actions/artifact
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
533 Commits 1 Branch 0 Tags
59fb5e6b805ff665abb7a235151c0f6816f11179
Commit Graph
533 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
tunc-d 59fb5e6b80 Merge pull request #2537 from tunc-d/tunc-d-artifact-runtime-dependency-fix 
fix(artifact): declare protobuf RPC runtime dependency and prepare 6.3.1
 2026-10-06 14:24:46 +02:00
tunc-dandCopilot App 7b81ecbf50 chore(artifact): keep runtime dependency fix minimal 
Remove the packed-package test, CI step, and related documentation.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-06 14:17:06 +02:00
tunc-dandCopilot App 0e77576622 fix(artifact): declare protobuf RPC runtime dependency 
Prepare 6.3.1 and verify the packed production package in a clean consumer.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-06 14:15:16 +02:00
tunc-d c1f66de69b Merge pull request #2534 from tunc-d/tunc-d-artifact-retry-6-3-0-replacement 
artifact: honor Retry-After on HTTP 429 and prepare 6.3.0
 2026-10-06 11:57:32 +02:00
tunc-dandCopilot App 4ccdfd86d7 artifact: link 6.3.0 release notes to replacement PR 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-06 11:40:04 +02:00
tunc-dandCopilot App 110ff4d59f artifact: honor Retry-After on HTTP 429 and prepare 6.3.0 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-06 11:39:25 +02:00
Salman Muin Kayser Chishti 1841987de3 Merge pull request #2525 from actions/dependabot/npm_and_yarn/packages/artifact/multi-581aeff57e 
chore(deps): bump brace-expansion in /packages/artifact
 2026-10-01 13:57:21 +01:00
Salman Muin Kayser Chishti a52246e9d2 Merge pull request #2526 from actions/dependabot/npm_and_yarn/brace-expansion-2.1.7 
chore(deps-dev): bump brace-expansion from 2.1.1 to 2.1.7
 2026-10-01 13:55:55 +01:00
dependabot[bot] fc0fd30386 chore(deps-dev): bump brace-expansion from 2.1.1 to 2.1.7 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 2.1.1 to 2.1.7.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v2.1.1...v2.1.7)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 2.1.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-01 12:55:22 +00:00
dependabot[bot] 15241ba2a4 chore(deps): bump brace-expansion in /packages/artifact 
Bumps  and [brace-expansion](https://github.com/juliangruber/brace-expansion). These dependencies needed to be updated together.

Updates `brace-expansion` from 2.1.0 to 2.1.7
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v2.1.0...v2.1.7)

Updates `brace-expansion` from 5.0.6 to 5.0.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v2.1.0...v2.1.7)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 2.1.7
  dependency-type: indirect
- dependency-name: brace-expansion
  dependency-version: 5.0.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-01 12:54:34 +00:00
Salman Muin Kayser Chishti 6fd4031cf0 Merge pull request #2469 from actions/dependabot/npm_and_yarn/packages/artifact/artifact-minor-patch-e133483122 
chore(deps): bump the artifact-minor-patch group across 1 directory with 7 updates
 2026-10-01 13:44:27 +01:00
dependabot[bot] 8cf2b4bc5a chore(deps): bump the artifact-minor-patch group across 1 directory with 7 updates 
Bumps the artifact-minor-patch group with 7 updates in the /packages/artifact directory:

| Package | From | To |
| --- | --- | --- |
| [@azure/storage-blob](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/storage/storage-blob) | `12.31.0` | `12.34.0` |
| [@octokit/core](https://github.com/octokit/core.js) | `7.0.6` | `7.0.8` |
| [@octokit/plugin-retry](https://github.com/octokit/plugin-retry.js) | `8.1.0` | `8.1.1` |
| [@octokit/request](https://github.com/octokit/request.js) | `10.0.8` | `10.0.16` |
| [@octokit/request-error](https://github.com/octokit/request-error.js) | `7.1.0` | `7.1.2` |
| [typedoc](https://github.com/TypeStrong/TypeDoc) | `0.28.19` | `0.28.20` |
| [typedoc-plugin-markdown](https://github.com/typedoc2md/typedoc-plugin-markdown/tree/HEAD/packages/typedoc-plugin-markdown) | `4.11.0` | `4.13.1` |



