mrleo1nidandClaude Opus 5.5
4fa1add80d
ci / contract (сгенерированный код совпадает с openapi.yaml) (push) Successful in 48s
ci / api (push) Successful in 51s
ci / recommender (push) Canceled after 2s
ci / ts (packages + web) (push) Canceled after 0s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (apps/web/Dockerfile, web, ) (push) Canceled after 0s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/api/Dockerfile, api, api) (push) Canceled after 0s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/api/Dockerfile, storage-agent, storage-agent) (push) Canceled after 0s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/recommender/Dockerfile, recommender, ) (push) Canceled after 0s
ci / mobile (Metro-бандл Android) (push) Canceled after 0s
Security and robustness: - storage-agent rejects an empty INTERNAL_TOKEN (config notEmpty + middleware) - api takes the client IP only from X-Real-IP (chi RealIP trusted True-Client-IP) - /readyz reports ok/fail and logs the cause; checks run in parallel with a timeout - storage-agent shuts down gracefully; shared httpx.NewServer/Serve with IdleTimeout - goose migrations take a Postgres advisory lock - recommender readyz: per-check timeout, redis socket timeouts Clients: - Android release allows cleartext HTTP for LAN servers (expo-build-properties) - checkServer times out after 10s; connect button is disabled while checking Deploy and CI: - install.sh hands cache/uploads/updates/models to the non-root service users - update.sh refuses downgrades unless PIPU_ALLOW_DOWNGRADE=1 - recommender/analyzer get only the env they need; required secrets fail fast - nginx security headers and CSP; strip True-Client-IP - dev compose binds ports to 127.0.0.1; postgres/redis images pinned - version.mjs fails on a malformed explicit tag instead of releasing 0.0.0-dev - contract check catches untracked generated files - final releases fail without a release keystore; changelog skips rc tags Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
52 lines
2.2 KiB
JavaScript
52 lines
2.2 KiB
JavaScript
#!/usr/bin/env node
|
|
// Вычисляет версию продукта из git-тега (docs/ci-cd.md#версионирование).
|
|
// node scripts/version.mjs v1.2.3 → печатает KEY=VALUE (для $GITHUB_ENV / $GITHUB_OUTPUT);
|
|
// тег не по формату — ошибка (релиз не должен стать 0.0.0-dev)
|
|
// node scripts/version.mjs → берёт GITHUB_REF_NAME, если это релизный тег, иначе 0.0.0-dev
|
|
//
|
|
// Android versionCode = MAJOR·1 000 000 + MINOR·10 000 + PATCH·100 + (99 для релиза | N для -rc.N),
|
|
// поэтому 1.2.0-rc.1 < 1.2.0-rc.2 < 1.2.0 < 1.2.1.
|
|
|
|
import { resolve } from 'node:path';
|
|
import { fileURLToPath } from 'node:url';
|
|
|
|
const TAG_RE = /^v?(\d+)\.(\d+)\.(\d+)(?:-rc\.(\d+))?$/;
|
|
|
|
export function parseVersion(tag) {
|
|
const m = TAG_RE.exec(tag.trim());
|
|
if (!m) throw new Error(`not a release tag: ${tag} (expected vMAJOR.MINOR.PATCH or vMAJOR.MINOR.PATCH-rc.N)`);
|
|
const [major, minor, patch] = [m[1], m[2], m[3]].map(Number);
|
|
const rc = m[4] === undefined ? null : Number(m[4]);
|
|
if (minor > 99 || patch > 99) throw new Error(`minor and patch must be <= 99: ${tag}`);
|
|
if (rc !== null && (rc < 1 || rc > 98)) throw new Error(`rc number must be 1..98: ${tag}`);
|
|
const version = `${major}.${minor}.${patch}${rc === null ? '' : `-rc.${rc}`}`;
|
|
const versionCode = major * 1_000_000 + minor * 10_000 + patch * 100 + (rc ?? 99);
|
|
return { version, versionCode, prerelease: rc !== null };
|
|
}
|
|
|
|
const DEV = { version: '0.0.0-dev', versionCode: 1, prerelease: true };
|
|
|
|
export function resolveVersion(argTag, refName) {
|
|
if (argTag !== undefined) return parseVersion(argTag);
|
|
const ref = refName ?? '';
|
|
return TAG_RE.test(ref) ? parseVersion(ref) : DEV;
|
|
}
|
|
|
|
function main() {
|
|
let v;
|
|
try {
|
|
v = resolveVersion(process.argv[2], process.env.GITHUB_REF_NAME);
|
|
} catch (e) {
|
|
process.stderr.write(`${e.message}
|
|
`);
|
|
process.exit(1);
|
|
}
|
|
process.stdout.write(
|
|
`PIPU_VERSION=${v.version}\nPIPU_VERSION_CODE=${v.versionCode}\nPIPU_PRERELEASE=${v.prerelease}\n`,
|
|
);
|
|
}
|
|
|
|
if (process.argv[1] && fileURLToPath(import.meta.url) === resolve(process.argv[1])) {
|
|
main();
|
|
}
|