Skip to content

feat: binary installation script and checksum files#3680

Merged
frostming merged 5 commits intomainfrom
feat/add-sha256-checksums
Nov 21, 2025
Merged

feat: binary installation script and checksum files#3680
frostming merged 5 commits intomainfrom
feat/add-sha256-checksums

Conversation

@frostming
Copy link
Collaborator

Pull Request Checklist

  • A news fragment is added in news/ describing what is new.
  • Test cases added for changed code.

Describe what you have changed in this PR.

- Modified .github/workflows/release.yml to generate and upload SHA256 checksums
  for each binary platform during release
- Added aggregate checksums job to create a single checksums file
- Created install-pdm.sh script that downloads binaries from GitHub releases
  with automatic platform detection and checksum verification
- Script supports optional checksum verification with --skip-checksum flag
- Follows best practices for secure software distribution
@codecov
Copy link

codecov bot commented Nov 20, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.96%. Comparing base (65bfc9c) to head (aed32a3).
⚠️ Report is 40 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #3680   +/-   ##
=======================================
  Coverage   85.96%   85.96%           
=======================================
  Files         119      119           
  Lines       12395    12395           
  Branches     2056     2056           
=======================================
  Hits        10655    10655           
  Misses       1165     1165           
  Partials      575      575           
Flag Coverage Δ
unittests 85.82% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@frostming frostming force-pushed the feat/add-sha256-checksums branch from 3cae021 to 2714459 Compare November 20, 2025 10:42
Signed-off-by: Frost Ming <me@frostming.com>
@frostming frostming force-pushed the feat/add-sha256-checksums branch from 2714459 to fedb523 Compare November 20, 2025 11:17
frostming and others added 2 commits November 20, 2025 19:21
Signed-off-by: Frost Ming <me@frostming.com>
@frostming frostming merged commit b342227 into main Nov 21, 2025
24 checks passed
@frostming frostming deleted the feat/add-sha256-checksums branch November 21, 2025 07:04
@smac89
Copy link

smac89 commented Dec 12, 2025

Getting the error

Error: Checksum verification failed!

Command used for downloading:

curl --proto '=https' --tlsv1.2 -sSLf https://pdm-project.org/install.sh | env PDM_VERSION='2.26.1' bash -s

Works fine when using the python script.


Full output

root@3a805cba878a:/# curl --proto '=https' --tlsv1.2 -sSLf https://pdm-project.org/install.sh | env PDM_VERSION='2.26.1' bash -s
PDM: Detecting platform...
  Platform: x86_64-unknown-linux-gnu
PDM: Getting download URL for 2.26.1...
  URL: https://github.com/pdm-project/pdm/releases/download/2.26.1/pdm-2.26.1-x86_64-unknown-linux-gnu.tar.gz
  Install directory: /root/.local/bin
PDM: Downloading PDM from https://github.com/pdm-project/pdm/releases/download/2.26.1/pdm-2.26.1-x86_64-unknown-linux-gnu.tar.gz
PDM: Verifying checksum...
Error: Checksum verification failed!

Update

Checksum passes for v2.26.2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Comments