actions/artifact
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
533 Commits 1 Branch 0 Tags
main
Commit Graph
114 Commits
Author SHA1 Message Date
tunc-dandCopilot App 0e77576622 fix(artifact): declare protobuf RPC runtime dependency 
Prepare 6.3.1 and verify the packed production package in a clean consumer.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-06 14:15:16 +02:00
tunc-dandCopilot App 110ff4d59f artifact: honor Retry-After on HTTP 429 and prepare 6.3.0 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-06 11:39:25 +02:00
dependabot[bot] fc0fd30386 chore(deps-dev): bump brace-expansion from 2.1.1 to 2.1.7 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 2.1.1 to 2.1.7.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v2.1.1...v2.1.7)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 2.1.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-01 12:55:22 +00:00
Salman Muin Kayser Chishti 6fd4031cf0 Merge pull request #2469 from actions/dependabot/npm_and_yarn/packages/artifact/artifact-minor-patch-e133483122 
chore(deps): bump the artifact-minor-patch group across 1 directory with 7 updates
 2026-10-01 13:44:27 +01:00
dependabot[bot] 8cf2b4bc5a chore(deps): bump the artifact-minor-patch group across 1 directory with 7 updates 
Bumps the artifact-minor-patch group with 7 updates in the /packages/artifact directory:

| Package | From | To |
| --- | --- | --- |
| [@azure/storage-blob](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/storage/storage-blob) | `12.31.0` | `12.34.0` |
| [@octokit/core](https://github.com/octokit/core.js) | `7.0.6` | `7.0.8` |
| [@octokit/plugin-retry](https://github.com/octokit/plugin-retry.js) | `8.1.0` | `8.1.1` |
| [@octokit/request](https://github.com/octokit/request.js) | `10.0.8` | `10.0.16` |
| [@octokit/request-error](https://github.com/octokit/request-error.js) | `7.1.0` | `7.1.2` |
| [typedoc](https://github.com/TypeStrong/TypeDoc) | `0.28.19` | `0.28.20` |
| [typedoc-plugin-markdown](https://github.com/typedoc2md/typedoc-plugin-markdown/tree/HEAD/packages/typedoc-plugin-markdown) | `4.11.0` | `4.13.1` |



Updates `@azure/storage-blob` from 12.31.0 to 12.34.0
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/storage/storage-blob/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/storage-blob_12.34.0/sdk/storage/storage-blob)

Updates `@octokit/core` from 7.0.6 to 7.0.8
- [Release notes](https://github.com/octokit/core.js/releases)
- [Commits](https://github.com/octokit/core.js/compare/v7.0.6...v7.0.8)

Updates `@octokit/plugin-retry` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/octokit/plugin-retry.js/releases)
- [Commits](https://github.com/octokit/plugin-retry.js/compare/v8.1.0...v8.1.1)

Updates `@octokit/request` from 10.0.8 to 10.0.16
- [Release notes](https://github.com/octokit/request.js/releases)
- [Commits](https://github.com/octokit/request.js/compare/v10.0.8...v10.0.16)

Updates `@octokit/request-error` from 7.1.0 to 7.1.2
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](https://github.com/octokit/request-error.js/compare/v7.1.0...v7.1.2)

Updates `typedoc` from 0.28.19 to 0.28.20
- [Release notes](https://github.com/TypeStrong/TypeDoc/releases)
- [Changelog](https://github.com/TypeStrong/typedoc/blob/master/CHANGELOG.md)
- [Commits](https://github.com/TypeStrong/TypeDoc/compare/v0.28.19...v0.28.20)

Updates `typedoc-plugin-markdown` from 4.11.0 to 4.13.1
- [Release notes](https://github.com/typedoc2md/typedoc-plugin-markdown/releases)
- [Changelog](https://github.com/typedoc2md/typedoc-plugin-markdown/blob/main/packages/typedoc-plugin-markdown/CHANGELOG.md)
- [Commits](https://github.com/typedoc2md/typedoc-plugin-markdown/commits/typedoc-plugin-markdown@4.13.1/packages/typedoc-plugin-markdown)

