Compare commits
16 Commits
7802e99a9c
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
 renovate
|
bb12bac945 | ||
|
renovate
|
8f0e3978b9 | ||
 argoyle
|
1f9d754f61 | ||
|
argoyle
|
51b3b980a3 | ||
|
argoyle
|
c39f11fda7 | ||
|
renovate
|
0a42bcebe0 | ||
|
renovate
|
ac96359966 | ||
|
renovate
|
3bc3f4790d | ||
|
argoyle
|
e3c17ceaa0 | ||
|
argoyle
|
068c6ef686 | ||
|
argoyle
|
d5623bdf9c
|
||
|
argoyle
|
e3f1ba4e0a | ||
|
argoyle
|
4688810928
|
||
|
renovate
|
646d0e4e0c | ||
|
argoyle
|
c564063d20 | ||
|
argoyle
|
a9458d03dd
|
@@ -5,7 +5,8 @@
|
||||
"Bash(but rub --help:*)",
|
||||
"WebSearch",
|
||||
"WebFetch(domain:docs.gitea.com)",
|
||||
"WebFetch(domain:gitea.com)"
|
||||
"WebFetch(domain:gitea.com)",
|
||||
"Bash(but status:*)"
|
||||
]
|
||||
}
|
||||
}
|
||||
|
||||
+157
-182
@@ -9,10 +9,14 @@ on:
|
||||
default: false
|
||||
type: boolean
|
||||
|
||||
concurrency:
|
||||
group: release-${{ github.repository }}
|
||||
cancel-in-progress: false
|
||||
|
||||
env:
|
||||
GITEA_URL: http://gitea-http.gitea.svc.cluster.local:3000
|
||||
RELEASE_TOKEN_FILE: /runner-secrets/release-token
|
||||
GIT_CLIFF_VERSION: "2.11.0"
|
||||
GIT_CLIFF_VERSION: "2.13.1"
|
||||
|
||||
jobs:
|
||||
preconditions:
|
||||
@@ -39,7 +43,7 @@ jobs:
|
||||
if: github.ref_type == 'branch' && github.ref_name == github.event.repository.default_branch
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v6
|
||||
uses: actions/checkout@v7
|
||||
with:
|
||||
fetch-depth: 0
|
||||
|
||||
@@ -83,213 +87,184 @@ jobs:
|
||||
OWNER=$(echo "${REPOSITORY}" | cut -d'/' -f1)
|
||||
REPO=$(echo "${REPOSITORY}" | cut -d'/' -f2)
|
||||
API_URL="${GITEA_URL}/api/v1/repos/${OWNER}/${REPO}"
|
||||
|
||||
# Fallback to main if DEFAULT_BRANCH is empty
|
||||
BASE_BRANCH="${DEFAULT_BRANCH:-main}"
|
||||
echo "Using base branch: ${BASE_BRANCH}"
|
||||
|
||||
TITLE="chore(release): prepare for ${VERSION}"
|
||||
# Read CHANGES.md content and add note (jq --arg will handle JSON escaping)
|
||||
CHANGES_CONTENT=$(cat CHANGES.md)
|
||||
PR_NOTE="**Note:** Please use **Squash Merge** when merging this PR."
|
||||
DESCRIPTION="${CHANGES_CONTENT}"$'\n\n---\n\n'"${PR_NOTE}"
|
||||
|
||||
echo "Checking for existing release PRs..."
|
||||
PRS=$(curl -sf \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
"${API_URL}/pulls?state=open" | jq '[.[] | select(.head.ref == "next-release")]')
|
||||
PR_INDEX=$(echo "${PRS}" | jq -r '.[0].number // empty')
|
||||
|
||||
# If PR exists, rebase the branch onto the latest base branch
|
||||
if [ -n "${PR_INDEX}" ]; then
|
||||
echo "Rebasing PR #${PR_INDEX} branch onto ${BASE_BRANCH}..."
