gsadmin
62131e7501
Update-Changelog inserted the version heading above the notes, so the section
the release workflow extracts contained only the build line while the actual
notes stayed under "Unreleased". Every release published an empty changelog. It
now promotes whatever sits under Unreleased into the version section and leaves
a fresh empty Unreleased above it, with the provenance line italicised and last
so it does not read as another entry in whichever section the notes ended on.
Re-running the same version remains a no-op, and a build with nothing to say
still produces a section.
SignCertificateByCa now prefers /api/v1/cert-manager over the older /api/v1/pki
route.
RetrieveCertificate and GetCertificateBundle deliberately keep the older route
first, which is the opposite of what it looks like. The /api/v1/pki route
resolves a certificate by serial number, which is what callers supply; the
cert-manager route takes a certificate ID and passes it through as
getCert({ id }), so it cannot answer a serial. Both remain registered so either
identifier resolves - which is what lets the metadata path look a certificate up
by ID - and a comment now records why reordering them would break serial
lookups.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
474 lines
20 KiB
PowerShell
474 lines
20 KiB
PowerShell
[CmdletBinding()]
|
|
param(
|
|
[ValidateSet('Debug', 'Release')]
|
|
[string]$Configuration = 'Release',
|
|
|
|
[switch]$Clean,
|
|
|
|
[switch]$Restore,
|
|
|
|
[switch]$RunTests,
|
|
|
|
[switch]$RunIntegrationTests,
|
|
|
|
[switch]$CreateRelease,
|
|
|
|
[switch]$CommitOnSuccess,
|
|
|
|
[switch]$CommitArtifacts,
|
|
|
|
[switch]$Force
|
|
)
|
|
|
|
if ($CommitOnSuccess.IsPresent -and $CommitArtifacts.IsPresent) {
|
|
throw "-CommitOnSuccess and -CommitArtifacts are mutually exclusive."
|
|
}
|
|
|
|
$ErrorActionPreference = 'Stop'
|
|
Set-StrictMode -Version Latest
|
|
|
|
$RepositoryRoot = [System.IO.DirectoryInfo]$PSScriptRoot
|
|
$SrcRoot = [System.IO.DirectoryInfo][System.IO.Path]::Combine($RepositoryRoot.FullName, 'src')
|
|
$ProjectFile = [System.IO.FileInfo][System.IO.Path]::Combine($SrcRoot.FullName, 'PSInfisicalAPI', 'PSInfisicalAPI.csproj')
|
|
$TestsFile = [System.IO.FileInfo][System.IO.Path]::Combine($SrcRoot.FullName, 'PSInfisicalAPI.Tests', 'PSInfisicalAPI.Tests.csproj')
|
|
$ModuleRoot = [System.IO.DirectoryInfo][System.IO.Path]::Combine($RepositoryRoot.FullName, 'Module', 'PSInfisicalAPI')
|
|
$ModuleBinDir = [System.IO.DirectoryInfo][System.IO.Path]::Combine($ModuleRoot.FullName, 'bin')
|
|
$ArtifactsDir = [System.IO.DirectoryInfo][System.IO.Path]::Combine($RepositoryRoot.FullName, 'Artifacts')
|
|
$ReleasesDir = [System.IO.DirectoryInfo][System.IO.Path]::Combine($RepositoryRoot.FullName, 'Releases')
|
|
$ChangelogFile = [System.IO.FileInfo][System.IO.Path]::Combine($RepositoryRoot.FullName, 'CHANGELOG.md')
|
|
$ModuleGuid = 'b8a2f3d4-7c51-4d2f-9e6a-1f0c8b3d4e51'
|
|
|
|
function Write-Step {
|
|
param([string]$Message)
|
|
Write-Host "==> $Message" -ForegroundColor Cyan
|
|
}
|
|
|
|
function Get-BuildVersion {
|
|
return (Get-Date).ToUniversalTime().ToString('yyyy.MM.dd.HHmm')
|
|
}
|
|
|
|
function Get-CommitHash {
|
|
try {
|
|
$hash = (& git rev-parse --short=12 HEAD 2>$null).Trim()
|
|
if ($LASTEXITCODE -ne 0 -or [string]::IsNullOrEmpty($hash)) {
|
|
return 'unknown'
|
|
}
|
|
|
|
return $hash
|
|
} catch {
|
|
return 'unknown'
|
|
}
|
|
}
|
|
|
|
function Ensure-Directory {
|
|
param([System.IO.DirectoryInfo]$Directory)
|
|
if (-not $Directory.Exists) { [void]$Directory.Create() }
|
|
}
|
|
|
|
function Clear-Directory {
|
|
param([System.IO.DirectoryInfo]$Directory)
|
|
if ($Directory.Exists) {
|
|
Get-ChildItem -LiteralPath $Directory.FullName -Force | Remove-Item -Recurse -Force -ErrorAction SilentlyContinue
|
|
}
|
|
}
|
|
|
|
function Get-AssemblyVersion {
|
|
param([string]$BuildVersion)
|
|
$parts = $BuildVersion -split '\.'
