ci: ensure wasm integrity

.github/workflows/llhttp-wasm-integrity.yml

@@ -0,0 +1,59 @@
+name: Ensure integrity of llhttp wasm files
+on:
+ workflow_dispatch:
+ workflow_call:
+
+permissions:
+ contents: read
+
+jobs:
+ check:
+ name: Check files
+ outputs:
+ run_job: ${{ steps.check_files.outputs.run_job }}
+ runs-on: ubuntu-latest
+ steps:
+ - name: Checkout code
+ uses: actions/checkout@v2
+ with:
+ fetch-depth: 2
+ - name: check modified files
+ id: check_files
+ run: |
+ echo "=============== list modified files ==============="
+ git diff --name-only HEAD^ HEAD
+
+ echo "========== check paths of modified files =========="
+ git diff --name-only HEAD^ HEAD > files.txt
+
+ echo "run_job=false" > "$GITHUB_OUTPUT"
+
+ while IFS= read -r file
+ do
+ if [[ $file == deps/llhttp/* || $file == lib/llhttp/llhttp* ]]; then
+ echo "run_job=true" > "$GITHUB_OUTPUT"
+ fi
+ done < files.txt
+
+ llhttp-wasm:
+ if: needs.check.outputs.run_job == 'true'
+ name: Check integrity of generagted wasm-files for llhttp
+ needs: check
+ runs-on: ubuntu-latest
+ steps:
+ - name: Checkout code
+ uses: actions/checkout@v2
+ - name: Build wasm of llhttp
+ run: |
+ npm run prebuild:wasm &&
+ npm run build:wasm
+ - name: Integrity Check
+ run: |
+ git diff --quiet lib/llhttp*
+ if [ $? -eq 0 ]; then
+ echo "No changes in the generated wasm files."
+ else
+ echo "Changes detected in the generated wasm files."
+ echo "Please run 'npm run prebuild:wasm' and 'npm run build:wasm' locally and commit the changes."
+ exit 1
+ fi

.github/workflows/nodejs.yml

@@ -181,6 +181,10 @@ jobs:
  - name: Run typings tests
  run: npm run test:typescript
 
+ test-llhttp-integrity:
+ name: Ensure integrity of llhttp wasm files
+ uses: uzlopak/undici/.github/workflows/llhttp-wasm-integrity.yml@llhttp-integrity
+
  automerge:
  if: >
  github.event_name == 'pull_request' && github.event.pull_request.user.login == 'dependabot[bot]'
@@ -190,6 +194,7 @@ jobs:
  - test-types
  - test-without-intl
  - test-fuzzing
+ - test-llhttp-integrity
  - lint
  runs-on: ubuntu-latest
  permissions:

build/wasm.js

@@ -59,7 +59,7 @@ if (process.argv[2] === '--prebuild') {
 }
 
 if (process.argv[2] === '--docker') {
- let cmd = `docker run --rm -it --platform=${platform.toString().trim()}`
+ let cmd = `docker run --rm -t --platform=${platform.toString().trim()}`
  if (process.platform === 'linux') {
  cmd += ` --user ${process.getuid()}:${process.getegid()}`
  }