Sync with microG unofficial installer

Author: ale5000-git

.github/workflows/auto-nightly.yml

@@ -46,6 +46,7 @@ jobs:
           java-version: "17"
       - name: "Use cache"
         uses: actions/cache@v4
+        timeout-minutes: 10
         with:
           key: "build-${{ hashFiles('conf-2.sh') }}"
           restore-keys: "build-"
@@ -54,12 +55,14 @@ jobs:
       - name: "Build the flashable OTA zip"
         id: "build"
         shell: bash
+        timeout-minutes: 10
         run: |
           # Building...
           BUILD_TYPE='oss' '${{ github.workspace }}/build.sh'
       - name: "Attest build provenance"
         id: "attest"
         uses: actions/attest-build-provenance@v2
+        timeout-minutes: 10
         if: "${{ vars.NIGHTLY_ATTESTATION == 'true' && github.run_attempt == '1' && steps.build.outputs.ZIP_IS_ALPHA == 'true' && steps.build.outputs.ZIP_BUILD_TYPE_SUPPORTED == 'true' }}"
         with:
           subject-path: "${{ steps.build.outputs.ZIP_FOLDER }}/*.zip"
@@ -195,6 +198,7 @@ jobs:
   keep-alive:
     name: "Keep alive"
     runs-on: ubuntu-latest
+    timeout-minutes: 20
     if: "${{ github.event_name == 'schedule' }}"
     permissions:
       actions: write # Needed to keep alive the workflow
@@ -208,13 +212,15 @@ jobs:
           sparse-checkout-cone-mode: false
       - name: "Ping cache" # Cache expiration: 7 days
         uses: actions/cache@v4
+        timeout-minutes: 10
         with:
           key: "build-${{ hashFiles('conf-2.sh') }}"
           path: "cache/build"
           enableCrossOsArchive: true
           lookup-only: true
       - name: "Keep workflow alive"
         uses: actions/github-script@v7
+        timeout-minutes: 10
         env:
           WORKFLOW_REF: "${{ github.workflow_ref }}"
         with:

.github/workflows/auto-release-from-tag.yml

@@ -16,6 +16,7 @@ jobs:
   release:
     name: "Release"
     runs-on: ubuntu-latest
+    timeout-minutes: 30
     if: "${{ startsWith(github.ref, 'refs/tags/v') && github.event_name != 'pull_request' }}"
     permissions:
       contents: write
@@ -32,6 +33,7 @@ jobs:
       - name: "Build"
         id: "build"
         shell: bash
+        timeout-minutes: 10
         run: |
           ### Building...
           '${{ github.workspace }}/gradlew' clean buildOtaOSS

.github/workflows/code-lint.yml

@@ -12,6 +12,7 @@ jobs:
   shellchecker:
     name: "ShellChecker"
     runs-on: ubuntu-latest
+    timeout-minutes: 10
 
     steps:
       - name: "Checkout sources"
@@ -22,6 +23,7 @@ jobs:
   json-yaml-validate:
     name: "JSON and YAML"
     runs-on: ubuntu-latest
+    timeout-minutes: 10
 
     steps:
       - name: "Checkout sources"

.github/workflows/code-scan.yml

@@ -16,6 +16,7 @@ jobs:
   dependency-submission:
     name: "Dependency submission"
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     if: "${{ github.repository_owner == 'micro5k' && github.event_name == 'push' }}"
     permissions:
       contents: write

