|
| 1 | +name: Validate Web Console |
| 2 | + |
| 3 | +on: |
| 4 | + workflow_dispatch: |
| 5 | + |
| 6 | +permissions: |
| 7 | + contents: read |
| 8 | + |
| 9 | +jobs: |
| 10 | + validate: |
| 11 | + runs-on: ubuntu-24.04 |
| 12 | + timeout-minutes: 45 |
| 13 | + steps: |
| 14 | + - name: Check out immutable Web Console source |
| 15 | + env: |
| 16 | + SOURCE_SHA: ${{ github.sha }} |
| 17 | + run: | |
| 18 | + set -euo pipefail |
| 19 | + git init . |
| 20 | + git remote add origin "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git" |
| 21 | + git fetch --depth=1 origin "$SOURCE_SHA" |
| 22 | + git -c advice.detachedHead=false checkout --detach FETCH_HEAD |
| 23 | + test "$(git rev-parse HEAD)" = "$SOURCE_SHA" |
| 24 | + test -z "$(git status --short)" |
| 25 | +
|
| 26 | + - name: Install pinned Node.js |
| 27 | + env: |
| 28 | + NODE_VERSION: 24.18.0 |
| 29 | + NODE_ARCHIVE_SHA256: 55aa7153f9d88f28d765fcdad5ae6945b5c0f98a36881703817e4c450fa76742 |
| 30 | + run: | |
| 31 | + set -euo pipefail |
| 32 | + archive="$RUNNER_TEMP/node.tar.xz" |
| 33 | + curl \ |
| 34 | + --proto '=https' \ |
| 35 | + --tlsv1.2 \ |
| 36 | + --fail \ |
| 37 | + --silent \ |
| 38 | + --show-error \ |
| 39 | + --location \ |
| 40 | + --retry 5 \ |
| 41 | + --retry-all-errors \ |
| 42 | + --retry-delay 2 \ |
| 43 | + -o "$archive" \ |
| 44 | + "https://nodejs.org/dist/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-x64.tar.xz" |
| 45 | + printf '%s %s\n' "$NODE_ARCHIVE_SHA256" "$archive" | |
| 46 | + sha256sum --check |
| 47 | + mkdir -p "$RUNNER_TEMP/node" |
| 48 | + tar -xJf "$archive" --strip-components=1 -C "$RUNNER_TEMP/node" |
| 49 | + echo "$RUNNER_TEMP/node/bin" >>"$GITHUB_PATH" |
| 50 | +
|
| 51 | + - name: Test and build twice |
| 52 | + id: build |
| 53 | + env: |
| 54 | + PASTURESTACK_NODE24_IMAGE: node:24.18.0-bookworm@sha256:5711a0d445a1af54af9589066c646df387d1831a608226f4cd694fc59e745059 |
| 55 | + UI_COMPATIBILITY_VERSION: 1.6.56 |
| 56 | + run: | |
| 57 | + set -euo pipefail |
| 58 | + test "$(node --version)" = v24.18.0 |
| 59 | + npm ci --ignore-scripts --no-audit --no-fund |
| 60 | + bash scripts/ci |
| 61 | +
|
| 62 | + source_date_epoch=$(git show -s --format=%ct "$GITHUB_SHA") |
| 63 | + export SOURCE_DATE_EPOCH="$source_date_epoch" |
| 64 | + work_root=$(mktemp -d) |
| 65 | + cleanup() { |
| 66 | + rm -rf "$work_root" |
| 67 | + } |
| 68 | + trap cleanup EXIT |
| 69 | +
|
| 70 | + build_candidate() { |
| 71 | + output=$1 |
| 72 | + rm -rf dist |
| 73 | + ./node_modules/.bin/ember build --environment production |
| 74 | + bash scripts/package-static-candidate \ |
| 75 | + "$UI_COMPATIBILITY_VERSION" \ |
| 76 | + dist \ |
| 77 | + "$output" |
| 78 | + } |
| 79 | +
|
| 80 | + build_candidate "$work_root/web-console-a.tar.gz" |
| 81 | + build_candidate "$work_root/web-console-b.tar.gz" |
| 82 | + cmp "$work_root/web-console-a.tar.gz" "$work_root/web-console-b.tar.gz" |
| 83 | + artifact_sha=$(sha256sum "$work_root/web-console-a.tar.gz" | awk '{print $1}') |
| 84 | + test "$(tar -tzf "$work_root/web-console-a.tar.gz" | |
| 85 | + grep -Ec "^${UI_COMPATIBILITY_VERSION}/translations/zh-tw\\.json$")" -eq 1 |
| 86 | + if tar -tzf "$work_root/web-console-a.tar.gz" | grep -Eq '\.map$'; then |
| 87 | + echo WEB_CONSOLE_SOURCE_MAP_PRESENT >&2 |
| 88 | + exit 1 |
| 89 | + fi |
| 90 | + printf 'WEB_CONSOLE_VALIDATION_OK source=%s package=%s compatibility=%s sha256=%s\n' \ |
| 91 | + "$GITHUB_SHA" \ |
| 92 | + "$(node -p 'require("./package.json").version')" \ |
| 93 | + "$UI_COMPATIBILITY_VERSION" \ |
| 94 | + "$artifact_sha" |
| 95 | + package_version=$(node -p 'require("./package.json").version') |
| 96 | + release_asset="$RUNNER_TEMP/web-console-${package_version}.tar.gz" |
| 97 | + cp "$work_root/web-console-a.tar.gz" "$release_asset" |
| 98 | + sha256sum "$release_asset" >"${release_asset}.sha256" |
| 99 | + printf 'package_version=%s\nrelease_asset=%s\n' \ |
| 100 | + "$package_version" "$release_asset" >>"$GITHUB_OUTPUT" |
| 101 | +
|
| 102 | + - name: Retain reviewed candidate for release |
| 103 | + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 |
| 104 | + with: |
| 105 | + name: web-console-${{ steps.build.outputs.package_version }} |
| 106 | + path: | |
| 107 | + ${{ steps.build.outputs.release_asset }} |
| 108 | + ${{ steps.build.outputs.release_asset }}.sha256 |
| 109 | + if-no-files-found: error |
| 110 | + retention-days: 30 |
| 111 | + compression-level: 0 |
0 commit comments