|
||||
REBASE_RESPONSE=$(curl -s -w "\n%{http_code}" -X POST \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
"${API_URL}/pulls/${PR_INDEX}/update?style=rebase")
|
||||
REBASE_CODE=$(echo "${REBASE_RESPONSE}" | tail -1)
|
||||
if [ "${REBASE_CODE}" = "200" ]; then
|
||||
echo "Successfully rebased branch onto ${BASE_BRANCH}"
|
||||
elif [ "${REBASE_CODE}" = "409" ]; then
|
||||
echo "Branch already up to date or rebase conflict - continuing with update"
|
||||
else
|
||||
echo "Warning: Rebase returned ${REBASE_CODE}, continuing anyway"
|
||||
fi
|
||||
fi
|
||||
|
||||
echo "Checking for existing next-release branch..."
|
||||
BRANCH_CHECK=$(curl -s -w "%{http_code}" -o /dev/null \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
"${API_URL}/branches/next-release")
|
||||
echo "Branch check HTTP status: ${BRANCH_CHECK}"
|
||||
if [ "${BRANCH_CHECK}" = "200" ]; then
|
||||
BRANCH_EXISTS="true"
|
||||
else
|
||||
BRANCH_EXISTS="false"
|
||||
fi
|
||||
echo "Branch exists: ${BRANCH_EXISTS}"
|
||||
|
||||
# Prepare CHANGELOG.md content
|
||||
CHANGELOG_CONTENT=$(base64 -w0 < CHANGELOG.md)
|
||||
VERSION_CONTENT=$(jq -n --arg v "${VERSION}" '{"version":$v}' | base64 -w0)
|
||||
|
||||
# Prepare .version content
|
||||
VERSION_JSON=$(jq -n --arg v "${VERSION}" '{"version":$v}')
|
||||
VERSION_CONTENT=$(echo "${VERSION_JSON}" | base64 -w0)
|
||||
# api_call METHOD PATH [JSON_BODY]
|
||||
# Stdout: first line "<http_code>|<curl_rc>", then response body.
|
||||
# Never returns non-zero so callers must inspect http_code; this
|
||||
# prevents curl exit codes (e.g. CURLE_WRITE_ERROR / 23) from
|
||||
# killing the script via `set -e` inside command substitutions.
|
||||
api_call() {
|
||||
local method="$1" path="$2" data="${3:-}"
|
||||
local body_file http_code rc=0
|
||||
body_file=$(mktemp)
|
||||
local args=(-sS --retry 3 --retry-delay 2 --retry-all-errors
|
||||
-w '%{http_code}'
|
||||
-o "${body_file}"
|
||||
-X "${method}"
|
||||
-H "Authorization: token ${TOKEN}")
|
||||
if [ -n "${data}" ]; then
|
||||
args+=(-H "Content-Type: application/json" --data "${data}")
|
||||
fi
|
||||
http_code=$(curl "${args[@]}" "${API_URL}${path}" 2>/dev/null) || rc=$?
|
||||
printf '%s|%s\n' "${http_code:-000}" "${rc}"
|
||||
cat "${body_file}"
|
||||
rm -f "${body_file}"
|
||||
return 0
|
||||
}
|
||||
|
||||
if [ "${BRANCH_EXISTS}" = "true" ]; then
|
||||
echo "Updating existing next-release branch..."
