Synchronize Scriptella 1.4 pre-release baseline

CHANGELOG.md

@@ -1,6 +1,6 @@
 # Changelog
 
-## [1.4] — unreleased
+## [1.4] — 2026-08-14
 
 Scriptella 1.4 is a maintenance and modernization release focused on making
 the project easier to build, run, and maintain on current Java platforms while

README.md

@@ -7,14 +7,14 @@ orchestrates the workflow instead of a proprietary transformation language.
 
 ## Project status
 
-The latest release is **Scriptella 1.3** (Java 8 target and preserved
-Maven/Ant packaging), published on July 17, 2026.
+The latest release is **Scriptella 1.4** (Java 17 baseline), published on
+August 14, 2026.
 
-Scriptella 1.3 is available from [GitHub Releases](https://github.com/scriptella/scriptella-etl/releases/tag/scriptella-parent-1.3)
+Scriptella 1.4 is available from [GitHub Releases](https://github.com/scriptella/scriptella-etl/releases/tag/scriptella-parent-1.4)
 and Maven Central.
 
-The `master` branch is the development line for **Scriptella 1.4**. See the
-[changelog](CHANGELOG.md) for its current status and compatibility changes.
+See the [changelog](CHANGELOG.md) for the release details and compatibility
+changes.
 
 ## Requirements
 
@@ -108,7 +108,7 @@ the core module:
 <dependency>
   <groupId>org.scriptella</groupId>
   <artifactId>scriptella-core</artifactId>
-  <version>1.3</version>
+  <version>1.4</version>
 </dependency>
 ```
 

RELEASE-PUBLISHING.md

@@ -38,9 +38,10 @@ Before a real release, a maintainer must:
    is missing.
 3. Generate a Portal user token and add it to the maintainer's Maven
    `settings.xml` under server ID `central`.
-4. Select a durable, passphrase-protected OpenPGP signing key and publish its
-   public key to a Central-supported key server such as `keys.openpgp.org` or
-   `keyserver.ubuntu.com`.
+4. Use the existing Scriptella 1.3 OpenPGP signing key
+   (`5DA760EAF1B4169E1715DB80322E3E0A55DB94CE`). That key already signed the
+   published 1.3 artifacts; its public key is on `keyserver.ubuntu.com`. Do
+   not generate a replacement for 1.4.
 5. Build with the documented Java 8 and Maven 3.6+ environment.
 
 Never commit a Portal token, private key, or passphrase.

build.xml

@@ -120,7 +120,10 @@
                         prefix="${product.name}/lib"/>
             <zipfileset dir="${build.dir}" includes="scriptella.jar docs/**" prefix="${product.name}"/>
             <zipfileset dir="${build.dir}" includes="scriptella-*.jar" prefix="${product.name}/lib"/>
-            <zipfileset dir="${tools}/src/bin" prefix="${product.name}/bin"/>
+            <zipfileset dir="${tools}/src/bin" includes="scriptella.bat"
+                        prefix="${product.name}/bin"/>
+            <zipfileset dir="${tools}/src/bin" includes="scriptella.sh" filemode="755"
+                        prefix="${product.name}/bin"/>
             <zipfileset dir="${basedir}" includes="README.md CHANGELOG.md LICENSE NOTICE" prefix="${product.name}"/>
             <zipfileset file="${tmp.dir}/${srcide.zip.name}" prefix="${product.name}"/>
         </zip>

docs/releases/1.4/release-1.4-plan.md

@@ -1,7 +1,9 @@
 # Release 1.4 Plan
 
 **Status:** In progress (Chunks 1–3, **5A–5C**, **6**, **6A**, and **7**
-complete; Chunk 8 readiness is in progress; Chunks 9–11 remain gated)
+complete; Chunk 8 website commit is prepared locally and the 1.3 signing
+key is the 1.4 key; source synchronization remains before Release GO;
+Chunks 9–11 remain gated)
 
 **Umbrella issue:** [#44 — Scriptella 1.4: Release hardening, JDK 17 compatibility, and dependency modernization](https://github.com/scriptella/scriptella-etl/issues/44)
 
@@ -1173,8 +1175,11 @@ unit tests for standalone or distribution claims.
 
 ## Chunk 8 — Final Readiness and Release Preparation
 
-**Status:** In progress (readiness smoke passed August 7, 2026; final
-no-upload release gate remains)
+**Status:** In progress (definitive signed no-upload gate passed August 14,
+2026 from `706c19f`; final website commit `b36009e` is prepared on local
+website branch `release-1.4-site` and is not deployed; 1.4 uses the existing
