Use trusted gem publishing

[kachick]

ref: kachick/ruby-ulid#544 (comment)

[kachick]

> rake release
can not use rubocop in this environment
rspec-matchers-power_assert_matchers 0.3.0 built to pkg/rspec-matchers-power_assert_matchers-0.3.0.gem.
Tag v0.3.0 has already been created.
Pushing gem to https://rubygems.org...
You have enabled multi-factor authentication. Please visit https://rubygems.org/webauthn_verification/REDACTED to authenticate via security device. If you can't verify using WebAuthn but have OTP enabled, you can re-run the gem signin command with the `--otp [your_code]` option.
You are verified with a security device. You may close the browser window.
This API key cannot perform the specified action on this gem.

Both gem push pkg/rspec-matchers-power_assert_matchers-0.3.0.gem and rake release are failing even after passkey auth 🤔

Trusted gem publishing is enabled for all my gems?

[kachick]

https://github.com/rubygems/configure_trusted_publisher

[kachick]

There are files that need to be committed first.

WHAT IS THIS

Run bundle exec rake release
  bundle exec rake release
  shell: /usr/bin/bash --noprofile --norc -e -o pipefail {0}
  env:
    RUBYGEMS_API_KEY: ***
    BUNDLE_GEM__PUSH_KEY: ***
    GEM_HOST_API_KEY: ***
    RUBYOPT: -r/home/runner/work/_actions/rubygems/release-gem/v1/rubygems-attestation-patch.rb 
rspec-matchers-power_assert_matchers 0.3.0 built to pkg/rspec-matchers-power_assert_matchers-0.3.0.gem.
rake aborted!
There are files that need to be committed first.

[kachick]

https://github.com/rubygems/rubygems/blob/aa9d7a0d968f9322c692587b762f54625d3fd422/bundler/lib/bundler/gem_helper.rb#L166-L168

[kachick]

💭 Eventually I should print debug with these problems, so hiding the git outputs by bundler is not happy... Should I inline as https://github.com/kachick/ruby-ulid/blob/1a592d74122039921e20b72231afaba52a0e4a91/.github/workflows/release.yml?

[kachick]

4a512fc

Run git diff
diff --git a/.bundle/config b/.bundle/config
index 23[6](https://github.com/kachick/rspec-matchers-power_assert_matchers/actions/runs/12505150495/job/34888054129#step:4:7)9228..beed0f4 100644
--- a/.bundle/config
+++ b/.bundle/config
@@ -1,2 +1,2 @@
 ---
-BUNDLE_PATH: "vendor/bundle"
+BUNDLE_PATH: "/home/runner/work/rspec-matchers-power_assert_matchers/rspec-matchers-power_assert_matchers/vendor/bundle"

ruby/setup-ruby#576

😢

This way is useful for nix, but ...

[kachick]

Ah... removing

rspec-matchers-power_assert_matchers/.github/workflows/release.yml

Line 26 in 54fe5a1

bundler-cache: true

might work? 🙄 https://github.com/ruby/setup-ruby/blob/bfefad842bb982ff05b233bcbc1571d97a87e69f/README.md#L190-L199

[kachick]

Actually completed in https://github.com/kachick/rspec-matchers-power_assert_matchers/compare/9e292998c53ce8daa844ba497b3657a0bb211b71..v0.3.0

And I used another day around this task again in kachick/irb-power_assert#246 (comment)