kettle-gha-pins 0.3.16 → 0.3.18

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8dfe3fe0b49d45644e9ca2685cad1155bca9175e652b85b4cb95ae21176b8efb
-  data.tar.gz: 13a6ed305fa0a53f1a28763d6b02f75030982c534172103f991af23464cdae67
+  metadata.gz: cc7dbdb439708e2d97c928be6a78a2488244d5ea99f05937e1826c2678173b45
+  data.tar.gz: '02390ccd52d34aeccdc894ad59ae2cb7eb61acc0ed158a65b2e07b5e5be58e16'
 SHA512:
-  metadata.gz: 181b5af7140f0c532509d1043a42feb96cfae1a2f07896b9fd52026d77df18fd3fd789cdca21a04f053b6bd46240b39bafd3f0e6dfd6111f2fe7809ac48dbc01
-  data.tar.gz: 79491cacee5fe2743a504941c56c21ad6452515fb6c05b8a38a5f2b8a6e38b2ca0c40860c0c827dab7bdba241b61ad3944a8036394d485fc2500f51ead29ccd7
+  metadata.gz: 8c9c9bf6787448f488242eb0de66a11335fc18618f27e35a021d492c63f39425bc9533fe25a0ce1084c99df356d7212c57157806ed16b24ddaf54c9e78cdeca0
+  data.tar.gz: cd25a7fa8ef1ee898a3a9657d17504817f91b32aaaed80e296e4f7d9e3e0ee58fa428848c16db5b25f00ba1bb7c4bb87b58ebdf16f70834c21ce5640488b79c9

data/CHANGELOG.md

@@ -30,6 +30,42 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [0.3.18] - 2026-10-15
+
+- TAG: [v0.3.18][0.3.18t]
+- COVERAGE: 94.96% -- 1073/1130 lines in 8 files
+- BRANCH COVERAGE: 83.53% -- 431/516 branches in 8 files
+- 26.13% documented
+
+### Changed
+
+- [kc] kettle-jem/prepare: updated 8 project files:
+  - configuration (1)
+  - dependencies (7)
+
+- [kc] kettle-jem/template: updated 31 project files:
+  - documentation (1)
+  - other (1)
+  - workflows (29)
+
+## [0.3.17] - 2026-10-10
+
+- TAG: [v0.3.17][0.3.17t]
+- COVERAGE: 97.09% -- 1068/1100 lines in 8 files
+- BRANCH COVERAGE: 85.66% -- 430/502 branches in 8 files
+- 26.13% documented
+
+### Changed
+
+- [kc] kettle-jem/prepare: updated 12 project files:
+  - dependencies (12)
+
+- [kc] kettle-jem/template: updated 6 project files:
+  - dependencies (1)
+  - documentation (1)
+  - other (2)
+  - workflows (2)
+
 ## [0.3.16] - 2026-09-27
 
 - TAG: [v0.3.16][0.3.16t]
@@ -398,7 +434,11 @@ Please file a bug if you notice a violation of semantic versioning.
 - kettle-jem-template-20260720-005 - Generated README Support & Community rows
   now include a RubyForum help badge.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.16...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.18...HEAD
+[0.3.18]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.17...v0.3.18
+[0.3.18t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.18
+[0.3.17]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.16...v0.3.17
+[0.3.17t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.17
 [0.3.16]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.15...v0.3.16
 [0.3.16t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.16
 [0.3.15]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.14...v0.3.15

