tunc-d and Copilot App
7b81ecbf50
chore(artifact): keep runtime dependency fix minimal
...
Remove the packed-package test, CI step, and related documentation.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-10-06 14:17:06 +02:00
tunc-d and Copilot App
0e77576622
fix(artifact): declare protobuf RPC runtime dependency
...
Prepare 6.3.1 and verify the packed production package in a clean consumer.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-10-06 14:15:16 +02:00
tunc-d
c1f66de69b
Merge pull request #2534 from tunc-d/tunc-d-artifact-retry-6-3-0-replacement
...
artifact: honor Retry-After on HTTP 429 and prepare 6.3.0
2026-10-06 11:57:32 +02:00
tunc-d and Copilot App
4ccdfd86d7
artifact: link 6.3.0 release notes to replacement PR
...
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-10-06 11:40:04 +02:00
tunc-d and Copilot App
110ff4d59f
artifact: honor Retry-After on HTTP 429 and prepare 6.3.0
...
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-10-06 11:39:25 +02:00
Salman Muin Kayser Chishti
1841987de3
Merge pull request #2525 from actions/dependabot/npm_and_yarn/packages/artifact/multi-581aeff57e
...
chore(deps): bump brace-expansion in /packages/artifact
2026-10-01 13:57:21 +01:00
Salman Muin Kayser Chishti
a52246e9d2
Merge pull request #2526 from actions/dependabot/npm_and_yarn/brace-expansion-2.1.7
...
chore(deps-dev): bump brace-expansion from 2.1.1 to 2.1.7
2026-10-01 13:55:55 +01:00
dependabot[bot]
fc0fd30386
chore(deps-dev): bump brace-expansion from 2.1.1 to 2.1.7
...
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion ) from 2.1.1 to 2.1.7.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases )
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v2.1.1...v2.1.7 )
---
updated-dependencies:
- dependency-name: brace-expansion
dependency-version: 2.1.7
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-01 12:55:22 +00:00
dependabot[bot]
15241ba2a4
chore(deps): bump brace-expansion in /packages/artifact
...
Bumps and [brace-expansion](https://github.com/juliangruber/brace-expansion ). These dependencies needed to be updated together.
Updates `brace-expansion` from 2.1.0 to 2.1.7
- [Release notes](https://github.com/juliangruber/brace-expansion/releases )
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v2.1.0...v2.1.7 )
Updates `brace-expansion` from 5.0.6 to 5.0.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases )
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v2.1.0...v2.1.7 )
---
updated-dependencies:
- dependency-name: brace-expansion
dependency-version: 2.1.7
dependency-type: indirect
- dependency-name: brace-expansion
dependency-version: 5.0.12
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-01 12:54:34 +00:00
Salman Muin Kayser Chishti
6fd4031cf0
Merge pull request #2469 from actions/dependabot/npm_and_yarn/packages/artifact/artifact-minor-patch-e133483122
...
chore(deps): bump the artifact-minor-patch group across 1 directory with 7 updates
2026-10-01 13:44:27 +01:00
dependabot[bot]
8cf2b4bc5a
chore(deps): bump the artifact-minor-patch group across 1 directory with 7 updates
...
