native-packages 0.9.0 → 0.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d89f67e56b034b1cc13d55891e7a88d32e4a607c2c79d44df51c7115f65a7a8d
-  data.tar.gz: b1d29fef3871480632f7557f3af5de763bbd7fa67e1ef04b792eb598e3352c49
+  metadata.gz: 7991d9fd47977d5eda80c98ee460ef7c401b4db6eae41a74d285c58576bbb089
+  data.tar.gz: 943a2ff5686edd0cfaa7f09fd9a213d797f4a628cf5eff9331127f84840c06c8
 SHA512:
-  metadata.gz: 1d2b77dd672a81d231398884f02b4077c123f7cc05d6dff7b6fbed62417f2a7854ad7557245dc1fc291f0cd78884f799f6c97b0c96de003bc1ceaba16539550e
-  data.tar.gz: e77790947545f9086ec1ec16caf3c6226ae8bc398d860c40cced2939d1d4b65262c0d66067e9d545272ef14df3b92a7648111303e1cc8efc6a7e93439d4e8aa8
+  metadata.gz: 2ac16d8c7b639da77db270af088839ab3e6ecbb6b913086208f26dc95db69b843df11c887ad556c744f493b5fe8ea85660095b9a5eff8425821daabb7b850330
+  data.tar.gz: '094cba93dda2a8dbb0442d3b88d0efe5039ec28f715fdd85763e6dcdd56fde1b2a013813fbcf514930240dc874b31fcc562381c304c8e710a303e3bbe1d1e255'

data/CONTRIBUTING.md

@@ -18,7 +18,7 @@ To check the packaged gem and standalone command:
 
 ```sh
 gem build native-packages.gemspec
-ruby test/gem_install.rb native-packages-0.9.0.gem
+ruby test/gem_install.rb native-packages-0.10.0.gem
 ```
 
 See [Releasing the gem](docs/releasing.md) for publication and
@@ -49,6 +49,10 @@ path dependency. To test changes from a local theme checkout, use Bundler's
 temporary path configuration or a separate Gemfile, and keep that local setup
 out of the committed lockfile.
 
+Social previews use the launch-film poster, configured under
+`jekyll_vitepress.seo.image` in `docs/_config.yml`. Keep it a JPEG or PNG with
+matching width, height, and alt text; the SVG logo is for the site itself.
+
 ### Writing a guide
 
 Put tutorials in `docs/_guides/` and reference pages in `docs/_reference/`.

data/docs/_guides/getting-started.md

@@ -17,7 +17,7 @@ own compiled executable, or build the tiny example below.
 You need Ruby 3.2 or later. Install the version used by these guides:
 
 ```sh
-gem install native-packages --version 0.9.0
+gem install native-packages --version 0.10.0
 ```
 
 For Linux packages, install **nFPM 2.47.0**, the helper native-packages uses to
@@ -79,7 +79,7 @@ Open the generated `native-packages.yaml` and replace its contents with:
 ```yaml
 schema: 1
 tool:
-  version: '0.9.0'
+  version: '0.10.0'
   nfpm: '2.47.0'
 
 nfpm:

data/docs/_guides/github-actions.md

@@ -24,7 +24,7 @@ packaging:
   needs: release
   permissions:
     contents: write
-  uses: crmne/native-packages/.github/workflows/package.yml@v0.9.0
+  uses: crmne/native-packages/.github/workflows/package.yml@v0.10.0
   with:
     version: ${{ github.ref_name }}
     publish: true
@@ -39,7 +39,7 @@ The configuration must include `release.repository` and a `release_asset`
 for each selected target. See [Publishing a release](publishing.md).
 
 Use the same native-packages release for the workflow and `tool.version`.
-For an immutable workflow reference, replace `v0.9.0` with that release's
+For an immutable workflow reference, replace `v0.10.0` with that release's
 full commit SHA.
 
 ## Build without publishing
@@ -57,7 +57,7 @@ permissions:
   contents: read
 jobs:
   packaging:
-    uses: crmne/native-packages/.github/workflows/package.yml@v0.9.0
+    uses: crmne/native-packages/.github/workflows/package.yml@v0.10.0
 ```
 