Updates `@azure/storage-blob` from 12.31.0 to 12.34.0
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/storage/storage-blob/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/storage-blob_12.34.0/sdk/storage/storage-blob)

Updates `@octokit/core` from 7.0.6 to 7.0.8
- [Release notes](https://github.com/octokit/core.js/releases)
- [Commits](https://github.com/octokit/core.js/compare/v7.0.6...v7.0.8)

Updates `@octokit/plugin-retry` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/octokit/plugin-retry.js/releases)
- [Commits](https://github.com/octokit/plugin-retry.js/compare/v8.1.0...v8.1.1)

Updates `@octokit/request` from 10.0.8 to 10.0.16
- [Release notes](https://github.com/octokit/request.js/releases)
- [Commits](https://github.com/octokit/request.js/compare/v10.0.8...v10.0.16)

Updates `@octokit/request-error` from 7.1.0 to 7.1.2
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](https://github.com/octokit/request-error.js/compare/v7.1.0...v7.1.2)

Updates `typedoc` from 0.28.19 to 0.28.20
- [Release notes](https://github.com/TypeStrong/TypeDoc/releases)
- [Changelog](https://github.com/TypeStrong/typedoc/blob/master/CHANGELOG.md)
- [Commits](https://github.com/TypeStrong/TypeDoc/compare/v0.28.19...v0.28.20)

Updates `typedoc-plugin-markdown` from 4.11.0 to 4.13.1
- [Release notes](https://github.com/typedoc2md/typedoc-plugin-markdown/releases)
- [Changelog](https://github.com/typedoc2md/typedoc-plugin-markdown/blob/main/packages/typedoc-plugin-markdown/CHANGELOG.md)
- [Commits](https://github.com/typedoc2md/typedoc-plugin-markdown/commits/typedoc-plugin-markdown@4.13.1/packages/typedoc-plugin-markdown)

---
updated-dependencies:
- dependency-name: "@azure/storage-blob"
  dependency-version: 12.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: artifact-minor-patch
- dependency-name: "@octokit/core"
  dependency-version: 7.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: artifact-minor-patch
- dependency-name: "@octokit/plugin-retry"
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: artifact-minor-patch
- dependency-name: "@octokit/request"
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: artifact-minor-patch
- dependency-name: "@octokit/request-error"
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: artifact-minor-patch
- dependency-name: typedoc
  dependency-version: 0.28.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: artifact-minor-patch
- dependency-name: typedoc-plugin-markdown
  dependency-version: 4.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: artifact-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-30 18:33:23 +00:00
dependabot[bot] 5f6989a275 chore(deps): bump undici from 6.28.0 to 6.29.0 in /packages/artifact 
Bumps [undici](https://github.com/nodejs/undici) from 6.28.0 to 6.29.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.28.0...v6.29.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.29.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-29 12:08:17 +00:00
Salman Chishti ee10f4bb93 Merge pull request #2458 from actions/dependabot/npm_and_yarn/packages/artifact/linkify-it-5.0.2 
chore(deps): bump linkify-it from 5.0.1 to 5.0.2 in /packages/artifact
 2026-07-28 12:22:40 +01:00
Salman Chishti 2ca49df401 Merge pull request #2399 from actions/dependabot/npm_and_yarn/packages/artifact/fast-xml-builder-1.2.0 
chore(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 in /packages/artifact
 2026-07-28 12:17:48 +01:00
dependabot[bot] fd3d8cb4a7 chore(deps): bump linkify-it from 5.0.1 to 5.0.2 in /packages/artifact 
Bumps [linkify-it](https://github.com/markdown-it/linkify-it) from 5.0.1 to 5.0.2.
- [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md)
- [Commits](https://github.com/markdown-it/linkify-it/compare/5.0.1...5.0.2)

