makiri 0.1.0-aarch64-linux → 0.2.0-aarch64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fcf60c292fa86d65fe6a558f855e599670aef06bf69869031803553e10db294a
-  data.tar.gz: 9b3b557356d79818c13cd1e2cdda551951286f3065fa5b86a5f049f87930d3f8
+  metadata.gz: 98834843b01646be14385e918a5bee9f7c7d86caa4807142b4f4b341bdb9ce1f
+  data.tar.gz: a249f288b3de1c130ed255ae0c4449267489f3eae7d08a74eff92c0d75c9116b
 SHA512:
-  metadata.gz: a8fd30feac452aeed9f9e3f11809375cffc1a30c2e812f4816705443bb0cdb54aa4dbca4f07458aa9fee88282d2483d6fd0c44a568c0971f23ba68219b2b56c6
-  data.tar.gz: b2b4f0183f18d04e503627ab38a7a13fd0a8ff5dc175cfee1ccb68b2eaa80999d6d0c5a664c992cf1d1fd0d2fa3fd57c74b9a03662b09e037e85cb196c1083b4
+  metadata.gz: a87555ee4721bf1d09cf29598961d7098b82147d1ac1cf9a22db13f34de8ddc7646c233a1ace508aad7840dab289b46ffb60379aed21ef953a15e89e06db15cf
+  data.tar.gz: a331f795706d65d12ceb08c3bb9d121c60b3e737ee91f6f7a14789dfa3c364409f85d0ef31a0d60a47f7e1686b4107baebefd15328509677d08605b102b0f0bb

data/.github/workflows/release.yml

@@ -18,7 +18,7 @@ on:
   workflow_dispatch:
     inputs:
       publish_to_rubygems:
-        description: "Push the built gems to RubyGems (requires the RUBYGEMS_API_KEY secret)"
+        description: "Push the built gems to RubyGems (via Trusted Publishing / OIDC)"
         type: boolean
         default: false
 
@@ -197,12 +197,19 @@ jobs:
           gh release upload "${GITHUB_REF_NAME}" dist/*.gem --repo "${GITHUB_REPOSITORY}" --clobber
 
   # --- optional: publish to RubyGems (manual, opt-in, never on a tag push) ----
+  # Auth is RubyGems Trusted Publishing (OIDC): no stored API key, short-lived
+  # token, MFA-compatible. Configure a matching Trusted Publisher on RubyGems.org
+  # for this gem: owner=takahashim, repo=makiri, workflow=release.yml, and set its
+  # Environment to "rubygems" (matching `environment:` below).
   publish:
     name: Publish to RubyGems
     needs: [source-gem, native-gem]
     if: github.event_name == 'workflow_dispatch' && inputs.publish_to_rubygems
     runs-on: ubuntu-latest
-    environment: rubygems   # add a protection rule here for a manual approval gate
+    environment: rubygems   # add a Required-reviewers protection rule for an approval gate
+    permissions:
+      contents: read
+      id-token: write       # OIDC identity token for Trusted Publishing
     steps:
       - uses: ruby/setup-ruby@v1
         with:
@@ -212,11 +219,10 @@ jobs:
           pattern: gem-*
           merge-multiple: true
           path: dist
+      - name: Configure RubyGems credentials (OIDC trusted publishing)
+        uses: rubygems/configure-rubygems-credentials@762a4b77c3300434bb57c7ce80b20e36231927aa # v2.0.0
       - name: gem push
-        env:
-          GEM_HOST_API_KEY: ${{ secrets.RUBYGEMS_API_KEY }}
         run: |
-          test -n "$GEM_HOST_API_KEY" || { echo "RUBYGEMS_API_KEY secret is not set"; exit 1; }
           for g in dist/*.gem; do
             echo "Pushing $g"
             gem push "$g"

