kettle-family 1.2.10 → 1.2.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9a1ff4ce42122a1a8237a71d9310c158e18adc7fa0e9456e5928c99807f2ac30
-  data.tar.gz: 5f3c242673496f42edb65830e644bebf77a121f777045efaa6116fd5b2d8d980
+  metadata.gz: 1f0da4c8794762df47df980870cdafa4ccbe25e6e1e0faae8b1b2ab13e512097
+  data.tar.gz: a8ad81e87f95aa544d51a21b3ba8b3cfa875d413939560ae603678e1ae9f64a1
 SHA512:
-  metadata.gz: e4c06e78733cea8576c96392ebd353892b321ab997a0f3474c0e8d474a93d88bb585aee1a7d1a2618876046c72498ee898b26d192fd5ab73ef888728980776b5
-  data.tar.gz: 052ec289211c7482c2321ac34233687370a40bce492c77670145f9c0fa76519ccff77700fbc28acd010e71fd2ee31e9b6ba448f295f9aab3dc072f9372723861
+  metadata.gz: d48cba6cd03e39932c805252a16d2f60bae16130b4ef2b3bba0ed650d35fea4a628e6be48a0ca33d6a8f625ef3f81e074aca43d16587f4a97ff2da2cb3533d0b
+  data.tar.gz: 577b907ce129337f155bfb0d498f00d14d8dcfb70ac3835ba57c62cf0d69431ba70e4cd81ce6a04463724e420ed36c7580e27fb08474752ca4e7eeb140cfce34

data/CHANGELOG.md

@@ -30,6 +30,25 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [1.2.11] - 2026-07-30
+
+- TAG: [v1.2.11][1.2.11t]
+- COVERAGE: 93.78% -- 3784/4035 lines in 27 files
+- BRANCH COVERAGE: 76.34% -- 1452/1902 branches in 27 files
+- 27.83% documented
+
+### Added
+
+- Release execution now prints a parent-process intent summary, a configurable
+  countdown, and visible release preflight progress before member release work
+  starts.
+
+### Changed
+
+- Releases using a configured secrets provider now authorize that provider as
+  the first release preflight phase, making 1Password approval prompts appear
+  before slower checks can consume operator attention.
+
 ## [1.2.10] - 2026-07-30
 
 - TAG: [v1.2.10][1.2.10t]
@@ -1339,7 +1358,9 @@ Please file a bug if you notice a violation of semantic versioning.
 - Fixed CI load failures on engines without compatible `pty` support by falling back to Open3 for interactive release commands.
 - Fixed Ruby 3.2 version-bump support by loading Prism lazily and wiring the Prism gem only for MRI versions that need it.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.10...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.11...HEAD
+[1.2.11]: https://github.com/kettle-dev/kettle-family/compare/v1.2.10...v1.2.11
+[1.2.11t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.11
 [1.2.10]: https://github.com/kettle-dev/kettle-family/compare/v1.2.9...v1.2.10
 [1.2.10t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.10
 [1.2.9]: https://github.com/kettle-dev/kettle-family/compare/v1.2.8...v1.2.9

data/README.md

@@ -814,7 +814,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-3.934-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.035-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-family/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/family/cli.rb

@@ -590,6 +590,7 @@ module Kettle
         release_state_results = release_state_results_for_selection(config: config, members: ordered, only: effective_only)
         selected = Selection.new(members: ordered, release_state_results: release_state_results).apply(only: effective_only, exclude: options[:exclude], start_at: start_at.member)
         result_members = selected
+        print_execution_intent(command: command, config: config, members: result_members, options: options, start_at: start_at)
         results = command_results(command: command, config: config, members: result_members, options: options, start_at: start_at)
         Report.new(
           family_name: config.family_name,
@@ -676,13 +677,55 @@ module Kettle
       end
 
       def progress_io(command, options)
-        return nil unless command == "template"
+        return nil unless %w[release template].include?(command)
         return nil unless options[:execute]
         return nil if options[:json]
 
