Make package publication retries hash-safe

2026-08-04 14:18:49 +02:00
parent be51a9c347
commit 9ffd46fe22
3 changed files with 94 additions and 5 deletions
@@ -26,6 +26,10 @@ class ModulePackageWorkflowTests(unittest.TestCase):
        self.assertIn("api/packages/GovOPlaN/pypi", workflow)
        self.assertIn("api/packages/GovOPlaN/npm", workflow)
        self.assertIn('npm publish "./${webui_packages[0]}"', workflow)
+        self.assertIn("Check immutable registry state", workflow)
+        self.assertIn('files[0].get("sha256") != expected_sha256', workflow)
+        self.assertIn('if [[ "$PUBLISH_PYPI" == 1 ]]', workflow)
+        self.assertIn('[[ "$PUBLISH_NPM" == 1 ]]', workflow)
        self.assertIn("GOVOPLAN_PACKAGE_TOKEN", workflow)
        self.assertIn("must resolve to an exact registry version", workflow)
        self.assertIn("git\\\\.add-ideas\\\\.de/(?:GovOPlaN|add-ideas)", workflow)