opsscript-gate 0.9.2__tar.gz → 0.9.5__tar.gz

{opsscript_gate-0.9.2 → opsscript_gate-0.9.5}/.github/workflow-templates/opsscript-gate.yml

@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
 
       - name: Run OpsScript Gate
-        uses: Mresyzz/opsscript-gate@v0.9.2
+        uses: Mresyzz/opsscript-gate@v0.9.4
         with:
           shell: auto
           network: none

{opsscript_gate-0.9.2 → opsscript_gate-0.9.5}/.github/workflows/deploy-pages.yml

@@ -25,6 +25,8 @@ jobs:
         uses: actions/checkout@v4
       - name: Setup Pages
         uses: actions/configure-pages@v5
+      - name: Stage downloadable installer workflow
+        run: cp examples/github-actions/installer-smoke.yml docs/installer-smoke.yml
       - name: Upload artifact
         uses: actions/upload-pages-artifact@v3
         with:

{opsscript_gate-0.9.2 → opsscript_gate-0.9.5}/.github/workflows/release.yml

@@ -128,7 +128,8 @@ jobs:
                 echo "Tag $TARGET_TAG was released from earlier commit ($TAG_SHA != ${{ github.sha }}). Skipping release."
               fi
             else
-              echo "Target tag $TARGET_TAG does not exist. Creating it and handing publication to the tag workflow."
+              echo "Target tag $TARGET_TAG does not exist. Creating tag and publishing release."
+              IS_NEW_RELEASE="true"
               SHOULD_TAG="true"
             fi
           else

{opsscript_gate-0.9.2 → opsscript_gate-0.9.5}/.gitignore

@@ -50,3 +50,4 @@ venv.bak/
 *~
 .DS_Store
 Thumbs.db
+.ai/

{opsscript_gate-0.9.2 → opsscript_gate-0.9.5}/CHANGELOG.md

@@ -1,6 +1,37 @@
 # Changelog
 
-## [0.9.2] - Unreleased
+## [0.9.5] - 2026-11-08
+
+### Added
+- Extended structured failure diagnostics to handle exit code 126 (`permission_denied` and `exec_format_error`) and exit code 137 (`oom_killed`) with targeted remediation suggestions.
+- Added native distribution family detection for Amazon Linux (`amazonlinux`, `amzn`) and Oracle Linux (`oracle`, `ol:`) to support RHEL-family package recommendations.
+- Added GitHub Composite Action `outputs` for `all-passed` and `report-file`, exporting execution status via `$GITHUB_OUTPUT`.
+- Surfaced package installation recommendations and package names directly in Markdown compatibility tables, failure diagnostic log drawers, and terminal detail outputs.
+- Added convenient counting properties (`passed_count`, `failed_count`, `total_count`) on `RunReport` and `MultiScriptReport`.
+
+## [0.9.4] - 2026-10-11
+
+### Fixed
+- Fixed release workflow publishing deadlock where `main` pushes skipped distribution package builds and release creation due to GITHUB_TOKEN tag events not triggering new workflows.
+- Unified command path extraction in remediation rules to ensure full-path commands (e.g. `/usr/bin/apt-get`, `/sbin/apk`, `/bin/yum`, `/usr/local/bin/bash`) accurately match package manager and shell hints.
+- Added native RHEL/Fedora/CentOS package mappings in `COMMON_COMMAND_PACKAGES` to prevent fallback to invalid Debian package names.
+- Added native container package pre-installation support for `dnf`, `microdnf`, and `yum` in `runner._wrap_with_package_setup`.
+- Fixed `RunReport` and `MultiScriptReport` `__post_init__` to preserve explicitly passed `all_passed=False` when result collections are empty.
+- Supported bare directory exclusions (e.g. `tests` or `tests/`) in `_matches_exclude` to match both directories and all contained files.
+
+## [0.9.3] - 2026-10-11
+
+### Added
+- Added cross-distribution package name mapping and actionable remediation suggestions (`apt-get`, `apk`, `dnf`) for common missing operations commands (`curl`, `wget`, `jq`, `git`, `tar`, `python3`, `pip`, `sudo`, `make`, `gcc`, etc.).
+- Extended `FailureDiagnostic` and SARIF output with structured `suggested_package` property.
+
+### Fixed
+- Fixed unreadable shell script candidate misclassification during discovery.
+- Ensured temporary script files are safely cleaned up during distribution preparation errors.
+- Added preflight validation to reject directory and missing script paths before creating worker threads.
+- Enforced consistent POSIX LF line endings in report output files across platforms.
+
+## [0.9.2] - 2026-10-05
 