data/README.md

@@ -43,7 +43,7 @@ kettle-gha-pins --write --upgrade major
 | Tokens to Remember | [![Gem name][⛳️name-img]][⛳️gem-name] [![Gem namespace][⛳️namespace-img]][⛳️gem-namespace] |
 |-------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
 | Works with JRuby | [![JRuby 9.2 Compat][💎jruby-9.2i]][🚎jruby-9.2-wf] [![JRuby 9.3 Compat][💎jruby-9.3i]][🚎jruby-9.3-wf] <br/> [![JRuby 9.4 Compat][💎jruby-9.4i]][🚎jruby-9.4-wf] [![JRuby 10.0 Compat][💎jruby-10.0i]][🚎jruby-10.0-wf] [![JRuby current Compat][💎jruby-c-i]][🚎10-j-wf] [![JRuby HEAD Compat][💎jruby-headi]][🚎3-hd-wf]|
-| Works with Truffle Ruby | [![Truffle Ruby 22.3 Compat][💎truby-22.3i]][🚎truby-22.3-wf] [![Truffle Ruby 23.0 Compat][💎truby-23.0i]][🚎truby-23.0-wf] [![Truffle Ruby 23.1 Compat][💎truby-23.1i]][🚎truby-23.1-wf] <br/> [![Truffle Ruby 24.2 Compat][💎truby-24.2i]][🚎truby-24.2-wf] [![Truffle Ruby 25.0 Compat][💎truby-25.0i]][🚎truby-25.0-wf] [![Truffle Ruby 33.0 Compat][💎truby-33.0i]][🚎truby-33.0-wf] [![Truffle Ruby current Compat][💎truby-c-i]][🚎9-t-wf] [![Truffle Ruby HEAD Compat][💎truby-headi]][🚎3-hd-wf]|
+| Works with Truffle Ruby | [![Truffle Ruby 22.3 Compat][💎truby-22.3i]][🚎truby-22.3-wf] [![Truffle Ruby 23.1 Compat][💎truby-23.1i]][🚎truby-23.1-wf] <br/> [![Truffle Ruby 24.2 Compat][💎truby-24.2i]][🚎truby-24.2-wf] [![Truffle Ruby 25.0 Compat][💎truby-25.0i]][🚎truby-25.0-wf] [![Truffle Ruby 33.0 Compat][💎truby-33.0i]][🚎truby-33.0-wf] [![Truffle Ruby current Compat][💎truby-c-i]][🚎9-t-wf]|
 | Works with MRI Ruby 4 | [![Ruby current Compat][💎ruby-c-i]][🚎11-c-wf] [![Ruby HEAD Compat][💎ruby-headi]][🚎3-hd-wf]|
 | Works with MRI Ruby 3 | [![Ruby 3.0 Compat][💎ruby-3.0i]][🚎ruby-3.0-wf] [![Ruby 3.1 Compat][💎ruby-3.1i]][🚎ruby-3.1-wf] [![Ruby 3.2 Compat][💎ruby-3.2i]][🚎ruby-3.2-wf] [![Ruby 3.3 Compat][💎ruby-3.3i]][🚎ruby-3.3-wf] [![Ruby 3.4 Compat][💎ruby-3.4i]][🚎ruby-3.4-wf]|
 | Works with MRI Ruby 2 | [![Ruby 2.4 Compat][💎ruby-2.4i]][🚎ruby-2.4-wf] [![Ruby 2.5 Compat][💎ruby-2.5i]][🚎ruby-2.5-wf] [![Ruby 2.6 Compat][💎ruby-2.6i]][🚎ruby-2.6-wf] [![Ruby 2.7 Compat][💎ruby-2.7i]][🚎ruby-2.7-wf]|
@@ -83,6 +83,23 @@ The _amazing_ test matrix is powered by the kettle-dev stack.
 
 </details>
 
+### Runtime and Platform Support
+
+Support tiers describe what this project's CI actually exercises, not what may
+work in an untested environment:
+
+- **Parallel support**: CI runs the test suite with multiple workers available.
+- **Unsupported**: the engine/platform combination is not covered by CI and is
+ not a project compatibility claim.
+
+| Ruby engine/version | Linux | macOS | Windows | Notes |
+|---------------------|-------|-------|---------|-------|
+| MRI 3.1-3.4 | Parallel support | Unsupported | Unsupported | Versioned Ruby workflows run on Linux. |
+| MRI current | Parallel support | Parallel support | Unsupported | Current Ruby workflow covers the declared OS platforms. |
+| MRI head | Parallel support | Unsupported | Unsupported | CI is allowed to fail while Ruby is in development. |
+| JRuby (all CI lanes) | Parallel support | Unsupported | Unsupported | Engine workflows run on Linux; macOS and Windows are not exercised by CI. |
+| TruffleRuby (all CI lanes) | Parallel support | Unsupported | Unsupported | Never shipped a Windows build (zero Windows assets across 66 releases scanned 2026-10-10); setup-ruby hard-fails ([source](https://github.com/ruby/setup-ruby/blob/master/README.md)) |
+
 ### Federated DVCS
 
