review-retrovert 0.9.11 → 0.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 393624484f41bea59ee793d9720b43084058a7d3e3c6c3ad77adbe79b05d400f
-  data.tar.gz: 29975b33f89f570df49d12956b42606f24d6e86224d4a495935ad228fb3dceac
+  metadata.gz: 267dfed374168e87a304450363d3f2a65db553bf530c56a3484a72bf9f64911b
+  data.tar.gz: f773e8543b7dff305f22a857f3074550a793487aea4e252cc0514897b3937786
 SHA512:
-  metadata.gz: db1bd1b2451f1af8a5ea77829a0781d2ddb755ebaca266f2db5c45adb6a835e1c41fa2baca89d45f625b1c4bcc84faf7c0f093b7344524db24e19a3e21155071
-  data.tar.gz: 9d44921e109fb1b9e436c10721c4ef8fb0c0840c8757f201fc71b1fa90dc7611013f79b7c2a1eb8ea686b84b92210fe49fa870ad55ffed0c092a69713a2fc415
+  metadata.gz: 7ac9c51bb200a188acf201899dc1e9667b39df719fe5950a6c6a93f69107b6943d05dfc58699ba0482cc09c6376b17517ba47bc51003ff1e0a3f7b6300e6a674
+  data.tar.gz: 5020eb746cb8094e74036b7ba9d5a6bb77eadc52ac73e68f3ec0a0c22394eaf90b5ef3ffd0a1dd013226706bc1afedc60d364297798bca384cec74d457157cde

data/.editorconfig

@@ -4,7 +4,7 @@ root = true
 indent_style = space
 indent_size = 4
 
-[*.rb]
+[*.{rb,gemspec}]
 charset = utf-8
 trim_trailing_whitespace = true
 indent_size = 2

data/.pinact.yaml

@@ -0,0 +1,12 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/suzuki-shunsuke/pinact/refs/heads/main/json-schema/pinact.json
+# pinact - https://github.com/suzuki-shunsuke/pinact
+version: 3
+files:
+  # - pattern: action.yml
+  # - pattern: */action.yaml
+
+ignore_actions:
+  # - name: slsa-framework/slsa-github-generator/\.github/workflows/generator_generic_slsa3\.yml
+  #   ref: v\d+\.\d+\.\d+
+  - name: actions/.*
+    ref: v\d+

data/.ruby-version

@@ -1 +1 @@
-2.5.5
+3.3.4

data/Dockerfile

@@ -1,4 +1,5 @@
-FROM vvakame/review:5.0
+ARG REVIEW_VERSION=latest
+FROM vvakame/review:${REVIEW_VERSION}
 
 RUN gem install review-retrovert
 

data/Dockerfile.local

@@ -0,0 +1,13 @@
+ARG REVIEW_VERSION=latest
+FROM vvakame/review:${REVIEW_VERSION}
+
+# Copy source code and build from local workspace
+COPY . /tmp/review-retrovert/
+
+# Build and install from local source
+RUN cd /tmp/review-retrovert && \
+    gem build review-retrovert.gemspec && \
+    gem install --no-document review-retrovert-*.gem && \
+    rm -rf /tmp/review-retrovert
+
+ENTRYPOINT [ "review-retrovert" ]

data/Gemfile.lock

@@ -1,30 +1,44 @@
 PATH
   remote: .
   specs:
-    review-retrovert (0.9.11)
+    review-retrovert (0.10.0)
+      csv
+      nkf
       review (>= 3.0.0)
+      rexml
       thor
 
