check,
@@ -493,6 +495,8 @@ module Kettle
         return unless auto_dependency_floors
         return if dependent_members.empty?
 
+        require_relative "dependency_floor"
+
         floor_results = DependencyFloor.new(
           released_members: released_members,
           dependent_members: dependent_members,
@@ -618,6 +622,7 @@ module Kettle
         args << "start_step=#{start_step}" if start_step
         args << "skip_steps=#{skip_steps}" if skip_steps && !skip_steps.to_s.empty?
         args << "--local-ci" if local_ci
+        args << "--skip-bundle-audit" if skip_bundle_audit
         return command if args.empty?
 
         command.is_a?(Array) ? [*command, *args] : "#{command} #{args.join(" ")}"
@@ -630,9 +635,11 @@ module Kettle
       end
 
       def base_release_env
-        env = config.release_env.dup
+        env = config.family_local_path_env.merge(config.release_env)
+        env["KETTLE_FAMILY_CONFIG"] = config.path if config.path
         env.merge!(TEMPLATE_QUIET_ENV) unless debug
         env["K_RELEASE_CI_CONTINUE"] = "true" if continue_ci_failures
+        env["KETTLE_DEV_SKIP_BUNDLE_AUDIT"] = "true" if skip_bundle_audit
         env
       end
 
@@ -825,6 +832,7 @@ module Kettle
 
       def workflow_env
         {}.tap do |env|
+          env.merge!(config.family_local_path_env)
           if command == "template"
             env["KETTLE_JEM_TEMPLATE_PROFILE"] = config.template_profile if config.template_profile
             env["KJ_REPOSITORY_TOPOLOGY"] = config.template_repository_topology if config.template_repository_topology
@@ -904,12 +912,12 @@ module Kettle
 
       def release_lockfile_env
         base_release_env
-          .merge(config.release_disable_local_path_env.to_h { |key| [key, "false"] })
           .merge(env_overrides)
+          .merge(config.release_disable_local_path_env.to_h { |key| [key, "false"] })
       end
 
       def release_allowed_local_path_roots
-        env_overrides.filter_map do |key, value|
+        config.family_local_path_env.merge(env_overrides).filter_map do |key, value|
           next unless key.end_with?("_LOCAL", "_DEV")
           next if value.to_s.empty? || value.to_s.casecmp("false").zero?
 

data/lib/kettle/family.rb

@@ -10,8 +10,6 @@ require_relative "family/command_runner"
 require_relative "family/readiness_check"
 require_relative "family/changelog_check"
 require_relative "family/git_status"
-require_relative "family/version_bump"
-require_relative "family/dependency_floor"
 require_relative "family/branch_lane_audit"
 require_relative "family/config"
 require_relative "family/branch_target_config"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-family
 version: !ruby/object:Gem::Version
-  version: 0.2.4
+  version: 0.2.5
 platform: ruby
 authors:
 - Peter H. Boling
@@ -66,59 +66,59 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0.1'
 - !ruby/object:Gem::Dependency
-  name: tsort
+  name: kettle-dev
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.2'
+        version: '2.3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.3.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.2'
+        version: '2.3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.3.0
 - !ruby/object:Gem::Dependency
-  name: version_gem
+  name: tsort
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.1'
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 1.1.13
+        version: '0.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.1'
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 1.1.13
+        version: '0.2'
 - !ruby/object:Gem::Dependency
-  name: kettle-dev
+  name: version_gem
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.3'
+        version: '1.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.3.0
+        version: 1.1.13
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.3'
+        version: '1.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.3.0
+        version: 1.1.13
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -176,7 +176,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.3
+        version: 3.1.4
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -186,7 +186,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.3
+        version: 3.1.4
 - !ruby/object:Gem::Dependency
   name: kettle-test
   requirement: !ruby/object:Gem::Requirement
@@ -196,7 +196,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.9
+        version: 2.0.10
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -206,7 +206,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.9
+        version: 2.0.10
 - !ruby/object:Gem::Dependency
   name: turbo_tests2
   requirement: !ruby/object:Gem::Requirement
@@ -216,7 +216,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.5
+        version: 3.1.6
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -226,7 +226,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.5
+        version: 3.1.6
 - !ruby/object:Gem::Dependency
   name: ruby-progressbar
   requirement: !ruby/object:Gem::Requirement
@@ -250,7 +250,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.4
+        version: 1.0.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -260,7 +260,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.4
+        version: 1.0.5
 - !ruby/object:Gem::Dependency
   name: gitmoji-regex
   requirement: !ruby/object:Gem::Requirement
@@ -270,7 +270,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.3
+        version: 2.0.4
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -280,7 +280,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.3
+        version: 2.0.4
 description: "\U0001F469‍\U0001F469‍\U0001F467‍\U0001F467 Kettle::Family provides
   scripts and conventions for coordinating related Ruby gems as one family."
 email:
@@ -332,6 +332,7 @@ files:
 - lib/kettle/family/selection.rb
 - lib/kettle/family/version.rb
 - lib/kettle/family/version_bump.rb
+- lib/kettle/family/version_gem.rb
 - lib/kettle/family/workflow.rb
 - sig/kettle/family.rbs
 - sig/kettle/family/version.rbs
@@ -340,10 +341,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-family.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v0.2.4
-  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v0.2.4/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v0.2.5
+  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v0.2.5/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-family/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-family/0.2.4
+  documentation_uri: https://www.rubydoc.info/gems/kettle-family/0.2.5
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-family/wiki
   news_uri: https://www.railsbling.com/tags/kettle-family