nomono 1.1.13 → 1.1.14

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d6f081b325c3f5371c55430a00342580f873d5ac972ee0508626356fad523de4
-  data.tar.gz: 1013f075d50a9d3081a02544de87dacf8a9d1a5383abaa8fe4152a46be3328a2
+  metadata.gz: 956fe623c6057ffee74506aabbcff6c94b83837851f55acaf981b4e06002f16c
+  data.tar.gz: c55c85a8eb460d3b67903d34537012239f03e62944269baeab1d607cac0e1f0e
 SHA512:
-  metadata.gz: 31994af600183f083b7ff5caf3b1a4c6c66da27cd92fe32999f4c06e846b4f6ee9545b8bdc741389a4ecf926bbd689ebb8be4d9b4ad624c90e91d93438e6725a
-  data.tar.gz: 841237e109b8810d79dbe94012d5c79e9415c392731fa6952dd735598d094edcc22cd2b56f3c9e03b30ad043e00b8dcff3e3abfda1c2c93efcb7a073e24d102f
+  metadata.gz: 2f036fbf9f81a038f2f6e5924fdb298439a7d76fa75560a0295746e70aaaa5e1ba756e09eac8a26e10bc17c9393bfde99ca3c5e4659e8806bf9143585a113293
+  data.tar.gz: 9757d15bd02cc3747ba2ff6c434439606537eadfe5c0b4404e6f8c4e0ac654c7197047792a12faebab1116e2c30a9f4ca32cdeea9019dd187c1273ec706d5d87

data/CHANGELOG.md

@@ -28,6 +28,23 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Fixed
 
+### Security
+
+## [1.1.14] - 2026-10-19
+
+- TAG: [v1.1.14][1.1.14t]
+- COVERAGE: 97.44% -- 190/195 lines in 7 files
+- BRANCH COVERAGE: 84.42% -- 65/77 branches in 7 files
+- 27.78% documented
+
+### Fixed
+
+- [kc] plugin-scan-bundler41: Detect Bundler 4.1 plugin scans by DSL ancestry and tolerate any plugins-only DSL that drops gem declarations silently, instead of relying solely on gem being undef'd; evaluation no longer crashes when the scan defines gem as a no-op.
+
+## [1.1.13] - 2026-10-19
+
+### Fixed
+
 - [kc] bundler-plugin-scan: Skip eval_nomono_gems when Bundler evaluates the Gemfile through its plugin scan, whose DSL undefines gem and gemspec declarations; reading back the last dependency from that empty list crashed bundle update with NoMethodError.
 
 ### Security
@@ -428,7 +445,9 @@ Please file a bug if you notice a violation of semantic versioning.
 - TAG: [v1.0.0][1.0.0t]
 - 12.50% documented
 
-[Unreleased]: https://github.com/kettle-dev/nomono/compare/v1.1.12...HEAD
+[Unreleased]: https://github.com/kettle-dev/nomono/compare/v1.1.14...HEAD
+[1.1.14]: https://github.com/kettle-dev/nomono/compare/v1.1.13...v1.1.14
+[1.1.14t]: https://github.com/kettle-dev/nomono/releases/tag/v1.1.14
 [1.1.12]: https://github.com/kettle-dev/nomono/compare/v1.1.11...v1.1.12
 [1.1.12t]: https://github.com/kettle-dev/nomono/releases/tag/v1.1.12
 [1.1.11]: https://github.com/kettle-dev/nomono/compare/v1.1.8...v1.1.11

data/README.md

@@ -533,7 +533,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-0.190-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-0.195-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/nomono/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/nomono/dsl.rb

@@ -39,10 +39,11 @@ module Nomono
     # dependency keeps its constraints and metadata; explicit facts only narrow
     # them. A new dependency with no facts retains Bundler's default >= 0.
     def eval_nomono_gems(gems:, requirements: {}, **opts)
-      # Bundler's plugin scan evaluates the whole Gemfile with a DSL whose
-      # gem and gemspec declarations are undef'd silent no-ops; nothing is
-      # collected, so there is no dependency graph to override here.
-      return if respond_to?(:dependencies) && !respond_to?(:gem)
+      # Bundler's plugin scan evaluates the whole Gemfile with a plugins-only
+      # DSL: some Bundlers undef gem and gemspec, newer ones define gem as an
+      # explicit no-op. Either way no dependency is collected, so there is no
+      # declaration graph to override here.
+      return if respond_to?(:dependencies) && nomono_plugin_scan_dsl?
 
       nomono_gems(gems: gems, **opts).each do |gem_name, gem_path|
         # Keep lightweight non-Bundler consumers of the macro working too.
@@ -60,6 +61,9 @@ module Nomono
         else
           gem(gem_name, *Array(requirements[gem_name]), path: gem_path)
           replacement = dependencies.last
+          # A plugins-only DSL silently drops the declaration; nothing was
+          # collected, so there is no override to register.
+          next unless replacement && replacement.name == gem_name
         end
         @nomono_overrides ||= {}
         previous = @nomono_overrides[gem_name]
@@ -74,6 +78,16 @@ module Nomono
 
     private
 
+    # Both known plugins-only DSL shapes collect no gem declarations: older
+    # Bundlers undef gem, and Bundler 4.1+ defines it as an explicit no-op.
+    # The ancestor check is primary; the respond_to fallback covers any
+    # plugin DSL that undef's gem instead.
+    def nomono_plugin_scan_dsl?
+      return true if defined?(Bundler::Plugin::DSL) && is_a?(Bundler::Plugin::DSL)
+
+      !respond_to?(:gem)
+    end
+
     # Bundler may already have preferred a direct Gemfile declaration and
     # discarded the intersected gemspec development constraint from its list.
     def nomono_gemspec_requirements(name)

data/lib/nomono/version.rb

@@ -4,7 +4,7 @@ module Nomono
   # Version namespace for this gem.
   module Version
     # Current gem version.
-    VERSION = "1.1.13"
+    VERSION = "1.1.14"
   end
   # Current gem version exposed at the traditional constant location.
   VERSION = Version::VERSION # Traditional Constant Location

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: nomono
 version: !ruby/object:Gem::Version
-  version: 1.1.13
+  version: 1.1.14
 platform: ruby
 authors:
 - Peter H. Boling
@@ -283,10 +283,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://nomono.galtzo.com/
-  source_code_uri: https://github.com/kettle-dev/nomono/tree/v1.1.13
-  changelog_uri: https://github.com/kettle-dev/nomono/blob/v1.1.13/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/nomono/tree/v1.1.14
+  changelog_uri: https://github.com/kettle-dev/nomono/blob/v1.1.14/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/nomono/issues
-  documentation_uri: https://www.rubydoc.info/gems/nomono/1.1.13
+  documentation_uri: https://www.rubydoc.info/gems/nomono/1.1.14
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/nomono/wiki
   news_uri: https://www.railsbling.com/tags/nomono