Merge pull request 'fix: 解決 error: Unrecognized option '--allow-insecure-connections'' (#7) from develop into master

Reviewed-on: #7

.gitea/workflows/master.yaml

@@ -3,25 +3,26 @@ on:
     branches:
     - master
 jobs:
-  version:
-    name: "CD > 計算版本號"
-    runs-on: ubuntu
-    outputs:
-      version: ${{ steps.version.outputs.version }}
+  cd:
+    name: "CD > 發布專案"
+    runs-on: docker
+    env:
+      RUNNER_TOOL_CACHE: /toolcache
     steps:
     - name: 計算版本號
       id: version
       uses: https://gitea.jsc.idv.tw/actions/calculate-version@${{ vars.ACTION_CALCULATE_VERSION }}
-  release:
-    name: "CD > 發布專案"
-    runs-on: ubuntu
-    needs: version
-    steps:
+      with:
+        gitea-server: ${{ gitea.server_url }}
+        repository: ${{ gitea.repository }}
+        token: ${{ secrets.GITEA_TOKEN }}
     - name: 發布專案
       uses: akkuman/gitea-release-action@${{ vars.ACTION_RELEASE_VERSION }}
       with:
-        tag_name: "v${{ needs.version.outputs.version }}"
-    - name: 清理成品
+        tag_name: "v${{ steps.version.outputs.VERSION }}"
+    - name: 清理舊版本 (保留最新2個)
       uses: https://gitea.jsc.idv.tw/actions/cleanup-release@${{ vars.ACTION_CLEANUP_RELEASE_VERSION }}
       with:
-        RUNNER_TOKEN: ${{ secrets.RUNNER_TOKEN }}
+        gitea-server: ${{ gitea.server_url }}
+        repository: ${{ gitea.repository }}
+        token: ${{ secrets.GITEA_TOKEN }}

Dockerfile

@@ -1,10 +1,9 @@
-FROM mcr.microsoft.com/dotnet/sdk:10.0
+FROM mcr.microsoft.com/dotnet/sdk:8.0
 
-# 更新並安裝必要的工具後清理暫存檔案以減小映像檔大小
-RUN apt update \
-    && apt install -y curl jq unzip \
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends curl jq unzip \
     && rm -rf /var/lib/apt/lists/*
-    
+
 COPY entrypoint.sh /entrypoint.sh
 
 RUN chmod +x /entrypoint.sh

action.yaml

@@ -1,20 +1,17 @@
 name: 'NUGET PUSH'
-description: '推送 NUGET 套件'
+description: '打包套件'
 author: 'Jeffery'
 inputs:
-  RELEASE_VERSION:
-    description: '要推送的版本號，ex: ${{ needs.calculate.outputs.version }}'
+  token:
+    default: ''
+  version:
     required: true
-  RELEASE_INDEX:
-    description: '要推送的版本中第幾個成品，預設為 0'
+  source:
+    required: true
+  api_key:
+    required: true
+  index:
     default: 0
 runs:
   using: 'docker'
   image: 'Dockerfile'
-  env:
-    GITEA_SERVER_URL: ${{ gitea.server_url }}
-    GITEA_REPOSITORY: ${{ gitea.repository }}
-    RELEASE_VERSION: ${{ inputs.RELEASE_VERSION }}
-    RELEASE_INDEX: ${{ inputs.RELEASE_INDEX }}
-    RUNNER_TOKEN: ${{ secrets.RUNNER_TOKEN }}
-    NUGET_AUTHOR: ${{ gitea.repository_owner }}

entrypoint.sh

@@ -1,73 +1,78 @@
-#!/bin/bash
+#!/bin/sh
+set -eu
 
-echo "=================================================="
+token="${INPUT_TOKEN:-}"
+version="${INPUT_VERSION:?INPUT_VERSION is required}"
+nuget_source="${INPUT_SOURCE:?INPUT_SOURCE is required}"
+api_key="${INPUT_API_KEY:?INPUT_API_KEY is required}"
+asset_index="${INPUT_INDEX:-0}"
+server_url="${GITEA_SERVER_URL:-${GITHUB_SERVER_URL:-}}"
+repository="${GITEA_REPOSITORY:-${GITHUB_REPOSITORY:-}}"
 
-echo "參數檢查"
+if [ -z "${server_url}" ]; then
+  echo "GITEA_SERVER_URL or GITHUB_SERVER_URL is required" >&2
+  exit 1
+fi
 
-echo "--------------------------------------------------"
+if [ -z "${repository}" ]; then
+  echo "GITEA_REPOSITORY or GITHUB_REPOSITORY is required" >&2
+  exit 1
+fi
 
-# 顯示 GITEA_SERVER_URL 參數，並檢查是否為空或 "null"，如果是則輸出錯誤訊息並退出
-echo "GITEA_SERVER_URL=$GITEA_SERVER_URL" && ([ -z "$GITEA_SERVER_URL" ] || [ "$GITEA_SERVER_URL" = "null" ]) && exit 1
+release_url="${server_url}/api/v1/repos/${repository}/releases/tags/v${version}"
+work_dir="/tmp/nuget-push"
+archive_dir="${work_dir}/archive"
+output_dir="${work_dir}/output"
 