---
updated-dependencies:
- dependency-name: "@azure/storage-blob"
  dependency-version: 12.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: artifact-minor-patch
- dependency-name: "@octokit/core"
  dependency-version: 7.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: artifact-minor-patch
- dependency-name: "@octokit/plugin-retry"
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: artifact-minor-patch
- dependency-name: "@octokit/request"
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: artifact-minor-patch
- dependency-name: "@octokit/request-error"
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: artifact-minor-patch
- dependency-name: typedoc
  dependency-version: 0.28.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: artifact-minor-patch
- dependency-name: typedoc-plugin-markdown
  dependency-version: 4.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: artifact-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-30 18:33:23 +00:00
dependabot[bot] 5f6989a275 chore(deps): bump undici from 6.28.0 to 6.29.0 in /packages/artifact 
Bumps [undici](https://github.com/nodejs/undici) from 6.28.0 to 6.29.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.28.0...v6.29.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.29.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-29 12:08:17 +00:00
dependabot[bot] fd3d8cb4a7 chore(deps): bump linkify-it from 5.0.1 to 5.0.2 in /packages/artifact 
Bumps [linkify-it](https://github.com/markdown-it/linkify-it) from 5.0.1 to 5.0.2.
- [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md)
- [Commits](https://github.com/markdown-it/linkify-it/compare/5.0.1...5.0.2)

---
updated-dependencies:
- dependency-name: linkify-it
  dependency-version: 5.0.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-28 11:14:49 +00:00
Salman Chishti a2c5832461 Merge pull request #2432 from actions/dependabot/npm_and_yarn/packages/artifact/markdown-it-14.2.0 
chore(deps): bump markdown-it from 14.1.1 to 14.2.0 in /packages/artifact
 2026-07-28 12:12:36 +01:00
dependabot[bot] ae80a558f7 chore(deps): bump undici from 6.24.0 to 6.28.0 in /packages/artifact 
Bumps [undici](https://github.com/nodejs/undici) from 6.24.0 to 6.28.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.24.0...v6.28.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.28.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-27 00:42:16 +00:00
dependabot[bot] 96fdfa8c67 chore(deps): bump markdown-it in /packages/artifact 
Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.1.1 to 14.2.0.
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](https://github.com/markdown-it/markdown-it/compare/14.1.1...14.2.0)

---
updated-dependencies:
- dependency-name: markdown-it
  dependency-version: 14.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-16 18:14:03 +00:00
Jason Ginchereau 5ce4d00c1a Audit fix packages 2026-06-11 17:22:31 -07:00
Joshua Brooks 8aecc9ccf2 Bump toolkit version, add release notes 2026-05-01 17:38:16 +00:00
Joshua Brooks ad5973e375 Move @protobuf-ts/plugin to devDependencies 2026-05-01 16:38:16 +00:00
Joshua Brooks 6ea8732b22 Audit npm packages 2026-05-01 16:33:28 +00:00
dependabot[bot] b248b616d6 chore(deps): bump undici from 6.23.0 to 6.24.0 in /packages/artifact 
Bumps [undici](https://github.com/nodejs/undici) from 6.23.0 to 6.24.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.23.0...v6.24.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.24.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-14 04:17:32 +00:00
Daniel Kennedy 2b2de3eaff Artifact upload: support uploading single un-zipped files (#2256) 
* Artifact upload: support uploading single un-zipped files