|
||||
# Extract first-line meta and remaining body from api_call output.
|
||||
meta_line() { printf '%s\n' "$1" | head -n1; }
|
||||
body_lines() { printf '%s\n' "$1" | tail -n +2; }
|
||||
http_of() { local m; m=$(meta_line "$1"); printf '%s' "${m%%|*}"; }
|
||||
ok_code() { [ -n "$1" ] && [ "$1" -ge 200 ] 2>/dev/null && [ "$1" -lt 400 ]; }
|
||||
|
||||
# Get SHA of existing CHANGELOG.md
|
||||
CHANGELOG_SHA=$(curl -sf \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
"${API_URL}/contents/CHANGELOG.md?ref=next-release" | jq -r '.sha // empty')
|
||||
|
||||
# Update or create CHANGELOG.md
|
||||
if [ -n "${CHANGELOG_SHA}" ]; then
|
||||
curl -sf -X PUT \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
-H "Content-Type: application/json" \
|
||||
--data "$(jq -n \
|
||||
--arg content "${CHANGELOG_CONTENT}" \
|
||||
--arg sha "${CHANGELOG_SHA}" \
|
||||
--arg message "${TITLE}" \
|
||||
--arg branch "next-release" \
|
||||
'{content: $content, sha: $sha, message: $message, branch: $branch}')" \
|
||||
"${API_URL}/contents/CHANGELOG.md"
|
||||
# Delete existing next-release branch if it exists (auto-closes any open PR)
|
||||
echo "Checking for existing next-release branch..."
|
||||
OUT=$(api_call GET "/branches/next-release")
|
||||
CODE=$(http_of "${OUT}")
|
||||
if [ "${CODE}" = "200" ]; then
|
||||
echo "Deleting existing next-release branch..."
|
||||
OUT=$(api_call DELETE "/branches/next-release")
|
||||
echo " delete result: $(meta_line "${OUT}")"
|
||||
else
|
||||
curl -sf -X POST \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
-H "Content-Type: application/json" \
|
||||
--data "$(jq -n \
|
||||
--arg content "${CHANGELOG_CONTENT}" \
|
||||
--arg message "${TITLE}" \
|
||||
--arg branch "next-release" \
|
||||
'{content: $content, message: $message, branch: $branch, new_branch: $branch}')" \
|
||||
"${API_URL}/contents/CHANGELOG.md"
|
||||
echo " no existing branch (HTTP ${CODE})"
|
||||
fi
|
||||
|
||||
# Get SHA of existing .version
|
||||
VERSION_SHA=$(curl -sf \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
"${API_URL}/contents/.version?ref=next-release" | jq -r '.sha // empty')
|
||||
|
||||
# Update or create .version
|
||||
if [ -n "${VERSION_SHA}" ]; then
|
||||
curl -sf -X PUT \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
-H "Content-Type: application/json" \
|
||||
--data "$(jq -n \
|
||||
--arg content "${VERSION_CONTENT}" \
|
||||
--arg sha "${VERSION_SHA}" \
|
||||
--arg message "${TITLE}" \
|
||||
--arg branch "next-release" \
|
||||
'{content: $content, sha: $sha, message: $message, branch: $branch}')" \
|
||||
"${API_URL}/contents/.version"
|
||||
else
|
||||
curl -sf -X POST \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
-H "Content-Type: application/json" \
|
||||
--data "$(jq -n \
|
||||
--arg content "${VERSION_CONTENT}" \
|
||||
--arg message "${TITLE}" \
|
||||
--arg branch "next-release" \
|
||||
'{content: $content, message: $message, branch: $branch}')" \
|
||||
"${API_URL}/contents/.version"
|
||||
# Explicitly create next-release branch from base
|
||||
echo "Creating next-release branch from ${BASE_BRANCH}..."
|
||||
BRANCH_PAYLOAD=$(jq -n --arg new "next-release" --arg old "${BASE_BRANCH}" \
|
||||
'{new_branch_name: $new, old_branch_name: $old}')
|
||||
for i in $(seq 1 5); do
|
||||
OUT=$(api_call POST "/branches" "${BRANCH_PAYLOAD}")
|
||||
META=$(meta_line "${OUT}"); BODY=$(body_lines "${OUT}"); CODE="${META%%|*}"
|
||||
if ok_code "${CODE}"; then
|
||||
echo "Branch created (${META})"
|
||||
break
|
||||
fi
|
||||
else
|
||||
echo "Creating new next-release branch from ${BASE_BRANCH}..."
