kettle-family 1.2.99 → 1.2.100

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e3fff3ab628dc6f5338ddf0a820485b986ce5f40aec27a905f1ee15e18450ab9
-  data.tar.gz: fa34533d50ee506f05e2f1cd9f865c011d12e91996b1c38cbabfe76eb0f9c676
+  metadata.gz: 8b8d7a476e1af0096eca0bc0870cd9a8623b2ad2ccdcfa5080ec184b5b561096
+  data.tar.gz: df5707cdac3c7838df5cbbc83731ffb7741dfe818e440a83d917792a1f4290b3
 SHA512:
-  metadata.gz: 81f62b1263cd2afbe483f7af09d0a4c1b3e4efac0328938592c84e381d5d731188031e1e9dad97ce343573b025a50d9de62424ce92d12be7245beced5de9996d
-  data.tar.gz: 95713fbc85dd8e285b7b94364bfe799735df2d2b9f19b1205d2ad0819d793f66c94e39aa3b3816826b2987dacabc14519e24f01a0447f29af1edb55567d49f95
+  metadata.gz: 1cc3290cedbd5e35c1c77f4810b6fba3e562297e66a8f1c0d5a0f575110c231771cb460ae67617d289dcf845cde1f0ef4ed09aa996ca5774631fbe1f0c8a4556
+  data.tar.gz: f6e8a65bfd5e7dd3c544a6b47443383a7a9d4cfc7597a52e509bbc9cf765cf1835624f8b4022db1b80b45b2cb0e40c3a5de77acb08f0cfd953c44913d6611454

data/CHANGELOG.md

@@ -30,6 +30,21 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [1.2.100] - 2026-09-09
+
+- TAG: [v1.2.100][1.2.100t]
+- COVERAGE: 93.51% -- 6283/6719 lines in 35 files
+- BRANCH COVERAGE: 78.15% -- 2553/3267 branches in 35 files
+- 32.84% documented
+
+### Fixed
+
+- Run each family member through its own mise runtime instead of inheriting the orchestrator runtime.
+
+- Refresh dependent release lockfiles after a runtime sibling publishes without waiting for later Gemfile-only tooling dependencies.
+
+- Preserve the Mise launcher path when running commands in member worktrees from a Bundler environment.
+
 ## [1.2.99] - 2026-09-09
 
 - TAG: [v1.2.99][1.2.99t]
@@ -2705,7 +2720,9 @@ Please file a bug if you notice a violation of semantic versioning.
 - Fixed CI load failures on engines without compatible `pty` support by falling back to Open3 for interactive release commands.
 - Fixed Ruby 3.2 version-bump support by loading Prism lazily and wiring the Prism gem only for MRI versions that need it.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.99...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.100...HEAD
+[1.2.100]: https://github.com/kettle-dev/kettle-family/compare/v1.2.99...v1.2.100
+[1.2.100t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.100
 [1.2.99]: https://github.com/kettle-dev/kettle-family/compare/v1.2.98...v1.2.99
 [1.2.99t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.99
 [1.2.98]: https://github.com/kettle-dev/kettle-family/compare/v1.2.97...v1.2.98

data/README.md

@@ -1186,7 +1186,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.695-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.719-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-family/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/family/command_runner.rb

@@ -10,6 +10,7 @@ module Kettle
       SENSITIVE_ENV_KEYS = [
         "KETTLE_RELEASE_GEM_SIGNING_PASSPHRASE"
       ].freeze
+      MISE_SESSION_ENV_PREFIX = "__MISE_"
 
       class OtpCoordinator
         def initialize(input: $stdin, output: $stdout, queue_total: nil, secrets_provider: nil, event_handler: nil)
@@ -616,11 +617,14 @@ module Kettle
 
       def process_env(member:, env:)
         base_env = unbundled_process_env
+        clear_outer_mise_session!(base_env) if mise_configured?(member)
         # Bundler's unbundled environment intentionally omits activation
         # variables, but it may also omit PATH. When `unsetenv_others` is used
         # for mise-managed members, dropping PATH makes nested commands such
         # as `bundle` unresolvable inside kettle-jem.
-        base_env["PATH"] = if base_env.key?("PATH")
+        base_env["PATH"] = if mise_configured?(member)
+          mise_member_path(base_env["PATH"], ENV["PATH"])
+        elsif base_env.key?("PATH")
           executable_path(base_env["PATH"])
         else
           ENV["PATH"]
@@ -647,6 +651,33 @@ module Kettle
         paths.compact.map(&:to_s).flat_map { |value| value.split(File::PATH_SEPARATOR) }.reject(&:empty?).uniq.join(File::PATH_SEPARATOR)
       end
 
