fix: prevent broken pipe errors in CI shell scripts

Add `|| true` guards to `grep | head` pipelines across all shell scripts.
Under `set -euo pipefail`, when `head` closes the pipe early, `grep`
receives SIGPIPE causing spurious "grep: write error: Broken pipe" errors.

Author: Goldziher

scripts/ci/actions/build-rust-ffi/build.sh

@@ -139,15 +139,15 @@ if ! cargo "${CARGO_ARGS[@]}" 2>&1 | tee "$BUILD_LOG"; then
   echo ""
   echo "Checking for common errors:"
 
-  if grep -i "link" "$BUILD_LOG" | grep -i "error" | head -5; then
+  if grep -i "link" "$BUILD_LOG" | grep -i "error" | head -5 2>/dev/null; then
     echo "⚠️ Linking errors detected. Check library paths and dependencies."
   fi
 
-  if grep -i "could not find" "$BUILD_LOG" | head -5; then
+  if grep -i "could not find" "$BUILD_LOG" | head -5 2>/dev/null; then
     echo "⚠️ Missing dependencies detected."
   fi
 
-  if grep -i "openssl" "$BUILD_LOG" | grep -i "error" | head -5; then
+  if grep -i "openssl" "$BUILD_LOG" | grep -i "error" | head -5 2>/dev/null; then
     echo "⚠️ OpenSSL errors detected. Verify OPENSSL_DIR is set correctly."
   fi
 

scripts/ci/actions/build-rust-ffi/verify.sh

@@ -18,7 +18,7 @@ if [ -n "$library_path" ] && [ -f "$library_path" ]; then
   if [[ "${RUNNER_OS:-}" != "Windows" ]] && command -v nm &>/dev/null; then
     echo ""
     echo "Exported symbols (first 10):"
-    nm -D "$library_path" 2>/dev/null | grep -E "^[0-9a-f]+ T " | head -10 || echo "Could not extract symbols"
+    nm -D "$library_path" 2>/dev/null | grep -E "^[0-9a-f]+ T " | head -10 || true
   fi
 else
   echo "⚠️ Library artifact not found at expected path"

scripts/ci/actions/setup-rust/report-sccache-stats.sh

@@ -12,8 +12,8 @@ echo "$sccache_output"
 
 # Parse and display metrics
 if echo "$sccache_output" | grep -q "Cache hits"; then
-  hits=$(echo "$sccache_output" | grep "Cache hits" | head -1 | awk '{print $3}' | tr -dc '0-9')
-  misses=$(echo "$sccache_output" | grep "Cache misses" | head -1 | awk '{print $3}' | tr -dc '0-9')
+  hits=$(echo "$sccache_output" | grep "Cache hits" | head -1 | awk '{print $3}' | tr -dc '0-9' || true)
+  misses=$(echo "$sccache_output" | grep "Cache misses" | head -1 | awk '{print $3}' | tr -dc '0-9' || true)
   hits=${hits:-0}
   misses=${misses:-0}
   total=$((hits + misses))

scripts/ci/actions/setup-rust/verify-install.sh

@@ -9,7 +9,7 @@ rustup --version
 cargo --version
 echo "Available targets:"
 if [ -n "$target" ]; then
-  rustup target list | grep -E "installed|${target}" | head -5
+  rustup target list | grep -E "installed|${target}" | head -5 || true
 else
-  rustup target list | grep "installed" | head -5
+  rustup target list | grep "installed" | head -5 || true
 fi