|
|
if ($parts.Length -ne 4) { return '1.0.0.0' }
|
|
$year = [int]$parts[0]
|
|
$month = [int]$parts[1]
|
|
$day = [int]$parts[2]
|
|
$hhmm = [int]$parts[3]
|
|
$assemblyMinor = ($month * 100) + $day
|
|
return ("{0}.{1}.{2}.0" -f $year, $assemblyMinor, $hhmm)
|
|
}
|
|
|
|
function Write-Manifest {
|
|
param(
|
|
[System.IO.FileInfo]$Path,
|
|
[string]$ModuleVersion,
|
|
[string]$CommitHash
|
|
)
|
|
|
|
$content = @"
|
|
@{
|
|
RootModule = 'PSInfisicalAPI.psm1'
|
|
ModuleVersion = '$ModuleVersion'
|
|
GUID = '$ModuleGuid'
|
|
Author = 'Grace Solutions'
|
|
CompanyName = 'Grace Solutions'
|
|
Copyright = '(c) Grace Solutions. All rights reserved.'
|
|
Description = 'PSInfisicalAPI is a C# binary PowerShell module for the Infisical REST API, providing cmdlets for authentication, secret retrieval, and export with automatic environment-variable discovery across Process, User, and Machine scopes.'
|
|
PowerShellVersion = '5.1'
|
|
CompatiblePSEditions = @('Desktop','Core')
|
|
FunctionsToExport = @()
|
|
CmdletsToExport = @(
|
|
'Connect-Infisical',
|
|
'Disconnect-Infisical',
|
|
'Get-InfisicalSecret',
|
|
'New-InfisicalSecret',
|
|
'Update-InfisicalSecret',
|
|
'Remove-InfisicalSecret',
|
|
'Copy-InfisicalSecret',
|
|
'ConvertTo-InfisicalSecretDictionary',
|
|
'Export-InfisicalSecrets',
|
|
'Import-InfisicalSecret',
|
|
'Get-InfisicalProject',
|
|
'New-InfisicalProject',
|
|
'Update-InfisicalProject',
|
|
'Remove-InfisicalProject',
|
|
'Get-InfisicalEnvironment',
|
|
'New-InfisicalEnvironment',
|
|
'Update-InfisicalEnvironment',
|
|
'Remove-InfisicalEnvironment',
|
|
'Get-InfisicalFolder',
|
|
'New-InfisicalFolder',
|
|
'Update-InfisicalFolder',
|
|
'Remove-InfisicalFolder',
|
|
'Get-InfisicalTag',
|
|
'New-InfisicalTag',
|
|
'Update-InfisicalTag',
|
|
'Remove-InfisicalTag',
|
|
'Get-InfisicalOrganization',
|
|
'New-InfisicalOrganization',
|
|
'Update-InfisicalOrganization',
|
|
'Remove-InfisicalOrganization',
|
|
'Get-InfisicalSubOrganization',
|
|
'New-InfisicalSubOrganization',
|
|
'Update-InfisicalSubOrganization',
|
|
'Remove-InfisicalSubOrganization',
|
|
'Get-InfisicalCertificateAuthority',
|
|
'Get-InfisicalPkiSubscriber',
|
|
'Get-InfisicalCertificateProfile',
|
|
'Get-InfisicalCertificatePolicy',
|
|
'Get-InfisicalCertificate',
|
|
'Request-InfisicalCertificate',
|
|
'ConvertTo-InfisicalCertificate',
|
|
'Install-InfisicalCertificate',
|
|
'Uninstall-InfisicalCertificate',
|
|
'Export-InfisicalCertificate',
