opsscript-gate 0.8.0__tar.gz → 0.8.1__tar.gz

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/.github/workflows/release.yml

@@ -190,6 +190,30 @@ jobs:
           files: dist/*
           generate_release_notes: true
 
+      - name: Check Marketplace listing freshness
+        if: steps.release-check.outputs.is_new_release == 'true'
+        shell: bash
+        env:
+          RELEASE_TAG: ${{ steps.release-check.outputs.release_tag }}
+        run: |
+          set -euo pipefail
+          listing_url="https://github.com/marketplace/actions/opsscript-gate"
+          listing="$(curl -fsSL "$listing_url")"
+          if grep -Fq "$RELEASE_TAG" <<<"$listing"; then
+            echo "Marketplace listing references $RELEASE_TAG."
+            exit 0
+          fi
+
+          echo "::warning::Marketplace listing is not yet showing $RELEASE_TAG. GitHub requires the release UI checkbox to publish an Action release."
+          {
+            echo "## Marketplace publication"
+            echo
+            echo "The release **$RELEASE_TAG** is live, but the Marketplace page has not caught up."
+            echo "Open the release editor, enable **Publish this Action to the GitHub Marketplace**, choose the categories, and save it."
+            echo
+            echo "[Open release editor](https://github.com/Mresyzz/opsscript-gate/releases/edit/${{ steps.release-check.outputs.release_tag }})"
+          } >> "$GITHUB_STEP_SUMMARY"
+
   publish-pypi:
     name: Publish to PyPI via OIDC
     needs: [test, build]

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## [0.8.1] - 2026-10-02
+
+### Fixed
+- Prevented Debian and Ubuntu image cleanup hooks from turning optional package setup into a false compatibility failure.
+- Kept package installation and target script failures fail-closed while making ephemeral cache cleanup best-effort.
+
 ## [0.8.0] - 2026-10-02
 
 ### Added

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/CITATION.cff

@@ -5,7 +5,7 @@ type: software
 authors:
   - family-names: Mresyzz
     given-names: Mresy
-version: 0.8.0
+version: 0.8.1
 date-released: 2026-10-02
 repository-code: https://github.com/Mresyzz/opsscript-gate
 url: https://github.com/Mresyzz/opsscript-gate

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: opsscript-gate
-Version: 0.8.0
+Version: 0.8.1
 Summary: Run Linux shell scripts in Debian, Ubuntu and Alpine containers to catch runtime compatibility failures before merge
 Project-URL: Homepage, https://mresyzz.github.io/InstallReady/
 Project-URL: Demo, https://mresyzz.github.io/InstallReady/?repo=Mresyzz%2Fopsscript-gate
@@ -56,7 +56,7 @@ Try the browser scanner: [InstallReady](https://mresyzz.github.io/InstallReady/?
 
 ---
 
-## Current release: v0.8.0
+## Current release: v0.8.1
 
 The current release includes a project config file, a dry-run plan, presets, exclusions,
 saved reports, and changed-script selection for pull requests. The project controls
@@ -107,7 +107,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           persist-credentials: false
-      - uses: Mresyzz/opsscript-gate@v0.8.0
+      - uses: Mresyzz/opsscript-gate@v0.8.1
 ```
 
 This zero-configuration form discovers shell scripts in the repository. Use
@@ -118,7 +118,7 @@ repository has a single installer. For self-hosted model installers, see the
 Or test a specific script with custom execution modes:
 
 ```yaml
-      - uses: Mresyzz/opsscript-gate@v0.8.0
+      - uses: Mresyzz/opsscript-gate@v0.8.1
         with:
           script-path: scripts/install.sh
           shell: auto
@@ -150,7 +150,7 @@ unrelated scripts:
         with:
           persist-credentials: false
           fetch-depth: 0
-      - uses: Mresyzz/opsscript-gate@v0.8.0
+      - uses: Mresyzz/opsscript-gate@v0.8.1
         with:
           changed-since: ${{ github.event.pull_request.base.sha }}
           preset: minimal
@@ -233,7 +233,7 @@ Use `sarif` when the result should appear in GitHub Code Scanning or another
 SARIF-compatible viewer. Upload it explicitly with the official upload action:
 
 ```yaml
-- uses: Mresyzz/opsscript-gate@v0.8.0
+- uses: Mresyzz/opsscript-gate@v0.8.1
   with:
     script-path: scripts/install.sh
     format: sarif

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/README.md

@@ -26,7 +26,7 @@ Try the browser scanner: [InstallReady](https://mresyzz.github.io/InstallReady/?
 
 ---
 
-## Current release: v0.8.0
+## Current release: v0.8.1
 
 The current release includes a project config file, a dry-run plan, presets, exclusions,
 saved reports, and changed-script selection for pull requests. The project controls
@@ -77,7 +77,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           persist-credentials: false
-      - uses: Mresyzz/opsscript-gate@v0.8.0
+      - uses: Mresyzz/opsscript-gate@v0.8.1
 ```
 