Bumps the artifact-minor-patch group with 7 updates in the /packages/artifact directory:
| Package | From | To |
| --- | --- | --- |
| [@azure/storage-blob](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/storage/storage-blob ) | `12.31.0` | `12.34.0` |
| [@octokit/core](https://github.com/octokit/core.js ) | `7.0.6` | `7.0.8` |
| [@octokit/plugin-retry](https://github.com/octokit/plugin-retry.js ) | `8.1.0` | `8.1.1` |
| [@octokit/request](https://github.com/octokit/request.js ) | `10.0.8` | `10.0.16` |
| [@octokit/request-error](https://github.com/octokit/request-error.js ) | `7.1.0` | `7.1.2` |
| [typedoc](https://github.com/TypeStrong/TypeDoc ) | `0.28.19` | `0.28.20` |
| [typedoc-plugin-markdown](https://github.com/typedoc2md/typedoc-plugin-markdown/tree/HEAD/packages/typedoc-plugin-markdown ) | `4.11.0` | `4.13.1` |
Updates `@azure/storage-blob` from 12.31.0 to 12.34.0
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases )
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/storage/storage-blob/CHANGELOG.md )
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/storage-blob_12.34.0/sdk/storage/storage-blob )
Updates `@octokit/core` from 7.0.6 to 7.0.8
- [Release notes](https://github.com/octokit/core.js/releases )
- [Commits](https://github.com/octokit/core.js/compare/v7.0.6...v7.0.8 )
Updates `@octokit/plugin-retry` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/octokit/plugin-retry.js/releases )
- [Commits](https://github.com/octokit/plugin-retry.js/compare/v8.1.0...v8.1.1 )
Updates `@octokit/request` from 10.0.8 to 10.0.16
- [Release notes](https://github.com/octokit/request.js/releases )
- [Commits](https://github.com/octokit/request.js/compare/v10.0.8...v10.0.16 )
Updates `@octokit/request-error` from 7.1.0 to 7.1.2
- [Release notes](https://github.com/octokit/request-error.js/releases )
- [Commits](https://github.com/octokit/request-error.js/compare/v7.1.0...v7.1.2 )
Updates `typedoc` from 0.28.19 to 0.28.20
- [Release notes](https://github.com/TypeStrong/TypeDoc/releases )
- [Changelog](https://github.com/TypeStrong/typedoc/blob/master/CHANGELOG.md )
- [Commits](https://github.com/TypeStrong/TypeDoc/compare/v0.28.19...v0.28.20 )
Updates `typedoc-plugin-markdown` from 4.11.0 to 4.13.1
- [Release notes](https://github.com/typedoc2md/typedoc-plugin-markdown/releases )
- [Changelog](https://github.com/typedoc2md/typedoc-plugin-markdown/blob/main/packages/typedoc-plugin-markdown/CHANGELOG.md )
- [Commits](https://github.com/typedoc2md/typedoc-plugin-markdown/commits/typedoc-plugin-markdown@4.13.1/packages/typedoc-plugin-markdown )
---
updated-dependencies:
- dependency-name: "@azure/storage-blob"
dependency-version: 12.33.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: artifact-minor-patch
- dependency-name: "@octokit/core"
dependency-version: 7.0.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: artifact-minor-patch
- dependency-name: "@octokit/plugin-retry"
dependency-version: 8.1.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: artifact-minor-patch
- dependency-name: "@octokit/request"
dependency-version: 10.0.13
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: artifact-minor-patch
- dependency-name: "@octokit/request-error"
dependency-version: 7.1.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: artifact-minor-patch
- dependency-name: typedoc
dependency-version: 0.28.20
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: artifact-minor-patch
- dependency-name: typedoc-plugin-markdown
dependency-version: 4.12.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: artifact-minor-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-30 18:33:23 +00:00
dependabot[bot]
5f6989a275
chore(deps): bump undici from 6.28.0 to 6.29.0 in /packages/artifact
...
Bumps [undici](https://github.com/nodejs/undici ) from 6.28.0 to 6.29.0.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v6.28.0...v6.29.0 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 6.29.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-29 12:08:17 +00:00
Salman Chishti
ee10f4bb93
Merge pull request #2458 from actions/dependabot/npm_and_yarn/packages/artifact/linkify-it-5.0.2
...
chore(deps): bump linkify-it from 5.0.1 to 5.0.2 in /packages/artifact
2026-07-28 12:22:40 +01:00
Salman Chishti
2ca49df401
Merge pull request #2399 from actions/dependabot/npm_and_yarn/packages/artifact/fast-xml-builder-1.2.0
...
chore(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 in /packages/artifact
2026-07-28 12:17:48 +01:00
dependabot[bot]
fd3d8cb4a7
chore(deps): bump linkify-it from 5.0.1 to 5.0.2 in /packages/artifact
...
Bumps [linkify-it](https://github.com/markdown-it/linkify-it ) from 5.0.1 to 5.0.2.
- [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md )
- [Commits](https://github.com/markdown-it/linkify-it/compare/5.0.1...5.0.2 )
---
updated-dependencies:
- dependency-name: linkify-it
dependency-version: 5.0.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-28 11:14:49 +00:00
Salman Chishti
a2c5832461
Merge pull request #2432 from actions/dependabot/npm_and_yarn/packages/artifact/markdown-it-14.2.0
...
chore(deps): bump markdown-it from 14.1.1 to 14.2.0 in /packages/artifact
2026-07-28 12:12:36 +01:00
dependabot[bot]
ae80a558f7
chore(deps): bump undici from 6.24.0 to 6.28.0 in /packages/artifact
...
