0dcb2e14e9Drop all runtime installs from release pipeline tasks: - goreleaser-release: remove curl syft install + go install goreleaser; switch GO_IMAGE/SYFT_VERSION/GORELEASER_VERSION params to single RELEASE_TOOLS_IMAGE; split install+run into separate named steps now possible since image has all tools - cosign-sign-release: remove COSIGN_IMAGE/TOOLS_IMAGE params + microdnf jq+curl install; both steps now use RELEASE_TOOLS_IMAGE - mcpb-pack: remove NODE_IMAGE/TOOLS_IMAGE params + apt-get jq+curl + npx -y; replace npx -y @anthropic-ai/mcpb with mcpb (pre-baked binary) - go-ci: remove GOVULNCHECK_VERSION param + go install govulncheck; govulncheck step uses RELEASE_TOOLS_IMAGE; GO_IMAGE + GOLANGCI_LINT_IMAGE unchanged (no runtime installs there) - openspec-validate: remove NODE_IMAGE/OPENSPEC_VERSION params + npm install -g; single step uses RELEASE_TOOLS_IMAGE All tasks default to codeberg.org/operate-first/release-tools:latest. Pin to a specific tag after first image publish.
103 lines
3.6 KiB
YAML
103 lines
3.6 KiB
YAML
apiVersion: tekton.dev/v1beta1
|
|
kind: Task
|
|
metadata:
|
|
name: mcpb-pack
|
|
annotations:
|
|
tekton.dev/displayName: "build .mcpb Claude Desktop Extension per platform"
|
|
spec:
|
|
description: |
|
|
Packs the GoReleaser-produced binaries into platform-specific .mcpb
|
|
(Claude Desktop Extension) bundles, one per (goos, goarch) pair, and
|
|
attaches each to the Codeberg release. Mirrors the final step of
|
|
.forgejo/workflows/release.yml.
|
|
|
|
The extension/manifest.json is rewritten in place with the release
|
|
version before each pack, then restored from a backup on exit.
|
|
|
|
All tools (mcpb, jq, curl) are pre-baked into RELEASE_TOOLS_IMAGE.
|
|
No runtime installs.
|
|
params:
|
|
- name: RELEASE_TOOLS_IMAGE
|
|
description: |
|
|
Pre-built release-tools image containing go, goreleaser, syft, cosign,
|
|
govulncheck, node, npm, jq, curl, mcpb, and openspec.
|
|
type: string
|
|
default: codeberg.org/operate-first/release-tools:latest
|
|
- name: TAG
|
|
description: Tag ref name (e.g. v2.24.0).
|
|
type: string
|
|
- name: REPO
|
|
description: Repo slug owner/name (e.g. goern/forgejo-mcp).
|
|
type: string
|
|
- name: CODEBERG_API
|
|
description: Codeberg API base URL.
|
|
type: string
|
|
default: https://codeberg.org/api/v1
|
|
- name: PLATFORMS
|
|
description: |
|
|
Space-separated list of `goos/goarch` pairs to pack. Default
|
|
matches the .forgejo workflow.
|
|
type: string
|
|
default: "linux/amd64 linux/arm64 darwin/amd64 darwin/arm64"
|
|
workspaces:
|
|
- name: source
|
|
mountPath: /workspace/src
|
|
stepTemplate:
|
|
workingDir: $(workspaces.source.path)
|
|
steps:
|
|
- name: pack-and-upload
|
|
image: $(params.RELEASE_TOOLS_IMAGE)
|
|
env:
|
|
- name: GITEA_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: op1st-release-token
|
|
key: token
|
|
script: |
|
|
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
TAG="$(params.TAG)"
|
|
VERSION="${TAG#v}"
|
|
REPO="$(params.REPO)"
|
|
API="$(params.CODEBERG_API)"
|
|
|
|
RELEASE_ID=$(curl -fsSL \
|
|
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
"${API}/repos/${REPO}/releases/tags/${TAG}" \
|
|
| jq -r '.id')
|
|
if [ -z "$RELEASE_ID" ] || [ "$RELEASE_ID" = "null" ]; then
|
|
echo "ERROR: Could not resolve release ID for tag ${TAG}" >&2
|
|
exit 1
|
|
fi
|
|
|
|
cp extension/manifest.json extension/manifest.json.orig
|
|
trap 'mv -f extension/manifest.json.orig extension/manifest.json 2>/dev/null || true' EXIT
|
|
|
|
for pair in $(params.PLATFORMS); do
|
|
goos="${pair%/*}"
|
|
goarch="${pair#*/}"
|
|
rm -rf extension/bin
|
|
mkdir -p extension/bin
|
|
|
|
BIN=$(find dist -type f -name forgejo-mcp -path "*${goos}_${goarch}*" | head -1)
|
|
if [ -z "$BIN" ]; then
|
|
echo "ERROR: No binary for ${goos}_${goarch} in dist/" >&2
|
|
exit 1
|
|
fi
|
|
cp "$BIN" extension/bin/forgejo-mcp
|
|
chmod +x extension/bin/forgejo-mcp
|
|
|
|
cp extension/manifest.json.orig extension/manifest.json
|
|
jq --arg v "$VERSION" '.version=$v' extension/manifest.json > extension/manifest.json.tmp
|
|
mv extension/manifest.json.tmp extension/manifest.json
|
|
|
|
OUT="dist/forgejo-mcp_${VERSION}_${goos}_${goarch}.mcpb"
|
|
mcpb pack extension/ "$OUT"
|
|
|
|
ASSET_NAME=$(basename "$OUT")
|
|
curl -fsSL -X POST \
|
|
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
-F "attachment=@${OUT}" \
|
|
"${API}/repos/${REPO}/releases/${RELEASE_ID}/assets?name=${ASSET_NAME}"
|
|
done
|