fix: Handle SIGPIPE in package verification

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.gitea/workflows/release.yml

@@ -11,6 +11,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          submodules: recursive
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
@@ -34,6 +36,9 @@ jobs:
           composer config platform.php 8.3.0
           composer install --no-dev --optimize-autoloader --no-interaction
 
+      - name: Install gettext
+        run: apt-get update && apt-get install -y gettext
+
       - name: Compile translations
         run: |
           for po in languages/*.po; do
@@ -106,9 +111,10 @@ jobs:
 
       - name: Verify package structure
         run: |
+          set +o pipefail
           VERSION=${{ steps.version.outputs.version }}
           echo "Package contents:"
-          unzip -l "releases/wp-fedistream-${VERSION}.zip" | head -50
+          unzip -l "releases/wp-fedistream-${VERSION}.zip" | head -50 || true
 
           # Verify main file is at correct location
           if unzip -l "releases/wp-fedistream-${VERSION}.zip" | grep -q "wp-fedistream/wp-fedistream.php"; then
@@ -140,14 +146,48 @@ jobs:
           echo "Release notes extracted"
 
       - name: Create Gitea Release
-        uses: actions/gitea-release-action@v1
+        env:
-        with:
+          GITEA_TOKEN: ${{ secrets.SRC_GITEA_TOKEN }}
-          token: ${{ secrets.GITEA_TOKEN }}
+        run: |
-          tag_name: ${{ github.ref_name }}
+          VERSION=${{ steps.version.outputs.version }}
-          release_name: "Release ${{ steps.version.outputs.version }}"
+          TAG_NAME=${{ github.ref_name }}
-          body_path: release_notes.txt
+          PRERELEASE="false"
-          draft: false
+          if [[ "$TAG_NAME" == *-* ]]; then
-          prerelease: ${{ contains(github.ref_name, '-') }}
+            PRERELEASE="true"
-          files: |
+          fi
-            releases/wp-fedistream-${{ steps.version.outputs.version }}.zip
+
-            releases/wp-fedistream-${{ steps.version.outputs.version }}.zip.sha256
+          # Read release notes
+          BODY=$(cat release_notes.txt)
+
+          # Create release via Gitea API
+          RELEASE_RESPONSE=$(curl -s -X POST \
+            -H "Authorization: token ${GITEA_TOKEN}" \
+            -H "Content-Type: application/json" \
+            -d "{\"tag_name\": \"${TAG_NAME}\", \"name\": \"Release ${VERSION}\", \"body\": $(echo "$BODY" | jq -Rs .), \"draft\": false, \"prerelease\": ${PRERELEASE}}" \
+            "${GITHUB_SERVER_URL}/api/v1/repos/${GITHUB_REPOSITORY}/releases")
+
+          RELEASE_ID=$(echo "$RELEASE_RESPONSE" | jq -r '.id')
+
+          if [ "$RELEASE_ID" == "null" ] || [ -z "$RELEASE_ID" ]; then
+            echo "Failed to create release:"
+            echo "$RELEASE_RESPONSE"
+            exit 1
+          fi
+
+          echo "Created release ID: $RELEASE_ID"
+
+          # Upload attachments
+          for file in "releases/wp-fedistream-${VERSION}.zip" "releases/wp-fedistream-${VERSION}.zip.sha256"; do
+            if [ -f "$file" ]; then
+              FILENAME=$(basename "$file")
+              echo "Uploading $FILENAME..."
+              curl -s -X POST \
+                -H "Authorization: token ${GITEA_TOKEN}" \
+                -H "Content-Type: application/octet-stream" \
+                --data-binary "@$file" \
+                "${GITHUB_SERVER_URL}/api/v1/repos/${GITHUB_REPOSITORY}/releases/${RELEASE_ID}/assets?name=${FILENAME}"
+              echo "Uploaded $FILENAME"
+            fi
+          done
+
+          echo "Release created successfully: ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/releases/tag/${TAG_NAME}"

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "lib/wc-licensed-product-client"]
+	path = lib/wc-licensed-product-client
+	url = ../wc-licensed-product-client.git

CLAUDE.md

@@ -505,7 +505,7 @@ wp-fedistream/
 - Uses Symfony HTTP Client via the license client package
 - License validation cached for 24 hours using WordPress transients
 
-### 2026-01-29 - CI/CD Pipeline
+### 2026-01-29 - CI/CD Pipeline v0.4.0
 
 **Summary:** Added Gitea Actions workflow for automated release package creation.
 
@@ -517,7 +517,7 @@ wp-fedistream/
 - Automatic translation compilation (.po to .mo)
 - Version verification (plugin version must match tag)
 - Proper WordPress plugin zip structure
-- SHA256 and MD5 checksum generation
+- SHA256 checksum generation
 - Package structure verification
 - Changelog extraction for release notes
 - Automatic Gitea release creation with attachments
@@ -530,6 +530,8 @@ wp-fedistream/
 **Files Modified:**
 
 - `CLAUDE.md` - Added CI/CD documentation and updated directory structure
+- `CHANGELOG.md` - Added v0.4.0 entry
+- `wp-fedistream.php` - Version bump to 0.4.0
 
 **Notes:**
 
@@ -537,3 +539,4 @@ wp-fedistream/
 - Uses `shivammathur/setup-php@v2` for PHP setup
 - Uses `actions/gitea-release-action@v1` for release creation
 - Compatible with GitHub Actions syntax
+- User simplified checksums to SHA256 only (removed MD5)

composer.json

@@ -16,13 +16,13 @@
     },
     "repositories": [
         {
-            "type": "vcs",
+            "type": "path",
-            "url": "https://src.bundespruefstelle.ch/magdev/wc-licensed-product-client.git"
+            "url": "lib/wc-licensed-product-client"
         }
     ],
     "require": {
         "php": ">=8.3",
-        "magdev/wc-licensed-product-client": "^0.1",
+        "magdev/wc-licensed-product-client": "^0.2",
         "twig/twig": "^3.0"
     },
     "require-dev": {

composer.lock

@@ -4,15 +4,15 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "29e8e4e069b25dee0a610019a77dab50",
+    "content-hash": "0c8153ac31232ffe7f0af117cec865b4",
     "packages": [
         {
             "name": "magdev/wc-licensed-product-client",
-            "version": "v0.1.0",
+            "version": "v0.2.2",
-            "source": {
+            "dist": {
-                "type": "git",
+                "type": "path",
-                "url": "https://src.bundespruefstelle.ch/magdev/wc-licensed-product-client.git",
+                "url": "lib/wc-licensed-product-client",
-                "reference": "83037ea0c2d9e365cf9ec0ad50251d3ebc7e4782"
+                "reference": "f9281ec5fb23bf1993ab0240e0347c835009a10f"
             },
             "require": {
                 "php": "^8.3",
@@ -51,7 +51,9 @@
                 "issues": "https://src.bundespruefstelle.ch/magdev/wc-licensed-product-client/issues",
                 "source": "https://src.bundespruefstelle.ch/magdev/wc-licensed-product-client"
             },
-            "time": "2026-01-22T15:24:57+00:00"
+            "transport-options": {
+                "relative": true
+            }
         },
         {
             "name": "psr/cache",