Bumps [undici](https://github.com/nodejs/undici ) from 6.24.0 to 6.28.0.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v6.24.0...v6.28.0 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 6.28.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-27 00:42:16 +00:00
dependabot[bot]
96fdfa8c67
chore(deps): bump markdown-it in /packages/artifact
...
Bumps [markdown-it](https://github.com/markdown-it/markdown-it ) from 14.1.1 to 14.2.0.
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md )
- [Commits](https://github.com/markdown-it/markdown-it/compare/14.1.1...14.2.0 )
---
updated-dependencies:
- dependency-name: markdown-it
dependency-version: 14.2.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-16 18:14:03 +00:00
Jason Ginchereau
7d543f4d05
Handle cache write error due to read-only token
2026-06-16 08:03:28 -10:00
Jason Ginchereau
5ce4d00c1a
Audit fix packages
2026-06-11 17:22:31 -07:00
dependabot[bot]
cf1ffc9670
chore(deps): bump fast-xml-builder in /packages/artifact
...
Bumps [fast-xml-builder](https://github.com/NaturalIntelligence/fast-xml-builder ) from 1.1.5 to 1.2.0.
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-builder/blob/main/CHANGELOG.md )
- [Commits](https://github.com/NaturalIntelligence/fast-xml-builder/compare/v1.1.5...v1.2.0 )
---
updated-dependencies:
- dependency-name: fast-xml-builder
dependency-version: 1.2.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-08 16:48:02 +00:00
Joshua Brooks
6bbe8ec8c6
Merge pull request #2393 from actions/samirat/update_minor_dependency_versions
...
Update minor versions of cache and artifact dependencies
2026-05-07 15:59:39 -04:00
Joshua Brooks
8aecc9ccf2
Bump toolkit version, add release notes
2026-05-01 17:38:16 +00:00
Joshua Brooks
ad5973e375
Move @protobuf-ts/plugin to devDependencies
2026-05-01 16:38:16 +00:00
Joshua Brooks
6ea8732b22
Audit npm packages
2026-05-01 16:33:28 +00:00
Joshua Brooks
f1f734fc73
Update minor versions of cache and artifact dependencies
2026-05-01 16:27:55 +00:00
Salman Chishti
f1ea4fbf4a
Merge pull request #2344 from actions/dependabot/npm_and_yarn/packages/artifact/undici-6.24.0
...
chore(deps): bump undici from 6.23.0 to 6.24.0 in /packages/artifact
2026-03-14 04:35:35 +00:00
dependabot[bot]
b248b616d6
chore(deps): bump undici from 6.23.0 to 6.24.0 in /packages/artifact
...
Bumps [undici](https://github.com/nodejs/undici ) from 6.23.0 to 6.24.0.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v6.23.0...v6.24.0 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 6.24.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-14 04:17:32 +00:00
Daniel Kennedy
9ed79d8596
Artifact: support downloading artifacts with CJK characters in their name ( #2341 )
...
* Artifact: support downloading artifacts with CJK characters in their name
* Fix some linting/PR comments
* One more linting fix
2026-03-11 09:30:15 -04:00
Zachary Taylor
c7e9f2925a
Merge pull request #2323 from actions/zaataylor-update-artifact-storage-err-msg
...
Update artifact storage error message
2026-02-26 14:37:38 -05:00
Zachary Taylor
49197ce3fe
Update error message
2026-02-26 14:28:46 -05:00
Daniel Kennedy
2b2de3eaff
Artifact upload: support uploading single un-zipped files ( #2256 )
...
* Artifact upload: support uploading single un-zipped files
* Fix linters
* Fix lint again
* Fix tests
* Check for 0 sized artifact lists
* Add some more stream tests and handle an upload failure gracefully
* Add CI tests for non-zipped artifacts
* Add an html report to test rendering in the browser
* Fix linting issue
* Artifact: bump the version and add release notes
* Fix Windows tests
* Fix linting
* stream: switch the error details to error type
* Refactor the validation logic in `uploadArtifact` a bit
* Added more details about how the name parameter is handled
2026-02-25 11:01:38 -05:00
dependabot[bot]
d854ac5822
chore(deps): bump fast-xml-parser in /packages/artifact ( #2285 )
...