 <details markdown="1">
@@ -494,7 +511,6 @@ Thanks for RTFM. ☺️
 [🚎jruby-9.4-wf]: https://github.com/kettle-dev/kettle-gha-pins/actions/workflows/jruby-9.4.yml
 [🚎jruby-10.0-wf]: https://github.com/kettle-dev/kettle-gha-pins/actions/workflows/jruby-10.0.yml
 [🚎truby-22.3-wf]: https://github.com/kettle-dev/kettle-gha-pins/actions/workflows/truffleruby-22.3.yml
-[🚎truby-23.0-wf]: https://github.com/kettle-dev/kettle-gha-pins/actions/workflows/truffleruby-23.0.yml
 [🚎truby-23.1-wf]: https://github.com/kettle-dev/kettle-gha-pins/actions/workflows/truffleruby-23.1.yml
 [🚎truby-24.2-wf]: https://github.com/kettle-dev/kettle-gha-pins/actions/workflows/truffleruby-24.2.yml
 [🚎truby-25.0-wf]: https://github.com/kettle-dev/kettle-gha-pins/actions/workflows/truffleruby-25.0.yml
@@ -531,13 +547,11 @@ Thanks for RTFM. ☺️
 [💎ruby-c-i]: https://img.shields.io/badge/Ruby-current-CC342D?style=for-the-badge&logo=ruby&logoColor=green
 [💎ruby-headi]: https://img.shields.io/badge/Ruby-HEAD-CC342D?style=for-the-badge&logo=ruby&logoColor=blue
 [💎truby-22.3i]: https://img.shields.io/badge/Truffle_Ruby-22.3-34BCB1?style=for-the-badge&logo=ruby&logoColor=pink
-[💎truby-23.0i]: https://img.shields.io/badge/Truffle_Ruby-23.0-34BCB1?style=for-the-badge&logo=ruby&logoColor=pink
 [💎truby-23.1i]: https://img.shields.io/badge/Truffle_Ruby-23.1-34BCB1?style=for-the-badge&logo=ruby&logoColor=pink
 [💎truby-24.2i]: https://img.shields.io/badge/Truffle_Ruby-24.2-34BCB1?style=for-the-badge&logo=ruby&logoColor=pink
 [💎truby-25.0i]: https://img.shields.io/badge/Truffle_Ruby-25.0-34BCB1?style=for-the-badge&logo=ruby&logoColor=pink
 [💎truby-33.0i]: https://img.shields.io/badge/Truffle_Ruby-33.0-34BCB1?style=for-the-badge&logo=ruby&logoColor=pink
 [💎truby-c-i]: https://img.shields.io/badge/Truffle_Ruby-current-34BCB1?style=for-the-badge&logo=ruby&logoColor=green
-[💎truby-headi]: https://img.shields.io/badge/Truffle_Ruby-HEAD-34BCB1?style=for-the-badge&logo=ruby&logoColor=blue
 [💎jruby-9.2i]: https://img.shields.io/badge/JRuby-9.2-FBE742?style=for-the-badge&logo=ruby&logoColor=red
 [💎jruby-9.3i]: https://img.shields.io/badge/JRuby-9.3-FBE742?style=for-the-badge&logo=ruby&logoColor=red
 [💎jruby-9.4i]: https://img.shields.io/badge/JRuby-9.4-FBE742?style=for-the-badge&logo=ruby&logoColor=red
@@ -570,7 +584,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-1.100-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-1.130-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-gha-pins/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/gha/pins/cli.rb

@@ -62,6 +62,8 @@ module Kettle
             events: false,
             validate: true,
             write: false,
+            commit: false,
+            push: false,
             check: false,
             api_base: API_BASE,
             user_agent: "kettle-gha-pins",
@@ -302,6 +304,7 @@ module Kettle
             end
           end
           action_progress.stop
+          commit_written_pins! if @options[:commit] && state[:changed_files].any?
           progress_message("Action resolution checks: #{action_progress.cached_count} cached, #{action_progress.live_count} live.") if action_count.positive?
           emit_event(
             "summary",
@@ -406,6 +409,17 @@ module Kettle
               @options[:write] = true
               @options[:dry_run] = false
             end
+            opt.on("--commit", "Commit written workflow files (implies --write; no-op without changes)") do
+              @options[:write] = true
+              @options[:dry_run] = false
+              @options[:commit] = true
+            end
+            opt.on("--push", "Push the commit created by --commit (requires --commit)") do
+              @options[:commit] = true
+              @options[:write] = true
+              @options[:dry_run] = false
+              @options[:push] = true
+            end
             opt.on("--check", "Fail when workflow action pins are stale or mutable") do
               @options[:check] = true
             end
@@ -859,6 +873,44 @@ module Kettle
           }
         end
 
+        # Commit (and optionally push) the workflow files written by this run.
+        # Scoped to .github/workflows so unrelated dirty files are never
+        # swept into the pin commit. No-op when nothing changed.
+        def commit_written_pins!
+          commit_message = "🔒️ Pin GitHub Actions SHAs"
+          # @options[:root] may be anywhere (often ".github/workflows" under
+          # the process cwd); anchor every git invocation at the containing
+          # repository worktree rather than guessing from the scan path.
+          git_dir, stderr, status = Open3.capture3("git", "-C", @options[:root], "rev-parse", "--show-toplevel")
+          unless status.success?
+            progress_message("Could not locate git repository for pin commit: #{stderr.strip}")
+            return
+          end
+          project_root = git_dir.strip
+          stdout, stderr, status = Open3.capture3(
+            "git", "-C", project_root, "add", "--", ".github/workflows"
+          )
+          unless status.success?
+            progress_message("Could not stage updated workflow files: #{(stdout + stderr).strip}")
+            return
+          end
+
+          stdout, stderr, status = Open3.capture3("git", "-C", project_root, "commit", "-m", commit_message)
+          unless status.success?
+            # Nothing to commit (race with another writer) is benign; anything
+            # else is reported but does not flip the exit code — the pin files
+            # themselves were written successfully.
+            progress_message("Could not commit updated workflow files: #{(stdout + stderr).strip}") unless stderr.match?(/nothing to commit|no changes added/i)
+            return
+          end
+          progress_message("Committed updated workflow files: #{commit_message}")
+
+          return unless @options[:push]
+
+          stdout, stderr, status = Open3.capture3("git", "-C", project_root, "push")
+          progress_message(status.success? ? "Pushed pin commit." : "Could not push pin commit: #{(stdout + stderr).strip}")
+        end
+
         def locate_scalar_token(line_text, col, old_token)
           return nil if col.nil? || col.negative? || col >= line_text.length
 
