70 lines
2.9 KiB
Python
70 lines
2.9 KiB
Python
#!/usr/bin/env python3
|
|
"""Validate the version and checked-in artifacts for a LinkLog release."""
|
|
|
|
import json
|
|
import re
|
|
import sys
|
|
import zipfile
|
|
from pathlib import Path
|
|
|
|
|
|
ROOT = Path(__file__).resolve().parents[2]
|
|
MANIFEST_PATH = ROOT / 'webextension' / 'manifest.json'
|
|
FRONTEND_VERSION_PATH = ROOT / 'frontend' / 'version.json'
|
|
SETTINGS_PATH = ROOT / 'backend' / 'app' / 'core' / 'config.py'
|
|
UPDATES_PATH = ROOT / 'webextension' / 'updates.json'
|
|
SIGNED_DIR = ROOT / 'XPI' / 'signed'
|
|
|
|
|
|
def fail(message: str) -> None:
|
|
raise SystemExit(f'release validation failed: {message}')
|
|
|
|
|
|
def main() -> None:
|
|
manifest = json.loads(MANIFEST_PATH.read_text())
|
|
extension_version = manifest.get('version')
|
|
if not isinstance(extension_version, str) or not re.fullmatch(r'\d+\.\d+\.\d+', extension_version):
|
|
fail('webextension/manifest.json has no valid three-part version')
|
|
|
|
frontend_version = json.loads(FRONTEND_VERSION_PATH.read_text()).get('version')
|
|
if frontend_version != extension_version:
|
|
fail(f'frontend version {frontend_version} does not match extension version {extension_version}')
|
|
|
|
gecko_settings = manifest.get('browser_specific_settings', {}).get('gecko', {})
|
|
data_permissions = gecko_settings.get('data_collection_permissions')
|
|
if data_permissions != {'required': ['websiteActivity'], 'optional': []}:
|
|
fail('Firefox data_collection_permissions must require websiteActivity and have no optional categories')
|
|
|
|
settings = SETTINGS_PATH.read_text()
|
|
match = re.search(r"version: str = os\.getenv\('LINKLOG_VERSION', '([^']+)'\)", settings)
|
|
if not match:
|
|
fail('backend version default could not be found')
|
|
backend_version = match.group(1)
|
|
if backend_version != extension_version:
|
|
fail(f'backend version {backend_version} does not match extension version {extension_version}')
|
|
|
|
xpi_path = SIGNED_DIR / f'LinkLog-{extension_version}.xpi'
|
|
if not xpi_path.is_file():
|
|
fail(f'missing manually signed artifact: {xpi_path.relative_to(ROOT)}')
|
|
with zipfile.ZipFile(xpi_path) as archive:
|
|
try:
|
|
packaged_manifest = json.loads(archive.read('manifest.json'))
|
|
except KeyError:
|
|
fail('signed XPI does not contain manifest.json')
|
|
if packaged_manifest.get('version') != extension_version:
|
|
fail('signed XPI manifest version does not match webextension/manifest.json')
|
|
if archive.testzip() is not None:
|
|
fail('signed XPI contains a corrupt member')
|
|
|
|
updates = json.loads(UPDATES_PATH.read_text())
|
|
addon_id = gecko_settings['id']
|
|
update_entries = updates.get('addons', {}).get(addon_id, {}).get('updates', [])
|
|
if not any(entry.get('version') == extension_version for entry in update_entries):
|
|
fail(f'webextension/updates.json has no update entry for {extension_version}')
|
|
|
|
print(f'validated LinkLog release {frontend_version}')
|
|
print(f'xpi={xpi_path.relative_to(ROOT)}')
|
|
|
|
|
|
if __name__ == '__main__':
|
|
main() |