kettle-gha-pins 0.3.1 → 0.3.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1c4e8941fcf7fadb5c7867e427f4c000436c9284abd219fa7b0dd3145b1809fa
-  data.tar.gz: ecb48ef8ffed69aac211e173eafa9876b85762278d3e81c270b66ccc1e6c1f6a
+  metadata.gz: ace9741a6103bddad79df3803ccc35153af81161b7c21c1615f08a10604e6c92
+  data.tar.gz: 8f212c66b4cbb24a32491dfb8c9ede3477492daa20449e9eaa2d3278a2859818
 SHA512:
-  metadata.gz: 14da867044c3e10ce5a9e3259d2b3b0f4759425449a8806c55cbd7f777c264d359cf09792dba534ed206e0f30e47bd353cf3fbb087c4b0077d62d3451cc9e5b7
-  data.tar.gz: 32f3e435aa5d9cedb4de296cb68c2329097b17eb0a4dcfbc3f9dc224614028ec1815d655618adb3758e5ab184b42f1de35e3f9705925f3b3b3de14fac6d9e6f3
+  metadata.gz: e411ca542ea1db8da7c50018698d07958d06da43ec83259ae9b98d5bec7c3417c3d5b42ef49bf58fc48ab082088277bc63832e633038720304e59a18a0c6bece
+  data.tar.gz: e9ee10f5a5a2d517b1579c14dc7f6369c043d74ba568bf3d4cff79996cec4386b032c0c9d1d442362be66fa89cf072524daf83157ad2272a746e54b68375747a

data/CHANGELOG.md

@@ -30,6 +30,68 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [0.3.3] - 2026-07-28
+
+- TAG: [v0.3.3][0.3.3t]
+- COVERAGE: 98.94% -- 935/945 lines in 8 files
+- BRANCH COVERAGE: 90.91% -- 380/418 branches in 8 files
+- 24.04% documented
+
+### Fixed
+
+- Version comment normalization now rewrites equivalent comments to a real
+  action tag, preferring the most specific version spelling when both equivalent
+  tags exist.
+- Two-segment version comments like `v2.0` are now parsed when deciding whether
+  an adjacent SHA-pin comment needs normalization.
+
+## [0.3.2] - 2026-07-27
+
+- TAG: [v0.3.2][0.3.2t]
+- COVERAGE: 98.92% -- 915/925 lines in 8 files
+- BRANCH COVERAGE: 90.93% -- 371/408 branches in 8 files
+- 24.75% documented
+
+### Added
+
+- kettle-jem-template-20260726-001 - Projects now include YARD lint
+  configuration and documentation dependencies so documentation issues fail
+  before generated docs are refreshed.
+
+- kettle-jem-template-20260727-001 - Spec harness documentation now lists the
+  RSpec helpers provided by `kettle-test`.
+
+### Changed
+
+- The `kettle-gha-pins` executable startup header is now shown only when
+  `--verbose` is passed; `-v` and `--version` still print just the executable
+  version and exit.
+
+- kettle-jem-template-20260725-001 - Release pull request branches beginning
+  with `feature/release` now run JRuby and TruffleRuby workflows.
+- kettle-jem-template-20260725-002 - Version specs now use `anonymous_loader` to
+  cover `version.rb` without redefining constants, or are removed when version
+  specs are not managed for the project.
+
+- kettle-jem-template-20260728-001 - Generated Ruby workflows now use clearer
+  setup-ruby-flash planning and can prepare appraisal-only jobs without
+  installing the main Gemfile bundle.
+
+### Fixed
+
+- Two-segment GitHub Action releases like `v2.0` are now recognized as
+  versioned action tags, so SHA pin updaters do not collapse them to evergreen
+  major tags like `v2`.
+- kettle-jem-template-20260726-002 - Generated version files now document their
+  version namespace and constants, reducing warning-only YARD lint output.
+
+- kettle-jem-template-20260726-003 - Coverage upload steps now treat Coveralls,
+  QLTY, and Codecov as optional, so provider outages do not fail CI when local
+  coverage thresholds still pass.
+- kettle-jem-template-20260728-002 - Generated RuboCop configs now ignore the
+  same `gemfiles/vendor/bundle` tree as `.gitignore`, so vendored dependency
+  installs are not reported as project lint debt.
+
 ## [0.3.1] - 2026-07-23
 
