ci: enforce baileys lock sync

Author: Rodrigo

.github/workflows/main.yml

@@ -24,13 +24,15 @@ jobs:
     steps: 
       - uses: actions/checkout@v5
       - uses: actions/setup-node@v5
-        with:
-          node-version: 24
-          cache: yarn
-      - run: yarn install
-      - run: yarn lint
-      - run: yarn format
-      - run: yarn test
+        with:
+          node-version: 24
+          cache: yarn
+      - run: yarn check:baileys-lock
+      - run: yarn install --frozen-lockfile
+      - run: yarn check:baileys-lock
+      - run: yarn lint
+      - run: yarn format
+      - run: yarn test
 
   build:
     needs: test

.github/workflows/sync-upstream.yml

@@ -49,12 +49,14 @@ jobs:
           git checkout -b "$BRANCH"
           git merge --no-ff -m "merge: upstream ${{ inputs.tag }}" "tags/${{ inputs.tag }}"
 
-      - name: Install Yarn (classic) and dependencies
-        run: |
-          npm i -g yarn@1.22.22
-          yarn install
-
-      - name: Build
+      - name: Install Yarn (classic) and dependencies
+        run: |
+          npm i -g yarn@1.22.22
+          yarn check:baileys-lock
+          yarn install --frozen-lockfile
+          yarn check:baileys-lock
+
+      - name: Build
         run: yarn build
 
       - name: Test

package.json

@@ -43,10 +43,11 @@
     "broker-ts": "node --max-old-space-size=4096 --experimental-strip-types --experimental-transform-types src/broker.ts",
     "bridge": "node --max-old-space-size=4096 dist/src/bridge.js",
     "bridge-ts": "node --max-old-space-size=4096 --experimental-strip-types --experimental-transform-types src/bridge.ts",
-    "clean:data": "rm -rf ./data/medias/* ./data/sessions/* ./data/stores/*.json",
-    "build:docs": "node ./scripts/openapi-to-json.mjs",
-    "postinstall": "node ./scripts/prepare-baileys.mjs"
-  },
+    "clean:data": "rm -rf ./data/medias/* ./data/sessions/* ./data/stores/*.json",
+    "build:docs": "node ./scripts/openapi-to-json.mjs",
+    "check:baileys-lock": "node ./scripts/check-baileys-lock.mjs",
+    "postinstall": "node ./scripts/prepare-baileys.mjs"
+  },
   "devDependencies": {
     "@eslint/js": "^9.1.1",
     "@types/express": "^4.17.21",

scripts/check-baileys-lock.mjs

@@ -0,0 +1,49 @@
+import fs from 'node:fs'
+
+const dependencyName = '@whiskeysockets/baileys'
+const repoPrefix = 'github:ViperTecCorporation/Baileys#'
+
+const packageJson = JSON.parse(fs.readFileSync('package.json', 'utf8'))
+const wantedRefs = [
+  packageJson.dependencies?.[dependencyName],
+  packageJson.resolutions?.[dependencyName],
+].filter(Boolean)
+
+const wantedHashes = [...new Set(wantedRefs.map((ref) => `${ref}`.split('#')[1]).filter(Boolean))]
+if (!wantedHashes.length) {
+  console.error(`[check-baileys-lock] ${dependencyName} must be pinned with ${repoPrefix}<commit>`)
+  process.exit(1)
+}
+
+if (wantedHashes.length > 1) {
+  console.error(`[check-baileys-lock] package.json has conflicting Baileys pins: ${wantedHashes.join(', ')}`)
+  process.exit(1)
+}
+
+const wantedHash = wantedHashes[0]
+const lockLines = fs.readFileSync('yarn.lock', 'utf8').split(/\r?\n/)
+const entryStart = lockLines.findIndex((line) => line.includes(`"${dependencyName}@${repoPrefix}`))
+let lockEntry = ''
+if (entryStart >= 0) {
+  const entryLines = [lockLines[entryStart]]
+  for (let index = entryStart + 1; index < lockLines.length; index += 1) {
+    const line = lockLines[index]
+    if (line && !line.startsWith(' ')) break
+    entryLines.push(line)
+  }
+  lockEntry = entryLines.join('\n')
+}
+const lockedHash = lockEntry.match(/Baileys#([0-9a-f]{7,40})/)?.[1] || lockEntry.match(/tar\.gz\/([0-9a-f]{7,40})/)?.[1] || ''
+
+if (!lockEntry || !lockedHash) {
+  console.error('[check-baileys-lock] Baileys entry was not found in yarn.lock')
+  process.exit(1)
+}
+
+if (lockedHash !== wantedHash) {
+  console.error(`[check-baileys-lock] Baileys lock mismatch: package.json=${wantedHash} yarn.lock=${lockedHash}`)
+  console.error('[check-baileys-lock] Run yarn install and commit yarn.lock with package.json.')
+  process.exit(1)
+}
+
+console.log(`[check-baileys-lock] Baileys lock is in sync: ${wantedHash}`)