k1nq/TREK
1
0
Fork 0
mirror of https://github.com/mauriceboe/TREK.git synced 2026-11-12 23:31:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci(release): ship the registration dialect with the version bump

Browse Source 
The stable release asks the issuer for the registration dialect of the
version it cuts and commits it in the bump commit. Fetching and checking run
in a job of their own that holds no write token and keeps no git
credentials: scripts/ci/check-registration-dialect.mjs refuses a file that
imports or names anything beyond hashing, then runs it on its self-check
inputs. Only a file that passes reaches the bump as an artifact. When the
issuer is unreachable or its answer fails the check, the release goes ahead
with the dialect already on main and says so in the log and the summary.

Prereleases get no dialect of their own; dev takes the stable one through
the merge of main into dev after a release, and docker-dev.yml warns while
dev still speaks the original registration or a dialect older than 150 days.
This commit is contained in:
Maurice
2026-10-29 17:34:09 +01:00
parent 3ca73d432b
commit 6d245ab4da
4 changed files with 500 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/docker-dev.yml
+25
View File
@@ -5,6 +5,10 @@ name: Build & Push Docker Image (Prerelease)
# :latest-pre, and tags the commit. Nothing moves :latest. Like the stable
# release it refuses a commit whose ci-ok is not green. docker.yml with
# bump=auto later finalizes the line once main carries it.
#
# A prerelease gets no registration dialect of its own; it carries the one of
# the last stable release, which dev gets by merging main into dev after that
# release. The build warns when that dialect is the original one or old.
on:
workflow_dispatch:
@@ -89,6 +93,27 @@ jobs:
echo "VERSION=$NEW_VERSION" >> "$GITHUB_OUTPUT"
echo "$STABLE to $NEW_VERSION"
# A prerelease registers new installations in the dialect of the last
# stable release, which reaches dev when main is merged into dev after
# the release. The issuer takes a dialect for 180 days, so this warns
# (without stopping the build) while dev still speaks the original
# registration or a dialect older than 150 days.
- name: Check the registration dialect's age
run: |
set -eu
file=server/src/nest/service-identity/registration-dialect.ts
id="$(sed -n "s/^const DIALECT = '\(.*\)';$/\1/p" "$file")"
created="$(sed -n "s/^ createdAt: '\(.*\)',$/\1/p" "$file")"
if [ "$id" = 0 ]; then
message="This build registers in the original dialect, which the issuer accepts only for a transition period. Merge main into dev once a stable release carries a dialect of its own."
else
age=$(( ($(date -u +%s) - $(date -u -d "$created" +%s)) / 86400 ))
[ "$age" -gt 150 ] || { echo "This build registers in dialect $id from $created ($age days old)."; exit 0; }
message="This build registers in dialect $id from $created, $age days old; new installations of it stop registering on $(date -u -d "$created + 180 days" +%Y-%m-%d). Merge main into dev after the next stable release."
fi
echo "::warning::$message"
printf '### Registration dialect\n%s\n' "$message" >> "$GITHUB_STEP_SUMMARY"
build:
runs-on: ${{ matrix.runner }}
timeout-minutes: 120