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser ) from 5.3.3 to 5.3.4.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases )
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md )
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.3...v5.3.4 )
---
updated-dependencies:
- dependency-name: fast-xml-parser
dependency-version: 5.3.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-30 16:26:32 -05:00
Daniel Kennedy and Copilot
471c2154b5
Artifact download: don't unzip non-zip artifacts ( #2253 )
...
* Download artifact: don't extract the downloaded file if the content-type isn't a zip
* Remove unused `import`
* Add support for specifying whether to skip decompressing
* Prevent path traversal attacks
* Fix indenting
* Update packages/artifact/__tests__/download-artifact.test.ts
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Parse the mime type out of the content-type header
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Fix some linting issues
* Swap `zip` for `application/zip-compressed`
* Test: negative check for malicious paths
* Increase the timeout on one of the tests
* Check the URL path for `.zip` to see if we can auto-decompress
* Fix linting issue
* Bump the package version and add release notes
* Remove `launch.json`
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-01-30 12:18:38 -05:00
Daniel Kennedy
0df0288961
@actions/artifact: convert to an ESM module (#2266 )
...
* `@actions/artifact`: convert to an ESM module
* Update the package-lock.json
* Undo the GHES ignores
* Fix the reference to `@actions/http-client` in the lock file
* Bump `@actions/core` to `3.0.0`
* Remove `jest.config.cjs`
* Import `OctoKitOptions` from `@octokit/core/types`
* Pull the package version from `package.json`
* Workaround getting the package version for the user-agent
* Fix the `archiver` import
* Fix linting
2026-01-29 09:52:09 -05:00
Daniel Kennedy
1b79e49863
Bump @actions/http-client and @actions/github on all packages
2026-01-27 13:31:31 -05:00
Lokesh Gopu
bb950a9c98
Merge pull request #2249 from actions/fix/upgrade-octokit-dependencies
...
upgrade octokit dependencies
2026-01-22 14:46:12 -05:00
Lokesh Gopu
2f1b7faba3
upgrade octokit dependencies
2026-01-22 11:59:59 -05:00
Salman Chishti
6cc3d69af4
Merge pull request #2248 from actions/dependabot/npm_and_yarn/lodash-4.17.23
...
chore(deps): bump lodash from 4.17.21 to 4.17.23
2026-01-22 14:48:46 +00:00
dependabot[bot]
d6de7c421c
chore(deps): bump lodash from 4.17.21 to 4.17.23
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.17.23
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-22 00:03:54 +00:00
copilot-swe-agent[bot] and TingluoHuang
9c1ca9f0bd
Fix package-lock.json to mark typescript as dev dependency
...
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com >
2026-01-07 22:10:30 +00:00
copilot-swe-agent[bot] and TingluoHuang
65aec61dae
Verify changes with tests - all package-specific tests passing
...
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com >
2026-01-07 22:03:56 +00:00
copilot-swe-agent[bot] and TingluoHuang
1ea52b8bf0
Update all packages to use @actions/http-client@^3.0.1 and bump patch versions
...
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com >
2026-01-07 21:55:41 +00:00
copilot-swe-agent[bot]
99a3679f2e
Initial plan
2026-01-07 21:51:58 +00:00
Tingluo Huang
24c86a7dcc
Merge pull request #2231 from actions/copilot/prepare-http-client-release
...
Release @actions/http-client v3.0.1
2026-01-07 15:35:32 -05:00
copilot-swe-agent[bot]
65facf1806
Initial plan
2026-01-07 18:02:29 +00:00
Tingluo Huang
f3973714ff
Merge pull request #2229 from actions/copilot/extend-user-agent-http-requests
...
Extend user-agent with orchestration ID and add default user-agent
2026-01-07 10:42:56 -05:00
copilot-swe-agent[bot] and TingluoHuang
6d12bac7fe
Revert unrelated version bumps in package-lock.json files
...
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com >
2026-01-06 17:50:28 +00:00
copilot-swe-agent[bot] and TingluoHuang
f168c1bfe4
Format code and update .gitignore to exclude .nx cache
...
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com >
2026-01-06 15:36:15 +00:00
copilot-swe-agent[bot] and TingluoHuang
9b7bfcc858
Add ACTIONS_ORCHESTRATION_ID support to http-client user-agent
...
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com >
2026-01-06 15:32:55 +00:00