kettle-family 1.2.69 → 1.2.71

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a3f10c970b0e0ae29cdb82ca1a9b3b6cc714cd94368cd9ec371ff2ac870b9800
-  data.tar.gz: 2721e7a64d0fce16c6891a68c48972089c27b9d2a7a69892879a8d4f2dbb06f0
+  metadata.gz: 8c61cfdc32555584613be9cc40abc3f43596619d6dcaa50296c7c2d0a5a91cdd
+  data.tar.gz: f7430c5af93088a425052e2f387a11bd84e43ba861ec417bf12bd26f14a4da7e
 SHA512:
-  metadata.gz: 1f2da27cc1a98f1652d0ee74e4d00863faa531ee18bf584a050fa0887d574f470c698b3a0b62025b6483fc90c5672e594082c7939d4d3a4e19e6e4a02b071bd2
-  data.tar.gz: fb463b7508060c144a365c7e6cd856933354ddad5bed11efaaea44759fccb8d24efd33f5527bf26a3f9291c173e9d868b16f85607d13f8af972dafbbbd68ac11
+  metadata.gz: 59b42741cd514d00252fdc0e3dec6c8c761d7151b977282b8f028ef29ff41b190564d2e4cd9527efc4eaf22790a35abf865dabc31635fd25b66481587be2afd5
+  data.tar.gz: 86a21caf729f0a1bc47eac1b46953c17842e83b05d52ff60ada1018b3b3727e0aa1f7adae8be30d46aeaf1d7e3515ef5c62e008ed38aa724e5410fe143c14449

data/CHANGELOG.md

@@ -30,6 +30,30 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [1.2.71] - 2026-08-30
+
+- TAG: [v1.2.71][1.2.71t]
+- COVERAGE: 93.30% -- 5544/5942 lines in 33 files
+- BRANCH COVERAGE: 76.62% -- 2281/2977 branches in 33 files
+- 30.50% documented
+
+### Fixed
+
+- Preserve explicitly enabled monorepo template dependency graphs while reconciling release lockfiles.
+
+## [1.2.70] - 2026-08-30
+
+- TAG: [v1.2.70][1.2.70t]
+- COVERAGE: 93.22% -- 5502/5902 lines in 33 files
+- BRANCH COVERAGE: 76.41% -- 2258/2955 branches in 33 files
+- 30.50% documented
+
+### Fixed
+
+- Allow monorepo bundle updates to retain configured in-repository path dependencies.
+
+- Launch monorepo member release tools from the family bundle so configured in-repository dependencies remain available across release waves.
+
 ## [1.2.69] - 2026-08-30
 
 - TAG: [v1.2.69][1.2.69t]
@@ -2333,7 +2357,11 @@ Please file a bug if you notice a violation of semantic versioning.
 - Fixed CI load failures on engines without compatible `pty` support by falling back to Open3 for interactive release commands.
 - Fixed Ruby 3.2 version-bump support by loading Prism lazily and wiring the Prism gem only for MRI versions that need it.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.69...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.71...HEAD
+[1.2.71]: https://github.com/kettle-dev/kettle-family/compare/v1.2.70...v1.2.71
+[1.2.71t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.71
+[1.2.70]: https://github.com/kettle-dev/kettle-family/compare/v1.2.69...v1.2.70
+[1.2.70t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.70
 [1.2.69]: https://github.com/kettle-dev/kettle-family/compare/v1.2.68...v1.2.69
 [1.2.69t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.69
 [1.2.68]: https://github.com/kettle-dev/kettle-family/compare/v1.2.67...v1.2.68

data/README.md

@@ -1049,7 +1049,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-5.900-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-5.942-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-family/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/family/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "1.2.69"
+      VERSION = "1.2.71"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

data/lib/kettle/family/workflow.rb

@@ -1761,11 +1761,16 @@ module Kettle
         return ["Gemfile.lock was not created by dependency floor lockfile refresh"] unless File.file?(lockfile)
 
