kettle-jem 7.1.37 → 7.1.39

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 00e76622428f683234f6e7444e38f0b920addc704a31c4c5571efa84a347cfdd
-  data.tar.gz: 3d8b60bab2e1e8454ca9bb647bb683e6b84b6d1446d3ab761a764b01fa56111c
+  metadata.gz: 15369ec624224409f52a0c1c6d97dfcf499f93ccdbb303ec00e942d7ab1dc36c
+  data.tar.gz: 37e45d9d673ee8c8f68c5b23e4c80ae53d3d9a736dff2124a592dedc2feaf259
 SHA512:
-  metadata.gz: dd27b88f5310bd690f02665af0712e86ff2f3b77d820736bbc88ce70fd557fd1b9aa7fc1bb957d8443582ad17c7b756743b44bb7496c0a556e00346494de59e0
-  data.tar.gz: ea83632fce9913fa470fcbec625305e3dfe4f72d98c72e81666f5b044ab0266dd51d41f3d5c8f0adcc9c1cf7cf333707eb01a52082cd61c61d1306507288fe38
+  metadata.gz: ead539e8d2cb3dc6ceb188f99cd855529d31f4687d144120197f2452b1430ca7e7c3c00917bf978fe67d14d301c370a833edca352c2dea3321f3cffdee985419
+  data.tar.gz: 1106de95b7e5292560c503f090827435183daf5a25fdc50357694bfd9b0580bdcc15b8f6a0985883ea7c39ca896e1a17afd066edc985602ba4baf445bfff0294

data/CHANGELOG.md

@@ -30,6 +30,53 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [7.1.39] - 2026-10-21
+
+- TAG: [v7.1.39][7.1.39t]
+- COVERAGE: 93.45% -- 11397/12196 lines in 17 files
+- BRANCH COVERAGE: 77.09% -- 4910/6369 branches in 17 files
+- 19.89% documented
+
+### Changed
+
+- [kc] kettle-jem-deps-floor: Update kettle-jem template dependency floors:
+  - kettle-dev (>= 3.1.20 -> >= 3.1.21)
+  - rubocop-minitest (>= 0.40.0 -> >= 0.41.0)
+
+- [kc] kettle-jem-workflow-pins: Update pinned GitHub Actions in kettle-jem templates:
+  - github/codeql-action/analyze v4.39.0 (6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee) -> v4.39.1 (9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
+  - github/codeql-action/autobuild v4.39.0 (6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee) -> v4.39.1 (9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
+  - github/codeql-action/init v4.39.0 (6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee) -> v4.39.1 (9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
+  - pozil/auto-assign-issue v4.0.1 (af6beea6bdf1e8eb373f061c5bc168681fc6d011) -> v4.0.2 (bec9ebf443592887b8f9bed643afafdfd3f62f1d)
+  - ruby/setup-ruby v1.331.0 (824c0e29fdfc7d689c191c27acc969d2d04b7dd8) -> v1.332.0 (b1da4809b005e0178fe08a1d57317bffc00b7b4c)
+
+- kettle-jem-deps-floor: removed the rubocop-minitest FLOOR_HOLDS entry. standard 1.57 requires rubocop ~> 1.91, so rubocop-minitest 0.41.0 (rubocop >= 1.89) is resolvable again and the floor is no longer held.
+
+- [kc] kettle-jem/prepare: updated 7 project files:
+  - dependencies (7)
+
+- [kc] kettle-jem/template: updated 6 project files:
+  - code and tests (1)
+  - dependencies (2)
+  - other (1)
+  - workflows (2)
+
+### Fixed
+
+- kettle-jem: force `accept_template` strategy for `.licenserc.yaml` — it is fully generated from `license_eye` config tokens, and merge semantics kept stale version-pinned dependency overrides forever, breaking destination license-eye workflows after gem bumps
+
+## [7.1.38] - 2026-10-21
+
+- TAG: [v7.1.38][7.1.38t]
+- COVERAGE: 93.45% -- 11396/12195 lines in 17 files
+- BRANCH COVERAGE: 77.08% -- 4909/6369 branches in 17 files
+- 19.89% documented
+
+### Changed
+
+- [kc] kettle-jem-deps-floor: Update kettle-jem template dependency floors:
+  - kettle-family (>= 1.3.28 -> >= 1.3.29)
+
 ## [7.1.37] - 2026-10-21
 