* Fix linters

* Fix lint again

* Fix tests

* Check for 0 sized artifact lists

* Add some more stream tests and handle an upload failure gracefully

* Add CI tests for non-zipped artifacts

* Add an html report to test rendering in the browser

* Fix linting issue

* Artifact: bump the version and add release notes

* Fix Windows tests

* Fix linting

* stream: switch the error details to error type

* Refactor the validation logic in `uploadArtifact` a bit

* Added more details about how the name parameter is handled
 2026-02-25 11:01:38 -05:00
dependabot[bot] d854ac5822 chore(deps): bump fast-xml-parser in /packages/artifact (#2285) 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.3.3 to 5.3.4.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.3...v5.3.4)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.3.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-30 16:26:32 -05:00
Daniel KennedyandCopilot 471c2154b5 Artifact download: don't unzip non-zip artifacts (#2253) 
* Download artifact: don't extract the downloaded file if the content-type isn't a zip

* Remove unused `import`

* Add support for specifying whether to skip decompressing

* Prevent path traversal attacks

* Fix indenting

* Update packages/artifact/__tests__/download-artifact.test.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Parse the mime type out of the content-type header

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Fix some linting issues

* Swap `zip` for `application/zip-compressed`

* Test: negative check for malicious paths

* Increase the timeout on one of the tests

* Check the URL path for `.zip` to see if we can auto-decompress

* Fix linting issue

* Bump the package version and add release notes

* Remove `launch.json`

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-01-30 12:18:38 -05:00
Daniel Kennedy 0df0288961 @actions/artifact: convert to an ESM module (#2266) 
* `@actions/artifact`: convert to an ESM module

* Update the package-lock.json

* Undo the GHES ignores

* Fix the reference to `@actions/http-client` in the lock file

* Bump `@actions/core` to `3.0.0`

* Remove `jest.config.cjs`

* Import `OctoKitOptions` from `@octokit/core/types`

* Pull the package version from `package.json`

* Workaround getting the package version for the user-agent

* Fix the `archiver` import

* Fix linting
 2026-01-29 09:52:09 -05:00
Daniel Kennedy 1b79e49863 Bump @actions/http-client and @actions/github on all packages 2026-01-27 13:31:31 -05:00
Lokesh Gopu bb950a9c98 Merge pull request #2249 from actions/fix/upgrade-octokit-dependencies 
upgrade octokit dependencies
 2026-01-22 14:46:12 -05:00
Lokesh Gopu 2f1b7faba3 upgrade octokit dependencies 2026-01-22 11:59:59 -05:00
dependabot[bot] d6de7c421c chore(deps): bump lodash from 4.17.21 to 4.17.23 
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-22 00:03:54 +00:00
copilot-swe-agent[bot]andTingluoHuang 9c1ca9f0bd Fix package-lock.json to mark typescript as dev dependency 
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
 2026-01-07 22:10:30 +00:00
copilot-swe-agent[bot]andTingluoHuang 65aec61dae Verify changes with tests - all package-specific tests passing 
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
 2026-01-07 22:03:56 +00:00
Salman Muin Kayser Chishti b80ccfe860 fix(artifact): update @azure/storage-blob to ^12.29.1 and remove deprecated packages 2025-12-12 15:01:31 +00:00
Salman Muin Kayser Chishti 3b2d94b830 chore(artifact): bump version to v5.0.0 2025-12-11 20:45:49 +00:00
Salman Muin Kayser Chishti eb97dc5da8 chore(artifact): bump dependencies for Node.js 24 support 2025-12-11 19:20:51 +00:00
Salman Muin Kayser Chishti adf24a070c chore: fix npm audit vulnerabilities (glob, js-yaml) 2025-12-08 21:14:00 +00:00
Daniel Kennedy b41153ff68 Artifact: prepare 4.0.0 2025-10-24 13:28:26 -04:00
Salman Muin Kayser Chishti dd8c22d213 rebase led to this changing so reverting 2025-10-15 16:37:38 +01:00
Daniel Kennedy 27b1fd90ee Take a direct dependency on @azure/core-http 2025-10-15 16:26:39 +01:00
dependabot[bot] a270ddba54 Bump the artifact-minor-patch group in /packages/artifact with 5 updates 
Bumps the artifact-minor-patch group in /packages/artifact with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.10.0` | `1.11.1` |
| [@azure/storage-blob](https://github.com/Azure/azure-sdk-for-js) | `12.15.0` | `12.28.0` |
| [@protobuf-ts/plugin](https://github.com/timostamm/protobuf-ts/tree/HEAD/packages/plugin) | `2.9.1` | `2.11.1` |
| [typedoc](https://github.com/TypeStrong/TypeDoc) | `0.25.4` | `0.28.13` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.2.2` | `5.9.2` |