 Validation does not compile the app or check that future release inputs exist.
@@ -72,7 +72,7 @@ packaging:
   needs: build
   permissions:
     contents: write
-  uses: crmne/native-packages/.github/workflows/package.yml@v0.9.0
+  uses: crmne/native-packages/.github/workflows/package.yml@v0.10.0
   with:
     version: '1.2.3'
     source-artifact: linux-binaries

data/docs/_guides/native-recipes.md

@@ -31,7 +31,7 @@ Here is a complete configuration for an ARM64 Mac app and an x86-64 Windows app:
 ```yaml
 schema: 1
 tool:
-  version: '0.9.0'
+  version: '0.10.0'
   nfpm: '2.47.0'
 nfpm:
   name: hello

data/docs/_guides/release-signing.md

@@ -67,7 +67,7 @@ Package publication's separate `packaging-checksums.txt` is also unchanged.
 
 ## Attest in the application's build job
 
-The examples use `v0.9.0` for readability. For release workflows, replace it
+The examples use `v0.10.0` for readability. For release workflows, replace it
 with that release's reviewed full commit SHA, not a mutable branch.
 After producing the final package, before uploading it, add this step to the
 job that built it:
@@ -79,7 +79,7 @@ permissions:
   attestations: write
 steps:
   # Existing checkout, build, platform signing and packaging steps go here.
-  - uses: crmne/native-packages/.github/actions/attest@v0.9.0
+  - uses: crmne/native-packages/.github/actions/attest@v0.10.0
     with:
       subject-path: dist/*.tar.gz
 ```
@@ -108,7 +108,7 @@ and install Ruby 3.2 or later with Ed25519-capable OpenSSL before the signing
 step. Then call:
 
 ```yaml
-- uses: crmne/native-packages/.github/actions/sign-release@v0.9.0
+- uses: crmne/native-packages/.github/actions/sign-release@v0.10.0
   with:
     directory: dist/release
     public-key: assets/update-public-key.hex

data/docs/_reference/commands.md

@@ -193,7 +193,7 @@ If several gem versions are installed, RubyGems lets you select the one required
 by the configuration:
 