 ### Fixed
 - Hardened SARIF, Markdown, terminal, and machine-readable output handling.

{opsscript_gate-0.9.2 → opsscript_gate-0.9.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: opsscript-gate
-Version: 0.9.2
+Version: 0.9.5
 Summary: Cross-distro shell script compatibility and portability checker for Debian, Ubuntu, and Alpine. Runs real containers to diagnose command not found.
 Project-URL: Homepage, https://mresyzz.github.io/opsscript-gate/
 Project-URL: Demo, https://mresyzz.github.io/opsscript-gate/
@@ -28,6 +28,7 @@ Requires-Dist: docker>=7.0.0
 Provides-Extra: test
 Requires-Dist: markdown-it-py>=3.0.0; extra == 'test'
 Requires-Dist: pytest>=8.0.0; extra == 'test'
+Requires-Dist: pyyaml>=6.0.0; extra == 'test'
 Description-Content-Type: text/markdown
 
 # OpsScript Gate — cross-distro shell script runtime compatibility checker
@@ -80,7 +81,7 @@ apt-get --version
 Run it locally with `opsscript-gate run ./install.sh`, or add the following step to CI:
 
 ```yaml
-- uses: Mresyzz/opsscript-gate@v0.9.2
+- uses: Mresyzz/opsscript-gate@v0.9.4
   with:
     script-path: install.sh
 ```
@@ -89,7 +90,7 @@ The result identifies the failing distribution, exit code, line, missing command
 
 ---
 
-## Current version: v0.9.2 (local candidate)
+## Current release: v0.9.4
 
 The current release includes a project config file, a dry-run plan, presets, exclusions,
 saved reports, changed-script selection for pull requests, and repeat runs for detecting
@@ -119,6 +120,10 @@ image's native package manager before testing. Package setup is opt-in and
 requires bridge networking. See [configuration and migration](docs/configuration.md) and
 [why a shell script works on Ubuntu but fails on Alpine](docs/troubleshooting.md).
 
+Testing an installer? Use the [installation smoke test workflow](docs/installer-smoke-test.md)
+to check the installed binary inside each container. A script's zero exit status
+alone does not prove it installed successfully.
+
 ## Quickstart
 
 ### In GitHub Actions
@@ -143,7 +148,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           persist-credentials: false
-      - uses: Mresyzz/opsscript-gate@v0.9.2
+      - uses: Mresyzz/opsscript-gate@v0.9.4
 ```
 
 This zero-configuration form discovers shell scripts in the repository. Use
@@ -154,7 +159,7 @@ repository has a single installer. For self-hosted model installers, see the
 Or test a specific script with custom execution modes:
 
 ```yaml
-      - uses: Mresyzz/opsscript-gate@v0.9.2
+      - uses: Mresyzz/opsscript-gate@v0.9.4
         with:
           script-path: scripts/install.sh
           shell: auto
@@ -188,7 +193,7 @@ unrelated scripts:
         with:
           persist-credentials: false
           fetch-depth: 0
-      - uses: Mresyzz/opsscript-gate@v0.9.2
+      - uses: Mresyzz/opsscript-gate@v0.9.4
         with:
           changed-since: ${{ github.event.pull_request.base.sha }}
           preset: minimal
@@ -279,7 +284,7 @@ Use `sarif` when the result should appear in GitHub Code Scanning or another
 SARIF-compatible viewer. Upload it explicitly with the official upload action:
 
 ```yaml
-- uses: Mresyzz/opsscript-gate@v0.9.2
+- uses: Mresyzz/opsscript-gate@v0.9.4
   with:
     script-path: scripts/install.sh
     format: sarif

{opsscript_gate-0.9.2 → opsscript_gate-0.9.5}/README.md

@@ -48,7 +48,7 @@ apt-get --version
 Run it locally with `opsscript-gate run ./install.sh`, or add the following step to CI:
 
 ```yaml
-- uses: Mresyzz/opsscript-gate@v0.9.2
+- uses: Mresyzz/opsscript-gate@v0.9.4
   with:
     script-path: install.sh
 ```
@@ -57,7 +57,7 @@ The result identifies the failing distribution, exit code, line, missing command
 
 ---
 
-## Current version: v0.9.2 (local candidate)
+## Current release: v0.9.4
 
 The current release includes a project config file, a dry-run plan, presets, exclusions,
 saved reports, changed-script selection for pull requests, and repeat runs for detecting
@@ -87,6 +87,10 @@ image's native package manager before testing. Package setup is opt-in and
 requires bridge networking. See [configuration and migration](docs/configuration.md) and
 [why a shell script works on Ubuntu but fails on Alpine](docs/troubleshooting.md).
 
+Testing an installer? Use the [installation smoke test workflow](docs/installer-smoke-test.md)
+to check the installed binary inside each container. A script's zero exit status
+alone does not prove it installed successfully.
+
 ## Quickstart
 
 ### In GitHub Actions
@@ -111,7 +115,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           persist-credentials: false
-      - uses: Mresyzz/opsscript-gate@v0.9.2
+      - uses: Mresyzz/opsscript-gate@v0.9.4
 ```
 
