qmuntal
ad9941188f
feat: split Go module and build caches
...
Reuse downloaded modules across Go versions, runner architectures, and
runner images on the same OS instead of duplicating them in each build
cache archive.
Restore and save each entry independently, running operations in parallel
when safe. Serialize restores for overlapping or aliased paths, preserve
the original paths for the post step, and report cache-hit only when both
entries match their primary keys.
Update the documented manual restore keys and generated action bundles.
2026-10-05 15:05:38 +02:00
qmuntal
0464ec84ca
chore(deps): bump @actions/cache to 6.3.0
...
Pick up the Windows BSD tar temporary-file isolation fix from
actions/toolkit#2497 .
Update the lockfile, license records, and generated action bundles.
2026-09-28 14:04:32 +02:00
3bfff43db6
Preserve native Go environment names in action outputs ( #793 )
...
* preserve native Go environment names in action outputs
* implement review comment
* Add missing trailing newline to action.yml
---------
Co-authored-by: mahabaleshwars <[email protected]
2026-09-25 10:35:28 -05:00
e626ada899
Expose go env variables as action outputs ( #791 )
...
* feature implementation - output go env
* update action.yml
* fix action.yml
---------
Co-authored-by: mahabaleshwars <[email protected]
2026-09-18 10:05:51 -05:00
fba3fb4ead
fix: resolve audit/license failures ( #784 )
...
* fix: resolve brace-expansion high-severity vulnerability, refresh license cache, rebuild dist
- Regenerated package-lock.json to pick up [email protected] (fixes
GHSA-rgw5-rvv9-x895, a DoS via unbounded intermediate arrays), which
is already permitted by minimatch's existing ^5.0.8 semver range.
- Refreshed .licenses/npm cache to match the updated dependency tree.
- Added minimatch to the licensed.yml reviewed list: its detected
license text doesn't cleanly match Blue Oak 1.0.0, which is already
in the allowed list.
- Rebuilt dist/setup and dist/cache-save from source.
npm audit --audit-level=high now reports 0 vulnerabilities;
licensed status reports 0 errors; npm run pre-checkin passes locally.
Co-authored-by: Copilot <[email protected] [email protected]
2026-08-19 10:06:05 -05:00
Haritha and GitHub
5064d95ba1
Upgrade checkout refs and docs to v7 ( #779 )
...
* chore: upgrade checkout/setup-go refs to v7
* chore: commit remaining dependency, license, and dist updates
2026-07-27 15:26:25 -05:00
b7ad1dad31
chore(deps): bump @actions/cache to 6.2.0 ( #771 )
...
* chore(deps): bump @actions/cache to 5.2.0
Co-authored-by: Copilot App <[email protected] [email protected] [email protected] [email protected]
2026-07-15 21:47:49 -05:00
Priya Gupta and GitHub
0778a10ce4
Migrate to ESM and upgrade dependencies ( #763 )
...
* Migrate to ESM and upgrade dependencies
* Remove unused tsconfig.eslint.json
* bump version to 7.0.0 in package.json and package-lock.json
* Add ESM migration note to README for V7
* Remove unnecessary devDependencies: ts-node, @types/jest
* npm audit fix
* Update README with ESM migration details
Clarified migration details to ESM for action compatibility.
* Downgrade @types/node to ^24, clean up tsconfig and README.
2026-07-15 15:34:36 -05:00
Haritha and GitHub
924ae3a1cd
chore: bump version to 6.5.0 in package.json and package-lock.json ( #762 )
...
* chore: bump version to 6.5.0 in package.json and package-lock.json
* chore: update README.md for improved clarity and structure
* License update
2026-06-23 12:03:17 -05:00
Jason Ginchereau and GitHub
e91cc3bfe0
Bump @actions/cache to 5.1.0, log cache write denied ( #758 )
...