         stdout
       end
 
+      def print_execution_intent(command:, config:, members:, options:, start_at:)
+        return unless command == "release"
+        return unless options[:execute]
+        return if options[:json]
+
+        stdout.puts("release intent:")
+        stdout.puts("  family: #{config.family_name}")
+        stdout.puts("  mode: #{options[:publish] ? "publish" : "build-only"}")
+        selected_label = (members.length == 1) ? "1 member" : "#{members.length} members"
+        stdout.puts("  selected: #{selected_label}")
+        start_label = start_at.branch ? "#{start_at.member}@#{start_at.branch}" : start_at.member
+        stdout.puts("  start: #{start_label}") if start_at.member
+        stdout.puts("  members: #{members.map(&:name).join(", ")}")
+        stdout.flush
+        countdown_before_execution
+      end
+
+      def countdown_before_execution
+        seconds = release_countdown_seconds
+        return if seconds <= 0
+        return unless stdout.respond_to?(:tty?) && stdout.tty?
+
+        stdout.print("Continuing in #{seconds}...")
+        stdout.flush
+        seconds.downto(1) do |remaining|
+          sleep 1
+          next if remaining == 1
+
+          stdout.print(" #{remaining - 1}...")
+          stdout.flush
+        end
+        stdout.puts(" running...")
+        stdout.flush
+      end
+
+      def release_countdown_seconds
+        value = ENV.fetch("KETTLE_FAMILY_RELEASE_COUNTDOWN", "3")
+        Integer(value, 10)
+      rescue ArgumentError
+        3
+      end
+
       def release_secrets_provider(command:, config:, options:)
         return nil unless command == "release"
 

data/lib/kettle/family/secrets.rb

@@ -18,6 +18,12 @@ module Kettle
             Kettle::Dev::ReleaseSecrets::OnePassword.configured?(name)
           end
 
+          def authorize!
+            gem_signing_passphrase
+          rescue => error
+            raise Error, error.message
+          end
+
           def gem_signing_passphrase
             super
           rescue => error
@@ -32,6 +38,10 @@ module Kettle
         end
       else
         class Provider
+          def authorize!
+            nil
+          end
+
           def gem_signing_passphrase
             nil
           end
@@ -64,6 +74,10 @@ module Kettle
             item_field("gem_signing_passphrase_field")
           end
 
+          def authorize!
+            gem_signing_passphrase
+          end
+
           def rubygems_otp
             reference = string_config("rubygems_otp_reference")
             return read_reference(reference) unless reference.empty?

data/lib/kettle/family/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "1.2.10"
+      VERSION = "1.2.11"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

data/lib/kettle/family/workflow.rb

@@ -137,6 +137,16 @@ module Kettle
       end
 
       def results
+        if command == "release" && execute
+          release_preflight = release_preflight_results
+          return release_preflight unless release_preflight.empty?
+
+          return branch_target_results unless config.release_target_branches.empty?
+          return member_local_branch_target_results if member_local_branch_targets?
+
+          return current_branch_results(members)
+        end
+
         preflight = branch_checkout_dirty_preflight_results
         return preflight unless preflight.empty?
 
@@ -328,6 +338,79 @@ module Kettle
         end
       end
 
+      def release_preflight_results
+        phases = release_preflight_phases
+        emit_release_preflight_start(phases)
+        phases.each_with_index do |phase, index|
+          emit_release_preflight_phase(phase.fetch(:label), index: index, total: phases.length)
+          result = send(phase.fetch(:method))
+          emit_release_preflight_phase_finish(phase.fetch(:label), result)
+          return result unless result.empty?
+        end
+        emit_release_preflight_summary(phases)
+        []
+      end
+
+      def release_preflight_phases
+        dirty_phase = {label: "branch checkout readiness", method: :release_preflight_branch_checkout_dirty_results}
+        signing_phase = {label: "gem signing password", method: :release_preflight_signing_password_results}
+        secrets_phase = release_secrets_authorization_required? ? {label: "secrets provider authorization", method: :release_preflight_secrets_authorization_results} : nil
+
+        if secrets_phase
+          [secrets_phase, dirty_phase, signing_phase]
+        else
+          [dirty_phase, signing_phase]
+        end
+      end
+
+      def release_preflight_branch_checkout_dirty_results
+        branch_checkout_dirty_preflight_results
+      end
+
+      def release_preflight_secrets_authorization_results
+        authorize_release_secrets
+        []
+      rescue Error => error
+        [release_preflight_error_result("secrets_provider_authorization", error.message)]
+      end
+
+      def release_preflight_signing_password_results
+        prompt_for_gem_signing_password if release_signing_prompt_required?
+        []
+      rescue Error => error
+        [release_preflight_error_result("gem_signing_password", error.message)]
+      end
+
+      def authorize_release_secrets
+        secret = if @secrets_provider.respond_to?(:authorize!)
+          @secrets_provider.authorize!
+        else
+          @secrets_provider.gem_signing_passphrase
+        end
+        @gem_signing_password = secret.to_s unless secret.to_s.empty?
+        @gem_signing_password
+      end
+
+      def release_secrets_authorization_required?
+        @secrets_provider.is_a?(Secrets::OnePassword)
+      end
+
+      def release_preflight_error_result(phase, message)
+        CommandResult.new(
+          member_name: family_member.name,
+          phase: phase,
+          command: ["internal", phase],
+          workdir: config.root,
+          status: 1,
+          success: false,
+          stdout: "",
+          stderr: message,
+          elapsed_seconds: 0.0,
+          skipped: false,
+          reason: "release preflight failed"
+        )
+      end
+
       def branch_checkout_dirty_preflight_results
         return [] unless execute
         return [] if allow_dirty
@@ -1282,6 +1365,7 @@ module Kettle
 
