kettle-gha-pins 0.3.5 → 0.3.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cf726f5ae9da944049ab93d0a7c7f8ae1395738d688d7413675a962c4c086529
-  data.tar.gz: df590d540be898f5d050981b4e8ea2c263368b5fc59a41679bdddd57d0f73fd9
+  metadata.gz: e55947f165ea60fdf05e34f18bbd7af157e37c2e0da0c975a721ca6672da0b9f
+  data.tar.gz: eaaa403c59388d699bc50d0108ff1211d6249933dfd0304a5cd896980a3b646f
 SHA512:
-  metadata.gz: 6caf9c879b226f3b3df8d9a5a1be52ef2374a26dbdf68bc3f8a71385e7839a8bc1a2c4e4c1cb0068a04d9e784d51337365588f90f6a46600f20cc82f7336b23a
-  data.tar.gz: a93449246760eece2458ffd97fbf33141202b28d8ae75cc59010895a6c08e1d1f6469d0302d296aa7e47d213092938d9ac2d598185966f595532c7930cc5c0ee
+  metadata.gz: 24b75d7754e3617cee6eb4178495de33b813e940b65b3a83c64201ad539edcaeb9038cec38b25bafe4f7f9a2510771e4c34d24282043b737b412066580627641
+  data.tar.gz: afceb46d10b46e25d008a125d3d724f3aec05fc3f468aa388aa0cc899b1f5aae6b64c2271651c74b7fd22da364766740098ec037a385b490453c5cd3a082b06d

checksums.yaml.gz.sig

@@ -1 +1 @@
-AP�;
>;V��z0}�(�DNt�o6�Jtu��� 
X:�W�8}Ip�]�<�B<v�>!㓴V�W��'��-)_�d��W���y"�7��	H�v��������V� ��1��0�!_�r�@��_�6��0H�Yޅz���֐�k�E�쉝KGMD`Y�f����J$���Muƈ��"$����W��;	&_E�@�f���WoWɞ�����%V���Ӫ
+�a��i!CB7�[�	I_RL~0��n�FZd���!��'�RL�c��l�?�
���2DS����)�����k�_z�Hx$9S���o\���Q�Īr����
��)��ޙ,?-#���=k��'�Cd���"�㙸$Y"8R:‡`�c�j�
+ؤ�G:U���f�Q0bw;-AƟ>Țz_Y/:��j�>,���p�=]N�*7��

data/CHANGELOG.md

@@ -30,6 +30,25 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [0.3.7] - 2026-08-05
+
+- TAG: [v0.3.7][0.3.7t]
+- COVERAGE: 98.94% -- 931/941 lines in 8 files
+- BRANCH COVERAGE: 90.87% -- 378/416 branches in 8 files
+- 25.96% documented
+
+## [0.3.6] - 2026-08-03
+
+- TAG: [v0.3.6][0.3.6t]
+- COVERAGE: 98.94% -- 935/945 lines in 8 files
+- BRANCH COVERAGE: 90.91% -- 380/418 branches in 8 files
+- 24.04% documented
+
+### Fixed
+
+- kettle-jem-template-20260802-001 - Devcontainer JSON files now merge as JSONC,
+  preserving comments and trailing commas during template updates.
+
 ## [0.3.5] - 2026-08-01
 
 - TAG: [v0.3.5][0.3.5t]
@@ -63,10 +82,6 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Added
 
-- kettle-jem-template-20260729-005 - Gemspec metadata now publishes this
-  project's RubyForum tag as `mailing_list_uri`, and support docs link to the
-  tagged RubyForum community alongside Discord.
-
 ### Fixed
 
 - kettle-jem-template-20260728-003 - Generated dep-heads workflows now run
@@ -81,13 +96,6 @@ Please file a bug if you notice a violation of semantic versioning.
 - kettle-jem-template-20260729-001 - Generated JRuby 9.4 workflows now use the
   legacy manual bundle install path, avoiding setup-time Bundler full-index
   failures against `gem.coop`.
-- kettle-jem-template-20260729-002 - VersionGem bootstrap now preserves
-  and templates dedicated `version_gem.rb` entrypoints even when the gemspec
-  dependency is intentionally omitted, and generated anonymous-loader specs
-  cover both `version.rb` and `version_gem.rb`.
-- kettle-jem-template-20260729-003 - Old-Ruby gems below the VersionGem runtime
-  floor now get managed minimal `version.rb` files and anonymous-loader version
-  specs without adding `version_gem`.
 - kettle-jem-template-20260730-001 - Gemspec package file enumeration now runs
   relative to the gemspec directory, so release package contents stay correct
   even when the gemspec is loaded from another working directory.
@@ -243,22 +251,20 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Changed
 
