[red] Cover clean Linux publication dependencies

Signed-off-by: Viwat Vchirawongkwin <viwat.v@chula.ac.th>

Author: yyods

tests/publication/test_ci_contract.py

@@ -0,0 +1,30 @@
+# SPDX-License-Identifier: MIT
+# Part of PyBLE (https://pyble.dev) — see /LICENSE.
+
+from __future__ import annotations
+
+import unittest
+from pathlib import Path
+
+REPO_ROOT = Path(__file__).resolve().parents[2]
+
+
+class CiContractTest(unittest.TestCase):
+    def test_firmware_host_checks_out_pinned_submodules(self) -> None:
+        workflow = (REPO_ROOT / ".github" / "workflows" / "ci.yml").read_text(
+            encoding="utf-8"
+        )
+        start = workflow.index("  firmware-host:")
+        end = workflow.index("\n  app:", start)
+        firmware_host = workflow[start:end]
+
+        self.assertIn(
+            "      - uses: actions/checkout@v4\n"
+            "        with:\n"
+            "          submodules: true\n",
+            firmware_host,
+        )
+
+
+if __name__ == "__main__":
+    unittest.main()

tools/web/src/test/build-contract.test.ts

@@ -94,6 +94,7 @@ describe("production build contract", () => {
       notice,
       "node_modules/string.prototype.codepointat",
     );
+    const hexRgb = noticeSection(notice, "node_modules/hex-rgb");
     const pako = noticeSection(
       notice,
       "node_modules/esptool-js/node_modules/pako",
@@ -103,6 +104,7 @@ describe("production build contract", () => {
     expect.soft(base64).not.toContain("Meta Platforms");
     expect.soft(codePointAt).toContain("Copyright Mathias Bynens");
     expect.soft(codePointAt).not.toContain("Meta Platforms");
+    expect.soft(hexRgb).toContain("License file: license");
     expect.soft(pako).toContain("SPDX license: (MIT AND Zlib)");
     expect.soft(pako).toContain("Jean-loup Gailly and Mark Adler");
     expect