|
||||
|
||||
# Check if CHANGELOG.md exists on base branch to determine create vs update
|
||||
CHANGELOG_SHA=$(curl -sf \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
"${API_URL}/contents/CHANGELOG.md?ref=${BASE_BRANCH}" | jq -r '.sha // empty')
|
||||
|
||||
if [ -n "${CHANGELOG_SHA}" ]; then
|
||||
echo "Updating CHANGELOG.md (exists on ${BASE_BRANCH}) on new branch..."
|
||||
RESPONSE=$(curl -s -w "\n%{http_code}" -X PUT \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
-H "Content-Type: application/json" \
|
||||
--data "$(jq -n \
|
||||
--arg content "${CHANGELOG_CONTENT}" \
|
||||
--arg sha "${CHANGELOG_SHA}" \
|
||||
--arg message "${TITLE}" \
|
||||
--arg branch "${BASE_BRANCH}" \
|
||||
--arg new_branch "next-release" \
|
||||
'{content: $content, sha: $sha, message: $message, branch: $branch, new_branch: $new_branch}')" \
|
||||
"${API_URL}/contents/CHANGELOG.md")
|
||||
else
|
||||
echo "Creating CHANGELOG.md on new branch..."
|
||||
RESPONSE=$(curl -s -w "\n%{http_code}" -X POST \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
-H "Content-Type: application/json" \
|
||||
--data "$(jq -n \
|
||||
--arg content "${CHANGELOG_CONTENT}" \
|
||||
--arg message "${TITLE}" \
|
||||
--arg branch "${BASE_BRANCH}" \
|
||||
--arg new_branch "next-release" \
|
||||
'{content: $content, message: $message, branch: $branch, new_branch: $new_branch}')" \
|
||||
"${API_URL}/contents/CHANGELOG.md")
|
||||
fi
|
||||
HTTP_CODE=$(echo "${RESPONSE}" | tail -1)
|
||||
BODY=$(echo "${RESPONSE}" | sed '$d')
|
||||
if [ "${HTTP_CODE}" -ge 400 ]; then
|
||||
echo "Error with CHANGELOG.md: ${BODY}"
|
||||
if [ "${i}" = "5" ]; then
|
||||
echo "Branch create failed after 5 attempts (${META}): ${BODY}"
|
||||
exit 1
|
||||
fi
|
||||
echo " attempt ${i}/5 (${META}): ${BODY} — retrying..."
|
||||
sleep 3
|
||||
done
|
||||
|
||||
# Check if .version exists on base branch
|
||||
VERSION_SHA=$(curl -sf \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
"${API_URL}/contents/.version?ref=${BASE_BRANCH}" | jq -r '.sha // empty')
|
||||
# Poll until branch is readable
|
||||
echo "Waiting for branch readiness..."
|
||||
for i in $(seq 1 10); do
|
||||
OUT=$(api_call GET "/branches/next-release")
|
||||
META=$(meta_line "${OUT}"); CODE="${META%%|*}"
|
||||
if [ "${CODE}" = "200" ]; then
|
||||
echo "Branch ready after ${i} attempt(s)"
|
||||
break
|
||||
fi
|
||||
if [ "${i}" = "10" ]; then
|
||||
echo "Branch not ready after 10 attempts (last: ${META})"
|
||||
exit 1
|
||||
fi
|
||||
echo " attempt ${i}/10 (${META}) — waiting..."
|
||||
sleep 2
|
||||
done
|
||||
|
||||
if [ -n "${VERSION_SHA}" ]; then
|
||||
echo "Updating .version on next-release branch..."
