Test the release-build process; install the correct Node version

- Add a GitHub action to test the release-build process and make sure we
  don't introduce any reproducibility issues in a new change.

- Show what's different in console output if the release build fails for
  reproducibility reasons (to make troubleshooting easier in GHA).

- Make install-deps.sh install the correct Node version, if the one
  that's installed is too old (as it is on the GitHub runners).

.github/workflows/ci.yml

@@ -14,10 +14,6 @@ jobs:
       - uses: actions/checkout@v1
       - name: Install Dependencies
         run: sh ./install-deps.sh
-      - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
-        with:
-          node-version: 20.x
       - name: Install Node Modules
         run: make node_modules
       - name: Check Types

.github/workflows/test-release-build.yml

@@ -0,0 +1,27 @@
+name: test-release-build
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v1
+      - name: Install Dependencies
+        run: sh ./install-deps.sh
+      - name: Make a Temporary Version Number (if needed)
+        run: |
+          if [ -z "$(git tag --points-at=HEAD)" ]; then
+            node -e "x=`cat assets/manifest.json`; x.version='9999.99.9999'; console.log(JSON.stringify(x))" >assets/manifest.json.new
+            mv assets/manifest.json.new assets/manifest.json
+            git config --global user.name "GitHub Actions"
+            git config --global user.email "[email protected]"
+            git commit -m 'Make a temporary version number' assets/manifest.json
+          fi
+      - name: Try Building Release Artifacts
+        run: make rel

Makefile

@@ -60,7 +60,13 @@ rel:
 rel-inner:
 	$(MAKE) pkg-webext pkg-source
 	$(MAKE) -C $(RELEASE_DIR)/$(SRCPKG_DIR) release-tag pkg-webext pkg-source
-	[ -z "$$(diff -Nru dist $(RELEASE_DIR)/$(SRCPKG_DIR)/dist)" ]
+	@if [ ! -z "$$(diff -Nru dist $(RELEASE_DIR)/$(SRCPKG_DIR)/dist)" ]; then \
+		diff -Nru dist $(RELEASE_DIR)/$(SRCPKG_DIR)/dist; \
+		echo "!!!" >&2; \
+		echo "!!! Build did not reproduce correctly; check diff output above" >&2; \
+		echo "!!!" >&2; \
+		exit 1; \
+	fi
 	rm -rf $(RELEASE_DIR)/$(SRCPKG_DIR)
 	@echo ""
 	@echo "Ready for release $(VERSION)!"
@@ -198,8 +204,9 @@ site:
 ## Cleanup
 
 distclean: clean
-	rm -rf node_modules $(RELEASE_DIR)/$(SRCPKG_DIR) $(SRC_PKG) $(DIST_PKG)
-	rm -rf docs/vendor
+	rm -rf node_modules docs/vendor \
+		$(RELEASE_DIR)/$(SRCPKG_DIR) $(SRC_PKG) $(DIST_PKG) \
+		releases/*-dirty* releases/*-dev*
 .PHONY: distclean
 
 clean:

install-deps.sh

@@ -36,7 +36,7 @@ deps_apt() {
     # Build tools
     sudo apt-get install -y make git diffutils patch rsync zip ca-certificates curl gnupg
 
-    if ! type node; then
+    if ! type node || [ "$(node --version |cut -c1-4)" != v20. ]; then
         sudo mkdir -p /etc/apt/keyrings
         curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | sudo gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg