kettle-gha-pins 0.3.12 → 0.3.14

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bbd722b090d367d80e40c34de0df0f3abc00fff51e411a8c0676e45d556eb7ef
-  data.tar.gz: 80aa6f0f24d4c5473a6e78d5b487ce34ae3e200a032503b652b9ca37aacfc0ae
+  metadata.gz: 9a6c9dee6aafe12efeb7572d62b3bee72660c3e9b05d2d556b51e23ca35fc1ce
+  data.tar.gz: f77439677811a504d5258374721142c6d94beb01cfc3687b9c510f6d23de57e1
 SHA512:
-  metadata.gz: 9ad84fb8c23112d1dd16bdf9226f101daf0d685e1e8d59378118c941a4129b6b274552ca9397bbb6b6c0c3c3a96a85ad1394490421fccb1ff76920f484688266
-  data.tar.gz: 49b0370d149323a8a4735afbec6e49f29b34ce939b84b71c9d55980e94918961cf66f6b8edd591572b395bf5def8a3ddea27b1e04a803870cd6619d51c4d6094
+  metadata.gz: 8588d4a919344972832a510333f3f7777ea9feb3c4de203e3ac5843e931ed27a7212238eaa6fc801effafe25e4f233c05afd56d2b5f1b506596e170e13548d8e
+  data.tar.gz: ced0bc3b684ee34a1db85dae10fb158d4a4828b1c8113783f000884598b664fff3136eacc1e6e097d74c19d4c26af69e74557c591bde15d6b54ad788a171893f

data/CHANGELOG.md

@@ -30,6 +30,35 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [0.3.14] - 2026-08-28
+
+- TAG: [v0.3.14][0.3.14t]
+- COVERAGE: 97.09% -- 1067/1099 lines in 8 files
+- BRANCH COVERAGE: 85.66% -- 430/502 branches in 8 files
+- 26.13% documented
+
+### Changed
+
+- [kc] kettle-jem/prepare: updated 8 project files:
+  - configuration (1)
+  - dependencies (7)
+
+- [kc] kettle-jem/template: updated 4 project files:
+  - dependencies (1)
+  - documentation (2)
+  - other (1)
+
+## [0.3.13] - 2026-08-15
+
+- TAG: [v0.3.13][0.3.13t]
+- COVERAGE: 97.09% -- 1067/1099 lines in 8 files
+- BRANCH COVERAGE: 85.66% -- 430/502 branches in 8 files
+- 26.13% documented
+
+### Fixed
+
+- Retry transient GitHub Action metadata failures and report API response details during strict pin reviews.
+
 ## [0.3.12] - 2026-08-12
 
 - TAG: [v0.3.12][0.3.12t]
@@ -323,7 +352,11 @@ Please file a bug if you notice a violation of semantic versioning.
 - kettle-jem-template-20260720-005 - Generated README Support & Community rows
   now include a RubyForum help badge.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.12...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.14...HEAD
+[0.3.14]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.13...v0.3.14
+[0.3.14t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.14
+[0.3.13]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.12...v0.3.13
+[0.3.13t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.13
 [0.3.12]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.11...v0.3.12
 [0.3.12t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.12
 [0.3.11]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.10...v0.3.11

data/README.md

@@ -96,7 +96,9 @@ The _amazing_ test matrix is powered by the kettle-dev stack.
 
 </details>
 
-### Enterprise Support [![Tidelift](https://tidelift.com/badges/package/rubygems/kettle-gha-pins)](https://tidelift.com/subscription/pkg/rubygems-kettle-gha-pins?utm_source=rubygems-kettle-gha-pins&utm_medium=referral&utm_campaign=readme)
+### Enterprise Support
+
+[![Tidelift](https://tidelift.com/badges/package/rubygems/kettle-gha-pins)](https://tidelift.com/subscription/pkg/rubygems-kettle-gha-pins?utm_source=rubygems-kettle-gha-pins&utm_medium=referral&utm_campaign=readme)
 
 Available as part of the Tidelift Subscription.
 
@@ -568,7 +570,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-1.065-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-1.099-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-gha-pins/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/gha/pins/github_client.rb

@@ -12,6 +12,8 @@ module Kettle
       # Lightweight GitHub API client for commit and release SHA resolution.
       class GitHubClient
         ANNOTATED_TAG_GIT_FALLBACK_THRESHOLD = 4
+        HTTP_RETRY_LIMIT = 2
+        RETRYABLE_HTTP_STATUS_CODES = [408, 425, 429, 500, 502, 503, 504].freeze
         class CacheMissError < Error; end
         class RefreshError < Error; end
 
@@ -29,9 +31,10 @@ module Kettle
           @commit_cache = {}
           @release_cache = {}
           @last_versions_cache_hit = false
+          @last_request_error = nil
         end
 
-        attr_reader :last_versions_cache_hit
+        attr_reader :last_request_error, :last_versions_cache_hit
 
         def versions_for_repo(repo_ref)
           @last_versions_cache_hit = false
@@ -64,7 +67,10 @@ module Kettle
           releases = nil
           Timeout.timeout(@refresh_timeout) do
             data = request_json("/repos/#{repo_ref}/releases?per_page=100")
-            return refresh_failed!(repo_ref, stale, "invalid releases response") unless data.is_a?(Array)
+            unless data.is_a?(Array)
+              detail = data.nil? ? nil : "expected an array, got #{data.class}"
+              return refresh_failed!(repo_ref, stale, "invalid releases response", detail: detail)
+            end
 
             tag_shas = tag_ref_shas(repo_ref)
             return refresh_failed!(repo_ref, stale, "invalid tag response") unless tag_shas
@@ -122,10 +128,12 @@ module Kettle
           versions
         end
 
