kettle-family 0.2.5 → 0.2.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2bc8f54983986ae1576f3f766324a35d5bc87b2776086a07eb3258d43bba386d
-  data.tar.gz: edc612181ca90bd0ebdfdc196d88810d82c99cdb54b752c66b3173d85fa896a2
+  metadata.gz: 3dfb2d02f39f7c5b6e0bbf8398440cdce3300490cab3db8aad780b0d4f2b2b23
+  data.tar.gz: 3354f6c528b63eaee745d87438fb41b21777d51d0accf30c1d270ac61189db96
 SHA512:
-  metadata.gz: b3f19512bb9a8b3e66ba7037a44877afc0d76eebccd50b2ea9ff233ed2a3eb74e4e0e4cc14cb2125d059c66b59ecf9f9a238b60e77cc85a81a6ab6c5dfd13749
-  data.tar.gz: 2abdfc91601545b26d5a3a392f833cb439901a4b2d33b64a1574cbb6a57ae8f71bbbfbd8610d18af80a919bdea1e776063319e6b8670cd3b678950cd4e3964d7
+  metadata.gz: 2bf468aac31e154c72514ef15100393038244ea081cf4c3d2ee48369e140919edf273029cca70d500dd3f999e9d14cd7165f85560aa63662f1a3c1cacd9761fe
+  data.tar.gz: 613218aa97433a66acb95849775523a38749267e7fcbf493998def269ccaadabe15d59d9d91f76a08dd436dcf2f9f73540a40372cf38a062e12dbc9c69e28d20

data/CHANGELOG.md

@@ -30,6 +30,35 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [0.2.7] - 2026-07-15
+
+- TAG: [v0.2.7][0.2.7t]
+- COVERAGE: 95.20% -- 2342/2460 lines in 23 files
+- BRANCH COVERAGE: 76.92% -- 780/1014 branches in 23 files
+- 29.29% documented
+
+### Fixed
+
+- Family release now waits for just-published prerequisite family gems to appear
+  in the gem server registry before continuing dependent lockfile normalization
+  and release steps.
+
+## [0.2.6] - 2026-07-14
+
+- TAG: [v0.2.6][0.2.6t]
+- COVERAGE: 95.14% -- 2311/2429 lines in 23 files
+- BRANCH COVERAGE: 76.75% -- 769/1002 branches in 23 files
+- 29.54% documented
+
+### Fixed
+
+- Command runner child processes now use a per-child unbundled environment
+  instead of mutating global `ENV`, avoiding threaded release crashes on
+  TruffleRuby.
+- Family release commands no longer receive the implicit family local path
+  environment variable by default, preventing `kettle-release` from committing
+  sibling path sources into release lockfiles.
+
 ## [0.2.5] - 2026-07-11
 
 - TAG: [v0.2.5][0.2.5t]
@@ -670,7 +699,11 @@ Please file a bug if you notice a violation of semantic versioning.
 - Fixed CI load failures on engines without compatible `pty` support by falling back to Open3 for interactive release commands.
 - Fixed Ruby 3.2 version-bump support by loading Prism lazily and wiring the Prism gem only for MRI versions that need it.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v0.2.5...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v0.2.7...HEAD
+[0.2.7]: https://github.com/kettle-dev/kettle-family/compare/v0.2.6...v0.2.7
+[0.2.7t]: https://github.com/kettle-dev/kettle-family/releases/tag/v0.2.7
+[0.2.6]: https://github.com/kettle-dev/kettle-family/compare/v0.2.5...v0.2.6
+[0.2.6t]: https://github.com/kettle-dev/kettle-family/releases/tag/v0.2.6
 [0.2.5]: https://github.com/kettle-dev/kettle-family/compare/v0.2.4...v0.2.5
 [0.2.5t]: https://github.com/kettle-dev/kettle-family/releases/tag/v0.2.5
 [0.2.4]: https://github.com/kettle-dev/kettle-family/compare/v0.2.3...v0.2.4

data/README.md

@@ -603,7 +603,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-2.425-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-2.460-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-family/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/family/command_runner.rb

@@ -114,15 +114,14 @@ module Kettle
       def call(member:, phase:, command:, env: {}, interactive: false)
         argv = command_argv(member: member, command: command, env: env)
         process_env = process_env(member: member, env: env)
+        spawn_options = process_options
         return skipped_result(member: member, phase: phase, argv: argv) unless execute
 
         started = Process.clock_gettime(Process::CLOCK_MONOTONIC)
-        stdout, stderr, status = with_unbundled_environment do
-          if interactive
-            run_interactive(env: process_env, argv: argv, chdir: member.root, member_name: member.name)
-          else
-            Open3.capture3(process_env, *argv, chdir: member.root)
-          end
+        stdout, stderr, status = if interactive
+          run_interactive(env: process_env, argv: argv, chdir: member.root, member_name: member.name, process_options: spawn_options)
+        else
+          Open3.capture3(process_env, *argv, chdir: member.root, **spawn_options)
         end
         stdout = normalize_output(stdout)
         stderr = normalize_output(stderr)
@@ -146,16 +145,16 @@ module Kettle
 
       attr_reader :execute, :accept, :gem_signing_password, :otp_coordinator
 
-      def run_interactive(env:, argv:, chdir:, member_name:)
-        return run_interactive_pty(env: env, argv: argv, chdir: chdir, member_name: member_name) if pty_available?
+      def run_interactive(env:, argv:, chdir:, member_name:, process_options:)
+        return run_interactive_pty(env: env, argv: argv, chdir: chdir, member_name: member_name, process_options: process_options) if pty_available?
 
