添加依赖自动更新

Author: SengokuCola

.github/scripts/update_dashboard_dependency.py

@@ -0,0 +1,139 @@
+from __future__ import annotations
+
+from pathlib import Path
+from typing import Iterable
+from urllib.request import urlopen
+from packaging.requirements import Requirement
+from packaging.utils import canonicalize_name
+from packaging.version import InvalidVersion, Version
+import json
+import os
+
+import tomlkit
+
+
+PACKAGE_NAME = os.environ.get("DASHBOARD_PACKAGE_NAME", "maibot-dashboard")
+PYPROJECT_PATH = Path("pyproject.toml")
+REQUIREMENTS_PATH = Path("requirements.txt")
+PYPI_JSON_URL = f"https://pypi.org/pypi/{PACKAGE_NAME}/json"
+
+
+def find_dashboard_requirement(requirements: Iterable[str]) -> Requirement:
+    normalized_package_name = canonicalize_name(PACKAGE_NAME)
+
+    for dependency in requirements:
+        parsed_requirement = Requirement(dependency)
+        if canonicalize_name(parsed_requirement.name) == normalized_package_name:
+            return parsed_requirement
+
+    raise RuntimeError(f"未在依赖列表中找到 {PACKAGE_NAME}")
+
+
+def extract_pinned_min_version(requirement: Requirement) -> Version:
+    matched_versions = [
+        Version(specifier.version)
+        for specifier in requirement.specifier
+        if specifier.operator in {">=", "=="}
+    ]
+
+    if len(matched_versions) != 1:
+        raise RuntimeError(f"{requirement} 的版本约束无法唯一定位当前 dashboard 版本")
+
+    return matched_versions[0]
+
+
+def get_latest_dev_version() -> Version:
+    with urlopen(PYPI_JSON_URL, timeout=30) as response:
+        pypi_data = json.load(response)
+
+    dev_versions: list[Version] = []
+    for release_version, release_files in pypi_data["releases"].items():
+        if not release_files or all(release_file.get("yanked", False) for release_file in release_files):
+            continue
+
+        try:
+            parsed_version = Version(release_version)
+        except InvalidVersion:
+            continue
+
+        if parsed_version.is_devrelease:
+            dev_versions.append(parsed_version)
+
+    if not dev_versions:
+        raise RuntimeError(f"PyPI 上没有找到 {PACKAGE_NAME} 的 dev 版本")
+
+    return max(dev_versions)
+
+
+def update_pyproject(latest_version: Version) -> bool:
+    document = tomlkit.parse(PYPROJECT_PATH.read_text(encoding="utf-8"))
+    dependencies = document["project"]["dependencies"]
+    current_requirement = find_dashboard_requirement(str(item) for item in dependencies)
+    current_version = extract_pinned_min_version(current_requirement)
+
+    if latest_version <= current_version:
+        print(f"pyproject.toml 已是最新 dev 版本: {current_version}")
+        return False
+
+    normalized_package_name = canonicalize_name(PACKAGE_NAME)
+    updated_dependency = f"{PACKAGE_NAME}>={latest_version}"
+
+    for index, dependency in enumerate(dependencies):
+        parsed_requirement = Requirement(str(dependency))
+        if canonicalize_name(parsed_requirement.name) == normalized_package_name:
+            dependencies[index] = updated_dependency
+            break
+
+    PYPROJECT_PATH.write_text(tomlkit.dumps(document), encoding="utf-8")
+    print(f"pyproject.toml: {current_version} -> {latest_version}")
+    return True
+
+
+def update_requirements(latest_version: Version) -> bool:
+    lines = REQUIREMENTS_PATH.read_text(encoding="utf-8").splitlines(keepends=True)
+    current_requirement = find_dashboard_requirement(
+        line.strip() for line in lines if line.strip() and not line.strip().startswith("#")
+    )
+    current_version = extract_pinned_min_version(current_requirement)
+
+    if latest_version <= current_version:
+        print(f"requirements.txt 已是最新 dev 版本: {current_version}")
+        return False
+
+    normalized_package_name = canonicalize_name(PACKAGE_NAME)
+    updated_requirement = f"{PACKAGE_NAME}>={latest_version}"
+
+    for index, line in enumerate(lines):
+        stripped_line = line.strip()
+        if not stripped_line or stripped_line.startswith("#"):
+            continue
+
+        parsed_requirement = Requirement(stripped_line)
+        if canonicalize_name(parsed_requirement.name) == normalized_package_name:
+            if line.endswith("\r\n"):
+                newline = "\r\n"
+            elif line.endswith("\n"):
+                newline = "\n"
+            else:
+                newline = ""
+            lines[index] = f"{updated_requirement}{newline}"
+            break
+
+    REQUIREMENTS_PATH.write_text("".join(lines), encoding="utf-8")
+    print(f"requirements.txt: {current_version} -> {latest_version}")
+    return True
+
+
+def main() -> None:
+    latest_version = get_latest_dev_version()
+    print(f"PyPI 最新 dashboard dev 版本: {latest_version}")
+
+    pyproject_updated = update_pyproject(latest_version)
+    requirements_updated = update_requirements(latest_version)
+
+    if pyproject_updated != requirements_updated:
+        raise RuntimeError("pyproject.toml 与 requirements.txt 的 dashboard 依赖更新状态不一致")
+
+
+if __name__ == "__main__":
+    main()

.github/workflows/update-dashboard-dependency.yml

@@ -0,0 +1,54 @@
+name: Update Dashboard Dependency
+
+on:
+  workflow_run:
+    workflows:
+      - Publish WebUI Dist
+    types:
+      - completed
+    branches:
+      - dev
+  schedule:
+    - cron: "17 * * * *"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+concurrency:
+  group: update-dashboard-dependency-dev
+  cancel-in-progress: false
+
+jobs:
+  update-dev-dependency:
+    if: github.event_name != 'workflow_run' || github.event.workflow_run.conclusion == 'success'
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Checkout dev
+        uses: actions/checkout@v4
+        with:
+          ref: dev
+          fetch-depth: 0
+
+      - name: Setup uv
+        uses: astral-sh/setup-uv@v5
+
+      - name: Check PyPI latest dashboard dev package
+        run: |
+          uv run --no-project --with packaging --with tomlkit python .github/scripts/update_dashboard_dependency.py
+
+      - name: Commit dependency update
+        run: |
+          set -euo pipefail
+
+          if git diff --quiet -- pyproject.toml requirements.txt; then
+            echo "没有发现 dashboard dev 依赖更新"
+            exit 0
+          fi
+
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add pyproject.toml requirements.txt
+          git commit -m "chore: 更新 dashboard dev 依赖"
+          git pull --rebase origin dev
+          git push origin HEAD:dev