kettle-family 0.2.5 → 0.2.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2bc8f54983986ae1576f3f766324a35d5bc87b2776086a07eb3258d43bba386d
-  data.tar.gz: edc612181ca90bd0ebdfdc196d88810d82c99cdb54b752c66b3173d85fa896a2
+  metadata.gz: e60652d7fefc590ce39d77a3344c00d5f54603fec08e881633907309666d7123
+  data.tar.gz: 7c63758c740901820321012a2b63816ea578ba240ba9f2553e3c77971e15c416
 SHA512:
-  metadata.gz: b3f19512bb9a8b3e66ba7037a44877afc0d76eebccd50b2ea9ff233ed2a3eb74e4e0e4cc14cb2125d059c66b59ecf9f9a238b60e77cc85a81a6ab6c5dfd13749
-  data.tar.gz: 2abdfc91601545b26d5a3a392f833cb439901a4b2d33b64a1574cbb6a57ae8f71bbbfbd8610d18af80a919bdea1e776063319e6b8670cd3b678950cd4e3964d7
+  metadata.gz: 814faf3a55b8be19df30565b6a968191a985ed751d3beb3af2079c9bd939f6e7ca2c1968f3709d97f263a2313dbf468d814f28ffd7a72ee36aa3b8d12e6236b4
+  data.tar.gz: 1017d4d63d75a6932e6ca21d1e860f3cb822373751a626c0ee8291d1f11228500143b4e13c3cd7ee480fb8d0c43a37f84b214327a0d93fe23c001fc170c0dbc5

data/CHANGELOG.md

@@ -30,6 +30,22 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [0.2.6] - 2026-07-14
+
+- TAG: [v0.2.6][0.2.6t]
+- COVERAGE: 95.14% -- 2311/2429 lines in 23 files
+- BRANCH COVERAGE: 76.75% -- 769/1002 branches in 23 files
+- 29.54% documented
+
+### Fixed
+
+- Command runner child processes now use a per-child unbundled environment
+  instead of mutating global `ENV`, avoiding threaded release crashes on
+  TruffleRuby.
+- Family release commands no longer receive the implicit family local path
+  environment variable by default, preventing `kettle-release` from committing
+  sibling path sources into release lockfiles.
+
 ## [0.2.5] - 2026-07-11
 
 - TAG: [v0.2.5][0.2.5t]
@@ -670,7 +686,9 @@ Please file a bug if you notice a violation of semantic versioning.
 - Fixed CI load failures on engines without compatible `pty` support by falling back to Open3 for interactive release commands.
 - Fixed Ruby 3.2 version-bump support by loading Prism lazily and wiring the Prism gem only for MRI versions that need it.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v0.2.5...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v0.2.6...HEAD
+[0.2.6]: https://github.com/kettle-dev/kettle-family/compare/v0.2.5...v0.2.6
+[0.2.6t]: https://github.com/kettle-dev/kettle-family/releases/tag/v0.2.6
 [0.2.5]: https://github.com/kettle-dev/kettle-family/compare/v0.2.4...v0.2.5
 [0.2.5t]: https://github.com/kettle-dev/kettle-family/releases/tag/v0.2.5
 [0.2.4]: https://github.com/kettle-dev/kettle-family/compare/v0.2.3...v0.2.4

data/README.md

@@ -603,7 +603,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-2.425-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-2.429-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-family/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/family/command_runner.rb

@@ -114,15 +114,14 @@ module Kettle
       def call(member:, phase:, command:, env: {}, interactive: false)
         argv = command_argv(member: member, command: command, env: env)
         process_env = process_env(member: member, env: env)
+        spawn_options = process_options
         return skipped_result(member: member, phase: phase, argv: argv) unless execute
 
         started = Process.clock_gettime(Process::CLOCK_MONOTONIC)
-        stdout, stderr, status = with_unbundled_environment do
-          if interactive
-            run_interactive(env: process_env, argv: argv, chdir: member.root, member_name: member.name)
-          else
-            Open3.capture3(process_env, *argv, chdir: member.root)
-          end
+        stdout, stderr, status = if interactive
+          run_interactive(env: process_env, argv: argv, chdir: member.root, member_name: member.name, process_options: spawn_options)
+        else
+          Open3.capture3(process_env, *argv, chdir: member.root, **spawn_options)
         end
         stdout = normalize_output(stdout)
         stderr = normalize_output(stderr)
@@ -146,16 +145,16 @@ module Kettle
 
       attr_reader :execute, :accept, :gem_signing_password, :otp_coordinator
 
-      def run_interactive(env:, argv:, chdir:, member_name:)
-        return run_interactive_pty(env: env, argv: argv, chdir: chdir, member_name: member_name) if pty_available?
+      def run_interactive(env:, argv:, chdir:, member_name:, process_options:)
+        return run_interactive_pty(env: env, argv: argv, chdir: chdir, member_name: member_name, process_options: process_options) if pty_available?
 
