修雨
3e9e76df2c
* feat: add stable and beta Homebrew channels * fix: align beta formula with tap conventions * fix: use dedicated token for Homebrew PRs * chore: minimize release token permissions * docs: record Homebrew token setup * docs: keep Homebrew automation token long-lived * fix(verify): assert channel versions and prove homebrew coexistence The six-channel verifier previously ran `dws version` without comparing it to the version each channel advertises, so a stale or wrong binary still reported PASS. It also uninstalled stable before installing beta, which could not prove the keg-only beta coexists with stable. - smoke() now takes an expected version and fails the channel on mismatch - npm/homebrew derive the expected version from the package manager; curl/upgrade derive it from the latest GitHub release tag - homebrew installs keg-only beta while stable stays installed, then asserts stable's version, binary SHA and PATH link are unchanged - cleanup uninstalls both script-installed formulae, still refusing to touch a pre-existing user install - add regression tests for version assertion and coexistence semantics * style(formula): satisfy brew style for stable and beta formulae - reword desc so it no longer starts with the formula name - drop the unnecessary `require "fileutils"` and use the mixed-in cp_r instead of the FileUtils. qualifier * fix(verify): compare channel versions exactly * fix(homebrew): keep generated formulae style-clean * fix(homebrew): sync formulae with latest releases
33 lines
2.4 KiB
Markdown
33 lines
2.4 KiB
Markdown
# 六渠道发布后验证
|
||
|
||
该目录用于发版质量保障 SOP 的 **T+1 线上回归**。脚本对每个可在当前主机运行的公开渠道执行：隔离环境清理、安装、**版本断言**（比对 `dws version` 输出与该渠道自身声明的期望版本，不一致即判 `FAIL`）、`dws --help` 冒烟、清理。
|
||
|
||
期望版本来源：Homebrew 取 `brew list --versions` 记录的 Formula 版本，npm 取 `npm view <pkg>@<tag> version`，curl 与 `dws upgrade` 取 GitHub `releases/latest` 的 tag。断言防止“装了旧版本却报 PASS”。
|
||
|
||
```bash
|
||
git clone https://github.com/DingTalk-Real-AI/dingtalk-workspace-cli.git /tmp/dws-verify
|
||
cd /tmp/dws-verify/verify
|
||
bash verify-all-channels.sh
|
||
```
|
||
|
||
支持通过 `DWS_VERIFY_REPO=owner/repo` 验证 fork。输出状态含义：
|
||
|
||
- `PASS`：本机真实完成了安装、版本检查和冒烟。
|
||
- `FAIL`：公开渠道验证失败。
|
||
- `SKIP`：当前操作系统或依赖无法运行该渠道；不能计为通过，需由对应平台补测。
|
||
|
||
| 渠道 | macOS | Linux | Windows |
|
||
|---|---:|---:|---:|
|
||
| curl installer | ✅ | ✅ | — |
|
||
| PowerShell installer | — | — | ✅ |
|
||
| npm stable (`latest`) | ✅ | ✅ | ✅* |
|
||
| npm beta (`beta`) | ✅ | ✅ | ✅* |
|
||
| Homebrew | ✅ | ✅ | — |
|
||
| `dws upgrade` | ✅ | ✅ | ✅* |
|
||
|
||
`*` 当前总入口是 Bash；Windows 原生渠道由 PowerShell 安装器本身验证。Windows npm/upgrade 需要对应 Windows runner 补测，不能用非 Windows 上的 `pwsh` 结果代替。
|
||
|
||
Homebrew stable 与 keg-only beta Formula 都和代码位于同一个主仓库。由于这是自定义 remote，安装时必须显式指定仓库 URL。`homebrew` 步骤先装 stable 并记录其版本、二进制 SHA 与 `$(brew --prefix)/bin/dws` 链接指向，然后在 **stable 仍在安装状态下** 装 keg-only beta，再断言 stable 的版本、二进制 SHA 与链接三者均未被 beta 覆盖，且 PATH 上的 `dws` 仍解析到 stable，以此证明两渠道共存。脚本会拒绝在用户已装有任一 Formula 时运行；清理阶段只卸载脚本自己安装的 stable 与 beta 两个 Formula，并按需 untap，不动用户的预装版本。
|
||
|
||
在合并前用 PR head 的 Formula 验证时，通过 `DWS_VERIFY_HOMEBREW_TAP=<owner/repo>` 与 `DWS_VERIFY_HOMEBREW_REPO_URL=<fork git url>` 指向包含本 PR Formula 的 tap；npm/curl 渠道同理可用 `DWS_VERIFY_NPM_PACKAGE`、`DWS_VERIFY_REPO` 覆盖。
|