 - TAG: [v7.1.37][7.1.37t]
@@ -2403,7 +2450,11 @@ Please file a bug if you notice a violation of semantic versioning.
 - Released kettle-jem as part of the initial StructuredMerge Ruby 7.0.0 gem set.
 - Included packaged templates and parser-backed merge support for Ruby gem templating.
 
-[Unreleased]: https://github.com/structuredmerge/structuredmerge-ruby/compare/v7.1.37...HEAD
+[Unreleased]: https://github.com/structuredmerge/structuredmerge-ruby/compare/v7.1.39...HEAD
+[7.1.39]: https://github.com/structuredmerge/structuredmerge-ruby/compare/v7.1.38...v7.1.39
+[7.1.39t]: https://github.com/structuredmerge/structuredmerge-ruby/releases/tag/v7.1.39
+[7.1.38]: https://github.com/structuredmerge/structuredmerge-ruby/compare/v7.1.37...v7.1.38
+[7.1.38t]: https://github.com/structuredmerge/structuredmerge-ruby/releases/tag/v7.1.38
 [7.1.37]: https://github.com/structuredmerge/structuredmerge-ruby/compare/v7.1.36...v7.1.37
 [7.1.37t]: https://github.com/structuredmerge/structuredmerge-ruby/releases/tag/v7.1.37
 [7.1.36]: https://github.com/structuredmerge/structuredmerge-ruby/compare/v7.1.35...v7.1.36

data/README.md

@@ -923,7 +923,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-12.195-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-12.196-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/structuredmerge/structuredmerge-ruby/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/jem/templates/.github/workflows/auto-assign.yml.example

@@ -12,7 +12,7 @@ jobs:
       pull-requests: write
     steps:
     - name: 'Auto-assign issue'
-      uses: pozil/auto-assign-issue@af6beea6bdf1e8eb373f061c5bc168681fc6d011 # v4.0.1
+      uses: pozil/auto-assign-issue@bec9ebf443592887b8f9bed643afafdfd3f62f1d # v4.0.2
       with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           assignees: "{KJ|GH:USER}"

data/lib/kettle/jem/templates/gem.gemspec.example

@@ -118,7 +118,7 @@ Gem::Specification.new do |spec|
   #       and preferably a modular one (see gemfiles/modular/*.gemfile).
 
   # Dev, Test, & Release Tasks
-  spec.add_development_dependency("kettle-dev", "~> 3.1", ">= 3.1.20")             # ruby >= {KJ|MIN_TEST_RUBY}
+  spec.add_development_dependency("kettle-dev", "~> 3.1", ">= 3.1.21")             # ruby >= {KJ|MIN_TEST_RUBY}
 
   # Security
   spec.add_development_dependency("bundler-audit", "~> 0.9.3")                      # ruby >= 2.0.0

data/lib/kettle/jem/templates/gemfiles/modular/style.gemfile.example

@@ -14,12 +14,7 @@ gem "reek", "~> 6.6", ">= 6.6.0"
 platform :mri do
   gem "appraisal2-rubocop", "~> 1.0", ">= 1.0.5", require: false
   gem "rubocop-gradual", "~> 0.4", ">= 0.4.0"
-  # rubocop-minitest floor held at 0.40: 0.41.0 requires rubocop >= 1.89.0,
-  # but standard (~> 1.56) caps rubocop at ~> 1.88.0, making the pair
-  # unsatisfiable. This gem is registered in KettleJemDepsFloor::FLOOR_HOLDS,
-  # so kettle-jem-deps-floor will not auto-raise it. Remove the hold (and
-  # raise the floor) once standard supports rubocop >= 1.89.
-  gem "rubocop-minitest", "~> 0.40", ">= 0.40.0"
+  gem "rubocop-minitest", "~> 0.41", ">= 0.41.0"
   if Gem::Version.new(RUBY_VERSION) >= Gem::Version.new("3.3.0")
     gem "rubocop-on-rbs", "~> 2.2", ">= 2.2.0"      # ruby >= 3.3.0
   end

data/lib/kettle/jem/templates/shim/gem.gemspec.example

@@ -30,7 +30,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency "{KJ|SHIMMED_GEM_NAME}"
 