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (6.1.1)
-      concurrent-ruby (~> 1.0, >= 1.0.2)
+    activesupport (8.1.1)
+      base64
+      bigdecimal
+      concurrent-ruby (~> 1.0, >= 1.3.1)
+      connection_pool (>= 2.2.5)
+      drb
       i18n (>= 1.6, < 2)
+      json
+      logger (>= 1.4.2)
       minitest (>= 5.1)
-      tzinfo (~> 2.0)
-      zeitwerk (~> 2.3)
+      securerandom (>= 0.3)
+      tzinfo (~> 2.0, >= 2.0.5)
+      uri (>= 0.13.1)
     aruba (1.0.4)
       childprocess (>= 2.0, < 5.0)
       contracts (~> 0.16.0)
       cucumber (>= 2.4, < 6.0)
       rspec-expectations (~> 3.4)
       thor (~> 1.0)
-    builder (3.2.4)
-    childprocess (4.0.0)
-    concurrent-ruby (1.1.7)
-    contracts (0.16.0)
-    cucumber (5.2.0)
+    base64 (0.3.0)
+    bigdecimal (4.0.1)
+    builder (3.3.0)
+    childprocess (4.1.0)
+    concurrent-ruby (1.3.6)
+    connection_pool (3.0.2)
+    contracts (0.16.1)
+    csv (3.3.5)
+    cucumber (5.3.0)
       builder (~> 3.2, >= 3.2.4)
       cucumber-core (~> 8.0, >= 8.0.1)
       cucumber-create-meta (~> 2.0, >= 2.0.2)
@@ -55,54 +69,67 @@ GEM
       cucumber-core (~> 8.0, >= 8.0.1)
       cucumber-cucumber-expressions (~> 10.3, >= 10.3.0)
       cucumber-messages (~> 13.0, >= 13.0.1)
-    diff-lcs (1.4.4)
-    ffi (1.14.2)
-    i18n (1.8.7)
+    diff-lcs (1.6.2)
+    drb (2.2.3)
+    ffi (1.17.3)
+    i18n (1.14.8)
       concurrent-ruby (~> 1.0)
-    image_size (2.1.2)
+    image_size (3.4.0)
+    json (2.18.0)
+    logger (1.7.0)
+    memoist3 (1.0.0)
     middleware (0.1.0)
-    minitest (5.14.3)
+    minitest (6.0.1)
+      prism (~> 1.5)
     multi_test (0.1.2)
+    nkf (0.2.0)
     pastel (0.8.0)
       tty-color (~> 0.5)
+    prism (1.7.0)
     protobuf-cucumber (3.10.8)
       activesupport (>= 3.2)
       middleware
       thor
       thread_safe
     rake (12.3.3)
-    review (5.2.0)
+    review (5.10.0)
+      csv
       image_size
+      nkf
+      rexml
       rouge
       rubyzip
       tty-logger
-    rouge (3.26.0)
-    rspec (3.10.0)
-      rspec-core (~> 3.10.0)
-      rspec-expectations (~> 3.10.0)
-      rspec-mocks (~> 3.10.0)
-    rspec-core (3.10.1)
-      rspec-support (~> 3.10.0)
-    rspec-expectations (3.10.1)
+    rexml (3.4.4)
+    rouge (4.7.0)
+    rspec (3.13.2)
+      rspec-core (~> 3.13.0)
+      rspec-expectations (~> 3.13.0)
+      rspec-mocks (~> 3.13.0)
+    rspec-core (3.13.6)
+      rspec-support (~> 3.13.0)
+    rspec-expectations (3.13.5)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.10.0)
-    rspec-mocks (3.10.1)
+      rspec-support (~> 3.13.0)
+    rspec-mocks (3.13.7)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.10.0)
-    rspec-support (3.10.1)
-    ruby-debug-ide (0.7.2)
+      rspec-support (~> 3.13.0)
+    rspec-support (3.13.6)
+    ruby-debug-ide (0.7.5)
       rake (>= 0.8.1)
-    rubyzip (2.3.2)
-    sys-uname (1.2.2)
+    rubyzip (3.2.2)
+    securerandom (0.4.1)
+    sys-uname (1.4.1)
       ffi (~> 1.1)
-    thor (1.0.1)
+      memoist3 (~> 1.0.0)
+    thor (1.4.0)
     thread_safe (0.3.6)
     tty-color (0.6.0)
     tty-logger (0.6.0)
       pastel (~> 0.8)
-    tzinfo (2.0.4)
+    tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
-    zeitwerk (2.4.2)
+    uri (1.1.1)
 
 PLATFORMS
   ruby
@@ -115,4 +142,4 @@ DEPENDENCIES
   ruby-debug-ide
 
 BUNDLED WITH
-   2.1.4
+   2.5.11

data/Rakefile

@@ -4,3 +4,12 @@ require "rspec/core/rake_task"
 RSpec::Core::RakeTask.new(:spec)
 
 task :default => :spec
+
+# Override the source_control_push task to skip git push
+# This is useful when releasing from CI where the tag is already pushed
+Rake::Task["release:source_control_push"].clear
+namespace :release do
+  task :source_control_push do
+    # Do nothing - tag is already pushed by CI
+  end
+end

data/aqua.yaml

@@ -0,0 +1,20 @@
+---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/aquaproj/aqua/main/json-schema/aqua-yaml.json
+# aqua - Declarative CLI Version Manager
+# https://aquaproj.github.io/
+# checksum:
+#   enabled: true
+#   require_checksum: true
+#   supported_envs:
+#   - all
+registries:
+  - type: standard
+    ref: v4.451.1 # renovate: depName=aquaproj/aqua-registry
+packages:
+  - name: suzuki-shunsuke/pinact@v3.8.0
+    tags:
+      - dev
+  - name: crates.io/zizmor@1.19.0
+    tags:
+      - dev
+      - ci

