kettle-family 1.2.70 → 1.2.71

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c2288af511fb1a4739aaa21048c246fc943f37121fade2508036d3ab99118a23
-  data.tar.gz: dd96a3071d396abca33e2dc05747ed84d5b4071833e6397d18262e7b67a8ac8e
+  metadata.gz: 8c61cfdc32555584613be9cc40abc3f43596619d6dcaa50296c7c2d0a5a91cdd
+  data.tar.gz: f7430c5af93088a425052e2f387a11bd84e43ba861ec417bf12bd26f14a4da7e
 SHA512:
-  metadata.gz: 55c143def3d82260a48d92eb2a790d451b0870639f0824b8995acbf066111b5fb43f9522fb94d7a79de4fccc64f4a786fdd553621512316f0b51ffe81ed6f49c
-  data.tar.gz: e405c86386fd311f126a473fd7c2410626f1763ae739892c923fd03ea69a8bbff9251e6cb9f08504a3ad0189ec4b50d43b67cf74b5ecd3689fea6614ad15a086
+  metadata.gz: 59b42741cd514d00252fdc0e3dec6c8c761d7151b977282b8f028ef29ff41b190564d2e4cd9527efc4eaf22790a35abf865dabc31635fd25b66481587be2afd5
+  data.tar.gz: 86a21caf729f0a1bc47eac1b46953c17842e83b05d52ff60ada1018b3b3727e0aa1f7adae8be30d46aeaf1d7e3515ef5c62e008ed38aa724e5410fe143c14449

data/CHANGELOG.md

@@ -30,6 +30,17 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [1.2.71] - 2026-08-30
+
+- TAG: [v1.2.71][1.2.71t]
+- COVERAGE: 93.30% -- 5544/5942 lines in 33 files
+- BRANCH COVERAGE: 76.62% -- 2281/2977 branches in 33 files
+- 30.50% documented
+
+### Fixed
+
+- Preserve explicitly enabled monorepo template dependency graphs while reconciling release lockfiles.
+
 ## [1.2.70] - 2026-08-30
 
 - TAG: [v1.2.70][1.2.70t]
@@ -2346,7 +2357,9 @@ Please file a bug if you notice a violation of semantic versioning.
 - Fixed CI load failures on engines without compatible `pty` support by falling back to Open3 for interactive release commands.
 - Fixed Ruby 3.2 version-bump support by loading Prism lazily and wiring the Prism gem only for MRI versions that need it.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.70...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.71...HEAD
+[1.2.71]: https://github.com/kettle-dev/kettle-family/compare/v1.2.70...v1.2.71
+[1.2.71t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.71
 [1.2.70]: https://github.com/kettle-dev/kettle-family/compare/v1.2.69...v1.2.70
 [1.2.70t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.70
 [1.2.69]: https://github.com/kettle-dev/kettle-family/compare/v1.2.68...v1.2.69

data/README.md

@@ -1049,7 +1049,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-5.902-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-5.942-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-family/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/family/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "1.2.70"
+      VERSION = "1.2.71"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

data/lib/kettle/family/workflow.rb

@@ -1761,11 +1761,16 @@ module Kettle
         return ["Gemfile.lock was not created by dependency floor lockfile refresh"] unless File.file?(lockfile)
 
         lockfile_source = File.read(lockfile)
-        diagnostics = Kettle::Dev::LockfileReset.local_path_remote_lines_from_source(lockfile_source).map do |line_number|
+        allowed_path_gems = dependency_floor_allowed_path_gems(member: member, lockfile_source: lockfile_source)
+        diagnostics = Kettle::Dev::LockfileReset.local_path_remote_lines_from_source(lockfile_source).reject do |line_number|
+          dependency_floor_allowed_path_remote?(member: member, lockfile_source: lockfile_source, line_number: line_number)
+        end.map do |line_number|
           "Gemfile.lock has local path remote at line #{line_number}"
         end
         checksum_entries = Kettle::Dev::LockfileReset.checksum_entries_from_source(lockfile_source) || {}
         diagnostics.concat(released_members.filter_map do |released_member|
+          next if allowed_path_gems.include?(released_member.name)
+
           checksum = checksum_entries[[released_member.name, released_member.version]]
           if checksum.nil?
             "Gemfile.lock CHECKSUMS is missing #{released_member.name} #{released_member.version}"
@@ -1776,6 +1781,48 @@ module Kettle
         diagnostics
       end
 