data/CHANGELOG.md

@@ -7,6 +7,69 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.2.0] - 2026-06-04
+
+### Added
+
+* `Element#tag_name` (DOM `tagName`) — the qualified name uppercased for an
+  HTML element in an HTML document (`"DIV"`), keeping the original case for
+  SVG/MathML; `nil` for non-elements. Complements `#name`, which stays the
+  lowercase qualified name.
+* `ProcessingInstruction#target` (DOM `target`) — a PI's target name; `nil` for
+  other node kinds. Its data is read via `#content`/`#text`.
+* `Document#create_processing_instruction(target, data)` (DOM
+  `createProcessingInstruction`) and `Document#create_document_fragment` (DOM
+  `createDocumentFragment`, an empty fragment to build up programmatically —
+  unlike `#fragment` / `DocumentFragment.parse`, which parse HTML). Both produce
+  a detached node owned by the document; PI creation fails closed when the data
+  contains the `?>` terminator (matching the DOM constraint). (DOM
+  `createCDATASection` is intentionally not provided: per WHATWG DOM it throws on
+  an HTML document, which is the only kind Makiri produces.)
+* `Node#{namespace_uri, prefix, local_name}` — the WHATWG DOM per-node
+  namespace accessors on `Element` and `Attribute` (`nil` on other node kinds).
+  `namespace_uri` resolves an element's namespace from its node (so an HTML
+  element is the XHTML namespace `http://www.w3.org/1999/xhtml`, not `nil` — the
+  DOM-faithful value browsers and `namespace-uri()` return; SVG/MathML get their
+  own URI), and agrees byte-for-byte with the `namespace-uri()` XPath function.
+  For attributes it is `nil` unless prefixed, where it returns the parser-assigned
+  foreign-content namespace (`xlink`/`xml`/`xmlns`). `prefix` is the prefix
+  segment of the qualified name (`nil` for the usual unprefixed HTML5 case), and
+  `local_name` is the name without that prefix. Previously a node's namespace was
+  reachable only through XPath (`namespace-uri()`/`local-name()`).
+* `Node#clone_node(deep = false)` — a copy of the node, owned by the same
+  document and detached from any parent (the DOM `cloneNode`, whose `deep`
+  defaults to `false` — a missing/`nil`/`false` argument is a shallow clone; a
+  truthy one copies the subtree). Built on the same `import_node` +
+  `<template>`-content fixup the fragment parser uses, so a deep-cloned
+  `<template>` keeps its contents. Fails closed: a failed import raises rather
+  than returning a partial node.
+* `Document#import_node(node, deep = false)` — a copy of `node` owned by the
+  receiver document (the DOM `importNode`, whose `deep` likewise defaults to
+  `false`). Unlike `Node#clone_node`, the copy is owned by the target rather
+  than the node's own document, so it is the way to bring a node across
+  documents (Makiri never moves a node between arenas); the source is left
+  untouched. Same import + `<template>`-content fixup as `clone_node`, and fails
+  closed on a failed import.
+* `Node#pointer_id` — the underlying `lxb_dom_node_t` pointer as an Integer,
+  matching `Nokogiri::XML::Node#pointer_id`. Shares the value `#hash`/`#eql?`
+  are built on, so it is a stable, Nokogiri-compatible identity key for
+  consumers (e.g. wrapper caches) that key nodes by pointer. Stable for a
+  node's lifetime; an address may be reused after a node is freed (same caveat
+  as Nokogiri).
+
+### Changed
+
+* Source gem: drop the Lexbor trees the build never compiles
+  (`test`/`utils`/`examples`/`benchmarks`/`wasm`/`packaging`; each is behind an
+  `IF(LEXBOR_BUILD_*)` guard and we build with them OFF), roughly halving the
+  packaged file count (~1115 → ~566). Precompiled gems are unaffected.
+
+### Internal
+
+* XPath: build the per-context compiled-AST cache key with `mkr_strndup`
+  (the expression is a `verified_text`, so its length is known) instead of
+  `mkr_strdup`, avoiding a `strlen` over already-length-bounded bytes.
+
 ## [0.1.0] - 2026-06-02
 
 First public release. An HTML5 parser, a native XPath 1.0 query engine, and CSS
@@ -98,5 +161,6 @@ libxml2 / libxslt dependency at any layer**.
   domxpath, CSS differential vs `Nokogiri::HTML5`). GitHub Actions CI across
   Ruby 3.2–4.0 × Ubuntu/macOS plus a sanitizer job.
 
-[Unreleased]: https://github.com/takahashim/makiri/compare/v0.1.0...HEAD
+[Unreleased]: https://github.com/takahashim/makiri/compare/v0.2.0...HEAD
+[0.2.0]: https://github.com/takahashim/makiri/compare/v0.1.0...v0.2.0
 [0.1.0]: https://github.com/takahashim/makiri/releases/tag/v0.1.0

data/lib/makiri/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Makiri
-  VERSION = "0.1.0"
+  VERSION = "0.2.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: makiri
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: aarch64-linux
 authors:
 - takahashim