-
-
Notifications
You must be signed in to change notification settings - Fork 9.8k
Expand file tree
/
Copy pathsync-maintained-versions.php
More file actions
153 lines (122 loc) · 5.06 KB
/
sync-maintained-versions.php
File metadata and controls
153 lines (122 loc) · 5.06 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
<?php
// Syncs branch-dependent CI config from the maintained branches published at
// https://symfony.com/maintained-versions.json (ordered low -> high).
//
// Standalone helper: run it by hand whenever the maintained branches change.
//
// Updates:
// - .github/dependabot.yml one github-actions entry per maintained
// branch; cooldown.default-days grows by one
// in merge-up order so the lowest branch
// surfaces first and the review queue is staggered.
// - .github/workflows/scorecards.yml push trigger pinned to the default (highest) branch.
// - .github/workflows/unit-tests.yml LTS test versions for the current branch: cross-test
// against the latest LTS at or below it, low-deps floor
// against the LTS one major below that.
//
// Usage:
// php .github/sync-maintained-versions.php # rewrite the files
// php .github/sync-maintained-versions.php --check # exit 1 if anything would change
if ('cli' !== PHP_SAPI) {
echo "This script can only be run from the command line.\n";
exit(1);
}
$self = basename(__FILE__);
$source = 'https://symfony.com/maintained-versions.json';
$branches = json_decode(file_get_contents($source), true, 512, \JSON_THROW_ON_ERROR);
if (!\is_array($branches) || !$branches) {
fwrite(\STDERR, "No maintained versions found at $source\n");
exit(1);
}
$branches = array_values($branches);
$default = end($branches); // highest branch == dev == default
$check = \in_array('--check', $argv, true);
// Identify the checked-out branch from the source tree itself (robust to detached
// HEAD and branch naming, unlike `git branch`), then refuse to run unless it is one
// of the maintained versions.
if (!preg_match("/VERSION = '(\d+\.\d+)/", file_get_contents(__DIR__.'/../src/Symfony/Component/HttpKernel/Kernel.php'), $m)) {
fwrite(\STDERR, "Could not read the branch version from Kernel.php\n");
exit(1);
}
$branch = $m[1];
if (!\in_array($branch, $branches, true)) {
fwrite(\STDERR, "Refusing to run: $branch is not a maintained version (".implode(', ', $branches).")\n");
exit(1);
}
$sync = static function (string $path, string $contents) use ($check): bool {
if (is_file($path) && file_get_contents($path) === $contents) {
return false;
}
if ($check) {
fwrite(\STDERR, basename($path)." is out of date\n");
} else {
file_put_contents($path, $contents);
}
return true;
};
// --- .github/dependabot.yml -------------------------------------------------
$dependabot = <<<YAML
# https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference
# Generated by .github/$self from $source
# One entry per maintained branch; cooldown increases in merge-up order so the lowest branch surfaces first.
version: 2
updates:
YAML;
$entry = <<<YAML
- package-ecosystem: 'github-actions'
directory: '/'
target-branch: '%s'
schedule:
interval: 'weekly'
groups:
github-actions:
patterns:
- '*'
cooldown:
default-days: %d
YAML;
foreach ($branches as $i => $b) {
$dependabot .= "\n".sprintf($entry, $b, 7 + $i);
}
$dirty = $sync(__DIR__.'/dependabot.yml', rtrim($dependabot)."\n");
// --- .github/workflows/scorecards.yml (push trigger only) -------------------
$scorecards = __DIR__.'/workflows/scorecards.yml';
$yaml = file_get_contents($scorecards);
$patched = preg_replace('/^(\s*branches:\s*\[\s*")[^"]*("\s*\])/m', '${1}'.$default.'${2}', $yaml, 1, $count);
if (1 !== $count) {
fwrite(\STDERR, "Could not find the push branch trigger in scorecards.yml\n");
exit(1);
}
$dirty = $sync($scorecards, $patched) || $dirty;
// --- .github/workflows/unit-tests.yml (LTS test versions) -------------------
// LTS releases are the *.4 maintained versions. Cross-test against the latest one
// at or below this branch; the low-deps floor is the LTS one major below that.
$crossLts = null;
foreach (array_filter($branches, static fn ($v) => str_ends_with($v, '.4')) as $v) {
if (version_compare($v, $branch, '<=')) {
$crossLts = $v;
}
}
if (null === $crossLts) {
fwrite(\STDERR, "No maintained LTS at or below $branch\n");
exit(1);
}
$floor = ((int) $crossLts - 1).'.4';
$unitTests = __DIR__.'/workflows/unit-tests.yml';
$yaml = file_get_contents($unitTests);
$patches = [
['/(&& echo )\d+\.\d+( \|\| echo \$SYMFONY_VERSION)/', '${1}'.$floor.'${2}'],
['/(# for )\d+\.\d+( LTS, checkout and test previous major)/', '${1}'.$crossLts.'${2}'],
['/(\$SYMFONY_VERSION = )\d+\.\d+/', '${1}'.$crossLts],
];
foreach ($patches as [$pattern, $replacement]) {
$yaml = preg_replace($pattern, $replacement, $yaml, 1, $count);
if (1 !== $count) {
fwrite(\STDERR, "Could not patch unit-tests.yml ($pattern matched $count times)\n");
exit(1);
}
}
$dirty = $sync($unitTests, $yaml) || $dirty;
if ($check && $dirty) {
exit(1);
}