-        run_interactive_open3(env: env, argv: argv, chdir: chdir, member_name: member_name)
+        run_interactive_open3(env: env, argv: argv, chdir: chdir, member_name: member_name, process_options: process_options)
       end
 
-      def run_interactive_pty(env:, argv:, chdir:, member_name:)
+      def run_interactive_pty(env:, argv:, chdir:, member_name:, process_options:)
         stdout = +""
         status = nil
-        PTY.spawn(env, *argv, chdir: chdir) do |output, input, pid|
+        PTY.spawn(env, *argv, chdir: chdir, **process_options) do |output, input, pid|
           begin
             loop do
               readers = [output]
@@ -180,11 +179,11 @@ module Kettle
         [stdout, "", status]
       end
 
-      def run_interactive_open3(env:, argv:, chdir:, member_name:)
+      def run_interactive_open3(env:, argv:, chdir:, member_name:, process_options:)
         captured_stdout = +""
         captured_stderr = +""
         status = nil
-        Open3.popen3(env, *argv, chdir: chdir) do |input, output, error, wait_thread|
+        Open3.popen3(env, *argv, chdir: chdir, **process_options) do |input, output, error, wait_thread|
           readers = [output, error]
           readers << $stdin if $stdin.tty? && !otp_coordinator
           until readers.empty?
@@ -280,14 +279,6 @@ module Kettle
         output.to_s.encode("UTF-8", invalid: :replace, undef: :replace, replace: "")
       end
 
-      def with_unbundled_environment
-        if defined?(Bundler)
-          Bundler.with_unbundled_env { yield }
-        else
-          yield
-        end
-      end
-
       def command_argv(member:, command:, env: {})
         argv = normalize_command(command)
         return argv unless mise_configured?(member)
@@ -304,7 +295,21 @@ module Kettle
       end
 
       def process_env(member:, env:)
-        return env unless mise_configured?(member)
+        base_env = unbundled_process_env
+        return base_env.merge(env) unless mise_configured?(member)
+
+        base_env
+      end
+
+      def unbundled_process_env
+        return Bundler.original_env if defined?(Bundler) && Bundler.respond_to?(:original_env)
+        return Bundler.unbundled_env if defined?(Bundler) && Bundler.respond_to?(:unbundled_env)
+
+        {}
+      end
+
+      def process_options
+        return {unsetenv_others: true} if defined?(Bundler)
 
         {}
       end

data/lib/kettle/family/version.rb

@@ -3,7 +3,7 @@
 module Kettle
   module Family
     module Version
-      VERSION = "0.2.5"
+      VERSION = "0.2.7"
     end
     VERSION = Version::VERSION # Traditional Constant Location
   end

data/lib/kettle/family/workflow.rb

@@ -43,6 +43,8 @@ module Kettle
         "BUNDLE_SILENCE_ROOT_WARNING" => "true",
         "BUNDLE_SUPPRESS_INSTALL_USING_MESSAGES" => "true"
       }.freeze
+      REGISTRY_WAIT_ATTEMPTS = 15
+      REGISTRY_WAIT_INTERVAL_SECONDS = 15
 
       def initialize(command:, config:, members:, execute: false, accept: true, commit: true, allow_dirty: false, publish: false, push: false, tag: false, start_step: nil, skip_steps: nil, local_ci: false, continue_ci_failures: false, skip_bundle_audit: false, auto_dependency_floors: nil, gha_sha_pins_upgrade: "patch", gha_sha_pins_check: false, env_overrides: {}, debug: false, gem_signing_password: nil, jobs: nil, progress_io: nil, bup_args: [], bex_args: [], start_member: nil, start_branch: nil)
         @command = command
@@ -497,15 +499,33 @@ module Kettle
 
         require_relative "dependency_floor"
 
+        affected_dependent_members = dependent_members_depending_on(released_members: released_members, dependent_members: dependent_members)
         floor_results = DependencyFloor.new(
           released_members: released_members,
           dependent_members: dependent_members,
           mode: execute ? :execute : :dry_run
         ).results
         memo.concat(floor_results)
-        return unless floor_results.any? && floor_results.all?(&:ok?)
+        return if floor_results.any? && !floor_results.all?(&:ok?)
 
