Release 2.9.8: Fix tarball to include all necessary files

- Fixed release tarball generation to include bash completion script,
  Makefile, source files, and other essential components
- Improved tarball generation to use git archive as source of truth,
  eliminating manual file inventory
- Added bash completion information to man page

Author: danielrobbins

.github/workflows/release.yml

@@ -21,6 +21,9 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+      - name: Fix git ownership for container
+        run: |
+          git config --global --add safe.directory "$GITHUB_WORKSPACE"
       - name: Verify tag/version consistency
         id: ver
         run: |
@@ -52,7 +55,7 @@ jobs:
         with:
             name: keychain-${{ steps.ver.outputs.version }}-artifacts
             path: |
-              keychain-${{ steps.ver.outputs.version }}.tar.gz
+              dist/keychain-${{ steps.ver.outputs.version }}.tar.gz
               keychain
               keychain.1
               .release-notes.md

.gitignore

@@ -7,4 +7,4 @@ keychain.txt
 keychain.spec
 .specstory/
 .ci-artifacts*/
-/keychain-*.tar.gz
+dist/

ChangeLog.md

@@ -1,5 +1,22 @@
 # ChangeLog for Keychain - https://github.com/danielrobbins/keychain
 
+## keychain 2.9.8 (2 Nov 2025)
+
+This release fixes the release tarball to include all necessary files for building and using keychain.
+
+Bug fixes:
+
+* Fixed release tarball generation to include bash completion script (`completions/keychain.bash`),
+  Makefile, source files, and other essential components. Previous release (2.9.7) tarball was
+  missing these files.
+* Improved tarball generation to use `git archive` as source of truth, eliminating manual file
+  inventory and preventing future omissions.
+* Updated release logic to use `dist/` directory for archive generation.
+
+Documentation:
+
+* Added bash completion information to keychain man page (NOTES section).
+
 ## keychain 2.9.7 (31 Oct 2025)
 
 This release fixes critical issues with spaces in HOME directories and usernames, and adds official Git Bash on Windows compatibility.

Makefile

@@ -11,8 +11,6 @@ Y ?= $(shell date +'%Y')
 PREFIX ?= /usr/local
 COMPLETIONSDIR ?= $(PREFIX)/share/bash-completion/completions
 
-TARBALL_CONTENTS=keychain README.md ChangeLog.md COPYING.txt MAINTAINERS.txt keychain.pod keychain.1 keychain.spec
-
 all: keychain.1 keychain keychain.spec
 
 .PHONY : tmpclean
@@ -61,17 +59,19 @@ keychain: keychain.sh keychain.txt VERSION MAINTAINERS.txt
 keychain.txt: keychain.pod
 	pod2text keychain.pod keychain.txt
 
-keychain-$V.tar.gz: $(TARBALL_CONTENTS)
-	mkdir keychain-$V
-	cp $(TARBALL_CONTENTS) keychain-$V
-	/bin/tar czvf keychain-$V.tar.gz keychain-$V
-	rm -rf keychain-$V
-	ls -l keychain-$V.tar.gz
+keychain-$V.tar.gz: keychain keychain.1 keychain.spec
+	mkdir -p dist
+	rm -rf dist/keychain-$V
+	git archive --format=tar --prefix=keychain-$V/ HEAD | tar -xf - -C dist/
+	cp keychain keychain.1 keychain.spec dist/keychain-$V/
+	tar -C dist -czf dist/keychain-$V.tar.gz keychain-$V
+	rm -rf dist/keychain-$V
+	ls -l dist/keychain-$V.tar.gz
 
 # --- Release Automation Helpers ---
 .PHONY: release release-refresh
 
-RELEASE_ASSETS=keychain-$V.tar.gz keychain keychain.1
+RELEASE_ASSETS=dist/keychain-$V.tar.gz keychain keychain.1
 
 # "release" will orchestrate a tagged release with CI artifact validation & confirmation.
 release: $(RELEASE_ASSETS)

VERSION

@@ -1 +1 @@
-2.9.7
+2.9.8

keychain.pod

@@ -737,5 +737,11 @@ Keychain was created and is currently maintained by Daniel Robbins. To report a
 bug or request an enhancement, use the issue tracker at
 L<https://github.com/danielrobbins/keychain>.
 
+Keychain includes bash completion support for command-line options, SSH keys,
+GPG keys, and extended mode prefixes (C<sshk:>, C<gpgk:>, C<host:>). The
+completion script is included in the source tarball at
+C<completions/keychain.bash>. For installation instructions, see the README
+file or run C<make install-completions>.
+
 The former Funtoo Linux wiki page is preserved only as an historical reference:
 L<https://www.funtoo.org/Funtoo:Keychain>.

scripts/release-create.sh

@@ -13,7 +13,7 @@ notes_file=$(mktemp)
 # Artifact path vars (provided by orchestrator if using CI artifacts)
 ASSET_KEYCHAIN=${KEYCHAIN_ASSET_KEYCHAIN:-keychain}
 ASSET_MAN=${KEYCHAIN_ASSET_MAN:-keychain.1}
-ASSET_TARBALL=${KEYCHAIN_ASSET_TARBALL:-keychain-$VER.tar.gz}
+ASSET_TARBALL=${KEYCHAIN_ASSET_TARBALL:-dist/keychain-$VER.tar.gz}
 
 echo "Creating release $VER"
 json=$(mktemp)

scripts/release-orchestrate.sh

@@ -35,9 +35,9 @@ if [ "$MODE" = create ]; then
 fi
 
 # 1. Ensure local assets exist
-for f in keychain-$VER.tar.gz keychain keychain.1; do
+for f in dist/keychain-$VER.tar.gz keychain keychain.1; do
   [ -f "$f" ] || { echo "Missing local asset: $f" >&2; exit 1; }
-  done
+done
 