|
||||
curl -sf -X PUT \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
-H "Content-Type: application/json" \
|
||||
--data "$(jq -n \
|
||||
--arg content "${VERSION_CONTENT}" \
|
||||
--arg sha "${VERSION_SHA}" \
|
||||
# Fetch file blob SHA from BASE_BRANCH. next-release was just forked
|
||||
# from base so the blob SHA matches; querying base avoids racing
|
||||
# Gitea's per-endpoint propagation for the new branch (the /contents
|
||||
# endpoint can still 500/404 after /branches reports 200). Returns
|
||||
# empty only when the file genuinely does not exist on base.
|
||||
fetch_sha() {
|
||||
local path="$1" out meta code body
|
||||
for i in $(seq 1 5); do
|
||||
out=$(api_call GET "/contents/${path}?ref=${BASE_BRANCH}")
|
||||
meta=$(meta_line "${out}"); code="${meta%%|*}"; body=$(body_lines "${out}")
|
||||
if [ "${code}" = "200" ]; then
|
||||
printf '%s' "${body}" | jq -r '.sha // empty'
|
||||
return 0
|
||||
fi
|
||||
if [ "${code}" = "404" ]; then
|
||||
return 0
|
||||
fi
|
||||
if [ "${i}" = "5" ]; then
|
||||
echo "fetch_sha ${path} failed after 5 attempts (${meta}): ${body}" >&2
|
||||
return 0
|
||||
fi
|
||||
sleep 2
|
||||
done
|
||||
}
|
||||
CHANGELOG_SHA=$(fetch_sha "CHANGELOG.md")
|
||||
VERSION_SHA=$(fetch_sha ".version")
|
||||
|
||||
# Write file with retry. Args: PATH CONTENT_B64 [SHA]
|
||||
write_file() {
|
||||
local path="$1" content="$2" sha="${3:-}"
|
||||
local method payload out meta body code
|
||||
if [ -n "${sha}" ]; then
|
||||
method=PUT
|
||||
payload=$(jq -n \
|
||||
--arg content "${content}" \
|
||||
--arg sha "${sha}" \
|
||||
--arg message "${TITLE}" \
|
||||
--arg branch "next-release" \
|
||||
'{content: $content, sha: $sha, message: $message, branch: $branch}')" \
|
||||
"${API_URL}/contents/.version"
|
||||
'{content: $content, sha: $sha, message: $message, branch: $branch}')
|
||||
else
|
||||
echo "Creating .version on next-release branch..."
|
||||
curl -sf -X POST \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
-H "Content-Type: application/json" \
|
||||
--data "$(jq -n \
|
||||
--arg content "${VERSION_CONTENT}" \
|
||||
method=POST
|
||||
payload=$(jq -n \
|
||||
--arg content "${content}" \
|
||||
--arg message "${TITLE}" \
|
||||
--arg branch "next-release" \
|
||||
'{content: $content, message: $message, branch: $branch}')" \
|
||||
"${API_URL}/contents/.version"
|
||||
'{content: $content, message: $message, branch: $branch}')
|
||||
fi
|
||||
for i in $(seq 1 5); do
|
||||
out=$(api_call "${method}" "/contents/${path}" "${payload}")
|
||||
meta=$(meta_line "${out}"); body=$(body_lines "${out}"); code="${meta%%|*}"
|
||||
if ok_code "${code}"; then
|
||||
echo "${path} write succeeded (${meta})"
|
||||
return 0
|
||||
fi
|
||||
if [ "${i}" = "5" ]; then
|
||||
echo "${path} write failed after 5 attempts (${meta}): ${body}"
|
||||
return 1
|
||||
fi
|
||||
echo " ${path} attempt ${i}/5 (${meta}): ${body} — retrying..."
|
||||
sleep 3
|
||||
done
|
||||
}
|
||||
|
||||
if [ -n "${PR_INDEX}" ]; then
|
||||
echo "Updating existing PR #${PR_INDEX}..."
|
||||
curl -sf -X PATCH \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
-H "Content-Type: application/json" \
|
||||
--data "$(jq -n \
|
||||
--arg title "${TITLE}" \
|
||||
--arg body "${DESCRIPTION}" \
|
||||
'{title: $title, body: $body}')" \
|
||||
"${API_URL}/pulls/${PR_INDEX}"
|
||||
else
|
||||
echo "Creating new PR..."
