kettle-family 0.1.18 → 0.1.19

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 10fbba264a541a5e75a232b97eaeb6345ca8d39e4890cfbdd94b8e6e8e603b9c
-  data.tar.gz: '09e74048d1d9a5bb5bb0bdcad08d501f3aee4d9d0a35902b3e6eeabbb9bd61c0'
+  metadata.gz: 1ffac198401618fcc4e988b09d48941a187bf809f3b0baf7b6261247fa81d8e3
+  data.tar.gz: 1a139626c8c632ceca9f738678593b0103810f6bf884a9a98a29d1ab8c197edf
 SHA512:
-  metadata.gz: c531f29f32761826c0898234853805f0af313a151232fde19d851e812a8255fd9543515e4142ded8bc2e50146a3887fe950ed1c3de77432f688be76f5809fa2a
-  data.tar.gz: de6ea714b9b25f9339b5748b76de0d035b35a32d4fd33f9fd643ab518f0f4e9979d0be9d9267b56470f4fd0ca9abf99ea6df99de67e11468eb010085ba0e6ff5
+  metadata.gz: cd5ba9086f00e699c138787ffc5c5e8140616238e18713f79a58ae8e215ff4adb2630a356e42476c9314f2324d7027e7f489169882f0359694dc8e7379251687
+  data.tar.gz: 28ddd6e49f16293a5469dcceb271238077fcb140a85542ae6288f5d5a6072e905677e733a25d6388f3b3aff4ba2bc4ac14ae34a121fe8435972ec9ee98cb18e5

data/CHANGELOG.md

@@ -30,6 +30,20 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [0.1.19] - 2026-06-25
+
+- TAG: [v0.1.19][0.1.19t]
+- COVERAGE: 94.74% -- 1531/1616 lines in 21 files
+- BRANCH COVERAGE: 76.20% -- 538/706 branches in 21 files
+- 39.63% documented
+
+### Fixed
+
+- Interactive release commands now leave RubyGems MFA/OTP prompts for the user
+  instead of sending cached signing passphrases to the `Code:` prompt.
+- Interactive command output is now normalized to UTF-8 before report rendering,
+  avoiding encoding crashes when a release command fails after PTY output.
+
 ## [0.1.18] - 2026-06-25
 
 - TAG: [v0.1.18][0.1.18t]
@@ -337,7 +351,9 @@ Please file a bug if you notice a violation of semantic versioning.
 - Fixed CI load failures on engines without compatible `pty` support by falling back to Open3 for interactive release commands.
 - Fixed Ruby 3.2 version-bump support by loading Prism lazily and wiring the Prism gem only for MRI versions that need it.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v0.1.18...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v0.1.19...HEAD
+[0.1.19]: https://github.com/kettle-dev/kettle-family/compare/v0.1.18...v0.1.19
+[0.1.19t]: https://github.com/kettle-dev/kettle-family/releases/tag/v0.1.19
 [0.1.18]: https://github.com/kettle-dev/kettle-family/compare/v0.1.17...v0.1.18
 [0.1.18t]: https://github.com/kettle-dev/kettle-family/releases/tag/v0.1.18
 [0.1.17]: https://github.com/kettle-dev/kettle-family/compare/v0.1.11...v0.1.17

data/README.md

@@ -571,7 +571,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-1.609-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-1.616-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-family/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/family/command_runner.rb

@@ -24,6 +24,8 @@ module Kettle
             Open3.capture3(process_env, *argv, chdir: member.root)
           end
         end
+        stdout = normalize_output(stdout)
+        stderr = normalize_output(stderr)
         elapsed = Process.clock_gettime(Process::CLOCK_MONOTONIC) - started
         CommandResult.new(
           member_name: member.name,
@@ -131,6 +133,8 @@ module Kettle
       end
 
       def handle_interactive_prompt(input, chunk)
+        return if otp_prompt?(chunk)
+
         if accept_confirmation_prompt?(chunk)
           write_accept_response(input) if accept
           return
@@ -148,8 +152,17 @@ module Kettle
         chunk.match?(/\[[Yy]\/[Nn]\]\s*:?/)
       end
 
+      def otp_prompt?(chunk)
+        chunk.match?(/(?:multi-factor authentication|OTP code|one-time password|\bCode:\s*)/i)
+      end
+
       def signing_password_prompt?(chunk)
-        chunk.match?(/pass(?:\s|-)?phrase|PEM password|private key password/i)
+        chunk.match?(/(?:enter\s+)?(?:PEM\s+)?pass(?:\s|-)?phrase\s*(?:for\s+[^:]+)?[:?]\s*\z/i) ||
+          chunk.match?(/(?:PEM|private key) password\s*[:?]\s*\z/i)
+      end
+
+      def normalize_output(output)
+        output.to_s.encode("UTF-8", invalid: :replace, undef: :replace, replace: "")
       end
 
       def with_unbundled_environment

data/lib/kettle/family/version.rb

@@ -3,7 +3,7 @@
 module Kettle
   module Family
     module Version
-      VERSION = "0.1.18"
+      VERSION = "0.1.19"
     end
     VERSION = Version::VERSION # Traditional Constant Location
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-family
 version: !ruby/object:Gem::Version
-  version: 0.1.18
+  version: 0.1.19
 platform: ruby
 authors:
 - Peter H. Boling
@@ -310,10 +310,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-family.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v0.1.18
-  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v0.1.18/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v0.1.19
+  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v0.1.19/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-family/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-family/0.1.18
+  documentation_uri: https://www.rubydoc.info/gems/kettle-family/0.1.19
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-family/wiki
   news_uri: https://www.railsbling.com/tags/kettle-family