-        run_interactive_open3(env: env, argv: argv, chdir: chdir, member_name: member_name)
+        run_interactive_open3(env: env, argv: argv, chdir: chdir, member_name: member_name, process_options: process_options)
       end
 
-      def run_interactive_pty(env:, argv:, chdir:, member_name:)
+      def run_interactive_pty(env:, argv:, chdir:, member_name:, process_options:)
         stdout = +""
         status = nil
-        PTY.spawn(env, *argv, chdir: chdir) do |output, input, pid|
+        PTY.spawn(env, *argv, chdir: chdir, **process_options) do |output, input, pid|
           begin
             loop do
               readers = [output]
@@ -180,11 +179,11 @@ module Kettle
         [stdout, "", status]
       end
 
-      def run_interactive_open3(env:, argv:, chdir:, member_name:)
+      def run_interactive_open3(env:, argv:, chdir:, member_name:, process_options:)
         captured_stdout = +""
         captured_stderr = +""
         status = nil
-        Open3.popen3(env, *argv, chdir: chdir) do |input, output, error, wait_thread|
+        Open3.popen3(env, *argv, chdir: chdir, **process_options) do |input, output, error, wait_thread|
           readers = [output, error]
           readers << $stdin if $stdin.tty? && !otp_coordinator
           until readers.empty?
@@ -280,14 +279,6 @@ module Kettle
         output.to_s.encode("UTF-8", invalid: :replace, undef: :replace, replace: "")
       end
 
-      def with_unbundled_environment
-        if defined?(Bundler)
-          Bundler.with_unbundled_env { yield }
-        else
-          yield
-        end
-      end
-
       def command_argv(member:, command:, env: {})
         argv = normalize_command(command)
         return argv unless mise_configured?(member)
@@ -304,7 +295,21 @@ module Kettle
       end
 
       def process_env(member:, env:)
-        return env unless mise_configured?(member)
+        base_env = unbundled_process_env
+        return base_env.merge(env) unless mise_configured?(member)
+
+        base_env
+      end
+
+      def unbundled_process_env
+        return Bundler.original_env if defined?(Bundler) && Bundler.respond_to?(:original_env)
+        return Bundler.unbundled_env if defined?(Bundler) && Bundler.respond_to?(:unbundled_env)
+
+        {}
+      end
+
+      def process_options
+        return {unsetenv_others: true} if defined?(Bundler)
 
         {}
       end

data/lib/kettle/family/version.rb

@@ -3,7 +3,7 @@
 module Kettle
   module Family
     module Version
-      VERSION = "0.2.5"
+      VERSION = "0.2.6"
     end
     VERSION = Version::VERSION # Traditional Constant Location
   end

data/lib/kettle/family/workflow.rb

@@ -635,7 +635,7 @@ module Kettle
       end
 
       def base_release_env
-        env = config.family_local_path_env.merge(config.release_env)
+        env = config.release_env
         env["KETTLE_FAMILY_CONFIG"] = config.path if config.path
         env.merge!(TEMPLATE_QUIET_ENV) unless debug
         env["K_RELEASE_CI_CONTINUE"] = "true" if continue_ci_failures
@@ -917,7 +917,7 @@ module Kettle
       end
 
       def release_allowed_local_path_roots
-        config.family_local_path_env.merge(env_overrides).filter_map do |key, value|
+        config.release_env.merge(env_overrides).filter_map do |key, value|
           next unless key.end_with?("_LOCAL", "_DEV")
           next if value.to_s.empty? || value.to_s.casecmp("false").zero?
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-family
 version: !ruby/object:Gem::Version
-  version: 0.2.5
+  version: 0.2.6
 platform: ruby
 authors:
 - Peter H. Boling
@@ -341,10 +341,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-family.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v0.2.5
-  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v0.2.5/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v0.2.6
+  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v0.2.6/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-family/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-family/0.2.5
+  documentation_uri: https://www.rubydoc.info/gems/kettle-family/0.2.6
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-family/wiki
   news_uri: https://www.railsbling.com/tags/kettle-family