|
||||
curl -sf -X POST \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
-H "Content-Type: application/json" \
|
||||
--data "$(jq -n \
|
||||
echo "Writing CHANGELOG.md to next-release..."
|
||||
write_file "CHANGELOG.md" "${CHANGELOG_CONTENT}" "${CHANGELOG_SHA}"
|
||||
echo "Writing .version to next-release..."
|
||||
write_file ".version" "${VERSION_CONTENT}" "${VERSION_SHA}"
|
||||
|
||||
# Create PR
|
||||
echo "Creating PR..."
|
||||
PR_DATA=$(jq -n \
|
||||
--arg title "${TITLE}" \
|
||||
--arg body "${DESCRIPTION}" \
|
||||
--arg head "next-release" \
|
||||
--arg base "${DEFAULT_BRANCH}" \
|
||||
'{title: $title, body: $body, head: $head, base: $base}')" \
|
||||
"${API_URL}/pulls"
|
||||
--arg base "${BASE_BRANCH}" \
|
||||
'{title: $title, body: $body, head: $head, base: $base}')
|
||||
for i in $(seq 1 5); do
|
||||
OUT=$(api_call POST "/pulls" "${PR_DATA}")
|
||||
META=$(meta_line "${OUT}"); BODY=$(body_lines "${OUT}"); CODE="${META%%|*}"
|
||||
if ok_code "${CODE}"; then
|
||||
echo "PR created (${META})"
|
||||
break
|
||||
fi
|
||||
if [ "${i}" = "5" ]; then
|
||||
echo "PR creation failed after 5 attempts (${META}): ${BODY}"
|
||||
exit 1
|
||||
fi
|
||||
echo " PR attempt ${i}/5 (${META}): ${BODY} — retrying..."
|
||||
sleep 3
|
||||
done
|
||||
|
||||
create-release:
|
||||
name: Create Release
|
||||
@@ -301,7 +276,7 @@ jobs:
|
||||
inputs.tag_only != true
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v6
|
||||
uses: actions/checkout@v7
|
||||
with:
|
||||
fetch-depth: 0
|
||||
|
||||
@@ -347,7 +322,7 @@ jobs:
|
||||
MESSAGE=$(cat CHANGES.md)
|
||||
|
||||
echo "Creating release ${VERSION}..."
|
||||
curl -sf -X POST \
|
||||
curl -sf --retry 3 --retry-delay 2 --retry-connrefused -X POST \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
-H "Content-Type: application/json" \
|
||||
--data "$(jq -n \
|
||||
@@ -368,7 +343,7 @@ jobs:
|
||||
inputs.tag_only == true
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v6
|
||||
uses: actions/checkout@v7
|
||||
with:
|
||||
fetch-depth: 0
|
||||
|
||||
@@ -409,7 +384,7 @@ jobs:
|
||||
API_URL="${GITEA_URL}/api/v1/repos/${OWNER}/${REPO}"
|
||||
|
||||
echo "Creating tag ${VERSION}..."
|
||||
curl -sf -X POST \
|
||||
curl -sf --retry 3 --retry-delay 2 --retry-connrefused -X POST \
|
||||
-H "Authorization: token ${TOKEN}" \
|
||||
-H "Content-Type: application/json" \
|
||||
--data "$(jq -n \
|
||||
|
||||
+3
-1
@@ -6,7 +6,9 @@
|
||||
"customManagers": [
|
||||
{
|
||||
"customType": "regex",
|
||||
"fileMatch": ["^\\.gitea/workflows/.*\\.ya?ml$"],
|
||||
"managerFilePatterns": [
|
||||
"/^\\.gitea/workflows/.*\\.ya?ml$/"
|
||||
],
|
||||
"matchStrings": [
|
||||
"GIT_CLIFF_VERSION:\\s*[\"']?(?<currentValue>[^\"'\\s]+)[\"']?"
|
||||
],
|
||||
|
||||
Reference in New Issue
Block a user