|
|
'Get-InfisicalCertificateApplication',
|
|
'Get-InfisicalCertificateApplicationEnrollment',
|
|
'New-InfisicalScepDynamicChallenge',
|
|
'Get-InfisicalScepMdmProfile',
|
|
'Export-InfisicalScepMdmProfile',
|
|
'Write-InfisicalScepMdmProfileToWmi',
|
|
'Start-InfisicalProcess',
|
|
'Get-InfisicalEnvironmentVariable',
|
|
'Get-InfisicalSANList'
|
|
)
|
|
AliasesToExport = @()
|
|
VariablesToExport = @()
|
|
FormatsToProcess = @('PSInfisicalAPI.Format.ps1xml')
|
|
TypesToProcess = @('PSInfisicalAPI.Types.ps1xml')
|
|
PrivateData = @{
|
|
PSData = @{
|
|
Tags = @('Infisical','Secrets','API','SecureString','Vault','Authentication')
|
|
LicenseUri = 'https://www.gnu.org/licenses/agpl-3.0.html'
|
|
ProjectUri = 'https://prod.git.gracesolution.info/gsadmin/PSInfisicalAPI'
|
|
ReleaseNotes = 'See CHANGELOG.md in the project repository for release history.'
|
|
CommitHash = '$CommitHash'
|
|
}
|
|
}
|
|
}
|
|
"@
|
|
|
|
[System.IO.File]::WriteAllText($Path.FullName, $content, [System.Text.UTF8Encoding]::new($false))
|
|
}
|
|
|
|
function Update-Changelog {
|
|
<#
|
|
Promotes whatever sits under "## Unreleased" into a section for this version, leaving a fresh empty
|
|
"## Unreleased" above it.
|
|
|
|
The release workflow builds its release body by extracting the section whose heading matches the version
|
|
it just produced. Inserting the version heading above the notes - as this previously did - left that
|
|
section containing only the build line while the actual notes stayed under "Unreleased", so every
|
|
release published an empty changelog.
|
|
#>
|
|
param([string]$Version, [string]$CommitHash)
|
|
|
|
if (-not $ChangelogFile.Exists) { return }
|
|
$marker = "## $Version"
|
|
$existing = Get-Content -LiteralPath $ChangelogFile.FullName -Raw
|
|
if ($existing -match [Regex]::Escape($marker)) { return }
|
|
|
|
$unreleasedRegex = [regex]::new('(?m)^## Unreleased[^\r\n]*\r?$')
|
|
$unreleasedMatch = $unreleasedRegex.Match($existing)
|
|
if (-not $unreleasedMatch.Success) { return }
|
|
|
|
# Everything from just after the Unreleased heading to the next "## " heading is this version's notes.
|
|
$bodyStart = $unreleasedMatch.Index + $unreleasedMatch.Length
|
|
$nextHeading = [regex]::new('(?m)^## ').Match($existing, $bodyStart)
|
|
$bodyEnd = if ($nextHeading.Success) { $nextHeading.Index } else { $existing.Length }
|
|
|
|
$notes = $existing.Substring($bodyStart, $bodyEnd - $bodyStart).Trim()
