.+?)(-unsigned)?\.msi/', $filename, $matches);
79 | if (empty($matches)) {
80 | ApiResponse::error('400', 'Unexpected filename: '.$filename);
81 | }
82 | $version = ltrim($matches['version'], 'v');
83 | $is_stable = Version::isStableVersionNumber($version);
84 | $release = GitHub::getOrCreateRelease('v'.$version, $is_stable);
85 |
86 | // Upload the file to the release
87 | $signed_filename = str_replace('-unsigned', '', $filename);
88 | $was_uploaded = GitHub::uploadReleaseArtifact($release, $signed_filename, $signed_tempfile)->wait();
89 | $output = $was_uploaded
90 | ? 'Published '.$signed_filename.' to '.$version
91 | : 'File '.$signed_filename.' already existed in '.$version.'!';
92 |
93 | $output .= "\n".Release::performPostReleaseJobsIfReleaseIsComplete($version);
94 |
95 | ApiResponse::sendAndLog($output);
96 |
--------------------------------------------------------------------------------
/nightly/public/release_circleci.php:
--------------------------------------------------------------------------------
1 | vcs_tag}:
18 |
19 | ```
20 | {$message}
21 | ```
22 |
23 | Re-running the build on CircleCI might fix it. [Click "Rebuild" on this page to trigger a rebuild]({$build->build_url})
24 |
25 | Full logs: https://{$release_host}/log/release_circleci
26 |
27 | cc @Daniel15 @{$build->user->login}
28 | EOT;
29 | return [
30 | 'title' => 'Error releasing '.$build->vcs_tag,
31 | 'body' => $body,
32 | 'labels' => ['bug-high-priority', 'bug-distrib'],
33 | 'assignees' => [$build->user->login],
34 | ];
35 | });
36 |
37 | // Only publish tagged releases
38 | if (!preg_match(Config::RELEASE_TAG_FORMAT, $build->vcs_tag)) {
39 | ApiResponse::sendAndLog(sprintf(
40 | '[%s] Not publishing as release; this is not a release tag. branch=%s tag=%s',
41 | $build->build_num,
42 | $build->branch ?? '[none]',
43 | $build->vcs_tag ?? '[none]'
44 | ));
45 | }
46 |
47 | if ($build->status !== 'success' && $build->status !== 'fixed') {
48 | ApiResponse::error('400', sprintf(
49 | 'Build #%s in wrong status (%s), expected "success". Not releasing it.',
50 | $build->build_num,
51 | $build->status
52 | ));
53 | }
54 |
55 | $artifacts = CircleCI::getArtifactsForBuild($build->build_num);
56 | if (count($artifacts) === 0) {
57 | ApiResponse::sendAndLog(sprintf(
58 | '[%s] Not publishing as release; it has no artifacts',
59 | $build->build_num
60 | ));
61 | }
62 | $tempdir = Filesystem::createTempDir('yarn-release');
63 | ArtifactArchiver::downloadArtifacts($artifacts, $tempdir);
64 |
65 | $version = ltrim($build->vcs_tag, 'v');
66 | $is_stable = Version::isStableVersionNumber($version);
67 | $release = GitHub::getOrCreateRelease($build->vcs_tag, $is_stable);
68 | $output = '['.$build->build_num.'] Uploaded to '.$build->vcs_tag.":\n";
69 |
70 | $promises = [];
71 | foreach ($artifacts as $filename => $_) {
72 | $path = $tempdir.$filename;
73 | $promises[$filename] = GitHub::uploadReleaseArtifact($release, $filename, $path);
74 |
75 | // GPG sign all the files that need to be signed
76 | if (preg_match(Config::SIGN_FILE_TYPES, $filename)) {
77 | file_put_contents($path.'.asc', GPG::sign($path, Config::GPG_RELEASE));
78 | $promises[$filename.'.asc'] = GitHub::uploadReleaseArtifact($release, $filename.'.asc', $path.'.asc');