 ```sh
-native-packages _0.9.0_ build --version 1.2.3
+native-packages _0.10.0_ build --version 1.2.3
 ```
 
 Bundler also works if you prefer to manage the gem in a Gemfile.

data/docs/_reference/configuration.md

@@ -28,7 +28,7 @@ expressions. Use the replacement values listed below.
 | Field | Purpose |
 | --- | --- |
 | `schema` | Required. Set to `1`. |
-| `tool.version` | Required. Exact native-packages version, such as `'0.9.0'`. |
+| `tool.version` | Required. Exact native-packages version, such as `'0.10.0'`. |
 | `tool.nfpm` | Required. Set to `'2.47.0'`, including in native-only configurations. |
 | `nfpm` | Shared package metadata and installed-file mappings, or a relative YAML filename. Requires `name`. |
 | `targets` | Required. Named build targets; use `{}` for recipe-only projects. |
@@ -96,6 +96,7 @@ letters, digits, and hyphens, starting with a letter or digit.
 | `before_build` | Command arguments run before copying a local input. |
 | `after_package` | Command arguments run on each package before its hash is recorded. |
 | `native` | Required for DMG, MSI and Inno. Contains `command` and `output`. |
+| `appimage` | Optional for AppImage targets: `update_information`, embedded with a `.zsync` file beside the AppImage. See [AppImage](platforms.md#update-information). |
 
 Formats are `deb`, `rpm`, `archlinux`, `apk`, `ipk`, `appimage`, `srpm`,
 `msix`, `dmg`, `msi`, and `inno`. See [Supported platforms](platforms.md) for their requirements.

data/docs/_reference/platforms.md

@@ -19,7 +19,7 @@ libraries.
 | `archlinux` | Linux | Arch-compatible files and explicit dependencies. | nFPM, `readelf` for binaries. |
 | `apk` | Linux | Suitable Alpine files, usually musl or static binaries, and dependencies. | nFPM, `readelf` for binaries. |
 | `ipk` | Linux | Files for the device/distribution baseline, dependencies, and an `abi` label. | nFPM, `readelf` for binaries. |
-| `appimage` | Linux | The same files as the DEB/RPM, including one desktop entry and its icon. | `mksquashfs` (squashfs-tools), `curl`, `readelf`. |
+| `appimage` | Linux | The same files as the DEB/RPM, including one desktop entry and its icon. | `mksquashfs` (squashfs-tools), `curl`, `readelf`; `zsyncmake` (zsync) with update information. |
 | `srpm` | Linux source target | RPM spec and source files. | nFPM; native RPM tooling for rebuild tests. |
 | `msix` | Windows | Windows binaries, identity, application assets, and capabilities. | nFPM; Windows tools for signing and installation tests. |
 | `dmg` | macOS | Complete app and a DMG script. | macOS, `lipo`, and your script's tools, such as `hdiutil`. |
@@ -84,7 +84,41 @@ DEB and RPM do, and `build.json` lists what the binary links under
 `required_libraries` with `"libraries": "host"`. It therefore runs where your
 binary's glibc floor and those libraries are met, not on every Linux system.
 Build on the oldest distribution you support, or link statically, to widen
-that. The AppImage carries no update information and is not signed.
+that. The AppImage is not signed.
+
+### Update information
+
+AppImageUpdate, AppImageLauncher, AM, Gear Lever and other updaters find a
+newer AppImage through the update information embedded in it, and download
+only the blocks that changed through a `.zsync` file published beside it.
+Give the target an `appimage.update_information`:
+
+```yaml
+linux-amd64:
+  platform: linux
+  arch: amd64
+  libc: glibc
+  formats: [appimage]
+  appimage:
+    update_information: gh-releases-zsync|owner|app|latest|app-*-x86_64.AppImage.zsync
+```
+
+The string goes into the runtime's `.upd_info` section, and the build reads
+it back from the finished AppImage. `zsyncmake` then writes
+`NAME-VERSION-ARCH.AppImage.zsync` beside it, with the AppImage's file name
+as its relative URL, and the build checks the file's name, length and SHA-1
+against the AppImage. `build.json` records the `.zsync` file with its
+package, and `publish --to github` attaches both. The same inputs give the
+same bytes for both files.
+
+Two forms are accepted: `gh-releases-zsync|OWNER|REPOSITORY|TAG|PATTERN`,
+where `TAG` is usually `latest` (the newest stable release), and
+`zsync|https://URL.zsync`. A GitHub string must name `release.repository`,
+and its pattern must match the target's `.zsync` file name, so validation
+fails before a release could ship an AppImage whose updaters look for a file
+that is not there. Each architecture needs its own target with its own
+pattern. An `after_package` hook must leave the AppImage as it is, or the
+`.zsync` file no longer describes it and the build fails.
 
 Running an AppImage needs FUSE on the user's system, or
 `./App.AppImage --appimage-extract-and-run`.

data/docs/_reference/troubleshooting.md

@@ -23,8 +23,8 @@ working on with `doctor --target ID` and `build --target ID --dry-run`.
 Install and select the version named in the error:
 
 ```sh
-gem install native-packages --version 0.9.0
-native-packages _0.9.0_ doctor
+gem install native-packages --version 0.10.0
+native-packages _0.10.0_ doctor
 ```
 
 `tool.version` is an exact match. In CI, use the matching released reusable

data/docs/releasing.md

@@ -23,7 +23,7 @@ Update the gemspec, `NativePackages::VERSION`, example/version references and ch
 Create a GitHub release for that commit:
 
 ```sh
-gh release create v0.9.0 --target main --title 'native-packages 0.9.0' --notes-file release-notes.md
+gh release create v0.10.0 --target main --title 'native-packages 0.10.0' --notes-file release-notes.md
 ```
 
 Adding `--draft` permits review before publication and does not trigger the publisher. The tag must match the exact gem version and point to a commit on `main`. Set `--prerelease` only for a prerelease gem version.
@@ -36,7 +36,7 @@ If the workflow itself needs a correction, fix it on `main` and dispatch the
 corrected release workflow against the existing published tag:
 
