kettle-family 0.1.10 → 0.1.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 703c624ada4b7494a0a038c8a1e909c45a09b3172b581a81863f12eec6f747ce
-  data.tar.gz: 7a71da9d94bd1945ccb091d16b6b0f6b537ff33ad00f6b42805e82cbf443a25e
+  metadata.gz: ce5e205f14b0d680ee20770b52bbe6567440d355f192b60df5ea5432539301df
+  data.tar.gz: a4b1746b3d74bd7a7ed27f08489476fb29edc9f54d118e213c5ca825f1fd3adc
 SHA512:
-  metadata.gz: 2eceaf1a932d83e3d2ca0c4f6498fed8232735702d6454043521df1e9df48d18d92495adb3827b1fa2e5632126a64dfaabb4bcad9a01922d0eb226d8cb845161
-  data.tar.gz: a7f8a0e30d55c3d7b75dfaed30e03ec0ba30fbc74ea6f09d321a7355ac998a4fcaa9947d4a66028ab59a06ed8a348d468ec835cb71f18ba2652c09d4f4b31b87
+  metadata.gz: 82ec83f5b90a6a18db54ff704a8e1387a19d674db03a6087e08afeedeab1dbf071788a6d4182a262377bd60df38f93c936ead0b3cf23efc1c0645981a956277b
+  data.tar.gz: c65192a2a1461b648a02dd67fbb2eacba8e01425e92c5cdbfe1b28e3a49af671a9d5a8498de7903ea4cb199ed9be8e29dcc54d5b50af9f226336a9c4a60cc25b

data/CHANGELOG.md

@@ -30,6 +30,27 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [0.1.11] - 2026-06-23
+
+- TAG: [v0.1.11][0.1.11t]
+- COVERAGE: 94.51% -- 1342/1420 lines in 20 files
+- BRANCH COVERAGE: 76.59% -- 458/598 branches in 20 files
+- 40.40% documented
+
+### Fixed
+
+- Release reports now label plain `release` as build-only mode and
+  `release --publish` as publish mode, making it clear when the workflow will
+  run `kettle-release`.
+- Branch-stack release workflows now reuse the cached gem signing password in
+  member-local child workflows, avoiding a second signing prompt for the same
+  family run.
+- Release workflows now cache gem signing passwords for signed build commands,
+  even when publishing is not enabled.
+- Release workflows now normalize configured lockfiles before readiness checks
+  with local path dependency environment variables disabled, then commit any
+  resulting lockfile changes.
+
 ## [0.1.10] - 2026-06-23
 
 - TAG: [v0.1.10][0.1.10t]
@@ -253,7 +274,11 @@ Please file a bug if you notice a violation of semantic versioning.
 - Fixed CI load failures on engines without compatible `pty` support by falling back to Open3 for interactive release commands.
 - Fixed Ruby 3.2 version-bump support by loading Prism lazily and wiring the Prism gem only for MRI versions that need it.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v0.1.10...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v0.1.11...HEAD
+[0.1.12]: https://github.com/kettle-dev/kettle-family/compare/v0.1.11...v0.1.12
+[0.1.12t]: https://github.com/kettle-dev/kettle-family/releases/tag/v0.1.12
+[0.1.11]: https://github.com/kettle-dev/kettle-family/compare/v0.1.10...v0.1.11
+[0.1.11t]: https://github.com/kettle-dev/kettle-family/releases/tag/v0.1.11
 [0.1.10]: https://github.com/kettle-dev/kettle-family/compare/v0.1.9...v0.1.10
 [0.1.10t]: https://github.com/kettle-dev/kettle-family/releases/tag/v0.1.10
 [0.1.9]: https://github.com/kettle-dev/kettle-family/compare/v0.1.8...v0.1.9

data/README.md

@@ -562,7 +562,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-1.378-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-1.420-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-family/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/family/cli.rb

@@ -177,6 +177,7 @@ module Kettle
           branch_lanes: config.branch_lanes,
           release_target_branches: config.release_target_branches,
           member_release_target_branches: member_release_target_branches(members: selected, config: config),
+          release_mode: release_mode(command: command, options: options),
           command: command,
           results: results
         )
@@ -332,6 +333,12 @@ module Kettle
         ReleaseStateCheck.new(config: config, members: members).results
       end
 
+      def release_mode(command:, options:)
+        return unless command == "release"
+
+        options[:publish] ? "publish" : "build-only"
+      end
+
       def member_release_target_branches(members:, config:)
         members.each_with_object({}) do |member, memo|
           member_config = member_local_release_config(member: member, config: config)

data/lib/kettle/family/config.rb

@@ -168,6 +168,22 @@ module Kettle
         fetch_path("template", "normalize_lockfiles_command") || "bundle lock"
       end
 