   # Dev, Test, & Release Tasks
-  spec.add_development_dependency("kettle-dev", "~> 3.1", ">= 3.1.20")             # ruby >= {KJ|MIN_TEST_RUBY}
+  spec.add_development_dependency("kettle-dev", "~> 3.1", ">= 3.1.21")             # ruby >= {KJ|MIN_TEST_RUBY}
 
   # Tasks
   spec.add_development_dependency "rake", "~> 13.0"

data/lib/kettle/jem/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "7.1.37"
+      VERSION = "7.1.39"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

data/lib/kettle/jem.rb

@@ -63,7 +63,7 @@ module Kettle
     TEMPLATE_MANAGED_DEPENDENCIES = [
       {name: PACKAGE_NAME, requirements: ["~> 7.1", ">= 7.1.28"], bootstrap: false},
       {name: "nomono", requirements: ["~> 1.1", ">= 1.1.14"], bootstrap: true},
-      {name: "kettle-dev", requirements: ["~> 3.1", ">= 3.1.20"], bootstrap: true},
+      {name: "kettle-dev", requirements: ["~> 3.1", ">= 3.1.21"], bootstrap: true},
       {
         name: "kettle-changelog",
         requirements: ["~> 1.0", ">= 1.0.13"],
@@ -5120,9 +5120,9 @@ module Kettle
       [
         {name: "appraisal2", source: %(gem "appraisal2", "~> 3.2", ">= 3.2.6"\n)},
         {name: "bundler-audit", source: %(gem "bundler-audit", "~> 0.9.3"\n)},
-        {name: "kettle-dev", source: %(gem "kettle-dev", "~> 3.1", ">= 3.1.20"\n)},
+        {name: "kettle-dev", source: %(gem "kettle-dev", "~> 3.1", ">= 3.1.21"\n)},
         {name: "kettle-drift", source: %(gem "kettle-drift", "~> 1.0", ">= 1.0.17"\n)},
-        {name: "kettle-family", source: %(gem "kettle-family", "~> 1.3", ">= 1.3.28"\n)},
+        {name: "kettle-family", source: %(gem "kettle-family", "~> 1.3", ">= 1.3.29"\n)},
         {name: PACKAGE_NAME, source: kettle_jem_dependency_source},
         {name: "kettle-test", source: %(gem "kettle-test", "~> 2.0", ">= 2.0.27"\n)},
         {name: "rake", source: %(gem "rake", "~> 13.0"\n)},
@@ -15953,7 +15953,7 @@ module Kettle
     def main_gemfile_kettle_family_gem(package_name)
       return "" if package_name.to_s == "kettle-family"
 
-      %(gem "kettle-family", "~> 1.3", ">= 1.3.28"\n)
+      %(gem "kettle-family", "~> 1.3", ">= 1.3.29"\n)
     end
 
     def main_gemfile_nomono_bootstrap(package_name)
@@ -18956,6 +18956,12 @@ module Kettle
           set_template_file_strategy!(result, target, "accept_template")
         end
       end
+      # .licenserc.yaml is fully generated from the license_eye config tokens;
+      # nothing in it is destination-owned. Merge semantics would preserve
+      # stale entries forever (e.g. a version-pinned dependency override that
+      # silently stops matching after the gem bumps), so force wholesale
+      # regeneration — the same policy as the fully-generated sig/**/*.rbs files.
+      set_template_file_strategy!(result, ".licenserc.yaml", "accept_template")
       result
     end
 
