kettle-jem 7.1.38 → 7.1.40

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 06b59163766aa288749c2703d202e0cd7ac981fe317e47ace013da21867a38e2
-  data.tar.gz: e116a15d61f5a0750607536368eb33d1f4137b4c914531ad7afb1c0472b186e4
+  metadata.gz: ef4e81b2bd4a0235b27a41b2520e88a0fb7b1fd4d92fee4005545c7b915d06b8
+  data.tar.gz: c1db3972be5424beafdd5e15496164d0789c3f1047874b4ff503cf652ce11941
 SHA512:
-  metadata.gz: 7a983493832010208927020c9455f9168f5a842f6612d5466e0774515d9d8d0215baad2f9b3f7f491d24ad65dcb847f9709ddc37dabab0e0080fe5f058755851
-  data.tar.gz: 42c2d0fd3a395a329db512bbe507ae0608139f6196d0ff551a0773aa6b283f0939263d1688c837e4202e244dad4d10b7a4b2eb9369637837d5f2b9f4c4d410af
+  metadata.gz: b68730addd9d16566322a3d9ea10a005f13ab63111cf361dec082e411507b03cf8a25ae3b2795cf556b29841cd03dcc167ffd8e9c306ef369507f62a69dfc5c6
+  data.tar.gz: c4c54c290d6e6d4a352f82e63708536373c9b245de6b8dd696effcd26460a1b22eb78857eb2398851674499573b76d44bca59259f66f046c342c27a747afff36

data/CHANGELOG.md

@@ -30,6 +30,58 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [7.1.40] - 2026-10-23
+
+- TAG: [v7.1.40][7.1.40t]
+- COVERAGE: 93.45% -- 11397/12196 lines in 17 files
+- BRANCH COVERAGE: 77.11% -- 4911/6369 branches in 17 files
+- 19.89% documented
+
+### Changed
+
+- [kc] kettle-jem-deps-floor: Update kettle-jem template dependency floors:
+  - kettle-dev (>= 3.1.21 -> >= 3.1.22)
+  - rubocop-lts-rspec (>= 1.0.7 -> >= 1.0.8)
+
+- [kc] kettle-jem-workflow-pins: Update pinned GitHub Actions in kettle-jem templates:
+  - pozil/auto-assign-issue v4.0.2 (bec9ebf443592887b8f9bed643afafdfd3f62f1d) -> v4.1.0 (d6e511896e5f1d2408e74db74416647d8ff80c8c)
+  - ruby/setup-ruby v1.332.0 (b1da4809b005e0178fe08a1d57317bffc00b7b4c) -> v1.333.0 (e1bd6146574da5e0795075b5319b300edb30c5b0)
+
+## [7.1.39] - 2026-10-21
+
+- TAG: [v7.1.39][7.1.39t]
+- COVERAGE: 93.45% -- 11397/12196 lines in 17 files
+- BRANCH COVERAGE: 77.09% -- 4910/6369 branches in 17 files
+- 19.89% documented
+
+### Changed
+
+- [kc] kettle-jem-deps-floor: Update kettle-jem template dependency floors:
+  - kettle-dev (>= 3.1.20 -> >= 3.1.21)
+  - rubocop-minitest (>= 0.40.0 -> >= 0.41.0)
+
+- [kc] kettle-jem-workflow-pins: Update pinned GitHub Actions in kettle-jem templates:
+  - github/codeql-action/analyze v4.39.0 (6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee) -> v4.39.1 (9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
+  - github/codeql-action/autobuild v4.39.0 (6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee) -> v4.39.1 (9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
+  - github/codeql-action/init v4.39.0 (6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee) -> v4.39.1 (9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
+  - pozil/auto-assign-issue v4.0.1 (af6beea6bdf1e8eb373f061c5bc168681fc6d011) -> v4.0.2 (bec9ebf443592887b8f9bed643afafdfd3f62f1d)
+  - ruby/setup-ruby v1.331.0 (824c0e29fdfc7d689c191c27acc969d2d04b7dd8) -> v1.332.0 (b1da4809b005e0178fe08a1d57317bffc00b7b4c)
+
+- kettle-jem-deps-floor: removed the rubocop-minitest FLOOR_HOLDS entry. standard 1.57 requires rubocop ~> 1.91, so rubocop-minitest 0.41.0 (rubocop >= 1.89) is resolvable again and the floor is no longer held.
+
+- [kc] kettle-jem/prepare: updated 7 project files:
+  - dependencies (7)
+
+- [kc] kettle-jem/template: updated 6 project files:
+  - code and tests (1)
+  - dependencies (2)
+  - other (1)
+  - workflows (2)
+
+### Fixed
+
+- kettle-jem: force `accept_template` strategy for `.licenserc.yaml` — it is fully generated from `license_eye` config tokens, and merge semantics kept stale version-pinned dependency overrides forever, breaking destination license-eye workflows after gem bumps
+
 ## [7.1.38] - 2026-10-21
 
