v0.20.5 sha256 correction

.env.example

@@ -5,5 +5,5 @@ TRAEFIK_NETWORK=internal
 TRAEFIK_CERT_RESOLVER=netcup
 
 # Keep these two values paired when deploying a newer published toolbox release.
-TOOLBOX_RELEASE_VERSION=0.20.3
-TOOLBOX_RELEASE_SHA256=1e743fda8f6d1ca5c77798029351585bf6673a3410892d27e5ad17c9f6bcf0bf
+TOOLBOX_RELEASE_VERSION=0.20.5
+TOOLBOX_RELEASE_SHA256=ffcacc6761c6d646c187dd19368f7a2ffcb4a2e408865f550bf0d6ffd24add32

Containerfile.release

@@ -2,8 +2,8 @@ ARG NGINX_IMAGE=nginxinc/nginx-unprivileged:1.31.3-alpine@sha256:18d67281256ded3
 
 FROM ${NGINX_IMAGE} AS release
 
-ARG TOOLBOX_RELEASE_VERSION=0.20.3
-ARG TOOLBOX_RELEASE_SHA256=1e743fda8f6d1ca5c77798029351585bf6673a3410892d27e5ad17c9f6bcf0bf
+ARG TOOLBOX_RELEASE_VERSION=0.20.5
+ARG TOOLBOX_RELEASE_SHA256=ffcacc6761c6d646c187dd19368f7a2ffcb4a2e408865f550bf0d6ffd24add32
 ARG TOOLBOX_RELEASE_BASE_URL=https://git.add-ideas.de/lotobo/toolbox-portal/releases/download
 
 RUN set -eu; \

compose.example.yaml

@@ -3,7 +3,7 @@ services:
     build:
       context: .
       dockerfile: Containerfile
-    image: git.add-ideas.de/lotobo/toolbox:0.20.3
+    image: git.add-ideas.de/lotobo/toolbox:0.20.5
     restart: unless-stopped
     read_only: true
     ports:

compose.yaml

@@ -6,9 +6,9 @@ services:
       context: .
       dockerfile: Containerfile.release
       args:
-        TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.20.3}"
-        TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-66f02f95092ef80b9e49cda91c8401400e2ee1d2c640ab20a3a7810bf265c2c7}"
-    image: "git.add-ideas.de/lotobo/toolbox:${TOOLBOX_RELEASE_VERSION:-0.20.3}"
+        TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.20.5}"
+        TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-ffcacc6761c6d646c187dd19368f7a2ffcb4a2e408865f550bf0d6ffd24add32}"
+    image: "git.add-ideas.de/lotobo/toolbox:${TOOLBOX_RELEASE_VERSION:-0.20.5}"
     restart: unless-stopped
     read_only: true
     tmpfs:

package.json

@@ -20,7 +20,7 @@
     "assemble": "node scripts/assemble.mjs",
     "package:static": "node scripts/package-static.mjs",
     "release:update": "node scripts/update-release-lock.mjs",
-    "release": "scripts/release.sh"
+    "release": "./release.sh"
   },
   "dependencies": {
     "@add-ideas/toolbox-contract": "^0.3.0",

release.sh

@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+exec "${SCRIPT_DIR}/scripts/release.sh" "$@"

release/toolbox.lock.json

@@ -1,7 +1,7 @@
 {
   "$schema": "./toolbox-release-lock.schema.json",
   "schemaVersion": 1,
-  "releaseVersion": "0.20.3",
+  "releaseVersion": "0.20.5",
   "portalVersion": "0.2.23",
   "catalogue": {
     "id": "de.add-ideas.toolbox",
@@ -190,9 +190,9 @@
     },
     {
       "id": "de.add-ideas.translator-tools",
-      "version": "0.1.2",
-      "artifact": "https://git.add-ideas.de/lotobo/translator-tools/releases/download/v0.1.2/translator-tools-0.1.2.zip",
-      "sha256": "2ff24f97e0c3893c4d31dc347bd760d91a0d4a565fb392ec1a1b22ba9835c34f",
+      "version": "0.1.3",
+      "artifact": "https://git.add-ideas.de/lotobo/translator-tools/releases/download/v0.1.3/translator-tools-0.1.3.zip",
+      "sha256": "75482910c8a58e9169845bf4a3699a0385bc5ccff95259eef60004bae6814e22",
       "target": "translator"
     },
     {

scripts/release.sh

@@ -199,6 +199,13 @@ if [ ! -s "$CHECKSUM_FILE" ]; then
   else
     sha256sum "$ZIP_FILE" > "$CHECKSUM_FILE"
   fi
+else
+  if [ "$DRY_RUN" -eq 1 ]; then
+    echo "DRY-RUN: would refresh ${CHECKSUM_FILE}"
+  else
+    # ensure checksum always matches the current archive state
+    sha256sum "$ZIP_FILE" > "$CHECKSUM_FILE"
+  fi
 fi
 
 if [ "$SKIP_TAG" -eq 0 ]; then

scripts/update-release-lock.mjs

@@ -227,12 +227,10 @@ ${usage()}`);
   if (options.forceAssemble) assembleArgs.push('--force');
   await runCommand('npm', assembleArgs);
   console.log(`Assembled release -> ${archive}`);
-  const releaseChecksum = path.join(
-    path.dirname(archive),
-    `${path.basename(archive)}.sha256`
-  );
-  const releaseSha256 = await sha256ForPath(releaseChecksum === undefined ? '' : releaseChecksum);
-  console.log(`Release checksum: ${releaseSha256}`);
+  const releaseChecksum = `${archive}.sha256`;
+  const releaseSha256 = await sha256ForPath(archive);
+  await writeFile(releaseChecksum, `${releaseSha256} ${path.basename(archive)}\n`, 'utf8');
+  console.log(`Assembled release checksum: ${releaseSha256}`);
 }
 
 run().catch((error) => {