 This zero-configuration form discovers shell scripts in the repository. Use
@@ -122,7 +126,7 @@ repository has a single installer. For self-hosted model installers, see the
 Or test a specific script with custom execution modes:
 
 ```yaml
-      - uses: Mresyzz/opsscript-gate@v0.9.2
+      - uses: Mresyzz/opsscript-gate@v0.9.4
         with:
           script-path: scripts/install.sh
           shell: auto
@@ -156,7 +160,7 @@ unrelated scripts:
         with:
           persist-credentials: false
           fetch-depth: 0
-      - uses: Mresyzz/opsscript-gate@v0.9.2
+      - uses: Mresyzz/opsscript-gate@v0.9.4
         with:
           changed-since: ${{ github.event.pull_request.base.sha }}
           preset: minimal
@@ -247,7 +251,7 @@ Use `sarif` when the result should appear in GitHub Code Scanning or another
 SARIF-compatible viewer. Upload it explicitly with the official upload action:
 
 ```yaml
-- uses: Mresyzz/opsscript-gate@v0.9.2
+- uses: Mresyzz/opsscript-gate@v0.9.4
   with:
     script-path: scripts/install.sh
     format: sarif

{opsscript_gate-0.9.2 → opsscript_gate-0.9.5}/README.zh-CN.md

@@ -17,9 +17,9 @@ Bash 依赖、包管理器假设和交互式阻塞。它与 ShellCheck 互补。
 
 也可以直接打开 [OpsScript Gate 在线演示](https://mresyzz.github.io/opsscript-gate/)，先查看 ShellCheck 与运行时验证的差异，再复制 workflow 到自己的仓库。
 
-## 当前版本 v0.9.2
+## 当前版本 v0.9.4
 
-v0.9.2 是当前本地候选版本；如果你要从源码验证当前分支，也可以执行：
+v0.9.4 是当前已发布版本；如果你要从源码验证当前分支，也可以执行：
 
 ```bash
 pip install -e .
@@ -35,7 +35,7 @@ opsscript-gate run --dry-run
 opsscript-gate run --format json --output reports/compatibility.json
 ```
 
-`init` 生成配置和 GitHub 工作流，不覆盖已有文件。工作流引用 `v0.9.2`。
+`init` 生成配置和 GitHub 工作流，不覆盖已有文件。工作流引用 `v0.9.4`。
 预览不需要 Docker；真实运行需要 Python 3.10+
 和可访问的 Linux Docker 引擎。
 `opsscript-gate doctor` 可以在真实运行前检查 Python 和 Docker。
@@ -74,7 +74,7 @@ Docker daemon 和可选的项目配置。
 - uses: actions/checkout@v7
   with:
     fetch-depth: 0
-- uses: Mresyzz/opsscript-gate@v0.9.2
+- uses: Mresyzz/opsscript-gate@v0.9.4
   with:
     changed-since: ${{ github.event.pull_request.base.sha }}
     preset: minimal

{opsscript_gate-0.9.2 → opsscript_gate-0.9.5}/action.yml

@@ -80,6 +80,14 @@ inputs:
     required: false
     default: ''
 
+outputs:
+  all-passed:
+    description: 'Whether all script compatibility checks passed (true or false)'
+    value: ${{ steps.gate.outputs.all-passed }}
+  report-file:
+    description: 'Path to saved report file if output input was set'
+    value: ${{ inputs.output }}
+
 runs:
   using: 'composite'
   steps:
@@ -94,6 +102,7 @@ runs:
         pip install "${{ github.action_path }}"
 
     - name: Run compatibility gate
+      id: gate
       shell: bash
       env:
         INPUT_SCRIPT_PATH: ${{ inputs.script-path }}
@@ -146,4 +155,11 @@ runs:
           echo "dry-run must be true or false" >&2
           exit 1
         fi
-        python -m opsscript_gate.cli "${ARGS[@]}"
+        GATE_STATUS=0
+        python -m opsscript_gate.cli "${ARGS[@]}" || GATE_STATUS=$?
+        if [ "$GATE_STATUS" -eq 0 ]; then
+          echo "all-passed=true" >> "$GITHUB_OUTPUT"
+        else
+          echo "all-passed=false" >> "$GITHUB_OUTPUT"
+        fi
+        exit "$GATE_STATUS"

{opsscript_gate-0.9.2 → opsscript_gate-0.9.5}/docs/command-not-found.html

@@ -134,7 +134,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           persist-credentials: false
-      - uses: Mresyzz/opsscript-gate@v0.9.2
+      - uses: Mresyzz/opsscript-gate@v0.9.4
         with:
           script-path: install.sh
           shell: auto
@@ -186,6 +186,7 @@ opsscript-gate run ./install.sh</code></pre>
     <a href="https://github.com/Mresyzz/opsscript-gate/blob/main/docs/troubleshooting.md">troubleshooting</a>,
     or <a href="https://github.com/Mresyzz/opsscript-gate/blob/main/SECURITY.md">security boundaries</a>.
     <a href="./">Open the interactive demo</a>.</footer>
+<p>Installer returns zero but the program is missing? <a href="installer-smoke-test.html">Verify the installed binary in the same container.</a></p>
 </main>
 </body>
 </html>