Refactor installer scripts and update CI workflows

.github/workflows/check-linux.yml

@@ -5,24 +5,34 @@ on:
     branches: [main]
     paths:
       - "lib/sh/**"
+      - "lib/zsh/**"
+      - "tests/**"
+      - ".github/workflows/check-linux.yml"
   pull_request:
     branches: [main]
     paths:
       - "lib/sh/**"
+      - "lib/zsh/**"
+      - "tests/**"
+      - ".github/workflows/check-linux.yml"
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
   shellcheck:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - name: ⤵️ Check out code from GitHub
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: ☑️ ShellCheck
-        uses: ludeeus/action-shellcheck@00b27aa7cb85167568cb48a3838b75f4265f2bca
+        uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # 2.0.0
         with:
           scandir: "./lib/sh"
 
@@ -32,24 +42,31 @@ jobs:
     needs: [shellcheck]
     steps:
       - name: ⤵️ Check out code from GitHub
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: ⚙️ Prepare dependencies
         run: |
           sudo apt-get update
           sudo apt-get install -y zsh
+      - name: "⚙️ Check: unit fixtures"
+        run: sh ./tests/installers.sh
       - name: "⚙️  Check: install.sh -- -i skip"
-        run: sh -x ./lib/sh/install.sh -- -i skip; command rm -rf ~/.zi
-      - name: "⚙️  Check: install.sh -- -i annex"
-        run: sh -x ./lib/sh/install.sh -- -a annex; command rm -rf ~/.zi
-      - name: "⚙️  Check: install.sh -- -i loader"
-        run: sh -x ./lib/sh/install.sh -- -a loader; command rm -rf ~/.zi
-      - name: "⚙️  Check: install.sh -- -i zunit"
-        run: sh -x ./lib/sh/install.sh -- -a zunit; command rm -rf ~/.zi
+        run: sh -x ./lib/sh/install.sh -- -i skip; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
+      - name: "⚙️  Check: install.sh -- -a annex"
+        run: sh -x ./lib/sh/install.sh -- -a annex; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
+      - name: "⚙️  Check: install.sh -- -a loader"
+        run: sh -x ./lib/sh/install.sh -- -a loader; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
+      - name: "⚙️  Check: install.sh -- -a zunit"
+        run: sh -x ./lib/sh/install.sh -- -a zunit; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
       - name: "⚙️ Check: install_zpmod.sh"
         run: sh -x ./lib/sh/install_zpmod.sh
       - name: ⚙️ Load zpmod module
         run: |
-          module_path+=( "$HOME/.zi/zmodules/zpmod/Src" )
+          module_path+=( "${XDG_DATA_HOME:-$HOME/.local/share}/zi/zmodules/zpmod/Src" )
           zmodload zi/zpmod
           zpmod source-study -l
         shell: zsh {0}
+      - name: "⚙️ Check: init.zsh sync drift"
+        run: >
+          sh lib/sh/sync-init.sh
+          --remote https://raw.githubusercontent.com/z-shell/src/main/lib/zsh/init.zsh
+          --checksum-url https://raw.githubusercontent.com/z-shell/src/main/lib/zsh/init.zsh.md5

.github/workflows/check-macos.yml

@@ -6,50 +6,62 @@ on:
     branches: [main]
     paths:
       - "lib/sh/**"
+      - "lib/zsh/**"
+      - "tests/**"
+      - ".github/workflows/check-macos.yml"
   pull_request:
     branches: [main]
     paths:
       - "lib/sh/**"
+      - "lib/zsh/**"
+      - "tests/**"
+      - ".github/workflows/check-macos.yml"
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
   shellcheck:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - name: ⤵️ Check out code from GitHub
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: ☑️ ShellCheck
-        uses: ludeeus/action-shellcheck@00b27aa7cb85167568cb48a3838b75f4265f2bca
+        uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # 2.0.0
         with:
           scandir: "./lib/sh"
 
