Switch to ESLint projectService

See e4ae667f95 (diff-9601a8f6c734c2001be34a2361f76946d19a39a709b5e8c624a2a5a0aade05f2)

.github/workflows/check-dist.yml

@@ -36,7 +36,7 @@ jobs:
 
       - name: Setup Node.js
         id: setup-node
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           node-version-file: .node-version
           cache: npm
@@ -70,7 +70,7 @@ jobs:
       - if: ${{ failure() && steps.diff.outcome == 'failure' }}
         name: Upload Artifact
         id: upload
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: dist
           path: dist/

.github/workflows/ci.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Setup Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           node-version-file: .node-version
           cache: npm
@@ -372,18 +372,22 @@ jobs:
           ./helloworld
 
   test-action-native-image-musl:
-    name: native-image-musl on ubuntu-latest
-    runs-on: ubuntu-latest
+    name: native-image-musl + JDK${{ matrix.java-version }} on ${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
     permissions:
       contents: read
       pull-requests: write # for `native-image-pr-reports` option
+    strategy:
+      matrix:
+        java-version: ['21', '25']
+        os: [ubuntu-latest]
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Run setup-graalvm action
         uses: ./
         with:
-          java-version: 'dev'
-          distribution: 'graalvm-community'
+          java-version: ${{ matrix.java-version }}
+          distribution: 'graalvm'
           native-image-musl: 'true'
           native-image-job-reports: 'true'
           native-image-pr-reports: 'true'
@@ -392,7 +396,7 @@ jobs:
         run: |
           echo 'public class HelloWorld { public static void main(String[] args) { System.out.println("Hello, World!"); } }' > HelloWorld.java
           javac HelloWorld.java
-          native-image --static --libc=musl HelloWorld
+          native-image --static --libc=musl --gc=G1 HelloWorld
           ./helloworld
 
   test-action-extensive:
@@ -458,7 +462,7 @@ jobs:
       contents: write
     strategy:
       matrix:
-        java-version: ['26-ea', 'latest-ea']
+        java-version: ['25', 'latest-ea']
         distribution: ['graalvm']
         os: [macos-latest, windows-latest, ubuntu-latest, ubuntu-22.04-arm]
         components: ['']

__fixtures__/cache.ts

@@ -0,0 +1,7 @@
+import * as cache from '@actions/cache'
+import { jest } from '@jest/globals'
+
+export const ReserveCacheError = cache.ReserveCacheError
+export const restoreCache = jest.fn<typeof cache.restoreCache>()
+export const saveCache = jest.fn<typeof cache.saveCache>()
+export const ValidationError = cache.ValidationError

__fixtures__/core.ts

@@ -0,0 +1,13 @@
+import type * as core from '@actions/core'
+import { jest } from '@jest/globals'
+
+export const debug = jest.fn<typeof core.debug>()
+export const error = jest.fn<typeof core.error>()
+export const exportVariable = jest.fn<typeof core.exportVariable>()
+export const getInput = jest.fn<typeof core.getInput>()
+export const getState = jest.fn<typeof core.getState>()
+export const info = jest.fn<typeof core.info>()
+export const saveState = jest.fn<typeof core.saveState>()
+export const setFailed = jest.fn<typeof core.setFailed>()
+export const setOutput = jest.fn<typeof core.setOutput>()
+export const warning = jest.fn<typeof core.warning>()

__fixtures__/github.ts

@@ -0,0 +1,15 @@
+import * as github from '@actions/github'
+import { jest } from '@jest/globals'
+
+export const context = {
+  repo: {
+    owner: 'test-owner',
+    repo: 'test-repo'
+  },
+  sha: 'test-sha',
+  ref: 'test-ref',
+  workflow: 'test-workflow',
+  job: 'test-job',
+  runId: '12345'
+}
+export const getOctokit = jest.fn<typeof github.getOctokit>()

__fixtures__/glob.ts

@@ -0,0 +1,4 @@
+import * as glob from '@actions/glob'
+import { jest } from '@jest/globals'
+
+export const create = jest.fn<typeof glob.create>()

__tests__/cache.test.ts

@@ -24,24 +24,28 @@
  * Forked from https://github.com/actions/setup-java/blob/5b36705a13905facb447b6812d613a06a07e371d/__tests__/cache.test.ts
  */
 
+import { jest } from '@jest/globals'
 import { mkdtempSync } from 'fs'
 import { tmpdir } from 'os'
 import { join } from 'path'
-import { restore, save } from '../src/features/cache'
 import * as fs from 'fs'
 import * as os from 'os'
-import * as core from '@actions/core'
-import * as cache from '@actions/cache'
+import * as cache from '../__fixtures__/cache.js'
+import * as core from '../__fixtures__/core.js'
+
+// Mocks should be declared before the module being tested is imported.
+jest.unstable_mockModule('@actions/core', () => core)
+jest.unstable_mockModule('@actions/cache', () => cache)
+
+// The module being tested should be imported dynamically. This ensures that the
+// mocks are used in place of any actual dependencies.
+const { restore, save } = await import('../src/features/cache.js')
 
 describe('dependency cache', () => {
   const ORIGINAL_RUNNER_OS = process.env['RUNNER_OS']
   const ORIGINAL_GITHUB_WORKSPACE = process.env['GITHUB_WORKSPACE']
   const ORIGINAL_CWD = process.cwd()
   let workspace: string
-  let spyInfo: jest.SpyInstance<void, Parameters<typeof core.info>>
-  let spyWarning: jest.SpyInstance<void, Parameters<typeof core.warning>>
-  let spyDebug: jest.SpyInstance<void, Parameters<typeof core.debug>>
-  let spySaveState: jest.SpyInstance<void, Parameters<typeof core.saveState>>
 
   beforeEach(() => {
     workspace = mkdtempSync(join(tmpdir(), 'setup-graalvm-cache-'))
@@ -65,17 +69,9 @@ describe('dependency cache', () => {
   })
 
   beforeEach(() => {
-    spyInfo = jest.spyOn(core, 'info')
-    spyInfo.mockImplementation(() => null)
-
-    spyWarning = jest.spyOn(core, 'warning')
-    spyWarning.mockImplementation(() => null)
-
-    spyDebug = jest.spyOn(core, 'debug')
-    spyDebug.mockImplementation(() => null)
-
-    spySaveState = jest.spyOn(core, 'saveState')
-    spySaveState.mockImplementation(() => null)
+    core.info.mockImplementation(() => null)
+    core.warning.mockImplementation(() => null)
+    core.debug.mockImplementation(() => null)
   })
 
   afterEach(() => {
@@ -86,13 +82,8 @@ describe('dependency cache', () => {
   })
 
   describe('restore', () => {
-    let spyCacheRestore: jest.SpyInstance<ReturnType<typeof cache.restoreCache>, Parameters<typeof cache.restoreCache>>
-
     beforeEach(() => {
-      spyCacheRestore = jest
-        .spyOn(cache, 'restoreCache')
-        .mockImplementation((_paths: string[], _primaryKey: string) => Promise.resolve(undefined))
-      spyWarning.mockImplementation(() => null)
+      cache.restoreCache.mockImplementation((_paths: string[], _primaryKey: string) => Promise.resolve(undefined))
     })
 
     it('throws error if unsupported package manager specified', () => {
@@ -111,9 +102,9 @@ describe('dependency cache', () => {
         createFile(join(workspace, 'pom.xml'))
 
         await restore('maven')
-        expect(spyCacheRestore).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith('maven cache is not found')
+        expect(cache.restoreCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith('maven cache is not found')
       })
     })
     describe('for gradle', () => {
@@ -128,17 +119,17 @@ describe('dependency cache', () => {
         createFile(join(workspace, 'build.gradle'))
 
