File get-sources.sh of Package heroic-games-launcher

#!/usr/bin/sh

set -e

if [[ -z "$1" ]]; then
echo "Please enter the version you want to update to";
exit 1;
fi

REPO_DIR="HeroicGamesLauncher"
VERSION="$1"

echo "++++++++++++++++++++++++++++++++++++++++++++++"
echo "patching service file and downloading sources"
echo "++++++++++++++++++++++++++++++++++++++++++++++"

sed -i -E 's|(<param name="revision">).*?(</param>)|\1v'"${VERSION}"'\2|' _service
osc service mr obs_scm
osc service mr set_version

if [ -f "pnpm-offline-store.tar.gz" ]; then rm pnpm-offline-store.tar.gz; fi

echo "+++++++++++++++++++++++++++++++++++++++++++++++++++"
echo "Config package.json to force download dependencies"
echo "+++++++++++++++++++++++++++++++++++++++++++++++++++"

cd "$REPO_DIR"

# Forcing the download of required npm dependencies
ESBUILD_VERSION="0.25.3"
ROLLUP_VERSION="4.52.5"
SWC_VERSION="1.11.24"
UNDICI_V7_FIXED="7.18.0"

jq --indent 2 \
  --arg esbuild_ver "$ESBUILD_VERSION" \
  --arg rollup_ver "$ROLLUP_VERSION" \
  --arg swc_ver "$SWC_VERSION" \
  --arg undici_v7 "$UNDICI_V7_FIXED" \
'
  .
  | .dependencies += (
      .devDependencies
      | with_entries(select(.key != "electron" and .key != "electron-builder"))
    )

  | .devDependencies = {
      "electron": .devDependencies["electron"],
      "electron-builder": .devDependencies["electron-builder"]
    }

  | .packageManager = "pnpm@10.28.2"

  | .scripts.build = "electron-vite build"
  | .scripts["dist:linux"] =
      "pnpm run build && electron-builder --linux --dir -c.electronDist=/usr/lib64/electron/ -c.electronVersion=$(cat /usr/lib64/electron/version)"

  | .build.executableName = "heroic"
  | .build.files = [
      "build/**/*",
      "dist/**/*",
      "node_modules/**/*",
      "!**/*.map",
      "!node_modules/@esbuild/**/*"
    ]

  | .devDependencies |= with_entries(
      select(.key != "electron" and .key != "react-devtools")
    )

  | .peerDependencies.electron = "^25.9.3"

  # ARM64 native binaries
  | .devDependencies |= del(."@esbuild/linux-arm64")
  | .dependencies |= del(
      ."@rollup/rollup-linux-arm64-gnu",
      ."@swc/core-linux-arm64-gnu"
    )

  | .devDependencies["@esbuild/linux-arm64"] = $esbuild_ver
  | .dependencies["@rollup/rollup-linux-arm64-gnu"] = $rollup_ver
  | .dependencies["@swc/core-linux-arm64-gnu"] = $swc_ver

  # === CVE-2026-22036: undici fix (runtime enforced) ===
  | .dependencies = (.dependencies // {})
  | .dependencies.undici = $undici_v7
  | .devDependencies |= del(.undici)

  | .pnpm.overrides = (
      (.pnpm.overrides // {})
      + {
          "undici": $undici_v7,
          "undici-types": "6.21.0"
        }
    )

  # === CVE-2026-22029: react-router / remix-run/router fix ===
  | .pnpm.overrides = (
      (.pnpm.overrides // {})
      + {
          "@remix-run/router": "^1.23.2",
          "react-router": "^7.12.0",
          "react-router-dom": "^7.12.0"
        }
    )

  # === CVE-2026-26278: fast-xml-parser DoS fix ===
  | .pnpm.overrides = (
      (.pnpm.overrides // {})
      + {
          "fast-xml-parser": "5.3.6"
        }
    )
' package.json > temp.json && mv temp.json package.json

echo "++++++++++++++++++++++++++++++++++++++++++++++"
echo "Cleanup Step"
echo "++++++++++++++++++++++++++++++++++++++++++++++"

rm -rf node_modules .pnpm-store package-lock.json
mkdir .pnpm-store

echo "++++++++++++++++++++++++++++++++++++++++++++++"
echo "Downloading pnpm modules and packing all"
echo "++++++++++++++++++++++++++++++++++++++++++++++"

pnpm config set store-dir .pnpm-store
pnpm install --lockfile-only --force --ignore-scripts

pnpm install --ignore-scripts

tar cJf ../pnpm-offline-store.tar.gz .pnpm-store node_modules package.json pnpm-lock.yaml

echo "++++++++++++++++++++++++++++++++++++++++++++++"
echo "Done! Have fun building and testing"
echo "++++++++++++++++++++++++++++++++++++++++++++++"