kettle-family 1.2.58 → 1.2.59

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 34d40e983c125c689f16bf8ca75d566190006c61796efd6c403ed341df8f067b
-  data.tar.gz: 118ebf6ca455659ed4b0789b5fed52f301c4bf89990ced82f5ea64ead678712e
+  metadata.gz: 1362393294aee4023a1d11a45973f31affd2a4b858f9fbe400b22ebed831d078
+  data.tar.gz: e776253f40b9e2c77c2db5638e075d9c0ff08b2841e8be18ab23452da9254e89
 SHA512:
-  metadata.gz: 2dce07e1ffe8a539914a1916278e530a38dbed599672f49360e4d97ec49e48496860d61812c0bee3fccd980ec867dbdd7371ffc406a793ac9e4c0c70a5f7e86c
-  data.tar.gz: a0c7eec1e7992797dc59d459bda064302e93353ae66c7239182c2a16f4515fc15f3a3f48463d7b5a076b0a1679d58d08c9ebc05e603d2d196afbd52af670fc14
+  metadata.gz: 7996bae296cfe6b3cee363e53e2992d6033375d34e90866127e59368b8b6b8ed3fe769a15ac66ed7105b365fb591c7fe58967c466ef1f162bf732edb3f2f34ab
+  data.tar.gz: 03ccd0e0d856f16f596c80f3b028787bc475a9bebe82e34efce92eb1d4ce6bdd0dc571a5e9b7074680a23ee1a01de9aab2d183f88ddc409557519e809a8eff5b

data/CHANGELOG.md

@@ -30,6 +30,19 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [1.2.59] - 2026-08-25
+
+- TAG: [v1.2.59][1.2.59t]
+- COVERAGE: 93.52% -- 5367/5739 lines in 33 files
+- BRANCH COVERAGE: 76.27% -- 2173/2849 branches in 33 files
+- 29.78% documented
+
+### Fixed
+
+- Reject configured release waves that place runtime gem dependencies after their dependents.
+
+- Keep configured shared changelog version anchors authoritative during partial family releases.
+
 ## [1.2.58] - 2026-08-23
 
 - TAG: [v1.2.58][1.2.58t]
@@ -2153,7 +2166,9 @@ Please file a bug if you notice a violation of semantic versioning.
 - Fixed CI load failures on engines without compatible `pty` support by falling back to Open3 for interactive release commands.
 - Fixed Ruby 3.2 version-bump support by loading Prism lazily and wiring the Prism gem only for MRI versions that need it.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.58...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.59...HEAD
+[1.2.59]: https://github.com/kettle-dev/kettle-family/compare/v1.2.58...v1.2.59
+[1.2.59t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.59
 [1.2.58]: https://github.com/kettle-dev/kettle-family/compare/v1.2.57...v1.2.58
 [1.2.58t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.58
 [1.2.57]: https://github.com/kettle-dev/kettle-family/compare/v1.2.56...v1.2.57

data/README.md

@@ -39,7 +39,9 @@ is, avoiding duplicate release-prep commits after a failure/fix/retry cycle.
 options such as `start_step=N` and `--local-ci` pass through, CI failures still
 abort by default, and gem signing passphrases are cached once per family run
 while RubyGems MFA prompts remain interactive unless an opt-in release secrets
-provider supplies them.
+provider supplies them. Resume options are deliberately scoped: use them only
+when the member's prepared release commit is unchanged. If a CI failure requires
+code, version, changelog, or lockfile changes, rerun that member from step 0.
 
