Moko Consulting
90bcabd2fa
Universal: Auto Version Bump / Version Bump (push) Has been cancelled
Generic: Repo Health / Site Health (push) Has been cancelled
Generic: Repo Health / Access control (push) Has been cancelled
Generic: Repo Health / Release configuration (push) Has been cancelled
Generic: Repo Health / Scripts governance (push) Has been cancelled
Generic: Repo Health / Repository health (push) Has been cancelled
312 lines
12 KiB
YAML
312 lines
12 KiB
YAML
# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
|
|
#
|
|
# SPDX-License-Identifier: GPL-3.0-or-later
|
|
#
|
|
# FILE INFORMATION
|
|
# DEFGROUP: Gitea.Workflow
|
|
# INGROUP: moko-platform.Universal
|
|
# REPO: https://git.mokoconsulting.tech/MokoConsulting/moko-platform
|
|
# PATH: /templates/workflows/update-server.yml
|
|
# VERSION: 05.00.00
|
|
# BRIEF: Pre-release build + update server XML for dev/alpha/beta/rc branches
|
|
#
|
|
# Thin wrapper around moko-platform CLI tools.
|
|
# Builds packages, updates updates.xml, and optionally deploys via SFTP.
|
|
#
|
|
# Joomla filters update entries by the user's "Minimum Stability" setting.
|
|
|
|
name: "Update Server"
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- 'dev'
|
|
- 'dev/**'
|
|
- 'alpha/**'
|
|
- 'beta/**'
|
|
- 'rc/**'
|
|
paths:
|
|
- 'src/**'
|
|
- 'htdocs/**'
|
|
pull_request:
|
|
types: [closed]
|
|
branches:
|
|
- 'dev'
|
|
- 'dev/**'
|
|
- 'alpha/**'
|
|
- 'beta/**'
|
|
- 'rc/**'
|
|
paths:
|
|
- 'src/**'
|
|
- 'htdocs/**'
|
|
workflow_dispatch:
|
|
inputs:
|
|
stability:
|
|
description: 'Stability tag'
|
|
required: true
|
|
default: 'development'
|
|
type: choice
|
|
options:
|
|
- development
|
|
- alpha
|
|
- beta
|
|
- rc
|
|
- stable
|
|
|
|
env:
|
|
FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
|
|
GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
|
|
GITEA_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
|
|
GITEA_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
|
|
|
|
permissions:
|
|
contents: write
|
|
|
|
jobs:
|
|
update-xml:
|
|
name: Update Server
|
|
runs-on: release
|
|
if: >-
|
|
github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch' || github.event_name == 'push'
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
with:
|
|
token: ${{ secrets.MOKOGITEA_TOKEN }}
|
|
fetch-depth: 0
|
|
|
|
- name: Setup moko-platform tools
|
|
env:
|
|
MOKO_CLONE_TOKEN: ${{ secrets.MOKOGITEA_TOKEN }}
|
|
MOKO_CLONE_HOST: git.mokoconsulting.tech/MokoConsulting
|
|
COMPOSER_AUTH: '{"http-basic":{"git.mokoconsulting.tech":{"username":"token","password":"${{ secrets.MOKOGITEA_TOKEN }}"}}}'
|
|
run: |
|
|
if ! command -v composer &> /dev/null; then
|
|
sudo apt-get update -qq && sudo apt-get install -y -qq php-cli php-mbstring php-xml php-zip php-curl composer >/dev/null 2>&1
|
|
fi
|
|
if [ -d "/tmp/moko-platform" ]; then
|
|