-- kettle-jem-template-20260716-001 - Shim gemspec manifests now include
-  `LICENSE.md` instead of nonexistent `LICENSE.txt`.
 - kettle-jem-template-20260716-002 - Generated gemspec manifests now ship fewer
   repository-only files by default to reduce downstream distro packaging churn.
-- kettle-jem-template-20260720-001 - Generated READMEs can now render
-  template-managed corporate sponsor logos from project or family config.
 - kettle-jem-template-20260720-002 - Generated development Gemfiles now use the
   released `tree_sitter_language_pack` gem 1.13.3 or newer by default.
 - kettle-jem-template-20260720-003 - Generated StructuredMerge Git diff driver
   config now uses the installed `smorg-rb` Ruby driver name.
-- kettle-jem-template-20260720-004 - Generated multi-engine workflow files now
-  omit JRuby and TruffleRuby jobs when project config declares MRI-only engines.
 - kettle-jem-template-20260720-005 - Generated README Support & Community rows
   now include a RubyForum help badge.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.5...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.7...HEAD
+[0.3.7]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.6...v0.3.7
+[0.3.7t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.7
+[0.3.6]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.5...v0.3.6
+[0.3.6t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.6
 [0.3.5]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.4...v0.3.5
 [0.3.5t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.5
 [0.3.4]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.3...v0.3.4

data/README.md

@@ -563,7 +563,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-0.945-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-0.941-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-gha-pins/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/gha/pins/version.rb

@@ -6,7 +6,7 @@ module Kettle
       # Version namespace for this gem.
       module Version
         # Current gem version.
-        VERSION = "0.3.5"
+        VERSION = "0.3.7"
       end
       # Current gem version exposed at the traditional constant location.
       VERSION = Version::VERSION # Traditional Constant Location

data/lib/kettle/gha/pins/version_rubric.rb

@@ -106,39 +106,39 @@ module Kettle
           end.max_by { |entry| sort_key(entry) }
         end
 
+        # The comment on `uses:` is a cached record that needs to do two things:
+        #
+        # 1. Track the currently resolved target (if the target changes, update
+        #    the comment even when both values parse to version objects).
+        # 2. Normalize equivalent spellings (v2, v2.0, v2.0.0...) to the most
+        #    specific canonical form available for that SHA in known_versions.
         def comment_update_version(comment_version, resolved_version, known_versions: [])
           comment = parse(comment_version)
           resolved = parse(resolved_version)
           return nil unless comment && resolved
 
-          resolved_entry = exact_entry_for_version(known_versions, resolved_version)
-          comment_entry = exact_entry_for_version(known_versions, comment_version)
+          canonical = canonical_version_for(resolved_version, known_versions)
+          return nil if comment_version.to_s == canonical
 
-          if comment == resolved && resolved_entry && comment_entry
-            preferred = entries_for_semantic_version(known_versions, comment).max_by { |known_entry| sort_key(known_entry) }
-            preferred_version = preferred.fetch(:version)
-            (preferred_version == comment_version.to_s) ? nil : preferred_version
-          else
-            return nil if comment_version.to_s == resolved_version.to_s
-
-            resolved_version
-          end
-        end
-
-        def exact_entry_for_version(versions, version)
-          parsed = parse(version)
-          return nil unless parsed
-
-          versions.find do |entry|
-            entry.fetch(:version_obj, nil) == parsed &&
-              entry.fetch(:version, nil).to_s == parsed.to_s
-          end
+          canonical
         end
 
         def entries_for_semantic_version(versions, version_obj)
           versions.select { |entry| entry.fetch(:version_obj, nil) == version_obj }
         end
 
+        # When multiple release spellings resolve to the same SHA, prefer the
+        # most specific equivalent tag. If there is no known equivalent, fall
+        # back to the plain resolved version string.
+        def canonical_version_for(resolved_version, known_versions)
+          resolved = parse(resolved_version)
+          return resolved_version.to_s unless resolved
+
+          equivalents = entries_for_semantic_version(known_versions, resolved)
+          preferred = equivalents.max_by { |entry| sort_key(entry) }
+          preferred ? preferred[:version] : resolved.to_s
+        end
+
         def normalize_upgrade_level(level)
           normalized = level.to_s.downcase
           VALID_UPGRADE_LEVELS.include?(normalized) ? normalized : DEFAULT_UPGRADE_LEVEL

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-gha-pins
 version: !ruby/object:Gem::Version
-  version: 0.3.5
+  version: 0.3.7
 platform: ruby
 authors:
 - Peter H. Boling
@@ -74,7 +74,7 @@ dependencies:
         version: '1.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.1.14
+        version: 1.1.15
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -84,7 +84,7 @@ dependencies:
         version: '1.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.1.14
+        version: 1.1.15
 - !ruby/object:Gem::Dependency
   name: kettle-dev
   requirement: !ruby/object:Gem::Requirement
@@ -94,7 +94,7 @@ dependencies:
         version: '2.5'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.5.14
+        version: 2.5.18
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -104,7 +104,7 @@ dependencies:
         version: '2.5'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.5.14
+        version: 2.5.18
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -202,7 +202,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.17
+        version: 2.0.19
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -212,7 +212,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.17
+        version: 2.0.19
 - !ruby/object:Gem::Dependency
   name: turbo_tests2
   requirement: !ruby/object:Gem::Requirement
@@ -301,10 +301,10 @@ licenses:
 - MIT
 metadata:
   homepage_uri: https://github.com/kettle-dev/kettle-gha-pins
-  source_code_uri: https://github.com/kettle-dev/kettle-gha-pins/tree/v0.3.5
-  changelog_uri: https://github.com/kettle-dev/kettle-gha-pins/blob/v0.3.5/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-gha-pins/tree/v0.3.7
+  changelog_uri: https://github.com/kettle-dev/kettle-gha-pins/blob/v0.3.7/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-gha-pins/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-gha-pins/0.3.5
+  documentation_uri: https://www.rubydoc.info/gems/kettle-gha-pins/0.3.7
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-gha-pins/wiki
   news_uri: https://www.railsbling.com/tags/kettle-gha-pins