75 lines
3.8 KiB
Bash
Executable File
75 lines
3.8 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Builds and signs a WP-LIT-MCP release from the committed state. It publishes nothing: tag, Gitea release and the
|
|
# upload of the two files in dist/ are done afterwards, then bin/release-check.sh looks at the result.
|
|
#
|
|
# bin/release.sh
|
|
#
|
|
# Needs: bsdtar, composer, php (sodium). The signing key (php bin/release-sign.php keygen) lives outside the
|
|
# repository.
|
|
#
|
|
# Environment: LIT_MCP_RELEASE_KEY (default ~/.config/wp-lit-mcp/release.key), LIT_MCP_DIVI_CHECK (command that must
|
|
# succeed before a release, default: ddev wp --user=janniclas lit-mcp divi-check).
|
|
set -euo pipefail
|
|
|
|
root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
cd "$root"
|
|
|
|
key="${LIT_MCP_RELEASE_KEY:-$HOME/.config/wp-lit-mcp/release.key}"
|
|
divi_check="${LIT_MCP_DIVI_CHECK:-ddev wp --user=janniclas lit-mcp divi-check}"
|
|
|
|
fail() { echo "ABBRUCH: $*" >&2; exit 1; }
|
|
step() { echo "==> $*"; }
|
|
|
|
# --- 1. The three version places agree, the tree is committed, nothing is released twice ----------------------------
|
|
step "Version und Zustand prüfen"
|
|
version="$(sed -n "s/.*const VERSION = '\(.*\)';/\1/p" src/Plugin.php)"
|
|
[[ "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]] || fail "Plugin::VERSION ist keine Version x.y.z: '$version'"
|
|
[[ "$(sed -n 's/^ \* Version: //p' wp-lit-mcp.php)" == "$version" ]] || fail "Header-Version in wp-lit-mcp.php weicht ab"
|
|
[[ "$(sed -n 's/^Stable tag: //p' readme.txt)" == "$version" ]] || fail "Stable tag in readme.txt weicht ab"
|
|
grep -q "^= $version =\$" readme.txt || fail "readme.txt hat keinen Changelog-Eintrag für $version"
|
|
[[ -z "$(git status --porcelain)" ]] || fail "Arbeitsbaum nicht sauber: erst committen, das ZIP entsteht aus HEAD"
|
|
! git rev-parse -q --verify "refs/tags/v$version" >/dev/null || fail "Tag v$version existiert schon"
|
|
[[ -r "$key" ]] || fail "Signierschlüssel fehlt: $key (php bin/release-sign.php keygen <Datei>)"
|
|
|
|
# --- 2. Tests and the Divi check must be green ------------------------------------------------------------------------
|
|
step "Tests"
|
|
composer test
|
|
step "Divi-Prüfung ($divi_check)"
|
|
eval "$divi_check" || fail "Divi-Prüfung nicht grün: kein Release"
|
|
|
|
# --- 3. Build from the commit: git archive honours export-ignore, then production dependencies ----------------------
|
|
step "ZIP bauen"
|
|
work="$(mktemp -d)"
|
|
trap 'rm -rf "$work"' EXIT
|
|
mkdir "$work/wp-lit-mcp"
|
|
git archive HEAD | tar -x -C "$work/wp-lit-mcp"
|
|
(cd "$work/wp-lit-mcp" && composer install --no-dev --optimize-autoloader --no-interaction --quiet)
|
|
name="wp-lit-mcp-$version.zip"
|
|
mkdir -p dist
|
|
zip="$root/dist/$name"
|
|
rm -f "$zip" "$zip.sig"
|
|
(cd "$work" && bsdtar --format zip -cf "$zip" wp-lit-mcp)
|
|
|
|
# --- 4. Look into the ZIP like WordPress will: one folder, the plugin, its autoloader, the right version --------------
|
|
step "ZIP prüfen"
|
|
entries="$(bsdtar -tf "$zip")"
|
|
if grep -qv '^wp-lit-mcp/' <<<"$entries"; then fail "ZIP enthält Einträge außerhalb von wp-lit-mcp/"; fi
|
|
for need in wp-lit-mcp/wp-lit-mcp.php wp-lit-mcp/vendor/autoload_packages.php; do
|
|
grep -qx "$need" <<<"$entries" || fail "Im ZIP fehlt $need"
|
|
done
|
|
if grep -qE '^wp-lit-mcp/(tests|bin|docs/superpowers|\.git)(/|$)' <<<"$entries"; then
|
|
fail "Entwicklungsdateien im ZIP"
|
|
fi
|
|
[[ "$(bsdtar -xOf "$zip" wp-lit-mcp/wp-lit-mcp.php | sed -n 's/^ \* Version: //p')" == "$version" ]] \
|
|
|| fail "Version im ZIP stimmt nicht mit $version überein"
|
|
|
|
# --- 5. Sign, and prove the signature against the key built into the plugin -------------------------------------------
|
|
step "Signieren"
|
|
php bin/release-sign.php sign "$zip" "$key" > "$zip.sig"
|
|
php bin/release-sign.php verify "$zip" "$zip.sig" >/dev/null \
|
|
|| fail "Signatur passt nicht zum Schlüssel im Plugin (PackageSignature::RELEASE_KEY)"
|
|
|
|
echo "In Ordnung: dist/$name und dist/$name.sig"
|
|
echo "Weiter: Tag v$version und Release auf Gitea anlegen, beide Dateien hochladen, veröffentlichen."
|
|
echo "Danach: bin/release-check.sh $version"
|