echo "moko-platform already available — skipping clone"
|
|
else
|
|
git clone --depth 1 --branch main --quiet \
|
|
"https://x-access-token:${MOKO_CLONE_TOKEN}@${MOKO_CLONE_HOST}/moko-platform.git" \
|
|
/tmp/moko-platform 2>/dev/null || true
|
|
fi
|
|
if [ -d "/tmp/moko-platform" ] && [ -f "/tmp/moko-platform/composer.json" ]; then
|
|
cd /tmp/moko-platform && composer install --no-dev --no-interaction --quiet 2>/dev/null || true
|
|
fi
|
|
echo "MOKO_CLI=/tmp/moko-platform/cli" >> "$GITHUB_ENV"
|
|
|
|
- name: Detect platform
|
|
id: platform
|
|
run: php ${MOKO_CLI}/manifest_read.php --path . --github-output
|
|
|
|
- name: Resolve stability and bump version
|
|
id: meta
|
|
run: |
|
|
BRANCH="${{ github.ref_name }}"
|
|
|
|
# Configure git for bot pushes
|
|
git config --local user.email "gitea-actions[bot]@mokoconsulting.tech"
|
|
git config --local user.name "gitea-actions[bot]"
|
|
git remote set-url origin "https://x-access-token:${{ secrets.MOKOGITEA_TOKEN }}@git.mokoconsulting.tech/${{ github.repository }}.git"
|
|
|
|
# Auto-bump patch version
|
|
php ${MOKO_CLI}/version_bump.php --path . 2>/dev/null || true
|
|
|
|
VERSION=$(php ${MOKO_CLI}/version_read.php --path . 2>/dev/null || echo "0.0.0")
|
|
|
|
# Determine stability from branch or manual input
|
|
if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
|
|
STABILITY="${{ inputs.stability }}"
|
|
elif [[ "$BRANCH" == rc/* ]]; then
|
|
STABILITY="rc"
|
|
elif [[ "$BRANCH" == beta/* ]]; then
|
|
STABILITY="beta"
|
|
elif [[ "$BRANCH" == alpha/* ]]; then
|
|
STABILITY="alpha"
|
|
else
|
|
STABILITY="development"
|
|
fi
|
|
|
|
# Version suffix per stability stream
|
|
case "$STABILITY" in
|
|
development) SUFFIX="-dev"; TAG="development" ;;
|
|
alpha) SUFFIX="-alpha"; TAG="alpha" ;;
|
|
beta) SUFFIX="-beta"; TAG="beta" ;;
|
|
rc) SUFFIX="-rc"; TAG="release-candidate" ;;
|
|
*) SUFFIX=""; TAG="stable" ;;
|
|
esac
|
|
|
|
# Propagate version with stability suffix to all manifest files
|
|
php ${MOKO_CLI}/version_set_platform.php \
|
|
--path . --version "$VERSION" --branch "$BRANCH" --stability "$STABILITY" 2>/dev/null || true
|
|
php ${MOKO_CLI}/version_check.php --path . --fix 2>/dev/null || true
|
|
|
|
# Re-read version (now includes suffix from version_set_platform)
|
|
if [ -n "$SUFFIX" ]; then
|
|
VERSION="${VERSION}${SUFFIX}"
|
|
fi
|
|
|
|
echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
|
|
echo "stability=${STABILITY}" >> "$GITHUB_OUTPUT"
|
|
echo "suffix=${SUFFIX}" >> "$GITHUB_OUTPUT"
|
|
echo "tag=${TAG}" >> "$GITHUB_OUTPUT"
|
|
echo "display_version=${VERSION}" >> "$GITHUB_OUTPUT"
|
|
|
|
# Commit version bump if changed
|
|
git add -A
|
|
git diff --cached --quiet || {
|
|
git commit -m "chore(version): auto-bump ${VERSION} [skip ci]" \
|
|
--author="gitea-actions[bot] <gitea-actions[bot]@mokoconsulting.tech>"
|
|
git push
|
|
}
|
|
