⬆️ Allow jwt v3, and faraday head

- fix specs for JWT v3
- add appraisal for current rubies with runtime dep heads
- add workflow for current rubies with runtime dep heads

Author: pboling

.github/workflows/current-runtime-heads.yml

@@ -0,0 +1,87 @@
+# Targets the evergreen latest release of ruby, truffleruby, and jruby
+#   and tests against the HEAD of runtime dependencies
+name: Runtime Deps @ HEAD
+
+env:
+  K_SOUP_COV_DO: false
+
+on:
+  push:
+    branches:
+      - 'main'
+      - '*-stable'
+    tags:
+      - '!*' # Do not execute on tags
+  pull_request:
+    branches:
+      - '*'
+  # Allow manually triggering the workflow.
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+# Cancels all previous workflow runs for the same branch that have not yet completed.
+concurrency:
+  # The concurrency group contains the workflow name and the branch name.
+  group: "${{ github.workflow }}-${{ github.ref }}"
+  cancel-in-progress: true
+
+jobs:
+  test:
+    name: Specs ${{ matrix.ruby }}@${{ matrix.appraisal }}
+    if: "!contains(github.event.commits[0].message, '[ci skip]') && !contains(github.event.commits[0].message, '[skip ci]')"
+    runs-on: ubuntu-latest
+    continue-on-error: ${{ matrix.experimental || endsWith(matrix.ruby, 'head') }}
+    env: # $BUNDLE_GEMFILE must be set at job level, so it is set for all steps
+      BUNDLE_GEMFILE: ${{ github.workspace }}/${{ matrix.gemfile }}.gemfile
+    strategy:
+      matrix:
+        include:
+          # Ruby 3.4
+          - ruby: "ruby"
+            appraisal: "current-runtime-heads"
+            exec_cmd: "rake test"
+            gemfile: "Appraisal.root"
+            rubygems: latest
+            bundler: latest
+
+          # truffleruby-24.1
+          #   (according to documentation: targets Ruby 3.3 compatibility)
+          #   (according to runtime: targets Ruby 3.2 compatibility)
+          - ruby: "truffleruby"
+            appraisal: "current-runtime-heads"
+            exec_cmd: "rake test"
+            gemfile: "Appraisal.root"
+            rubygems: default
+            bundler: default
+
+          # jruby-10.0 (targets Ruby 3.4 compatibility)
+          - ruby: "jruby"
+            appraisal: "current-runtime-heads"
+            exec_cmd: "rake test"
+            gemfile: "Appraisal.root"
+            rubygems: default
+            bundler: default
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Ruby & RubyGems
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.ruby }}
+          rubygems: ${{ matrix.rubygems }}
+          bundler: ${{ matrix.bundler }}
+          bundler-cache: false
+
+      # Raw `bundle` will use the BUNDLE_GEMFILE set to matrix.gemfile (i.e. Appraisal.root)
+      # We need to do this first to get appraisal installed.
+      # NOTE: This does not use the primary Gemfile at all.
+      - name: Install Root Appraisal
+        run: bundle
+      - name: Appraisal for ${{ matrix.ruby }}@${{ matrix.appraisal }}
+        run: bundle exec appraisal ${{ matrix.appraisal }} bundle
+      - name: Tests for ${{ matrix.ruby }}@${{ matrix.appraisal }} via ${{ matrix.exec_cmd }}
+        run: bundle exec appraisal ${{ matrix.appraisal }} bundle exec ${{ matrix.exec_cmd }}

Appraisals

@@ -9,7 +9,15 @@
 appraise "head" do
   gem "mutex_m", ">= 0.2"
   gem "stringio", ">= 3.0"
-  eval_gemfile "modular/f2.gemfile"
+  eval_gemfile "modular/runtime_heads.gemfile"
+  remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
+end
+
+# Test current Rubies against head versions of runtime dependencies
+appraise "current-runtime-heads" do
+  gem "mutex_m", ">= 0.2"
+  gem "stringio", ">= 3.0"
+  eval_gemfile "modular/runtime_heads.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
 