+1.3 signing key; maintainer Release GO remains gated on source
+synchronization)
 
 **Reasoning level:** Moderate
 
@@ -1197,6 +1202,51 @@ it does not replace the runbook's signed, release-version no-upload gate. That
 gate must run from the final reviewed source commit after release wording is
 settled.
 
+### Definitive final-gate evidence (August 14, 2026)
+
+The signed release-version no-upload gate passed from frozen source commit
+`706c19f5cb55efd447a10e63e25aab460620b6ce` on Temurin 17.0.15, Maven 3.9.9,
+Ant 1.10.17, and DTDDoc 1.1.0. The gate used the private Maven settings file
+with server ID `central`, signed with the approved fingerprint
+`5DA760EAF1B4169E1715DB80322E3E0A55DB94CE`, and set
+`central.skipPublishing=true`; no upload or publication occurred.
+
+Maven passed with 154 core, 161 drivers, and 22 tools tests. Ant tests,
+distribution assembly, the artifact-level distribution contract, ZIP/JAR
+integrity checks, all 14 detached signature verifications, MD5/SHA-1/SHA-256/
+SHA-512 checksum computation, unpacked `java -jar` and executable Unix
+launcher smoke tests, JavaScript/CSV, H2, primes, and an isolated Maven
+consumer all passed. The distribution archives were:
+
+* `scriptella-1.4.zip` — SHA-256
+  `e96900158e0b2823b48954c33901a7867f8b9f82eb9510089d24f91a674e66ee`;
+* `scriptella-1.4-src.zip` — SHA-256
+  `715c5ab8bdd4e847e5b9593081defe519c0d3b16ed480c03e50edb7bcc81b18b`;
+* `scriptella-examples-1.4.zip` — SHA-256
+  `32ee702f5156c84466f4005325d6b5a115d4ed237124a35135882bac3f733bc7`.
+
+Detailed sanitized evidence is retained in the workspace-local
+`release-dir/1.4-final-readiness-evidence-706c19f.md`. It records the known
+Javadoc warnings, native-Windows limitation, disposable-artifact rule, and
+remaining GO prerequisites.
+
+### Signing key
+
+**Use the existing Scriptella 1.3 signing key.** Do not generate a replacement
+for 1.4.
+
+* Identity: `Fyodor Kupolov <scriptella@gmail.com>`
+* Fingerprint: `5DA760EAF1B4169E1715DB80322E3E0A55DB94CE`
+* This key already signed the published Scriptella 1.3 Maven artifacts.
+* The 1.4 no-upload gate used the same fingerprint.
+* The public key is on the Central-supported server
+  `keyserver.ubuntu.com`.
+* RSA-2048 remains accepted by Central. Reuse keeps Scriptella signing
+  continuity.
+
+Set `SIGNING_KEY` / `-Dgpg.keyname` to that full fingerprint for every 1.4
+sign, verify, and publication command.
+
 ### Work
 
 * [x] Update `README.md`, `CHANGELOG.md`, and this plan with the current
@@ -1214,16 +1264,33 @@ settled.
   optional Rhino aliases, nested JavaScript, Janino, selected Mail coverage,
   examples archive execution, Maven consumer execution, and user-facing Ant
   tasks.
-* [ ] Run the signed, release-version no-upload gate from the final reviewed
+* [x] Run the signed, release-version no-upload gate from the final reviewed
   commit using `docs/releases/RELEASE-RUNBOOK.md`; record sanitized results,
   checksums, and any deviations.
+* [x] Prepare the final 1.4 website commit without deploying it. Local website
+  branch `release-1.4-site` commit `b36009ef62933ca4cefb667c61a3d7619c0d1a69`
+  makes 1.4 current on the home, download, and change-history pages, updates
+  tutorial/reference/FAQ/how-to guidance for Java 17, H2, and removed
+  ODBC/HSQLDB, and replaces generated API/DTD documentation from the frozen
+  1.4 source. Optional JSR-223/Rhino details stay on the driver and reference
+  pages. The live website remains on 1.3.
+* [x] Use the existing 1.3 OpenPGP signing key
+  `5DA760EAF1B4169E1715DB80322E3E0A55DB94CE`. Do not create a new key. The
+  public key is already on `keyserver.ubuntu.com`.
+* [ ] Synchronize the reviewed source baseline without creating the release
+  tag.
 
 ### Exit criteria
 
-* The source checkout is clean and frozen at the reviewed release commit.
+* The source baseline is frozen at reviewed commit `706c19f`; later local
+  plan-status commits are not yet synchronized with `origin/master`.
+* The reviewed final website commit is `b36009e` on local website branch
+  `release-1.4-site`. It must not be merged or deployed until the 1.4 Maven