|
|
|
|
# Italicised and last so it reads as provenance rather than as another entry in whichever section the
|
|
# notes happened to end on.
|
|
$buildLine = "_Build produced from commit $CommitHash._"
|
|
$versionBody = if ([string]::IsNullOrWhiteSpace($notes)) { $buildLine } else { "$notes`r`n`r`n$buildLine" }
|
|
|
|
$rebuilt = New-Object System.Text.StringBuilder
|
|
[void]$rebuilt.Append($existing.Substring(0, $unreleasedMatch.Index))
|
|
[void]$rebuilt.Append("## Unreleased`r`n`r`n")
|
|
[void]$rebuilt.Append("## $Version`r`n`r`n")
|
|
[void]$rebuilt.Append($versionBody)
|
|
[void]$rebuilt.Append("`r`n`r`n")
|
|
[void]$rebuilt.Append($existing.Substring($bodyEnd))
|
|
|
|
[System.IO.File]::WriteAllText($ChangelogFile.FullName, $rebuilt.ToString(), [System.Text.UTF8Encoding]::new($false))
|
|
}
|
|
|
|
|
|
function Invoke-DotNet {
|
|
param([string[]]$Arguments)
|
|
Write-Step ("dotnet " + ($Arguments -join ' '))
|
|
& dotnet @Arguments
|
|
if ($LASTEXITCODE -ne 0) {
|
|
throw "dotnet command failed: $($Arguments -join ' ')"
|
|
}
|
|
}
|
|
|
|
function Test-ModuleImports {
|
|
param([System.IO.DirectoryInfo]$ModuleDirectory)
|
|
Write-Step "Validating module import, manifest, and help"
|
|
$manifestPath = [System.IO.Path]::Combine($ModuleDirectory.FullName, 'PSInfisicalAPI.psd1')
|
|
$script = @"
|
|
`$ErrorActionPreference = 'Stop'
|
|
|
|
`$manifest = Test-ModuleManifest -Path '$manifestPath'
|
|
if (`$null -eq `$manifest) {
|
|
throw "Test-ModuleManifest returned no result for '$manifestPath'."
|
|
}
|
|
|
|
Import-Module -Name '$($ModuleDirectory.FullName)' -Force
|
|
|
|
`$cmds = @(Get-Command -Module PSInfisicalAPI -CommandType Cmdlet)
|
|
if (`$cmds.Count -eq 0) {
|
|
throw "No cmdlets were exported by the PSInfisicalAPI module."
|
|
}
|
|
|
|
`$expectedCmds = @('Connect-Infisical','Disconnect-Infisical','Get-InfisicalSecret','New-InfisicalSecret','Update-InfisicalSecret','Remove-InfisicalSecret','Copy-InfisicalSecret','ConvertTo-InfisicalSecretDictionary','Export-InfisicalSecrets','Import-InfisicalSecret','Get-InfisicalProject','New-InfisicalProject','Update-InfisicalProject','Remove-InfisicalProject','Get-InfisicalEnvironment','New-InfisicalEnvironment','Update-InfisicalEnvironment','Remove-InfisicalEnvironment','Get-InfisicalFolder','New-InfisicalFolder','Update-InfisicalFolder','Remove-InfisicalFolder','Get-InfisicalTag','New-InfisicalTag','Update-InfisicalTag','Remove-InfisicalTag','Get-InfisicalOrganization','New-InfisicalOrganization','Update-InfisicalOrganization','Remove-InfisicalOrganization','Get-InfisicalSubOrganization','New-InfisicalSubOrganization','Update-InfisicalSubOrganization','Remove-InfisicalSubOrganization','Get-InfisicalCertificateAuthority','Get-InfisicalPkiSubscriber','Get-InfisicalCertificateProfile','Get-InfisicalCertificatePolicy','Get-InfisicalCertificate','Request-InfisicalCertificate','ConvertTo-InfisicalCertificate','Install-InfisicalCertificate','Uninstall-InfisicalCertificate','Export-InfisicalCertificate','Get-InfisicalCertificateApplication','Get-InfisicalCertificateApplicationEnrollment','New-InfisicalScepDynamicChallenge','Get-InfisicalScepMdmProfile','Export-InfisicalScepMdmProfile','Write-InfisicalScepMdmProfileToWmi','Start-InfisicalProcess','Get-InfisicalEnvironmentVariable','Get-InfisicalSANList')
