kettle-gha-pins 0.3.6 → 0.3.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b985aaa740f2f6f46ff9c0e71c7b51cc69cb23b2a1e8786258c46c34ee08be2e
-  data.tar.gz: 5a9c0fe7c26efe095e2e138a15ab9233e513f3dfb514818642b8c148f623940f
+  metadata.gz: e55947f165ea60fdf05e34f18bbd7af157e37c2e0da0c975a721ca6672da0b9f
+  data.tar.gz: eaaa403c59388d699bc50d0108ff1211d6249933dfd0304a5cd896980a3b646f
 SHA512:
-  metadata.gz: a06b224317f385390101c1b69648cc3a87345a016376643b8b17bd398823534e692942c57a12c6036665231e2233e00c85ce2374aa4c46df8e79467572480761
-  data.tar.gz: a62ad7ef161155e77688213c211d69a5b283a7825f0aed524f8c0ac1dfcda67c489b36310ac6f27b9c68c9127b018eff63658648a8eb68d8690141ff65662629
+  metadata.gz: 24b75d7754e3617cee6eb4178495de33b813e940b65b3a83c64201ad539edcaeb9038cec38b25bafe4f7f9a2510771e4c34d24282043b737b412066580627641
+  data.tar.gz: afceb46d10b46e25d008a125d3d724f3aec05fc3f468aa388aa0cc899b1f5aae6b64c2271651c74b7fd22da364766740098ec037a385b490453c5cd3a082b06d

data/CHANGELOG.md

@@ -30,6 +30,13 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [0.3.7] - 2026-08-05
+
+- TAG: [v0.3.7][0.3.7t]
+- COVERAGE: 98.94% -- 931/941 lines in 8 files
+- BRANCH COVERAGE: 90.87% -- 378/416 branches in 8 files
+- 25.96% documented
+
 ## [0.3.6] - 2026-08-03
 
 - TAG: [v0.3.6][0.3.6t]
@@ -253,7 +260,9 @@ Please file a bug if you notice a violation of semantic versioning.
 - kettle-jem-template-20260720-005 - Generated README Support & Community rows
   now include a RubyForum help badge.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.6...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.7...HEAD
+[0.3.7]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.6...v0.3.7
+[0.3.7t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.7
 [0.3.6]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.5...v0.3.6
 [0.3.6t]: https://github.com/kettle-dev/kettle-gha-pins/releases/tag/v0.3.6
 [0.3.5]: https://github.com/kettle-dev/kettle-gha-pins/compare/v0.3.4...v0.3.5

data/README.md

@@ -563,7 +563,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-0.945-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-0.941-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-gha-pins/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/gha/pins/version.rb

@@ -6,7 +6,7 @@ module Kettle
       # Version namespace for this gem.
       module Version
         # Current gem version.
-        VERSION = "0.3.6"
+        VERSION = "0.3.7"
       end
       # Current gem version exposed at the traditional constant location.
       VERSION = Version::VERSION # Traditional Constant Location

data/lib/kettle/gha/pins/version_rubric.rb

@@ -106,39 +106,39 @@ module Kettle
           end.max_by { |entry| sort_key(entry) }
         end
 
+        # The comment on `uses:` is a cached record that needs to do two things:
+        #
+        # 1. Track the currently resolved target (if the target changes, update
+        #    the comment even when both values parse to version objects).
+        # 2. Normalize equivalent spellings (v2, v2.0, v2.0.0...) to the most
+        #    specific canonical form available for that SHA in known_versions.
         def comment_update_version(comment_version, resolved_version, known_versions: [])
           comment = parse(comment_version)
           resolved = parse(resolved_version)
           return nil unless comment && resolved
 
-          resolved_entry = exact_entry_for_version(known_versions, resolved_version)
-          comment_entry = exact_entry_for_version(known_versions, comment_version)
+          canonical = canonical_version_for(resolved_version, known_versions)
+          return nil if comment_version.to_s == canonical
 
-          if comment == resolved && resolved_entry && comment_entry
-            preferred = entries_for_semantic_version(known_versions, comment).max_by { |known_entry| sort_key(known_entry) }
-            preferred_version = preferred.fetch(:version)
-            (preferred_version == comment_version.to_s) ? nil : preferred_version
-          else
-            return nil if comment_version.to_s == resolved_version.to_s
-
-            resolved_version
-          end
-        end
-
-        def exact_entry_for_version(versions, version)
-          parsed = parse(version)
-          return nil unless parsed
-
-          versions.find do |entry|
-            entry.fetch(:version_obj, nil) == parsed &&
-              entry.fetch(:version, nil).to_s == parsed.to_s
-          end
+          canonical
         end
 
         def entries_for_semantic_version(versions, version_obj)
           versions.select { |entry| entry.fetch(:version_obj, nil) == version_obj }
         end
 
+        # When multiple release spellings resolve to the same SHA, prefer the
+        # most specific equivalent tag. If there is no known equivalent, fall
+        # back to the plain resolved version string.
+        def canonical_version_for(resolved_version, known_versions)
+          resolved = parse(resolved_version)
+          return resolved_version.to_s unless resolved
+
+          equivalents = entries_for_semantic_version(known_versions, resolved)
+          preferred = equivalents.max_by { |entry| sort_key(entry) }
+          preferred ? preferred[:version] : resolved.to_s
+        end
+
         def normalize_upgrade_level(level)
           normalized = level.to_s.downcase
           VALID_UPGRADE_LEVELS.include?(normalized) ? normalized : DEFAULT_UPGRADE_LEVEL

data.tar.gz.sig

@@ -1,3 +1,2 @@
-@7��z�<�����)4����3PD�e{�a��ɖ
-��p_s?�,�:�>��y><l��@�#y��(v����P�m����m�wH����^�`���Z�I_���G���`�U�mTt(CJ�럖��F$
-�I��(����Kǒ
+O� G	�G�	F���Of�_2A��$R��pO�vd��rپ6蘱_���J�F(�Z���A�+e[�2*����4@�{ˌǥ��;ZSaP�Y6G�/Y���2����2��p����NE�$�躧��Vb?Տ��
+��\���O��w�}���<�
�v/p�n_�o�d��ع��t��qUy�=B�2s�������b��״Z����!��R�O�+�2z�!���/��X'�VB�>T���*��#0��m��h��>.o�������)D>��Đ��჋	�m��M�i3����x>^|������!d(�?�SZp��i>f�u�~�5�W7��~��

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-gha-pins
 version: !ruby/object:Gem::Version
-  version: 0.3.6
+  version: 0.3.7
 platform: ruby
 authors:
 - Peter H. Boling
@@ -301,10 +301,10 @@ licenses:
 - MIT
 metadata:
   homepage_uri: https://github.com/kettle-dev/kettle-gha-pins
-  source_code_uri: https://github.com/kettle-dev/kettle-gha-pins/tree/v0.3.6
-  changelog_uri: https://github.com/kettle-dev/kettle-gha-pins/blob/v0.3.6/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-gha-pins/tree/v0.3.7
+  changelog_uri: https://github.com/kettle-dev/kettle-gha-pins/blob/v0.3.7/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-gha-pins/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-gha-pins/0.3.6
+  documentation_uri: https://www.rubydoc.info/gems/kettle-gha-pins/0.3.7
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-gha-pins/wiki
   news_uri: https://www.railsbling.com/tags/kettle-gha-pins