Add Minecraft 1.15.2 release support

.github/scripts/test_release_workflow.py

@@ -23,6 +23,7 @@
 MATRIX114 = MATRIX113 + [origin + ' / ' + stamps for origin in
              ['released-113', 'recovery-113', 'via113-110', 'via113-111', 'via113-112']
              for stamps in ['normal', 'stamps']]
+MATRIX115 = ['World upgrade matrix', 'Prepare verified migration inputs', 'Validate release workflow'] + ['Historical world shard ' + str(i) for i in range(6)]
 MATRIX = [origin + ' / ' + stamps for origin in
           ['original-110', 'released-110', 'original-111', 'recovery-110']
           for stamps in ['normal', 'stamps']]
@@ -57,7 +58,8 @@ def validate(self, minecraft, names=None, mutation=None, release_exists=False, w
             '1.11.2': ('111021', '1.11.2-dev', '13.20.1.2588'),
             '1.12.2': ('112021', 'master-1.12', '14.23.5.2859'),
             '1.13.2': ('113021', 'master-1.13.2', '25.0.223'),
-            '1.14.4': ('114041', 'master-1.14.4', '28.2.26')}[minecraft]
+            '1.14.4': ('114041', 'master-1.14.4', '28.2.26'),
+            '1.15.2': ('115021', 'master-1.15.2', '31.2.57')}[minecraft]
         version = '2.4.2.' + suffix
         values = dict(minecraft_version=minecraft, forge_version=forge, loader_name='forge', loader_code='1',
             java_version='8', java_toolchain_version='8.0.502+7', gradle_java_version='17', mod_id='lootablebodies',
@@ -67,7 +69,8 @@ def validate(self, minecraft, names=None, mutation=None, release_exists=False, w
             values.update(mutation)
         checks = CORE + {'1.11.2': MATRIX, '1.12.2': MATRIX112,
                          '1.13.2': MATRIX113 + ['Validate release workflow'],
-                         '1.14.4': MATRIX114 + ['Validate release workflow']}.get(minecraft, []) if names is None else names
+                         '1.14.4': MATRIX114 + ['Validate release workflow'],
+                         '1.15.2': MATRIX115}.get(minecraft, []) if names is None else names
         def command(args, **options):
             if args[0] == 'git':
                 return SHA + '\n'
@@ -90,8 +93,8 @@ def existing(args, **options):
                 patch('subprocess.check_output', side_effect=command), patch('subprocess.run', side_effect=existing):
             exec(compile(code, 'release-preflight', 'exec'), {})
 
-    def test_future_115_candidate_cannot_dispatch_publication(self):
-        code, values = self.select('2.4.6.115021')
+    def test_future_116_candidate_cannot_dispatch_publication(self):
+        code, values = self.select('2.4.7.116051')
         self.assertNotEqual(0, code)
         self.assertEqual({}, values)
 
@@ -170,6 +173,26 @@ def test_114_audit_receives_the_registered_shared_ci_completion(self):
         event_names = audit.split('workflows: [', 1)[1].split(']', 1)[0].split(',')
         self.assertIn('LootableBodies 1.12 CI', [name.strip() for name in event_names])
 
+    def test_115_routes_to_its_own_branch(self):
+        code, values = self.select('2.4.6.115021')
+        self.assertEqual(0, code)
+        self.assertEqual('master-1.15.2', values['source_branch'])
+
+    def test_115_requires_preparation_every_shard_and_the_full_matrix(self):
+        self.validate('1.15.2')
+        for missing in MATRIX115:
+            with self.subTest(missing=missing), self.assertRaises(SystemExit):
+                self.validate('1.15.2', names=CORE + [name for name in MATRIX115 if name != missing])
+
+    def test_115_requires_its_independent_artifact_audit(self):
+        with self.assertRaises(SystemExit):
+            self.validate('1.15.2', audit_success=False)
+
+    def test_115_audit_handles_the_registered_workflow_name(self):
+        audit = WORKFLOW.with_name('artifact-audit-1.15.yml').read_text()
+        names = audit.split('workflows: [',1)[1].split(']',1)[0].split(',')
+        self.assertIn('LootableBodies 1.12 CI', [name.strip() for name in names])
+
     def test_identity_changes_are_rejected(self):
         for mutation in [{'mod_id': 'other'}, {'minecraft_version': '1.10.2'}, {'mod_license': 'CC0-1.0'}]:
             with self.subTest(mutation=mutation), self.assertRaises(SystemExit):