 ```sh
-gh workflow run release.yml --ref main -f tag=v0.9.0
+gh workflow run release.yml --ref main -f tag=v0.10.0
 ```
 
 Validation resolves the original tag to an exact commit, requires it to be on

data/examples/native-packages-all-formats.yaml

@@ -1,7 +1,7 @@
 # Supply the listed build outputs before running this example.
 schema: 1
 tool:
-  version: '0.9.0'
+  version: '0.10.0'
   nfpm: '2.47.0'
 nfpm:
   name: example-app

data/examples/native-packages.yaml

@@ -1,6 +1,6 @@
 schema: 1
 tool:
-  version: '0.9.0'
+  version: '0.10.0'
   nfpm: '2.47.0'
 nfpm:
   name: example-app

data/lib/native_packages/appimage.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require "digest"
+
 module NativePackages
   # Builds a type 2 AppImage from the same contents nFPM packages: the files
   # are laid out in an AppDir, packed with mksquashfs and appended to a pinned
@@ -17,6 +19,13 @@ module NativePackages
       "arm7" => ["armhf", "e9060d37577b8a29914ec12d8740add24e19ff29012fb1fa0f60daf62db0688d"]
     }.freeze
     ICON_DIRECTORIES = %w[usr/share/icons usr/share/pixmaps].freeze
+    # The runtime's ELF section that AppImageUpdate and the other updaters
+    # read: a NUL-terminated string in a fixed 1024 bytes.
+    UPDATE_SECTION = ".upd_info"
+    # AppImage's update information formats, without the `bintray-zsync`
+    # and `pling-v1-zsync` services that no longer exist.
+    GITHUB_UPDATE = /\Agh-releases-zsync\|([A-Za-z0-9_.-]+)\|([A-Za-z0-9_.-]+)\|([^|\s]+)\|([^|\s]+\.zsync)\z/
+    URL_UPDATE = %r{\Azsync\|https://[^|\s]+\.zsync\z}
     attr_reader :root
 
     def initialize(root)
@@ -29,10 +38,81 @@ module NativePackages
 
     def self.filename(name, version, target) = "#{name}-#{version}-#{architecture(target)}.AppImage"
 
-    def doctor(target)
+    # The target's update information, checked against the AppImage it
+    # describes: a GitHub string must name the release repository, and its
+    # file pattern must match this target's `.zsync` file, so a release
+    # never ships an AppImage whose updaters look for a file that is not
+    # there. Returns nil when the target has none.
+    def self.update_information(target, name:, version:, repository:)
+      settings = target["appimage"]
+      return nil if settings.nil?
+      raise Error, "appimage: expected a mapping" unless settings.is_a?(Hash)
+      unknown = settings.keys - %w[update_information]
+      raise Error, "appimage: unknown fields #{unknown.join(', ')}" unless unknown.empty?
+      value = settings["update_information"]
+      raise Error, "appimage.update_information: expected a string" unless value.is_a?(String) && !value.empty?
+      raise Error, "appimage.update_information: at most 1023 bytes" if value.bytesize > 1023
+      if (match = GITHUB_UPDATE.match(value))
+        owner, project, _tag, pattern = match.captures
+        unless "#{owner}/#{project}".casecmp?(repository.to_s)
+          raise Error, "appimage.update_information names #{owner}/#{project}, but release.repository is #{repository.inspect}"
+        end
+        zsync = "#{filename(name, version, target)}.zsync"
+        unless File.fnmatch?(pattern, zsync, File::FNM_PATHNAME)
+          raise Error, "appimage.update_information: #{pattern} does not match #{zsync}"
+        end
+      elsif !URL_UPDATE.match?(value)
+        raise Error, "appimage.update_information: use gh-releases-zsync|OWNER|REPOSITORY|TAG|FILE.zsync or zsync|https://URL.zsync"
+      end
+      value
+    end
+
+    # The file offset and size of the ELF section `name` in `bytes`, or nil.
+    # Every AppImage runtime is a little-endian ELF file, 32 or 64 bits.
+    def self.section(bytes, name)
+      raise Error, "AppImage runtime is not a little-endian ELF file" unless bytes.start_with?("\x7fELF".b) && bytes.getbyte(5) == 1
+      wide = { 1 => false, 2 => true }.fetch(bytes.getbyte(4)) { raise Error, "AppImage runtime has an unknown ELF class" }
+      offset = wide ? bytes.byteslice(0x28, 8).unpack1("Q<") : bytes.byteslice(0x20, 4).unpack1("V")
+      size, count, names = bytes.byteslice(wide ? 0x3A : 0x2E, 6).unpack("v3")
+      header = lambda do |index|
+        entry = bytes.byteslice(offset + (index * size), size)
