David Heinemeier HanssonandClaude Opus 5
f92de9c440
A second review pass found the PKGBUILD rewriting could still go wrong in ways the pattern matching did not anticipate: an array element carrying a ")" in a comment left the tail of the old array behind, and jq's "$" also matches before a trailing newline, so a pkgver of "1.0\n" passed validation and then broke sed after the checksum arrays had already been written. Rather than chase each shape, prove the result. Every edit now lands on a scratch copy that is parsed with bash -n and read back to confirm it holds the version and checksums we meant to write, and only then replaces the PKGBUILD in a single rename. Corruption that slips past the matching fails loudly with the original untouched instead of landing in a pull request. The validation anchors are \A and \z accordingly, empty checksum lists are rejected rather than written as '', and the hook picks the newest stanza with vercmp so it agrees with the comparator the updater uses. Also stop the launcher probing /.config when HOME and XDG_CONFIG_HOME are both unset, and require a regular file, so a directory at that path is skipped instead of crashing the app on startup. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
67 lines
2.3 KiB
Bash
Executable File
67 lines
2.3 KiB
Bash
Executable File
#!/bin/bash
|
|
# OpenAI ships the ChatGPT desktop app from its own Debian repository. The
|
|
# per-architecture package index carries both the version and the SHA256 of
|
|
# every deb, so an update costs two small HTTP requests instead of a 750 MB
|
|
# download, and the pool keeps old versions, so the URLs pinned in the PKGBUILD
|
|
# stay resolvable after the next release.
|
|
set -euo pipefail
|
|
|
|
BASE_URL="https://persistent.oaistatic.com/codex-app-prod/linux/deb"
|
|
declare -A DEB_ARCHES=([x86_64]=amd64 [aarch64]=arm64)
|
|
|
|
# Print "<version> <sha256>" for the newest stanza in a Packages index. Newest
|
|
# is vercmp's opinion, which is the one bin/sync-upstream and pacman both use;
|
|
# sort -V disagrees with it over versions like 1.0a.
|
|
newest_release() {
|
|
local index="$1"
|
|
local version sha256 best_version="" best_sha256=""
|
|
|
|
while read -r version sha256; do
|
|
if [[ -z "$best_version" ]] || [[ "$(vercmp "$version" "$best_version")" -gt 0 ]]; then
|
|
best_version="$version"
|
|
best_sha256="$sha256"
|
|
fi
|
|
done < <(awk '
|
|
{ sub(/\r$/, "") }
|
|
/^Version:/ { version = $2 }
|
|
/^SHA256:/ { sha256 = $2 }
|
|
/^$/ { if (version && sha256) print version, sha256; version = sha256 = "" }
|
|
END { if (version && sha256) print version, sha256 }
|
|
' <<<"$index")
|
|
|
|
[[ -n "$best_version" ]] || return 1
|
|
echo "$best_version $best_sha256"
|
|
}
|
|
|
|
versions=()
|
|
declare -A checksums=()
|
|
|
|
for arch in "${!DEB_ARCHES[@]}"; do
|
|
index=$(curl -fsSL "$BASE_URL/dists/stable/main/binary-${DEB_ARCHES[$arch]}/Packages")
|
|
|
|
read -r version sha256 <<<"$(newest_release "$index")"
|
|
if [[ -z "${version:-}" || -z "${sha256:-}" ]]; then
|
|
echo "No usable release found for $arch in the upstream package index" >&2
|
|
exit 1
|
|
fi
|
|
|
|
versions+=("$version")
|
|
checksums[$arch]="$sha256"
|
|
done
|
|
|
|
# A release lands one architecture at a time, and a single pkgver has to cover
|
|
# both. Report no update until they agree; the next run picks it up.
|
|
for version in "${versions[@]}"; do
|
|
if [[ "$version" != "${versions[0]}" ]]; then
|
|
echo "Upstream architectures are mid-release (${versions[*]}); skipping" >&2
|
|
echo '{}'
|
|
exit 0
|
|
fi
|
|
done
|
|
|
|
jq -n \
|
|
--arg pkgver "${versions[0]}" \
|
|
--arg x86_64 "${checksums[x86_64]}" \
|
|
--arg aarch64 "${checksums[aarch64]}" \
|
|
'{pkgver: $pkgver, sha256sums: {x86_64: [$x86_64], aarch64: [$aarch64]}}'
|