 This zero-configuration form discovers shell scripts in the repository. Use
@@ -88,7 +88,7 @@ repository has a single installer. For self-hosted model installers, see the
 Or test a specific script with custom execution modes:
 
 ```yaml
-      - uses: Mresyzz/opsscript-gate@v0.8.0
+      - uses: Mresyzz/opsscript-gate@v0.8.1
         with:
           script-path: scripts/install.sh
           shell: auto
@@ -120,7 +120,7 @@ unrelated scripts:
         with:
           persist-credentials: false
           fetch-depth: 0
-      - uses: Mresyzz/opsscript-gate@v0.8.0
+      - uses: Mresyzz/opsscript-gate@v0.8.1
         with:
           changed-since: ${{ github.event.pull_request.base.sha }}
           preset: minimal
@@ -203,7 +203,7 @@ Use `sarif` when the result should appear in GitHub Code Scanning or another
 SARIF-compatible viewer. Upload it explicitly with the official upload action:
 
 ```yaml
-- uses: Mresyzz/opsscript-gate@v0.8.0
+- uses: Mresyzz/opsscript-gate@v0.8.1
   with:
     script-path: scripts/install.sh
     format: sarif

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/README.zh-CN.md

@@ -10,9 +10,9 @@ Bash 依赖、包管理器假设和交互式阻塞。它与 ShellCheck 互补。
 
 也可以直接打开 [InstallReady 在线扫描器](https://mresyzz.github.io/InstallReady/?repo=Mresyzz%2Fopsscript-gate)，无需登录即可检查公开仓库。
 
-## 当前版本 v0.8.0
+## 当前版本 v0.8.1
 
-v0.8.0 已作为正式版本发布；如果你要从源码验证当前分支，也可以执行：
+v0.8.1 已作为正式版本发布；如果你要从源码验证当前分支，也可以执行：
 
 ```bash
 pip install -e .
@@ -28,7 +28,7 @@ opsscript-gate run --dry-run
 opsscript-gate run --format json --output reports/compatibility.json
 ```
 
-`init` 生成配置和 GitHub 工作流，不覆盖已有文件。工作流引用 `v0.8.0`。
+`init` 生成配置和 GitHub 工作流，不覆盖已有文件。工作流引用 `v0.8.1`。
 预览不需要 Docker；真实运行需要 Python 3.10+
 和可访问的 Linux Docker 引擎。
 `opsscript-gate doctor` 可以在真实运行前检查 Python 和 Docker。
@@ -65,7 +65,7 @@ Docker daemon 和可选的项目配置。
 - uses: actions/checkout@v7
   with:
     fetch-depth: 0
-- uses: Mresyzz/opsscript-gate@v0.8.0
+- uses: Mresyzz/opsscript-gate@v0.8.1
   with:
     changed-since: ${{ github.event.pull_request.base.sha }}
     preset: minimal

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/docs/configuration.md

@@ -12,7 +12,7 @@ opsscript-gate run --dry-run
 ```
 
 `init` refuses to overwrite either `.opsscript-gate.json` or
-`.github/workflows/opsscript-gate.yml`. The generated workflow uses the v0.8.0 tag.
+`.github/workflows/opsscript-gate.yml`. The generated workflow uses the v0.8.1 tag.
 
 `doctor` checks Python and Docker connectivity without executing repository scripts.
 Use `opsscript-gate doctor --format json` when collecting a support report.
@@ -104,7 +104,7 @@ For pull requests, set `changed-since` to the base commit and fetch full Git his
 - uses: actions/checkout@v7
   with:
     fetch-depth: 0
-- uses: Mresyzz/opsscript-gate@v0.8.0
+- uses: Mresyzz/opsscript-gate@v0.8.1
   with:
     changed-since: ${{ github.event.pull_request.base.sha }}
     preset: minimal
@@ -114,7 +114,7 @@ The Action passes when no changed shell scripts are selected. This keeps unrelat
 documentation or application changes from starting container jobs.
 