scripts/ci/go/debug-build-environment.sh

@@ -60,7 +60,7 @@ cargo --version || print_status WARN "cargo not found"
 print_status INFO "Go:"
 go version || print_status WARN "go not found"
 print_status INFO "C Compiler:"
-gcc --version 2>&1 | head -1 || print_status WARN "gcc not found"
+(gcc --version 2>&1 || true) | head -1 || print_status WARN "gcc not found"
 print_status INFO "pkg-config:"
 pkg-config --version 2>&1 || print_status WARN "pkg-config not found"
 echo ""
@@ -138,7 +138,7 @@ if [[ "$OSTYPE" == "msys" || "$OSTYPE" == "cygwin" || "$OSTYPE" == "win32" ]]; t
   if [ -d "C:\\msys64" ]; then
     print_status OK "MSYS2 found at C:\\msys64"
     echo "    MinGW64 bin:"
-    if find "C:\\msys64\\mingw64\\bin" -maxdepth 1 -type f 2>/dev/null | head -5 | xargs -r ls -lh; then
+    if find "C:\\msys64\\mingw64\\bin" -maxdepth 1 -type f 2>/dev/null | head -5 | xargs -r ls -lh 2>/dev/null; then
       :
     else
       print_status WARN "Could not list MSYS2 bins"
@@ -181,7 +181,7 @@ print_status INFO "FFI source directory: $REPO_ROOT/crates/kreuzberg-ffi"
 if [ -d "$REPO_ROOT/crates/kreuzberg-ffi" ]; then
   print_status OK "FFI directory exists"
   print_status INFO "FFI Cargo.toml:"
-  grep '^name\|^version' "$REPO_ROOT/crates/kreuzberg-ffi/Cargo.toml" | head -2 | sed 's/^/  /'
+  grep '^name\|^version' "$REPO_ROOT/crates/kreuzberg-ffi/Cargo.toml" | head -2 | sed 's/^/  /' || true
 fi
 
 print_status INFO "FFI header file: $REPO_ROOT/crates/kreuzberg-ffi/kreuzberg.h"
@@ -213,15 +213,15 @@ fi
 
 if [ -d "$REPO_ROOT/packages/go/v4" ]; then
   print_status INFO "Go packages in v4:"
-  find "$REPO_ROOT/packages/go/v4" -maxdepth 1 -type f -name "*.go" | head -5 | sed 's/^/  /'
+  find "$REPO_ROOT/packages/go/v4" -maxdepth 1 -type f -name "*.go" | head -5 | sed 's/^/  /' || true
 fi
 echo ""
 
 print_section "Dependency Status"
 print_status INFO "Checking PDFium..."
 if [ -n "${KREUZBERG_PDFIUM_PREBUILT:-}" ] && [ -d "$KREUZBERG_PDFIUM_PREBUILT" ]; then
   print_status OK "PDFium found at $KREUZBERG_PDFIUM_PREBUILT"
-  if find "$KREUZBERG_PDFIUM_PREBUILT/lib" -maxdepth 1 -type f 2>/dev/null | head -3 | xargs -r ls -lh; then
+  if find "$KREUZBERG_PDFIUM_PREBUILT/lib" -maxdepth 1 -type f 2>/dev/null | head -3 | xargs -r ls -lh 2>/dev/null; then
     :
   else
     echo "  Could not list PDFium libs"
@@ -233,7 +233,7 @@ fi
 print_status INFO "Checking ONNX Runtime..."
 if [ -n "${ORT_LIB_LOCATION:-}" ] && [ -d "$ORT_LIB_LOCATION" ]; then
   print_status OK "ONNX Runtime found at $ORT_LIB_LOCATION"
-  if find "$ORT_LIB_LOCATION" -maxdepth 1 -type f 2>/dev/null | head -3 | xargs -r ls -lh; then
+  if find "$ORT_LIB_LOCATION" -maxdepth 1 -type f 2>/dev/null | head -3 | xargs -r ls -lh 2>/dev/null; then
     :
   else
     echo "  Could not list ORT libs"

scripts/install.sh

@@ -70,7 +70,7 @@ get_latest_version() {
   # List recent releases and pick the first tag starting with "v" (skip benchmark runs etc.)
   local url="https://api.github.com/repos/${REPO}/releases?per_page=20"
   local tag
-  tag="$(curl -fsSL "$url" | grep '"tag_name"' | sed 's/.*"tag_name":[[:space:]]*"\([^"]*\)".*/\1/' | grep '^v' | head -1)"
+  tag="$(curl -fsSL "$url" | grep '"tag_name"' | sed 's/.*"tag_name":[[:space:]]*"\([^"]*\)".*/\1/' | grep '^v' | head -1 || true)"
 
