admin/brew
1
0
Fork 0
Code Issues Packages Projects Releases 6 Wiki Activity

Merge pull request #8321 from dtrodrigues/prerelease-tag

Browse Source 
audit: check GitHub tags for prerelease status
This commit is contained in:
Mike McQuaid 2020-08-13 08:52:55 +01:00 committed by GitHub
commit e2a2d791ba
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
Library/Homebrew/dev-cmd/audit.rb
View File

@ -679,8 +679,13 @@ module Homebrew
}.freeze }.freeze
GITHUB_PRERELEASE_ALLOWLIST = { GITHUB_PRERELEASE_ALLOWLIST = {
"cbmc" => "5.12.6",
"elm-format" => "0.8.3",
"gitless" => "0.8.8", "gitless" => "0.8.8",
"infrakit" => "0.5",
"riff" => "0.5.0",
"telegram-cli" => "1.3.1", "telegram-cli" => "1.3.1",
"volta" => "0.8.6",
}.freeze }.freeze
# version_prefix = stable_version_string.sub(/\d+$/, "") # version_prefix = stable_version_string.sub(/\d+$/, "")
@ -774,7 +779,7 @@ module Homebrew
return if stable_url_minor_version.even? return if stable_url_minor_version.even?
problem "#{stable.version} is a development release" problem "#{stable.version} is a development release"
when %r{^https://github.com/([\w-]+)/([\w-]+)/} when %r{^https://github.com/([\w-]+)/([\w-]+)}
owner = Regexp.last_match(1) owner = Regexp.last_match(1)
repo = Regexp.last_match(2) repo = Regexp.last_match(2)
tag = url.match(%r{^https://github\.com/[\w-]+/[\w-]+/archive/([^/]+)\.(tar\.gz|zip)$}) tag = url.match(%r{^https://github\.com/[\w-]+/[\w-]+/archive/([^/]+)\.(tar\.gz|zip)$})
@ -783,10 +788,11 @@ module Homebrew
tag ||= url.match(%r{^https://github\.com/[\w-]+/[\w-]+/releases/download/([^/]+)/}) tag ||= url.match(%r{^https://github\.com/[\w-]+/[\w-]+/releases/download/([^/]+)/})
.to_a .to_a
.second .second
tag ||= formula.stable.specs[:tag]
begin begin
if @online && (release = GitHub.open_api("#{GitHub::API_URL}/repos/#{owner}/#{repo}/releases/tags/#{tag}")) if @online && (release = GitHub.open_api("#{GitHub::API_URL}/repos/#{owner}/#{repo}/releases/tags/#{tag}"))
if release["prerelease"] && !GITHUB_PRERELEASE_ALLOWLIST.include?(formula.name) if release["prerelease"] && (GITHUB_PRERELEASE_ALLOWLIST[formula.name] != formula.version)
problem "#{tag} is a GitHub prerelease" problem "#{tag} is a GitHub prerelease"
elsif release["draft"] elsif release["draft"]
problem "#{tag} is a GitHub draft" problem "#{tag} is a GitHub draft"