mirror of
https://github.com/bytedance/deer-flow.git
synced 2026-10-26 21:26:39 +00:00
db9b0b4bf0
* fix(release): reject a stale backend/uv.lock in the version gate verify_versions.sh compared only Chart.yaml, pyproject.toml and package.json, so bumping those three by hand passed the v* gate while backend/uv.lock still recorded the previous root package version. The backend image installs with uv sync --locked, so the chart and the other images published while the backend image failed to build. Run uv lock --check in backend/ as part of the gate, letting uv own the PEP 440 normalization, and fail when uv is missing. The reusable verify-versions workflow installs the uv version the backend image pins. * docs(changelog): reference #6588 * fix(release): explain an unparsed lock version and stop blaming the lock for every uv failure Print a fallback when the lock's root entry is not found, so the job log does not show an empty field, and word the uv lock --check annotation so a network error or uv crash is not reported as a stale lock.
104 lines
4.1 KiB
Bash
Executable File
104 lines
4.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Verify that every project version source agrees.
|
|
#
|
|
# Sources checked:
|
|
# deploy/helm/deer-flow/Chart.yaml — version + appVersion
|
|
# backend/pyproject.toml — version
|
|
# frontend/package.json — version
|
|
# backend/uv.lock — root package version, via `uv lock --check`
|
|
#
|
|
# Usage:
|
|
# scripts/verify_versions.sh # all sources must be mutually equal
|
|
# scripts/verify_versions.sh 2.1.0 # all sources must equal 2.1.0
|
|
#
|
|
# Exit status is 0 when consistent, 1 otherwise. The release workflows
|
|
# (.github/workflows/chart.yaml and container.yaml) call this on v* tags — via
|
|
# the reusable .github/workflows/verify-versions.yml — to gate publishing when
|
|
# a version source was forgotten. Requires `uv` on PATH for the lock check.
|
|
|
|
set -uo pipefail
|
|
|
|
ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
|
|
CHART="$ROOT/deploy/helm/deer-flow/Chart.yaml"
|
|
PYPROJECT="$ROOT/backend/pyproject.toml"
|
|
PACKAGE="$ROOT/frontend/package.json"
|
|
UV_LOCK="$ROOT/backend/uv.lock"
|
|
|
|
for f in "$CHART" "$PYPROJECT" "$PACKAGE" "$UV_LOCK"; do
|
|
if [ ! -f "$f" ]; then
|
|
echo "::error::missing version file: $f" >&2
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
CHART_VERSION=$(awk '/^version:/ {print $2; exit}' "$CHART")
|
|
APP_VERSION=$(awk '/^appVersion:/ {gsub(/"/, ""); print $2; exit}' "$CHART")
|
|
PY_VERSION=$(awk -F'"' '/^version[[:space:]]*=/ {print $2; exit}' "$PYPROJECT")
|
|
JS_VERSION=$(grep -m1 '"version"' "$PACKAGE" | awk -F'"' '{print $4}')
|
|
PY_NAME=$(awk -F'"' '/^name[[:space:]]*=/ {print $2; exit}' "$PYPROJECT")
|
|
LOCK_VERSION=$(awk -v name="$PY_NAME" '
|
|
/^\[\[package\]\]/ { root = 0 }
|
|
$0 == "name = \"" name "\"" { root = 1 }
|
|
root && /^version = / { gsub(/"/, "", $3); print $3; exit }
|
|
' "$UV_LOCK")
|
|
# Display only: `uv lock --check` below is what passes or fails the lock.
|
|
[ -n "$LOCK_VERSION" ] || LOCK_VERSION="(root entry not found; 'uv lock --check' is authoritative)"
|
|
|
|
printf 'Chart.yaml version: %s\n' "$CHART_VERSION"
|
|
printf 'Chart.yaml appVersion: %s\n' "$APP_VERSION"
|
|
printf 'backend/pyproject.toml: %s\n' "$PY_VERSION"
|
|
printf 'frontend/package.json: %s\n' "$JS_VERSION"
|
|
printf 'backend/uv.lock: %s\n' "$LOCK_VERSION"
|
|
|
|
# mismatch <name> <actual> <expected>: prints a GitHub Actions annotation and
|
|
# returns 1 when they differ, 0 when equal.
|
|
mismatch() {
|
|
if [ "$2" != "$3" ]; then
|
|
echo "::error::$1 is '$2' but expected '$3'." >&2
|
|
return 1
|
|
fi
|
|
return 0
|
|
}
|
|
|
|
EXPECTED="${1:-}"
|
|
status=0
|
|
|
|
if [ -n "$EXPECTED" ]; then
|
|
printf 'Expected: %s (from tag v%s)\n\n' "$EXPECTED" "$EXPECTED"
|
|
mismatch "Chart.yaml version" "$CHART_VERSION" "$EXPECTED" || status=1
|
|
mismatch "Chart.yaml appVersion" "$APP_VERSION" "$EXPECTED" || status=1
|
|
mismatch "backend/pyproject.toml" "$PY_VERSION" "$EXPECTED" || status=1
|
|
mismatch "frontend/package.json" "$JS_VERSION" "$EXPECTED" || status=1
|
|
else
|
|
echo
|
|
mismatch "Chart.yaml appVersion" "$APP_VERSION" "$CHART_VERSION" || status=1
|
|
mismatch "backend/pyproject.toml" "$PY_VERSION" "$CHART_VERSION" || status=1
|
|
mismatch "frontend/package.json" "$JS_VERSION" "$CHART_VERSION" || status=1
|
|
fi
|
|
|
|
# backend/uv.lock records the root package version in uv's PEP 440 form
|
|
# (2.1.0-rc0 is stored as 2.1.0rc0), so let uv judge whether it still matches
|
|
# pyproject.toml instead of re-implementing the normalization. A stale lock
|
|
# passes the checks above, then fails the backend image's `uv sync --locked`
|
|
# after the chart and the other images are already published.
|
|
if ! command -v uv >/dev/null 2>&1; then
|
|
echo "::error::uv is required to check backend/uv.lock; install it from https://docs.astral.sh/uv/." >&2
|
|
status=1
|
|
elif ! lock_output=$(cd "$ROOT/backend" && uv lock --check 2>&1); then
|
|
printf '%s\n' "$lock_output" >&2
|
|
echo "::error::'uv lock --check' failed on backend/uv.lock (output above); if the lock is stale, run scripts/bump_version.sh." >&2
|
|
status=1
|
|
fi
|
|
|
|
if [ "$status" -ne 0 ]; then
|
|
if [ -n "$EXPECTED" ]; then
|
|
echo "Tip: run scripts/bump_version.sh $EXPECTED to align all sources." >&2
|
|
else
|
|
echo "Tip: run scripts/bump_version.sh <version> to align all sources." >&2
|
|
fi
|
|
exit 1
|
|
fi
|
|
|
|
echo "OK — all version sources agree on ${CHART_VERSION}."
|