@@ -1012,7 +1064,8 @@ module Kettle
           end
           if @options[:check] && state[:planned_changes].any?
             lines << ""
-            lines << "Recommended fix: kettle-gha-pins --write --upgrade #{@options[:upgrade]}"
+            lines << "Recommended fix: kettle-gha-pins --commit --push --upgrade #{@options[:upgrade]}"
+            lines << "Only afterwards re-run the release resume command printed by kettle-family."
           end
 
           output = lines.join("\n")

data/lib/kettle/gha/pins/version.rb

@@ -6,7 +6,7 @@ module Kettle
       # Version namespace for this gem.
       module Version
         # Current gem version.
-        VERSION = "0.3.16"
+        VERSION = "0.3.18"
       end
       # Current gem version exposed at the traditional constant location.
       VERSION = Version::VERSION # Traditional Constant Location

data.tar.gz.sig

@@ -1,3 +1,4 @@
-'Q����S�Z	�&rĠ_	=P��~*���rx�*��P'Od9��r�]{��i�yD(��@]Z��X�:w�l��]�[G�I���2�iY���QP:�0�Ca��_⬂0`�PP�r�/`z�f0lgxޝ�
-g�o+鞰�bv��C8<�R�#<��Qs��һՃ��G�C}Zm�P����(ɮ�$���<�N��R�3��pw��7{/�I�	�r���D6b��%G�f�����i��|��p���N��c�GA}S-�i
-�X``qCSp*2��\�H҉C�pt�5j5��S��s~��=�����_�C�N���
+Mj�t�"�Mvܽ���l>�C�u������n)$=�k��k�U�����@�ޔ㯜�m�"j���EMq���o��ZS|��c�x�QDk#+��g'Oݢ���n=�>E�	�^QQ
+�=(D�P��~�X��%��(�nT
+��
+`By����㎁�_L���=Ч�L�%�	&�I�nt��#Rj�x��G�\e'���s�?��S�O=

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-gha-pins
 version: !ruby/object:Gem::Version
-  version: 0.3.16
+  version: 0.3.18
 platform: ruby
 authors:
 - Peter H. Boling
@@ -94,7 +94,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.1
+        version: 3.1.13
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -104,7 +104,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.1
+        version: 3.1.13
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -182,7 +182,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.4
+        version: 3.2.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -192,7 +192,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.4
+        version: 3.2.5
 - !ruby/object:Gem::Dependency
   name: kettle-test
   requirement: !ruby/object:Gem::Requirement
@@ -202,7 +202,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.22
+        version: 2.0.25
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -212,27 +212,27 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.22
+        version: 2.0.25
 - !ruby/object:Gem::Dependency
   name: turbo_tests2
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.2'
+        version: '4.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.12
+        version: 4.0.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.2'
+        version: '4.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.12
+        version: 4.0.0
 - !ruby/object:Gem::Dependency
   name: stone_checksums
   requirement: !ruby/object:Gem::Requirement
@@ -262,7 +262,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.13
+        version: 2.0.15
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -272,7 +272,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.13
+        version: 2.0.15
 description: "\U0001F4CC GitHub Actions workflow SHA pin maintenance, including deterministic
   release-tag parsing, canonicalization, cache-backed GitHub ref resolution, and upgrade
   planning."
@@ -301,10 +301,10 @@ licenses:
 - MIT
 metadata:
   homepage_uri: https://github.com/kettle-dev/kettle-gha-pins
-  source_code_uri: https://github.com/kettle-dev/kettle-gha-pins/tree/v0.3.16
-  changelog_uri: https://github.com/kettle-dev/kettle-gha-pins/blob/v0.3.16/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-gha-pins/tree/v0.3.18
+  changelog_uri: https://github.com/kettle-dev/kettle-gha-pins/blob/v0.3.18/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-gha-pins/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-gha-pins/0.3.16
+  documentation_uri: https://www.rubydoc.info/gems/kettle-gha-pins/0.3.18
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-gha-pins/wiki
   news_uri: https://www.railsbling.com/tags/kettle-gha-pins