@@ -20895,7 +20901,7 @@ module Kettle
         "actions/checkout" => "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1",
         "actions/cache" => "actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0",
         "appraisal-rb/setup-ruby-flash" => "appraisal-rb/setup-ruby-flash@6f8ad36ba7488db591541483afb5464d01e8861b # v2.14",
-        "ruby/setup-ruby" => "ruby/setup-ruby@824c0e29fdfc7d689c191c27acc969d2d04b7dd8 # v1.331.0",
+        "ruby/setup-ruby" => "ruby/setup-ruby@b1da4809b005e0178fe08a1d57317bffc00b7b4c # v1.332.0",
         "coverallsapp/github-action" => "coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2.3.8",
         "qltysh/qlty-action/coverage" => "qltysh/qlty-action/coverage@c9b09987143d1e4ac955f4803c7bea742102feb5 # v2.4.0",
         "codecov/codecov-action" => "codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1",
@@ -20904,10 +20910,10 @@ module Kettle
         "actions/upload-artifact" => "actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2",
         "amancevice/setup-code-climate" => "amancevice/setup-code-climate@0daf2985a225e8ac15975b4d233010e94d65b76a # v2",
         "actions/dependency-review-action" => "actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0",
-        "github/codeql-action/init" => "github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0",
-        "github/codeql-action/autobuild" => "github/codeql-action/autobuild@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0",
-        "github/codeql-action/analyze" => "github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0",
-        "pozil/auto-assign-issue" => "pozil/auto-assign-issue@af6beea6bdf1e8eb373f061c5bc168681fc6d011 # v4.0.1",
+        "github/codeql-action/init" => "github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1",
+        "github/codeql-action/autobuild" => "github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1",
+        "github/codeql-action/analyze" => "github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1",
+        "pozil/auto-assign-issue" => "pozil/auto-assign-issue@bec9ebf443592887b8f9bed643afafdfd3f62f1d # v4.0.2",
         "apache/skywalking-eyes/dependency" => "apache/skywalking-eyes/dependency@a196742f472feaffafea537ce5a2a4c3c53a8de4 # v0.9.0",
         "sarisia/actions-status-discord" => "sarisia/actions-status-discord@eb045afee445dc055c18d3d90bd0f244fd062708 # v1.16.0"
       }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-jem
 version: !ruby/object:Gem::Version
-  version: 7.1.37
+  version: 7.1.39
 platform: ruby
 authors:
 - Peter H. Boling
@@ -246,7 +246,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.19
+        version: 3.1.21
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -256,7 +256,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.19
+        version: 3.1.21
 - !ruby/object:Gem::Dependency
   name: kettle-gha-pins
   requirement: !ruby/object:Gem::Requirement
@@ -656,7 +656,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.5
+        version: 3.2.6
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -666,7 +666,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.5
+        version: 3.2.6
 - !ruby/object:Gem::Dependency
   name: kettle-test
   requirement: !ruby/object:Gem::Requirement
@@ -997,10 +997,10 @@ licenses:
 - PolyForm-Small-Business-1.0.0
 metadata:
   homepage_uri: https://structuredmerge.org
-  source_code_uri: https://github.com/structuredmerge/structuredmerge-ruby/tree/v7.1.37
-  changelog_uri: https://github.com/structuredmerge/structuredmerge-ruby/blob/v7.1.37/CHANGELOG.md
+  source_code_uri: https://github.com/structuredmerge/structuredmerge-ruby/tree/v7.1.39
+  changelog_uri: https://github.com/structuredmerge/structuredmerge-ruby/blob/v7.1.39/CHANGELOG.md
   bug_tracker_uri: https://github.com/structuredmerge/structuredmerge-ruby/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-jem/7.1.37
+  documentation_uri: https://www.rubydoc.info/gems/kettle-jem/7.1.39
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/structuredmerge/structuredmerge-ruby/wiki
   news_uri: https://www.railsbling.com/tags/kettle-jem