+      def release_normalize_lockfiles?
+        configured = fetch_path("release", "normalize_lockfiles")
+        return configured unless configured.nil?
+
+        normalize_lockfiles?
+      end
+
+      def release_normalize_lockfiles_command
+        fetch_path("release", "normalize_lockfiles_command") || normalize_lockfiles_command
+      end
+
+      def release_disable_local_path_env
+        configured = fetch_path("release", "disable_local_path_env")
+        Array(configured || default_release_disable_local_path_env)
+      end
+
       def install_local_dependencies
         paths = fetch_path("install", "local_dependencies") || fetch_path("local_dependencies") || []
         Array(paths).map do |entry|
@@ -214,6 +230,19 @@ module Kettle
 
       private
 
+      def default_release_disable_local_path_env
+        %w[
+          K_JEM_TEMPLATING
+          SMORG_RB_DEV
+          TREE_SITTER_LANGUAGE_PACK_DEV
+          KETTLE_RB_DEV
+          RUBOCOP_LTS_DEV
+          PBOLING_DEV
+          GALTZO_FLOSS_DEV
+          UR_BRAIN_DEV
+        ]
+      end
+
       def expand_config_relative_path(value)
         text = value.to_s
         return text if text.start_with?("/")

data/lib/kettle/family/report.rb

@@ -5,9 +5,9 @@ require "json"
 module Kettle
   module Family
     class Report
-      attr_reader :family_name, :family_mode, :order_mode, :members, :selected_members, :config_path, :command, :results, :branch_lanes, :release_target_branches, :member_release_target_branches
+      attr_reader :family_name, :family_mode, :order_mode, :members, :selected_members, :config_path, :command, :results, :branch_lanes, :release_target_branches, :member_release_target_branches, :release_mode
 
-      def initialize(family_name:, order_mode:, members:, selected_members:, config_path:, family_mode: nil, branch_lanes: {}, release_target_branches: [], member_release_target_branches: {}, command: nil, results: [])
+      def initialize(family_name:, order_mode:, members:, selected_members:, config_path:, family_mode: nil, branch_lanes: {}, release_target_branches: [], member_release_target_branches: {}, release_mode: nil, command: nil, results: [])
         @family_name = family_name
         @family_mode = family_mode
         @order_mode = order_mode
@@ -19,6 +19,7 @@ module Kettle
         @branch_lanes = branch_lanes
         @release_target_branches = release_target_branches
         @member_release_target_branches = member_release_target_branches
+        @release_mode = release_mode
       end
 
       def to_h
@@ -32,6 +33,7 @@ module Kettle
           "branch_lanes" => branch_lanes,
           "release_target_branches" => release_target_branches,
           "member_release_target_branches" => member_release_target_branches,
+          "release_mode" => release_mode,
           "command" => command,
           "results" => results.map(&:to_h),
           "resume_hint" => resume_hint
@@ -48,6 +50,7 @@ module Kettle
         lines << "config: #{config_path || "none"}"
         lines << "order: #{order_mode}"
         lines << "command: #{command}" if command
+        lines << "release mode: #{release_mode}" if release_mode
         lines << "release targets: #{release_target_branches.join(", ")}" unless release_target_branches.empty?
         append_member_release_targets(lines)
         lines << "members:"

data/lib/kettle/family/version.rb

@@ -3,7 +3,7 @@
 module Kettle
   module Family
     module Version
-      VERSION = "0.1.10"
+      VERSION = "0.1.11"
     end
     VERSION = Version::VERSION # Traditional Constant Location
   end

data/lib/kettle/family/workflow.rb

@@ -15,7 +15,7 @@ module Kettle
         "docs" => "bundle exec rake yard"
       }.freeze
 
-      def initialize(command:, config:, members:, execute: false, commit: true, allow_dirty: false, publish: false, push: false, tag: false, start_step: nil, local_ci: false, continue_ci_failures: false, env_overrides: {})
+      def initialize(command:, config:, members:, execute: false, commit: true, allow_dirty: false, publish: false, push: false, tag: false, start_step: nil, local_ci: false, continue_ci_failures: false, env_overrides: {}, gem_signing_password: nil)
         @command = command
         @config = config
         @members = members
@@ -29,11 +29,11 @@ module Kettle
         @local_ci = local_ci
         @continue_ci_failures = continue_ci_failures
         @env_overrides = env_overrides
-        @gem_signing_password = nil
+        @gem_signing_password = gem_signing_password
       end
 
       def results
-        prompt_for_gem_signing_password if command == "release" && execute && publish && gem_signing_required?
+        prompt_for_gem_signing_password if command == "release" && execute && release_signing_prompt_required?
         return branch_target_results unless config.release_target_branches.empty?
         return member_local_branch_target_results if member_local_branch_targets?
 
