unit-ruby 1.1.0 → 1.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fa9a1cd6cf99b8de4df268d918b5be2d4fc722e90fd861ad9c25da4c50f31d41
-  data.tar.gz: b3d93e3c864e8578062514a92ebc7cb168a567da0b4304e608ed3cce9e231d84
+  metadata.gz: 25b9811586fc39305b1c82248f0ad8f509b160f68cd1af3f4e5b8e9b39a93197
+  data.tar.gz: 160a4495282bf05385e221ae4d6a816c67669093d40de86cd8cdea6006fa1673
 SHA512:
-  metadata.gz: 4b95bd4f2ea05a77d8e3f7e8ab0592642ebe4b16ac4b42537b3c93f92b8ac8725365c2225b1d1960e50f9c5ee469200281a57fb59bea5ebbf5d694d845f205ec
-  data.tar.gz: e50fd998966dc6d6af5e24e23819ba0ce5655b3c767abf17e915a9669fbeed22e79294012a6dd10758679c8916e116dba3ff490e6070cf901c21c80bb02b9950
+  metadata.gz: 5b007e90dc256b5b099c2d4a665bf64335130471b6a642cf4cf276ced33d8ecec8eec2d9e9560736b53acbd847bd4320ac0a278b1d4dc867b0056664fe536513
+  data.tar.gz: 78240e4d1fa34353ea59eb2ff7f1febce20fea424a1bb4fc209f0915185f2851e357de6ae4013b42c91f325fe7daa28d1987ca740b24289bd3052e00dc5ca333

data/.github/workflows/release.yml

@@ -0,0 +1,86 @@
+# Publishes the gem to RubyGems.org via OIDC trusted publishing whenever
+# lib/unit-ruby/version.rb changes on main. No long-lived API key is stored:
+# configure-rubygems-credentials exchanges a short-lived GitHub OIDC token for
+# RubyGems credentials by assuming the OIDC API key role configured on
+# rubygems.org. `bundle exec rake release` then builds the gem, creates and
+# pushes the vX.Y.Z tag, and publishes to RubyGems.org.
+name: Release
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - lib/unit-ruby/version.rb
+
+# Never run two releases at once.
+concurrency:
+  group: release
+  cancel-in-progress: false
+
+jobs:
+  push:
+    name: Push gem to RubyGems.org
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write # push the version tag
+      id-token: write # mint the OIDC token for trusted publishing
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+          persist-credentials: false
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1.312.0
+        with:
+          ruby-version: "3.4"
+          bundler-cache: true
+      - name: Read and validate gem version
+        id: version
+        run: |
+          version="$(ruby -e 'require "./lib/unit-ruby/version"; print Unit::VERSION')"
+          # Enforce semver before the value is used anywhere else, so a crafted
+          # version string can't smuggle shell metacharacters into later steps.
+          if [[ ! "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.-]+)?(\+[0-9A-Za-z.-]+)?$ ]]; then
+            echo "Invalid version format: $version" >&2
+            exit 1
+          fi
+          echo "version=$version" >> "$GITHUB_OUTPUT"
+      - name: Check whether this version is already tagged
+        id: tag
+        env:
+          VERSION: ${{ steps.version.outputs.version }}
+        run: |
+          if git rev-parse "v$VERSION" >/dev/null 2>&1; then
+            echo "Version v$VERSION already released; skipping."
+            echo "exists=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "exists=false" >> "$GITHUB_OUTPUT"
+          fi
+      - name: Configure RubyGems credentials
+        if: steps.tag.outputs.exists == 'false'
+        uses: rubygems/configure-rubygems-credentials@762a4b77c3300434bb57c7ce80b20e36231927aa # v2.0.0
+        with:
+          role-to-assume: rg_oidc_akr_54hgswsa4knajxk89skj
+      - name: Set git identity and push URL
+        if: steps.tag.outputs.exists == 'false'
+        run: |
+          # Attribute the release tag to the last committer on HEAD.
+          git config --global user.email "$(git log -1 --pretty=format:'%ae')"
+          git config --global user.name "$(git log -1 --pretty=format:'%an')"
+          # Restore push credentials (checkout ran with persist-credentials: false)
+          # so `rake release` can push the tag.
+          git remote set-url origin "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@github.com/$GITHUB_REPOSITORY"
+      - name: Release
+        if: steps.tag.outputs.exists == 'false'
+        run: bundle exec rake release
+      - name: Wait for release to propagate
+        if: steps.tag.outputs.exists == 'false'
+        run: |
+          gem install rubygems-await
+          gem_tuple="$(ruby -rbundler/setup -rbundler -e '
+              spec = Bundler.definition.specs.find {|s| s.name == ARGV[0] }
+              raise "No spec for #{ARGV[0]}" unless spec
+              print [spec.name, spec.version, spec.platform].join(":")
+            ' "unit-ruby")"
+          gem await "${gem_tuple}"