* Bump @actions/cache to 5.1.0, log cache write denied
* Add cache save tests
* Re-trigger CI
2026-06-22 14:14:01 -05:00
Haritha and GitHub
4a2405e6ae
chore: update @types/node and @typescript-eslint dependencies to latest versions ( #755 )
2026-06-16 11:46:40 -05:00
78961f6f84
chore: update @actions dependencies and refresh license cache ( #744 )
...
Agent-Logs-Url: https://github.com/actions/setup-go/sessions/0e15a7f6-9e3f-4b17-98fc-7c6501a56b31
Co-authored-by: copilot-swe-agent[bot] <[email protected] [email protected]
2026-04-13 14:45:08 -05:00
27fdb267c1
Bump minimatch from 3.1.2 to 3.1.5 ( #727 )
...
* Bump minimatch from 3.1.2 to 3.1.5
Bumps [minimatch](https://github.com/isaacs/minimatch ) from 3.1.2 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 3.1.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-03-02 15:43:24 -06:00
Priya Gupta and GitHub
a5f9b05d2d
Update default Go module caching to use go.mod ( #705 )
...
* Update module cache to use go.mod as key
* Fix typo
* Revise breaking changes in README for V6
Updated breaking changes section with enhanced formatting and clarified toolchain management details.
2026-01-26 10:59:03 -06:00
ae252ee6fb
Bump @actions/cache to v5 ( #695 )
...
* Bump @actions/cache to version 5.0.0 in package.json and package-lock.json
* Bump @actions/cache to v5
* prepease release 6.0.1
* Bump @actions/cache to v5.0.1
- Resolves punycode deprecation warning
- Updates licensed cache metadata
* upgrade actions/cache to 5.0.1
---------
Co-authored-by: Aparna Jyothi <[email protected]
2026-01-07 10:40:06 -06:00
Matthew Hughes and GitHub
e75c3e80bc
Bump form-data to bring in fix for critical vulnerability ( #618 )
...
The vulnerability:
$ npm audit --audit-level=high
# npm audit report
form-data >=4.0.0 <4.0.4 || <2.5.4
Severity: critical
form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4
form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4
fix available via `npm audit fix`
node_modules/@azure/core-http/node_modules/form-data
node_modules/@types/node-fetch/node_modules/form-data
node_modules/form-data
1 critical severity vulnerability
To address all issues, run:
npm audit fix
This change is the result of from running `npm audit fix` and then
using[1] to update licenses via `licensed cache`.
It doesn't look like `dependabot` previously raised any PRs for this
dependency, so this bumps it from `4.0.0` to `4.0.4`, see the
changelog[2] for details.
Link: https://github.com/licensee/licensed [1]
Link: https://github.com/form-data/form-data/blob/v4.0.4/CHANGELOG.md [2]
2025-08-13 12:02:46 -05:00
7c0b336c9a
Bump typescript from 5.4.2 to 5.8.3 ( #538 )
...
* Bump typescript from 5.4.2 to 5.7.3
Bumps [typescript](https://github.com/microsoft/TypeScript ) from 5.4.2 to 5.7.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases )
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml )
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.4.2...v5.7.3 )
---
updated-dependencies:
- dependency-name: typescript
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2025-07-10 19:26:25 -05:00
6f26dcc668
Bump undici from 5.28.5 to 5.29.0 ( #594 )
...
* Bump undici from 5.28.5 to 5.29.0
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.5 to 5.29.0.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.5...v5.29.0 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 5.29.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2025-07-08 10:07:25 -05:00
aparnajyothi-y and GitHub
691cc3533f
upgrade actions/cache to 4.0.3 ( #574 )
2025-04-01 10:24:42 -05:00
0aaccfd150
Bump undici from 5.28.4 to 5.28.5 ( #541 )
...