@@ -134,7 +134,8 @@ module Kettle
           start_step: start_step,
           local_ci: local_ci,
           continue_ci_failures: continue_ci_failures,
-          env_overrides: env_overrides
+          env_overrides: env_overrides,
+          gem_signing_password: @gem_signing_password
         )
       end
 
@@ -150,6 +151,14 @@ module Kettle
             next
           end
 
+          if config.release_normalize_lockfiles?
+            normalize_release_lockfiles(member: member, runner: runner, memo: memo)
+            break memo unless memo.last&.ok?
+
+            commit_normalized_lockfiles(branch_members: [member], runner: runner, memo: memo, reason: "release")
+            break memo unless memo.last&.ok?
+          end
+
           append_release_internal_checks(member: member, memo: memo)
           break memo unless memo.last(2).all?(&:ok?)
 
@@ -158,7 +167,7 @@ module Kettle
             phase: release_phase,
             command: release_command,
             env: release_env,
-            interactive: publish
+            interactive: release_command_interactive?
           )
           break memo unless memo.last.ok?
 
@@ -225,6 +234,10 @@ module Kettle
         kettle_release_command?(command) ? append_kettle_release_args(command) : command
       end
 
+      def release_command_interactive?
+        publish || !!@gem_signing_password
+      end
+
       def kettle_release_command?(command)
         case command
         when Array
@@ -292,11 +305,25 @@ module Kettle
         !ENV.fetch("SKIP_GEM_SIGNING", "").casecmp("true").zero?
       end
 
+      def release_signing_prompt_required?
+        return false unless gem_signing_required?
+        return true if publish
+
+        members.any? { |member| signed_gemspec?(member) }
+      end
+
+      def signed_gemspec?(member)
+        return false unless member.gemspec_path && File.file?(member.gemspec_path)
+
+        content = File.read(member.gemspec_path)
+        content.include?("signing_key") || content.include?("cert_chain")
+      end
+
       def prompt_for_gem_signing_password
         return if @gem_signing_password
 
         print("Gem signing key password (cached for this family release; MFA prompts still remain interactive): ")
-        @gem_signing_password = if $stdin.respond_to?(:noecho)
+        @gem_signing_password = if $stdin.respond_to?(:noecho) && $stdin.tty?
           $stdin.noecho(&:gets)&.chomp
         else
           $stdin.gets&.chomp
@@ -361,8 +388,23 @@ module Kettle
         memo << result
       end
 
-      def commit_normalized_lockfiles(branch_members:, runner:, memo:)
-        return unless command == "template" && config.normalize_lockfiles? && commit
+      def normalize_release_lockfiles(member:, runner:, memo:)
+        result = runner.call(
+          member: member,
+          phase: "release_normalize_lockfiles",
+          command: config.release_normalize_lockfiles_command,
+          env: release_lockfile_env
+        )
+        memo << result
+      end
+
+      def release_lockfile_env
+        release_env.merge(config.release_disable_local_path_env.to_h { |key| [key, "false"] })
+      end
+
+      def commit_normalized_lockfiles(branch_members:, runner:, memo:, reason: command)
+        return unless commit
+        return unless commit_normalized_lockfiles?(reason)
 
         branch_members.each do |member|
           result = runner.call(
@@ -380,6 +422,17 @@ module Kettle
         end
       end
 
+      def commit_normalized_lockfiles?(reason)
+        case reason
+        when "template"
+          config.normalize_lockfiles?
+        when "release"
+          config.release_normalize_lockfiles?
+        else
+          false
+        end
+      end
+
       def family_member
         Member.new(
           name: config.family_name,

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-family
 version: !ruby/object:Gem::Version
-  version: 0.1.10
+  version: 0.1.11
 platform: ruby
 authors:
 - Peter H. Boling
@@ -309,10 +309,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-family.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v0.1.10
-  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v0.1.10/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v0.1.11
+  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v0.1.11/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-family/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-family/0.1.10
+  documentation_uri: https://www.rubydoc.info/gems/kettle-family/0.1.11
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-family/wiki
   news_uri: https://www.railsbling.com/tags/kettle-family