|
|
foreach (`$expected in `$expectedCmds) {
|
|
if (-not (Get-Command -Name `$expected -Module PSInfisicalAPI -ErrorAction SilentlyContinue)) {
|
|
throw "Cmdlet not found: `$expected"
|
|
}
|
|
}
|
|
|
|
foreach (`$cmd in `$cmds) {
|
|
`$name = `$cmd.Name
|
|
`$help = Get-Help -Name `$name -Full -ErrorAction SilentlyContinue
|
|
if (`$null -eq `$help) {
|
|
throw "Get-Help returned nothing for cmdlet: `$name"
|
|
}
|
|
|
|
`$synopsis = (`$help.Synopsis | Out-String).Trim()
|
|
if ([string]::IsNullOrWhiteSpace(`$synopsis) -or `$synopsis.StartsWith(`$name, [System.StringComparison]::OrdinalIgnoreCase)) {
|
|
throw "Get-Help synopsis is missing or auto-generated for cmdlet: `$name"
|
|
}
|
|
|
|
`$description = (`$help.description | Out-String).Trim()
|
|
if ([string]::IsNullOrWhiteSpace(`$description)) {
|
|
throw "Get-Help description is empty for cmdlet: `$name"
|
|
}
|
|
|
|
`$examples = Get-Help -Name `$name -Examples -ErrorAction SilentlyContinue
|
|
if (`$null -eq `$examples -or `$null -eq `$examples.examples -or `$null -eq `$examples.examples.example) {
|
|
throw "Get-Help -Examples returned no examples for cmdlet: `$name"
|
|
}
|
|
|
|
`$exampleNodes = @(`$examples.examples.example)
|
|
if (`$exampleNodes.Count -lt 1) {
|
|
throw "Get-Help -Examples returned zero examples for cmdlet: `$name"
|
|
}
|
|
|
|
foreach (`$example in `$exampleNodes) {
|
|
`$code = (`$example.code | Out-String).Trim()
|
|
if ([string]::IsNullOrWhiteSpace(`$code)) {
|
|
throw "Example with empty code block found for cmdlet: `$name"
|
|
}
|
|
}
|
|
}
|
|
|
|
`$about = Get-Help -Name 'about_PSInfisicalAPI' -ErrorAction SilentlyContinue
|
|
if (`$null -eq `$about -or [string]::IsNullOrWhiteSpace((`$about | Out-String))) {
|
|
throw "Get-Help 'about_PSInfisicalAPI' returned no content. Ensure en-US/about_PSInfisicalAPI.help.txt is present."
|
|
}
|
|
"@
|
|
|
|
$tempFile = [System.IO.FileInfo][System.IO.Path]::Combine([System.IO.Path]::GetTempPath(), [System.IO.Path]::GetRandomFileName() + '.ps1')
|
|
try {
|
|
[System.IO.File]::WriteAllText($tempFile.FullName, $script, [System.Text.UTF8Encoding]::new($false))
|
|
& pwsh -NoProfile -NonInteractive -ExecutionPolicy Bypass -File $tempFile.FullName
|
|
if ($LASTEXITCODE -ne 0) { throw "Module import validation failed in pwsh." }
|
|
} finally {
|
|
if ($tempFile.Exists) { Remove-Item -LiteralPath $tempFile.FullName -Force -ErrorAction SilentlyContinue }
|
|
}
|
|
}
|
|
|
|
$buildVersion = Get-BuildVersion
|
|
$assemblyVersion = Get-AssemblyVersion -BuildVersion $buildVersion
|
|
$commitHash = Get-CommitHash
|
|
|
|
Write-Step "Build version: $buildVersion"
|
|
Write-Step "Assembly version: $assemblyVersion"
|
|
Write-Step "Commit hash: $commitHash"
|
|
|
|
Ensure-Directory -Directory $ArtifactsDir
|
|
Ensure-Directory -Directory $ModuleRoot
|
|
Ensure-Directory -Directory $ModuleBinDir
|
|
|
|
if ($Clean.IsPresent) {
|
|
Write-Step "Cleaning generated outputs"
|
|
Clear-Directory -Directory $ModuleBinDir
|
|
Clear-Directory -Directory $ArtifactsDir
|
|
Get-ChildItem -LiteralPath $SrcRoot.FullName -Recurse -Directory -Force |
|