 - TAG: [v7.1.38][7.1.38t]
@@ -2415,7 +2467,11 @@ Please file a bug if you notice a violation of semantic versioning.
 - Released kettle-jem as part of the initial StructuredMerge Ruby 7.0.0 gem set.
 - Included packaged templates and parser-backed merge support for Ruby gem templating.
 
-[Unreleased]: https://github.com/structuredmerge/structuredmerge-ruby/compare/v7.1.38...HEAD
+[Unreleased]: https://github.com/structuredmerge/structuredmerge-ruby/compare/v7.1.40...HEAD
+[7.1.40]: https://github.com/structuredmerge/structuredmerge-ruby/compare/v7.1.39...v7.1.40
+[7.1.40t]: https://github.com/structuredmerge/structuredmerge-ruby/releases/tag/v7.1.40
+[7.1.39]: https://github.com/structuredmerge/structuredmerge-ruby/compare/v7.1.38...v7.1.39
+[7.1.39t]: https://github.com/structuredmerge/structuredmerge-ruby/releases/tag/v7.1.39
 [7.1.38]: https://github.com/structuredmerge/structuredmerge-ruby/compare/v7.1.37...v7.1.38
 [7.1.38t]: https://github.com/structuredmerge/structuredmerge-ruby/releases/tag/v7.1.38
 [7.1.37]: https://github.com/structuredmerge/structuredmerge-ruby/compare/v7.1.36...v7.1.37

data/README.md

@@ -923,7 +923,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-12.195-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-12.196-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/structuredmerge/structuredmerge-ruby/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/jem/templates/.github/workflows/auto-assign.yml.example

@@ -12,7 +12,7 @@ jobs:
       pull-requests: write
     steps:
     - name: 'Auto-assign issue'
-      uses: pozil/auto-assign-issue@af6beea6bdf1e8eb373f061c5bc168681fc6d011 # v4.0.1
+      uses: pozil/auto-assign-issue@d6e511896e5f1d2408e74db74416647d8ff80c8c # v4.1.0
       with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           assignees: "{KJ|GH:USER}"

data/lib/kettle/jem/templates/gem.gemspec.example

@@ -118,7 +118,7 @@ Gem::Specification.new do |spec|
   #       and preferably a modular one (see gemfiles/modular/*.gemfile).
 
   # Dev, Test, & Release Tasks
-  spec.add_development_dependency("kettle-dev", "~> 3.1", ">= 3.1.20")             # ruby >= {KJ|MIN_TEST_RUBY}
+  spec.add_development_dependency("kettle-dev", "~> 3.1", ">= 3.1.22")             # ruby >= {KJ|MIN_TEST_RUBY}
 