+      # `mise exec` selects a member's declared runtime. Do not let the
+      # orchestrator's Ruby or gem bin directory precede it on PATH: Bundler
+      # otherwise executes the outer runtime after `mise` has entered the
+      # member directory, and can rewrite that member's lockfile with the
+      # wrong Bundler version.
+      def mise_member_path(*paths)
+        outer_runtime_paths = [Gem.bindir, File.dirname(RbConfig.ruby)].filter_map do |entry|
+          canonical_path(entry) unless entry.to_s.empty?
+        end
+        paths.flat_map { |path| path.to_s.split(File::PATH_SEPARATOR) }.reject(&:empty?).reject do |entry|
+          outer_runtime_paths.include?(canonical_path(entry))
+        end.uniq.join(File::PATH_SEPARATOR)
+      end
+
+      # Mise records its active configuration in private `__MISE_*` variables.
+      # Retaining them across a nested `mise exec -C member` makes Mise reuse
+      # the orchestrator's tool set instead of loading the member's mise.toml.
+      def clear_outer_mise_session!(env)
+        env.delete_if { |key, _value| key.start_with?(MISE_SESSION_ENV_PREFIX) }
+      end
+
+      def canonical_path(path)
+        File.realpath(path)
+      rescue Errno::ENOENT, Errno::ENOTDIR
+        File.expand_path(path)
+      end
+
       def unbundled_process_env
         return Bundler.unbundled_env if defined?(Bundler) && Bundler.respond_to?(:unbundled_env)
         return Bundler.original_env if defined?(Bundler) && Bundler.respond_to?(:original_env)

data/lib/kettle/family/dependency_floor.rb

@@ -7,6 +7,24 @@ module Kettle
     class DependencyFloor
       DEPENDENCY_METHODS = %i[add_dependency add_runtime_dependency add_development_dependency].freeze
 
+      # Return only dependencies declared by the gemspec itself. Release
+      # ordering also observes Gemfile-only tooling dependencies, but those
+      # cannot have their published floor rewritten by this class.
+      def self.gemspec_dependency_names(member)
+        return [] unless member.gemspec_path && File.file?(member.gemspec_path)
+
+        source = File.read(member.gemspec_path)
+        parse_result = Kettle::Dev::VersionBump.parse_source(source, member.gemspec_path)
+        Kettle::Dev::VersionBump.each_node(parse_result.value).filter_map do |node|
+          next unless node.is_a?(Prism::CallNode) && DEPENDENCY_METHODS.include?(node.name)
+
+          name_node = node.arguments&.arguments&.first
+          name_node.unescaped if name_node.is_a?(Prism::StringNode)
+        end.uniq
+      rescue Kettle::Dev::Error => error
+        raise Error, error.message
+      end
+
       def initialize(released_members:, dependent_members:, mode: :dry_run)
         @released_members = released_members
         @dependent_members = dependent_members

data/lib/kettle/family/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "1.2.99"
+      VERSION = "1.2.100"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

data/lib/kettle/family/workflow.rb

@@ -2723,13 +2723,16 @@ module Kettle
         end
       end
 
-      # A release-valid lockfile must resolve every selected sibling dependency
-      # from the registry. Defer refreshes for dependents that still require a
-      # selected sibling from a later release wave; their gemspec floors can be
-      # updated now, but Bundler cannot resolve the future sibling remotely yet.
+      # A release-valid lockfile must resolve every selected sibling whose
+      # gemspec floor can be rewritten by DependencyFloor. Release ordering
+      # deliberately also includes Gemfile-only tooling dependencies, but
+      # those do not have a floor to reconcile and must not delay a runtime
+      # dependency's lockfile refresh until a later wave.
       def dependency_floor_refresh_ready?(member, released_members:)
         selected_names = members.map(&:name)
-        selected_dependencies = release_dependency_names(member).select { |dependency| selected_names.include?(dependency) }
+        selected_dependencies = DependencyFloor.gemspec_dependency_names(member).select do |dependency|
+          selected_names.include?(dependency)
+        end
         completed_names = Array(@release_completed_member_names) + released_members.map(&:name)
         selected_dependencies.all? { |dependency| completed_names.include?(dependency) }
       end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-family
 version: !ruby/object:Gem::Version
-  version: 1.2.99
+  version: 1.2.100
 platform: ruby
 authors:
 - Peter H. Boling
@@ -94,7 +94,7 @@ dependencies:
         version: '3.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.0.33
+        version: 3.0.34
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -104,7 +104,7 @@ dependencies:
         version: '3.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.0.33
+        version: 3.0.34
 - !ruby/object:Gem::Dependency
   name: kettle-gha-pins
   requirement: !ruby/object:Gem::Requirement
@@ -443,10 +443,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-family.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.99
-  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.99/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.100
+  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.100/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-family/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.99
+  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.100
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-family/wiki
   news_uri: https://www.railsbling.com/tags/kettle-family