+        raise Error, "AppImage runtime has a truncated section table" unless entry && entry.bytesize == size
+        wide ? [entry.unpack1("V"), *entry.byteslice(0x18, 16).unpack("Q<2")] : [entry.unpack1("V"), *entry.byteslice(0x10, 8).unpack("V2")]
+      end
+      _, strings, = header.call(names)
+      count.times do |index|
+        label, start, length = header.call(index)
+        found = bytes.byteslice(strings + label, name.bytesize + 1)
+        return [start, length] if found == "#{name}\0".b
+      end
+      nil
+    end
+
+    # `runtime` with `information` in its update section.
+    def self.embed(runtime, information)
+      start, length = section(runtime, UPDATE_SECTION) || raise(Error, "AppImage runtime has no #{UPDATE_SECTION} section")
+      raise Error, "update information exceeds the runtime's #{length}-byte #{UPDATE_SECTION} section" if information.bytesize >= length
+      raise Error, "AppImage runtime's #{UPDATE_SECTION} section is outside the file" if start + length > runtime.bytesize
+      runtime = runtime.b
+      runtime[start, length] = information.b + ("\0".b * (length - information.bytesize))
+      runtime
+    end
+
+    # The update information an AppImage carries, or nil when it has none.
+    def self.read_update_information(path)
+      bytes = File.binread(path)
+      start, length = section(bytes, UPDATE_SECTION)
+      return nil unless start
+      value = bytes.byteslice(start, length)[/\A[^\0]*/n]
+      value.empty? ? nil : value
+    end
+
+    def doctor(target, update: false)
       self.class.architecture(target)
-      missing = %w[mksquashfs curl].reject { |tool| available?(tool) }
-      raise Error, "install required AppImage tools: #{missing.join(', ')} (mksquashfs is in squashfs-tools)" unless missing.empty?
+      tools = %w[mksquashfs curl]
+      tools << "zsyncmake" if update
+      missing = tools.reject { |tool| available?(tool) }
+      raise Error, "install required AppImage tools: #{missing.join(', ')} (mksquashfs is in squashfs-tools, zsyncmake in zsync)" unless missing.empty?
     end
 
     def runtime(target)
@@ -46,9 +126,11 @@ module NativePackages
       path
     end
 
-    # Returns the AppImage's path and what was put at the AppDir's root.
-    def build(package, target, destination, name:, version:, epoch:)
-      doctor(target)
+    # Returns the AppImage's path, what was put at the AppDir's root, and
+    # the `.zsync` file beside it when the AppImage carries update
+    # information (nil otherwise).
+    def build(package, target, destination, name:, version:, epoch:, update: nil)
+      doctor(target, update: !update.nil?)
       output = destination / self.class.filename(name, version, target)
       Dir.mktmpdir("native-packages-appimage-") do |directory|
         appdir = Pathname.new(directory) / "AppDir"
@@ -59,14 +141,43 @@ module NativePackages
         image = Pathname.new(directory) / "filesystem.squashfs"
         run "mksquashfs", appdir, image, "-root-owned", "-noappend", "-no-xattrs", "-no-progress", "-quiet", "-comp", "zstd",
           env: { "SOURCE_DATE_EPOCH" => epoch.to_s }
+        bytes = runtime(target).binread
+        bytes = self.class.embed(bytes, update) if update
         File.open(output, "wb") do |file|
-          file.write(runtime(target).binread)
+          file.write(bytes)
           IO.copy_stream(image.to_s, file)
         end
         output.chmod(0o755)
         check(output)
-        [output, entry.merge("runtime" => RUNTIME, "libraries" => "host")]
+        details = entry.merge("runtime" => RUNTIME, "libraries" => "host")
+        return [output, details, nil] unless update
+        raise Error, "AppImage lost its update information: #{output}" unless self.class.read_update_information(output) == update
+        [output, details.merge("update_information" => update), zsync(output, epoch)]
+      end
+    end
+
+    # Writes `<AppImage>.zsync` beside the AppImage, for updaters that fetch
+    # only the blocks that changed. Its URL is the AppImage's file name,
+    # relative to the `.zsync` file, so it works from wherever both are
+    # published. The AppImage's time is the build's, which zsyncmake records.
+    def zsync(path, epoch)
+      File.utime(epoch, epoch, path)
