Compare commits

...

8 Commits

Author SHA1 Message Date
azy5030 8099407c6c dev-util/gitea-runner: bump to 1.0.7 (#2)
CI / build (push) Has been cancelled
Automated bump of `dev-util/gitea-runner` from 1.0.4 to 1.0.7.

- Upstream release: https://gitea.com/gitea/runner/releases/tag/v1.0.7
- Vendor tarball: https://git.azy.dev/azy5030/azy5030-overlay/releases/tag/gitea-runner-1.0.7-vendor

Review checklist:
- [ ] LICENSE still covers all vendored module licenses (`go-licenses report ./...`)
- [ ] BDEPEND Go version matches upstream go.mod (set to >=1.26.0)
- [ ] version ldflags path `internal/pkg/ver.version` unchanged upstream

CI build + `gitea-runner --version` passed in this workflow.

---------

Co-authored-by: gitea-actions <actions@azy.dev>
Reviewed-on: #2
Co-authored-by: azy5030 <azy5030@gmail.com>
Co-committed-by: azy5030 <azy5030@gmail.com>
2026-06-14 00:41:01 -05:00
azy5030 a05bca6f01 fix(bump): fetch upstream go.mod via /api/v1 raw endpoint
CI / build (push) Successful in 6m8s
Same login-redirect issue as the source archive: gitea.com/gitea/runner/raw/tag/v*/go.mod now 303s to /user/login, so curl -fsSL saves the login HTML, grep finds no 'go N.N' line, and pipefail aborts the bump.

Switching to /api/v1/repos/gitea/runner/raw/go.mod?ref=v* — anonymous, returns the raw go.mod.
2026-06-14 00:28:11 -05:00
gitea-actions 1a87cc50e9 dev-util/gitea-runner: bump to 1.0.6
CI / build (push) Has been cancelled
2026-06-14 00:08:39 -05:00
azy5030 8d7432ff69 fix(gitea-runner): fetch source via /api/v1 archive endpoint
CI / build (push) Successful in 7m35s
gitea.com now redirects unauthenticated requests for /<owner>/<repo>/archive/v*.tar.gz to /user/login, breaking emerge's source fetch (wget saves the login HTML, distfile size verify fails).

The /api/v1/repos/<owner>/<repo>/archive/v*.tar.gz endpoint still serves anonymously and returns byte-identical contents, so the Manifest is unchanged.