.github/workflows/coverage.yml

@@ -27,22 +27,27 @@ jobs:
           java-version: "17"
       - name: "Setup Ruby"
         uses: ruby/setup-ruby@v1
+        timeout-minutes: 10
         with:
           ruby-version: "3.4"
       - name: "Install Bashcov and simplecov-lcov"
+        shell: bash
+        timeout-minutes: 10
         run: |
           # Installing Bashcov and simplecov-lcov...
           gem install bashcov:3.2.0 simplecov-lcov
       - name: "Build (with coverage)"
         id: "build"
         shell: bash
+        timeout-minutes: 10
         run: |
           # Executing code coverage...
           export BUILD_TYPE=oss
           #sudo apt-get -qq -y install moreutils 1>/dev/null
           bashcov '${{ github.workspace }}/build.sh' # To timestamp the output pipe it to: TZ=UTC ts '[%H:%M:%S]'
       - name: "Testing (with coverage)"
         shell: bash
+        timeout-minutes: 10
         if: "${{ steps.build.outputs.ZIP_BUILD_TYPE_SUPPORTED == 'true' }}"
         run: |
           # Testing of zip installation...
@@ -75,6 +80,7 @@ jobs:
       - name: "Upload coverage reports to Codecov"
         if: "${{ steps.codecov-token.outputs.TOKEN_SET == 'true' && github.ref == 'refs/heads/main' && github.event_name != 'pull_request' }}"
         uses: codecov/codecov-action@v5
+        timeout-minutes: 10
         with:
           fail_ci_if_error: true
           token: "${{ secrets.CODECOV_TOKEN }}"
@@ -89,5 +95,6 @@ jobs:
       - name: "Upload coverage reports to Codacy"
         if: "${{ steps.codacy-token.outputs.TOKEN_SET == 'true' && github.ref == 'refs/heads/main' && github.event_name != 'pull_request' }}"
         uses: codacy/codacy-coverage-reporter-action@v1
+        timeout-minutes: 10
         with:
           project-token: "${{ secrets.CODACY_PROJECT_TOKEN }}"

.github/workflows/create-tag-now.yml

@@ -13,6 +13,7 @@ jobs:
   tag-creation:
     name: "Tag creation"
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     if: "${{ ! startsWith(github.ref, 'refs/tags/') }}"
     permissions:
       contents: write # Needed to create a tag

.github/workflows/periodic-checks.yml

@@ -24,9 +24,10 @@ on:
   workflow_dispatch:
 
 jobs:
-  base:
-    name: "Base job"
+  base-job:
+    name: "Base"
     runs-on: ubuntu-latest
+    timeout-minutes: 10
 
     steps:
       - name: "Checkout sources"
@@ -53,6 +54,7 @@ jobs:
   makefile-validation:
     name: "Validate makefile"
     runs-on: ubuntu-latest
+    timeout-minutes: 10
 
     steps:
       - name: "Checkout sources"

.github/workflows/scripts-testing.yml

@@ -23,13 +23,14 @@ on:
   workflow_dispatch:
 
 jobs:
-  base:
+  base-job:
     strategy:
+      fail-fast: false
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest]
-      fail-fast: false
     name: "${{ matrix.os }}"
     runs-on: "${{ matrix.os }}"
+    timeout-minutes: 20
     env:
       cache-key: "shells"
 

.gitlab-ci.yml

@@ -30,15 +30,26 @@ stages:
 .build-oss-job:
   stage: build
   interruptible: true
+  timeout: "5 minutes"
   rules:
     - if: $CI_PIPELINE_SOURCE == "push" && $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
+      changes:
+        - "LICENSES/**"
+        - "includes/**"
+        - "tools/**"
+        - "zip-content/**"
+        - "CHANGELOG.rst"
+        - "LICENSE.rst"
+        - "build.sh"
+        - "conf-*.sh"
     - if: $CI_PIPELINE_SOURCE == "push" && $CI_COMMIT_TAG && $CI_COMMIT_TAG != "nightly"
   cache: []
   script: "BUILD_TYPE='oss' './build.sh'"
 
 build-job:
   stage: build
   interruptible: true
+  timeout: "5 minutes"
   rules:
     - if: $CI_PIPELINE_SOURCE == "push" && $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
       changes:
@@ -54,11 +65,12 @@ build-job:
   artifacts:
     paths:
       - "output/*.zip*"
-    expire_in: "20 minutes"
+    expire_in: "15 minutes"
 
 # Cache expiration: 14 days
 ping-cache:
   stage: build
+  timeout: "5 minutes"
   rules:
     - if: $CI_PIPELINE_SOURCE == "schedule"
       when: always

includes/common.sh

@@ -439,7 +439,7 @@ _parse_webpage_and_get_url()
 
   # shellcheck disable=SC3040 # Ignore: In POSIX sh, set option pipefail is undefined
   {
-    # IMPORTANT: We have to avoid "printf: write error: Broken pipe" when a string is piped to "grep -q" or "grep -m 1"
+    # IMPORTANT: We have to avoid "printf: write error: Broken pipe" when a string is piped to "grep -q" or "grep -m1"
     test "${USING_PIPEFAIL:-false}" = 'false' || set +o pipefail
     _parsed_code="$(printf 2> /dev/null '%s\n' "${_parsed_code:?}" | grep -o -m 1 -e "${_search_pattern:?}")" || _status="${?}"
     test "${USING_PIPEFAIL:-false}" = 'false' || set -o pipefail