---
updated-dependencies:
- dependency-name: linkify-it
  dependency-version: 5.0.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-28 11:14:49 +00:00
Salman Chishti a2c5832461 Merge pull request #2432 from actions/dependabot/npm_and_yarn/packages/artifact/markdown-it-14.2.0 
chore(deps): bump markdown-it from 14.1.1 to 14.2.0 in /packages/artifact
 2026-07-28 12:12:36 +01:00
dependabot[bot] ae80a558f7 chore(deps): bump undici from 6.24.0 to 6.28.0 in /packages/artifact 
Bumps [undici](https://github.com/nodejs/undici) from 6.24.0 to 6.28.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.24.0...v6.28.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.28.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-27 00:42:16 +00:00
dependabot[bot] 96fdfa8c67 chore(deps): bump markdown-it in /packages/artifact 
Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.1.1 to 14.2.0.
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](https://github.com/markdown-it/markdown-it/compare/14.1.1...14.2.0)

---
updated-dependencies:
- dependency-name: markdown-it
  dependency-version: 14.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-16 18:14:03 +00:00
Jason Ginchereau 7d543f4d05 Handle cache write error due to read-only token 2026-06-16 08:03:28 -10:00
Jason Ginchereau 5ce4d00c1a Audit fix packages 2026-06-11 17:22:31 -07:00
dependabot[bot] cf1ffc9670 chore(deps): bump fast-xml-builder in /packages/artifact 
Bumps [fast-xml-builder](https://github.com/NaturalIntelligence/fast-xml-builder) from 1.1.5 to 1.2.0.
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-builder/blob/main/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-builder/compare/v1.1.5...v1.2.0)

---
updated-dependencies:
- dependency-name: fast-xml-builder
  dependency-version: 1.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-08 16:48:02 +00:00
Joshua Brooks 6bbe8ec8c6 Merge pull request #2393 from actions/samirat/update_minor_dependency_versions 
Update minor versions of cache and artifact dependencies
 2026-05-07 15:59:39 -04:00
Joshua Brooks 8aecc9ccf2 Bump toolkit version, add release notes 2026-05-01 17:38:16 +00:00
Joshua Brooks ad5973e375 Move @protobuf-ts/plugin to devDependencies 2026-05-01 16:38:16 +00:00
Joshua Brooks 6ea8732b22 Audit npm packages 2026-05-01 16:33:28 +00:00
Joshua Brooks f1f734fc73 Update minor versions of cache and artifact dependencies 2026-05-01 16:27:55 +00:00
Salman Chishti f1ea4fbf4a Merge pull request #2344 from actions/dependabot/npm_and_yarn/packages/artifact/undici-6.24.0 
chore(deps): bump undici from 6.23.0 to 6.24.0 in /packages/artifact
 2026-03-14 04:35:35 +00:00
dependabot[bot] b248b616d6 chore(deps): bump undici from 6.23.0 to 6.24.0 in /packages/artifact 
Bumps [undici](https://github.com/nodejs/undici) from 6.23.0 to 6.24.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.23.0...v6.24.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.24.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-14 04:17:32 +00:00
Daniel Kennedy 9ed79d8596 Artifact: support downloading artifacts with CJK characters in their name (#2341) 
* Artifact: support downloading artifacts with CJK characters in their name

* Fix some linting/PR comments

* One more linting fix
 2026-03-11 09:30:15 -04:00
Zachary Taylor c7e9f2925a Merge pull request #2323 from actions/zaataylor-update-artifact-storage-err-msg 
Update artifact storage error message
 2026-02-26 14:37:38 -05:00
Zachary Taylor 49197ce3fe Update error message 2026-02-26 14:28:46 -05:00
Daniel Kennedy 2b2de3eaff Artifact upload: support uploading single un-zipped files (#2256) 
* Artifact upload: support uploading single un-zipped files

