♻️ Use script directly

Author: coyotte508

.github/actions/check-deps-published.yml

@@ -53,9 +53,8 @@ jobs:
           git commit -m "🔖 @huggingface/hub $BUMPED_VERSION"
           git tag "hub-v$BUMPED_VERSION"
 
-      - uses: ./.github/actions/check-deps-published
-        with:
-          dep: tasks
+      - name: "Check Deps are published before publishing this package"
+        run: pnpm -w check-deps tasks
 
       - run: pnpm publish --no-git-checks .
         env:

.github/workflows/hub-publish.yml

@@ -53,9 +53,8 @@ jobs:
           git commit -m "🔖 @huggingface/inference $BUMPED_VERSION"
           git tag "inference-v$BUMPED_VERSION"
 
-      - uses: ./.github/actions/check-deps-published
-        with:
-          dep: tasks
+      - name: "Check Deps are published before publishing this package"
+        run: pnpm -w check-deps gguf
 
       - run: pnpm publish --no-git-checks .
         env:

.github/workflows/inference-publish.yml

@@ -50,9 +50,8 @@ jobs:
           git commit . -m "🔖 @huggingface/tasks $BUMPED_VERSION"
           git tag "tasks-v$BUMPED_VERSION"
 
-      - uses: ./.github/actions/check-deps-published
-        with:
-          dep: gguf
+      - name: "Check Deps are published before publishing this package"
+        run: pnpm -w check-deps gguf
 
       - run: pnpm publish --no-git-checks .
         env:

.github/workflows/tasks-publish.yml

@@ -13,9 +13,5 @@ jobs:
         with:
           node-version: "20"
           cache: "pnpm"
-      - uses: ./.github/actions/check-deps-published
-        with:
-          dep: hub
-      - uses: ./.github/actions/check-deps-published
-        with:
-          dep: tasks
+      - run: pnpm -w check-deps tasks
+      - run: pnpm -w check-deps hub

.github/workflows/test-check-deps.yml

@@ -7,11 +7,13 @@
 		"lint": "eslint --quiet --fix --ext .cjs,.ts .eslintrc.cjs",
 		"lint:check": "eslint --ext .cjs,.ts .eslintrc.cjs",
 		"format": "prettier --write package.json .prettierrc .vscode .eslintrc.cjs e2e .github *.md",
-		"format:check": "prettier --check package.json .prettierrc .vscode .eslintrc.cjs .github *.md"
+		"format:check": "prettier --check package.json .prettierrc .vscode .eslintrc.cjs .github *.md",
+		"check-deps": "tsx scripts/check-deps.ts"
 	},
 	"devDependencies": {
 		"@typescript-eslint/eslint-plugin": "^7.2.0",
 		"@typescript-eslint/parser": "^7.2.0",
+		"@types/node": "^18.16.1",
 		"@vitest/browser": "^0.34.6",
 		"eslint": "^8.57.0",
 		"eslint-config-prettier": "^9.0.0",

package.json

@@ -0,0 +1,56 @@
+import { execSync } from "node:child_process";
+import { readFileSync } from "node:fs";
+import { parseArgs } from "node:util";
+
+const args = parseArgs({
+	allowPositionals: true,
+});
+
+const dep = args.positionals[0];
+
+if (!dep) {
+	console.error("Error: No dependency specified.");
+	process.exit(1);
+}
+
+process.chdir(`./packages/${dep}`);
+
+const localVersion = JSON.parse(readFileSync(`./package.json`, "utf-8")).version as string;
+const remoteVersion = execSync(`npm view @huggingface/${dep} version`).toString().trim();
+
+if (localVersion !== remoteVersion) {
+	console.error(
+		`Error: The local @huggingface/${dep} package version (${localVersion}) differs from the remote version (${remoteVersion}). Release halted.`
+	);
+	process.exit(1);
+}
+
+execSync(`npm pack @huggingface/${dep}`);
+execSync(`mv huggingface-${dep}-${localVersion}.tgz ${dep}-local.tgz`);
+
+execSync(`npm pack @huggingface/${dep}@${remoteVersion}`);
+execSync(`mv huggingface-${dep}-${remoteVersion}.tgz ${dep}-remote.tgz`);
+
+execSync(`tar -xf ${dep}-local.tgz`);
+const localChecksum = execSync(`cd package && tar --mtime='1970-01-01' --mode=755 -cf - . | sha256sum | cut -d' ' -f1`)
+	.toString()
+	.trim();
+console.log(`Local package checksum: ${localChecksum}`);
+execSync(`rm -Rf package`);
+
+execSync(`tar -xf ${dep}-remote.tgz`);
+const remoteChecksum = execSync(`cd package && tar --mtime='1970-01-01' --mode=755 -cf - . | sha256sum | cut -d' ' -f1`)
+	.toString()
+	.trim();
+console.log(`Remote package checksum: ${remoteChecksum}`);
+execSync(`rm -Rf package`);
+
+if (localChecksum !== remoteChecksum) {
+	console.error(
+		`Checksum Verification Failed: The local @huggingface/${dep} package differs from the remote version. Release halted. Local Checksum: ${localChecksum}, Remote Checksum: ${remoteChecksum}`
+	);
+	process.exit(1);
+}
+console.log(
+	`Checksum Verification Successful: The local and remote @huggingface/${dep} packages are consistent. Local Checksum: ${localChecksum}, Remote Checksum: ${remoteChecksum}.`
+);