+      output = Pathname.new("#{path}.zsync")
+      run "zsyncmake", "-u", path.basename.to_s, "-o", output, path, chdir: path.dirname
+      check_zsync(output, path)
+      output
+    end
+
+    # Fails unless `zsync` describes the AppImage at `path` as it is now.
+    def check_zsync(zsync, path)
+      header = zsync.binread.split("\n\n".b, 2).first.to_s.force_encoding(Encoding::UTF_8).lines.to_h do |line|
+        key, value = line.chomp.split(": ", 2)
+        [key, value]
       end
+      expected = { "Filename" => path.basename.to_s, "URL" => path.basename.to_s, "Length" => path.size.to_s,
+        "SHA-1" => Digest::SHA1.file(path).hexdigest }
+      wrong = expected.reject { |key, value| header[key] == value }.keys
+      raise Error, "#{zsync.basename} does not describe #{path.basename}: #{wrong.join(', ')}" unless wrong.empty?
     end
 
     def check(path)

data/lib/native_packages/build.rb

@@ -33,7 +33,9 @@ module NativePackages
       configuration.validate
       selected = configuration.select(ids: ids, formats: formats)
       nfpm_version if selected.values.any? { |target| !(target.fetch("formats") - Configuration::NATIVE_FORMATS - ["appimage"]).empty? }
-      selected.each_value { |target| AppImage.new(root).doctor(target) if target.fetch("formats").include?("appimage") }
+      selected.each_value do |target|
+        AppImage.new(root).doctor(target, update: !target["appimage"].nil?) if target.fetch("formats").include?("appimage")
+      end
       selected.each do |id, target|
         next unless target["native"]
         metadata = configuration.target_tokens(configuration.tokens("9.8.7"), id, target, "/payload").merge("PACKAGE" => "/output/package", "FORMAT" => target.fetch("formats").first)
@@ -160,11 +162,12 @@ module NativePackages
                 elsif format == "appimage"
                   package = render_tree(configuration.package(target), configuration.target_tokens(info, id, target, payload))
                   inspection = Inspection.new(root, configuration.data.fetch("libraries")).check(package, target, format)
-                  package_path, details = AppImage.new(root).build(package, target, destination, name: configuration.name, version: number,
-                    epoch: info.fetch("SOURCE_DATE_EPOCH"))
+                  package_path, details, zsync = AppImage.new(root).build(package, target, destination, name: configuration.name, version: number,
+                    epoch: info.fetch("SOURCE_DATE_EPOCH"), update: configuration.update_information(target, number))
                   inspection["appimage"] = details
-                  packages = files(destination)
-                  raise Error, "AppImage build must create only its package" unless packages == [package_path]
+                  outputs = [package_path, zsync].compact.sort
+                  raise Error, "AppImage build must create only its package and .zsync file" unless files(destination) == outputs
+                  packages = [package_path]
                 else
                   package = render_tree(configuration.package(target), configuration.target_tokens(info, id, target, payload))
                   if number.include?("-") && (package.fetch("version_schema", "semver") != "semver" || %w[prerelease version_metadata].any? { |key| package.key?(key) && !package[key].to_s.empty? })
@@ -180,19 +183,23 @@ module NativePackages
                   packages = files(destination)
                   raise Error, "nFPM did not create exactly one #{format} package" unless packages.length == 1
                 end
+                outputs ||= packages
                 if target["after_package"]
                   hook_tokens = configuration.target_tokens(info, id, target, payload).merge("PACKAGE" => packages.first.to_s, "FORMAT" => format)
                   run(*render_tree(target.fetch("after_package"), hook_tokens), env: { "NATIVE_PACKAGES_TARGET" => id, "NATIVE_PACKAGES_VERSION" => number })
-                  raise Error, "after_package must preserve the package path and output set" unless files(destination) == packages
+                  raise Error, "after_package must preserve the package path and output set" unless files(destination) == outputs