         await restore('gradle')
-        expect(spyCacheRestore).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith('gradle cache is not found')
+        expect(cache.restoreCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith('gradle cache is not found')
       })
       it('downloads cache based on build.gradle.kts', async () => {
         createFile(join(workspace, 'build.gradle.kts'))
 
         await restore('gradle')
-        expect(spyCacheRestore).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith('gradle cache is not found')
+        expect(cache.restoreCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith('gradle cache is not found')
       })
     })
     it('downloads cache based on buildSrc/Versions.kt', async () => {
@@ -146,9 +137,9 @@ describe('dependency cache', () => {
       createFile(join(workspace, 'buildSrc', 'Versions.kt'))
 
       await restore('gradle')
-      expect(spyCacheRestore).toHaveBeenCalled()
-      expect(spyWarning).not.toHaveBeenCalled()
-      expect(spyInfo).toHaveBeenCalledWith('gradle cache is not found')
+      expect(cache.restoreCache).toHaveBeenCalled()
+      expect(core.warning).not.toHaveBeenCalled()
+      expect(core.info).toHaveBeenCalledWith('gradle cache is not found')
     })
     describe('for sbt', () => {
       it('throws error if no build.sbt found', async () => {
@@ -162,20 +153,16 @@ describe('dependency cache', () => {
         createFile(join(workspace, 'build.sbt'))
 
         await restore('sbt')
-        expect(spyCacheRestore).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith('sbt cache is not found')
+        expect(cache.restoreCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith('sbt cache is not found')
       })
     })
   })
   describe('save', () => {
-    let spyCacheSave: jest.SpyInstance<ReturnType<typeof cache.saveCache>, Parameters<typeof cache.saveCache>>
-
     beforeEach(() => {
-      spyCacheSave = jest
-        .spyOn(cache, 'saveCache')
-        .mockImplementation((_paths: string[], _key: string) => Promise.resolve(0))
-      spyWarning.mockImplementation(() => null)
+      cache.saveCache.mockImplementation((_paths: string[], _key: string) => Promise.resolve(0))
+      core.warning.mockImplementation(() => null)
     })
 
     it('throws error if unsupported package manager specified', () => {
@@ -183,18 +170,18 @@ describe('dependency cache', () => {
     })
 
     it('save with -1 cacheId , should not fail workflow', async () => {
-      spyCacheSave.mockImplementation(() => Promise.resolve(-1))
+      cache.saveCache.mockImplementation(() => Promise.resolve(-1))
       createStateForMissingBuildFile()
 
       await save('maven')
-      expect(spyCacheSave).toHaveBeenCalled()
-      expect(spyWarning).not.toHaveBeenCalled()
-      expect(spyInfo).toHaveBeenCalled()
-      expect(spyInfo).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
+      expect(cache.saveCache).toHaveBeenCalled()
+      expect(core.warning).not.toHaveBeenCalled()
+      expect(core.info).toHaveBeenCalled()
+      expect(core.info).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
     })
 
     it('saves with error from toolkit, should fail workflow', async () => {
-      spyCacheSave.mockImplementation(() => Promise.reject(new cache.ValidationError('Validation failed')))
+      cache.saveCache.mockImplementation(() => Promise.reject(new cache.ValidationError('Validation failed')))
       createStateForMissingBuildFile()
 
       expect.assertions(1)
@@ -205,24 +192,24 @@ describe('dependency cache', () => {
       it('uploads cache even if no pom.xml found', async () => {
         createStateForMissingBuildFile()
         await save('maven')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
       })
       it('does not upload cache if no restore run before', async () => {
         createFile(join(workspace, 'pom.xml'))
 
         await save('maven')
-        expect(spyCacheSave).not.toHaveBeenCalled()
-        expect(spyWarning).toHaveBeenCalledWith('Error retrieving key from state.')
+        expect(cache.saveCache).not.toHaveBeenCalled()
+        expect(core.warning).toHaveBeenCalledWith('Error retrieving key from state.')
       })
       it('uploads cache', async () => {
         createFile(join(workspace, 'pom.xml'))
         createStateForSuccessfulRestore()
 
         await save('maven')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
       })
     })
     describe('for gradle', () => {
@@ -230,33 +217,33 @@ describe('dependency cache', () => {
         createStateForMissingBuildFile()
 
         await save('gradle')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
       })
       it('does not upload cache if no restore run before', async () => {
         createFile(join(workspace, 'build.gradle'))
 
         await save('gradle')
-        expect(spyCacheSave).not.toHaveBeenCalled()
-        expect(spyWarning).toHaveBeenCalledWith('Error retrieving key from state.')
+        expect(cache.saveCache).not.toHaveBeenCalled()
+        expect(core.warning).toHaveBeenCalledWith('Error retrieving key from state.')
       })
       it('uploads cache based on build.gradle', async () => {
         createFile(join(workspace, 'build.gradle'))
         createStateForSuccessfulRestore()
 
         await save('gradle')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
       })
       it('uploads cache based on build.gradle.kts', async () => {
         createFile(join(workspace, 'build.gradle.kts'))
         createStateForSuccessfulRestore()
 
         await save('gradle')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
       })
       it('uploads cache based on buildSrc/Versions.kt', async () => {
         createDirectory(join(workspace, 'buildSrc'))
@@ -264,47 +251,47 @@ describe('dependency cache', () => {
         createStateForSuccessfulRestore()
 
         await save('gradle')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
       })
     })
     describe('for sbt', () => {
       it('uploads cache even if no build.sbt found', async () => {
         createStateForMissingBuildFile()
         await save('sbt')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
       })
       it('does not upload cache if no restore run before', async () => {
         createFile(join(workspace, 'build.sbt'))
 
         await save('sbt')
-        expect(spyCacheSave).not.toHaveBeenCalled()
-        expect(spyWarning).toHaveBeenCalledWith('Error retrieving key from state.')
+        expect(cache.saveCache).not.toHaveBeenCalled()
+        expect(core.warning).toHaveBeenCalledWith('Error retrieving key from state.')
       })
       it('uploads cache', async () => {
         createFile(join(workspace, 'build.sbt'))
         createStateForSuccessfulRestore()
 
         await save('sbt')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
       })
     })
   })
 })
 
 function resetState() {
-  jest.spyOn(core, 'getState').mockReset()
+  core.getState.mockReset()
 }
 
 /**
  * Create states to emulate a restore process without build file.
  */
 function createStateForMissingBuildFile() {
-  jest.spyOn(core, 'getState').mockImplementation((name) => {
+  core.getState.mockImplementation((name) => {
     switch (name) {
       case 'cache-primary-key':
         return 'setup-graalvm-cache-'
@@ -318,7 +305,7 @@ function createStateForMissingBuildFile() {
  * Create states to emulate a successful restore process.
  */
 function createStateForSuccessfulRestore() {
-  jest.spyOn(core, 'getState').mockImplementation((name) => {
+  core.getState.mockImplementation((name) => {
     switch (name) {
       case 'cache-primary-key':
         return 'setup-graalvm-cache-primary-key'

__tests__/cleanup.test.ts

@@ -24,21 +24,23 @@
  * Forked from https://github.com/actions/setup-java/blob/5b36705a13905facb447b6812d613a06a07e371d/__tests__/cleanup-java.test.ts
  */
 