   # Security
   spec.add_development_dependency("bundler-audit", "~> 0.9.3")                      # ruby >= 2.0.0

data/lib/kettle/jem/templates/gemfiles/modular/style.gemfile.example

@@ -14,12 +14,7 @@ gem "reek", "~> 6.6", ">= 6.6.0"
 platform :mri do
   gem "appraisal2-rubocop", "~> 1.0", ">= 1.0.5", require: false
   gem "rubocop-gradual", "~> 0.4", ">= 0.4.0"
-  # rubocop-minitest floor held at 0.40: 0.41.0 requires rubocop >= 1.89.0,
-  # but standard (~> 1.56) caps rubocop at ~> 1.88.0, making the pair
-  # unsatisfiable. This gem is registered in KettleJemDepsFloor::FLOOR_HOLDS,
-  # so kettle-jem-deps-floor will not auto-raise it. Remove the hold (and
-  # raise the floor) once standard supports rubocop >= 1.89.
-  gem "rubocop-minitest", "~> 0.40", ">= 0.40.0"
+  gem "rubocop-minitest", "~> 0.41", ">= 0.41.0"
   if Gem::Version.new(RUBY_VERSION) >= Gem::Version.new("3.3.0")
     gem "rubocop-on-rbs", "~> 2.2", ">= 2.2.0"      # ruby >= 3.3.0
   end
@@ -32,7 +27,7 @@ platform :mri do
       ref: "3539ba858d379740d638566faee9e56b2b854145"
     declared_gems = instance_variable_get(:@dependencies).to_a.map(&:name)
     gem "rubocop-lts", {KJ|RUBOCOP_LTS_CONSTRAINT} unless declared_gems.include?("rubocop-lts")
-    gem "rubocop-lts-rspec", "~> 1.0", ">= 1.0.7" unless declared_gems.include?("rubocop-lts-rspec")
+    gem "rubocop-lts-rspec", "~> 1.0", ">= 1.0.8" unless declared_gems.include?("rubocop-lts-rspec")
     gem "{KJ|RUBOCOP_RUBY_GEM}", {KJ|RUBOCOP_RUBY_CONSTRAINT} unless declared_gems.include?("{KJ|RUBOCOP_RUBY_GEM}")
   else
     eval_gemfile("style_local.gemfile")

data/lib/kettle/jem/templates/shim/gem.gemspec.example

@@ -30,7 +30,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency "{KJ|SHIMMED_GEM_NAME}"
 
   # Dev, Test, & Release Tasks
-  spec.add_development_dependency("kettle-dev", "~> 3.1", ">= 3.1.20")             # ruby >= {KJ|MIN_TEST_RUBY}
+  spec.add_development_dependency("kettle-dev", "~> 3.1", ">= 3.1.22")             # ruby >= {KJ|MIN_TEST_RUBY}
 
   # Tasks
   spec.add_development_dependency "rake", "~> 13.0"

data/lib/kettle/jem/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "7.1.38"
+      VERSION = "7.1.40"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

data/lib/kettle/jem.rb

@@ -63,7 +63,7 @@ module Kettle
     TEMPLATE_MANAGED_DEPENDENCIES = [
       {name: PACKAGE_NAME, requirements: ["~> 7.1", ">= 7.1.28"], bootstrap: false},
       {name: "nomono", requirements: ["~> 1.1", ">= 1.1.14"], bootstrap: true},
-      {name: "kettle-dev", requirements: ["~> 3.1", ">= 3.1.20"], bootstrap: true},
+      {name: "kettle-dev", requirements: ["~> 3.1", ">= 3.1.22"], bootstrap: true},
       {
         name: "kettle-changelog",
         requirements: ["~> 1.0", ">= 1.0.13"],
@@ -5120,7 +5120,7 @@ module Kettle
       [
         {name: "appraisal2", source: %(gem "appraisal2", "~> 3.2", ">= 3.2.6"\n)},
         {name: "bundler-audit", source: %(gem "bundler-audit", "~> 0.9.3"\n)},
-        {name: "kettle-dev", source: %(gem "kettle-dev", "~> 3.1", ">= 3.1.20"\n)},
+        {name: "kettle-dev", source: %(gem "kettle-dev", "~> 3.1", ">= 3.1.22"\n)},
         {name: "kettle-drift", source: %(gem "kettle-drift", "~> 1.0", ">= 1.0.17"\n)},
         {name: "kettle-family", source: %(gem "kettle-family", "~> 1.3", ">= 1.3.29"\n)},
         {name: PACKAGE_NAME, source: kettle_jem_dependency_source},
@@ -18956,6 +18956,12 @@ module Kettle
           set_template_file_strategy!(result, target, "accept_template")
         end
       end
+      # .licenserc.yaml is fully generated from the license_eye config tokens;
+      # nothing in it is destination-owned. Merge semantics would preserve
+      # stale entries forever (e.g. a version-pinned dependency override that
+      # silently stops matching after the gem bumps), so force wholesale
+      # regeneration — the same policy as the fully-generated sig/**/*.rbs files.
+      set_template_file_strategy!(result, ".licenserc.yaml", "accept_template")
       result
     end
 
