ndr_dev_support 7.3.7 → 7.3.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8fd8bba1f3c88cc84df99dd1fe9b1f3a8877d49ede2736d4a1b8b362c6217663
-  data.tar.gz: b0476e365b2ed4cda0d6cace8107c9a569e91af2b67b6bace8284bc3393e320f
+  metadata.gz: bceb17903631013fce3438cf82287cab07bf06575f109345676e45e5e4df28b3
+  data.tar.gz: 0e6f918d2614fbb08f8540b3329314d31dc81533994a68bb9429ab747e7e8717
 SHA512:
-  metadata.gz: 5a6457d87e9cc922d07c94944b88c5a032cdd9401d2de59960fa8611f6736d1f86fc4943fd707b38de01a6c1a9e4ae6d4692b4e01ebf918b72bf26bdbe30d1ea
-  data.tar.gz: 0d47c0e6fa632d39610dbd3acde0f6b71b617e2a436439d28d40d8d95bfaa6ab344fd254d5fb40ae0c227b9c4fa1cccd4d6c8c34e201bc1741b1139c0714b34f
+  metadata.gz: f4940867633068addac74dc3e357f4c9eafd361489c52616c044b79a8d3d7a29e01afd1a4b658f6a158cbb9e22a938823ac2dbc191637d8de0bec64a46ae2156
+  data.tar.gz: ed344310df1814ff4304a13514c733a09543e4053d944bc56af4f6533654d6e0a7f7403076951d23916292f01a4f387d3c521bf1371ea874eefb422f959c9340

data/CHANGELOG.md

@@ -1,5 +1,10 @@
 ## [Unreleased]
-*no unreleased changes*
+* no unreleased changes
+
+## 7.3.8 / 2026-09-16
+### Fixed
+* Do not include macOS extended attributes in rbenv tar files
+* Capistrano: validate YAML files when deploying application secrets
 
 ## 7.3.7 / 2026-06-29
 ### Fixed

data/lib/ndr_dev_support/capistrano/deploy_secrets.rb

@@ -1,4 +1,5 @@
 require 'tmpdir'
+require 'yaml'
 
 # Add a git or svn secrets respository for ndr_dev_support:deploy_secrets
 def add_secrets_repo(name:, url:, scm:, branch: nil)
@@ -114,6 +115,18 @@ Capistrano::Configuration.instance(:must_exist).load do
 
           raise 'Error: cannot export secrets files: aborting' unless ok
 
+          # Ensure YAML files have valid syntax
+          if secret[:shared_dest] =~ /[.]ya?ml\z/
+            begin
+              YAML.load_file(File.join(secret_dir, secret[:shared_dest]))
+            rescue StandardError, Psych::SyntaxError => e # rubocop:disable Lint/ShadowedException
+              Capistrano::CLI.ui.say <<~MSG
+                YAML Error loading file #{repo_root}/#{secret[:repo_path]}: #{e.class}: #{e}
+                #{e.backtrace.join("\n")}
+              MSG
+              raise "Error: invalid YAML syntax in file #{repo_root}/#{secret[:repo_path]}"
+            end
+          end
           secret[:digest] = Digest::SHA256.file(dest_fname).hexdigest
         end
 

data/lib/ndr_dev_support/capistrano/install_ruby.rb

@@ -12,7 +12,7 @@ Capistrano::Configuration.instance(:must_exist).load do
       $ git clone https://github.com/rbenv/ruby-build.git clone_rbenv/.rbenv/plugins/ruby-build
       $ mkdir clone_rbenv/.rbenv/cache
       $ (cd clone_rbenv/.rbenv/cache; curl -O https://cache.ruby-lang.org/pub/ruby/3.1/ruby-3.1.6.tar.gz)
-      $ (cd clone_rbenv; rm -f ../rbenv.tar.gz; tar czf ../rbenv.tar.gz .rbenv)
+      $ (cd clone_rbenv; rm -f ../rbenv.tar.gz; COPYFILE_DISABLE=1 tar czf ../rbenv.tar.gz .rbenv)
       $ rm -rf clone_rbenv
       $ scp -p rbenv.tar.gz app-server:/opt/rbenv.tar.gz
 
@@ -21,12 +21,12 @@ Capistrano::Configuration.instance(:must_exist).load do
       $ mkdir clone_rbenv
       $ git clone https://github.com/rbenv/rbenv.git clone_rbenv/.rbenv
       $ mkdir -p vendor/rbenv; rm -f vendor/rbenv/rbenv.tar.gz
-      $ tar czf vendor/rbenv/rbenv.tar.gz -C clone_rbenv .rbenv
+      $ COPYFILE_DISABLE=1 tar czf vendor/rbenv/rbenv.tar.gz -C clone_rbenv .rbenv
       $ rm -rf clone_rbenv
       $ mkdir clone_ruby-build
       $ git clone https://github.com/rbenv/ruby-build.git clone_ruby-build/ruby-build
       $ mkdir -p vendor/rbenv/cache; rm -f vendor/rbenv/ruby-build.tar.gz
-      $ tar czf vendor/rbenv/ruby-build.tar.gz -C clone_ruby-build ruby-build
+      $ COPYFILE_DISABLE=1 tar czf vendor/rbenv/ruby-build.tar.gz -C clone_ruby-build ruby-build
       $ rm -rf clone_ruby-build
       $ (cd vendor/rbenv/cache; curl -O https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.6.tar.gz)
       $ git add vendor/rbenv/{rbenv,ruby-build}.tar.gz vendor/rbenv/cache/*

data/lib/ndr_dev_support/version.rb

@@ -2,5 +2,5 @@
 # This defines the NdrDevSupport version. If you change it, rebuild and commit the gem.
 # Use "rake build" to build the gem, see rake -T for all bundler rake tasks (and our own).
 module NdrDevSupport
-  VERSION = '7.3.7'
+  VERSION = '7.3.8'
 end

data/ndr_dev_support.gemspec

@@ -20,7 +20,7 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.required_ruby_version = '>= 3.2'
+  spec.required_ruby_version = '>= 3.3'
 
   spec.add_dependency 'pry'
 
@@ -44,7 +44,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency 'show_me_the_cookies'
 
   # CI server dependencies:
-  spec.add_dependency 'activesupport', '>= 7.0', '< 8.2'
+  spec.add_dependency 'activesupport', '>= 7.1', '< 8.2'
   spec.add_dependency 'brakeman', '>= 4.7.1'
   spec.add_dependency 'bundler-audit'
   spec.add_dependency 'github-linguist'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ndr_dev_support
 version: !ruby/object:Gem::Version
-  version: 7.3.7
+  version: 7.3.8
 platform: ruby
 authors:
 - NCRS Development Team
@@ -217,7 +217,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '7.0'
+        version: '7.1'
     - - "<"
       - !ruby/object:Gem::Version
         version: '8.2'
@@ -227,7 +227,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '7.0'
+        version: '7.1'
     - - "<"
       - !ruby/object:Gem::Version
         version: '8.2'
@@ -487,7 +487,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '3.2'
+      version: '3.3'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="