* Bump undici from 5.28.4 to 5.28.5
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.4 to 5.28.5.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5 )
---
updated-dependencies:
- dependency-name: undici
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/nodejs/undici ) from 5.28.4 to 5.28.5.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5 )
---
updated-dependencies:
- dependency-name: undici
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2025-03-18 10:29:43 -05:00
aparnajyothi-y and GitHub
c4c1141886
upgrade actions/cache to 4.0.2 ( #568 )
2025-03-11 10:19:54 -05:00
Bassem Dghaidi and GitHub
f81f022188
Use the new cache service: upgrade @actions/cache to ^4.0.0 ( #531 )
...
* Use new cache service
* Add licensed output
* Review licenses & update types
2025-01-15 14:06:31 -06:00
John Wesley Walker III and GitHub
941977282c
Revise isGhes logic ( #511 )
...
* Revise `isGhes` logic
* ran `npm run format`
* added unit test
* tweaked unit test
* ran `npm run format`
2024-10-21 11:56:08 -05:00
0a12ed9d6a
Bump braces from 3.0.2 to 3.0.3 ( #487 )
...
* Bump braces from 3.0.2 to 3.0.3
Bumps [braces](https://github.com/micromatch/braces ) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3 )
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2024-06-27 13:16:26 -05:00
be1aa1186e
Bump undici from 5.28.2 to 5.28.3 ( #465 )
...
* Bump undici from 5.28.2 to 5.28.3
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.2 to 5.28.3.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.2...v5.28.3 )
---
updated-dependencies:
- dependency-name: undici
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2024-03-21 15:04:22 -05:00
Dmitry Shibanov and GitHub
0c52d547c9
Update dependencies for node20 ( #445 )
2023-12-05 17:50:42 +01:00
Dusan Trickovic
0bb97b1c5c
Rebuild after updating Semver
2023-07-18 16:39:08 +02:00
Nikolai Laevskii and GitHub
fac708d667
Bump @actions/cache dependency to v3.2.1 ( #374 )
2023-05-08 11:42:39 +02:00
Dmitry Shibanov and GitHub
dd84a9531a
Update xml2js ( #370 )
2023-04-20 14:28:58 +02:00
Sergey Dolin and GitHub
c51a720768
Enable caching by default with default input ( #332 )
2023-03-10 16:25:35 +01:00
Ivan and GitHub
7406d654ad
Add and configure ESLint and update configuration for Prettier ( #341 )
...
* Turn on ESLint and update Prettier
* Update eslint config
* Update eslint config
* Update dependencies
* Update ESLint and Prettier configurations
* update package.json
* Update prettier command
* Update prettier config file
* Change CRLF to LF
* Update docs
* Update docs
2023-03-08 10:45:16 +02:00
Evgenii Korolevskii and GitHub
17106403fa
Allow to use only GOCACHE for cache ( #305 )
2022-12-19 11:22:17 +01:00
Jongwoo Han and GitHub
bb5ff97ab9
refactor: Use early return pattern to avoid nested conditions ( #302 )
2022-12-16 15:05:54 +01:00
Milos Pantic and GitHub
38dbe75f81
Add stable and oldstable aliases ( #300 )
2022-12-12 10:58:49 +01:00
Francesco Renzi
514ae57904
Update @actions/core to 1.10.0
2022-10-06 12:08:35 +01:00
Evgenii Korolevskii
c4e169859f
prettier format
2022-09-08 15:11:06 +02:00
Evgenii Korolevskii
db58e98a43
format
2022-09-08 14:53:17 +02:00
Evgenii Korolevskii
2905db4069
update build
2022-09-08 13:26:20 +02:00
Evgenii Korolevskii
be45b2722d
build
2022-09-08 12:29:13 +02:00
Vladimir Safonkin
dd64cc9b01
Build dist
2022-07-01 09:28:20 +02:00
Vladimir Safonkin
ed8da5df39
Build js
2022-06-28 14:18:12 +02:00
Vladimir Safonkin
6036aa2424
Add cache error handling
2022-06-14 10:57:37 +02:00
IvanZosimov and GitHub
b22fbbc292
Implementation of caching functionality for setup-go action ( #228 )
2022-05-25 12:07:29 +02:00
qmuntal