@@ -20895,7 +20901,7 @@ module Kettle
         "actions/checkout" => "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1",
         "actions/cache" => "actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0",
         "appraisal-rb/setup-ruby-flash" => "appraisal-rb/setup-ruby-flash@6f8ad36ba7488db591541483afb5464d01e8861b # v2.14",
-        "ruby/setup-ruby" => "ruby/setup-ruby@824c0e29fdfc7d689c191c27acc969d2d04b7dd8 # v1.331.0",
+        "ruby/setup-ruby" => "ruby/setup-ruby@e1bd6146574da5e0795075b5319b300edb30c5b0 # v1.333.0",
         "coverallsapp/github-action" => "coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2.3.8",
         "qltysh/qlty-action/coverage" => "qltysh/qlty-action/coverage@c9b09987143d1e4ac955f4803c7bea742102feb5 # v2.4.0",
         "codecov/codecov-action" => "codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1",
@@ -20904,10 +20910,10 @@ module Kettle
         "actions/upload-artifact" => "actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2",
         "amancevice/setup-code-climate" => "amancevice/setup-code-climate@0daf2985a225e8ac15975b4d233010e94d65b76a # v2",
         "actions/dependency-review-action" => "actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0",
-        "github/codeql-action/init" => "github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0",
-        "github/codeql-action/autobuild" => "github/codeql-action/autobuild@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0",
-        "github/codeql-action/analyze" => "github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0",
-        "pozil/auto-assign-issue" => "pozil/auto-assign-issue@af6beea6bdf1e8eb373f061c5bc168681fc6d011 # v4.0.1",
+        "github/codeql-action/init" => "github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1",
+        "github/codeql-action/autobuild" => "github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1",
+        "github/codeql-action/analyze" => "github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1",
+        "pozil/auto-assign-issue" => "pozil/auto-assign-issue@d6e511896e5f1d2408e74db74416647d8ff80c8c # v4.1.0",
         "apache/skywalking-eyes/dependency" => "apache/skywalking-eyes/dependency@a196742f472feaffafea537ce5a2a4c3c53a8de4 # v0.9.0",
         "sarisia/actions-status-discord" => "sarisia/actions-status-discord@eb045afee445dc055c18d3d90bd0f244fd062708 # v1.16.0"
       }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-jem
 version: !ruby/object:Gem::Version
-  version: 7.1.38
+  version: 7.1.40
 platform: ruby
 authors:
 - Peter H. Boling
@@ -246,7 +246,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.19
+        version: 3.1.21
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -256,7 +256,7 @@ dependencies:
         version: '3.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.19
+        version: 3.1.21
 - !ruby/object:Gem::Dependency
   name: kettle-gha-pins
   requirement: !ruby/object:Gem::Requirement
@@ -656,7 +656,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.5
+        version: 3.2.6
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -666,7 +666,7 @@ dependencies:
         version: '3.2'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.5
+        version: 3.2.6
 - !ruby/object:Gem::Dependency
   name: kettle-test
   requirement: !ruby/object:Gem::Requirement
@@ -997,10 +997,10 @@ licenses:
 - PolyForm-Small-Business-1.0.0
 metadata:
   homepage_uri: https://structuredmerge.org
-  source_code_uri: https://github.com/structuredmerge/structuredmerge-ruby/tree/v7.1.38
-  changelog_uri: https://github.com/structuredmerge/structuredmerge-ruby/blob/v7.1.38/CHANGELOG.md
+  source_code_uri: https://github.com/structuredmerge/structuredmerge-ruby/tree/v7.1.40
+  changelog_uri: https://github.com/structuredmerge/structuredmerge-ruby/blob/v7.1.40/CHANGELOG.md
   bug_tracker_uri: https://github.com/structuredmerge/structuredmerge-ruby/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-jem/7.1.38
+  documentation_uri: https://www.rubydoc.info/gems/kettle-jem/7.1.40
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/structuredmerge/structuredmerge-ruby/wiki
   news_uri: https://www.railsbling.com/tags/kettle-jem