Updated both the live 1.0.4 ebuild SRC_URI and the bump-version.sh template so regenerated ebuilds (and the bump script's own vendor-tarball fetch) use the working URL.
2026-06-14 00:01:33 -05:00
azy5030 ee9cca3d81 fix(bump): preserve GITHUB_SERVER_URL scheme when cloning
CI / build (push) Failing after 5m27s
The Gitea runner's GITHUB_SERVER_URL is the internal http endpoint
(http://172.17.0.1:3000); hard-coding https:// in the clone URL caused a TLS
error. Derive the scheme from GITHUB_SERVER_URL, and use the public host for
the PR-body vendor link.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-20 20:59:08 -05:00
azy5030 9fe57aee71 ci: rename bump secret to BUMP_TOKEN
CI / build (push) Successful in 6m59s
Gitea reserves the GITEA_ prefix for secret names, so the workflow secret
can't be GITEA_TOKEN. Rename it (and the env var the script reads) to
BUMP_TOKEN.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-20 20:51:48 -05:00
azy5030 57e0428658 ci: create repos.conf dir before writing repo configs
CI / build (push) Successful in 5m50s
A fresh gentoo/stage3 container has no /etc/portage/repos.conf directory, so
writing gentoo.conf failed. mkdir -p it first in both workflows and the bump
script.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-20 19:59:46 -05:00
azy5030 f2902d4a1f docs: add CI status badge to README
CI / build (push) Failing after 1m5s
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-20 19:56:47 -05:00
6 changed files with 23 additions and 15 deletions
+3 -2
View File
@@ -15,6 +15,7 @@ jobs:
- name: Configure portage + install tooling
run: |
mkdir -p /etc/portage/repos.conf
printf '[DEFAULT]\nmain-repo = gentoo\n\n[gentoo]\nlocation = /var/db/repos/gentoo\n' \
> /etc/portage/repos.conf/gentoo.conf
sed -i 's/^verify-signature = true/verify-signature = false/' \
@@ -25,9 +26,9 @@ jobs:
- name: Check for new release and open PR
env:
GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
BUMP_TOKEN: ${{ secrets.BUMP_TOKEN }}
run: |
host=${GITHUB_SERVER_URL#http://}; host=${host#https://}
curl -fsSL "http://x-access-token:${GITEA_TOKEN}@${host}/${GITHUB_REPOSITORY}/raw/branch/master/scripts/bump-version.sh" \
curl -fsSL "http://x-access-token:${BUMP_TOKEN}@${host}/${GITHUB_REPOSITORY}/raw/branch/master/scripts/bump-version.sh" \
-o /tmp/bump-version.sh
bash /tmp/bump-version.sh
+1
View File
@@ -19,6 +19,7 @@ jobs:
# can be pulled instead of compiled.
- name: Configure portage
run: |
mkdir -p /etc/portage/repos.conf
printf '[DEFAULT]\nmain-repo = gentoo\n\n[gentoo]\nlocation = /var/db/repos/gentoo\n' \
> /etc/portage/repos.conf/gentoo.conf
sed -i 's/^verify-signature = true/verify-signature = false/' \
+3 -1
View File
@@ -1,5 +1,7 @@
# azy5030 overlay
[![CI](https://git.azy.dev/azy5030/azy5030-overlay/actions/workflows/ci.yaml/badge.svg)](https://git.azy.dev/azy5030/azy5030-overlay/actions?workflow=ci.yaml)
A personal [Gentoo ebuild repository](https://wiki.gentoo.org/wiki/Ebuild_repository)
(overlay) for packages not in the main ::gentoo tree.
@@ -24,5 +26,5 @@ emerge dev-util/gitea-runner
every push and asserts the resulting binary runs.
- `.gitea/workflows/bump.yaml` runs `scripts/bump-version.sh` daily: it checks the
upstream releases feed and, when a newer version exists, regenerates + uploads the
vendor tarball, bumps the ebuild, and opens a pull request. Requires a `GITEA_TOKEN`
vendor tarball, bumps the ebuild, and opens a pull request. Requires a `BUMP_TOKEN`
repository secret (scopes: repository read/write, write release).
+2 -2
View File
@@ -1,2 +1,2 @@
DIST gitea-runner-1.0.4-vendor.tar.xz 3007156 BLAKE2B b9b7b03f607298a390b513bdc6824a2eba58bf7c1ed2e9e09556b309cb62669f1e5fc8fef6f62ce7a74f3a23573280158cb32d3b412394101f81cf8f19cdf64b SHA512 5309ef21c054a07b37a5ea1f5dd47cd6c424375a29f437ef743cb5719e8160e0c22a017175dad0b612291f444508b8dbe8e5fefabc9aac946c1217910aae6dd6
DIST gitea-runner-1.0.4.tar.gz 326258 BLAKE2B 1908718d033b658238f735baed3323b53c85c5b5a471b8a7e543a1d7ef3898c1220a7fa27ff8e4224ae9f24960a6532699d9de770dc6ed7b5649dc0c5d624058 SHA512 5f7bdc31ce9b2c34dbac161f2a29a1be33a16a8118d9d1d58aef05de621ba542360afdb2af6fa4042d8cb7ab3421e9d1cd0f3c5102ddf85fc08a089ebb28a496
