源码快照 @ 2026-09-02 (source-only, 剔除非源码素材)

scripts/aur/publish-aur.sh

@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)
+
+TAG="${1:-${RELEASE_TAG:-}}"
+if [ -z "$TAG" ]; then
+  echo "Missing release tag (arg or RELEASE_TAG)." >&2
+  exit 1
+fi
+
+if [[ "$TAG" != v* ]]; then
+  TAG="v${TAG}"
+fi
+
+VERSION="${TAG#v}"
+
+if [ -z "${AUR_SSH_PRIVATE_KEY:-}" ]; then
+  echo "AUR_SSH_PRIVATE_KEY is required to push to AUR." >&2
+  exit 1
+fi
+
+# AUR package repo name (AUR repo = ssh://aur@aur.archlinux.org/<name>.git)
+AUR_REPO="${AUR_REPO:-openwork}"
+AUR_REMOTE="ssh://aur@aur.archlinux.org/${AUR_REPO}.git"
+
+if [ "${AUR_SKIP_UPDATE:-}" != "1" ]; then
+  "${ROOT_DIR}/scripts/aur/update-aur.sh" "$TAG"
+fi
+
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+
+KEY_PATH="${TMP_DIR}/aur.key"
+printf '%s\n' "$AUR_SSH_PRIVATE_KEY" > "$KEY_PATH"
+chmod 600 "$KEY_PATH"
+
+mkdir -p "$HOME/.ssh"
+touch "$HOME/.ssh/known_hosts"
+
+if ! ssh-keygen -F aur.archlinux.org >/dev/null 2>&1; then
+  ssh-keyscan -t rsa,ecdsa,ed25519 aur.archlinux.org >> "$HOME/.ssh/known_hosts" 2>/dev/null
+fi
+
+export GIT_SSH_COMMAND="ssh -i $KEY_PATH -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes"
+
+git clone "$AUR_REMOTE" "$TMP_DIR/aur"
+
+cp "$ROOT_DIR/packaging/aur/PKGBUILD" "$TMP_DIR/aur/PKGBUILD"
+cp "$ROOT_DIR/packaging/aur/.SRCINFO" "$TMP_DIR/aur/.SRCINFO"
+
+cd "$TMP_DIR/aur"
+
+if git diff --quiet -- PKGBUILD .SRCINFO; then
+  echo "AUR already up to date for ${AUR_REPO} (${VERSION})."
+  exit 0
+fi
+
+git add PKGBUILD .SRCINFO
+git -c user.name="OpenWork Release Bot" \
+    -c user.email="release-bot@users.noreply.github.com" \
+    commit -m "chore(aur): update PKGBUILD for ${VERSION}"
+
+current_branch=$(git symbolic-ref --short HEAD 2>/dev/null || true)
+if [ -z "$current_branch" ]; then
+  current_branch="master"
+fi
+
+git push origin "HEAD:${current_branch}"