.github/workflows/artifact-audit-1.15.yml

@@ -0,0 +1,65 @@
+name: Audit LootableBodies 1.15 artifacts
+run-name: Audit 1.15.2 artifacts from ${{ github.event.workflow_run.head_sha }}
+
+on:
+  workflow_run:
+    workflows: [LootableBodies 1.12 CI, LootableBodies 1.15 CI]
+    types: [completed]
+
+permissions:
+  contents: read
+  actions: read
+
+jobs:
+  audit:
+    # Pull-request merge trees are audited inside CI. Push artifacts use the
+    # workflow run's exact head SHA, which is also their declared artifact name.
+    if: >-
+      github.repository == 'MinecraftModDevelopmentMods/LootableBodies' &&
+      github.event.workflow_run.conclusion == 'success' && github.event.workflow_run.event == 'push' &&
+      (github.event.workflow_run.head_branch == 'master-1.15.2')
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          ref: ${{ github.event.workflow_run.head_sha }}
+      - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
+        with:
+          distribution: temurin
+          java-version: '25.0.3+9.0.LTS'
+      - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
+        with:
+          distribution: temurin
+          java-version: '8.0.502+7'
+      - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
+        with:
+          distribution: temurin
+          java-version: '17.0.1+12'
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        with:
+          name: LootableBodies-1.15.2-${{ github.event.workflow_run.head_sha }}
+          run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ github.token }}
+          path: downloaded
+      - name: Require exact inputs and assemble an immutable audit bundle
+        run: |
+          set -euo pipefail
+          mkdir audited
+          for name in LootableBodies-2.4.6.115021.jar LootableBodies-2.4.6.115021-sources.jar LootableBodies-2.4.6.115021-javadoc.jar; do
+            test -s "downloaded/build/libs/$name"
+            cp "downloaded/build/libs/$name" audited/
+          done
+          test -s downloaded/build/release/SHA256SUMS
+          test -s downloaded/build/publications/mavenJava/pom-default.xml
+          test -s downloaded/CHANGELOG.txt
+          cp downloaded/build/release/SHA256SUMS audited/
+          cp downloaded/build/publications/mavenJava/pom-default.xml audited/LootableBodies-2.4.6.115021.pom
+          cp downloaded/CHANGELOG.txt audited/
+      - name: Audit original bytes without recompiling the jars
+        env:
+          LOOTABLEBODIES_JAVA8_HOME: ${{ env.JAVA_HOME_8_X64 }}
+          LOOTABLEBODIES_MAVENIZER_JAVA_HOME: ${{ env.JAVA_HOME_25_X64 }}
+        run: |
+          chmod +x ./gradlew
+          ./gradlew verifyPreparedReleaseArtifacts -PpreparedReleaseDir=audited --no-daemon