data/hooks/post_push

@@ -1,8 +1,21 @@
 #!/bin/bash
 set -eu
 
+# Get review-retrovert version and Re:VIEW version
+VERSION=$(docker run --rm ${IMAGE_NAME} version)
+REVIEW_VERSION=$(docker run --rm ${IMAGE_NAME} review-version)
+
 if [ "${DOCKER_TAG}" = "latest" ]; then
-  VERSION=$(docker run --rm ${IMAGE_NAME} version)
+  # For latest tag, push retrovert version tag
   docker tag ${IMAGE_NAME} ${DOCKER_REPO}:${VERSION}
   docker push ${DOCKER_REPO}:${VERSION}
+  # Also push combined tag with Re:VIEW version (e.g., 0.10.0-review5.10)
+  COMBINED_TAG="${VERSION}-review${REVIEW_VERSION}"
+  docker tag ${IMAGE_NAME} ${DOCKER_REPO}:${COMBINED_TAG}
+  docker push ${DOCKER_REPO}:${COMBINED_TAG}
+else
+  # For review version tags (e.g., 5.9), push combined tag (e.g., 0.10.0-review5.9)
+  COMBINED_TAG="${VERSION}-review${DOCKER_TAG}"
+  docker tag ${IMAGE_NAME} ${DOCKER_REPO}:${COMBINED_TAG}
+  docker push ${DOCKER_REPO}:${COMBINED_TAG}
 fi

data/lib/review/retrovert/cli.rb

@@ -24,6 +24,12 @@ module ReVIEW
         puts VERSION
       end
 
+      desc "review-version", "show Re:VIEW version"
+      map "review-version" => :review_version
+      def review_version()
+        puts ReVIEW::VERSION
+      end
+
     end
   end
 end

data/lib/review/retrovert/converter.rb

@@ -1,3 +1,41 @@
+require 'yaml'
+
+# For Ruby 3.1+ compatibility with review 5.3 and earlier
+# These versions don't support safe YAML loading with permitted_classes
+module YAML
+  class << self
+    alias_method :original_load_file, :load_file
+    alias_method :original_safe_load, :safe_load
+
+    def load_file(path, *args, **kwargs)
+      if kwargs.empty? && args.empty?
+        original_load_file(path, permitted_classes: [Date, Time, Symbol], permitted_symbols: [], aliases: true)
+      else
+        original_load_file(path, *args, **kwargs)
+      end
+    end
+
+    # Handle both old positional args (review 5.3 and earlier) and new keyword args
+    # Old format: YAML.safe_load(yaml, permitted_classes, permitted_symbols, aliases, filename)
+    # New format: YAML.safe_load(yaml, permitted_classes: [], permitted_symbols: [], aliases: false)
+    def safe_load(yaml, *args, **kwargs)
+      if kwargs.empty?
+        if args.empty?
+          original_safe_load(yaml, permitted_classes: [Date, Time, Symbol], permitted_symbols: [], aliases: true)
+        else
+          # Convert old positional args to new keyword args format
+          permitted_classes = args[0].is_a?(Array) ? args[0] : [Date, Time, Symbol]
+          permitted_symbols = args[1].is_a?(Array) ? args[1] : []
+          aliases = args[2].nil? ? true : args[2]
+          original_safe_load(yaml, permitted_classes: permitted_classes + [Date, Time, Symbol], permitted_symbols: permitted_symbols, aliases: aliases)
+        end
+      else
+        original_safe_load(yaml, *args, **kwargs)
+      end
+    end
+  end
+end
+
 require 'review'
 require 'erb'
 require 'fileutils'

data/lib/review/retrovert/version.rb

@@ -1,5 +1,5 @@
 module ReVIEW
   module Retrovert
-    VERSION = "0.9.11"
+    VERSION = "0.10.0"
   end
 end

data/lib/review/retrovert/yamlconfig.rb

@@ -84,9 +84,27 @@ module ReVIEW
           FileUtils.copy(File.expand_path(current_file, @basedir), File.join(outdir, current_file))
         }
         @basedir = outdir
+        # Only quote date fields for review 5.3 and earlier (< 5.4.0)
+        # These versions have YAML Date parsing issues with Ruby 3.1+
+        if Gem::Version.new(ReVIEW::VERSION) < Gem::Version.new('5.4.0')
+          quote_date_fields()
+        end
         rewrite_retrovert_yml()
       end
 