 - TAG: [v0.3.1][0.3.1t]
@@ -134,7 +196,11 @@ Please file a bug if you notice a violation of semantic versioning.
 - kettle-jem-template-20260720-005 - Generated README Support & Community rows
   now include a RubyForum help badge.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.1...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.3...HEAD
+[0.3.3]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.2...v0.3.3
+[0.3.3t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.3
+[0.3.2]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.1...v0.3.2
+[0.3.2t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.2
 [0.3.1]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.0...v0.3.1
 [0.3.1t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.1
 [0.3.0]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.2.1...v0.3.0

data/README.md

@@ -563,7 +563,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-0.925-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-0.945-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-gha-pins/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/exe/kettle-gha-pins

@@ -28,7 +28,7 @@ rescue LoadError
 end
 
 begin
-  puts "== #{script_basename} v#{Kettle::Gha::Pins::Version::VERSION} =="
+  puts "== #{script_basename} v#{Kettle::Gha::Pins::Version::VERSION} ==" if ARGV.delete("--verbose")
 
   status = Kettle::Gha::Pins::CLI.new(ARGV).run!
   exit(status)

data/lib/kettle/gha/pins/action_resolver.rb

@@ -27,9 +27,9 @@ module Kettle
           level = VersionRubric.normalize_upgrade_level(upgrade_level)
 
           current_ref = old_ref.to_s.strip
-          return {is_outdated: false, updates: nil, reason: nil, current_version: nil} if current_ref.empty?
-
           available_versions = versions || []
+          return {is_outdated: false, updates: nil, reason: nil, current_version: nil, versions: available_versions} if current_ref.empty?
+
           latest = available_versions.first
 
           current_sha = if SHA_RE.match?(current_ref) || WEAK_SHA_RE.match?(current_ref)
@@ -114,6 +114,7 @@ module Kettle
             updates: updates,
             reason: reason,
             current_version: current_version,
+            versions: available_versions,
             latest_outdated: latest_outdated
           }
         end

data/lib/kettle/gha/pins/cli.rb

@@ -34,8 +34,8 @@ module Kettle
         VALID_UPGRADE_LEVELS = Kettle::Gha::Pins::VALID_UPGRADE_LEVELS
         PersistentActionCache = Kettle::Gha::Pins::PersistentActionCache
         GitHubClient = Kettle::Gha::Pins::GitHubClient
-        VERSION_COMMENT_SUFFIX_RE = /\A\s+#\s*v?(?<version>\d+(?:\.\d+\.\d+(?:[-.]?[0-9A-Za-z.-]+)?)?)/
-        VERSION_COMMENT_REPLACEMENT_RE = /\A(?<prefix>\s+#\s*)v?\d+(?:\.\d+\.\d+(?:[-.]?[0-9A-Za-z.-]+)?)?/
+        VERSION_COMMENT_SUFFIX_RE = /\A\s+#\s*v?(?<version>\d+(?:\.\d+){0,2}(?:[-.]?[0-9A-Za-z.-]+)?)/
+        VERSION_COMMENT_REPLACEMENT_RE = /\A(?<prefix>\s+#\s*)v?\d+(?:\.\d+){0,2}(?:[-.]?[0-9A-Za-z.-]+)?/
 
         def self.release_version_sort_key(entry)
           Kettle::Gha::Pins::VersionRubric.sort_key(entry)
@@ -151,10 +151,15 @@ module Kettle
                 end
                 if updates.nil? && upgrade_plan[:current_version]
                   comment_version = version_comment_from_line(text, node[:line], node[:col], parsed_ref[:value])
-                  if comment_version && comment_version != upgrade_plan[:current_version]
+                  comment_update_version = VersionRubric.comment_update_version(
+                    comment_version,
+                    upgrade_plan[:current_version],
+                    known_versions: upgrade_plan.fetch(:versions, [])
+                  )
+                  if comment_update_version
                     updates = {
                       new_ref: old_ref,
-                      new_version: upgrade_plan[:current_version],
+                      new_version: comment_update_version,
                       old_version: comment_version,
                       reason: COMMENT_REASON,
                       action: repo_ref

data/lib/kettle/gha/pins/version.rb

@@ -3,9 +3,12 @@
 module Kettle
   module Gha
     module Pins
+      # Version namespace for this gem.
       module Version
-        VERSION = "0.3.1"
+        # Current gem version.
+        VERSION = "0.3.3"
       end
+      # Current gem version exposed at the traditional constant location.
       VERSION = Version::VERSION # Traditional Constant Location
     end
   end

