Automate CA template date sync and guard enforcement

Author: alexphillips-dev

pkg_build.sh

@@ -7,6 +7,7 @@ version_override="${FVPLUS_VERSION_OVERRIDE:-}"
 today_version="$(date +"%Y.%m.%d")"
 version="${today_version}.01"
 plgfile="$CWD/folderview.plus.plg"
+xmlfile="$CWD/folderview.plus.xml"
 archive_prefix="folderview.plus"
 icon_ext_regex='^(png|jpg|jpeg|gif|webp|svg|bmp|ico|avif)$'
 
@@ -211,6 +212,17 @@ md5=$(md5sum "$filename" | awk '{print $1}')
 sed -i "s/<!ENTITY version.*>/<!ENTITY version \"$version\">/" "$plgfile"
 sed -i "s/<!ENTITY md5.*>/<!ENTITY md5 \"$md5\">/" "$plgfile"
 
+# Keep CA template date aligned with the release version date.
+if [[ "$version" =~ ^([0-9]{4})\.([0-9]{2})\.([0-9]{2})(\.[0-9]+|-beta[0-9]*)?$ ]]; then
+    xml_date="${BASH_REMATCH[1]}-${BASH_REMATCH[2]}-${BASH_REMATCH[3]}"
+    if [ -f "$xmlfile" ]; then
+        sed -i "s|<Date>.*</Date>|<Date>${xml_date}</Date>|" "$xmlfile"
+    else
+        echo "ERROR: Missing CA template file: $xmlfile" >&2
+        exit 1
+    fi
+fi
+
 # Update branch references in plg file (URLs use XML entities like &github;)
 sed -i 's|/main/folderview.plus.plg|/'"$branch"'/folderview.plus.plg|' "$plgfile"
 sed -i 's|/main/archive/|/'"$branch"'/archive/|' "$plgfile"

scripts/release_guard.sh

@@ -3,6 +3,7 @@ set -euo pipefail
 
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 PLG_FILE="${ROOT_DIR}/folderview.plus.plg"
+CA_TEMPLATE_FILE="${ROOT_DIR}/folderview.plus.xml"
 PLUGIN_SRC_DIR="${ROOT_DIR}/src/folderview.plus/usr/local/emhttp/plugins/folderview.plus"
 SERVER_DIR="${PLUGIN_SRC_DIR}/server"
 MAX_ARCHIVE_BYTES="${FVPLUS_MAX_ARCHIVE_BYTES:-52428800}" # 50 MiB default ceiling
@@ -40,6 +41,23 @@ if [[ "${VERSION}" =~ ^([0-9]{4}\.[0-9]{2}\.[0-9]{2})(\.[0-9]{2,}|-beta[0-9]*)$
   fi
 fi
 
+if [[ ! -f "${CA_TEMPLATE_FILE}" ]]; then
+  echo "ERROR: Missing CA template file: ${CA_TEMPLATE_FILE}" >&2
+  exit 1
+fi
+
+CA_TEMPLATE_DATE="$(sed -n 's|.*<Date>\([^<]*\)</Date>.*|\1|p' "${CA_TEMPLATE_FILE}" | head -n 1 || true)"
+if [[ -z "${CA_TEMPLATE_DATE}" ]]; then
+  echo "ERROR: Could not parse <Date> from ${CA_TEMPLATE_FILE}" >&2
+  exit 1
+fi
+
+EXPECTED_CA_TEMPLATE_DATE="${VERSION_DATE//./-}"
+if [[ "${CA_TEMPLATE_DATE}" != "${EXPECTED_CA_TEMPLATE_DATE}" ]]; then
+  echo "ERROR: CA template <Date> mismatch. expected=${EXPECTED_CA_TEMPLATE_DATE}, found=${CA_TEMPLATE_DATE}" >&2
+  exit 1
+fi
+
 if command -v xmllint >/dev/null 2>&1; then
   xmllint --noout "${PLG_FILE}"
 else