Files
orca/config/scripts/update-node-runtime-pin.test.mjs
T
OrcaWinandm4air 3135fbbf49 feat(runtime): pin the Node 24.21.0 server runtime with an offline CI check (#24087)
* feat(runtime): pin the Node 24.21.0 server runtime with an offline CI check

Add src/shared/node-runtime-pin.ts (NODE_RUNTIME_PIN, SERVER_TARGETS,
NODE_RUNTIME_ASSETS for all 8 server targets plus the headers tarball),
generated by config/scripts/update-node-runtime-pin.mjs from the nodejs.org
and unofficial-builds SHASUMS. check-node-runtime-pin.mjs verifies, with no
network, that the pin tracks the locked Electron, matches engines.node's
major, and covers exactly SERVER_TARGETS; it runs in the static analysis job.

ORCAD_BUN_TARGETS consumers now read SERVER_TARGETS so there is one target
list; orcad's Bun runtime and build output are unchanged.

* fix(runtime): reject a pinned archive that belongs to another target

---------

Co-authored-by: m4air <m4air@m4airs-Air.localdomain>
2026-09-30 22:57:10 -07:00

98 lines
3.3 KiB
JavaScript

import { readFileSync } from 'node:fs'
import path from 'node:path'
import { describe, expect, it } from 'vitest'
import {
NODE_RUNTIME_ASSETS,
NODE_RUNTIME_PIN,
SERVER_TARGETS,
nodeRuntimeExecutablePath
} from '../../src/shared/node-runtime-pin.ts'
import {
nodeDistArchiveName,
parseNodeApiVersion,
parseShasums,
renderGeneratedBlock,
replaceGeneratedBlock,
selectAssetSource
} from './update-node-runtime-pin.mjs'
const pinFile = path.resolve(import.meta.dirname, '../../src/shared/node-runtime-pin.ts')
const HASH_A = 'a'.repeat(64)
const HASH_B = 'b'.repeat(64)
describe('nodeDistArchiveName', () => {
it('uses nodejs.org platform names and zip only on Windows', () => {
expect(nodeDistArchiveName('24.21.0', 'linux-x64-glibc')).toBe('node-v24.21.0-linux-x64.tar.gz')
expect(nodeDistArchiveName('24.21.0', 'linux-arm64-musl')).toBe(
'node-v24.21.0-linux-arm64-musl.tar.gz'
)
expect(nodeDistArchiveName('24.21.0', 'win32-arm64')).toBe('node-v24.21.0-win-arm64.zip')
})
it('covers every server target', () => {
for (const target of SERVER_TARGETS) {
expect(nodeDistArchiveName('24.21.0', target)).not.toContain('undefined')
}
})
})
describe('nodeRuntimeExecutablePath', () => {
it('points at bin/node on POSIX and node.exe on Windows', () => {
expect(nodeRuntimeExecutablePath('darwin-arm64', 'node-v24.21.0-darwin-arm64.tar.gz')).toBe(
'node-v24.21.0-darwin-arm64/bin/node'
)
expect(nodeRuntimeExecutablePath('win32-x64', 'node-v24.21.0-win-x64.zip')).toBe(
'node-v24.21.0-win-x64/node.exe'
)
})
})
describe('parseShasums and selectAssetSource', () => {
const official = parseShasums(
`${HASH_A} node-v24.21.0-linux-x64-musl.tar.gz\nnot a hash line\n${HASH_A} node-v24.21.0-linux-x64.tar.gz\n`
)
const unofficial = parseShasums(
`${HASH_B} node-v24.21.0-linux-x64-musl.tar.gz\n${HASH_B} node-v24.21.0-linux-arm64-musl.tar.gz\n`
)
it('prefers the official build when both publish an archive', () => {
expect(selectAssetSource('node-v24.21.0-linux-x64-musl.tar.gz', official, unofficial)).toEqual({
source: 'official',
archiveSha256: HASH_A
})
})
it('falls back to unofficial builds and reports a missing archive as null', () => {
expect(
selectAssetSource('node-v24.21.0-linux-arm64-musl.tar.gz', official, unofficial)
).toEqual({ source: 'unofficial', archiveSha256: HASH_B })
expect(selectAssetSource('node-v24.21.0-aix-ppc64.tar.gz', official, unofficial)).toBeNull()
})
})
describe('parseNodeApiVersion', () => {
it('reads the highest supported N-API version from node_version.h', () => {
expect(
parseNodeApiVersion(
'#define NODE_API_SUPPORTED_VERSION_MAX 10\n#define NODE_API_SUPPORTED_VERSION_MIN 1\n'
)
).toBe(10)
expect(() => parseNodeApiVersion('#define NODE_MAJOR_VERSION 24')).toThrow()
})
})
describe('generated block', () => {
it('reproduces the committed table byte for byte', () => {
const source = readFileSync(pinFile, 'utf8')
const regenerated = replaceGeneratedBlock(
source,
renderGeneratedBlock(NODE_RUNTIME_PIN, NODE_RUNTIME_ASSETS)
)
expect(regenerated).toBe(source)
})
it('refuses a file without markers', () => {
expect(() => replaceGeneratedBlock('export {}\n', 'x')).toThrow(/markers/)
})
})