data/lib/kettle/gha/pins/version_rubric.rb

@@ -7,7 +7,7 @@ module Kettle
       module VersionRubric
         VALID_UPGRADE_LEVELS = %w[major minor patch].freeze
         DEFAULT_UPGRADE_LEVEL = "major"
-        RELEASE_TAG_RE = /\A(?:\d+|\d+\.\d+\.\d+(?:[-.]?[0-9A-Za-z.-]+)?)\z/
+        RELEASE_TAG_RE = /\A(?:\d+|\d+\.\d+(?:\.\d+)?(?:[-.]?[0-9A-Za-z.-]+)?)\z/
 
         module_function
 
@@ -106,6 +106,39 @@ module Kettle
           end.max_by { |entry| sort_key(entry) }
         end
 
+        def comment_update_version(comment_version, resolved_version, known_versions: [])
+          comment = parse(comment_version)
+          resolved = parse(resolved_version)
+          return nil unless comment && resolved
+
+          resolved_entry = exact_entry_for_version(known_versions, resolved_version)
+          comment_entry = exact_entry_for_version(known_versions, comment_version)
+
+          if comment == resolved && resolved_entry && comment_entry
+            preferred = entries_for_semantic_version(known_versions, comment).max_by { |known_entry| sort_key(known_entry) }
+            preferred_version = preferred.fetch(:version)
+            (preferred_version == comment_version.to_s) ? nil : preferred_version
+          else
+            return nil if comment_version.to_s == resolved_version.to_s
+
+            resolved_version
+          end
+        end
+
+        def exact_entry_for_version(versions, version)
+          parsed = parse(version)
+          return nil unless parsed
+
+          versions.find do |entry|
+            entry.fetch(:version_obj, nil) == parsed &&
+              entry.fetch(:version, nil).to_s == parsed.to_s
+          end
+        end
+
+        def entries_for_semantic_version(versions, version_obj)
+          versions.select { |entry| entry.fetch(:version_obj, nil) == version_obj }
+        end
+
         def normalize_upgrade_level(level)
           normalized = level.to_s.downcase
           VALID_UPGRADE_LEVELS.include?(normalized) ? normalized : DEFAULT_UPGRADE_LEVEL

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-gha-pins
 version: !ruby/object:Gem::Version
-  version: 0.3.1
+  version: 0.3.3
 platform: ruby
 authors:
 - Peter H. Boling
@@ -153,6 +153,26 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: 1.0.4
+- !ruby/object:Gem::Dependency
+  name: anonymous_loader
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.1.3
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.1.3
 - !ruby/object:Gem::Dependency
   name: appraisal2
   requirement: !ruby/object:Gem::Requirement
@@ -182,7 +202,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.14
+        version: 2.0.15
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -192,7 +212,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.14
+        version: 2.0.15
 - !ruby/object:Gem::Dependency
   name: turbo_tests2
   requirement: !ruby/object:Gem::Requirement
@@ -202,7 +222,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.0
+        version: 3.2.3
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -212,7 +232,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.0
+        version: 3.2.3
 - !ruby/object:Gem::Dependency
   name: stone_checksums
   requirement: !ruby/object:Gem::Requirement
@@ -222,7 +242,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.6
+        version: 1.0.7
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -232,7 +252,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.6
+        version: 1.0.7
 - !ruby/object:Gem::Dependency
   name: gitmoji-regex
   requirement: !ruby/object:Gem::Requirement
@@ -242,7 +262,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.4
+        version: 2.0.6
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -252,7 +272,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.4
+        version: 2.0.6
 description: "\U0001F4CC GitHub Actions workflow SHA pin maintenance, including deterministic
   release-tag parsing, canonicalization, cache-backed GitHub ref resolution, and upgrade
   planning."
@@ -281,10 +301,10 @@ licenses:
 - MIT
 metadata:
   homepage_uri: https://github.com/kettle-dev/kettle-gha-pins
-  source_code_uri: https://github.com/kettle-dev/kettle-gha-pins/tree/v0.3.1
-  changelog_uri: https://github.com/kettle-dev/kettle-gha-pins/blob/v0.3.1/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-gha-pins/tree/v0.3.3
+  changelog_uri: https://github.com/kettle-dev/kettle-gha-pins/blob/v0.3.3/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-gha-pins/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-gha-pins/0.3.1
+  documentation_uri: https://www.rubydoc.info/gems/kettle-gha-pins/0.3.3
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-gha-pins/wiki
   news_uri: https://www.railsbling.com/tags/kettle-gha-pins