@@ -18,77 +26,89 @@ end
 appraise "current" do
   gem "mutex_m", ">= 0.2"
   gem "stringio", ">= 3.0"
-  eval_gemfile "modular/f2.gemfile"
+  eval_gemfile "modular/faraday_v2.gemfile"
+  eval_gemfile "modular/jwt_v3.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
 
 appraise "ruby-2-2" do
-  eval_gemfile "modular/f0.gemfile"
+  eval_gemfile "modular/faraday_v0.gemfile"
+  eval_gemfile "modular/jwt_v1.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
 
 appraise "ruby-2-3" do
-  eval_gemfile "modular/f0.gemfile"
+  eval_gemfile "modular/faraday_v0.gemfile"
+  eval_gemfile "modular/jwt_v1.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
 
 appraise "ruby-2-4" do
-  eval_gemfile "modular/f1.gemfile"
+  eval_gemfile "modular/faraday_v1.gemfile"
+  eval_gemfile "modular/jwt_v1.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
 
 appraise "ruby-2-5" do
-  eval_gemfile "modular/f1.gemfile"
+  eval_gemfile "modular/faraday_v1.gemfile"
+  eval_gemfile "modular/jwt_v2.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
 
 appraise "ruby-2-6" do
   gem "mutex_m", "~> 0.2"
   gem "stringio", "~> 3.0"
-  eval_gemfile "modular/f2.gemfile"
+  eval_gemfile "modular/faraday_v2.gemfile"
+  eval_gemfile "modular/jwt_v2.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
 
 appraise "ruby-2-7" do
   gem "mutex_m", "~> 0.2"
   gem "stringio", "~> 3.0"
-  eval_gemfile "modular/f2.gemfile"
+  eval_gemfile "modular/faraday_v2.gemfile"
+  eval_gemfile "modular/jwt_v2.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
 
 appraise "ruby-3-0" do
   gem "mutex_m", "~> 0.2"
   gem "stringio", "~> 3.0"
-  eval_gemfile "modular/f2.gemfile"
+  eval_gemfile "modular/faraday_v2.gemfile"
+  eval_gemfile "modular/jwt_v2.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
 
 appraise "ruby-3-1" do
   gem "mutex_m", "~> 0.2"
   gem "stringio", "~> 3.0"
-  eval_gemfile "modular/f2.gemfile"
+  eval_gemfile "modular/faraday_v2.gemfile"
+  eval_gemfile "modular/jwt_v2.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
 
 appraise "ruby-3-2" do
   gem "mutex_m", "~> 0.2"
   gem "stringio", "~> 3.0"
-  eval_gemfile "modular/f2.gemfile"
+  eval_gemfile "modular/faraday_v2.gemfile"
+  eval_gemfile "modular/jwt_v2.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
 
 appraise "ruby-3-3" do
   gem "mutex_m", "~> 0.2"
   gem "stringio", "~> 3.0"
-  eval_gemfile "modular/f2.gemfile"
+  eval_gemfile "modular/faraday_v2.gemfile"
+  eval_gemfile "modular/jwt_v2.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
 
 # Only run security audit on latest Ruby version
 appraise "audit" do
   gem "mutex_m", "~> 0.2"
   gem "stringio", "~> 3.0"
-  eval_gemfile "modular/f2.gemfile"
+  eval_gemfile "modular/faraday_v2.gemfile"
+  eval_gemfile "modular/jwt_v2.gemfile"
   eval_gemfile "modular/audit.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
@@ -97,7 +117,8 @@ end
 appraise "coverage" do
   gem "mutex_m", "~> 0.2"
   gem "stringio", "~> 3.0"
-  eval_gemfile "modular/f2.gemfile"
+  eval_gemfile "modular/faraday_v2.gemfile"
+  eval_gemfile "modular/jwt_v2.gemfile"
   eval_gemfile "modular/coverage.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
@@ -106,7 +127,6 @@ end
 appraise "style" do
   gem "mutex_m", "~> 0.2"
   gem "stringio", "~> 3.0"
-  eval_gemfile "modular/f2.gemfile"
   eval_gemfile "modular/style.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end
@@ -115,7 +135,8 @@ appraise "omnibus" do
   eval_gemfile "modular/audit.gemfile"
   eval_gemfile "modular/coverage.gemfile"
   eval_gemfile "modular/documentation.gemfile"
-  eval_gemfile "modular/f2.gemfile"
+  eval_gemfile "modular/faraday_v2.gemfile"
+  eval_gemfile "modular/jwt_v2.gemfile"
   eval_gemfile "modular/style.gemfile"
   remove_gem "appraisal" # only present because it must be in the gemfile because we target a git branch
 end