-        commit_dependency_floor_changes(dependent_members: floor_results.map(&:member_name), runner: runner, memo: memo) if execute && commit
+        commit_dependency_floor_changes(dependent_members: floor_results.map(&:member_name), runner: runner, memo: memo) if floor_results.any? && execute && commit
+        return if memo.any? && !memo.last.ok?
+
+        append_registry_wait_result(released_members: released_members, dependent_members: affected_dependent_members, memo: memo)
+      end
+
+      def dependent_members_depending_on(released_members:, dependent_members:)
+        released_names = released_members.map(&:name)
+        dependent_members.select do |member|
+          Array(member.dependencies).map(&:to_s).any? { |dependency| released_names.include?(dependency) }
+        end
+      end
+
+      def append_registry_wait_result(released_members:, dependent_members:, memo:)
+        return unless execute && publish
+        return if dependent_members.empty?
+
+        memo << wait_for_registry_result(released_members: released_members, dependent_members: dependent_members)
       end
 
       def commit_dependency_floor_changes(dependent_members:, runner:, memo:)
@@ -635,7 +655,7 @@ module Kettle
       end
 
       def base_release_env
-        env = config.family_local_path_env.merge(config.release_env)
+        env = config.release_env
         env["KETTLE_FAMILY_CONFIG"] = config.path if config.path
         env.merge!(TEMPLATE_QUIET_ENV) unless debug
         env["K_RELEASE_CI_CONTINUE"] = "true" if continue_ci_failures
@@ -664,6 +684,50 @@ module Kettle
         raise Error, "could not parse published versions for #{gem_name}: #{error.message}"
       end
 
+      def wait_for_registry_result(released_members:, dependent_members:)
+        started_at = Process.clock_gettime(Process::CLOCK_MONOTONIC)
+        missing = []
+        attempts = 0
+        REGISTRY_WAIT_ATTEMPTS.times do |index|
+          attempts = index + 1
+          missing = released_members.reject { |member| released_version?(member.name, member.version) }
+          break if missing.empty?
+
+          sleep(REGISTRY_WAIT_INTERVAL_SECONDS) if attempts < REGISTRY_WAIT_ATTEMPTS
+        end
+        elapsed = Process.clock_gettime(Process::CLOCK_MONOTONIC) - started_at
+        dependency_names = dependent_members.map(&:name).join(", ")
+        if missing.empty?
+          CommandResult.new(
+            member_name: dependency_names,
+            phase: "release_wait_for_registry",
+            command: ["internal", "wait-for-registry", released_members.map { |member| "#{member.name}-#{member.version}" }.join(",")],
+            workdir: config.root,
+            status: 0,
+            success: true,
+            stdout: "registry contains #{released_members.map { |member| "#{member.name} #{member.version}" }.join(", ")} after #{attempts} check(s)",
+            stderr: "",
+            elapsed_seconds: elapsed,
+            skipped: false,
+            reason: "dependent members: #{dependency_names}"
+          )
+        else
+          CommandResult.new(
+            member_name: dependency_names,
+            phase: "release_wait_for_registry",
+            command: ["internal", "wait-for-registry", released_members.map { |member| "#{member.name}-#{member.version}" }.join(",")],
+            workdir: config.root,
+            status: 1,
+            success: false,
+            stdout: "timed out waiting for #{missing.map { |member| "#{member.name} #{member.version}" }.join(", ")} after #{attempts} check(s)",
+            stderr: "",
+            elapsed_seconds: elapsed,
+            skipped: false,
+            reason: "dependent members: #{dependency_names}"
+          )
+        end
+      end
+
       def already_released_result(member)
         tag = release_tag_name(member.version)
         current_release_head = released_version_current_head?(member, tag)
@@ -917,7 +981,7 @@ module Kettle
       end
 
       def release_allowed_local_path_roots
-        config.family_local_path_env.merge(env_overrides).filter_map do |key, value|
+        config.release_env.merge(env_overrides).filter_map do |key, value|
           next unless key.end_with?("_LOCAL", "_DEV")
           next if value.to_s.empty? || value.to_s.casecmp("false").zero?
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-family
 version: !ruby/object:Gem::Version
-  version: 0.2.5
+  version: 0.2.7
 platform: ruby
 authors:
 - Peter H. Boling
@@ -99,26 +99,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.2'
-- !ruby/object:Gem::Dependency
-  name: version_gem
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.1'
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 1.1.13
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.1'
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 1.1.13
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -216,7 +196,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.6
+        version: 3.1.9
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -226,7 +206,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.6
+        version: 3.1.9
 - !ruby/object:Gem::Dependency
   name: ruby-progressbar
   requirement: !ruby/object:Gem::Requirement
@@ -250,7 +230,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.5
+        version: 1.0.6
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -260,7 +240,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.5
+        version: 1.0.6
 - !ruby/object:Gem::Dependency
   name: gitmoji-regex
   requirement: !ruby/object:Gem::Requirement
@@ -341,10 +321,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-family.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v0.2.5
-  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v0.2.5/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v0.2.7
+  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v0.2.7/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-family/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-family/0.2.5
+  documentation_uri: https://www.rubydoc.info/gems/kettle-family/0.2.7
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-family/wiki
   news_uri: https://www.railsbling.com/tags/kettle-family
@@ -374,7 +354,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.10
+rubygems_version: 4.0.16
 specification_version: 4
 summary: "\U0001F469‍\U0001F469‍\U0001F467‍\U0001F467 CLI helpers for managing related
   Ruby gems as a family."