fixup! build,deps,tools: prepare to update to OpenSSL 4.1

Author: panva

.github/workflows/update-openssl.yml

@@ -5,6 +5,11 @@ on:
     - cron: 5 0 * * 0
 
   workflow_dispatch:
+    inputs:
+      include_prereleases:
+        description: Include prereleases
+        type: boolean
+        default: false
 
 permissions:
   contents: read
@@ -41,6 +46,7 @@ jobs:
         shell: bash
         env:
           GITHUB_TOKEN: ${{ secrets.GH_USER_TOKEN }}
+          INCLUDE_PRERELEASES: ${{ github.event_name == 'workflow_dispatch' && inputs.include_prereleases }}
       - name: Commit OpenSSL sources
         if: env.NEW_VERSION
         run: |

tools/dep_updaters/update-openssl.sh

@@ -11,9 +11,20 @@ cleanup() {
 
 download() {
   LATEST_TAG_NAME="$("$NODE" --input-type=module <<'EOF'
-const res = await fetch('https://api.github.com/repos/openssl/openssl/git/matching-refs/tags/openssl-4.1');
+const res = await fetch('https://api.github.com/repos/openssl/openssl/git/matching-refs/tags/openssl-4.1.');
 if (!res.ok) throw new Error(`FetchError: ${res.status} ${res.statusText}`, { cause: res });
-const releases = await res.json()
+const includePrereleases = process.env.INCLUDE_PRERELEASES === 'true';
+const releases = (await res.json())
+  .filter(({ ref }) => includePrereleases || /^refs\/tags\/openssl-\d+\.\d+\.\d+$/.test(ref))
+  .sort(({ ref: a }, { ref: b }) => {
+    const [, aVersion, aPrerelease] = a.split('-');
+    const [, bVersion, bPrerelease] = b.split('-');
+    const versionOrder = aVersion.localeCompare(bVersion, 'en', { numeric: true });
+    if (versionOrder) return versionOrder;
+    if (!aPrerelease) return bPrerelease ? 1 : 0;
+    if (!bPrerelease) return -1;
+    return aPrerelease.localeCompare(bPrerelease, 'en', { numeric: true });
+  });
 const latest = releases.at(-1);
 if(!latest) throw new Error(`Could not find latest release`);
 console.log(latest.ref.replace('refs/tags/',''));