+      def dependency_floor_allowed_path_remote?(member:, lockfile_source:, line_number:)
+        remote = lockfile_source.each_line.with_index(1).find { |_line, index| index == line_number }.first
+          .to_s.split("remote:", 2).last.to_s.strip
+        remote_path = File.expand_path(remote, member.root)
+        release_allowed_local_path_roots.any? do |root|
+          remote_path == root || remote_path.start_with?("#{root}/")
+        end
+      end
+
+      def dependency_floor_allowed_path_gems(member:, lockfile_source:)
+        in_path = false
+        in_specs = false
+        allowed_remote = false
+        lockfile_source.each_line.each_with_object(Set.new) do |line, gems|
+          stripped = line.strip
+          if stripped.match?(/\A[A-Z][A-Z ]*\z/)
+            in_path = stripped == "PATH"
+            in_specs = false
+            allowed_remote = false
+            next
+          end
+          next unless in_path
+
+          if stripped.start_with?("remote:")
+            remote = stripped.split("remote:", 2).last.to_s.strip
+            remote_path = File.expand_path(remote, member.root)
+            allowed_remote = release_allowed_local_path_roots.any? do |root|
+              remote_path == root || remote_path.start_with?("#{root}/")
+            end
+            next
+          end
+          if stripped == "specs:"
+            in_specs = true
+            next
+          end
+          next unless allowed_remote && in_specs && line.start_with?("    ") && !line.start_with?("      ")
+
+          name = stripped.split(" (", 2).first
+          gems << name unless name.empty?
+        end
+      end
+
       def dependency_floor_lockfile_command(released_members)
         ["bundle", "lock", "--update", *released_members.map(&:name), "--add-checksums"]
       end
@@ -4130,7 +4177,9 @@ module Kettle
       end
 
       def release_allowed_local_path_env_names
-        config.release_allowed_local_path_env_names
+        names = config.release_allowed_local_path_env_names
+        names << "K_JEM_TEMPLATING" if preserve_monorepo_template_context?
+        names.uniq
       end
 
       def release_local_path_policy_env
@@ -4146,6 +4195,7 @@ module Kettle
 
       def release_lockfile_local_path_env_overrides(member = nil)
         explicit = config.release_disable_local_path_env.to_h { |key| [key.to_s, "false"] }
+        explicit.delete("K_JEM_TEMPLATING") if preserve_monorepo_template_context?
         derived = release_local_path_env_detection_sources.each_with_object({}) do |(key, value), memo|
           key = key.to_s
           next unless key.end_with?("_LOCAL", "_DEV")
@@ -4155,7 +4205,21 @@ module Kettle
           memo[key] = "false"
         end
         inferred = member ? release_lockfile_inferred_local_path_env(member).to_h { |key| [key, "false"] } : {}
-        explicit.merge(derived).merge(inferred).merge(release_member_local_path_env(member))
+        explicit
+          .merge(derived)
+          .merge(inferred)
+          .merge(release_member_local_path_env(member))
+          .merge(preserve_monorepo_template_context? ? {"K_JEM_TEMPLATING" => "true"} : {})
+      end
+
+      # K_JEM_TEMPLATING activates the generated monorepo dependency closure;
+      # it is not an unrelated local checkout switch. Preserve it only when
+      # the caller explicitly enabled it for a configured monorepo release.
+      def preserve_monorepo_template_context?
+        return false unless config.configured_monorepo_release?
+
+        value = release_local_path_env_sources["K_JEM_TEMPLATING"].to_s.strip.downcase
+        %w[true yes 1 on].include?(value)
       end
 
       def release_member_local_path_env(member)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-family
 version: !ruby/object:Gem::Version
-  version: 1.2.70
+  version: 1.2.71
 platform: ruby
 authors:
 - Peter H. Boling
@@ -441,10 +441,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-family.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.70
-  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.70/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.71
+  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.71/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-family/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.70
+  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.71
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-family/wiki
   news_uri: https://www.railsbling.com/tags/kettle-family