|
Where-Object { $_.Name -in @('bin','obj') } |
|
|
ForEach-Object { Remove-Item -LiteralPath $_.FullName -Recurse -Force -ErrorAction SilentlyContinue }
|
|
}
|
|
|
|
if ($Restore.IsPresent) {
|
|
Invoke-DotNet -Arguments @('restore', $ProjectFile.FullName)
|
|
Invoke-DotNet -Arguments @('restore', $TestsFile.FullName)
|
|
}
|
|
|
|
Write-Step "Building $($ProjectFile.Name) ($Configuration)"
|
|
$buildArgs = @(
|
|
'build', $ProjectFile.FullName,
|
|
'-c', $Configuration,
|
|
'--nologo',
|
|
"-p:BuildVersion=$buildVersion",
|
|
"-p:BuildAssemblyVersion=$assemblyVersion",
|
|
"-p:BuildCommitHash=$commitHash"
|
|
)
|
|
Invoke-DotNet -Arguments $buildArgs
|
|
|
|
if ($RunTests.IsPresent -or $RunIntegrationTests.IsPresent) {
|
|
Write-Step "Running tests"
|
|
$testFilter = if ($RunIntegrationTests.IsPresent) { 'Category!=NEVER' } else { 'Category!=Integration' }
|
|
$testArgs = @(
|
|
'test', $TestsFile.FullName,
|
|
'-c', $Configuration,
|
|
'--nologo',
|
|
'--filter', $testFilter,
|
|
"-p:BuildVersion=$buildVersion",
|
|
"-p:BuildAssemblyVersion=$assemblyVersion",
|
|
"-p:BuildCommitHash=$commitHash"
|
|
)
|
|
Invoke-DotNet -Arguments $testArgs
|
|
}
|
|
|
|
Write-Step "Publishing module binaries"
|
|
$publishOutput = [System.IO.DirectoryInfo][System.IO.Path]::Combine($ArtifactsDir.FullName, 'publish')
|
|
Ensure-Directory -Directory $publishOutput
|
|
Clear-Directory -Directory $publishOutput
|
|
$publishArgs = @(
|
|
'publish', $ProjectFile.FullName,
|
|
'-c', $Configuration,
|
|
'--nologo',
|
|
'-o', $publishOutput.FullName,
|
|
"-p:BuildVersion=$buildVersion",
|
|
"-p:BuildAssemblyVersion=$assemblyVersion",
|
|
"-p:BuildCommitHash=$commitHash"
|
|
)
|
|
Invoke-DotNet -Arguments $publishArgs
|
|
|
|
Clear-Directory -Directory $ModuleBinDir
|
|
$desiredAssemblies = @('PSInfisicalAPI.dll','Newtonsoft.Json.dll','YamlDotNet.dll','BouncyCastle.Cryptography.dll')
|
|
foreach ($assembly in $desiredAssemblies) {
|
|
$source = [System.IO.FileInfo][System.IO.Path]::Combine($publishOutput.FullName, $assembly)
|
|
if ($source.Exists) {
|
|
Copy-Item -LiteralPath $source.FullName -Destination $ModuleBinDir.FullName -Force
|
|
}
|
|
}
|
|
|
|
Write-Step "Staging cmdlet help XML next to module binary"
|
|
$moduleCultureDirs = Get-ChildItem -LiteralPath $ModuleRoot.FullName -Directory -Force -ErrorAction SilentlyContinue |
|
|
Where-Object { $_.Name -match '^[a-z]{2}(-[A-Za-z0-9]+)*$' }
|
|
foreach ($cultureDir in $moduleCultureDirs) {
|
|
$helpXmlSource = [System.IO.FileInfo][System.IO.Path]::Combine($cultureDir.FullName, 'PSInfisicalAPI.dll-Help.xml')
|
|
if (-not $helpXmlSource.Exists) { continue }
|
|
|
|
$binCultureDir = [System.IO.DirectoryInfo][System.IO.Path]::Combine($ModuleBinDir.FullName, $cultureDir.Name)
|
|
Ensure-Directory -Directory $binCultureDir
|
|
Copy-Item -LiteralPath $helpXmlSource.FullName -Destination $binCultureDir.FullName -Force
|
|
}
|
|
|
|
$primaryHelpXml = [System.IO.FileInfo][System.IO.Path]::Combine($ModuleBinDir.FullName, 'en-US', 'PSInfisicalAPI.dll-Help.xml')
|
|
if (-not $primaryHelpXml.Exists) {
|
|
throw "Help XML not found at '$($primaryHelpXml.FullName)'. Ensure Module/PSInfisicalAPI/en-US/PSInfisicalAPI.dll-Help.xml exists."