         lockfile_source = File.read(lockfile)
-        diagnostics = Kettle::Dev::LockfileReset.local_path_remote_lines_from_source(lockfile_source).map do |line_number|
+        allowed_path_gems = dependency_floor_allowed_path_gems(member: member, lockfile_source: lockfile_source)
+        diagnostics = Kettle::Dev::LockfileReset.local_path_remote_lines_from_source(lockfile_source).reject do |line_number|
+          dependency_floor_allowed_path_remote?(member: member, lockfile_source: lockfile_source, line_number: line_number)
+        end.map do |line_number|
           "Gemfile.lock has local path remote at line #{line_number}"
         end
         checksum_entries = Kettle::Dev::LockfileReset.checksum_entries_from_source(lockfile_source) || {}
         diagnostics.concat(released_members.filter_map do |released_member|
+          next if allowed_path_gems.include?(released_member.name)
+
           checksum = checksum_entries[[released_member.name, released_member.version]]
           if checksum.nil?
             "Gemfile.lock CHECKSUMS is missing #{released_member.name} #{released_member.version}"
@@ -1776,6 +1781,48 @@ module Kettle
         diagnostics
       end
 
+      def dependency_floor_allowed_path_remote?(member:, lockfile_source:, line_number:)
+        remote = lockfile_source.each_line.with_index(1).find { |_line, index| index == line_number }.first
+          .to_s.split("remote:", 2).last.to_s.strip
+        remote_path = File.expand_path(remote, member.root)
+        release_allowed_local_path_roots.any? do |root|
+          remote_path == root || remote_path.start_with?("#{root}/")
+        end
+      end
+
+      def dependency_floor_allowed_path_gems(member:, lockfile_source:)
+        in_path = false
+        in_specs = false
+        allowed_remote = false
+        lockfile_source.each_line.each_with_object(Set.new) do |line, gems|
+          stripped = line.strip
+          if stripped.match?(/\A[A-Z][A-Z ]*\z/)
+            in_path = stripped == "PATH"
+            in_specs = false
+            allowed_remote = false
+            next
+          end
+          next unless in_path
+
+          if stripped.start_with?("remote:")
+            remote = stripped.split("remote:", 2).last.to_s.strip
+            remote_path = File.expand_path(remote, member.root)
+            allowed_remote = release_allowed_local_path_roots.any? do |root|
+              remote_path == root || remote_path.start_with?("#{root}/")
+            end
+            next
+          end
+          if stripped == "specs:"
+            in_specs = true
+            next
+          end
+          next unless allowed_remote && in_specs && line.start_with?("    ") && !line.start_with?("      ")
+
+          name = stripped.split(" (", 2).first
+          gems << name unless name.empty?
+        end
+      end
+
       def dependency_floor_lockfile_command(released_members)
         ["bundle", "lock", "--update", *released_members.map(&:name), "--add-checksums"]
       end
@@ -2425,8 +2472,8 @@ module Kettle
         local_kettle_dev = ENV.fetch("KETTLE_DEV_DEV", "").to_s.strip
         env["KETTLE_DEV_DEV"] = local_kettle_dev if kettle_release_command?(raw_release_command) && local_path_env_value?(local_kettle_dev)
         if kettle_release_command?(raw_release_command)
-          local_kettle_dev_gemfile = local_kettle_dev_gemfile_path(local_kettle_dev)
-          env["BUNDLE_GEMFILE"] = local_kettle_dev_gemfile if local_kettle_dev_gemfile
+          release_tool_gemfile = release_tool_gemfile_path(local_kettle_dev)
+          env["BUNDLE_GEMFILE"] = release_tool_gemfile if release_tool_gemfile
         end
         if config.family_mode == "monorepo"
           # Monorepo members release from subdirectories, while CI workflows
@@ -2471,6 +2518,20 @@ module Kettle
         candidates.find { |path| File.file?(path) }
       end
 