-import { run as cleanup } from '../src/cleanup'
-import * as core from '@actions/core'
-import * as cache from '@actions/cache'
+import { jest } from '@jest/globals'
+import * as cache from '../__fixtures__/cache.js'
+import * as core from '../__fixtures__/core.js'
+
+// Mocks should be declared before the module being tested is imported.
+jest.unstable_mockModule('@actions/core', () => core)
+jest.unstable_mockModule('@actions/cache', () => cache)
+
+// The module being tested should be imported dynamically. This ensures that the
+// mocks are used in place of any actual dependencies.
+const { run } = await import('../src/cleanup.js')
 
 describe('cleanup', () => {
-  let spyWarning: jest.SpyInstance<void, Parameters<typeof core.warning>>
-  let spyInfo: jest.SpyInstance<void, Parameters<typeof core.info>>
-  let spyCacheSave: jest.SpyInstance<ReturnType<typeof cache.saveCache>, Parameters<typeof cache.saveCache>>
-
   beforeEach(() => {
-    spyWarning = jest.spyOn(core, 'warning')
-    spyWarning.mockImplementation(() => null)
-    spyInfo = jest.spyOn(core, 'info')
-    spyInfo.mockImplementation(() => null)
-    spyCacheSave = jest.spyOn(cache, 'saveCache')
+    core.info.mockImplementation(() => null)
+    core.warning.mockImplementation(() => null)
+    core.debug.mockImplementation(() => null)
     createStateForSuccessfulRestore()
   })
   afterEach(() => {
@@ -46,38 +48,40 @@ describe('cleanup', () => {
   })
 
   it('does not fail nor warn even when the save process throws a ReserveCacheError', async () => {
-    spyCacheSave.mockImplementation((_paths: string[], _key: string) =>
+    cache.saveCache.mockImplementation((_paths: string[], _key: string) =>
       Promise.reject(
         new cache.ReserveCacheError('Unable to reserve cache with key, another job may be creating this cache.')
       )
     )
-    jest.spyOn(core, 'getInput').mockImplementation((name: string) => {
+    core.getInput.mockImplementation((name: string) => {
       return name === 'cache' ? 'gradle' : ''
     })
-    await cleanup()
-    expect(spyCacheSave).toHaveBeenCalled()
-    expect(spyWarning).not.toHaveBeenCalled()
+    await run()
+    expect(cache.saveCache).toHaveBeenCalled()
+    expect(core.warning).not.toHaveBeenCalled()
   })
 
   it('does not fail even though the save process throws error', async () => {
-    spyCacheSave.mockImplementation((_paths: string[], _key: string) => Promise.reject(new Error('Unexpected error')))
-    jest.spyOn(core, 'getInput').mockImplementation((name: string) => {
+    cache.saveCache.mockImplementation((_paths: string[], _key: string) =>
+      Promise.reject(new Error('Unexpected error'))
+    )
+    core.getInput.mockImplementation((name: string) => {
       return name === 'cache' ? 'gradle' : ''
     })
-    await cleanup()
-    expect(spyCacheSave).toHaveBeenCalled()
+    await run()
+    expect(cache.saveCache).toHaveBeenCalled()
   })
 })
 
 function resetState() {
-  jest.spyOn(core, 'getState').mockReset()
+  core.getState.mockReset()
 }
 
 /**
  * Create states to emulate a successful restore process.
  */
 function createStateForSuccessfulRestore() {
-  jest.spyOn(core, 'getState').mockImplementation((name) => {
+  core.getState.mockImplementation((name) => {
     switch (name) {
       case 'cache-primary-key':
         return 'setup-java-cache-primary-key'

__tests__/gds.test.ts

@@ -1,10 +1,12 @@
 import * as path from 'path'
 import { downloadGraalVM, downloadGraalVMEELegacy, fetchArtifact, fetchArtifactEE } from '../src/gds'
 import { expect, test } from '@jest/globals'
+import { fileURLToPath } from 'url'
 
 const TEST_USER_AGENT = 'GraalVMGitHubActionTest/1.0.4'
 
-process.env['RUNNER_TEMP'] = path.join(__dirname, 'TEMP')
+const dirname = path.dirname(fileURLToPath(import.meta.url))
+process.env['RUNNER_TEMP'] = path.join(dirname, 'TEMP')
 
 test('fetch artifacts', async () => {
   let artifact = await fetchArtifact(TEST_USER_AGENT, 'isBase:True', '17.0.12')

__tests__/graalvm.test.ts

@@ -4,9 +4,11 @@ import { expect, test } from '@jest/globals'
 import { getTaggedRelease } from '../src/utils'
 import { findGraalVMVersion, findHighestJavaVersion, findLatestEABuildDownloadUrl } from '../src/graalvm'
 import { GRAALVM_GH_USER, GRAALVM_RELEASES_REPO } from '../src/constants'
+import { fileURLToPath } from 'url'
 
-process.env['RUNNER_TOOL_CACHE'] = path.join(__dirname, 'TOOL_CACHE')
-process.env['RUNNER_TEMP'] = path.join(__dirname, 'TEMP')
+const dirname = path.dirname(fileURLToPath(import.meta.url))
+process.env['RUNNER_TOOL_CACHE'] = path.join(dirname, 'TOOL_CACHE')
+process.env['RUNNER_TEMP'] = path.join(dirname, 'TEMP')
 
 test('request invalid version/javaVersion', async () => {
   for (const combination of [

__tests__/liberica.test.ts

@@ -3,9 +3,11 @@ import * as c from '../src/constants'
 import * as path from 'path'
 import * as semver from 'semver'
 import { expect, test } from '@jest/globals'
+import { fileURLToPath } from 'url'
 
-process.env['RUNNER_TOOL_CACHE'] = path.join(__dirname, 'TOOL_CACHE')
-process.env['RUNNER_TEMP'] = path.join(__dirname, 'TEMP')
+const dirname = path.dirname(fileURLToPath(import.meta.url))
+process.env['RUNNER_TOOL_CACHE'] = path.join(dirname, 'TOOL_CACHE')
+process.env['RUNNER_TEMP'] = path.join(dirname, 'TEMP')
 
 /* eslint jest/expect-expect: ["error", { "assertFunctionNames": ["expect", "expectLatestToBe", "expectURL"] }] */
 

__tests__/mandrel.test.ts

@@ -2,9 +2,11 @@ import * as path from 'path'
 import * as mandrel from '../src/mandrel'
 import { expect, test } from '@jest/globals'
 import { getLatestRelease } from '../src/utils'
+import { fileURLToPath } from 'url'
 
-process.env['RUNNER_TOOL_CACHE'] = path.join(__dirname, 'TOOL_CACHE')
-process.env['RUNNER_TEMP'] = path.join(__dirname, 'TEMP')
+const dirname = path.dirname(fileURLToPath(import.meta.url))
+process.env['RUNNER_TOOL_CACHE'] = path.join(dirname, 'TOOL_CACHE')
+process.env['RUNNER_TEMP'] = path.join(dirname, 'TEMP')
 
 test('request invalid version/javaVersion combination', async () => {
   for (const combination of [

__tests__/msvc.test.ts

@@ -2,9 +2,11 @@ import * as path from 'path'
 import { expect, test } from '@jest/globals'
 import { needsWindowsEnvironmentSetup } from '../src/msvc'
 import { VERSION_DEV, VERSION_LATEST } from '../src/constants'
+import { fileURLToPath } from 'url'
 
-process.env['RUNNER_TOOL_CACHE'] = path.join(__dirname, 'TOOL_CACHE')
-process.env['RUNNER_TEMP'] = path.join(__dirname, 'TEMP')
+const dirname = path.dirname(fileURLToPath(import.meta.url))
+process.env['RUNNER_TOOL_CACHE'] = path.join(dirname, 'TOOL_CACHE')
+process.env['RUNNER_TEMP'] = path.join(dirname, 'TEMP')
 
 test('decide whether Window env must be set up for GraalVM for JDK', async () => {
   for (const javaVersion of ['17', '17.0.8', '17.0', '21', '22', '22-ea', '23-ea', VERSION_DEV]) {

__tests__/sbom.test.ts

@@ -1,55 +1,37 @@
+/* eslint-disable @typescript-eslint/no-explicit-any */
+
 import * as c from '../src/constants'
-import { setUpSBOMSupport, processSBOM } from '../src/features/sbom'
-import * as core from '@actions/core'
-import * as github from '@actions/github'
-import * as glob from '@actions/glob'
 import { join } from 'path'
 import { tmpdir } from 'os'
+import { expect, jest } from '@jest/globals'
 import { mkdtempSync, writeFileSync, rmSync } from 'fs'
+import * as core from '../__fixtures__/core.js'
+import * as glob from '../__fixtures__/glob.js'
+import * as github from '../__fixtures__/github.js'
 
