sds / overcommit / 42867295741

100%

master: 91%

push

github

Support gem hook plugins with explicit sources and signature approvals (#931)

Gem-provided hooks now load only from explicitly declared sources and
use the existing `overcommit --sign <hook-type>` approval flow.
Namespaced hook names distinguish gem hooks from built-in and repository
hooks, and signatures cover gem contents, runtime dependencies
(including compiled extensions), and effective hook configuration before
hook code is required.

Supersedes #748, implementing the gem-sharing feature proposed by Sean
Millichamp and addressing the review's approval and source-resolution
concerns. The original fork does not allow maintainer edits. Shared
configuration remains a follow-up; the namespace-to-gem mapping
identifies sources explicitly without executing gem entrypoints during
validation.

Adds 94 unit/integration examples, including real installed gems with
and without Bundler, rejection before load-time side effects, dependency
changes, multiple sources and name collisions, disabled plugins,
load-path precedence, signing, and `SKIP`/`ONLY`. Documents gem plugins
immediately after Plugin Directory and fixes the requested README
punctuation and table of contents link.

Validation: all 1,960 examples pass locally; all pre-commit checks and
RuboCop pass; measured line coverage is 94.19%. CI exercises Ruby 3.3,
3.4, and 4.0 on Linux and Windows.

139 of 143 new or added lines in 10 files covered. (97.2%)

3603 of 3823 relevant lines covered (94.25%)

2930.11 hits per line