Updates `@actions/core` from 1.10.0 to 1.11.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@azure/storage-blob` from 12.15.0 to 12.28.0
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/storage-blob_12.15.0...@azure/storage-blob_12.28.0)

Updates `@protobuf-ts/plugin` from 2.9.1 to 2.11.1
- [Release notes](https://github.com/timostamm/protobuf-ts/releases)
- [Commits](https://github.com/timostamm/protobuf-ts/commits/v2.11.1/packages/plugin)

Updates `typedoc` from 0.25.4 to 0.28.13
- [Release notes](https://github.com/TypeStrong/TypeDoc/releases)
- [Changelog](https://github.com/TypeStrong/typedoc/blob/master/CHANGELOG.md)
- [Commits](https://github.com/TypeStrong/TypeDoc/compare/v0.25.4...v0.28.13)

Updates `typescript` from 5.2.2 to 5.9.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.2.2...v5.9.2)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: artifact-minor-patch
- dependency-name: "@azure/storage-blob"
  dependency-version: 12.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: artifact-minor-patch
- dependency-name: "@protobuf-ts/plugin"
  dependency-version: 2.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: artifact-minor-patch
- dependency-name: typedoc
  dependency-version: 0.28.13
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: artifact-minor-patch
- dependency-name: typescript
  dependency-version: 5.9.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: artifact-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-15 16:25:54 +01:00
Salman Muin Kayser Chishti 5b74929b57 update with dist updates 2025-10-15 16:22:51 +01:00
Salman Muin Kayser Chishti 17ebabbb66 changes 2025-09-08 15:37:51 +01:00
Salman Muin Kayser Chishti 5f809a3ae7 package updates 2025-09-04 15:15:02 +01:00
Ryan Ghadimi d509a46b27 release prep 2025-05-08 08:53:55 +00:00
Ryan Ghadimi 555f3a838f bump octokit core 2025-05-08 08:42:32 +00:00
Ryan Ghadimi 6a14113ef5 artifact deps 2025-05-08 08:38:48 +00:00
Salman Chishti 705c3cb65b Use patch instead of minor 2025-03-17 14:08:42 +00:00
Salman Chishti cdb472f8df update package-lock.json 2025-03-17 12:47:54 +00:00
Ryan Ghadimi 018cdd4a67 Bump package.json 2025-03-11 11:02:42 +00:00
Ryan Ghadimi fa36e53df3 Update @actions/artifact version to 2.3.0 2025-03-10 15:12:36 +00:00
Ryan Ghadimi cb739e556a Prepare for Artifact v2.2.3 release 2025-03-07 10:14:36 +00:00
Yang Cao 4a943960e9 Update package-lock.json 2025-02-20 21:20:28 +00:00
Rob Herley ff2d191cdb remove runtime dependency on twirp-ts 2025-01-27 17:52:55 +00:00
Yang Cao 9648a10b0e Prep release packages/artifact v2.2.1 2025-01-08 21:11:59 +00:00
Brian DeHamer aea8a909c1 Prepare artifact release 2.2.0 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-12-17 10:05:45 -08:00
Bassem Dghaidi 55c6356780 Bump cross-spawn to 7.0.6 2024-11-20 14:02:54 -08:00
Rob Herley 0e9da186e3 properly resolve relative symlinks 2024-10-08 12:35:48 -04:00