-jest.mock('@actions/glob')
-jest.mock('@actions/github', () => ({
-  getOctokit: jest.fn(() => ({
-    request: jest.fn().mockResolvedValue(undefined)
-  })),
-  context: {
-    repo: {
-      owner: 'test-owner',
-      repo: 'test-repo'
-    },
-    sha: 'test-sha',
-    ref: 'test-ref',
-    workflow: 'test-workflow',
-    job: 'test-job',
-    runId: '12345'
-  }
-}))
+// Mocks should be declared before the module being tested is imported.
+jest.unstable_mockModule('@actions/core', () => core)
+jest.unstable_mockModule('@actions/glob', () => glob)
+jest.unstable_mockModule('@actions/github', () => github)
+
+// The module being tested should be imported dynamically. This ensures that the
+// mocks are used in place of any actual dependencies.
+const { setUpSBOMSupport, processSBOM } = await import('../src/features/sbom.js')
 
 function mockFindSBOM(files: string[]) {
-  const mockCreate = jest.fn().mockResolvedValue({
-    glob: jest.fn().mockResolvedValue(files)
-  })
-  ;(glob.create as jest.Mock).mockImplementation(mockCreate)
+  glob.create.mockImplementation(
+    jest.fn<() => Promise<any>>().mockResolvedValue({
+      glob: jest.fn<() => Promise<string[]>>().mockResolvedValue(files)
+    })
+  )
 }
 
-// Mocks the GitHub dependency submission API return value
-// 'undefined' is treated as a successful request
-function mockGithubAPIReturnValue(returnValue: Error | undefined = undefined) {
-  const mockOctokit = {
-    request:
-      returnValue === undefined ? jest.fn().mockResolvedValue(returnValue) : jest.fn().mockRejectedValue(returnValue)
-  }
-  ;(github.getOctokit as jest.Mock).mockReturnValue(mockOctokit)
-  return mockOctokit
-}
+const request = jest.fn<any>().mockResolvedValue(undefined)
 
 describe('sbom feature', () => {
-  let spyInfo: jest.SpyInstance<void, Parameters<typeof core.info>>
-  let spyWarning: jest.SpyInstance<void, Parameters<typeof core.warning>>
-  let spyExportVariable: jest.SpyInstance<void, Parameters<typeof core.exportVariable>>
   let workspace: string
   let originalEnv: NodeJS.ProcessEnv
-  const javaVersion = '24.0.0'
+  const javaVersion = '25.0.0'
   const distribution = c.DISTRIBUTION_GRAALVM
 
   beforeEach(() => {
@@ -62,12 +44,11 @@ describe('sbom feature', () => {
     }
 
     workspace = mkdtempSync(join(tmpdir(), 'setup-graalvm-sbom-'))
-    mockGithubAPIReturnValue()
 
-    spyInfo = jest.spyOn(core, 'info').mockImplementation(() => null)
-    spyWarning = jest.spyOn(core, 'warning').mockImplementation(() => null)
-    spyExportVariable = jest.spyOn(core, 'exportVariable').mockImplementation(() => null)
-    jest.spyOn(core, 'getInput').mockImplementation((name: string) => {
+    core.info.mockImplementation(() => null)
+    core.warning.mockImplementation(() => null)
+    core.debug.mockImplementation(() => null)
+    core.getInput.mockImplementation((name: string) => {
       if (name === 'native-image-enable-sbom') {
         return 'true'
       }
@@ -76,14 +57,17 @@ describe('sbom feature', () => {
       }
       return ''
     })
+
+    github.getOctokit.mockImplementation(
+      jest.fn<any>(() => ({
+        request: request
+      }))
+    )
   })
 
   afterEach(() => {
     process.env = originalEnv
     jest.clearAllMocks()
-    spyInfo.mockRestore()
-    spyWarning.mockRestore()
-    spyExportVariable.mockRestore()
     rmSync(workspace, { recursive: true, force: true })
   })
 
@@ -108,7 +92,7 @@ describe('sbom feature', () => {
     })
 
     it('should not throw an error when the java-version is supported', () => {
-      const supported_versions = ['24', '24-ea', '24.0.2', 'latest-ea']
+      const supported_versions = ['25', '26-ea', 'latest-ea']
       for (const version of supported_versions) {
         expect(() => setUpSBOMSupport(version, distribution)).not.toThrow()
       }
@@ -117,35 +101,35 @@ describe('sbom feature', () => {
     it('should set the SBOM option when activated', () => {
       setUpSBOMSupport(javaVersion, distribution)
 
-      expect(spyExportVariable).toHaveBeenCalledWith(
+      expect(core.exportVariable).toHaveBeenCalledWith(
         c.NATIVE_IMAGE_OPTIONS_ENV,
         expect.stringContaining('--enable-sbom=export')
       )
-      expect(spyInfo).toHaveBeenCalledWith('Enabled SBOM generation for Native Image build')
-      expect(spyWarning).not.toHaveBeenCalled()
+      expect(core.info).toHaveBeenCalledWith('Enabled SBOM generation for Native Image build')
+      expect(core.warning).not.toHaveBeenCalled()
     })
 
     it('should not set the SBOM option when not activated', () => {
-      jest.spyOn(core, 'getInput').mockReturnValue('false')
+      core.getInput.mockReturnValue('false')
       setUpSBOMSupport(javaVersion, distribution)
 
-      expect(spyExportVariable).not.toHaveBeenCalled()
-      expect(spyInfo).not.toHaveBeenCalled()
-      expect(spyWarning).not.toHaveBeenCalled()
+      expect(core.exportVariable).not.toHaveBeenCalled()
+      expect(core.info).not.toHaveBeenCalled()
+      expect(core.warning).not.toHaveBeenCalled()
     })
   })
 
   describe('process', () => {
     async function setUpAndProcessSBOM(sbom: object): Promise<void> {
       setUpSBOMSupport(javaVersion, distribution)
-      spyInfo.mockClear()
+      core.info.mockClear()
 
       // Mock 'native-image' invocation by creating the SBOM file
       const sbomPath = join(workspace, 'test.sbom.json')
       writeFileSync(sbomPath, JSON.stringify(sbom, null, 2))
 
       mockFindSBOM([sbomPath])
-      jest.spyOn(core, 'getState').mockReturnValue(javaVersion)
+      core.getState.mockReturnValue(javaVersion)
 
       await processSBOM()
     }
@@ -160,13 +144,13 @@ describe('sbom feature', () => {
           type: 'library',
           group: 'org.json',
           name: 'json',
-          version: '20241224',
-          purl: 'pkg:maven/org.json/json@20241224',
-          'bom-ref': 'pkg:maven/org.json/json@20241224',
+          version: '20250517',
+          purl: 'pkg:maven/org.json/json@20250517',
+          'bom-ref': 'pkg:maven/org.json/json@20250517',
           properties: [
             {
               name: 'syft:cpe23',
-              value: 'cpe:2.3:a:json:json:20241224:*:*:*:*:*:*:*'
+              value: 'cpe:2.3:a:json:json:20250517:*:*:*:*:*:*:*'
             }
           ]
         },
@@ -182,10 +166,10 @@ describe('sbom feature', () => {
       dependencies: [
         {
           ref: 'pkg:maven/com.oracle/main-test-app@1.0-SNAPSHOT',
-          dependsOn: ['pkg:maven/org.json/json@20241224']
+          dependsOn: ['pkg:maven/org.json/json@20250517']
         },
         {
-          ref: 'pkg:maven/org.json/json@20241224',
+          ref: 'pkg:maven/org.json/json@20250517',
           dependsOn: []
         }
       ]
@@ -198,12 +182,12 @@ describe('sbom feature', () => {
     it('should process SBOM and display components', async () => {
       await setUpAndProcessSBOM(sampleSBOM)
 
