feat(add-pkg): Add zsign-bin

Co-Authored-By: Claude Sonnet 5 <[email protected]>
Signed-off-by: KunoiSayami <[email protected]>

2 files changed, 84 insertions, 0 deletions

diff --git a/.github/workflows/update-pkgbuilds.yml b/.github/workflows/update-pkgbuilds.yml
index 1958f98..a99d738 100644
--- a/.github/workflows/update-pkgbuilds.yml
+++ b/.github/workflows/update-pkgbuilds.yml
@@ -284,3 +284,65 @@ jobs:
           git add repo/rathole/PKGBUILD
           git commit -m "feat(pkg): Update rathole to ${VERSION}"
           git push || (git pull --rebase && git push)
+
+  update-zsign-bin:
+    name: Update zsign-bin
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Get latest release version
+        id: version
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          VERSION=$(gh api repos/zhlynn/zsign/releases/latest \
+            --jq '.tag_name | ltrimstr("v")')
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+
+      - name: Check current version
+        id: check
+        run: |
+          CURRENT=$(grep '^pkgver=' repo/zsign-bin/PKGBUILD | cut -d'=' -f2)
+          echo "current=$CURRENT" >> "$GITHUB_OUTPUT"
+          if [ "$CURRENT" = "${{ steps.version.outputs.version }}" ]; then
+            echo "skip=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "skip=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Download asset and compute sha256sum
+        if: steps.check.outputs.skip == 'false'
+        id: sums
+        env:
+          VERSION: ${{ steps.version.outputs.version }}
+          GIT_URL: https://github.com/zhlynn/zsign
+        run: |
+          FILE="zsign-linux-x86_64.tar.gz"
+          wget -q "$GIT_URL/releases/download/v${VERSION}/$FILE" -O "$FILE"
+          SUM=$(sha256sum "$FILE" | awk '{print $1}')
+          echo "sha256=$SUM" >> "$GITHUB_OUTPUT"
+          rm "$FILE"
+
+      - name: Update PKGBUILD
+        if: steps.check.outputs.skip == 'false'
+        env:
+          VERSION: ${{ steps.version.outputs.version }}
+          SHA256: ${{ steps.sums.outputs.sha256 }}
+        run: |
+          sed -i "s/^pkgver=.*/pkgver=${VERSION}/" repo/zsign-bin/PKGBUILD
+          sed -i "s/^pkgrel=.*/pkgrel=1/" repo/zsign-bin/PKGBUILD
+          sed -i "0,/^sha256sums=/s|^sha256sums=(.*|sha256sums=('${SHA256}'|" repo/zsign-bin/PKGBUILD
+
+      - name: Commit and push
+        if: steps.check.outputs.skip == 'false'
+        env:
+          VERSION: ${{ steps.version.outputs.version }}
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add repo/zsign-bin/PKGBUILD
+          git commit -m "feat(pkg): Update zsign-bin to ${VERSION}"
+          git push || (git pull --rebase && git push)
diff --git a/repo/zsign-bin/PKGBUILD b/repo/zsign-bin/PKGBUILD
new file mode 100644
index 0000000..a536620
--- /dev/null
+++ b/repo/zsign-bin/PKGBUILD
@@ -0,0 +1,22 @@
+# Maintainer: Yakov Till <[email protected]>
+
+pkgname=zsign-bin
+pkgver=1.1.1
+pkgrel=1
+pkgdesc="Fast cross-platform iOS code signing tool — codesign alternative without Xcode/macOS"
+arch=('x86_64')
+url="https://github.com/zhlynn/zsign"
+license=('MIT')
+depends=('openssl' 'gcc-libs')
+options=('!debug')
+provides=('zsign')
+conflicts=('zsign')
+source=("zsign-${pkgver}-linux-x86_64.tar.gz::${url}/releases/download/v${pkgver}/zsign-linux-x86_64.tar.gz"
+        "LICENSE-v${pkgver}::${url}/raw/refs/tags/v${pkgver}/LICENSE")
+sha256sums=('65873b256b8902715cc81c8c467e9dddb315a2b484c6d0f5fb2031bad819d8ba'
+            'SKIP')
+
+package() {
+    install -Dm755 zsign "$pkgdir/usr/bin/zsign"
+    install -Dm644 "$srcdir/LICENSE-v${pkgver}" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
+}