dependabot[bot]
d854ac5822
chore(deps): bump fast-xml-parser in /packages/artifact ( #2285 )
...
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser ) from 5.3.3 to 5.3.4.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases )
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md )
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.3...v5.3.4 )
---
updated-dependencies:
- dependency-name: fast-xml-parser
dependency-version: 5.3.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-30 16:26:32 -05:00
Daniel Kennedy and Copilot
471c2154b5
Artifact download: don't unzip non-zip artifacts ( #2253 )
...
* Download artifact: don't extract the downloaded file if the content-type isn't a zip
* Remove unused `import`
* Add support for specifying whether to skip decompressing
* Prevent path traversal attacks
* Fix indenting
* Update packages/artifact/__tests__/download-artifact.test.ts
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Parse the mime type out of the content-type header
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Fix some linting issues
* Swap `zip` for `application/zip-compressed`
* Test: negative check for malicious paths
* Increase the timeout on one of the tests
* Check the URL path for `.zip` to see if we can auto-decompress
* Fix linting issue
* Bump the package version and add release notes
* Remove `launch.json`
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-01-30 12:18:38 -05:00
Daniel Kennedy
0df0288961
@actions/artifact: convert to an ESM module (#2266 )
...
* `@actions/artifact`: convert to an ESM module
* Update the package-lock.json
* Undo the GHES ignores
* Fix the reference to `@actions/http-client` in the lock file
* Bump `@actions/core` to `3.0.0`
* Remove `jest.config.cjs`
* Import `OctoKitOptions` from `@octokit/core/types`
* Pull the package version from `package.json`
* Workaround getting the package version for the user-agent
* Fix the `archiver` import
* Fix linting
2026-01-29 09:52:09 -05:00
Daniel Kennedy
1b79e49863
Bump @actions/http-client and @actions/github on all packages
2026-01-27 13:31:31 -05:00
Lokesh Gopu
bb950a9c98
Merge pull request #2249 from actions/fix/upgrade-octokit-dependencies
...
upgrade octokit dependencies
2026-01-22 14:46:12 -05:00
Lokesh Gopu
2f1b7faba3
upgrade octokit dependencies
2026-01-22 11:59:59 -05:00
Salman Chishti
6cc3d69af4
Merge pull request #2248 from actions/dependabot/npm_and_yarn/lodash-4.17.23
...
chore(deps): bump lodash from 4.17.21 to 4.17.23
2026-01-22 14:48:46 +00:00
dependabot[bot]
d6de7c421c
chore(deps): bump lodash from 4.17.21 to 4.17.23
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.17.23
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-22 00:03:54 +00:00
copilot-swe-agent[bot] and TingluoHuang
9c1ca9f0bd
Fix package-lock.json to mark typescript as dev dependency
...
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com >
2026-01-07 22:10:30 +00:00
copilot-swe-agent[bot] and TingluoHuang
65aec61dae
Verify changes with tests - all package-specific tests passing
...
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com >
2026-01-07 22:03:56 +00:00
copilot-swe-agent[bot] and TingluoHuang
1ea52b8bf0
Update all packages to use @actions/http-client@^3.0.1 and bump patch versions
...
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com >
2026-01-07 21:55:41 +00:00
copilot-swe-agent[bot]
99a3679f2e
Initial plan
2026-01-07 21:51:58 +00:00
Tingluo Huang
24c86a7dcc
Merge pull request #2231 from actions/copilot/prepare-http-client-release
...
Release @actions/http-client v3.0.1
2026-01-07 15:35:32 -05:00
copilot-swe-agent[bot]
65facf1806
Initial plan
2026-01-07 18:02:29 +00:00
Tingluo Huang
f3973714ff
Merge pull request #2229 from actions/copilot/extend-user-agent-http-requests
...
Extend user-agent with orchestration ID and add default user-agent
2026-01-07 10:42:56 -05:00
copilot-swe-agent[bot] and TingluoHuang
6d12bac7fe
Revert unrelated version bumps in package-lock.json files
...
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com >
2026-01-06 17:50:28 +00:00
copilot-swe-agent[bot] and TingluoHuang
f168c1bfe4
Format code and update .gitignore to exclude .nx cache
...
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com >
2026-01-06 15:36:15 +00:00
copilot-swe-agent[bot] and TingluoHuang
9b7bfcc858
Add ACTIONS_ORCHESTRATION_ID support to http-client user-agent
...
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com >
2026-01-06 15:32:55 +00:00
copilot-swe-agent[bot]
8552fb83eb
Initial plan
2026-01-06 15:22:42 +00:00
Salman Chishti
63e9f3aaac
Merge pull request #2212 from actions/artifact-v5.0.1-release
...
docs(artifact): release @actions/artifact v5.0.1
2025-12-12 15:39:59 +00:00
Salman Muin Kayser Chishti
e26daf5184
docs: add PR reference to artifact v5.0.1 release notes
2025-12-12 15:33:41 +00:00
Salman Muin Kayser Chishti
10deef0cd7
Merge remote-tracking branch 'origin/main' into artifact-v5.0.1-release
2025-12-12 15:33:18 +00:00
Salman Chishti
9acc27542f
Merge pull request #2211 from actions/fix-artifact-storage-blob
...
fix(artifact): update @azure/storage-blob to fix Node.js 24 punycode deprecation
2025-12-12 15:29:23 +00:00
Salman Muin Kayser Chishti
b80ccfe860
fix(artifact): update @azure/storage-blob to ^12.29.1 and remove deprecated packages
2025-12-12 15:01:31 +00:00
Salman Muin Kayser Chishti
4548c91489
docs(artifact): bump to v5.0.1 and add release notes
2025-12-12 13:40:07 +00:00
Salman Muin Kayser Chishti
c431966b6d
fix(artifact): update @azure/storage-blob to ^12.29.1 to fix punycode deprecation
...
