fix(packaging): green TurtleTerm packaging, release & language suites (#45)

Unifies package identity to turtleterm, aligns version to 0.1.0, collapses arch to canonical staging, greens the real deb/rpm/arch build+verify jobs, fixes rpm %files globbing and build-script stdout capture, hardens the turtle-language symbol merge (adversarial-review finding), makes the arch PKGBUILD build under real makepkg, and adds the python3 runtime dep to all shipped packages. 13/13 tests; all checks green except pre-existing Cargo audit (7 RUSTSEC in the wezterm-fork dep tree, tracked as backlog B7).

Author: mdheller

.github/workflows/turtle-term-linux-packaging.yml

@@ -53,7 +53,7 @@ jobs:
       - name: Validate Debian control shape
         run: |
           test -f packaging/linux/deb/control
-          grep -q '^Package: turtle-term$' packaging/linux/deb/control
+          grep -q '^Package: turtleterm$' packaging/linux/deb/control
           grep -q '^Architecture: amd64 arm64$' packaging/linux/deb/control
           grep -q '^Homepage: https://github.com/SourceOS-Linux/TurtleTerm$' packaging/linux/deb/control
 
@@ -76,7 +76,7 @@ jobs:
       - name: Validate RPM spec shape
         run: |
           test -f packaging/linux/rpm/turtle-term.spec
-          grep -q '^Name:           turtle-term$' packaging/linux/rpm/turtle-term.spec
+          grep -q '^Name:           turtleterm$' packaging/linux/rpm/turtle-term.spec
           grep -q '^ExclusiveArch:  x86_64 aarch64$' packaging/linux/rpm/turtle-term.spec
           grep -q 'TURTLE_TERM_STAGE_PREFIX=%{buildroot}%{_prefix}' packaging/linux/rpm/turtle-term.spec
           grep -q 'ai.sourceos.TurtleTerm.desktop' packaging/linux/rpm/turtle-term.spec

.github/workflows/turtle-term-native-linux-packages.yml

@@ -97,15 +97,15 @@ jobs:
       - name: Verify package artifacts exist
         run: |
           ls -lah dist/native
-          test -n "$(find dist/native -name 'turtle-term_*.deb' -print -quit)"
-          test -n "$(find dist/native -name 'turtle-term_*.deb.sha256' -print -quit)"
-          test -n "$(find dist/native -name 'turtle-term_*.deb.manifest.json' -print -quit)"
-          test -n "$(find dist/native -name 'turtle-term-*.rpm' -print -quit)"
-          test -n "$(find dist/native -name 'turtle-term-*.rpm.sha256' -print -quit)"
-          test -n "$(find dist/native -name 'turtle-term-*.rpm.manifest.json' -print -quit)"
-          test -n "$(find dist/native -name 'turtle-term-*.pkg.tar.zst' -print -quit)"
-          test -n "$(find dist/native -name 'turtle-term-*.pkg.tar.zst.sha256' -print -quit)"
-          test -n "$(find dist/native -name 'turtle-term-*.pkg.tar.zst.manifest.json' -print -quit)"
+          test -n "$(find dist/native -name 'turtleterm_*.deb' -print -quit)"
+          test -n "$(find dist/native -name 'turtleterm_*.deb.sha256' -print -quit)"
+          test -n "$(find dist/native -name 'turtleterm_*.deb.manifest.json' -print -quit)"
+          test -n "$(find dist/native -name 'turtleterm-*.rpm' -print -quit)"
+          test -n "$(find dist/native -name 'turtleterm-*.rpm.sha256' -print -quit)"
+          test -n "$(find dist/native -name 'turtleterm-*.rpm.manifest.json' -print -quit)"
+          test -n "$(find dist/native -name 'turtleterm-*.pkg.tar.zst' -print -quit)"
+          test -n "$(find dist/native -name 'turtleterm-*.pkg.tar.zst.sha256' -print -quit)"
+          test -n "$(find dist/native -name 'turtleterm-*.pkg.tar.zst.manifest.json' -print -quit)"
 
