Prevent Risky YugabyteDB and YBA Upgrades by Comparing Release Dates

				
					#!/bin/bash

# check_yb_upgrade.sh
# Validates version sequence and release timestamps for YugabyteDB (DB) and YugabyteDB Anywhere (YBA)
# Usage: ./check_yb_upgrade.sh [-c db|yba] <current_version> <target_version>

COMPONENT="db"

while getopts "c:" opt; do
  case $opt in
    c)
      COMPONENT=$(echo "$OPTARG" | tr '[:upper:]' '[:lower:]')
      ;;
    *)
      echo "Usage: $0 [-c db|yba] <current_version> <target_version>"
      exit 1
      ;;
  esac
done

shift $((OPTIND -1))

CURRENT_INPUT=$1
TARGET_INPUT=$2

if [ -z "$CURRENT_INPUT" ] || [ -z "$TARGET_INPUT" ]; then
  echo "Usage: $0 [-c db|yba] <current_version> <target_version>"
  echo "Examples:"
  echo "  $0 -c db 2024.2.9.0 2025.2.2.2"
  echo "  $0 -c yba 2024.2.9.0 2026.1"
  exit 1
fi

if [[ "$COMPONENT" != "db" && "$COMPONENT" != "yba" ]]; then
  echo "Error: Invalid component '$COMPONENT'. Must be 'db' or 'yba'." >&2
  exit 1
fi

# Query GitHub API for YugabyteDB Engine releases
get_db_release_date() {
  local input_ver="${1#v}"
  local response tag published_at resolved_ver

  for try_ver in "$input_ver" "${input_ver}.0" "${input_ver}.0.0"; do
    tag="v${try_ver}"
    response=$(curl -s "https://api.github.com/repos/yugabyte/yugabyte-db/releases/tags/${tag}")
    published_at=$(echo "$response" | grep '"published_at"' | head -n 1 | awk -F'"' '{print $4}')

    if [ -n "$published_at" ]; then
      echo "${try_ver}|${published_at}"
      return 0
    fi
  done

  # Fallback: Prefix matching against GitHub release list
  response=$(curl -s "https://api.github.com/repos/yugabyte/yugabyte-db/releases?per_page=100")
  tag=$(echo "$response" | grep '"tag_name"' | awk -F'"' '{print $4}' | grep -E "^v${input_ver}(\.|\-|$)" | head -n 1)

  if [ -n "$tag" ]; then
    published_at=$(echo "$response" | grep -A 10 "\"tag_name\": \"${tag}\"" | grep '"published_at"' | head -n 1 | awk -F'"' '{print $4}')
    resolved_ver="${tag#v}"

    if [ -n "$published_at" ]; then
      echo "${resolved_ver}|${published_at}"
      return 0
    fi
  fi

  return 1
}

# Scrape YBA docs and download headers for release timestamps
get_yba_release_date() {
  local input_ver="${1#v}"
  local series=$(echo "$input_ver" | awk -F'.' '{print $1"."$2}')

  # Handle partial input year (e.g. "2026")
  if [[ "$input_ver" =~ ^[0-9]{4}$ ]]; then
    local main_docs=$(curl -sL "https://docs.yugabyte.com/stable/releases/yba-releases/")
    series=$(echo "$main_docs" | grep -oE "v${input_ver}\.[0-9]+" | head -n 1 | tr -d 'v')
  fi

  local docs_url="https://docs.yugabyte.com/stable/releases/yba-releases/v${series}/"
  local docs_html=$(curl -sL "$docs_url")

  # Resolve full version if user entered partial version (e.g. 2026.1 -> 2026.1.0.1)
  local resolved_ver="$input_ver"

  if [[ "$input_ver" != *.*.*.* ]]; then
    resolved_ver=$(echo "$docs_html" | grep -oE "20[0-9]{2}\.[0-9]+\.[0-9]+\.[0-9]+" | grep -E "^${input_ver}(\.|$)" | head -n 1)
  fi

  if [ -z "$resolved_ver" ]; then
    return 1
  fi

  # Extract exact installer URL and fetch HTTP Last-Modified header
  local installer_url=$(echo "$docs_html" | grep -oE "https://downloads\.yugabyte\.com/releases/${resolved_ver}/yba_installer_full-${resolved_ver}-b[0-9]+-linux-x86_64\.tar\.gz" | head -n 1)
  local iso_date=""

  if [ -n "$installer_url" ]; then
    local last_modified=$(curl -sI "$installer_url" | grep -i "last-modified" | cut -d':' -f2- | xargs)

    if [ -n "$last_modified" ]; then
      iso_date=$(date -u -d "$last_modified" +"%Y-%m-%dT%H:%M:%SZ" 2>/dev/null || date -j -f "%a, %d %b %Y %T GMT" "$last_modified" +"%Y-%m-%dT%H:%M:%SZ" 2>/dev/null)
    fi
  fi

