Release v0.1.7

scripts/generate-release-lock.sh

@@ -28,6 +28,7 @@ fail() {
 ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 WEBUI="$ROOT/webui"
 NPM_BIN="${NPM:-}"
+NODE_BIN="${NODE:-}"
 
 if [[ -z "$NPM_BIN" ]]; then
   if [[ -x "/home/zemion/.nvm/versions/node/v22.22.3/bin/npm" ]]; then
@@ -36,6 +37,13 @@ if [[ -z "$NPM_BIN" ]]; then
     NPM_BIN="npm"
   fi
 fi
+if [[ -z "$NODE_BIN" ]]; then
+  if [[ -x "$(dirname "$NPM_BIN")/node" ]]; then
+    NODE_BIN="$(dirname "$NPM_BIN")/node"
+  else
+    NODE_BIN="node"
+  fi
+fi
 
 while [[ $# -gt 0 ]]; do
   case "$1" in
@@ -58,6 +66,7 @@ done
 
 [[ -f "$WEBUI/package.release.json" ]] || fail "missing $WEBUI/package.release.json"
 command -v "$NPM_BIN" >/dev/null 2>&1 || fail "npm executable not found: $NPM_BIN"
+command -v "$NODE_BIN" >/dev/null 2>&1 || fail "node executable not found: $NODE_BIN"
 
 TMP_DIR="$(mktemp -d "${TMPDIR:-/tmp}/govoplan-release-lock.XXXXXXXX")"
 cleanup() {
@@ -75,6 +84,23 @@ echo "Temporary workspace: $TMP_DIR"
 (
   cd "$TMP_DIR"
   PATH="$(dirname "$NPM_BIN"):$PATH" "$NPM_BIN" install --package-lock-only --ignore-scripts
+  mapfile -t GIT_PACKAGES < <(
+    PATH="$(dirname "$NODE_BIN"):$PATH" "$NODE_BIN" <<'NODE'
+const fs = require("fs");
+const pkg = JSON.parse(fs.readFileSync("package.json", "utf8"));
+for (const group of ["dependencies", "devDependencies", "optionalDependencies"]) {
+  for (const [name, spec] of Object.entries(pkg[group] || {})) {
+    if (typeof spec === "string" && spec.startsWith("git+")) {
+      console.log(name);
+    }
+  }
+}
+NODE
+  )
+  if [[ "${#GIT_PACKAGES[@]}" -gt 0 ]]; then
+    echo "Refreshing git package lock entries: ${GIT_PACKAGES[*]}"
+    PATH="$(dirname "$NPM_BIN"):$PATH" "$NPM_BIN" update --package-lock-only --ignore-scripts "${GIT_PACKAGES[@]}"
+  fi
 )
 
 cp "$TMP_DIR/package-lock.json" "$WEBUI/package-lock.release.json"