data/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
-## 0.1.0 
+## 1.1.1
 
-Initial release
+- Publish releases automatically to RubyGems.org via OIDC trusted publishing when `version.rb` changes on `main`.
+
+## 1.1.0
+
+- Support Rails 8 / Active Support 8 (widen the `activesupport` dependency to `>= 7.0, < 9`).
+- Stop committing `Gemfile.lock` so applications resolve dependencies against the gemspec
+
+## 1.0.1
+
+- Resolve dependency vulnerabilities by bumping vulnerable transitive dependencies.
+
+## 1.0.0
+
+- First stable release, promoting the 0.12.x API to 1.0 with no breaking changes.
+- Expanded README documentation and cleaned up the gemspec and CI configuration.
+
+## 0.1.0
+
+Initial release

data/README.md

@@ -129,15 +129,13 @@ $ bundle exec rake install
 
 ## Releasing
 
-In order to publish this gem on [RubyGems.org](https://rubygems.org/), you will need to create a RubyGems account. Note that multi-factor authentication must be set up on your account before a gem can be published.
+Releases are minted automatically. When a change to `lib/unit-ruby/version.rb` lands on `main`, the [Release workflow](.github/workflows/release.yml) builds the gem, tags the commit `vX.Y.Z`, and publishes to [RubyGems.org](https://rubygems.org/gems/unit-ruby/). No manual `gem push` is required, and no RubyGems API key is stored — the workflow authenticates via [OIDC trusted publishing](https://guides.rubygems.org/trusted-publishing/).
 
-Once your account is set up, the following operations will facilitate publishing the latest version of the gem:
+To cut a release:
 
-1. After making your changes to the gem, update the version number in `version.rb` and open a PR for review using semantic versioning
-2. Ensure that PR request is approved by appropriate member(s) of the engineering team before publishing the gem in the below steps
-3. Run `gem build unit-ruby`. This will build a version of the gem called `unit-ruby-[gem version number].gem`
-4. Push this latest version of the gem to RubyGems.org by calling `gem push unit-ruby-[gem version number].gem`
-5. Merge PR into `main` branch
+1. Make your changes, then bump the version in `lib/unit-ruby/version.rb` following [semantic versioning](https://semver.org/) and add an entry to `CHANGELOG.md`.
+2. Open a PR and get it approved by the appropriate member(s) of the engineering team.
+3. Merge to `main`. The Release workflow publishes the new version automatically. If the version is unchanged, no release is cut.
 
 ## Contributing
 

data/lib/unit-ruby/version.rb

@@ -1,3 +1,3 @@
 module Unit
-  VERSION = '1.1.0'
+  VERSION = '1.1.1'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: unit-ruby
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 1.1.1
 platform: ruby
 authors:
 - Chloe Isacke
@@ -153,6 +153,7 @@ extra_rdoc_files: []
 files:
 - ".env.example"
 - ".github/workflows/ci.yml"
+- ".github/workflows/release.yml"
 - ".gitignore"
 - ".rspec"
 - ".rubocop.yml"