* Fix linters

* Fix lint again

* Fix tests

* Check for 0 sized artifact lists

* Add some more stream tests and handle an upload failure gracefully

* Add CI tests for non-zipped artifacts

* Add an html report to test rendering in the browser

* Fix linting issue

* Artifact: bump the version and add release notes

* Fix Windows tests

* Fix linting

* stream: switch the error details to error type

* Refactor the validation logic in `uploadArtifact` a bit

* Added more details about how the name parameter is handled
 2026-02-25 11:01:38 -05:00
dependabot[bot] d854ac5822 chore(deps): bump fast-xml-parser in /packages/artifact (#2285) 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.3.3 to 5.3.4.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.3...v5.3.4)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.3.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-30 16:26:32 -05:00
Daniel KennedyandCopilot 471c2154b5 Artifact download: don't unzip non-zip artifacts (#2253) 
* Download artifact: don't extract the downloaded file if the content-type isn't a zip

* Remove unused `import`

* Add support for specifying whether to skip decompressing

* Prevent path traversal attacks

* Fix indenting

* Update packages/artifact/__tests__/download-artifact.test.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Parse the mime type out of the content-type header

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Fix some linting issues

* Swap `zip` for `application/zip-compressed`

* Test: negative check for malicious paths

* Increase the timeout on one of the tests

* Check the URL path for `.zip` to see if we can auto-decompress

* Fix linting issue

* Bump the package version and add release notes

* Remove `launch.json`

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-01-30 12:18:38 -05:00
Daniel Kennedy 0df0288961 @actions/artifact: convert to an ESM module (#2266) 
* `@actions/artifact`: convert to an ESM module

* Update the package-lock.json

* Undo the GHES ignores

* Fix the reference to `@actions/http-client` in the lock file

* Bump `@actions/core` to `3.0.0`

* Remove `jest.config.cjs`

* Import `OctoKitOptions` from `@octokit/core/types`

* Pull the package version from `package.json`

* Workaround getting the package version for the user-agent

* Fix the `archiver` import

* Fix linting
 2026-01-29 09:52:09 -05:00
Daniel Kennedy 1b79e49863 Bump @actions/http-client and @actions/github on all packages 2026-01-27 13:31:31 -05:00
Lokesh Gopu bb950a9c98 Merge pull request #2249 from actions/fix/upgrade-octokit-dependencies 
upgrade octokit dependencies
 2026-01-22 14:46:12 -05:00
Lokesh Gopu 2f1b7faba3 upgrade octokit dependencies 2026-01-22 11:59:59 -05:00
Salman Chishti 6cc3d69af4 Merge pull request #2248 from actions/dependabot/npm_and_yarn/lodash-4.17.23 
chore(deps): bump lodash from 4.17.21 to 4.17.23
 2026-01-22 14:48:46 +00:00
dependabot[bot] d6de7c421c chore(deps): bump lodash from 4.17.21 to 4.17.23 
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-22 00:03:54 +00:00
copilot-swe-agent[bot]andTingluoHuang 9c1ca9f0bd Fix package-lock.json to mark typescript as dev dependency 
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
 2026-01-07 22:10:30 +00:00
copilot-swe-agent[bot]andTingluoHuang 65aec61dae Verify changes with tests - all package-specific tests passing 
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
 2026-01-07 22:03:56 +00:00
copilot-swe-agent[bot]andTingluoHuang 1ea52b8bf0 Update all packages to use @actions/http-client@^3.0.1 and bump patch versions 
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
 2026-01-07 21:55:41 +00:00
copilot-swe-agent[bot] 99a3679f2e Initial plan 2026-01-07 21:51:58 +00:00
Tingluo Huang 24c86a7dcc Merge pull request #2231 from actions/copilot/prepare-http-client-release 
Release @actions/http-client v3.0.1
 2026-01-07 15:35:32 -05:00
copilot-swe-agent[bot] 65facf1806 Initial plan 2026-01-07 18:02:29 +00:00
Tingluo Huang f3973714ff Merge pull request #2229 from actions/copilot/extend-user-agent-http-requests 
Extend user-agent with orchestration ID and add default user-agent
 2026-01-07 10:42:56 -05:00
copilot-swe-agent[bot]andTingluoHuang 6d12bac7fe Revert unrelated version bumps in package-lock.json files 
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
 2026-01-06 17:50:28 +00:00
copilot-swe-agent[bot]andTingluoHuang f168c1bfe4 Format code and update .gitignore to exclude .nx cache 
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
 2026-01-06 15:36:15 +00:00