-      expect(spyInfo).toHaveBeenCalledWith('Found SBOM: ' + join(workspace, 'test.sbom.json'))
-      expect(spyInfo).toHaveBeenCalledWith('=== SBOM Content ===')
-      expect(spyInfo).toHaveBeenCalledWith('- pkg:maven/org.json/json@20241224')
-      expect(spyInfo).toHaveBeenCalledWith('- pkg:maven/com.oracle/main-test-app@1.0-SNAPSHOT')
-      expect(spyInfo).toHaveBeenCalledWith('   depends on: pkg:maven/org.json/json@20241224')
-      expect(spyWarning).not.toHaveBeenCalled()
+      expect(core.info).toHaveBeenCalledWith('Found SBOM: ' + join(workspace, 'test.sbom.json'))
+      expect(core.info).toHaveBeenCalledWith('=== SBOM Content ===')
+      expect(core.info).toHaveBeenCalledWith('- pkg:maven/org.json/json@20250517')
+      expect(core.info).toHaveBeenCalledWith('- pkg:maven/com.oracle/main-test-app@1.0-SNAPSHOT')
+      expect(core.info).toHaveBeenCalledWith('   depends on: pkg:maven/org.json/json@20250517')
+      expect(core.warning).not.toHaveBeenCalled()
     })
 
     it('should handle components without purl', async () => {
@@ -220,14 +204,14 @@ describe('sbom feature', () => {
       }
       await setUpAndProcessSBOM(sbomWithoutPurl)
 
-      expect(spyInfo).toHaveBeenCalledWith('=== SBOM Content ===')
-      expect(spyInfo).toHaveBeenCalledWith('- no-purl-package@1.0.0')
-      expect(spyWarning).not.toHaveBeenCalled()
+      expect(core.info).toHaveBeenCalledWith('=== SBOM Content ===')
+      expect(core.info).toHaveBeenCalledWith('- no-purl-package@1.0.0')
+      expect(core.warning).not.toHaveBeenCalled()
     })
 
     it('should handle missing SBOM file', async () => {
       setUpSBOMSupport(javaVersion, distribution)
-      spyInfo.mockClear()
+      core.info.mockClear()
 
       mockFindSBOM([])
 
@@ -250,10 +234,9 @@ describe('sbom feature', () => {
     })
 
     it('should submit dependencies when processing valid SBOM', async () => {
-      const mockOctokit = mockGithubAPIReturnValue(undefined)
       await setUpAndProcessSBOM(sampleSBOM)
 
-      expect(mockOctokit.request).toHaveBeenCalledWith(
+      expect(request).toHaveBeenCalledWith(
         'POST /repos/{owner}/{repo}/dependency-graph/snapshots',
         expect.objectContaining({
           owner: 'test-owner',
@@ -270,23 +253,27 @@ describe('sbom feature', () => {
               name: 'test.sbom.json',
               resolved: expect.objectContaining({
                 json: expect.objectContaining({
-                  package_url: 'pkg:maven/org.json/json@20241224',
+                  package_url: 'pkg:maven/org.json/json@20250517',
                   dependencies: []
                 }),
                 'main-test-app': expect.objectContaining({
                   package_url: 'pkg:maven/com.oracle/main-test-app@1.0-SNAPSHOT',
-                  dependencies: ['pkg:maven/org.json/json@20241224']
+                  dependencies: ['pkg:maven/org.json/json@20250517']
                 })
               })
             })
           })
         })
       )
-      expect(spyInfo).toHaveBeenCalledWith('Dependency snapshot submitted successfully.')
+      expect(core.info).toHaveBeenCalledWith('Dependency snapshot submitted successfully.')
     })
 
     it('should handle GitHub API submission errors gracefully', async () => {
-      mockGithubAPIReturnValue(new Error('API submission failed'))
+      github.getOctokit.mockImplementation(
+        jest.fn<any>(() => ({
+          request: jest.fn<(a: any, b: any) => Promise<any>>().mockRejectedValue(new Error('API submission failed'))
+        }))
+      )
 
       await expect(setUpAndProcessSBOM(sampleSBOM)).rejects.toBeInstanceOf(Error)
     })

__tests__/sbom/main-test-app/pom.xml

@@ -17,7 +17,7 @@
         <dependency>
             <groupId>org.json</groupId>
             <artifactId>json</artifactId>
-            <version>20241224</version>
+            <version>20250517</version>
         </dependency>
     </dependencies>
 
@@ -29,7 +29,7 @@
                     <plugin>
                         <groupId>org.graalvm.buildtools</groupId>
                         <artifactId>native-maven-plugin</artifactId>
-                        <version>0.10.3</version>
+                        <version>0.11.0</version>
                         <executions>
                             <execution>
                                 <goals>

__tests__/sbom/main-test-app/verify-sbom.cmd

@@ -2,7 +2,7 @@
 set "SCRIPT_DIR=%~dp0"
 
 for %%p in (
-    "\"pkg:maven/org.json/json@20241224\""
+    "\"pkg:maven/org.json/json@20250517\""
     "\"main-test-app\""
     "\"svm\""
     "\"nativeimage\""

__tests__/sbom/main-test-app/verify-sbom.sh

@@ -2,7 +2,7 @@
 script_dir="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
 
 required_patterns=(
-    '"pkg:maven/org.json/json@20241224"'
+    '"pkg:maven/org.json/json@20250517"'
     '"main-test-app"'
     '"svm"'
     '"nativeimage"'

action.yml

@@ -72,6 +72,6 @@ outputs:
     description: 'A boolean value to indicate an exact match was found for the primary key'
 runs:
   using: 'node20'
-  main: 'dist/main/index.js'
-  post: 'dist/cleanup/index.js'
+  main: 'dist/main.js'
+  post: 'dist/cleanup.js'
   post-if: 'success()'

eslint.config.mjs

@@ -9,13 +9,9 @@ import _import from 'eslint-plugin-import'
 import jest from 'eslint-plugin-jest'
 import prettier from 'eslint-plugin-prettier'
 import globals from 'globals'
-import path from 'node:path'
-import { fileURLToPath } from 'node:url'
 
-const __filename = fileURLToPath(import.meta.url)
-const __dirname = path.dirname(__filename)
 const compat = new FlatCompat({
-  baseDirectory: __dirname,
+  baseDirectory: import.meta.dirname,
   recommendedConfig: js.configs.recommended,
   allConfig: js.configs.all
 })
@@ -52,8 +48,18 @@ export default [
       sourceType: 'module',
 
       parserOptions: {
-        project: ['tsconfig.eslint.json'],
-        tsconfigRootDir: __dirname
+        projectService: {
+          allowDefaultProject: [
+            '__fixtures__/*.ts',
+            '__tests__/*.ts',
+            'eslint.config.mjs',
+            'jest.config.js',
+            'rollup.cleanup.config.ts',
+            'rollup.main.config.ts'
+          ],
+          maximumDefaultProjectFileMatchCount_THIS_WILL_SLOW_DOWN_LINTING: 32
+        },
+        tsconfigRootDir: import.meta.dirname
       }
     },
 