79 | }
80 | }
81 |
82 | $responses = Promise\unwrap($promises);
83 |
84 | $successful = '';
85 | $failed = '';
86 | foreach ($responses as $filename => $succeeded) {
87 | if ($succeeded) {
88 | $successful.= $filename."\n";
89 | } else {
90 | $failed .= $filename."\n";
91 | }
92 | }
93 | if ($successful !== '') {
94 | $output .= $successful;
95 | }
96 | if ($failed !== '') {
97 | $output .= "\nAlready existed:\n".$failed;
98 | }
99 |
100 | $output .= "\n".Release::performPostReleaseJobsIfReleaseIsComplete($version);
101 |
102 | ApiResponse::sendAndLog($output);
103 |
--------------------------------------------------------------------------------
/nightly/public/sign_releases.php:
--------------------------------------------------------------------------------
1 | assets as $asset) {
32 | if (preg_match(Config::SIGN_FILE_TYPES, $asset->name)) {
33 | $files_in_release[] = $asset;
34 | } else if (Str::endsWith($asset->name, '.asc')) {
35 | $signed_files[str_replace('.asc', '', $asset->name)] = true;
36 | }
37 | }
38 |
39 | foreach ($files_in_release as $asset) {
40 | if (array_key_exists($asset->name, $signed_files)) {
41 | // File is already signed
42 | continue;
43 | }
44 | $download_path = tempnam(sys_get_temp_dir(), '');
45 | $download_handle = fopen($download_path, 'w');
46 | $files_to_sign[] = [
47 | 'asset' => $asset,
48 | 'download_handle' => $download_handle,
49 | 'download_path' => $download_path,
50 | 'release' => $release,
51 | ];
52 | $promises[] = $client->getAsync($asset->browser_download_url, [
53 | 'sink' => $download_handle,
54 | ]);
55 | }
56 | }
57 |
58 | if (count($files_to_sign) === 0) {
59 | ApiResponse::sendAndLog('All releases have already been signed!');
60 | }
61 |
62 | // Download all the artifacts to be signed in parallel
63 | $responses = Promise\unwrap($promises);
64 |
65 | $output = "Signed:\n";
66 | $promises = [];
67 | $uri = new \Rize\UriTemplate\UriTemplate();
68 | foreach ($files_to_sign as $file) {
69 | $signature = GPG::sign($file['download_path'], Config::GPG_RELEASE);
70 | unlink($file['download_path']);
71 |
72 | $upload_url = $uri->expand(
73 | $file['release']->upload_url,
74 | ['name' => $file['asset']->name.'.asc']
75 | );
76 | $promises[] = $client->postAsync($upload_url, [
77 | 'body' => $signature,
78 | 'headers' => [
79 | 'Authorization' => 'token '.Config::GITHUB_TOKEN,
80 | 'Content-Type' => 'application/pgp-signature',
81 | ],
82 | ]);
83 | $output .= $file['release']->tag_name.': '.$file['asset']->name."\n";
84 | }
85 |
86 | // Upload all the signature files in parallel
87 | $responses = Promise\unwrap($promises);
88 |
89 | ApiResponse::sendAndLog($output);
90 |
--------------------------------------------------------------------------------
/release/public/index.php:
--------------------------------------------------------------------------------
1 |
12 | Hello World!
13 |
14 |
15 | Release Management
16 |
21 |
22 |
23 | Log Files
24 |
25 | getFileName(), '.log');
29 | ?>
30 | -
31 |
32 |
33 |
36 |
37 |
38 |
39 | Show advanced debug utils
40 |
41 |
42 |
43 |
Re-Run Release Webhooks
44 |
45 | Use these tools to re-run a webhook if it failed to run for some reason.
46 | Be careful! This will affect LIVE releases!