Gemfile.lock

@@ -1,3 +1,11 @@
+GIT
+  remote: https://github.com/jwt/ruby-jwt
+  revision: 6aac2d682b04ac62962989be18479040f806f34e
+  branch: main
+  specs:
+    jwt (3.0.0.beta1)
+      base64
+
 GIT
   remote: https://github.com/pboling/appraisal
   revision: a3a3e4b7db67d9b085f96b2ffddd2b51bd8a1196
@@ -25,7 +33,7 @@ PATH
   specs:
     oauth2 (2.0.10)
       faraday (>= 0.17.3, < 3.0)
-      jwt (>= 1.0, < 3.0)
+      jwt (>= 1.0, < 4.0)
       multi_xml (~> 0.5)
       rack (>= 1.2, < 4)
       snaky_hash (~> 2.0)
@@ -98,8 +106,6 @@ GEM
       rdoc (>= 4.0.0)
       reline (>= 0.4.2)
     json (2.12.0)
-    jwt (2.10.1)
-      base64
     kettle-soup-cover (1.0.6)
       simplecov (~> 0.22)
       simplecov-cobertura (~> 2.1)
@@ -166,7 +172,7 @@ GEM
       ruby_version (~> 1.0)
     rspec-stubbed_env (1.0.2)
     rspec-support (3.13.3)
-    rubocop (1.75.5)
+    rubocop (1.75.6)
       json (~> 2.3)
       language_server-protocol (~> 3.17.0.2)
       lint_roller (~> 1.1.0)
@@ -286,15 +292,16 @@ DEPENDENCIES
   bundler-audit (~> 0.9.2)
   debug (>= 1.0.0)
   gem_bench (~> 2.0, >= 2.0.5)
+  jwt!
   kettle-soup-cover (~> 1.0, >= 1.0.6)
   nkf (~> 0.2)
   oauth2!
-  rake (>= 12)
+  rake (~> 13.0)
   rdoc (~> 6.11)
   reek (~> 6.4)
   rexml (>= 3)
-  rspec (>= 3)
-  rspec-block_is_expected
+  rspec (~> 3.13)
+  rspec-block_is_expected (~> 1.0)
   rspec-pending_for
   rspec-stubbed_env
   rubocop (~> 1.73, >= 1.73.2)

gemfiles/README.md

@@ -1,5 +1,8 @@
 # History
 
+This document will become out-of-date quickly, but remains historically relevant until
+such time as this gem is released with support for non-EOL Ruby only.
+
 `faraday` v0.17.3 is the first version that stops using `&Proc.new` for block forwarding,
    and thus is the oldest version oauth2 is compatible with.
 

gemfiles/audit.gemfile

@@ -5,8 +5,10 @@ source "https://rubygems.org"
 gem "mutex_m", "~> 0.2"
 gem "stringio", "~> 3.0"
 
-gemspec path: "../"
+gemspec :path => "../"
 
-eval_gemfile("modular/f2.gemfile")
+eval_gemfile("modular/faraday_v2.gemfile")
+
+eval_gemfile("modular/jwt_v2.gemfile")
 
 eval_gemfile("modular/audit.gemfile")

gemfiles/coverage.gemfile

@@ -5,8 +5,10 @@ source "https://rubygems.org"
 gem "mutex_m", "~> 0.2"
 gem "stringio", "~> 3.0"
 
-gemspec path: "../"
+gemspec :path => "../"
 
-eval_gemfile("modular/f2.gemfile")
+eval_gemfile("modular/faraday_v2.gemfile")
+
+eval_gemfile("modular/jwt_v2.gemfile")
 
 eval_gemfile("modular/coverage.gemfile")

gemfiles/current.gemfile

@@ -5,6 +5,8 @@ source "https://rubygems.org"
 gem "mutex_m", ">= 0.2"
 gem "stringio", ">= 3.0"
 
-gemspec path: "../"
+gemspec :path => "../"
 
-eval_gemfile("modular/f2.gemfile")
+eval_gemfile("modular/faraday_v2.gemfile")
+
+eval_gemfile("modular/jwt_v3.gemfile")

gemfiles/current_runtime_heads.gemfile

@@ -0,0 +1,10 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "mutex_m", ">= 0.2"
+gem "stringio", ">= 3.0"
+
+gemspec :path => "../"
+
+eval_gemfile("modular/runtime_heads.gemfile")

gemfiles/head.gemfile

@@ -5,6 +5,6 @@ source "https://rubygems.org"
 gem "mutex_m", ">= 0.2"
 gem "stringio", ">= 3.0"
 
-gemspec path: "../"
+gemspec :path => "../"
 
-eval_gemfile("modular/f2.gemfile")
+eval_gemfile("modular/runtime_heads.gemfile")