kettle-family 1.2.88 → 1.2.89

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a9b95d2b24bf470a2e06463f6b5e00bd2dce34a5e0f76d74a6d59f2498fe47ec
-  data.tar.gz: 71fb081d31ddca6f76200d40acc2366663106887462dd1b6d0ab86832575489c
+  metadata.gz: 82f0fe9d1ff1a9570736167dbad614ce55a2929c01da9cee1cfad7c8e9bae9d8
+  data.tar.gz: e3bbc4d7236b5ec4a7874e5a6304b9c9e02f1e3e726a37a361b5e97d8aed6d1e
 SHA512:
-  metadata.gz: 222b0141cbf3976a418be61cf78bac4f3982be572bec6097033a74d798e597ffb01e45b82d634a96a4a586089dfdc9d5dc155e7fc741863755427c097a344318
-  data.tar.gz: 8369b700b9e6c9899140a1eb008f5863a1c80b21136eec721f951418ca3c989161a585f987ac1d463bd2792b5d88aa89267996f3f144ce548c0724824ec21f42
+  metadata.gz: a8e8d571b682158386d7d4320941a5b77eb7b29d99f5653142126e5cb771c8deeb577ca36d0959b77f9de91471f9726a1c08ac95f8b525aa9ce6edef15ece787
+  data.tar.gz: 0d91b201b66f7c31ee41f80b0e09346f8d228d977c2730e0bbcbef7aa0ddb31d7b9f71032b248c24881f9bc987dd1967dcc0a85977a9d2a12eced9ab090aae7a

data/CHANGELOG.md

@@ -30,6 +30,19 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [1.2.89] - 2026-09-06
+
+- TAG: [v1.2.89][1.2.89t]
+- COVERAGE: 93.10% -- 5816/6247 lines in 34 files
+- BRANCH COVERAGE: 76.24% -- 2361/3097 branches in 34 files
+- 31.79% documented
+
+### Fixed
+
+- Apply the template-local execution profile consistently to lockfile preparation, template application, child setup commands, and final lockfile normalization.
+
+- Isolate member commands from outer Bundler activation so nested release and coverage processes cannot redirect member lockfile operations.
+
 ## [1.2.88] - 2026-09-06
 
 - TAG: [v1.2.88][1.2.88t]
@@ -2560,7 +2573,9 @@ Please file a bug if you notice a violation of semantic versioning.
 - Fixed CI load failures on engines without compatible `pty` support by falling back to Open3 for interactive release commands.
 - Fixed Ruby 3.2 version-bump support by loading Prism lazily and wiring the Prism gem only for MRI versions that need it.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.88...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.89...HEAD
+[1.2.89]: https://github.com/kettle-dev/kettle-family/compare/v1.2.88...v1.2.89
+[1.2.89t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.89
 [1.2.88]: https://github.com/kettle-dev/kettle-family/compare/v1.2.87...v1.2.88
 [1.2.88t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.88
 [1.2.87]: https://github.com/kettle-dev/kettle-family/compare/v1.2.86...v1.2.87

data/README.md

@@ -804,8 +804,11 @@ defined in [Execution Profiles](EXECUTION_PROFILES.md). The rules below are
 the template-local portion of that policy.
 
 Before invoking `kettle-jem`, `kettle-family template` may refresh `nomono` so
-the member Gemfile can activate its generated local dependency wiring. Both
-bootstrap and lockfile preparation use the same development dependency graph:
+the member Gemfile can activate its generated local dependency wiring. The
+template-local profile applies to every member phase: initial lockfile
+preparation, bootstrap recovery, dependency preparation, template application
+and its child processes, and final lockfile normalization. They all use the
+same development dependency graph:
 
 - `K_JEM_TEMPLATING=true` is enforced. It selects the templating Gemfile graph
   and activates generated local sibling closures. It is not a release-lockfile
@@ -1081,7 +1084,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.244-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-6.247-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-family/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/family/command_runner.rb

@@ -648,8 +648,8 @@ module Kettle
       end
 
       def unbundled_process_env
-        return Bundler.original_env if defined?(Bundler) && Bundler.respond_to?(:original_env)
         return Bundler.unbundled_env if defined?(Bundler) && Bundler.respond_to?(:unbundled_env)
+        return Bundler.original_env if defined?(Bundler) && Bundler.respond_to?(:original_env)
 
         {}
       end

data/lib/kettle/family/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "1.2.88"
+      VERSION = "1.2.89"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

data/lib/kettle/family/workflow.rb

@@ -593,7 +593,7 @@ module Kettle
             member: member,
             phase: command,
             command: command_text,
-            env: command_env,
+            env: template_command_env,
             stdout_line_handler: (command == "gha-sha-pins") ? gha_sha_pins_event_line_handler(member) : nil
           )
           memo << result
@@ -874,7 +874,7 @@ module Kettle
             member: member,
             phase: command,
             command: workflow_command(member),
-            env: workflow_env,
+            env: template_command_env,
             stdout_line_handler: template_event_line_handler(member, progress: progress)
           )
           emit_member_result_progress(member, memo.last, progress: progress)
@@ -4351,18 +4351,19 @@ module Kettle
       def normalize_lockfiles(member:, runner:, memo:, phase:)
         return unless config.normalize_lockfiles?
 
+        env = template_lockfile_phase?(phase) ? template_prepare_env : workflow_env
         result = runner.call(
           member: member,
           phase: phase,
           command: normalize_lockfiles_command(member: member, phase: phase),
-          env: workflow_env
+          env: env
         )
         if template_prepare_lockfiles_phase?(phase) && repair_checksum_mismatches(member, result)
           result = runner.call(
             member: member,
             phase: phase,
             command: normalize_lockfiles_command(member: member, phase: phase),
-            env: workflow_env
+            env: env
           )
         end
         if checksum_option_unsupported?(result)
@@ -4370,7 +4371,7 @@ module Kettle
             member: member,
             phase: "#{phase}_bundler_recovery",
             command: %w[bundle update --bundler],
-            env: workflow_env
+            env: env
           )
           memo << recovery
           return unless recovery.ok?
@@ -4379,7 +4380,7 @@ module Kettle
             member: member,
             phase: phase,
             command: normalize_lockfiles_command(member: member, phase: phase, skip_checksum_option: true),
-            env: workflow_env
+            env: env
           )
         end
         if template_lockfile_phase?(phase) && recoverable_bundle_failure?(result)
@@ -4390,7 +4391,7 @@ module Kettle
             member: member,
             phase: phase,
             command: normalize_lockfiles_command(member: member, phase: phase),
-            env: workflow_env
+            env: env
           )
         end
         memo << result
@@ -4641,6 +4642,10 @@ module Kettle
         execution_profile(template_execution_profile, workflow_env)
       end
 
+      def template_command_env
+        (command == "template") ? template_prepare_env : command_env
+      end
+
       def template_execution_profile
         ExecutionProfile.fetch(:template_local)
       end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-family
 version: !ruby/object:Gem::Version
-  version: 1.2.88
+  version: 1.2.89
 platform: ruby
 authors:
 - Peter H. Boling
@@ -442,10 +442,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-family.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.88
-  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.88/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.89
+  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.89/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-family/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.88
+  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.89
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-family/wiki
   news_uri: https://www.railsbling.com/tags/kettle-family