fc1de08561
Root cause: update-homebrew.yml triggered on release:published, which fires before softprops/action-gh-release finishes uploading assets. The workflow downloaded a 404 page instead of the DMG and committed its SHA. Fix: - Change trigger from release:published to workflow_run (fires after the release workflow completes, guaranteeing assets are uploaded) - Add download validation with retries and file size checks - Add SHA verification step before committing to the cask - Add homebrew cask update to build-sign-upload.sh for local releases - Add regression test (tests/test_homebrew_sha.sh) - Update /release and /release-local skills with homebrew verification steps Fixes #110
52 lines
1.6 KiB
Bash
Executable file
52 lines
1.6 KiB
Bash
Executable file
#!/bin/bash
|
|
# Regression test: verify the homebrew cask SHA256 matches the actual release DMG.
|
|
# Catches issues like https://github.com/manaflow-ai/cmux/issues/110 where a race
|
|
# condition caused the cask to contain the SHA of a 404 page instead of the DMG.
|
|
set -euo pipefail
|
|
|
|
CASK_FILE="$(dirname "$0")/../homebrew-cmux/Casks/cmux.rb"
|
|
|
|
if [ ! -f "$CASK_FILE" ]; then
|
|
echo "SKIP: homebrew-cmux submodule not initialized"
|
|
exit 0
|
|
fi
|
|
|
|
VERSION=$(grep 'version "' "$CASK_FILE" | head -1 | sed 's/.*"\(.*\)".*/\1/')
|
|
CASK_SHA=$(grep 'sha256 "' "$CASK_FILE" | head -1 | sed 's/.*"\(.*\)".*/\1/')
|
|
|
|
if [ -z "$VERSION" ] || [ -z "$CASK_SHA" ]; then
|
|
echo "FAIL: could not parse version/sha256 from $CASK_FILE"
|
|
exit 1
|
|
fi
|
|
|
|
echo "Cask version: $VERSION"
|
|
echo "Cask SHA256: $CASK_SHA"
|
|
|
|
URL="https://github.com/manaflow-ai/cmux/releases/download/v${VERSION}/cmux-macos.dmg"
|
|
TMPFILE=$(mktemp)
|
|
trap 'rm -f "$TMPFILE"' EXIT
|
|
|
|
HTTP_CODE=$(curl -sL -w '%{http_code}' "$URL" -o "$TMPFILE")
|
|
FILE_SIZE=$(stat -f%z "$TMPFILE" 2>/dev/null || stat --printf="%s" "$TMPFILE")
|
|
|
|
if [ "$HTTP_CODE" != "200" ]; then
|
|
echo "FAIL: download returned HTTP $HTTP_CODE (expected 200)"
|
|
exit 1
|
|
fi
|
|
|
|
if [ "$FILE_SIZE" -lt 1000000 ]; then
|
|
echo "FAIL: downloaded file is only $FILE_SIZE bytes (expected >1MB for a DMG)"
|
|
exit 1
|
|
fi
|
|
|
|
ACTUAL_SHA=$(shasum -a 256 "$TMPFILE" | cut -d' ' -f1)
|
|
echo "Actual SHA256: $ACTUAL_SHA"
|
|
|
|
if [ "$CASK_SHA" != "$ACTUAL_SHA" ]; then
|
|
echo "FAIL: SHA256 mismatch!"
|
|
echo " Cask: $CASK_SHA"
|
|
echo " Actual: $ACTUAL_SHA"
|
|
exit 1
|
|
fi
|
|
|
|
echo "PASS: homebrew cask SHA256 matches release DMG"
|