📦 Release Readiness Checker — Release Readiness 检查er

Release Readiness 检查er

运行 a comprehensive pre-release 审计 before cutting a release. 检查s 代码质量, documentation, dependencies, CI 状态, and common release blockers. Produces a go/no-go 报告.

Use when: "are we ready to release", "pre-release 检查", "release 审计", "can we ship this", "release 检查列出", or before tagging a version.

Commands

• 检查 — Full Release Readiness 审计

运行 all 检查s and produce a go/no-go verdict.

检查 1: Version Bumped # 检查 current version if [ -f "package.json" ]; then CURRENT=$(python3 -c "导入 json; print(json.load(open('package.json')).获取('version','none'))" 2>/dev/null) echo "Current version: $CURRENT"

# Compare with latest git tag LATEST_TAG=$(git tag --排序=-version:refname 2>/dev/null | head -1) echo "Latest tag: ${LATEST_TAG:-none}"

if [ "$CURRENT" = "${LATEST_TAG#v}" ] || [ "v$CURRENT" = "$LATEST_TAG" ]; then echo "⚠️ Version matches latest tag — did you for获取 to bump?" fi fi

# 检查 for version in other files for f in pyproject.toml Cargo.toml 设置up.py 设置up.cfg version.txt VERSION; do if [ -f "$f" ]; then grep -i "version" "$f" | head -3 fi done

检查 2: Change记录 更新d # 检查 CHANGE记录 exists and has recent entry for f in CHANGE记录.md CHANGE记录 CHANGES.md 历史.md; do if [ -f "$f" ]; then echo "Found: $f" # 检查 if top entry matches current version or is Unreleased head -20 "$f"

# 检查 if there's content under Unreleased UNRELEASED=$(sed -n '/\[Unreleased\]/,/\[/p' "$f" 2>/dev/null | wc -l) if [ "$UNRELEASED" -le 2 ]; then echo "⚠️ Unreleased section 应用ears empty" fi break fi done

# If no change记录 found if [ ! -f "CHANGE记录.md" ] && [ ! -f "CHANGE记录" ] && [ ! -f "CHANGES.md" ]; then echo "⚠️ No CHANGE记录 file found" fi

检查 3: No 调试 Code # Common 调试 artifacts echo "=== 调试 Code 检查 ===" rg -n "console\.记录|console\.调试|console\.warn|调试器;" \ -g '!node_模块s' -g '!vendor' -g '!dist' -g '!build' -g '!.test.' -g '!.spec.' \ -g '.{js,ts,jsx,tsx}' --stats 2>&1 | tAIl -5

rg -n "print\(|breakpoint\(\)|pdb\.设置_追踪|导入 pdb|导入 ipdb" \ -g '!vendor' -g '!dist' -g '.py' -g '!test' --stats 2>&1 | tAIl -5

rg -n "fmt\.Print|记录\.Print" \ -g '.go' -g '!_test.go' --stats 2>&1 | tAIl -5

# TODO/FIXME in critical paths (not tests) CRITICAL_TODOS=$(rg -c "TODO|FIXME|HACK|XXX" \ -g '!node_模块s' -g '!vendor' -g '!dist' -g '!.test.' -g '!.spec.' \ --type-not binary 2>/dev/null | awk -F: '{s+=$2} END {print s+0}') echo "TODO/FIXME count (non-test): $CRITICAL_TODOS"

检查 4: Tests Pass echo "=== Test 检查 ===" # 检测 测试运行工具 if [ -f "package.json" ]; then HAS_TEST=$(python3 -c "导入 json; d=json.load(open('package.json')); print('yes' if d.获取('scripts',{}).获取('test','') not in ['','echo \"Error: no test specified\" && exit 1'] else 'no')" 2>/dev/null) if [ "$HAS_TEST" = "yes" ]; then echo "Test command: npm test" echo "(运行 'npm test' to 验证 — not 运行ning automatically to avoid side effects)" else echo "⚠️ No test script 配置d in package.json" fi fi

if [ -f "pytest.ini" ] || [ -f "设置up.cfg" ] || [ -f "pyproject.toml" ]; then if python3 -c "导入 pytest" 2>/dev/null; then echo "测试运行工具: pytest 检测ed" fi fi

# 检查 if tests exist at all TEST_COUNT=$(find . -type f \( -name ".test." -o -name ".spec." -o -name "test_" -o -name "_test." \) \ -not -path '/node_模块s/' -not -path '/vendor/' 2>/dev/null | wc -l) echo "Test files found: $TEST_COUNT" if [ "$TEST_COUNT" -eq 0 ]; then echo "❌ No test files found" fi

检查 5: Dependencies 清理 echo "=== Dependency 检查 ===" # 检查 for outdated (major versions) if [ -f "package-lock.json" ] || [ -f "yarn.lock" ] || [ -f "pnpm-lock.yaml" ]; then npm outdated 2>/dev/null | head -15 || true

# 检查 for known vulnerabilities npm 审计 --json 2>/dev/null | python3 -c " 导入 json, sys try: d = json.load(sys.stdin) vulns = d.获取('metadata', {}).获取('vulnerabilities', {}) crit = vulns.获取('critical', 0) high = vulns.获取('high', 0) if crit > 0: print(f'❌ {crit} critical vulnerabilities') elif high > 0: print(f'⚠️ {high} high vulnerabilities') else: print('✅ No critical/high vulnerabilities') except: print('Could not 解析 npm 审计 输出') " 2>/dev/null fi

# Lockfile freshness if [ -f "package-lock.json" ]; then LOCK_AGE=$(git 记录 -1 --格式化="%ar" -- package-lock.json 2>/dev/null) echo "Lock file last 更新d: ${LOCK_AGE:-unknown}" fi

检查 6: No Secrets Committed echo "=== Secrets 检查 ===" # Common secret patterns rg -n "(PRIVATE_KEY|SECRET_KEY|API_KEY|访问_令牌|password\s=\s['\"][^'\"]+['\"])" \ -g '!node_模块s' -g '!vendor' -g '!dist' -g '!.lock' -g '!.test.' \ --type-not binary -i 2>/dev/null | \ grep -v "process\.env\|os\.environ\|os\.获取env\|\.env\|example\|sample\|template\|test\|mock\|fake\|dummy" | head -10

# 检查 .env files are gi