mirror of
https://github.com/kuhyx/utils.git
synced 2026-11-10 22:47:14 +01:00
Krzysztof kuhy Rudnicki
b914cc87fb
Some checks failed
crdt-sync pre-commit / pre-commit (push) Waiting to run
crdt-sync tests / test (push) Waiting to run
dependency freshness / dependencies on newest stable (push) Waiting to run
file length / file-length (push) Waiting to run
gatelock pre-commit / pre-commit (push) Waiting to run
gatelock tests / test (push) Waiting to run
md-naming / markdown naming convention (push) Waiting to run
palette drift / palette (push) Waiting to run
shared gate tests / gate unit tests (push) Waiting to run
web_ui tests / test (push) Has been cancelled
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
72 lines
2.8 KiB
Bash
Executable File
72 lines
2.8 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# ============================================================================
|
|
# Fail if any dependency is behind its ecosystem's newest stable release.
|
|
#
|
|
# "Are we on the newest version?" is only mechanically answerable when the
|
|
# manifest states an exact version, so this gate checks two things at once:
|
|
# that every dependency is exact-pinned, and that the pin equals latest stable.
|
|
#
|
|
# The real check lives in Python (dep_freshness/check.py) so the pre-commit
|
|
# hook, the CI workflow and the SessionStart hook read one implementation --
|
|
# see rules/shell.instructions.md on never embedding another language's logic
|
|
# inline, and the four-way fork of the 250-line cap on why delegation matters.
|
|
#
|
|
# Usage:
|
|
# scripts/check_dependency_freshness.sh <file> [<file> ...] # pre-commit
|
|
# scripts/check_dependency_freshness.sh --all --strict # CI
|
|
#
|
|
# Exit: 0 current | 1 behind | 2 allowlist wrong | 3 undeterminable (offline)
|
|
# ============================================================================
|
|
|
|
set -euo pipefail
|
|
|
|
readonly UTILS_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
readonly CHECKER="$UTILS_ROOT/dep_freshness/check.py"
|
|
|
|
main() {
|
|
if [[ $# -eq 0 ]]; then
|
|
echo "Usage: $(basename "$0") <file>... | --all [--strict]" >&2
|
|
exit 1
|
|
fi
|
|
if [[ ! -f "$CHECKER" ]]; then
|
|
echo "Error: checker not found at $CHECKER" >&2
|
|
echo "Clone kuhyx/utils next to this repo, or set UTILS_ROOT." >&2
|
|
exit 1
|
|
fi
|
|
|
|
ensure_runtime_deps
|
|
|
|
PYTHONPATH="$UTILS_ROOT${PYTHONPATH:+:$PYTHONPATH}" \
|
|
python3 -m dep_freshness "$@"
|
|
}
|
|
|
|
# The gate deliberately runs under the REPO's interpreter, because the Python
|
|
# toolchain check compares that interpreter against latest stable. So a repo
|
|
# with its own `.python-version` hands us a pyenv build that has never seen
|
|
# pyyaml, and the gate died on an import traceback with no hint of the cause
|
|
# (aseprite-mcp, pyenv 3.13.1). CI already installs these explicitly; do the
|
|
# same locally rather than telling a human to.
|
|
ensure_runtime_deps() {
|
|
if python3 -c 'import yaml, packaging' 2>/dev/null; then
|
|
return
|
|
fi
|
|
echo "dependency-freshness: installing pyyaml/packaging for $(python3 -V 2>&1)" >&2
|
|
python3 -m pip install --quiet --disable-pip-version-check pyyaml packaging >&2 || true
|
|
# A `uv venv` ships no pip at all, and those are most of this fleet now.
|
|
if ! python3 -c 'import yaml, packaging' 2>/dev/null && has_uv; then
|
|
uv pip install --quiet --python "$(command -v python3)" pyyaml packaging >&2 || true
|
|
fi
|
|
if ! python3 -c 'import yaml, packaging' 2>/dev/null; then
|
|
echo "Error: the gate needs pyyaml and packaging under $(command -v python3)." >&2
|
|
echo "Install them there, or run the gate with a different interpreter." >&2
|
|
exit 3
|
|
fi
|
|
}
|
|
|
|
has_uv() {
|
|
command -v uv >/dev/null 2>&1
|
|
}
|
|
|
|
main "$@"
|