 ## 💡 Info you can shake a stick at
 
@@ -286,8 +288,9 @@ release:
 
 Resume and security-release options pass through to `kettle-release`. Passing
 `--start-step N` appends `start_step=N`; as with direct `kettle-release` usage,
-`N > 1` resumes after the pre-release gate and should be used only after that
-gate already passed or the failure was intentionally handled:
+`N > 0` skips the pre-release gate and should be used only for the same
+prepared release commit after the earlier prerequisites passed. A code or
+metadata fix requires a new full release run from step 0:
 
 ```console
 kettle-family release --publish --start-step 10 --local-ci
@@ -296,6 +299,13 @@ kettle-family release --publish --start-step 10 --local-ci
 Executed publish runs skip versions that are already published. CI failures
 abort by default; pass `--continue-ci-failures` to set
 `K_RELEASE_CI_CONTINUE=true` for the underlying `kettle-release` process.
+That option still monitors CI and only changes whether a failed result blocks
+the release. It does not skip monitoring. Use `--fast-recovery retry-ci`
+for a selected same-commit member when the failure was transient, or
+`--fast-recovery skip-ci` only when you intentionally accept the CI result.
+Use `--skip-ci` when every selected member should run from step 0 while
+skipping remote CI monitoring; it is not a substitute for fixing code and
+creating a new release commit.
 
 Executed publish runs can also use a release secrets provider. The default
 provider is `interactive`. The `1password` provider is supplied by
@@ -449,9 +459,6 @@ step 0 while skipping remote CI monitoring, use `--skip-ci` instead:
 kettle-family release --publish --execute --skip-ci
 ```
 
-The existing `--continue-ci-failures` option still monitors CI and only changes
-whether a failed result blocks the release; it does not skip CI monitoring.
-
 By default, family publish runs pass `--yes` to configured `kettle-changelog`
 family changelog commands and child `kettle-release` commands. Use
 `--no-accept` when you want each child command to ask its own confirmation
@@ -856,7 +863,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-5.726-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-5.739-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-family/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/family/cli.rb

@@ -521,12 +521,12 @@ module Kettle
         option :build_only, long: "--build-only", desc: "Use build release command" do
           options[:publish] = false
         end
-        option :start_step, long: "--start-step", value: {type: Integer, usage: "N"}, desc: "Pass start_step=N through to kettle-release commands"
-        option :skip_steps, long: "--skip-steps", value: {type: String, usage: "LIST"}, desc: "Pass skip_steps=LIST through to kettle-release commands"
-        option :fast_recovery, long: "--fast-recovery", value: {type: String, usage: "MODE"}, desc: "Recover selected CI failures with retry-ci or skip-ci"
-        option :fast_recovery_members, long: "--fast-recovery-members", value: {type: String, usage: "MEMBERS"}, desc: "Limit fast recovery to comma-separated selected members"
-        option :skip_ci, long: "--skip-ci", desc: "Skip remote CI monitoring for every selected member while running from step 0"
-        option :skip_changelog, long: "--skip-changelog", desc: "Run pre-release gates and specs, but skip kettle-changelog"
+        option :start_step, long: "--start-step", value: {type: Integer, usage: "N"}, desc: "Resume the same release commit at kettle-release step N; use only after that step's prerequisites passed"
+        option :skip_steps, long: "--skip-steps", value: {type: String, usage: "LIST"}, desc: "Skip comma-separated kettle-release steps for the same release commit"
+        option :fast_recovery, long: "--fast-recovery", value: {type: String, usage: "MODE"}, desc: "Recover selected same-commit CI failures with retry-ci or skip-ci"
+        option :fast_recovery_members, long: "--fast-recovery-members", value: {type: String, usage: "MEMBERS"}, desc: "Limit fast recovery to selected comma-separated members; defaults to all selected members"
+        option :skip_ci, long: "--skip-ci", desc: "Run every selected member from step 0 while skipping only remote CI monitoring; requires --publish"
+        option :skip_changelog, long: "--skip-changelog", desc: "Run release checks and child releases while skipping kettle-changelog"
         option :local_ci, long: "--local-ci", desc: "Pass --local-ci through to kettle-release commands"
         option :continue_ci_failures, long: "--continue-ci-failures", desc: "Set K_RELEASE_CI_CONTINUE=true for release commands"
         option :ci_workflows, long: "--ci-workflows", value: {type: String, usage: "LIST"}, desc: "Pass a comma-separated CI workflow monitor subset through to kettle-release commands"

data/lib/kettle/family/release_waves.rb

@@ -13,8 +13,11 @@ module Kettle
         configured = configured_waves_for_selected_members
         configured_names = configured.flatten.map(&:name)
         remaining_members = members.reject { |member| configured_names.include?(member.name) }
+        planned = configured + inferred_waves(remaining_members)
 