+  coordinates and GitHub Release assets are public.
 * All required tests, artifact checks, and runtime validations pass.
 * Release documentation does not overstate compatibility.
-* Maintainer Release GO can be requested for the Maven publication.
+* Maintainer Release GO can be requested only after the source baseline is
+  synchronized. The signing key is the existing 1.3 key named above.
 
 Documentation must state separately:
 
@@ -1309,9 +1376,9 @@ The final website change must:
   prefer a small explanation or correction over an unnecessary rewrite;
 * make 1.4 the current release on the home, download, and change-history pages,
   with the exact published Maven coordinates and verified release-asset URLs;
-* state the Java 17 runtime/build baseline and explain that the binary and
-  examples distributions bundle Rhino 1.9.1, while Maven and embedded users
-  add the Rhino provider explicitly;
+* state the Java 17 runtime/build baseline; keep the optional JSR-223/Rhino
+  JavaScript contract in driver and reference documentation, not on the home
+  or download pages;
 * remove ODBC/JDBC-ODBC and HSQLDB from the 1.4 driver and tutorial guidance,
   pointing users with legacy requirements to Scriptella 1.3 where appropriate;
 * refresh the generated API and DTD documentation from the released 1.4 source

docs/site/README.md

@@ -7,11 +7,11 @@ Maintained HTML (tutorial, reference, support, …) is edited directly in the
 website repo. Only the generated trees under `docs/api/` and `docs/dtd/` are
 refreshed by this tooling.
 
-The published website currently contains the **Scriptella 1.3** documentation.
-When using `--build` to regenerate those trees, run this tool from a 1.3
-checkout or worktree and use Java 8. The current `master` checkout is the
-Scriptella 1.4 development line and requires JDK 17; do not use its generated
-output to refresh the published 1.3 documentation.
+Generate published documentation from the exact released tag, never from an
+unreviewed development checkout. Scriptella 1.4 documentation requires JDK 17;
+Scriptella 1.3 documentation requires Java 8. Keep the live site on its current
+released documentation until the replacement artifacts are public and the
+release runbook reaches the website deployment step.
 
 ## Layout assumptions
 

tools/src/java/scriptella/tools/launcher/EtlLauncher.java

@@ -377,7 +377,7 @@ public File resolveFile(File dir, String name) throws FileNotFoundException {
             f = new File(dir, DEFAULT_FILE_NAME);
         } else {
             f = new File(dir, name);
-            if (!isFile(f) && name.indexOf('.') < 0) { //not a file and no extension
+            if (!isFile(f) && f.getName().indexOf('.') < 0) { //not a file and no extension
                 f = new File(dir, name + '.' + DEFAULT_FILE_NAME);
             }
         }

tools/src/test/distribution/optional-runtime-distribution-test.sh

@@ -125,6 +125,8 @@ assert_contains "$work_dir/scriptella-manifest.txt" \
     "Class-Path: lib/rhino-engine.jar lib/rhino.jar"
 
 assert_contains "$dist_dir/bin/scriptella.sh" 'lib/*.jar'
+[ -x "$dist_dir/bin/scriptella.sh" ] \
+    || fail "$dist_dir/bin/scriptella.sh is not executable"
 assert_contains "$dist_dir/bin/scriptella.bat" '\lib'
 assert_contains "$dist_dir/bin/scriptella.bat" '%*'
 

tools/src/test/scriptella/tools/launcher/EtlLauncherTest.java

@@ -279,6 +279,17 @@ public void testFile() {
                 getBasedir() + "src/test/scriptella/tools/launcher/EtlLauncherTest"}));
     }
 
+    public void testExtensionlessFileInDottedDirectory() throws FileNotFoundException {
+        EtlLauncher launcher = new EtlLauncher() {
+            @Override
+            protected boolean isFile(File file) {
+                return file.getPath().endsWith("script.etl.xml");
+            }
+        };
+        assertEquals(new File("parent.with.dot/script.etl.xml").getAbsoluteFile(),
+                launcher.resolveFile(null, "parent.with.dot/script"));
+    }
+
     /**
      * Tests if JMX monitoring is enabled during execution.
      */