       - name: Write native package index
         env:
@@ -137,15 +137,15 @@ jobs:
         uses: actions/attest@v4
         with:
           subject-path: |
-            dist/native/turtle-term_*.deb
-            dist/native/turtle-term_*.deb.sha256
-            dist/native/turtle-term_*.deb.manifest.json
+            dist/native/turtleterm_*.deb
+            dist/native/turtleterm_*.deb.sha256
+            dist/native/turtleterm_*.deb.manifest.json
             dist/native/rpmbuild/RPMS/**/*.rpm
             dist/native/rpmbuild/RPMS/**/*.rpm.sha256
             dist/native/rpmbuild/RPMS/**/*.rpm.manifest.json
-            dist/native/turtle-term-*.pkg.tar.zst
-            dist/native/turtle-term-*.pkg.tar.zst.sha256
-            dist/native/turtle-term-*.pkg.tar.zst.manifest.json
+            dist/native/turtleterm-*.pkg.tar.zst
+            dist/native/turtleterm-*.pkg.tar.zst.sha256
+            dist/native/turtleterm-*.pkg.tar.zst.manifest.json
             dist/native/turtle-term-native-packages.index.json
             dist/native/turtle-term-native-packages.index.json.sha256
 
@@ -154,15 +154,15 @@ jobs:
         with:
           name: turtle-term-native-linux-${{ matrix.deb_arch }}
           path: |
-            dist/native/turtle-term_*.deb
-            dist/native/turtle-term_*.deb.sha256
-            dist/native/turtle-term_*.deb.manifest.json
+            dist/native/turtleterm_*.deb
+            dist/native/turtleterm_*.deb.sha256
+            dist/native/turtleterm_*.deb.manifest.json
             dist/native/rpmbuild/RPMS/**/*.rpm
             dist/native/rpmbuild/RPMS/**/*.rpm.sha256
             dist/native/rpmbuild/RPMS/**/*.rpm.manifest.json
-            dist/native/turtle-term-*.pkg.tar.zst
-            dist/native/turtle-term-*.pkg.tar.zst.sha256
-            dist/native/turtle-term-*.pkg.tar.zst.manifest.json
+            dist/native/turtleterm-*.pkg.tar.zst
+            dist/native/turtleterm-*.pkg.tar.zst.sha256
+            dist/native/turtleterm-*.pkg.tar.zst.manifest.json
             dist/native/turtle-term-native-packages.index.json
             dist/native/turtle-term-native-packages.index.json.sha256
 

.github/workflows/turtle-term-release.yml

@@ -28,8 +28,12 @@ jobs:
         include:
           - os: macos-14
             target: macos-arm64
+          - os: macos-13
+            target: macos-x86_64
           - os: ubuntu-24.04
             target: linux-x86_64
+          - os: ubuntu-24.04-arm
+            target: linux-arm64
 
     steps:
       - name: Check out repository
@@ -95,6 +99,14 @@ jobs:
             dist/turtle-term-*.tar.gz.sha256
             dist/turtle-term-*.tar.gz.manifest.json
 
+      - name: Generate SBOM
+        uses: anchore/sbom-action@v0
+        with:
+          path: dist/
+          format: spdx-json
+          artifact-name: turtle-term-${{ matrix.target }}.sbom.spdx.json
+          output-file: dist/turtle-term-${{ matrix.target }}.sbom.spdx.json
+
       - name: Upload artifact
         uses: actions/upload-artifact@v4
         with:
@@ -106,16 +118,14 @@ jobs:
 
       - name: Publish GitHub release assets
         if: startsWith(github.ref, 'refs/tags/turtle-term-v')
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          tag="${GITHUB_REF_NAME}"
-          gh release create "$tag" \
-            --title "TurtleTerm ${tag}" \
-            --notes "TurtleTerm ${tag} — see CHANGELOG for details." \
-            2>/dev/null || true
-          gh release upload "$tag" \
-            dist/turtle-term-*.tar.gz \
-            dist/turtle-term-*.tar.gz.sha256 \
-            dist/turtle-term-*.tar.gz.manifest.json \
-            --clobber
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ github.ref_name }}
+          name: TurtleTerm ${{ github.ref_name }}
+          body: "TurtleTerm ${{ github.ref_name }} — see CHANGELOG for details."
+          fail_on_unmatched_files: false
+          files: |
+            dist/turtle-term-*.tar.gz
+            dist/turtle-term-*.tar.gz.sha256
+            dist/turtle-term-*.tar.gz.manifest.json
+            dist/turtle-term-*.sbom.spdx.json