+      # Quote date fields to avoid YAML Date parsing issues with Ruby 3.1+ and review 5.3 or earlier
+      def quote_date_fields()
+        @config_files.each { |current_file|
+          yamlfile = File.join(@basedir, current_file)
+          content = File.read(yamlfile)
+          # Match date fields like "date: 2021-07-10" and quote them
+          content.gsub!(/^(\s*)(date|history):\s*(\d{4}-\d{2}-\d{2})\s*$/, '\1\2: "\3"')
+          # Match date in arrays like "  - 2021-07-10"
+          content.gsub!(/^(\s*-\s*)(\d{4}-\d{2}-\d{2})\s*$/, '\1"\2"')
+          File.write(yamlfile, content)
+        }
+      end
+
       def commentout(yamlfile, key)
         content = File.read(yamlfile)
         content.gsub!(/^(\s*)#{key}:(.*)$/, "#\\1#{key}:\\2")
@@ -128,6 +146,11 @@ module ReVIEW
           retrovert = yaml['retrovert']
           yaml.deep_merge!(retrovert)
           yaml.delete('retrovert')
+          # Convert Date/Time objects to strings to avoid YAML loading issues
+          # with Ruby 3.1+ and review 5.3 or earlier
+          if Gem::Version.new(ReVIEW::VERSION) < Gem::Version.new('5.4.0')
+            yaml = convert_dates_to_strings(yaml)
+          end
           # YAML.dump(yaml, File.open(yamlfile, "w"))
           content = Psych.dump(yaml)
           content.gsub!('---','')
@@ -135,9 +158,23 @@ module ReVIEW
         }
       end
 
+      # Recursively convert Date and Time objects to ISO 8601 strings
+      def convert_dates_to_strings(obj)
+        case obj
+        when Hash
+          obj.transform_values { |v| convert_dates_to_strings(v) }
+        when Array
+          obj.map { |v| convert_dates_to_strings(v) }
+        when Date, Time
+          obj.strftime('%Y-%m-%d')
+        else
+          obj
+        end
+      end
+
       def load_yaml(filepath)
         begin
-          yaml = YAML.load_file(filepath)
+          yaml = YAML.load_file(filepath, permitted_classes: [Date, Time])
         rescue => e
           error "load error #{e.message}"
         end

data/review-retrovert.gemspec

@@ -10,7 +10,11 @@ Gem::Specification.new do |spec|
   spec.description   = %q{Re:VIEW Starter to Re:VIEW}
   spec.homepage      = "https://github.com/srz-zumix/review-retrovert"
   spec.license       = "MIT"
-  spec.required_ruby_version = Gem::Requirement.new(">= 2.3.0")
+  if RUBY_VERSION >= '2.6.0'
+      spec.required_ruby_version = Gem::Requirement.new(">= 2.6.0")
+  else
+      spec.required_ruby_version = Gem::Requirement.new(">= 2.3.0")
+  end
 
   # spec.metadata["allowed_push_host"] = "http://mygemserver.com"
 
@@ -21,17 +25,27 @@ Gem::Specification.new do |spec|
   # Specify which files should be added to the gem when it is released.
   # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
   spec.files         = Dir.chdir(File.expand_path('..', __FILE__)) do
-    `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
+    `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(.github|testdata|spec|features)/}) }
   end
   spec.bindir        = "exe"
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]
 
-  spec.add_dependency "thor"
+  # thor 1.3+ requires Ruby >= 2.6.0
+  if RUBY_VERSION >= '2.6.0'
+    spec.add_dependency "thor"
+  else
+    spec.add_dependency "thor", "~> 1.2.2"
+  end
+  # Required for Ruby 3.4+ where these gems are no longer default gems
+  # Necessary for compatibility with review versions 5.4 and earlier
+  spec.add_dependency "rexml"
+  spec.add_dependency "csv"
+  spec.add_dependency "nkf"
   spec.add_development_dependency "rspec", ['~> 3.0']
   spec.add_development_dependency "rake", ['~> 12.0']
   spec.add_development_dependency 'aruba', ['~> 1.0.2']
   spec.add_development_dependency "ruby-debug-ide"
-#   spec.add_development_dependency "debase"
+  #spec.add_development_dependency "debase"
   spec.add_runtime_dependency "review", ['>= 3.0.0']
 end

data/zizmor.yml

@@ -0,0 +1,5 @@
+rules:
+  unpinned-uses:
+    config:
+      policies:
+        actions/*: any