                   AppImage.new(root).check(packages.first) if format == "appimage"
+                  AppImage.new(root).check_zsync(zsync, packages.first) if format == "appimage" && zsync
                 end
                 if native
                   native.check_output(packages.first, format)
                   raise Error, "native recipes/signing must not change their input payload" unless native.digest(payload) == payload_digest
                 end
                 inspection["apple"] = signing.notarize(packages.first) if signing
-                records << { "target" => id, "format" => format, "path" => packages.first.relative_path_from(staging).to_s,
+                record = { "target" => id, "format" => format, "path" => packages.first.relative_path_from(staging).to_s,
                   "sha256" => sha256(packages.first), "validation" => inspection }
+                record["zsync"] = zsync.relative_path_from(staging).to_s if format == "appimage" && zsync
+                records << record
               end
             end
           end
@@ -381,7 +388,7 @@ module NativePackages
       end
       destinations.each do |destination|
         if destination == "github"
-          paths = manifest.fetch("packages").map { |entry| output / entry.fetch("path") }
+          paths = manifest.fetch("packages").flat_map { |entry| [entry.fetch("path"), entry["zsync"]].compact.map { |path| output / path } }
           paths += manifest.fetch("files").keys.grep(/-packaging\.tar\.xz\z/).map { |path| output / path }
           names = paths.map { |path| path.basename.to_s }
           raise Error, "duplicate release asset names; give variants distinct nFPM names/releases" unless names.uniq == names

data/lib/native_packages/configuration.rb

@@ -86,7 +86,7 @@ module NativePackages
       metadata = tokens("9.8.7", epoch: 1_767_225_600)
       targets.each do |id, target|
         raise Error, "invalid target name: #{id}" unless /\A[a-z0-9][a-z0-9-]*\z/.match?(id)
-        unknown = target.keys - %w[platform arch libc abi kind formats input nfpm before_build after_package compiler_target native]
+        unknown = target.keys - %w[platform arch libc abi kind formats input nfpm before_build after_package compiler_target native appimage]
         raise Error, "targets.#{id}: unknown fields #{unknown.join(', ')}" unless unknown.empty?
         formats = target.fetch("formats")
         unless formats.is_a?(Array) && !formats.empty? && formats.uniq == formats && (formats - FORMATS).empty?
@@ -125,6 +125,13 @@ module NativePackages
         if formats.include?("appimage")
           raise Error, "#{id}: AppImage requires a Linux binary target" unless target["platform"] == "linux" && kind == "binary"
           AppImage.architecture(target)
+        elsif target.key?("appimage")
+          raise Error, "#{id}.appimage: only for targets that build an AppImage"
+        end
+        begin
+          update_information(target, "9.8.7")
+        rescue Error => error
+          raise Error, "#{id}.#{error.message}"
         end
         raise Error, "#{id}: IPK needs an explicit abi (device/distribution baseline)" if formats.include?("ipk") && target.fetch("abi", "").empty?
         input = mapping(target.fetch("input"), "#{id}.input")
@@ -162,6 +169,12 @@ module NativePackages
       true
     end
 
+    # The AppImage update information for `target`, checked against the
+    # AppImage `version` builds, or nil.
+    def update_information(target, version)
+      AppImage.update_information(target, name: name, version: version, repository: data.fetch("release")["repository"])
+    end
+
     def tokens(version, epoch: nil)
       epoch ||= Integer(ENV.fetch("SOURCE_DATE_EPOCH", Time.now.to_i.to_s))
       result = { "NAME" => name, "VERSION" => version, "TAG" => "v#{version}", "DATE" => Time.at(epoch).utc.iso8601,

data/lib/native_packages/support.rb

@@ -12,7 +12,7 @@ require "tmpdir"
 require "yaml"
 
 module NativePackages
-  VERSION = "0.9.0"
+  VERSION = "0.10.0"
   class Error < StandardError; end
 
   module Support

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: native-packages
 version: !ruby/object:Gem::Version
-  version: 0.9.0
+  version: 0.10.0
 platform: ruby
 authors:
 - Carmine Paolino