rubocop-fourshark 0.9.0 → 0.11.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f809e807d128c7ab3f1bd4f3f32217bfde29b24c45c3c3e610531fa08fff38c2
-  data.tar.gz: cf503705817938741d2b144fbb38d1887f72a47bbd0ac0b1e761c46cc3299f70
+  metadata.gz: d37d6aedd6756dcc500a7295b9f03dd99f413d12375c29826d5ac6970e11aacc
+  data.tar.gz: 7e406a1cb9ddde1f494a3e6d1c90561c87b6bf2d19cc585d69c25c43516a39ea
 SHA512:
-  metadata.gz: a37d20936f3bc14e9a5d7c92777a222fb2b364840501775d5ea301d27de15ba69863a5959aca707187d10053495d3753c5012e790fbba5d914500eacea0ea481
-  data.tar.gz: 85896dc4843fdb5cb2f86ac8366f3fd3284e63928c0bd95779d280fb9807bb61866d7aa68cdc8645f6bdb3543c3b0886e1b2518246b68331ccc02fb8f108f6c4
+  metadata.gz: ac6cbcbeaa39f99a6e548b93a7ad05c2cc204013210dbb50686252c3e0c7285d419daf306d53aedc00080d295b7c61efd016f59276e48a0519391e427e287e5c
+  data.tar.gz: 540e6ea1264bcf27eeb261546ab74bd75c165bb19488e7098dd358d303e10e162d120c3ef0ea5b3698077bb03cc3a18e59af2ae7f009f24020463ebc3956d8e2

data/.grant.yaml

@@ -0,0 +1,28 @@
+# License allow-list enforced by `grant` over the Syft SBOM (see .github/workflows/main.yml).
+# Mirrors the licenses the 4Shark Ruby projects permit. require-license/require-known-license
+# are false so a dependency with no declared license or a non-SPDX license string still passes.
+allow:
+  - MIT
+  - Apache-2.0
+  - "BSD-2-Clause"
+  - "BSD-3-Clause"
+  - "BSD"
+  - "BSD 2-Clause"
+  - ISC
+  - Ruby
+  - ruby
+  - "same as ruby's"
+  - Zlib
+  - "LGPL-2.1*"
+  - "LGPL-3.0*"
+  - MPL-2.0
+  - "Artistic-*"
+  - "Brakeman Public Use License"
+  - "GPL-2.0*"
+  - "GPL-3.0*"
+  - GPLv2
+  - WTFPL
+  - "Prosperity*"
+
+require-license: false
+require-known-license: false

data/CHANGELOG.md

@@ -1,3 +1,29 @@
+## [0.11.0] - 2026-10-07
+
+### Changed
+
+- `RSpec/MultipleMemoizedHelpers` disabled
+
+### Fixed
+
+- Dependency age check failing on a transient registry error
+- Dependency age check failing on a transient GitHub API error
+- Dependency age check stalling on an unresponsive registry
+- Dependency age check stalling on an unresponsive GitHub API
+
+## [0.10.0] - 2026-10-02
+
+### Added
+
+- License compliance verification
+
+### Changed
+
+- Gem update pull requests limited to the named gem
+- Minimum release age verification across lockfiles and manifests
+- License check fails at a failed tool install
+- `Style/DisallowDelegate` accepts a constant the object supplies to the collaborator
+
 ## [0.9.0] - 2026-08-31
 
 ### Added

data/README.md

@@ -61,12 +61,13 @@ Cop names follow RuboCop's empirical convention — a noun phrase describing the
 
 ### Stock cops disabled
 
-Where a 4Shark cop supersedes or contradicts a stock cop, `config/default.yml` turns the stock one off:
+Where a 4Shark cop supersedes or contradicts a stock cop, or a stock cop contradicts a 4Shark convention, `config/default.yml` turns the stock one off:
 
 | Disabled stock cop | Why |
 |---|---|
 | `Rails/Delegate` | contradicts `Style/DisallowDelegate` — it turns an explicit method into `delegate`, we forbid the macro |
 | `Rails/InverseOf` | superseded by `Rails/MandatoryInverseOf` (covers its cases and more) |
+| `RSpec/MultipleMemoizedHelpers` | contradicts the spec convention of keeping every `let` at the top level, which the cop's default `Max: 5` cannot hold |
 | `Style/MultilineTernaryOperator` | superseded by `Style/DisallowTernary` — it shapes a construct we forbid outright |
 | `Style/NestedTernaryOperator` | superseded by `Style/DisallowTernary` — same |
 | `Style/SafeNavigation` | contradicts `Style/DisallowSafeNavigation` — it pushes `&.`, we forbid it |

data/config/default.yml

@@ -106,6 +106,11 @@ RSpec/Dialect:
   Include:
     - 'spec/**/*_spec.rb'
 
+# Stock cop disabled (not superseded by a 4Shark cop): the spec convention keeps
+# every `let` at the top level, which the cop's default `Max: 5` cannot hold.
+RSpec/MultipleMemoizedHelpers:
+  Enabled: false
+
 RSpec/InverseOfMatcher:
   Description: 'Root models must include `.inverse_of` in association specs; subclasses must not.'
   Enabled: true

data/lib/rubocop/cop/style/disallow_delegate.rb

@@ -44,10 +44,10 @@ module RuboCop
       # contributes something the caller would otherwise have to reach in and
       # take, and the result is a simpler API on the object that owns the data.
       #
-      # Own state is an instance variable, `self`, or a receiverless call,
-      # reached directly, through a wrapper, or through a call on it — `record`,
-      # `record.owner_id` and `[record.owner_id]` all carry the object's own
-      # data. A method PARAMETER does not: it arrives as an `lvar`, so a setter
+      # Own state is an instance variable, `self`, a receiverless call, or a
+      # constant, reached directly, through a wrapper, or through a call on it —
+      # `record.owner_id` and `Settings.keep_alive` both carry data the object
+      # chose to supply. A method PARAMETER does not: it arrives as an `lvar`, so a setter
       # handing its argument to a collaborator stays flagged.
       #
       # Two limits keep the exemption from swallowing the rule.
@@ -224,8 +224,8 @@ module RuboCop
         end
 
         # A method parameter reaches the body as an `lvar`, so only an instance
-        # variable, `self`, or a receiverless call counts as the object's own
-        # state — read directly, through a wrapper, or through a call on it.
+        # variable, `self`, a receiverless call, or a constant counts as the
+        # object's own state — read directly, through a wrapper, or through a call on it.
         # Anything rooted at the collaborator is that collaborator's own data
         # coming back, which is the echo the rule forbids. The first guard
         # refuses anything that is not a node, which covers both the nil child
@@ -236,6 +236,7 @@ module RuboCop
           return false if argument == collaborator
           return true if argument.ivar_type?
           return true if argument.self_type?
+          return true if argument.const_type?
           return own_state?(argument.receiver, collaborator) if call_with_receiver?(argument)
           return true if argument.send_type?
           return argument.children.any? { |child| own_state?(child, collaborator) } if wrapper?(argument)

data/lib/rubocop/fourshark/version.rb

@@ -2,6 +2,6 @@
 
 module RuboCop
   module Fourshark
-    VERSION = '0.9.0'
+    VERSION = '0.11.0'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rubocop-fourshark
 version: !ruby/object:Gem::Version
-  version: 0.9.0
+  version: 0.11.0
 platform: ruby
 authors:
 - Paulo Ribeiro
@@ -127,6 +127,7 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".grant.yaml"
 - ".ruby-gemset"
 - ".ruby-version"
 - CHANGELOG.md