@@ -61,7 +67,7 @@ export default [
       'import/resolver': {
         typescript: {
           alwaysTryTypes: true,
-          project: 'tsconfig.eslint.json'
+          project: 'tsconfig.json'
         }
       }
     },

jest.config.js

@@ -1,14 +1,29 @@
-module.exports = {
+// See: https://jestjs.io/docs/configuration
+
+/** @type {import('ts-jest').JestConfigWithTsJest} **/
+export default {
   clearMocks: true,
   collectCoverage: true,
   collectCoverageFrom: ['./src/**'],
   coverageDirectory: './coverage',
   coveragePathIgnorePatterns: ['/node_modules/', '/dist/'],
   coverageReporters: ['json-summary', 'text', 'lcov'],
-  moduleFileExtensions: ['js', 'ts'],
+  extensionsToTreatAsEsm: ['.ts'],
+  moduleFileExtensions: ['ts', 'js'],
+  preset: 'ts-jest',
+  reporters: ['default'],
+  resolver: 'ts-jest-resolver',
+  testEnvironment: 'node',
   testMatch: ['**/*.test.ts'],
+  testPathIgnorePatterns: ['/dist/', '/node_modules/'],
   transform: {
-    '^.+\\.ts$': 'ts-jest'
+    '^.+\\.ts$': [
+      'ts-jest',
+      {
+        tsconfig: 'tsconfig.json',
+        useESM: true
+      }
+    ]
   },
   verbose: true
 }

package.json

@@ -2,7 +2,8 @@
   "name": "setup-graalvm",
   "author": "GraalVM Community",
   "description": "GitHub Action for GraalVM",
-  "version": "1.3.7",
+  "version": "1.4.2",
+  "type": "module",
   "private": true,
   "repository": {
     "type": "git",
@@ -17,6 +18,9 @@
     "actions",
     "setup"
   ],
+  "exports": {
+    ".": "./dist/index.js"
+  },
   "engines": {
     "node": ">=20"
   },
@@ -26,49 +30,61 @@
     "format:check": "npx prettier --check .",
     "lint": "npx eslint .",
     "package": "npm run package:main && npm run package:cleanup",
-    "package:main": "npx ncc build src/main.ts -o dist/main",
-    "package:cleanup": "npx ncc build src/cleanup.ts -o dist/cleanup",
-    "test": "npx jest",
+    "package:main": "npx rollup --config rollup.main.config.ts --configPlugin @rollup/plugin-typescript",
+    "package:cleanup": "npx rollup --config rollup.cleanup.config.ts --configPlugin @rollup/plugin-typescript",
+    "test": "NODE_OPTIONS=--experimental-vm-modules NODE_NO_WARNINGS=1 npx jest",
     "all": "npm run format:write && npm run lint && npm run test && npm run package"
   },
   "license": "UPL",
   "dependencies": {
-    "@actions/cache": "^4.0.5",
+    "@actions/cache": "^4.1.0",
     "@actions/core": "^1.11.1",
     "@actions/exec": "^1.1.1",
     "@actions/github": "^6.0.1",
     "@actions/glob": "^0.5.0",
-    "@actions/http-client": "^2.2.3",
-    "@actions/io": "^1.1.3",
+    "@actions/http-client": "^3.0.0",
+    "@actions/io": "^2.0.0",
     "@actions/tool-cache": "^2.0.2",
-    "@octokit/types": "^14.1.0",
+    "@octokit/types": "^16.0.0",
     "@github/dependency-submission-toolkit": "^2.0.5",
-    "semver": "^7.7.2",
-    "uuid": "^11.1.0"
+    "semver": "^7.7.3",
+    "uuid": "^13.0.0"
   },
   "devDependencies": {
-    "@eslint/compat": "^1.3.2",
+    "@eslint/compat": "^1.4.1",
+    "@rollup/plugin-commonjs": "^29.0.0",
+    "@rollup/plugin-json": "^6.1.0",
+    "@rollup/plugin-node-resolve": "^16.0.3",
+    "@rollup/plugin-typescript": "^12.3.0",
     "@types/jest": "^30.0.0",
-    "@types/node": "^20.19.11",
-    "@types/semver": "^7.7.0",
-    "@types/uuid": "^10.0.0",
-    "@typescript-eslint/eslint-plugin": "^8.41.0",
+    "@types/node": "^24.9.2",
+    "@types/semver": "^7.7.1",
+    "@typescript-eslint/eslint-plugin": "^8.46.2",
     "@typescript-eslint/parser": "^8.31.1",
-    "@vercel/ncc": "^0.38.3",
-    "eslint": "^9.34.0",
+    "eslint": "^9.39.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-import-resolver-typescript": "^4.4.4",
     "eslint-plugin-import": "^2.32.0",
     "eslint-plugin-jest": "^29.0.1",
-    "eslint-plugin-jsonc": "^2.20.1",
+    "eslint-plugin-jsonc": "^2.21.0",
     "eslint-plugin-node": "^11.1.0",
     "eslint-plugin-prettier": "^5.5.4",
-    "jest": "^30.1.2",
+    "jest": "^30.2.0",
     "js-yaml": "^4.1.0",
     "prettier": "^3.6.2",
     "prettier-eslint": "^16.4.2",
-    "ts-jest": "^29.4.1",
+    "rollup": "^4.52.5",
+    "ts-jest": "^29.4.5",
+    "ts-jest-resolver": "^2.0.1",
     "ts-node": "^10.9.2",
-    "typescript": "^5.9.2"
+    "typescript": "^5.9.3"
+  },
+  "optionalDependencies": {
+    "@rollup/rollup-linux-x64-gnu": "*"
+  },
+  "overrides": {
+    "@actions/glob": {
+      "minimatch": "^10.0.1"
+    }
   }
 }

rollup.cleanup.config.ts

@@ -0,0 +1,19 @@
+// See: https://rollupjs.org/introduction/
+
+import commonjs from '@rollup/plugin-commonjs'
+import json from '@rollup/plugin-json'
+import nodeResolve from '@rollup/plugin-node-resolve'
+import typescript from '@rollup/plugin-typescript'
+
+const config = {
+  input: 'src/cleanup.ts',
+  output: {
+    esModule: true,
+    file: 'dist/cleanup.js',
+    format: 'es',
+    sourcemap: false
+  },
+  plugins: [typescript(), nodeResolve({ preferBuiltins: true }), commonjs(), json()]
+}
+
+export default config

rollup.main.config.ts

@@ -0,0 +1,19 @@
+// See: https://rollupjs.org/introduction/
+
+import commonjs from '@rollup/plugin-commonjs'
+import json from '@rollup/plugin-json'
+import nodeResolve from '@rollup/plugin-node-resolve'
+import typescript from '@rollup/plugin-typescript'
+
+const config = {
+  input: 'src/main.ts',
+  output: {
+    esModule: true,
+    file: 'dist/main.js',
+    format: 'es',
+    sourcemap: false
+  },
+  plugins: [typescript(), nodeResolve({ preferBuiltins: true }), commonjs(), json()]
+}
+
+export default config

src/cleanup.ts

@@ -25,10 +25,10 @@
  */
 
 import * as core from '@actions/core'
-import * as constants from './constants'
-import { save } from './features/cache'
-import { generateReports } from './features/reports'
-import { processSBOM } from './features/sbom'
+import * as constants from './constants.js'
+import { save } from './features/cache.js'
+import { generateReports } from './features/reports.js'
+import { processSBOM } from './features/sbom.js'
 
 /**
  * Check given input and run a save process for the specified package manager

src/constants.ts

@@ -1,6 +1,6 @@
 import * as otypes from '@octokit/types'
 
-export const ACTION_VERSION = '1.3.7'
+export const ACTION_VERSION = '1.4.2'
 
 export const INPUT_VERSION = 'version'
 export const INPUT_GDS_TOKEN = 'gds-token'
@@ -53,13 +53,13 @@ export const ERROR_REQUEST = 'Please file an issue at: https://github.com/graalv
 export const ERROR_HINT =
   'If you think this is a mistake, please file an issue at: https://github.com/graalvm/setup-graalvm/issues.'
 