- Removed direct @azure/core-http dependency
- Updated @azure/storage-blob from ^12.15.0 to ^12.29.1
- Newer storage-blob uses @azure/core-rest-pipeline instead of deprecated @azure/core-http
- Fixes Node.js 24 deprecation warning for punycode module
2025-12-12 13:38:13 +00:00
Salman Chishti
2d1f36ca56
Merge pull request #2210 from actions/prepare-artifact-release
...
docs(artifact): add v5.0.0 release notes
2025-12-11 21:42:59 +00:00
Salman Muin Kayser Chishti
3b2d94b830
chore(artifact): bump version to v5.0.0
2025-12-11 20:45:49 +00:00
Salman Muin Kayser Chishti
be6dbbc5ae
docs(artifact): add v5.0.0 release notes
2025-12-11 20:37:18 +00:00
Salman Chishti
d160aaacea
Merge pull request #2209 from actions/version-bumps
...
chore(artifact): bump dependencies for Node.js 24 support
2025-12-11 20:23:43 +00:00
Salman Muin Kayser Chishti
eb97dc5da8
chore(artifact): bump dependencies for Node.js 24 support
2025-12-11 19:20:51 +00:00
Salman Chishti
4c92940ec3
Merge pull request #2193 from actions/fix-audit-vulnerabilities
...
chore: fix npm audit vulnerabilities (glob, js-yaml)
2025-12-09 15:39:33 +00:00
Salman Muin Kayser Chishti
adf24a070c
chore: fix npm audit vulnerabilities (glob, js-yaml)
2025-12-08 21:14:00 +00:00
Daniel Kennedy
5771b4310d
Merge pull request #2168 from actions/danwkennedy/prepare-4.0.0
...
Artifact: prepare `v4.0.0`
2025-10-24 13:38:36 -04:00
Daniel Kennedy
b41153ff68
Artifact: prepare 4.0.0
2025-10-24 13:28:26 -04:00
Austen Stone
0ffbac0478
linting
2025-10-22 11:44:21 -04:00
Austen Stone
fde152df4b
style: wrap ACTIONS_ARTIFACT_MAX_ARTIFACT_COUNT env var assignment for readability
2025-10-22 11:42:01 -04:00
Austen Stone
c08d2024bb
fix: ensure max artifact count variable is treated as a string
2025-10-22 07:47:51 -04:00
Austen Stone
2d922f08cb
fix: remove redundant check for max artifact count variable
2025-10-22 07:41:31 -04:00
Austen Stone and Bassem Dghaidi
82e194b0fb
Apply suggestion from @Link-
...
Co-authored-by: Bassem Dghaidi <568794+Link-@users.noreply.github.com >
2025-10-22 07:39:45 -04:00
Austen Stone
a69f5c7f0c
fix: resolve critical pagination bugs and add comprehensive testing
...
- Fix off-by-one error in pagination loop (< to <=) that prevented fetching last page
- Add Math.ceil() to maxNumberOfPages calculation for proper limit handling
- Replace hardcoded 2000 limit with configurable getMaxArtifactListCount()
- Add pagination test for multi-page artifact listing
- Add environment variable test for ACTIONS_ARTIFACT_MAX_ARTIFACT_COUNT
- Add comprehensive test coverage for getMaxArtifactListCount() function
Fixes compound bug where pagination and limit logic capped results at 900 artifacts instead of intended 1000.
2025-10-21 09:22:11 -04:00
functionstackx and Copilot
03d28f5ecf
Update packages/artifact/src/internal/find/list-artifacts.ts
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-10-17 18:05:06 -04:00
functionstackx
44683b6855
fix: bumping max list artifact to 2k
2025-10-16 23:13:34 -04:00
Salman Chishti
bb8b40a738
Support Nodejs.24 - Merge pull request #2110 from actions/salmanmkc/node24
...
Support Node.js 24
2025-10-16 16:25:47 +01:00
Salman Muin Kayser Chishti
767faedf93
lint
2025-10-15 17:08:33 +01:00
Salman Muin Kayser Chishti
6c4051f635
Merge remote-tracking branch 'origin/main' into salmanmkc/node24
2025-10-15 16:41:54 +01:00
Salman Muin Kayser Chishti
dd8c22d213
rebase led to this changing so reverting
2025-10-15 16:37:38 +01:00
Salman Muin Kayser Chishti
4d50da2476
override for node-fetch
2025-10-15 16:28:21 +01:00
Daniel Kennedy
9ade3233e3
fix: only mock the cpus() function on the os module instead of the whole module
2025-10-15 16:26:39 +01:00
Daniel Kennedy
27b1fd90ee
Take a direct dependency on @azure/core-http
2025-10-15 16:26:39 +01:00