   if [ -z "$tag" ]; then
     error "failed to fetch latest release tag from GitHub"

scripts/publish/csharp/verify-nuget-native-assets.sh

@@ -14,7 +14,7 @@ echo "Package size: $((pkg_size / 1024))K"
 
 echo ""
 echo "=== All runtimes in package ==="
-unzip -l "$pkg" | grep "runtimes/" | head -20 || echo "  (no runtimes found)"
+unzip -l "$pkg" | grep "runtimes/" | head -20 || true
 
 missing_files=0
 for rid in linux-arm64 linux-x64 osx-arm64 win-x64; do

scripts/publish/validate-version-consistency.sh

@@ -12,7 +12,7 @@ errors=0
 echo "Expected version: $expected"
 echo "----------------------------------------"
 
-cargo_version="$(grep '^version' Cargo.toml | head -1 | cut -d'"' -f2)"
+cargo_version="$(grep '^version' Cargo.toml | head -1 | cut -d'"' -f2 || true)"
 echo "Cargo.toml: $cargo_version"
 [ "$cargo_version" = "$expected" ] || {
   echo "❌ Cargo.toml mismatch"
@@ -40,7 +40,7 @@ echo "crates/kreuzberg-node/package.json: $node_version"
   errors=$((errors + 1))
 }
 
-python_version="$(grep '^version' packages/python/pyproject.toml | head -1 | cut -d'"' -f2)"
+python_version="$(grep '^version' packages/python/pyproject.toml | head -1 | cut -d'"' -f2 || true)"
 echo "packages/python/pyproject.toml: $python_version"
 [ "$python_version" = "$expected" ] || {
   echo "❌ Python pyproject.toml mismatch"
@@ -119,7 +119,7 @@ echo "packages/php/composer.json: $php_version"
   errors=$((errors + 1))
 }
 
-elixir_version="$(grep '@version' packages/elixir/mix.exs | head -1 | cut -d'"' -f2)"
+elixir_version="$(grep '@version' packages/elixir/mix.exs | head -1 | cut -d'"' -f2 || true)"
 echo "packages/elixir/mix.exs: $elixir_version"
 [ "$elixir_version" = "$expected" ] || {
   echo "❌ Elixir mix.exs mismatch"

scripts/publish/verify-cargo-version.sh

@@ -14,7 +14,7 @@ if [ ! -f "$cargo_toml" ]; then
   exit 1
 fi
 
-cargo_version=$(grep '^\[workspace.package\]' -A 10 "$cargo_toml" | grep '^version = ' | head -1 | sed -E 's/version = "(.*)"/\1/')
+cargo_version=$(grep '^\[workspace.package\]' -A 10 "$cargo_toml" | grep '^version = ' | head -1 | sed -E 's/version = "(.*)"/\1/' || true)
 
 if [ -z "$cargo_version" ]; then
   echo "Error: Could not extract version from $cargo_toml" >&2

tests/test_apps/homebrew/tests/test-mcp.sh

@@ -202,7 +202,7 @@ log_info "Test 5: Checking for MCP socket/port configuration..."
 if grep -qE "(socket|port|[0-9]{4,5})" "$LOG_FILE" 2>/dev/null; then
   log_success "Found socket/port configuration in logs"
   verbose "Configuration:"
-  grep -E "(socket|port|listen|bind)" "$LOG_FILE" | head -5 | sed 's/^/  /'
+  grep -E "(socket|port|listen|bind)" "$LOG_FILE" | head -5 | sed 's/^/  /' || true
 else
   log_info "No explicit socket/port configuration found (may be default)"
 fi
@@ -216,7 +216,7 @@ if [ "$ERROR_COUNT" -eq 0 ]; then
 else
   log_warning "Found $ERROR_COUNT error entries in logs"
   log_warning "Error lines:"
-  grep -iE "(error|failed|exception|panic)" "$LOG_FILE" 2>/dev/null | head -5 | sed 's/^/  /'
+  grep -iE "(error|failed|exception|panic)" "$LOG_FILE" 2>/dev/null | head -5 | sed 's/^/  /' || true
 fi
 
 log_info "Stopping MCP server..."