fix(release): make latest checks shell portable

Author: shadowfax92

.github/workflows/release-claw-server.yml

@@ -891,7 +891,7 @@ jobs:
               if ! jq -e \
                 --arg component "claw-server-rust/prod-resources" \
                 --arg target "$target" \
-                '.Metadata.component == $component and .Metadata.target == $target and ((.Metadata.version // "") | test("^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$")) and ((.Metadata["release-sha"] // "") | test("^[0-9a-f]{40}$")) and ((.Metadata.sha256 // "") | test("^[0-9a-f]{64}$")) and (.ContentLength > 0)' \
+                '.Metadata.component == $component and .Metadata.target == $target and ((.Metadata.version // "") | test("^(0|[1-9][0-9]*)[.](0|[1-9][0-9]*)[.](0|[1-9][0-9]*)$")) and ((.Metadata["release-sha"] // "") | test("^[0-9a-f]{40}$")) and ((.Metadata.sha256 // "") | test("^[0-9a-f]{64}$")) and (.ContentLength > 0)' \
                 <<< "$destination_head" >/dev/null; then
                 echo "::error::Latest R2 alias has an invalid binding: $destination"
                 exit 1

.github/workflows/release-server.yml

@@ -469,7 +469,7 @@ jobs:
               if ! jq -e \
                 --arg component "artifacts/server" \
                 --arg target "$target" \
-                '.Metadata.component == $component and .Metadata.target == $target and ((.Metadata.version // "") | test("^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$")) and ((.Metadata["release-sha"] // "") | test("^[0-9a-f]{40}$")) and ((.Metadata.sha256 // "") | test("^[0-9a-f]{64}$")) and (.ContentLength > 0)' \
+                '.Metadata.component == $component and .Metadata.target == $target and ((.Metadata.version // "") | test("^(0|[1-9][0-9]*)[.](0|[1-9][0-9]*)[.](0|[1-9][0-9]*)$")) and ((.Metadata["release-sha"] // "") | test("^[0-9a-f]{40}$")) and ((.Metadata.sha256 // "") | test("^[0-9a-f]{64}$")) and (.ContentLength > 0)' \
                 <<< "$destination_head" >/dev/null; then
                 echo "::error::Latest R2 alias has an invalid binding: $destination"
                 exit 1

packages/browseros/bos_build/ci_workflow_test.py

@@ -1134,6 +1134,10 @@ def test_server_latest_aliases_reconcile_monotonically_inside_retained_lock(self
                 self.assertIn("already newer", script)
                 self.assertIn("already matches version, source, and checksum", script)
                 self.assertIn("conflicts at version", script)
+                self.assertIn(
+                    'test("^(0|[1-9][0-9]*)[.](0|[1-9][0-9]*)[.](0|[1-9][0-9]*)$"))',
+                    script,
+                )
                 self.assertIn("copy-object", script)
                 self.assertLess(
                     script.index("already newer"), script.index("copy-object")