73 lines
2.8 KiB
Bash
73 lines
2.8 KiB
Bash
#!/bin/bash
|
|
# Copyright (C) 2026 ysicing
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
|
|
set -euo pipefail
|
|
cd "$(dirname "$0")/.."
|
|
|
|
compile="$(task --dry compile SIGN_ID= 2>&1)"
|
|
grep -q -- "-destination 'generic/platform=macOS' ARCHS=arm64 ONLY_ACTIVE_ARCH=NO" <<< "$compile"
|
|
if grep -q 'x86_64' <<< "$compile"; then
|
|
echo "默认构建不应包含 x86_64" >&2
|
|
exit 1
|
|
fi
|
|
if grep -q -- '^ -quiet' <<< "$compile"; then
|
|
echo "默认构建不应使用会产生 SwiftCompile 伪错误的 -quiet" >&2
|
|
exit 1
|
|
fi
|
|
|
|
# 无证书的 CI 用临时签名：关闭团队验证所需的 runtime，正式签名路径仍必须保留。
|
|
adhoc="$(task --dry compile SIGN_ID=- 2>&1)"
|
|
grep -q 'CODE_SIGNING_ALLOWED=NO ENABLE_HARDENED_RUNTIME=NO' <<< "$adhoc"
|
|
grep -q 'scripts/sign_sparkle.sh' <<< "$adhoc"
|
|
|
|
WORK="$(mktemp -d)"
|
|
trap 'rm -rf "$WORK"' EXIT
|
|
|
|
# Hardened Runtime 在缺少日历 entitlement 时会直接拒绝 EventKit 授权，不显示系统弹窗。
|
|
python3 - <<'PY'
|
|
import plistlib
|
|
|
|
with open("App/XStats.entitlements", "rb") as source:
|
|
entitlements = plistlib.load(source)
|
|
assert entitlements.get("com.apple.security.personal-information.calendars") is True, "缺少 EventKit 日历访问 entitlement"
|
|
with open("App/Info.plist", "rb") as source:
|
|
info = plistlib.load(source)
|
|
for key in ("NSCalendarsFullAccessUsageDescription", "NSRemindersFullAccessUsageDescription"):
|
|
assert info.get(key), f"缺少权限说明：{key}"
|
|
PY
|
|
|
|
# appcast.py 只读它自己上一级目录的 CHANGELOG.md，没有路径参数。所以把脚本复制到
|
|
# 临时目录、在那里配一份 fixture：测试从此与仓库真实的版本历史无关——归档旧版本、
|
|
# 发布新版本都不会让它失效。
|
|
mkdir -p "$WORK/repo/scripts"
|
|
cp scripts/appcast.py "$WORK/repo/scripts/appcast.py"
|
|
cat > "$WORK/repo/CHANGELOG.md" <<'LOG'
|
|
# 更新日志
|
|
|
|
## 9.9.9 · 2026-01-02
|
|
|
|
### 2026-01-02
|
|
|
|
#### 新增
|
|
|
|
- 在“设置 → 关于”提供服务条款和隐私政策，说明本机数据、更新统计、第三方联网功能及用户自行配置的 WebDAV 同步。
|
|
LOG
|
|
printf 'zip' > "$WORK/XStats-9.9.9-AppleSilicon.zip"
|
|
printf 'dmg' > "$WORK/XStats-9.9.9-AppleSilicon.dmg"
|
|
(cd "$WORK/repo" && python3 scripts/appcast.py 9.9.9 110 https://example.test \
|
|
"$WORK/XStats-9.9.9-AppleSilicon.zip" "$WORK/XStats-9.9.9-AppleSilicon.dmg") > "$WORK/appcast.json"
|
|
python3 - "$WORK/appcast.json" <<'PY'
|
|
import json
|
|
import sys
|
|
|
|
feed = json.load(open(sys.argv[1], encoding="utf-8"))
|
|
assert "intel" not in feed, feed
|
|
assert feed["url"].endswith("-AppleSilicon.zip"), feed
|
|
assert feed["dmg"].endswith("-AppleSilicon.dmg"), feed
|
|
assert feed["notes"], feed
|
|
assert feed["notes"] == ["在“设置 → 关于”提供服务条款和隐私政策"], feed
|
|
# 客户端点“查看更新日志”不能跳到上游 OpenStats 的站点
|
|
assert feed["changelog"] == "https://github.com/ysicing/xstats/blob/main/CHANGELOG.md", feed
|
|
PY
|