kettle-gha-pins 0.3.15 → 0.3.16

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 55b0a15a936dab4657ba826f316438f5f3d0240c3c949dfb09ab05b9018c7e0b
-  data.tar.gz: b82aa6b3e49ffb0cdce72b5d121239e03e62c5e64755aefc2430542b20d5dab1
+  metadata.gz: 8dfe3fe0b49d45644e9ca2685cad1155bca9175e652b85b4cb95ae21176b8efb
+  data.tar.gz: 13a6ed305fa0a53f1a28763d6b02f75030982c534172103f991af23464cdae67
 SHA512:
-  metadata.gz: 0d5f55718dac0c641ee079ddb54a458226a33523505ef27c5d2da00aad4fb1c077289390c8062f433b2fad672a80b4f352ec0b85f8d8243feaad06e046f7fc8b
-  data.tar.gz: 103857c43d63d452f0094cd117a4787a05413e3c5285f603d416a90f42b4098e3b882a0ef67cc1b5bf28efa18052d9a46c8509daa24cb837a6b03b4c43a4bf60
+  metadata.gz: 181b5af7140f0c532509d1043a42feb96cfae1a2f07896b9fd52026d77df18fd3fd789cdca21a04f053b6bd46240b39bafd3f0e6dfd6111f2fe7809ac48dbc01
+  data.tar.gz: 79491cacee5fe2743a504941c56c21ad6452515fb6c05b8a38a5f2b8a6e38b2ca0c40860c0c827dab7bdba241b61ad3944a8036394d485fc2500f51ead29ccd7

data/CHANGELOG.md

@@ -30,6 +30,36 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [0.3.16] - 2026-09-27
+
+- TAG: [v0.3.16][0.3.16t]
+- COVERAGE: 97.09% -- 1068/1100 lines in 8 files
+- BRANCH COVERAGE: 85.66% -- 430/502 branches in 8 files
+- 26.13% documented
+
+### Added
+
+- kettle-jem-template-20260913-001 - Templating now also surfaces a review
+  entry in `dependency_conflicts.resolve` when a direct development
+  dependency doesn't support one or more of this project's declared
+  `engines:` and has no template-managed modular home (e.g. `sqlite3` on
+  `jruby`). Review each entry and pick a resolution per the project's own
+  engine support needs.
+
+### Changed
+
+- [kc] kettle-jem/prepare: updated 19 project files:
+  - dependencies (19)
+- [kc] kettle-jem/template: updated 34 project files:
+  - code and tests (1)
+  - dependencies (1)
+  - other (2)
+  - workflows (30)
+
+### Fixed
+
+- Workflow discovery canonicalizes Windows paths so 8.3 aliases match the same files consistently.
+
 ## [0.3.15] - 2026-09-14
 
 - TAG: [v0.3.15][0.3.15t]
@@ -368,7 +398,9 @@ Please file a bug if you notice a violation of semantic versioning.
 - kettle-jem-template-20260720-005 - Generated README Support & Community rows
   now include a RubyForum help badge.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.15...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.16...HEAD
+[0.3.16]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.15...v0.3.16
+[0.3.16t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.16
 [0.3.15]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.14...v0.3.15
 [0.3.15t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.15
 [0.3.14]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.13...v0.3.14

data/README.md

@@ -570,7 +570,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-1.099-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-1.100-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-gha-pins/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/gha/pins/cli.rb

@@ -573,11 +573,12 @@ module Kettle
             File.join(expanded_root.to_s, "*.yaml")
           ]
           files = Dir.glob(patterns, File::FNM_PATHNAME).uniq.sort
-          files.select do |path|
+          files = files.select do |path|
             next false unless File.file?(path)
             next false if reject_patterns.any? { |pattern| pattern.match?(path) }
             true
           end
+          files.map { |path| File.realpath(path) }.sort
         end
 
         def workflow_analysis_root(root)

data/lib/kettle/gha/pins/version.rb

@@ -6,7 +6,7 @@ module Kettle
       # Version namespace for this gem.
       module Version
         # Current gem version.
-        VERSION = "0.3.15"
+        VERSION = "0.3.16"
       end
       # Current gem version exposed at the traditional constant location.
       VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-gha-pins
 version: !ruby/object:Gem::Version
-  version: 0.3.15
+  version: 0.3.16
 platform: ruby
 authors:
 - Peter H. Boling
@@ -94,7 +94,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.0
+        version: 3.1.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -104,7 +104,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.0
+        version: 3.1.1
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -182,7 +182,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.3
+        version: 3.2.4
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -192,7 +192,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.3
+        version: 3.2.4
 - !ruby/object:Gem::Dependency
   name: kettle-test
   requirement: !ruby/object:Gem::Requirement
@@ -222,7 +222,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.7
+        version: 3.2.12
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -232,7 +232,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.7
+        version: 3.2.12
 - !ruby/object:Gem::Dependency
   name: stone_checksums
   requirement: !ruby/object:Gem::Requirement
@@ -242,7 +242,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.8
+        version: 1.0.9
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -252,7 +252,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.8
+        version: 1.0.9
 - !ruby/object:Gem::Dependency
   name: gitmoji-regex
   requirement: !ruby/object:Gem::Requirement
@@ -262,7 +262,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.12
+        version: 2.0.13
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -272,7 +272,7 @@ dependencies:
         version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.12
+        version: 2.0.13
 description: "\U0001F4CC GitHub Actions workflow SHA pin maintenance, including deterministic
   release-tag parsing, canonicalization, cache-backed GitHub ref resolution, and upgrade
   planning."
@@ -301,10 +301,10 @@ licenses:
 - MIT
 metadata:
   homepage_uri: https://github.com/kettle-dev/kettle-gha-pins
-  source_code_uri: https://github.com/kettle-dev/kettle-gha-pins/tree/v0.3.15
-  changelog_uri: https://github.com/kettle-dev/kettle-gha-pins/blob/v0.3.15/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-gha-pins/tree/v0.3.16
+  changelog_uri: https://github.com/kettle-dev/kettle-gha-pins/blob/v0.3.16/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-gha-pins/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-gha-pins/0.3.15
+  documentation_uri: https://www.rubydoc.info/gems/kettle-gha-pins/0.3.16
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-gha-pins/wiki
   news_uri: https://www.railsbling.com/tags/kettle-gha-pins
@@ -335,7 +335,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.17
+rubygems_version: 4.0.20
 specification_version: 4
 summary: "\U0001F4CC Shared GitHub Actions pin version rules for kettle-dev tooling."
 test_files: []