Add /update-submodule command and fix update-sbom.sh TTY flag

Author: GromNaN

.claude/CLAUDE.md

@@ -91,7 +91,8 @@ Each class is implemented as a pair of `.c` / `.h` files (and a `.stub.php` for
 - `src/libmongoc` – mongo-c-driver (includes libbson)
 - `src/libmongocrypt` – client-side encryption library
 
-Build configurations (`config.m4` for Autotools, `config.w32` for Windows) enumerate all bundled source files. When updating a submodule, run `scripts/update-submodule-sources.php` to regenerate these lists and update version checks in both files.
+Build configurations (`config.m4` for Autotools, `config.w32` for Windows) enumerate all bundled source files.
+Use the `/update-submodule` command when updating a submodule.
 
 ### Test Format (PHPT)
 

.claude/commands/update-submodule.md

@@ -0,0 +1,69 @@
+Update a bundled C library submodule to a new version and apply all required changes.
+
+Arguments: `$ARGUMENTS` — `libmongoc <version>` or `libmongocrypt <version>`, e.g. `libmongocrypt 1.17.3`
+
+Current state:
+- libmongoc: !`cat src/libmongoc/VERSION_CURRENT 2>/dev/null || echo "(unknown)"`
+- libmongocrypt: !`cat src/LIBMONGOCRYPT_VERSION_CURRENT 2>/dev/null || echo "(unknown)"`
+
+## Steps to perform
+
+### 1. Update the submodule pointer
+
+Fetch tags and checkout the requested version tag:
+
+```bash
+git -C src/<submodule> fetch --tags
+git -C src/<submodule> checkout <version>
+```
+
+Verify with `git submodule status src/<submodule>`.
+
+### 2. Regenerate source lists
+
+```bash
+php scripts/update-submodule-sources.php
+```
+
+This updates `config.m4` and `config.w32` with the current list of C source files.
+
+### 3. Update pkg-config version requirements in config.m4
+
+Read `config.m4` and update the minimum version in the `PKG_CHECK_MODULES` call(s):
+
+- **libmongoc**: update `bson2 >= X.Y.Z` and `mongoc2 >= X.Y.Z`
+- **libmongocrypt**: update `libmongocrypt >= X.Y.Z`
+
+Also update the corresponding `AC_MSG_ERROR` messages.
+
+### 4. Update LIBMONGOCRYPT_VERSION_CURRENT (libmongocrypt only)
+
+For libmongocrypt updates, update `src/LIBMONGOCRYPT_VERSION_CURRENT` with the new version string.
+
+### 5. Update the SBOM
+
+The SBOM requires Docker. Start colima if not running:
+
+```bash
+colima status 2>/dev/null | grep -q "Running" || colima start
+```
+
+Then generate the updated SBOM:
+
+```bash
+bash scripts/update-sbom.sh
+```
+
+This updates `sbom.json` using the versions in `src/libmongoc/VERSION_CURRENT` and `src/LIBMONGOCRYPT_VERSION_CURRENT`.
+
+### 6. Commit
+
+Stage and commit all changed files:
+
+- `src/<submodule>` (submodule pointer)
+- `config.m4` (source lists + version requirements)
+- `config.w32` (source lists, if changed)
+- `src/LIBMONGOCRYPT_VERSION_CURRENT` (libmongocrypt only)
+- `sbom.json`
+
+Commit message: `PHPC-XXXX Upgrade <submodule> to <version>`

scripts/update-sbom.sh

@@ -12,7 +12,7 @@ echo "pkg:github/mongodb/mongo-c-driver@${LIBMONGOC_VERSION}" > $PURLS_FILE
 echo "pkg:github/mongodb/libmongocrypt@${LIBMONGOCRYPT_VERSION}" >> $PURLS_FILE
 
 # Use silkbomb to update the sbom.json file
-docker run --platform="linux/amd64" -it --rm -v ${ROOT_DIR}:/pwd \
+docker run --platform="linux/amd64" -i --rm -v ${ROOT_DIR}:/pwd \
   artifactory.corp.mongodb.com/release-tools-container-registry-public-local/silkbomb:1.0 \
   update --sbom-in /pwd/sbom.json --purls /pwd/purls.txt --sbom-out /pwd/sbom.json