Commit Graph
99 Commits
Author SHA1 Message Date
Daniel Kennedy 2b2de3eaff Artifact upload: support uploading single un-zipped files (#2256)
* Artifact upload: support uploading single un-zipped files

* Fix linters

* Fix lint again

* Fix tests

* Check for 0 sized artifact lists

* Add some more stream tests and handle an upload failure gracefully

* Add CI tests for non-zipped artifacts

* Add an html report to test rendering in the browser

* Fix linting issue

* Artifact: bump the version and add release notes

* Fix Windows tests

* Fix linting

* stream: switch the error details to error type

* Refactor the validation logic in `uploadArtifact` a bit

* Added more details about how the name parameter is handled
2026-02-25 11:01:38 -05:00
dependabot[bot] d854ac5822 chore(deps): bump fast-xml-parser in /packages/artifact (#2285)
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.3.3 to 5.3.4.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.3...v5.3.4)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.3.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-30 16:26:32 -05:00
Daniel KennedyandCopilot 471c2154b5 Artifact download: don't unzip non-zip artifacts (#2253)
* Download artifact: don't extract the downloaded file if the content-type isn't a zip

* Remove unused `import`

* Add support for specifying whether to skip decompressing

* Prevent path traversal attacks

* Fix indenting

* Update packages/artifact/__tests__/download-artifact.test.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Parse the mime type out of the content-type header

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Fix some linting issues

* Swap `zip` for `application/zip-compressed`

* Test: negative check for malicious paths

* Increase the timeout on one of the tests

* Check the URL path for `.zip` to see if we can auto-decompress

* Fix linting issue

* Bump the package version and add release notes

* Remove `launch.json`

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-01-30 12:18:38 -05:00
Daniel Kennedy 0df0288961 @actions/artifact: convert to an ESM module (#2266)
* `@actions/artifact`: convert to an ESM module

* Update the package-lock.json

* Undo the GHES ignores

* Fix the reference to `@actions/http-client` in the lock file

* Bump `@actions/core` to `3.0.0`

* Remove `jest.config.cjs`

* Import `OctoKitOptions` from `@octokit/core/types`

* Pull the package version from `package.json`

* Workaround getting the package version for the user-agent

* Fix the `archiver` import

* Fix linting
2026-01-29 09:52:09 -05:00
Daniel Kennedy 1b79e49863 Bump @actions/http-client and @actions/github on all packages 2026-01-27 13:31:31 -05:00
Lokesh Gopu bb950a9c98 Merge pull request #2249 from actions/fix/upgrade-octokit-dependencies
upgrade octokit dependencies
2026-01-22 14:46:12 -05:00
Lokesh Gopu 2f1b7faba3 upgrade octokit dependencies 2026-01-22 11:59:59 -05:00
dependabot[bot] d6de7c421c chore(deps): bump lodash from 4.17.21 to 4.17.23
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-22 00:03:54 +00:00
copilot-swe-agent[bot]andTingluoHuang 9c1ca9f0bd Fix package-lock.json to mark typescript as dev dependency
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
2026-01-07 22:10:30 +00:00
copilot-swe-agent[bot]andTingluoHuang 65aec61dae Verify changes with tests - all package-specific tests passing
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
2026-01-07 22:03:56 +00:00
Salman Muin Kayser Chishti b80ccfe860 fix(artifact): update @azure/storage-blob to ^12.29.1 and remove deprecated packages 2025-12-12 15:01:31 +00:00
Salman Muin Kayser Chishti 3b2d94b830 chore(artifact): bump version to v5.0.0 2025-12-11 20:45:49 +00:00
Salman Muin Kayser Chishti eb97dc5da8 chore(artifact): bump dependencies for Node.js 24 support 2025-12-11 19:20:51 +00:00
Salman Muin Kayser Chishti adf24a070c chore: fix npm audit vulnerabilities (glob, js-yaml) 2025-12-08 21:14:00 +00:00
Daniel Kennedy b41153ff68 Artifact: prepare 4.0.0 2025-10-24 13:28:26 -04:00
Salman Muin Kayser Chishti dd8c22d213 rebase led to this changing so reverting 2025-10-15 16:37:38 +01:00
Daniel Kennedy 27b1fd90ee Take a direct dependency on @azure/core-http 2025-10-15 16:26:39 +01:00
dependabot[bot] a270ddba54 Bump the artifact-minor-patch group in /packages/artifact with 5 updates
Bumps the artifact-minor-patch group in /packages/artifact with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.10.0` | `1.11.1` |
| [@azure/storage-blob](https://github.com/Azure/azure-sdk-for-js) | `12.15.0` | `12.28.0` |
| [@protobuf-ts/plugin](https://github.com/timostamm/protobuf-ts/tree/HEAD/packages/plugin) | `2.9.1` | `2.11.1` |
| [typedoc](https://github.com/TypeStrong/TypeDoc) | `0.25.4` | `0.28.13` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.2.2` | `5.9.2` |