DIST gitea-runner-1.0.7-vendor.tar.xz 3018704 BLAKE2B 39b861b1b454a22f23c80bacd551127d0812b71a336c79032fa01f8df834eca23e030479da76fc12358af955f7cb56bcc541b99df1fd7880a62fbf35b8859d4c SHA512 0f21ba48db4bbb9fc0738543a7123e884e93ab5b423b6ff99dfa913d6df6cf0db4d96bff2e32b82beee9fef8e81cfdef849d58050fe8d9a2abddb55af7da8a38
DIST gitea-runner-1.0.7.tar.gz 340157 BLAKE2B 7dc0fb3026e02c14052d4983f265adf787d9f3f01d856e81a4297a3163a1d2efe19f5ae6b9132fe4520ca551c84e7749ea33c7eeff87806870b0a9b60c54719f SHA512 8f0c69bb0e416efca1b63ae37cad0f740a5093bc569711b9327cd11a69f40d1037e59dc547ad3a88e8d6be7fa669a3acf58ac775237932f2872c492a7812cf96
@@ -8,7 +8,7 @@ inherit go-module
DESCRIPTION="Gitea Actions runner (formerly act_runner)"
HOMEPAGE="https://gitea.com/gitea/runner"
SRC_URI="
https://gitea.com/gitea/runner/archive/v${PV}.tar.gz -> ${P}.tar.gz
https://gitea.com/api/v1/repos/gitea/runner/archive/v${PV}.tar.gz -> ${P}.tar.gz
https://git.azy.dev/azy5030/azy5030-overlay/releases/download/${PN}-${PV}-vendor/${P}-vendor.tar.xz
"
S="${WORKDIR}/runner"
+13 -9
View File
@@ -4,22 +4,25 @@
# ebuild, regenerate the Manifest, and open a pull request.
#
# Expects a Gentoo environment with: go, pkgdev, git, curl, xz, jq.
# Required env: GITEA_TOKEN, GITHUB_SERVER_URL, GITHUB_REPOSITORY.
# Required env: BUMP_TOKEN, GITHUB_SERVER_URL, GITHUB_REPOSITORY.
# Optional env: GITHUB_API_URL (defaults to ${GITHUB_SERVER_URL}/api/v1).
set -euo pipefail
PN="gitea-runner"
UPSTREAM_RSS="https://gitea.com/gitea/runner/releases.rss"
UPSTREAM_ARCHIVE="https://gitea.com/gitea/runner/archive"
UPSTREAM_GOMOD="https://gitea.com/gitea/runner/raw/tag"
UPSTREAM_ARCHIVE="https://gitea.com/api/v1/repos/gitea/runner/archive"
UPSTREAM_GOMOD="https://gitea.com/api/v1/repos/gitea/runner/raw/go.mod"
: "${GITEA_TOKEN:?GITEA_TOKEN is required}"
: "${BUMP_TOKEN:?BUMP_TOKEN is required}"
: "${GITHUB_SERVER_URL:?GITHUB_SERVER_URL is required}"
: "${GITHUB_REPOSITORY:?GITHUB_REPOSITORY is required}"
API="${GITHUB_API_URL:-${GITHUB_SERVER_URL}/api/v1}"
host=${GITHUB_SERVER_URL#http://}; host=${host#https://}
api() { curl -fsSL -H "Authorization: token ${GITEA_TOKEN}" "$@"; }
# Preserve the scheme of GITHUB_SERVER_URL — on a Gitea runner this is the
# internal endpoint (e.g. http://172.17.0.1:3000), which speaks plain HTTP.
scheme="${GITHUB_SERVER_URL%%://*}"
host="${GITHUB_SERVER_URL#*://}"
api() { curl -fsSL -H "Authorization: token ${BUMP_TOKEN}" "$@"; }
# --- determine versions ------------------------------------------------------
latest=$(curl -fsSL "$UPSTREAM_RSS" \
@@ -28,7 +31,7 @@ latest=$(curl -fsSL "$UPSTREAM_RSS" \
[ -n "$latest" ] || { echo "could not parse upstream version"; exit 1; }
WORK=$(mktemp -d)
git clone "https://x-access-token:${GITEA_TOKEN}@${host}/${GITHUB_REPOSITORY}.git" "$WORK"
git clone "${scheme}://x-access-token:${BUMP_TOKEN}@${host}/${GITHUB_REPOSITORY}.git" "$WORK"
cd "$WORK"
pkgdir="dev-util/${PN}"
@@ -79,7 +82,7 @@ git checkout -b "$branch"
git mv "${pkgdir}/${PN}-${current}.ebuild" "${pkgdir}/${PN}-${latest}.ebuild"
# Track the upstream go.mod's required Go version in BDEPEND.
goreq=$(curl -fsSL "${UPSTREAM_GOMOD}/v${latest}/go.mod" \
goreq=$(curl -fsSL "${UPSTREAM_GOMOD}?ref=v${latest}" \
| grep -oE '^go [0-9]+\.[0-9]+(\.[0-9]+)?' | awk '{print $2}')
[ -n "$goreq" ] && sed -i -E \
"s#^BDEPEND=\">=dev-lang/go-[0-9.]+\"#BDEPEND=\">=dev-lang/go-${goreq}\"#" \
@@ -89,6 +92,7 @@ goreq=$(curl -fsSL "${UPSTREAM_GOMOD}/v${latest}/go.mod" \
mkdir -p /var/cache/distfiles
cp "${dist}/${PN}-${latest}.tar.gz" /var/cache/distfiles/
cp "${dist}/${PN}-${latest}-vendor.tar.xz" /var/cache/distfiles/
mkdir -p /etc/portage/repos.conf
printf '[DEFAULT]\nmain-repo = gentoo\n\n[gentoo]\nlocation = /var/db/repos/gentoo\n' \
> /etc/portage/repos.conf/gentoo.conf
printf '[azy5030]\nlocation = %s\nmasters = gentoo\nauto-sync = false\n' "$WORK" \
@@ -110,7 +114,7 @@ body=$(cat <<EOF
Automated bump of \`dev-util/${PN}\` from ${current} to ${latest}.
- Upstream release: https://gitea.com/gitea/runner/releases/tag/v${latest}
- Vendor tarball: ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/releases/tag/${vendor_tag}
- Vendor tarball: https://git.azy.dev/${GITHUB_REPOSITORY}/releases/tag/${vendor_tag}
Review checklist:
- [ ] LICENSE still covers all vendored module licenses (\`go-licenses report ./...\`)