 ```yaml
-- uses: Mresyzz/opsscript-gate@v0.8.0
+- uses: Mresyzz/opsscript-gate@v0.8.1
   with:
     config: .opsscript-gate.json
     format: json

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/docs/gpt-oss.md

@@ -33,7 +33,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      - uses: Mresyzz/opsscript-gate@v0.8.0
+      - uses: Mresyzz/opsscript-gate@v0.8.1
         with:
           changed-since: ${{ github.event.pull_request.base.sha }}
           preset: minimal

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/examples/github-actions/README.md

@@ -2,4 +2,4 @@
 
 This example shows a GitHub Actions workflow for checking a shell script on pull requests.
 
-Copy `workflow.yml` into your repository at `.github/workflows/script-gate.yml` and point `script-path` to the script you want to validate. The example uses the current v0.8.0 Action release.
+Copy `workflow.yml` into your repository at `.github/workflows/script-gate.yml` and point `script-path` to the script you want to validate. The example uses the current v0.8.1 Action release.

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/examples/github-actions/workflow.yml

@@ -19,7 +19,7 @@ jobs:
           persist-credentials: false
 
       - name: Run OpsScript Gate
-        uses: Mresyzz/opsscript-gate@v0.8.0
+        uses: Mresyzz/opsscript-gate@v0.8.1
         with:
           script-path: 'scripts/deploy.sh'
           shell: auto

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "opsscript-gate"
-version = "0.8.0"
+version = "0.8.1"
 description = "Run Linux shell scripts in Debian, Ubuntu and Alpine containers to catch runtime compatibility failures before merge"
 readme = "README.md"
 license = { text = "MIT" }

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/src/opsscript_gate/__init__.py

@@ -1,4 +1,4 @@
 """OpsScript Gate: Lightweight cross-distro compatibility pre-check for Linux ops scripts."""
 
-__version__ = "0.8.0"
+__version__ = "0.8.1"
 __all__ = ["__version__"]

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/src/opsscript_gate/config.py

@@ -83,7 +83,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           persist-credentials: false
-      - uses: Mresyzz/opsscript-gate@v0.8.0
+      - uses: Mresyzz/opsscript-gate@v0.8.1
         with:
           config: .opsscript-gate.json
 """,

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/src/opsscript_gate/runner.py

@@ -589,11 +589,15 @@ def _wrap_with_package_setup(command: Sequence[str], packages: Sequence[str]) ->
         "if command -v apt-get >/dev/null 2>&1; then "
         "mkdir -p /tmp/opsscript-apt-archives/partial && "
         "apt-get -o APT::Sandbox::User=root "
+        "-o DPkg::Post-Invoke::= "
+        "-o APT::Update::Post-Invoke-Success::= "
         "-o Dir::Cache::archives=/tmp/opsscript-apt-archives/ update && "
         f"apt-get -o APT::Sandbox::User=root "
+        "-o DPkg::Post-Invoke::= "
+        "-o APT::Update::Post-Invoke-Success::= "
         "-o Dir::Cache::archives=/tmp/opsscript-apt-archives/ "
         f"install -y --no-install-recommends {package_args} && "
-        "rm -rf /tmp/opsscript-apt-archives /var/lib/apt/lists/*; "
+        "(rm -rf /tmp/opsscript-apt-archives /var/lib/apt/lists/* || true); "
         "elif command -v apk >/dev/null 2>&1; then "
         f"apk add --no-cache {package_args}; "
         "else echo 'No supported package manager found (apt-get or apk)' >&2; exit 125; fi"

{opsscript_gate-0.8.0 → opsscript_gate-0.8.1}/tests/test_runner.py

@@ -221,6 +221,8 @@ def test_run_on_distro_package_setup_wraps_command(tmp_path):
     command = mock_client.containers.create.call_args.kwargs["command"]
     assert command[:2] == ["/bin/sh", "-c"]
     assert "Dir::Cache::archives=/tmp/opsscript-apt-archives/" in command[2]
+    assert "DPkg::Post-Invoke::=" in command[2]
+    assert "APT::Update::Post-Invoke-Success::=" in command[2]
     assert "apk add --no-cache curl ca-certificates" in command[2]
     assert "exec /bin/sh -c" in command[2]