chore: add release candidate build automation

2026-06-12 12:13:41 +03:00
parent fd5c788569
commit 248afd2253
2 changed files with 152 additions and 0 deletions
@@ -0,0 +1,72 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "$ROOT_DIR"
+
+RC_NAME="${1:-}"
+if [[ -z "$RC_NAME" ]]; then
+  cat >&2 <<'EOF'
+usage: bash scripts/build_release_candidate.sh <rc-name>
+example: bash scripts/build_release_candidate.sh v1.0.2-rc1
+EOF
+  exit 2
+fi
+
+if [[ ! "$RC_NAME" =~ ^[A-Za-z0-9][A-Za-z0-9._-]*$ ]]; then
+  echo "invalid release candidate name: start with a letter or number; use only letters, numbers, dot, underscore, and hyphen" >&2
+  exit 2
+fi
+
+if [[ -n "$(git status --porcelain --untracked-files=normal)" ]]; then
+  echo "git working tree is not clean; commit, stash, or remove changes before building release candidate" >&2
+  git status --short >&2
+  exit 1
+fi
+
+OUT_DIR="$ROOT_DIR/dist/release-candidate/$RC_NAME"
+if [[ -e "$OUT_DIR" ]]; then
+  echo "release candidate output already exists: $OUT_DIR" >&2
+  exit 1
+fi
+
+BUILD_SUCCESS=0
+cleanup_on_failure() {
+  status=$?
+  if [[ $status -ne 0 && $BUILD_SUCCESS -ne 1 && -d "$OUT_DIR" ]]; then
+    rm -rf "$OUT_DIR"
+  fi
+  exit "$status"
+}
+trap cleanup_on_failure EXIT
+
+mkdir -p "$OUT_DIR"
+
+git rev-parse HEAD > "$OUT_DIR/git-commit.txt"
+
+cargo fmt --manifest-path adk-rust/Cargo.toml --all -- --check
+cargo test --manifest-path adk-rust/Cargo.toml --workspace
+cargo clippy --manifest-path adk-rust/Cargo.toml --workspace --all-targets -- -D warnings
+cargo build --manifest-path adk-rust/Cargo.toml --workspace --release
+bash scripts/quality-gate.sh
+bash scripts/check_private_config_guard.sh
+node scripts/check_portal_contract_sync.mjs
+
+bash scripts/generate_release_sbom_v0_2.sh "$OUT_DIR"
+
+(
+  cd "$OUT_DIR"
+  {
+    printf '%s\n' "FILES.txt"
+    find . -type f ! -name 'FILES.txt' ! -name 'SHA256SUMS.txt' -print \
+      | sort \
+      | sed 's#^\./##'
+  } > FILES.txt
+
+  find . -type f ! -name 'SHA256SUMS.txt' -print0 \
+    | sort -z \
+    | xargs -0 sha256sum > SHA256SUMS.txt
+)
+
+BUILD_SUCCESS=1
+echo "release candidate built: $OUT_DIR"