+      # A member's development lockfile can pin an older kettle-dev than the
+      # family runner. That older release tool may not understand the current
+      # family policy, notably configured monorepo PATH dependencies. Launch
+      # kettle-release from the family bundle instead; the release tool still
+      # runs member project commands from the member checkout.
+      def release_tool_gemfile_path(local_kettle_dev)
+        local_kettle_dev_gemfile = local_kettle_dev_gemfile_path(local_kettle_dev)
+        return local_kettle_dev_gemfile if local_kettle_dev_gemfile
+        return unless config.configured_monorepo_release?
+
+        family_gemfile = File.join(config.root, "Gemfile")
+        family_gemfile if File.file?(family_gemfile)
+      end
+
       # A release task may start with local sibling paths so a member can
       # consume a selected dependency that has not been published yet. Once
       # that dependency is complete in an earlier wave, use its registry
@@ -4116,7 +4177,9 @@ module Kettle
       end
 
       def release_allowed_local_path_env_names
-        config.release_allowed_local_path_env_names
+        names = config.release_allowed_local_path_env_names
+        names << "K_JEM_TEMPLATING" if preserve_monorepo_template_context?
+        names.uniq
       end
 
       def release_local_path_policy_env
@@ -4132,6 +4195,7 @@ module Kettle
 
       def release_lockfile_local_path_env_overrides(member = nil)
         explicit = config.release_disable_local_path_env.to_h { |key| [key.to_s, "false"] }
+        explicit.delete("K_JEM_TEMPLATING") if preserve_monorepo_template_context?
         derived = release_local_path_env_detection_sources.each_with_object({}) do |(key, value), memo|
           key = key.to_s
           next unless key.end_with?("_LOCAL", "_DEV")
@@ -4141,7 +4205,21 @@ module Kettle
           memo[key] = "false"
         end
         inferred = member ? release_lockfile_inferred_local_path_env(member).to_h { |key| [key, "false"] } : {}
-        explicit.merge(derived).merge(inferred).merge(release_member_local_path_env(member))
+        explicit
+          .merge(derived)
+          .merge(inferred)
+          .merge(release_member_local_path_env(member))
+          .merge(preserve_monorepo_template_context? ? {"K_JEM_TEMPLATING" => "true"} : {})
+      end
+
+      # K_JEM_TEMPLATING activates the generated monorepo dependency closure;
+      # it is not an unrelated local checkout switch. Preserve it only when
+      # the caller explicitly enabled it for a configured monorepo release.
+      def preserve_monorepo_template_context?
+        return false unless config.configured_monorepo_release?
+
+        value = release_local_path_env_sources["K_JEM_TEMPLATING"].to_s.strip.downcase
+        %w[true yes 1 on].include?(value)
       end
 
       def release_member_local_path_env(member)
@@ -4319,14 +4397,11 @@ module Kettle
       end
 
       def bundle_update_lockfile_diagnostics(member)
-        lockfile = File.join(member.root, "Gemfile.lock")
-        return [] unless File.file?(lockfile)
-
-        File.readlines(lockfile).filter_map.with_index(1) do |line, index|
-          next unless line.start_with?("  remote: /", "  remote: ./", "  remote: ../")
-
-          "release lockfile has local path remote at Gemfile.lock:#{index}"
-        end
+        ReadinessCheck.call(
+          member: member,
+          config: config,
+          allowed_local_path_roots: release_allowed_local_path_roots
+        ).stdout.lines.grep(/^release lockfile has local path remote at /).map(&:chomp)
       end
 
       def commit_bex_changes(member:, runner:, memo:)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-family
 version: !ruby/object:Gem::Version
-  version: 1.2.69
+  version: 1.2.71
 platform: ruby
 authors:
 - Peter H. Boling
@@ -441,10 +441,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-family.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.69
-  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.69/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.71
+  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.71/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-family/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.69
+  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.71
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-family/wiki
   news_uri: https://www.railsbling.com/tags/kettle-family