-# 顯示 GITEA_REPOSITORY 參數，並檢查是否為空或 "null"，如果是則輸出錯誤訊息並退出
-echo "GITEA_REPOSITORY=$GITEA_REPOSITORY" && ([ -z "$GITEA_REPOSITORY" ] || [ "$GITEA_REPOSITORY" = "null" ]) && exit 1
+mkdir -p "${archive_dir}" "${output_dir}"
 
-# 顯示 RELEASE_VERSION 參數，並檢查是否為空或 "null"，如果是則輸出錯誤訊息並退出
-echo "RELEASE_VERSION=$RELEASE_VERSION" && ([ -z "$RELEASE_VERSION" ] || [ "$RELEASE_VERSION" = "null" ]) && exit 1
+fetch_json() {
+  if [ -n "${token}" ]; then
+    curl -fsSL -H "Authorization: token ${token}" "$1"
+    return
+  fi
 
-# 顯示 RELEASE_INDEX 參數，並檢查是否為空或 "null"，如果是則輸出錯誤訊息並退出
-echo "RELEASE_INDEX=$RELEASE_INDEX" && ([ -z "$RELEASE_INDEX" ] || [ "$RELEASE_INDEX" = "null" ]) && exit 1
+  curl -fsSL "$1"
+}
 
-# 顯示 RUNNER_TOKEN 參數，並檢查是否為空或 "null"，如果是則輸出錯誤訊息並退出
-echo "RUNNER_TOKEN=$RUNNER_TOKEN" && ([ -z "$RUNNER_TOKEN" ] || [ "$RUNNER_TOKEN" = "null" ]) && exit 1
+download_file() {
+  if [ -n "${token}" ]; then
+    curl -fsSL -H "Authorization: token ${token}" "$1" -o "$2"
+    return
+  fi
 
-# 顯示 NUGET_AUTHOR 參數，並檢查是否為空或 "null"，如果是則輸出錯誤訊息並退出
-echo "NUGET_AUTHOR=$NUGET_AUTHOR" && ([ -z "$NUGET_AUTHOR" ] || [ "$NUGET_AUTHOR" = "null" ]) && exit 1
+  curl -fsSL "$1" -o "$2"
+}
 
-echo "=================================================="
+echo "RELEASE_URL: ${release_url}"
 
-echo "取得成品連結"
+release_json="$(fetch_json "${release_url}")"
+download_name="$(printf '%s' "${release_json}" | jq -er ".assets[${asset_index}].name")"
+download_url="$(printf '%s' "${release_json}" | jq -er ".assets[${asset_index}].browser_download_url")"
+archive_path="${archive_dir}/${download_name}"
 
-echo "--------------------------------------------------"
+echo "DOWNLOAD_NAME: ${download_name}"
+echo "DOWNLOAD_URL: ${download_url}"
 
-# 組合 RELEASE_HEADER 參數，並顯示出來
-RELEASE_HEADER="Authorization: token $RUNNER_TOKEN" && echo "RELEASE_HEADER=$RELEASE_HEADER"
+echo "ARTIFACT DOWNLOADING..."
+download_file "${download_url}" "${archive_path}"
 
-# 組合 RELEASE_URL 參數，並顯示出來
-RELEASE_URL="$GITEA_SERVER_URL/api/v1/repos/$GITEA_REPOSITORY/releases/tags/v$RELEASE_VERSION" && echo "RELEASE_URL=$RELEASE_URL"
+echo "ARTIFACT UNZIPPING..."
+unzip -o "${archive_path}" -d "${output_dir}" >/dev/null
 
-# 取得成品資訊
-RELEASE_JSON="$(curl -s -H "$RELEASE_HEADER" "$RELEASE_URL")"
+packages_found=0
 
-# 從成品資訊取得名稱與連結
-RELEASE_NAME="$(echo "$RELEASE_JSON" | jq -r ".assets[$RELEASE_INDEX].name")" && echo "RELEASE_NAME=$RELEASE_NAME"
-RELEASE_URL="$(echo "$RELEASE_JSON" | jq -r ".assets[$RELEASE_INDEX].browser_download_url")" && echo "RELEASE_URL=$RELEASE_URL"
+echo "ARTIFACT PUSHING..."
+for package in "${output_dir}"/*.nupkg; do
+  if [ ! -f "${package}" ]; then
+    continue
+  fi
 
-echo "=================================================="
+  packages_found=1
+  dotnet nuget push "${package}" --source "${nuget_source}" --api-key "${api_key}" --skip-duplicate
+done
 
-echo "下載成品"
-
-echo "--------------------------------------------------"
-
-curl -H "$RELEASE_HEADER" "$RELEASE_URL" -o "$RELEASE_NAME"
-
-echo "=================================================="
-
-echo "解壓縮成品"
-
-echo "--------------------------------------------------"
-
-unzip "$RELEASE_NAME" -d output
-
-echo "=================================================="
-
-echo "推送 NUGET 套件"
-
-echo "--------------------------------------------------"
-
-# 組合 NUGET_SOURCE 參數，並顯示出來
-NUGET_SOURCE="$GITEA_SERVER_URL/api/packages/$NUGET_AUTHOR/nuget/index.json" && echo "NUGET_SOURCE=$NUGET_SOURCE"
-
-dotnet nuget push "output/*.nupkg" --source "$NUGET_SOURCE" --api-key "$RUNNER_TOKEN" --skip-duplicate --allow-insecure-connections
-
-echo "=================================================="
+if [ "${packages_found}" -eq 0 ]; then
+  echo "No .nupkg files found after extracting ${download_name}" >&2
+  exit 1
+fi