feat: add stable macOS app download to website

2026-09-28 09:12:37 +02:00
parent aece653970
commit d18fffe665
12 changed files with 310 additions and 31 deletions
@@ -228,7 +228,7 @@ export async function publishMacos({
            await wait(2000);
        }
    }
-    function assertUnpublishedRelease() {
+    function assertUnpublishedRelease(allowSameVersion = false) {
        const file = join(staging, 'published-latest.json');
        try {
            s3('get-object', ['--key', latestKey, file]);
@@ -261,7 +261,11 @@ export async function publishMacos({
            throw error;
        }
        const published = JSON.parse(readFileSync(file, 'utf8'));
-        if (compareVersions(metadata.version, published.version) <= 0) {
+        const comparison = compareVersions(metadata.version, published.version);
+        if (allowSameVersion && comparison < 0) {
+            throw new Error('Refusing to downgrade the stable download.');
+        }
+        if (comparison < 0 || (!allowSameVersion && comparison === 0)) {
            throw new Error(
                'This version has already been released through the update feed; bump the app version. Published objects were not overwritten.',
            );
@@ -365,6 +369,55 @@ export async function publishMacos({
        );
        putReleaseFile('update.json', latest, 'application/json');
        await verifyPublic('update.json', latest);
+        // An older release must not populate an absent download alias either.
+        assertUnpublishedRelease(true);
+        const downloadName = 'KanbanGit.dmg';
+        const downloadKey = `${latestPrefix}/${downloadName}`;
+        const downloadFile = join(staging, downloadName);
+        writeFileSync(downloadFile, archive);
+        function publishDownload(condition) {
+            s3('put-object', [
+                '--key',
+                downloadKey,
+                '--body',
+                downloadFile,
+                ...condition,
+                '--content-type',
+                'application/x-apple-diskimage',
+                '--cache-control',
+                'no-cache, max-age=0, must-revalidate',
+                '--content-md5',
+                createHash('md5').update(archive).digest('base64'),
+                '--metadata',
+                `sha256=${checksum}`,
+            ]);
+        }
+        try {
+            publishDownload(['--if-none-match', '*']);
+        } catch (error) {
+            if (!requiresExistingObjectCheck(error)) {
+                throw error;
+            }
+            const previousFile = join(staging, 'previous-download.dmg');
+            const response = JSON.parse(
+                s3('get-object', [
+                    '--key',
+                    downloadKey,
+                    '--output',
+                    'json',
+                    previousFile,
+                ]),
+            );
+            if (sha256(readFileSync(previousFile)) !== checksum) {
+                assertUnpublishedRelease();
+                publishDownload(['--if-match', conditionalEtag(response.ETag)]);
+            }
+        }
+        await verifyPublic(
+            downloadName,
+            archive,
+            `${storage.publicBase}/${latestPrefix}`,
+        );
        const latestFile = join(staging, 'latest.json');
        writeFileSync(latestFile, latest);
        function publishLatest(condition) {