|
|
- name: Create release and upload package
|
|
id: package
|
|
run: |
|
|
VERSION="${{ steps.meta.outputs.version }}"
|
|
TAG="${{ steps.meta.outputs.tag }}"
|
|
API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
|
|
|
|
# Create or update Gitea release
|
|
php ${MOKO_CLI}/release_create.php \
|
|
--path . --version "$VERSION" --tag "$TAG" \
|
|
--token "${{ secrets.MOKOGITEA_TOKEN }}" --api-base "$API_BASE" \
|
|
--repo "${GITEA_REPO}" --branch "${{ github.ref_name }}" --prerelease
|
|
|
|
# Build package and upload
|
|
php ${MOKO_CLI}/release_package.php \
|
|
--path . --version "$VERSION" --tag "$TAG" \
|
|
--token "${{ secrets.MOKOGITEA_TOKEN }}" --api-base "$API_BASE" \
|
|
--repo "${GITEA_REPO}" --output /tmp || true
|
|
|
|
- name: Update updates.xml
|
|
if: steps.platform.outputs.platform == 'joomla'
|
|
run: |
|
|
VERSION="${{ steps.meta.outputs.version }}"
|
|
STABILITY="${{ steps.meta.outputs.stability }}"
|
|
SHA256="${{ steps.package.outputs.sha256_zip }}"
|
|
|
|
if [ ! -f "updates.xml" ]; then
|
|
echo "No updates.xml — skipping"
|
|
exit 0
|
|
fi
|
|
|
|
SHA_FLAG=""
|
|
[ -n "$SHA256" ] && SHA_FLAG="--sha ${SHA256}"
|
|
|
|
php ${MOKO_CLI}/updates_xml_build.php \
|
|
--path . --version "${VERSION}" --stability "${STABILITY}" \
|
|
--gitea-url "${GITEA_URL}" --org "${GITEA_ORG}" --repo "${GITEA_REPO}" \
|
|
${SHA_FLAG}
|
|
|
|
# Commit and push updates.xml
|
|
git add updates.xml
|
|
git diff --cached --quiet || {
|
|
git commit -m "chore: update ${STABILITY} channel ${VERSION} [skip ci]"
|
|
git push
|
|
}
|
|
|
|
- name: Sync updates.xml to main
|
|
if: github.ref_name != 'main' && steps.platform.outputs.platform == 'joomla'
|
|
run: |
|
|
API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
|
|
GITEA_TOKEN="${{ secrets.MOKOGITEA_TOKEN }}"
|
|
|
|
FILE_SHA=$(curl -sf -H "Authorization: token ${GITEA_TOKEN}" \
|
|
"${API_BASE}/contents/updates.xml?ref=main" | python3 -c "import sys,json; print(json.load(sys.stdin).get('sha',''))" 2>/dev/null || true)
|
|
|
|
if [ -n "$FILE_SHA" ] && [ -f "updates.xml" ]; then
|
|
python3 -c "
|
|
import base64, json, urllib.request, sys
|
|
with open('updates.xml', 'rb') as f:
|
|
content = base64.b64encode(f.read()).decode()
|
|
payload = json.dumps({
|
|
'content': content,
|
|
'sha': '${FILE_SHA}',
|
|
'message': 'chore: sync updates.xml from ${{ steps.meta.outputs.stability }} [skip ci]',
|
|
'branch': 'main'
|
|
}).encode()
|
|
req = urllib.request.Request(
|
|
'${API_BASE}/contents/updates.xml',
|
|
data=payload, method='PUT',
|
|
headers={
|
|
'Authorization': 'token ${GITEA_TOKEN}',
|
|
'Content-Type': 'application/json'
|
|
})
|
|
try:
|
|
urllib.request.urlopen(req)
|
|
print('updates.xml synced to main')
|
|
except Exception as e:
|
|
print(f'WARNING: sync to main failed: {e}', file=sys.stderr)
|
|
"
|
|
fi
|
|
|
|
- name: SFTP deploy to dev server