|
|
}
|
|
|
|
try {
|
|
[xml]$helpDocument = Get-Content -LiteralPath $primaryHelpXml.FullName -Raw
|
|
} catch {
|
|
throw "Help XML at '$($primaryHelpXml.FullName)' failed to parse as XML: $_"
|
|
}
|
|
|
|
$helpCommandCount = @($helpDocument.helpItems.command).Count
|
|
if ($helpCommandCount -lt 1) {
|
|
throw "Help XML at '$($primaryHelpXml.FullName)' contains no <command:command> entries."
|
|
}
|
|
Write-Step "Help XML contains $helpCommandCount cmdlet entries."
|
|
|
|
$manifestPath = [System.IO.FileInfo][System.IO.Path]::Combine($ModuleRoot.FullName, 'PSInfisicalAPI.psd1')
|
|
Write-Manifest -Path $manifestPath -ModuleVersion $buildVersion -CommitHash $commitHash
|
|
|
|
Update-Changelog -Version $buildVersion -CommitHash $commitHash
|
|
|
|
Test-ModuleImports -ModuleDirectory $ModuleRoot
|
|
|
|
if ($CreateRelease.IsPresent) {
|
|
$releaseDir = [System.IO.DirectoryInfo][System.IO.Path]::Combine($ReleasesDir.FullName, $buildVersion)
|
|
if ($releaseDir.Exists -and -not $Force.IsPresent) {
|
|
throw "Release '$buildVersion' already exists. Pass -Force to overwrite."
|
|
}
|
|
|
|
Ensure-Directory -Directory $ReleasesDir
|
|
if ($releaseDir.Exists) { Clear-Directory -Directory $releaseDir }
|
|
Ensure-Directory -Directory $releaseDir
|
|
|
|
$releaseModuleDir = [System.IO.DirectoryInfo][System.IO.Path]::Combine($releaseDir.FullName, 'PSInfisicalAPI')
|
|
Ensure-Directory -Directory $releaseModuleDir
|
|
Copy-Item -LiteralPath ([System.IO.Path]::Combine($ModuleRoot.FullName, '*')) -Destination $releaseModuleDir.FullName -Recurse -Force
|
|
Write-Step "Release created at $($releaseDir.FullName)"
|
|
}
|
|
|
|
if ($CommitOnSuccess.IsPresent) {
|
|
Write-Step "Committing on success"
|
|
& git add -A
|
|
if ($LASTEXITCODE -ne 0) { throw "git add failed." }
|
|
& git commit -m "Build $buildVersion"
|
|
if ($LASTEXITCODE -ne 0) { throw "git commit failed." }
|
|
}
|
|
|
|
if ($CommitArtifacts.IsPresent) {
|
|
Write-Step "Committing build artifacts (embedded BuildCommitHash=$commitHash)"
|
|
$artifactPaths = @(
|
|
[System.IO.Path]::Combine('Module', 'PSInfisicalAPI', 'bin'),
|
|
[System.IO.Path]::Combine('Module', 'PSInfisicalAPI', 'PSInfisicalAPI.psd1'),
|
|
'CHANGELOG.md'
|
|
)
|
|
|
|
foreach ($artifactPath in $artifactPaths) {
|
|
& git -C $RepositoryRoot.FullName add -- $artifactPath
|
|
if ($LASTEXITCODE -ne 0) { throw "git add '$artifactPath' failed." }
|
|
}
|
|
|
|
$stagedOutput = & git -C $RepositoryRoot.FullName diff --cached --name-only
|
|
if ($LASTEXITCODE -ne 0) { throw "git diff --cached failed." }
|
|
$stagedFiles = @($stagedOutput | Where-Object { -not [string]::IsNullOrWhiteSpace($_) })
|
|
if ($stagedFiles.Count -eq 0) {
|
|
Write-Step "No build artifact changes to commit."
|
|
} else {
|
|
$subject = "Build artifacts for $commitHash"
|
|
$body = "Auto-generated by build.ps1 -CommitArtifacts. Build $buildVersion. Module DLL and manifest embed BuildCommitHash=$commitHash, matching the source commit they were produced from."
|
|
& git -C $RepositoryRoot.FullName commit -m $subject -m $body
|
|
if ($LASTEXITCODE -ne 0) { throw "git commit failed." }
|
|
}
|
|
}
|
|
|
|
Write-Step "Build complete."
|