   build:
-    runs-on: ubuntu-latest
+    runs-on: macos-latest
     timeout-minutes: 30
     needs: [shellcheck]
     steps:
       - name: ⤵️ Check out code from GitHub
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: ⚙️  Prepare dependencies
         run: |
           brew install zsh
+      - name: "⚙️ Check: unit fixtures"
+        run: sh ./tests/installers.sh
       - name: "⚙️  Check: install.sh -- -i skip"
-        run: sh -x ./lib/sh/install.sh -- -i skip; command rm -rf ~/.zi
-      - name: "⚙️  Check: install.sh -- -i annex"
-        run: sh -x ./lib/sh/install.sh -- -a annex; command rm -rf ~/.zi
-      - name: "⚙️  Check: install.sh -- -i loader"
-        run: sh -x ./lib/sh/install.sh -- -a loader; command rm -rf ~/.zi
-      - name: "⚙️  Check: install.sh -- -i zunit"
-        run: sh -x ./lib/sh/install.sh -- -a zunit; command rm -rf ~/.zi
+        run: sh -x ./lib/sh/install.sh -- -i skip; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
+      - name: "⚙️  Check: install.sh -- -a annex"
+        run: sh -x ./lib/sh/install.sh -- -a annex; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
+      - name: "⚙️  Check: install.sh -- -a loader"
+        run: sh -x ./lib/sh/install.sh -- -a loader; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
+      - name: "⚙️  Check: install.sh -- -a zunit"
+        run: sh -x ./lib/sh/install.sh -- -a zunit; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
       - name: "⚙️ Check: install_zpmod.sh"
         run: sh -x ./lib/sh/install_zpmod.sh
       - name: ⚙️ Load zpmod module
         run: |
-          module_path+=( "$HOME/.zi/zmodules/zpmod/Src" )
+          module_path+=( "${XDG_DATA_HOME:-$HOME/.local/share}/zi/zmodules/zpmod/Src" )
           zmodload zi/zpmod
           zpmod source-study -l
         shell: zsh {0}

.github/workflows/checksum.yml

@@ -3,20 +3,34 @@ name: "🆗 Checksum"
 on:
   push:
     paths:
-      - "lib/**"
+      - "lib/sh/install_zpmod.sh"
+      - "lib/sh/install.sh"
+      - "lib/sh/sync-init.sh"
+      - "lib/zsh/init.zsh"
+      - ".github/workflows/checksum.yml"
   workflow_dispatch: {}
 
+permissions:
+  contents: write
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
+
 jobs:
   checksum:
+    if: github.repository == 'z-shell/src'
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: "🆗 Generate checksum"
-        uses: jmgilman/actions-generate-checksum@521a903edf511407d8bd5535d257402fd9bb5db0
+        uses: jmgilman/actions-generate-checksum@3ea6dc9bf8eecf28e2ecc982fab683484a1a8561 # v1.0.1
         with:
           patterns: |
             lib/sh/install_zpmod.sh
             lib/sh/install.sh
+            lib/sh/sync-init.sh
             lib/zsh/init.zsh
       - run: mv checksum.txt lib/
       - name: "🆗 Commit"

.github/workflows/deploy-gh-pages.yml

@@ -8,17 +8,35 @@ on:
     tags: ["v*.*.*"]
     paths:
       - "lib/**"
+      - ".github/workflows/deploy-gh-pages.yml"
+
+permissions:
+  contents: write
 
 jobs:
   deploy:
+    if: github.repository == 'z-shell/src'
     environment:
       name: github-pages
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}
     steps:
       - name: ⤵️ Check out code from GitHub
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: "🏷 Prepare deployment metadata"
+        id: prepare_deploy
+        run: |
+          commit_message="$(jq -r '.head_commit.message // empty' "$GITHUB_EVENT_PATH")"
+          if [ -z "$commit_message" ]; then
+            commit_message="Deploy ${GITHUB_REF_NAME}"
+          fi
+          {
+            echo "commit_message<<DEPLOY_MESSAGE"
+            printf '%s\n' "$commit_message"
+            echo "DEPLOY_MESSAGE"
+          } >> "$GITHUB_OUTPUT"
       - name: "🏷 Prepare tag"
         id: prepare_tag
         if: startsWith(github.ref, 'refs/tags/')
@@ -34,6 +52,6 @@ jobs:
           publish_dir: ./lib
           user_name: ${{ secrets.ACTIONS_USER }}
           user_email: ${{ secrets.ACTIONS_MAIL }}
-          commit_message: ${{ github.event.head_commit.message }}
+          commit_message: ${{ steps.prepare_deploy.outputs.commit_message }}
           tag_name: ${{ steps.prepare_tag.outputs.deploy_tag_name }}
           tag_message: "Deployment ${{ steps.prepare_tag.outputs.tag_name }}"