-        def refresh_failed!(repo_ref, stale, message)
+        def refresh_failed!(repo_ref, stale, message, detail: nil)
           return cached_versions(repo_ref, stale) unless @fail_on_refresh_error
 
-          raise RefreshError, "#{message} for #{repo_ref}"
+          detail ||= @last_request_error
+          suffix = detail.to_s.empty? ? "" : ": #{detail}"
+          raise RefreshError, "#{message} for #{repo_ref}#{suffix}"
         end
 
         def build_release_versions(data, tag_shas)
@@ -222,8 +230,10 @@ module Kettle
 
         def request_json(path, redirects: 3)
           uri = URI.join(@api_base + "/", path)
+          @last_request_error = nil
 
           response = nil
+          retries = 0
           loop do
             request = Net::HTTP::Get.new(uri)
             request["Accept"] = "application/vnd.github+json"
@@ -231,27 +241,68 @@ module Kettle
             request["X-GitHub-Api-Version"] = "2022-11-28"
             request["Authorization"] = "Bearer #{@token}" if @token && !@token.empty?
 
-            response = http_request(uri, request)
+            begin
+              response = http_request(uri, request)
+            rescue IOError, SystemCallError, Net::OpenTimeout, Net::ReadTimeout => error
+              if retries < HTTP_RETRY_LIMIT
+                retries += 1
+                sleep(retry_delay(nil, retries))
+                next
+              end
+
+              @last_request_error = "GitHub request failed for #{path}: #{error.class}: #{error.message}"
+              return nil
+            end
+
+            if response.code.to_i.between?(300, 399)
+              redirects -= 1
+              return nil if redirects.negative?
+
+              location = response["location"].to_s
+              return nil if location.empty?
+
+              uri = URI.join(uri.to_s, location)
+              next
+            end
 
-            break unless response.code.to_i.between?(300, 399)
-            redirects -= 1
-            return nil if redirects.negative?
+            status = response.code.to_i
+            unless status == 200
+              if RETRYABLE_HTTP_STATUS_CODES.include?(status) && retries < HTTP_RETRY_LIMIT
+                retries += 1
+                sleep(retry_delay(response, retries))
+                next
+              end
 
-            location = response["location"].to_s
-            return nil if location.empty?
+              @last_request_error = response_error(response, path)
+              return nil
+            end
 
-            uri = URI.join(uri.to_s, location)
+            begin
+              return JSON.parse(response.body)
+            rescue JSON::ParserError
+              @last_request_error = "GitHub returned invalid JSON for #{path}"
+              return nil
+            end
           end
+        end
 
-          return nil unless response.code.to_i == 200
+        def retry_delay(response, attempt)
+          retry_after = response ? response["retry-after"].to_f : 0.0
+          return retry_after.clamp(0.0, 2.0) if retry_after.positive?
 
-          begin
-            JSON.parse(response.body)
+          0.25 * (2**(attempt - 1))
+        end
+
+        def response_error(response, path)
+          status = response.code.to_i
+          body = begin
+            JSON.parse(response.body.to_s)
           rescue JSON::ParserError
             nil
           end
-        rescue IOError, SystemCallError, Net::OpenTimeout, Net::ReadTimeout
-          nil
+          message = body.is_a?(Hash) ? body["message"].to_s : ""
+          detail = message.empty? ? "response body was not a GitHub API error object" : message
+          "GitHub API returned HTTP #{status} for #{path}: #{detail}"
         end
 
         def http_request(uri, request)

data/lib/kettle/gha/pins/version.rb

@@ -6,7 +6,7 @@ module Kettle
       # Version namespace for this gem.
       module Version
         # Current gem version.
-        VERSION = "0.3.12"
+        VERSION = "0.3.14"
       end
       # Current gem version exposed at the traditional constant location.
       VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-gha-pins
 version: !ruby/object:Gem::Version
-  version: 0.3.12
+  version: 0.3.14
 platform: ruby
 authors:
 - Peter H. Boling
@@ -94,7 +94,7 @@ dependencies:
         version: '3.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.0.6
+        version: 3.0.13
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -104,7 +104,7 @@ dependencies:
         version: '3.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.0.6
+        version: 3.0.13
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -202,7 +202,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.19
+        version: 2.0.20
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -212,7 +212,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.19
+        version: 2.0.20
 - !ruby/object:Gem::Dependency
   name: turbo_tests2
   requirement: !ruby/object:Gem::Requirement
@@ -222,7 +222,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.5
+        version: 3.2.6
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -232,7 +232,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.5
+        version: 3.2.6
 - !ruby/object:Gem::Dependency
   name: stone_checksums
   requirement: !ruby/object:Gem::Requirement
@@ -262,7 +262,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.11
+        version: 2.0.12
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -272,7 +272,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.11
+        version: 2.0.12
 description: "\U0001F4CC GitHub Actions workflow SHA pin maintenance, including deterministic
   release-tag parsing, canonicalization, cache-backed GitHub ref resolution, and upgrade
   planning."
@@ -301,10 +301,10 @@ licenses:
 - MIT
 metadata:
   homepage_uri: https://github.com/kettle-dev/kettle-gha-pins
-  source_code_uri: https://github.com/kettle-dev/kettle-gha-pins/tree/v0.3.12
-  changelog_uri: https://github.com/kettle-dev/kettle-gha-pins/blob/v0.3.12/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-gha-pins/tree/v0.3.14
+  changelog_uri: https://github.com/kettle-dev/kettle-gha-pins/blob/v0.3.14/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-gha-pins/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-gha-pins/0.3.12
+  documentation_uri: https://www.rubydoc.info/gems/kettle-gha-pins/0.3.14
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-gha-pins/wiki
   news_uri: https://www.railsbling.com/tags/kettle-gha-pins