-export type LatestReleaseResponse = otypes.Endpoints['GET /repos/{owner}/{repo}/releases/latest']['response']
+export type LatestReleaseResponseData =
+  otypes.Endpoints['GET /repos/{owner}/{repo}/releases/latest']['response']['data']
 
-export type MatchingRefsResponse = otypes.Endpoints['GET /repos/{owner}/{repo}/git/matching-refs/{ref}']['response']
+export type MatchingRefsResponseData =
+  otypes.Endpoints['GET /repos/{owner}/{repo}/git/matching-refs/{ref}']['response']['data']
 
-export type ReleasesResponse = otypes.Endpoints['GET /repos/{owner}/{repo}/releases']['response']
-
-export type ContentsResponse = otypes.Endpoints['GET /repos/{owner}/{repo}/contents/{path}']['response']
+export type ContentsResponseData = otypes.Endpoints['GET /repos/{owner}/{repo}/contents/{path}']['response']['data']
 
 export interface OracleGraalVMEAFile {
   filename: string

src/dependencies.ts

@@ -1,6 +1,6 @@
 import * as core from '@actions/core'
-import { GRAALVM_PLATFORM } from './constants'
-import { exec } from './utils'
+import { GRAALVM_PLATFORM } from './constants.js'
+import { exec } from './utils.js'
 
 const APT_GET_INSTALL_BASE = 'sudo apt-get -y --no-upgrade install'
 const COMPONENT_TO_DEPS = new Map<string, Map<string, string>>([

src/features/musl.ts

@@ -1,11 +1,10 @@
-import * as c from '../constants'
+import * as c from '../constants.js'
 import * as core from '@actions/core'
 import * as tc from '@actions/tool-cache'
-import { exec } from '../utils'
 import { join } from 'path'
 
-const MUSL_NAME = 'x86_64-linux-musl-native'
-const MUSL_VERSION = '10.2.1'
+const MUSL_NAME = 'musl-toolchain'
+const MUSL_VERSION = '1.2.5-oracle-00001'
 
 export async function setUpNativeImageMusl(): Promise<void> {
   if (!c.IS_LINUX) {
@@ -18,26 +17,10 @@ export async function setUpNativeImageMusl(): Promise<void> {
   } else {
     core.startGroup(`Setting up musl for GraalVM Native Image...`)
     const muslDownloadPath = await tc.downloadTool(
-      `https://github.com/graalvm/setup-graalvm/releases/download/x86_64-linux-musl-${MUSL_VERSION}/${MUSL_NAME}.tgz`
+      `https://gds.oracle.com/download/bfs/archive/musl-toolchain-${MUSL_VERSION}-linux-amd64.tar.gz`
     )
     const muslExtractPath = await tc.extractTar(muslDownloadPath)
     const muslPath = join(muslExtractPath, MUSL_NAME)
-
-    const zlibCommit = 'ec3df00224d4b396e2ac6586ab5d25f673caa4c2'
-    const zlibDownloadPath = await tc.downloadTool(`https://github.com/madler/zlib/archive/${zlibCommit}.tar.gz`)
-    const zlibExtractPath = await tc.extractTar(zlibDownloadPath)
-    const zlibPath = join(zlibExtractPath, `zlib-${zlibCommit}`)
-    const zlibBuildOptions = {
-      cwd: zlibPath,
-      env: {
-        ...process.env,
-        CC: join(muslPath, 'bin', 'gcc')
-      }
-    }
-    await exec('./configure', [`--prefix=${muslPath}`, '--static'], zlibBuildOptions)
-    await exec('make', [], zlibBuildOptions)
-    await exec('make', ['install'], { cwd: zlibPath })
-
     core.info(`Adding ${MUSL_NAME} ${MUSL_VERSION} to tool-cache ...`)
     toolPath = await tc.cacheDir(muslPath, MUSL_NAME, MUSL_VERSION)
     core.endGroup()

src/features/reports.ts

@@ -1,4 +1,4 @@
-import * as c from '../constants'
+import * as c from '../constants.js'
 import * as core from '@actions/core'
 import * as fs from 'fs'
 import * as github from '@actions/github'
@@ -11,7 +11,7 @@ import {
   updatePRComment,
   tmpfile,
   setNativeImageOption
-} from '../utils'
+} from '../utils.js'
 
 const BUILD_OUTPUT_JSON_PATH = tmpfile('native-image-build-output.json')
 const BYTES_TO_KiB = 1024

src/features/sbom.ts

@@ -1,11 +1,11 @@
-import * as c from '../constants'
+import * as c from '../constants.js'
 import * as core from '@actions/core'
 import * as fs from 'fs'
 import * as github from '@actions/github'
 import * as glob from '@actions/glob'
 import { basename } from 'path'
 import * as semver from 'semver'
-import { setNativeImageOption } from '../utils'
+import { setNativeImageOption } from '../utils.js'
 
 const INPUT_NI_SBOM = 'native-image-enable-sbom'
 const SBOM_FILE_SUFFIX = '.sbom.json'

src/gds.ts

@@ -1,4 +1,4 @@
-import * as c from './constants'
+import * as c from './constants.js'
 import * as core from '@actions/core'
 import * as fs from 'fs'
 import * as httpClient from '@actions/http-client'
@@ -8,8 +8,8 @@ import * as stream from 'stream'
 import * as util from 'util'
 import * as semver from 'semver'
 import { IncomingHttpHeaders, OutgoingHttpHeaders } from 'http'
-import { RetryHelper } from '@actions/tool-cache/lib/retry-helper'
-import { calculateSHA256 } from './utils'
+import { RetryHelper } from '@actions/tool-cache/lib/retry-helper.js'
+import { calculateSHA256 } from './utils.js'
 import { ok } from 'assert'
 import { v4 as uuidv4 } from 'uuid'
 

src/graalvm.ts

@@ -1,4 +1,4 @@
-import * as c from './constants'
+import * as c from './constants.js'
 import * as core from '@actions/core'
 import * as semver from 'semver'
 import {
@@ -8,8 +8,8 @@ import {
   getLatestRelease,
   getMatchingTags,
   getTaggedRelease
-} from './utils'
-import { downloadGraalVM, downloadGraalVMEELegacy } from './gds'
+} from './utils.js'
+import { downloadGraalVM, downloadGraalVMEELegacy } from './gds.js'
 import { downloadTool } from '@actions/tool-cache'
 import { basename } from 'path'
 
@@ -174,7 +174,7 @@ export async function setUpGraalVMJDKDevBuild(): Promise<string> {
   return downloadAndExtractJDK(downloadUrl)
 }
 
-export function findHighestJavaVersion(release: c.LatestReleaseResponse['data'], version: string): string {
+export function findHighestJavaVersion(release: c.LatestReleaseResponseData, version: string): string {
   const graalVMIdentifierPattern = determineGraalVMLegacyIdentifier(false, version, '(\\d+)')
   const expectedFileNameRegExp = new RegExp(
     `^${graalVMIdentifierPattern}${c.GRAALVM_FILE_EXTENSION.replace(/\./g, '\\.')}$`
@@ -214,7 +214,7 @@ export async function setUpGraalVMLatest_22_X(gdsToken: string, javaVersion: str
   return setUpGraalVMRelease(gdsToken, version, javaVersion)
 }
 
-export function findGraalVMVersion(release: c.LatestReleaseResponse['data']) {
+export function findGraalVMVersion(release: c.LatestReleaseResponseData) {
   const tag_name = release.tag_name
   if (!tag_name.startsWith(GRAALVM_TAG_PREFIX)) {
     throw new Error(`Could not find latest GraalVM release: ${tag_name}`)
@@ -234,7 +234,7 @@ export async function setUpGraalVMRelease(gdsToken: string, version: string, jav
   return downloadExtractAndCacheJDK(downloader, toolName, version)
 }
 