  # Fallback: Parse date from documentation text
  if [ -z "$iso_date" ]; then
    local date_str=$(echo "$docs_html" | grep -iE "v${resolved_ver}[[:space:]]*-[[:space:]]*[A-Za-z]+[[:space:]]+[0-9]+,[[:space:]]+[0-9]{4}" | head -n 1 | sed -E 's/.*-[[:space:]]*([A-Za-z]+[[:space:]]+[0-9]+,[[:space:]]+[0-9]{4}).*/\1/')

    if [ -n "$date_str" ]; then
      iso_date=$(date -u -d "$date_str" +"%Y-%m-%dT00:00:00Z" 2>/dev/null)
    fi
  fi

  if [ -n "$iso_date" ]; then
    echo "${resolved_ver}|${iso_date}"
    return 0
  fi

  return 1
}

echo "Fetching release metadata for component [$COMPONENT]..."

if [ "$COMPONENT" = "db" ]; then
  CURRENT_INFO=$(get_db_release_date "$CURRENT_INPUT")
  TARGET_INFO=$(get_db_release_date "$TARGET_INPUT")
else
  CURRENT_INFO=$(get_yba_release_date "$CURRENT_INPUT")
  TARGET_INFO=$(get_yba_release_date "$TARGET_INPUT")
fi

if [ -z "$CURRENT_INFO" ]; then
  echo "Error: Could not resolve $COMPONENT version or release date for '$CURRENT_INPUT'." >&2
  exit 1
fi

if [ -z "$TARGET_INFO" ]; then
  echo "Error: Could not resolve $COMPONENT version or release date for '$TARGET_INPUT'." >&2
  exit 1
fi

CURRENT_VER=$(echo "$CURRENT_INFO" | cut -d'|' -f1)
CURRENT_DATE=$(echo "$CURRENT_INFO" | cut -d'|' -f2)

TARGET_VER=$(echo "$TARGET_INFO" | cut -d'|' -f1)
TARGET_DATE=$(echo "$TARGET_INFO" | cut -d'|' -f2)

READABLE_CURRENT=$(echo "$CURRENT_DATE" | tr 'TZ' ' ' | xargs)
READABLE_TARGET=$(echo "$TARGET_DATE" | tr 'TZ' ' ' | xargs)

echo "--------------------------------------------------------"
echo "Component:       ${COMPONENT^^}"
echo "Current Version: $CURRENT_VER (Released: $READABLE_CURRENT UTC)"
echo "Target Version:  $TARGET_VER (Released: $READABLE_TARGET UTC)"
echo "--------------------------------------------------------"

# Version sequence check using sort -V
LOWEST_VER=$(printf '%s\n%s\n' "$CURRENT_VER" "$TARGET_VER" | sort -V | head -n 1)

if [ "$CURRENT_VER" = "$TARGET_VER" ]; then
  echo "ℹ️  NOTE: Target version matches current version ($CURRENT_VER)."
  exit 0
elif [ "$LOWEST_VER" = "$TARGET_VER" ]; then
  echo "⚠️  WARNING: Target version ($TARGET_VER) is a NUMERIC DOWNGRADE from current version ($CURRENT_VER)."
  echo "    Downgrading is not supported and can lead to system corruption or failures."
  exit 1
fi

# Compare ISO 8601 release timestamps
if [[ "$TARGET_DATE" < "$CURRENT_DATE" ]]; then
  echo "⚠️  WARNING: Target $COMPONENT version ($TARGET_VER) was released BEFORE your current version ($CURRENT_VER)!"
  echo "    This upgrade is chronologically backward. It can lead to migration failures,"
  echo "    missing bug fixes, or state incompatibilities."
  exit 1
else
  echo "✅  SUCCESS: Target $COMPONENT version ($TARGET_VER) is chronologically newer. Upgrade check passed."
  exit 0
fi