       def release_signing_prompt_required?
         return false unless gem_signing_required?
+        return false if @gem_signing_password && !@gem_signing_password.to_s.empty?
         return true if publish
 
         members.any? { |member| signed_gemspec?(member) }
@@ -1638,6 +1722,36 @@ module Kettle
         progress.summary("release summary: #{release_results.count(&:ok?)}/#{release_results.length} members ok")
       end
 
+      def emit_release_preflight_start(phases)
+        return unless progress_io
+
+        phase_label = (phases.length == 1) ? "phase" : "phases"
+        progress_io.puts("release preflight #{phases.length} #{phase_label}:")
+        progress_io.flush
+      end
+
+      def emit_release_preflight_phase(label, index:, total:)
+        return unless progress_io
+
+        progress_io.puts("[release preflight] (#{index + 1}/#{total}) > #{label}")
+        progress_io.flush
+      end
+
+      def emit_release_preflight_phase_finish(label, results)
+        return unless progress_io
+
+        mark = results.empty? ? "." : "F"
+        progress_io.puts("[release preflight] #{mark} #{label}")
+        progress_io.flush
+      end
+
+      def emit_release_preflight_summary(phases)
+        return unless progress_io
+
+        progress_io.puts("release preflight summary: #{phases.length}/#{phases.length} phases ok")
+        progress_io.flush
+      end
+
       def template_event_line_handler(member, progress: nil)
         lambda do |line|
           event = parse_template_event(line)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-family
 version: !ruby/object:Gem::Version
-  version: 1.2.10
+  version: 1.2.11
 platform: ruby
 authors:
 - Peter H. Boling
@@ -341,10 +341,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-family.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.10
-  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.10/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.11
+  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.11/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-family/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.10
+  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.11
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-family/wiki
   news_uri: https://www.railsbling.com/tags/kettle-family

metadata.gz.sig

@@ -1,2 +1,3 @@
-��`є4S�<����<2(s
��:Q��8�1u�2�B��Y�o:�z�hĽwqg���\d���e��Tf�|f�t���fq+U��O�2}Z��,A�"�ZT�b�^�S�?�E�1S�����f9�����TEּ�έ�jӶ�f��0����i�
-S��a�i�\R�bc�˔gR��b����$��m\�-�4g��֠:/�sҜ�s#�v���'C�G�Wj����s���
v�*�@o�#O��
i�ҩ������j���1�b0��xz"P�k����2xEt]�6���ϕz���U�/��Zc���2B��Q�r�g��rK��+0��(ͤ��"5#�s���*�kD�@��c�Nb�e���&�Җ��
+��w�<$��t�H�3��������X�+�Q�eG<�]yH=�W�mfZ�:���Z����jf��wZyԨ�2��^���3N��1�Թq�u��X��,�˅
"���l�9n�.1�:f��}\�����h�g*�^L%�ɅQ��Pl"4"���{����^C/�<=UsYV�/����x�@�cT�_۷�=����n]���I����:�t'i��&�7�VI�_�}g5�i��Y�
+�@��������c�1�:?�d
+]���؈8��i�0d~�P(;dIzl@u0����!�|3w��Ҵcf�����v��1P�g5Z��:%��6D�P��A�%*J�m�2���C_ј\�9��&	&Q���3�2�r��8`�.%�n.恭D��