Sync with microG unofficial installer

Author: ale5000-git

.github/workflows/auto-nightly.yml

@@ -183,7 +183,6 @@ jobs:
           prerelease: true
           make_latest: false
           overwrite_files: false
-          preserve_order: true
           files: |
             ${{ steps.build.outputs.ZIP_FOLDER }}/*.zip*
             ${{ steps.attest.outputs.bundle-path }}

.github/workflows/auto-release-from-tag.yml

@@ -25,6 +25,8 @@ jobs:
       cancel-in-progress: false
     permissions:
       contents: write # Needed to create a release
+      id-token: write # Needed to attest build provenance
+      attestations: write # Needed to attest build provenance
 
     steps:
       - name: "Checkout sources"
@@ -50,6 +52,7 @@ jobs:
           subject-path: "${{ steps.build.outputs.ZIP_FOLDER }}/*.zip"
           show-summary: false
       - name: "ZIP info"
+        id: "info"
         run: |
           # Retrieve informations...
           ZIP_FOLDER='${{ steps.build.outputs.ZIP_FOLDER }}'
@@ -73,6 +76,14 @@ jobs:
           printf '%s\n' "::notice::MD5: ${ZIP_MD5:-Missing}"
           printf '%s\n' "::notice::Attestation: ${ZIP_ATTESTATION:-Missing}"
           : "${ZIP_FOLDER:?}" || exit "${?}"
+          # Preparing attestation file...
+          old_attest_file='${{ steps.attest.outputs.bundle-path }}'
+          if test -n "${old_attest_file?}"; then
+            new_attest_file="./.tmp/release-$(basename -- "${old_attest_file:?}")" || exit "${?}"
+            mkdir -p -- './.tmp' || exit "${?}"
+            cp -f -T -- "${old_attest_file:?}" "${new_attest_file:?}" || exit "${?}"
+            printf 'ZIP_ATTESTATION_FILE=%s\n' "${new_attest_file:?}" 1>> "${GITHUB_OUTPUT?}"
+          fi
       - name: "Create release"
         uses: softprops/action-gh-release@v2
         if: "${{ github.run_attempt == '1' && steps.build.outputs.ZIP_IS_ALPHA == 'false' && steps.build.outputs.ZIP_BUILD_TYPE_SUPPORTED == 'true' }}"
@@ -85,8 +96,7 @@ jobs:
           generate_release_notes: true
           draft: false
           overwrite_files: false
-          preserve_order: true
           files: |
             ${{ steps.build.outputs.ZIP_FOLDER }}/*.zip*
-            ${{ steps.attest.outputs.bundle-path }}
+            ${{ steps.info.outputs.ZIP_ATTESTATION_FILE }}
           fail_on_unmatched_files: true

.github/workflows/tag-and-release.yml

@@ -74,3 +74,5 @@ jobs:
       tag-name: "${{ needs.create-tag.outputs.tag-name }}"
     permissions:
       contents: write # Needed to create a release
+      id-token: write # Needed to attest build provenance
+      attestations: write # Needed to attest build provenance

.gitignore

@@ -1,7 +1,7 @@
 # SPDX-FileCopyrightText: none
 # SPDX-License-Identifier: CC0-1.0
 
-# Files to always ignore
+# Always ignore
 /coverage/
 /dependency-graph-reports/
 /.ssh/

zip-content/zip-install.sh

@@ -70,6 +70,7 @@ command 1> /dev/null -v 'printf' || {
   else
     NO_COLOR=1
 
+    # shellcheck disable=SC2329 # IGNORE: Detection bug
     printf()
     {
       case "${1-unset}" in