47 |
48 |
49 |
50 |
56 |
57 |
64 |
← Back
27 |
28 | MAX_LINES) {
31 | echo '[...omitted ', $lines - MAX_LINES, " lines...]\n\n";
32 | $file = array_slice($file, -MAX_LINES);
33 | }
34 |
35 | echo implode("\n", $file);
36 | echo '';
37 | PageLayout::renderFooter();
38 |
--------------------------------------------------------------------------------
/release/public/login.php:
--------------------------------------------------------------------------------
1 | post('https://github.com/login/oauth/access_token', [
16 | 'form_params' => [
17 | 'client_id' => Config::GITHUB_AUTH_CLIENT_ID,
18 | 'client_secret' => Config::GITHUB_AUTH_CLIENT_SECRET,
19 | 'code' => $_GET['code'],
20 | 'state' => GitHubAuth::getState(),
21 | ],
22 | 'headers' => [
23 | 'Accept' => 'application/json',
24 | ],
25 | ]);
26 | $response = json_decode((string)$response->getBody());
27 |
28 | if (!empty($response->error_description)) {
29 | ErrorPage::render('Error: '.htmlspecialchars($response->error_description));
30 | }
31 |
32 | if (empty($response->access_token)) {
33 | ErrorPage::render('Error: No access token!');
34 | }
35 |
36 | // Verify that the user is in our whitelist
37 | $user = $client->get('https://api.github.com/user', [
38 | 'headers' => [
39 | 'Authorization' => 'token '.$response->access_token,
40 | ],
41 | ]);
42 | $user = json_decode((string)$user->getBody());
43 |
44 | if (!in_array(strtolower($user->login), Config::MANAGE_ALLOWED_USERS)) {
45 | ErrorPage::render('Sorry, "'.htmlspecialchars($user->login).'" is not allowed to access this page. Contact Daniel15 if you think you should be allowed here!');
46 | }
47 |
48 | GitHubAuth::completeLogin($response->access_token, $user);
49 | header('Location: '.$_GET['return']);
50 |
--------------------------------------------------------------------------------
/release/public/metrics.php:
--------------------------------------------------------------------------------
1 | getOrRegisterGauge('gpg', 'key_expiry', 'Expiration date of GPG key', ['type'])
22 | ->set($key_info['expiry_date'], [$type]);
23 | }
24 |
25 | $registry = new CollectorRegistry(new InMemory());
26 | addGPGKeyMetrics($registry, 'release', Config::GPG_RELEASE);
27 | addGPGKeyMetrics($registry, 'nightly', Config::GPG_NIGHTLY);
28 |
29 | $renderer = new RenderTextFormat();
30 | $result = $renderer->render($registry->getMetricFamilySamples());
31 |
32 | header('Content-type: ' . RenderTextFormat::MIME_TYPE);
33 | echo $result;
34 |
--------------------------------------------------------------------------------
/release/public/promote_rc.php:
--------------------------------------------------------------------------------
1 | id, [
22 | 'prerelease' => false,
23 | ]);
24 |
25 | // Mark npm release as stable
26 | NPM::addDistTag('yarn', $version, 'latest');
27 |
28 | // Perform post-release magic (update version number on site, publish to
29 | // Chocolatey, publish to Homebrew, etc)
30 | echo Release::performPostReleaseJobsIfReleaseIsComplete($version);
31 |
32 | echo '
Done!';
33 |
34 | PageLayout::renderFooter();
35 |
--------------------------------------------------------------------------------
/release/public/release_type.php:
--------------------------------------------------------------------------------
1 | project,
31 | (array)$build->build
32 | );
33 | $post['environmentVariables'] = array(
34 | 'node_version' => 6,
35 | );
36 | $post['jobId'] = $build->build->jobs[0]->jobId;
37 | $post['buildVersion'] = $build->build->version;
38 | $headers = array(
39 | 'Authorization' => Config::APPVEYOR_WEBHOOK_AUTH_TOKEN,
40 | );
41 | break;
42 |
43 | case 'release_circleci':
44 | // Allow either CircleCI URL or build number
45 | $slash_pos = strrpos($_POST['url'], '/');
46 | $build_num = $slash_pos === false
47 | ? $_POST['url']
48 | : substr($_POST['url'], $slash_pos + 1);
49 | $build = CircleCI::getBuild($build_num);
50 | $post['payload'] = $build;
51 | break;
52 |
53 | default:
54 | throw new Exception('Unknown hook '.htmlspecialchars($_POST['hook']));
55 | }
56 |
57 | $host = str_replace('release', 'nightly', $_SERVER['HTTP_HOST']);
58 | $scheme = strpos($host, 'localdev') === false ? 'https' : 'http';
59 | $url = $scheme.'://'.$host.'/'.$_POST['hook'];
60 |
61 | try {
62 | $client = new Client();
63 | $response = $client->request($method, $url, [
64 | 'headers' => $headers,
65 | 'json' => $post_type === 'json' ? $post : null,
66 | ]);
67 | echo ''.htmlspecialchars($response->getBody()).'
