ci: provision Java for signed releases

.gitea/workflows/release.yml

@@ -25,6 +25,13 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Set up Java 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: "17"
+          cache: gradle
+
       - name: Build, sign, and publish release
         shell: bash
         run: |

tests/release-scripts.test.sh

@@ -312,7 +312,7 @@ PY
   NO_SERVICE=0
   PUBLIC_KEY="$(<"$tmp/public.pem")"
 
-  detect_platform() { PLATFORM=darwin; }
+  detect_platform() { PLATFORM=darwin; ARCH=amd64; }
   check_and_install_dependencies() { JAVA_BIN="$(command -v java)"; return 0; }
   start_service() { return 0; }
   wait_for_installer() { return 0; }
@@ -323,7 +323,7 @@ PY
   [[ -r "$INSTALL_ROOT/current/app/kaidi-erp.jar" ]] || return 1
   (
     source "$ERP_CONFIG_ROOT/erp.env"
-    [[ "$SPRING_PROFILES_ACTIVE" == "postgres" ]]
+    [[ -z "${SPRING_PROFILES_ACTIVE:-}" ]]
     [[ "$OA_UPDATE_ENABLED" == "true" ]]
     [[ "$OA_UPDATE_GITEA_BASE_URL" == "http://127.0.0.1:$port" ]]
     [[ "$ERP_SETUP_TOKEN" =~ ^[0-9a-f]{64}$ ]]
@@ -528,6 +528,7 @@ test_installer_requires_explicit_gitea_url() (
     set --
     source "$root/install.sh"
     GITEA_BASE_URL=
+    NO_SERVICE=1
     main
   ' _ "$PROJECT_ROOT" 2>&1)" || status=$?
   [[ "$status" -ne 0 && "$output" == *'Gitea URL is required'* ]]
@@ -680,6 +681,8 @@ test_release_workflow_uses_scoped_job_token() (
   grep -Fqx '  releases: write' "$workflow"
   grep -Fq 'GITEA_BASE_URL: ${{ github.server_url }}' "$workflow"
   grep -Fq 'GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}' "$workflow"
+  grep -Fq 'uses: actions/setup-java@v4' "$workflow"
+  grep -Fq 'java-version: "17"' "$workflow"
   ! grep -Fq 'RELEASE_GITEA_TOKEN' "$workflow"
   ! grep -Fq 'vars.GITEA_BASE_URL' "$workflow"
 )