feat: pin the install script to the requested version - #127
Draft
fengmk2 wants to merge 4 commits into
Draft
Conversation
Select install.sh/install.ps1 from the git ref matching the requested version: the v<version> release tag for exact versions, the commit itself for pkg.pr.new preview builds. The latest script tracks the latest CLI and can break installs of older versions (e.g. the XDG directory-layout switch in voidzero-dev/vite-plus#2346). Dist-tags keep using the latest script. When the pinned sources are exhausted (missing tag, mirror outage), fall back to the latest script with a warning so CI is not blocked. The URL selection is shared in src/ci/install-script-urls.ts and applied to the GitHub action, the Azure runtime, and the GitLab bootstrap.
Member
Author
|
@codex review |
|
Codex Review: Didn't find any major issues. 🚀 Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
Replace the urlGroups/groupIndex indirection with a tryUrls helper called for the pinned then latest URL groups, matching the shape of the GitLab bootstrap. Merge the redundant release-tag and commit-build URL tests into one parametrized test and drop a double cast in the Azure test.
Split long sentences, use active voice, and remove em dashes in the comments and fallback warnings added by this branch.
Resolve the newest 0.0.0-commit.<sha> build from the registry bridge and install it via the version input on ubuntu and windows, so the commit-pinned install script path is covered end-to-end.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The action always installed vp with the latest install.sh, so an install-script change like the XDG directory layout in voidzero-dev/vite-plus#2346 could break installing older versions.
The script is now fetched from the git ref matching the requested version:
0.2.9,0.1.21-alpha.7): thev<version>release tag on raw.githubusercontent.com, with jsDelivr as an independent mirror (both verified to servepackages/cli/install.shback to v0.1.0).0.0.0-commit.<sha>): the script from that exact commit, so a preview build always installs with the script it was built with.latest,next): unchanged, the latest script matches whatever they resolve to.If all pinned sources fail (missing tag, mirror outage), the install warns and falls back to the latest script, so availability degrades to the previous behavior instead of blocking CI. Worst case for pinned versions is 8 attempts across 4 URLs instead of 4 across 2.
The URL selection is shared in
src/ci/install-script-urls.tsand applied to the GitHub action, the Azure runtime, and the GitLab bootstrap.