';
68 | } catch (\GuzzleHttp\Exception\RequestException $ex) {
69 | if (!$ex->hasResponse()) {
70 | throw $ex;
71 | }
72 | echo ''.htmlspecialchars($ex->getResponse()->getBody()).'
';
73 | }
74 | } catch (Exception $ex) {
75 | echo
76 | '
77 | Could not execute hook "'.htmlspecialchars($_POST['hook']).'": '.$ex->getMessage(), '
78 |
';
79 | }
80 |
81 | PageLayout::renderFooter();
82 |
--------------------------------------------------------------------------------
/update-deb.sh:
--------------------------------------------------------------------------------
1 | #!/bin/bash
2 | # Updates the Debian repo for nightly builds
3 | #
4 | # To create repo:
5 | # aptly repo create -distribution=nightly -component=main -architectures=amd64,i386,all yarn-nightly
6 | # aptly publish repo -gpg-key=4F77679369475BAA -architectures=i386,amd64 yarn-nightly yarn-nightly
7 |
8 | set -ex
9 |
10 | # Check if there's any .deb files to process
11 | files=$(shopt -s nullglob; echo ./nightly/deb-incoming/*.deb)
12 | if (( ${#files} )); then
13 | aptly repo add -remove-files=true yarn-nightly ./nightly/deb-incoming/
14 | aptly publish update -gpg-key=4F77679369475BAA nightly yarn-nightly
15 | else
16 | echo 'No packages to process'
17 | fi
18 |
--------------------------------------------------------------------------------
/views/ErrorPage.php:
--------------------------------------------------------------------------------
1 | ', $message, '';
7 | PageLayout::renderFooter();
8 | die();
9 | }
10 | }
11 |
--------------------------------------------------------------------------------
/views/PageLayout.php:
--------------------------------------------------------------------------------
1 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
17 |
18 |
19 |
20 |
21 | <?= htmlspecialchars($title) ?> | Yarn
22 |
23 |
24 |
25 |
26 |
27 |
28 |
29 |
30 |
31 |
32 |
33 |
34 |
35 |
36 |
37 |
38 |
39 |
40 |
41 |
42 |
43 |
44 |
45 |
46 |
47 |
48 |
49 |
50 |
51 |
52 |
53 |
54 |
55 |
56 |
57 |
58 |
59 |
144 |
145 |
146 |
147 |
148 |
149 |
150 |
151 |
152 |
153 |
154 |
155 |
156 |
157 |
158 |
159 |
160 |
161 |
162 |
165 |
166 |
167 |
168 |
169 |
170 |
171 |
172 |
173 |
174 |
175 |
176 |
177 |
178 |
179 |
180 |
181 |
182 |
183 |
184 |
185 |
186 |
187 |
188 |
189 |
190 |
191 |
192 |
197 |
198 |
199 |
200 |
201 |
202 |
217 |
231 |
232 |
241 |
242 |
243 |
244 |
245 |
246 |
247 |
248 |
249 |
250 |
251 |
252 |