Updates `@actions/core` from 1.10.0 to 1.11.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@azure/storage-blob` from 12.15.0 to 12.28.0
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/storage-blob_12.15.0...@azure/storage-blob_12.28.0)

Updates `@protobuf-ts/plugin` from 2.9.1 to 2.11.1
- [Release notes](https://github.com/timostamm/protobuf-ts/releases)
- [Commits](https://github.com/timostamm/protobuf-ts/commits/v2.11.1/packages/plugin)

Updates `typedoc` from 0.25.4 to 0.28.13
- [Release notes](https://github.com/TypeStrong/TypeDoc/releases)
- [Changelog](https://github.com/TypeStrong/typedoc/blob/master/CHANGELOG.md)
- [Commits](https://github.com/TypeStrong/TypeDoc/compare/v0.25.4...v0.28.13)

Updates `typescript` from 5.2.2 to 5.9.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.2.2...v5.9.2)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: artifact-minor-patch
- dependency-name: "@azure/storage-blob"
  dependency-version: 12.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: artifact-minor-patch
- dependency-name: "@protobuf-ts/plugin"
  dependency-version: 2.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: artifact-minor-patch
- dependency-name: typedoc
  dependency-version: 0.28.13
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: artifact-minor-patch
- dependency-name: typescript
  dependency-version: 5.9.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: artifact-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-15 16:25:54 +01:00
Salman Muin Kayser Chishti 5b74929b57 update with dist updates 2025-10-15 16:22:51 +01:00
Salman Muin Kayser Chishti 17ebabbb66 changes 2025-09-08 15:37:51 +01:00
Salman Muin Kayser Chishti 5f809a3ae7 package updates 2025-09-04 15:15:02 +01:00
Ryan Ghadimi d509a46b27 release prep 2025-05-08 08:53:55 +00:00
Ryan Ghadimi 555f3a838f bump octokit core 2025-05-08 08:42:32 +00:00
Ryan Ghadimi 6a14113ef5 artifact deps 2025-05-08 08:38:48 +00:00
Salman Chishti 705c3cb65b Use patch instead of minor 2025-03-17 14:08:42 +00:00
Salman Chishti cdb472f8df update package-lock.json 2025-03-17 12:47:54 +00:00
Ryan Ghadimi 018cdd4a67 Bump package.json 2025-03-11 11:02:42 +00:00
Ryan Ghadimi fa36e53df3 Update @actions/artifact version to 2.3.0 2025-03-10 15:12:36 +00:00
Ryan Ghadimi cb739e556a Prepare for Artifact v2.2.3 release 2025-03-07 10:14:36 +00:00
Yang Cao 4a943960e9 Update package-lock.json 2025-02-20 21:20:28 +00:00
Rob Herley ff2d191cdb remove runtime dependency on twirp-ts 2025-01-27 17:52:55 +00:00
Yang Cao 9648a10b0e Prep release packages/artifact v2.2.1 2025-01-08 21:11:59 +00:00
Brian DeHamer aea8a909c1 Prepare artifact release 2.2.0
Signed-off-by: Brian DeHamer <bdehamer@github.com>
2024-12-17 10:05:45 -08:00
Bassem Dghaidi 55c6356780 Bump cross-spawn to 7.0.6 2024-11-20 14:02:54 -08:00
Rob Herley 0e9da186e3 properly resolve relative symlinks 2024-10-08 12:35:48 -04:00
JoannaaKL 2cc6a5704e Merge pull request #1815 from mydea/fn/remove-crypto
Use native `crypto` package from node
2024-10-07 11:06:38 +02:00
Rob Herley 1d791b3c9d bump package lock version 2024-10-01 16:43:30 -04:00
Rob Herley dc351c35a6 fix regression, auto readlink on symlinks again 2024-09-20 17:23:43 -04:00
Francesco Novy e51da2b6a0 update lockfile 2024-08-30 09:41:33 +02:00
Rob Herley 6356096f1f bump pkg lock 2024-07-31 10:12:04 -04:00
Rob Herley affc595ccf npm audit fix 2024-07-03 17:03:40 +00:00
bethanyj28 2b41bccf5b bump version 2024-04-23 16:03:52 -04:00
bethanyj28 f850f97534 use latest unzip-stream 2024-04-23 15:54:54 -04:00
Vallie Joseph 8d1ee1b614 correcting imports 2024-04-15 16:49:47 +00:00
Vallie Joseph aa47e72426 cleaning up tests 2024-04-15 16:32:31 +00:00
Vallie Joseph e455efe4f9 . 2024-04-09 19:01:54 +00:00
Vallie Joseph a9276099d3 updating tests 2024-04-09 18:21:41 +00:00
Vallie Joseph ae1355a62d upgrading archiver package along with chunk timeout 2024-04-09 18:02:48 +00:00
bethanyj28 90aeaf249b bump version 2024-03-01 13:04:16 -05:00
bethanyj28 3a714c000c update to 2.1.3 2024-02-26 10:18:02 -05:00