 # 2. Fetch CI artifacts (MANDATORY)
 CI_DIR=".ci-artifacts-$VER"
@@ -111,48 +111,50 @@ EOF
 }
 
 # Process artifacts with specialized logic
-for artifact in keychain keychain.1 keychain-$VER.tar.gz; do
-  if [ ! -f "$CI_DIR/$artifact" ]; then
-    printf '  %-20s CI copy missing; comparison failed (abort)\n' "$artifact"
+for artifact in keychain keychain.1 dist/keychain-$VER.tar.gz; do
+  # Get basename for CI comparison
+  basename_artifact=$(basename "$artifact")
+  if [ ! -f "$CI_DIR/$basename_artifact" ]; then
+    printf '  %-20s CI copy missing; comparison failed (abort)\n' "$basename_artifact"
     diff_flag=1
     continue
   fi
-  case "$artifact" in
+  case "$basename_artifact" in
     keychain)
-      L=$(calc_sha256 "$artifact"); R=$(calc_sha256 "$CI_DIR/$artifact")
+      L=$(calc_sha256 "$artifact"); R=$(calc_sha256 "$CI_DIR/$basename_artifact")
       if [ "$L" = "$R" ]; then
-        printf '  %-20s %s (match)\n' "$artifact" "$L"
+        printf '  %-20s %s (match)\n' "$basename_artifact" "$L"
       else
-        printf '  %-20s LOCAL %s != CI %s  *DIFF*\n' "$artifact" "$L" "$R"
+        printf '  %-20s LOCAL %s != CI %s  *DIFF*\n' "$basename_artifact" "$L" "$R"
         diff_flag=1
       fi
       ;;
     keychain.1)
       # Direct hash first
-      L=$(calc_sha256 "$artifact"); R=$(calc_sha256 "$CI_DIR/$artifact")
+      L=$(calc_sha256 "$artifact"); R=$(calc_sha256 "$CI_DIR/$basename_artifact")
       if [ "$L" = "$R" ]; then
-        printf '  %-20s %s (match)\n' "$artifact" "$L"
+        printf '  %-20s %s (match)\n' "$basename_artifact" "$L"
       else
         # Normalize and compare ignoring Pod::Man header line.
-        if diff -u <(tail -n +2 "$artifact") <(tail -n +2 "$CI_DIR/$artifact") >/dev/null 2>&1; then
-          printf '  %-20s (normalized match ignoring Pod::Man header)\n' "$artifact"
+        if diff -u <(tail -n +2 "$artifact") <(tail -n +2 "$CI_DIR/$basename_artifact") >/dev/null 2>&1; then
+          printf '  %-20s (normalized match ignoring Pod::Man header)\n' "$basename_artifact"
         else
-          printf '  %-20s LOCAL %s != CI %s  *DIFF* (content mismatch beyond header)\n' "$artifact" "$L" "$R"
+          printf '  %-20s LOCAL %s != CI %s  *DIFF* (content mismatch beyond header)\n' "$basename_artifact" "$L" "$R"
           diff_flag=1
         fi
       fi
       ;;
     "keychain-$VER.tar.gz")
-      if compare_tar_content "$artifact" "$CI_DIR/$artifact"; then
+      if compare_tar_content "$artifact" "$CI_DIR/$basename_artifact"; then
         # If tar blob hash matches display it; else note normalized match.
-        L=$(calc_sha256 "$artifact"); R=$(calc_sha256 "$CI_DIR/$artifact")
+        L=$(calc_sha256 "$artifact"); R=$(calc_sha256 "$CI_DIR/$basename_artifact")
         if [ "$L" = "$R" ]; then
-          printf '  %-20s %s (match)\n' "$artifact" "$L"
+          printf '  %-20s %s (match)\n' "$basename_artifact" "$L"
         else
-          printf '  %-20s (content match; tar/gzip metadata differ)\n' "$artifact"
+          printf '  %-20s (content match; tar/gzip metadata differ)\n' "$basename_artifact"
         fi
       else
-        printf '  %-20s *CONTENT DIFF* (see above messages)\n' "$artifact"
+        printf '  %-20s *CONTENT DIFF* (see above messages)\n' "$basename_artifact"
         diff_flag=1
       fi
       ;;
@@ -182,7 +184,7 @@ fi
 if [ "${KEYCHAIN_FORCE_LOCAL:-}" = 1 ]; then
   KEYCHAIN_ASSET_KEYCHAIN="keychain"
   KEYCHAIN_ASSET_MAN="keychain.1"
-  KEYCHAIN_ASSET_TARBALL="keychain-$VER.tar.gz"
+  KEYCHAIN_ASSET_TARBALL="dist/keychain-$VER.tar.gz"
   echo "Source selection: USING LOCAL artifacts (override)." >&2
 else
   # All artifacts matched (raw or normalized) -> use CI versions

scripts/release-refresh.sh

@@ -22,7 +22,7 @@ done
 echo "Uploading replacement assets..."
 ASSET_KEYCHAIN=${KEYCHAIN_ASSET_KEYCHAIN:-keychain}
 ASSET_MAN=${KEYCHAIN_ASSET_MAN:-keychain.1}
-ASSET_TARBALL=${KEYCHAIN_ASSET_TARBALL:-keychain-$VER.tar.gz}
+ASSET_TARBALL=${KEYCHAIN_ASSET_TARBALL:-dist/keychain-$VER.tar.gz}
 
 # (Note: By default we do not modify existing release notes. Set KEYCHAIN_UPDATE_NOTES=1 to rebuild.)