chore: Check secrets repo if out-of-date and make arrays cross-platform

Author: PartMan7

.husky/pre-commit

@@ -1,7 +1,10 @@
-#!/usr/bin/env bash
+#!/usr/bin/env sh
 . "$(dirname -- "$0")/_/husky.sh"
 
-read -ra TO_PRETTIFY <<< "$(git diff --diff-filter=ACMTUXB --name-only --staged | grep -E -e '\.[jt]sx?$' -e '\.md$' -e '\.html$' -e '\.json$' || :)"
-if (( ${#TO_PRETTIFY[@]} )); then npm run prettify "${TO_PRETTIFY[@]}"; fi
-npm test
-FAIL_ON_PENDING=true npm run notify-unpushed -- src/secrets
+bash <<EOF
+  TO_PRETTIFY="$(git diff --diff-filter=ACMTUXB --name-only --staged | grep -E -e '\.[jt]sx?$' -e '\.md$' -e '\.html$' -e '\.json$' || :) )"
+  if [[ -n "$TO_PRETTIFY" ]]; then npm run prettify $TO_PRETTIFY; fi
+  npm test
+  FAIL_ON_PENDING=true npm run notify-unpushed -- src/secrets
+  npm run secrets-check
+EOF

package.json

@@ -7,7 +7,8 @@
 		"build-configs": "bash ./scripts/build_nginx_confs.sh",
 		"lint": "eslint src --ext .ts",
 		"lint:fix": "eslint src --ext .ts --fix",
-		"notify-unpushed": "sh ./scripts/notify-unpushed.sh",
+		"notify-unpushed": "sh scripts/notify_unpushed.sh",
+		"secrets-check": "sh scripts/secrets_check.sh",
 		"prettify": "prettier -w",
 		"prepare": "sh ./scripts/setup.sh",
 		"servers": "npm run webpack-server & npm run tailwind-server",

scripts/notify-unpushed.sh scripts/notify_unpushed.shscripts/notify-unpushed.sh renamed to scripts/notify_unpushed.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/env sh
+
+cd src/secrets || :
+REF=$(git rev-parse --abbrev-ref '@{u}')
+git fetch $(echo "$REF" | sed 's#/# #') --quiet
+REV=$(git rev-parse "$REF")
+
+if git merge-base --is-ancestor "$REV" HEAD
+then
+  echo 'Secrets branch up-to-date.'
+else
+  echo "Your secrets repo is out-of-date with $REF. Please update it."
+  exit 1
+fi