|
|
if: contains(github.ref, 'dev/') || github.ref == 'refs/heads/dev'
|
|
env:
|
|
DEV_HOST: ${{ vars.DEV_FTP_HOST }}
|
|
DEV_PATH: ${{ vars.DEV_FTP_PATH }}
|
|
DEV_SUFFIX: ${{ vars.DEV_FTP_SUFFIX }}
|
|
DEV_USER: ${{ vars.DEV_FTP_USERNAME }}
|
|
DEV_PORT: ${{ vars.DEV_FTP_PORT }}
|
|
DEV_KEY: ${{ secrets.DEV_FTP_KEY }}
|
|
DEV_PASS: ${{ secrets.DEV_FTP_PASSWORD }}
|
|
run: |
|
|
# Permission check: admin or maintain role required
|
|
ACTOR="${{ github.actor }}"
|
|
API_BASE="${GITEA_URL}/api/v1/repos/${GITEA_ORG}/${GITEA_REPO}"
|
|
|
|
PERMISSION=$(curl -sf -H "Authorization: token ${{ secrets.MOKOGITEA_TOKEN }}" \
|
|
"${API_BASE}/collaborators/${ACTOR}/permission" 2>/dev/null | \
|
|
python3 -c "import sys,json; print(json.load(sys.stdin).get('permission','read'))" 2>/dev/null || echo "read")
|
|
case "$PERMISSION" in
|
|
admin|maintain|write) ;;
|
|
*)
|
|
echo "Deploy denied: ${ACTOR} has '${PERMISSION}' — requires admin, maintain, or write"
|
|
exit 0
|
|
;;
|
|
esac
|
|
|
|
[ -z "$DEV_HOST" ] || [ -z "$DEV_PATH" ] && { echo "DEV FTP not configured — skipping SFTP"; exit 0; }
|
|
|
|
SOURCE_DIR="src"
|
|
[ ! -d "$SOURCE_DIR" ] && SOURCE_DIR="htdocs"
|
|
[ ! -d "$SOURCE_DIR" ] && exit 0
|
|
|
|
PORT="${DEV_PORT:-22}"
|
|
REMOTE="${DEV_PATH%/}"
|
|
[ -n "$DEV_SUFFIX" ] && REMOTE="${REMOTE}/${DEV_SUFFIX#/}"
|
|
|
|
printf '{"host":"%s","port":%s,"username":"%s","remotePath":"%s"' \
|
|
"$DEV_HOST" "$PORT" "$DEV_USER" "$REMOTE" > /tmp/sftp-config.json
|
|
if [ -n "$DEV_KEY" ]; then
|
|
echo "$DEV_KEY" > /tmp/deploy_key && chmod 600 /tmp/deploy_key
|
|
printf ',"privateKeyPath":"/tmp/deploy_key"}' >> /tmp/sftp-config.json
|
|
else
|
|
printf ',"password":"%s"}' "$DEV_PASS" >> /tmp/sftp-config.json
|
|
fi
|
|
|
|
PLATFORM=$(php ${MOKO_CLI}/platform_detect.php --path . 2>/dev/null || true)
|
|
if [ "$PLATFORM" = "waas-component" ] && [ -f "${MOKO_CLI}/../deploy/deploy-joomla.php" ]; then
|
|
php ${MOKO_CLI}/../deploy/deploy-joomla.php --path . --src-dir "$SOURCE_DIR" --config /tmp/sftp-config.json
|
|
elif [ -f "${MOKO_CLI}/../deploy/deploy-sftp.php" ]; then
|
|
php ${MOKO_CLI}/../deploy/deploy-sftp.php --path . --src-dir "$SOURCE_DIR" --config /tmp/sftp-config.json
|
|
fi
|
|
rm -f /tmp/deploy_key /tmp/sftp-config.json
|
|
echo "SFTP deploy to dev complete" >> $GITHUB_STEP_SUMMARY
|
|
|
|
- name: Summary
|
|
if: always()
|
|
run: |
|
|
VERSION="${{ steps.meta.outputs.version }}"
|
|
STABILITY="${{ steps.meta.outputs.stability }}"
|
|
DISPLAY="${{ steps.meta.outputs.display_version }}"
|
|
echo "## Update Server" >> $GITHUB_STEP_SUMMARY
|
|
echo "" >> $GITHUB_STEP_SUMMARY
|
|
echo "| Field | Value |" >> $GITHUB_STEP_SUMMARY
|
|
echo "|-------|-------|" >> $GITHUB_STEP_SUMMARY
|
|
echo "| Stability | \`${STABILITY}\` |" >> $GITHUB_STEP_SUMMARY
|
|
echo "| Version | \`${DISPLAY}\` |" >> $GITHUB_STEP_SUMMARY
|