.github/workflows/deploy-release.yml

@@ -5,7 +5,7 @@ on:
   workflow_dispatch:
     inputs:
       release_version:
-        description: Complete version from gradle.properties, ending in 110021, 111021, 112021, 113021 or 114041.
+        description: Complete version from gradle.properties, ending in 110021, 111021, 112021, 113021, 114041 or 115021.
         required: true
         type: string
       curseforge_release_level:
@@ -48,13 +48,14 @@ jobs:
           set -euo pipefail
           [[ "$GITHUB_REPOSITORY" == 'MinecraftModDevelopmentMods/LootableBodies' ]]
           [[ "$GITHUB_REF" == 'refs/heads/master-1.12' ]]
-          [[ "$RELEASE_VERSION" =~ ^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(110021|111021|112021|113021|114041)$ ]]
+          [[ "$RELEASE_VERSION" =~ ^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(110021|111021|112021|113021|114041|115021)$ ]]
           case "$RELEASE_VERSION" in
             *.110021) minecraft_version=1.10.2; source_branch=1.10.2 ;;
             *.111021) minecraft_version=1.11.2; source_branch=1.11.2-dev ;;
             *.112021) minecraft_version=1.12.2; source_branch=master-1.12 ;;
             *.113021) minecraft_version=1.13.2; source_branch=master-1.13.2 ;;
             *.114041) minecraft_version=1.14.4; source_branch=master-1.14.4 ;;
+            *.115021) minecraft_version=1.15.2; source_branch=master-1.15.2 ;;
             *) exit 1 ;;
           esac
           echo "minecraft_version=$minecraft_version" >> "$GITHUB_OUTPUT"
@@ -83,7 +84,8 @@ jobs:
                      '1.11.2': ('1.11.2-dev', '13.20.1.2588', '111021'),
                      '1.12.2': ('master-1.12', '14.23.5.2859', '112021'),
                      '1.13.2': ('master-1.13.2', '25.0.223', '113021'),
-                     '1.14.4': ('master-1.14.4', '28.2.26', '114041')}
+                     '1.14.4': ('master-1.14.4', '28.2.26', '114041'),
+                     '1.15.2': ('master-1.15.2', '31.2.57', '115021')}
           branch, forge, suffix = targets[minecraft]
           if os.environ['SOURCE_BRANCH'] != branch:
               raise SystemExit('The selected branch does not match its Minecraft version')
@@ -113,11 +115,14 @@ jobs:
           if minecraft in ('1.11.2', '1.12.2', '1.13.2', '1.14.4'):
               required.update(origin + ' / ' + stamps for origin in origins
                               for stamps in ['normal', 'stamps'])
+          if minecraft == '1.15.2':
+              required.update(['Validate release workflow', 'Prepare verified migration inputs', 'World upgrade matrix'] +
+                              ['Historical world shard ' + str(i) for i in range(6)])
           for name in required:
               matching = [check for check in checks if check['name'] == name]
               if not matching or max(matching, key=lambda c: c['id'])['conclusion'] != 'success':
                   raise SystemExit(f'The selected commit has no successful {name} check')
-          if minecraft in ('1.11.2', '1.12.2', '1.13.2', '1.14.4'):
+          if minecraft in ('1.11.2', '1.12.2', '1.13.2', '1.14.4', '1.15.2'):
               target = minecraft.rsplit('.', 1)[0]
               audits = json.loads(subprocess.check_output(['gh', 'api',
                   f'repos/{repo}/actions/workflows/artifact-audit-{target}.yml/runs?event=workflow_run&per_page=100'], text=True))['workflow_runs']

.github/workflows/release-workflow-checks.yml

@@ -24,7 +24,7 @@ jobs:
       - name: Check release workflow syntax
         run: >-
           "$RUNNER_TEMP/actionlint/actionlint" -shellcheck= -pyflakes=
-          .github/workflows/deploy-release.yml .github/workflows/release-workflow-checks.yml .github/workflows/artifact-audit-1.11.yml .github/workflows/artifact-audit-1.12.yml .github/workflows/artifact-audit-1.13.yml .github/workflows/artifact-audit-1.14.yml
+          .github/workflows/deploy-release.yml .github/workflows/release-workflow-checks.yml .github/workflows/artifact-audit-1.11.yml .github/workflows/artifact-audit-1.12.yml .github/workflows/artifact-audit-1.13.yml .github/workflows/artifact-audit-1.14.yml .github/workflows/artifact-audit-1.15.yml
 
       - name: Test version selection and publication checks
         run: python3 .github/scripts/test_release_workflow.py -v