-        configured + inferred_waves(remaining_members)
+        validate_configured_dependency_order!(planned) unless configured.empty?
+
+        planned
       end
 
       private
@@ -74,6 +77,27 @@ module Kettle
         release_dependency_names(member).select { |dependency| by_name.key?(dependency) }
       end
 
+      def validate_configured_dependency_order!(planned_waves)
+        wave_indexes = planned_waves.each_with_index.flat_map do |wave, index|
+          wave.map { |member| [member.name, index] }
+        end.to_h
+
+        members.each do |member|
+          member_wave = wave_indexes.fetch(member.name)
+          Array(member.dependencies).map(&:to_s).filter_map do |dependency|
+            dependency_wave = wave_indexes[dependency]
+            next unless dependency_wave
+            next if dependency_wave < member_wave
+
+            [member.name, dependency, member_wave + 1, dependency_wave + 1]
+          end.each do |dependent, dependency, dependent_wave, dependency_wave|
+            raise Error,
+              "configured release waves violate runtime dependency order: #{dependent} (wave #{dependent_wave}) " \
+                "requires #{dependency} (wave #{dependency_wave}); move #{dependency} to an earlier wave"
+          end
+        end
+      end
+
       def release_dependency_names(member)
         Array(member.release_dependencies || member.dependencies).map(&:to_s)
       end

data/lib/kettle/family/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "1.2.58"
+      VERSION = "1.2.59"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

data/lib/kettle/family/workflow.rb

@@ -1979,13 +1979,16 @@ module Kettle
         end
 
         version_path = File.expand_path(version_file, config.root)
-        member = members.find { |candidate| path_inside?(version_path, candidate.root) }
+        # The root anchor may belong to an earlier wave, so partial releases
+        # must not fall back to a selected member's independent version.
+        known_members = family_members.empty? ? members : family_members
+        member = known_members.find { |candidate| path_inside?(version_path, candidate.root) }
         return member if member
 
         fallback = members.first
         return fallback if fallback&.version_file
 
-        raise Error, "shared root changelog version file #{version_file} is not inside any selected family member"
+        raise Error, "shared root changelog version file #{version_file} is not inside any family member"
       end
 
       def family_changelog_env
@@ -2031,7 +2034,8 @@ module Kettle
 
       def family_changelog_version_file
         configured = config.changelog_version_file.to_s
-        return configured if !configured.empty? && members.any? { |member| path_inside?(File.expand_path(configured, config.root), member.root) }
+        known_members = family_members.empty? ? members : family_members
+        return configured if !configured.empty? && known_members.any? { |member| path_inside?(File.expand_path(configured, config.root), member.root) }
 
         members.first&.version_file.to_s
       end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-family
 version: !ruby/object:Gem::Version
-  version: 1.2.58
+  version: 1.2.59
 platform: ruby
 authors:
 - Peter H. Boling
@@ -71,7 +71,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.0.8
+        version: 3.0.11
     - - "<"
       - !ruby/object:Gem::Version
         version: 4.0.0
@@ -81,7 +81,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.0.8
+        version: 3.0.11
     - - "<"
       - !ruby/object:Gem::Version
         version: 4.0.0
@@ -361,10 +361,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-family.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.58
-  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.58/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.59
+  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.59/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-family/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.58
+  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.59
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-family/wiki
   news_uri: https://www.railsbling.com/tags/kettle-family