-function findDownloadUrl(release: c.LatestReleaseResponse['data'], javaVersion: string): string {
+function findDownloadUrl(release: c.LatestReleaseResponseData, javaVersion: string): string {
   const graalVMIdentifier = determineGraalVMLegacyIdentifier(false, c.VERSION_DEV, javaVersion)
   const expectedFileName = `${graalVMIdentifier}${c.GRAALVM_FILE_EXTENSION}`
   for (const asset of release.assets) {

src/gu.ts

@@ -1,8 +1,8 @@
-import * as c from './constants'
+import * as c from './constants.js'
 import * as core from '@actions/core'
 import * as semver from 'semver'
-import { GRAALVM_PLATFORM } from './constants'
-import { exec } from './utils'
+import { GRAALVM_PLATFORM } from './constants.js'
+import { exec } from './utils.js'
 import { join } from 'path'
 
 const BASE_FLAGS = ['--non-interactive', 'install', '--no-progress']

src/liberica.ts

@@ -1,6 +1,6 @@
-import * as c from './constants'
+import * as c from './constants.js'
 import * as semver from 'semver'
-import { downloadExtractAndCacheJDK, getTaggedRelease, getMatchingTags } from './utils'
+import { downloadExtractAndCacheJDK, getTaggedRelease, getMatchingTags } from './utils.js'
 import { downloadTool } from '@actions/tool-cache'
 import { spawnSync } from 'child_process'
 

src/main.ts

@@ -1,20 +1,20 @@
-import * as c from './constants'
+import * as c from './constants.js'
 import * as core from '@actions/core'
-import * as graalvm from './graalvm'
+import * as graalvm from './graalvm.js'
 import * as semver from 'semver'
 import { isFeatureAvailable as isCacheAvailable } from '@actions/cache'
 import { basename, join } from 'path'
-import { restore } from './features/cache'
-import { setUpDependencies } from './dependencies'
-import { setUpGUComponents } from './gu'
-import { setUpMandrel } from './mandrel'
-import { setUpLiberica } from './liberica'
-import { checkForUpdates } from './features/check-for-updates'
-import { setUpNativeImageMusl } from './features/musl'
-import { setUpWindowsEnvironment } from './msvc'
-import { setUpNativeImageBuildReports } from './features/reports'
+import { restore } from './features/cache.js'
+import { setUpDependencies } from './dependencies.js'
+import { setUpGUComponents } from './gu.js'
+import { setUpMandrel } from './mandrel.js'
+import { setUpLiberica } from './liberica.js'
+import { checkForUpdates } from './features/check-for-updates.js'
+import { setUpNativeImageMusl } from './features/musl.js'
+import { setUpWindowsEnvironment } from './msvc.js'
+import { setUpNativeImageBuildReports } from './features/reports.js'
 import { exec } from '@actions/exec'
-import { setUpSBOMSupport } from './features/sbom'
+import { setUpSBOMSupport } from './features/sbom.js'
 
 async function run(): Promise<void> {
   try {

src/mandrel.ts

@@ -1,6 +1,6 @@
-import * as c from './constants'
+import * as c from './constants.js'
 import * as httpClient from '@actions/http-client'
-import { downloadExtractAndCacheJDK } from './utils'
+import { downloadExtractAndCacheJDK } from './utils.js'
 import { downloadTool } from '@actions/tool-cache'
 import { basename } from 'path'
 

src/msvc.ts

@@ -1,7 +1,7 @@
 import * as core from '@actions/core'
 import { execSync } from 'child_process'
 import { existsSync } from 'fs'
-import { VERSION_DEV } from './constants'
+import { VERSION_DEV } from './constants.js'
 
 // Keep in sync with https://github.com/actions/virtual-environments
 const KNOWN_VISUAL_STUDIO_INSTALLATIONS = [

src/utils.ts

@@ -1,4 +1,4 @@
-import * as c from './constants'
+import * as c from './constants.js'
 import * as core from '@actions/core'
 import * as github from '@actions/github'
 import * as semver from 'semver'
@@ -9,7 +9,7 @@ import { readFileSync, readdirSync } from 'fs'
 import { createHash } from 'crypto'
 import { join } from 'path'
 import { tmpdir } from 'os'
-import { GitHub } from '@actions/github/lib/utils'
+import { GitHub } from '@actions/github/lib/utils.js'
 
 export async function exec(commandLine: string, args?: string[], options?: ExecOptions | undefined): Promise<void> {
   const exitCode = await e(commandLine, args, options)
@@ -18,17 +18,17 @@ export async function exec(commandLine: string, args?: string[], options?: ExecO
   }
 }
 
-export async function getLatestRelease(repo: string): Promise<c.LatestReleaseResponse['data']> {
+export async function getLatestRelease(repo: string): Promise<c.LatestReleaseResponseData> {
   const octokit = getOctokit()
   return (
     await octokit.request('GET /repos/{owner}/{repo}/releases/latest', {
       owner: c.GRAALVM_GH_USER,
       repo
     })
-  ).data
+  ).data as c.LatestReleaseResponseData /** missing digest property */
 }
 
-export async function getContents(repo: string, path: string): Promise<c.ContentsResponse['data']> {
+export async function getContents(repo: string, path: string): Promise<c.ContentsResponseData> {
   const octokit = getOctokit()
   return (
     await octokit.request('GET /repos/{owner}/{repo}/contents/{path}', {
@@ -39,11 +39,7 @@ export async function getContents(repo: string, path: string): Promise<c.Content
   ).data
 }
 
-export async function getTaggedRelease(
-  owner: string,
-  repo: string,
-  tag: string
-): Promise<c.LatestReleaseResponse['data']> {
+export async function getTaggedRelease(owner: string, repo: string, tag: string): Promise<c.LatestReleaseResponseData> {
   const octokit = getOctokit()
   return (
     await octokit.request('GET /repos/{owner}/{repo}/releases/tags/{tag}', {
@@ -51,14 +47,14 @@ export async function getTaggedRelease(
       repo,
       tag
     })
-  ).data
+  ).data as c.LatestReleaseResponseData /** missing digest property */
 }
 
 export async function getMatchingTags(
   owner: string,
   repo: string,
   tagPrefix: string
-): Promise<c.MatchingRefsResponse['data']> {
+): Promise<c.MatchingRefsResponseData> {
   const octokit = getOctokit()
   return (
     await octokit.request('GET /repos/{owner}/{repo}/git/matching-refs/tags/{tagPrefix}', {

tsconfig.base.json

@@ -1,23 +0,0 @@
-{
-  "$schema": "https://json.schemastore.org/tsconfig",
-  "compilerOptions": {
-    "allowSyntheticDefaultImports": true,
-    "declaration": false,
-    "declarationMap": false,
-    "esModuleInterop": true,
-    "forceConsistentCasingInFileNames": true,
-    "lib": ["ES2022"],
-    "module": "NodeNext",
-    "moduleResolution": "NodeNext",
-    "newLine": "lf",
-    "noImplicitAny": true,
-    "noUnusedLocals": true,
-    "noUnusedParameters": false,
-    "pretty": true,
-    "resolveJsonModule": true,
-    "sourceMap": true,
-    "strict": true,
-    "strictNullChecks": true,
-    "target": "ES2022"
-  }
-}

tsconfig.eslint.json

@@ -1,10 +0,0 @@
-{
-  "$schema": "https://json.schemastore.org/tsconfig",
-  "extends": "./tsconfig.base.json",
-  "compilerOptions": {
-    "allowJs": true,
-    "noEmit": true
-  },
-  "exclude": ["dist", "node_modules"],
-  "include": ["__tests__", "src", "eslint.config.mjs", "jest.config.js"]
-}

tsconfig.json

@@ -1,11 +1,25 @@
 {
   "$schema": "https://json.schemastore.org/tsconfig",
-  "extends": "./tsconfig.base.json",
   "compilerOptions": {
+    "allowSyntheticDefaultImports": true,
+    "declaration": false,
+    "declarationMap": false,
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true,
     "isolatedModules": true,
+    "lib": ["ES2022"],
     "module": "NodeNext",
     "moduleResolution": "NodeNext",
-    "outDir": "./dist"
+    "newLine": "lf",
+    "noImplicitAny": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": false,
+    "outDir": "./dist",
+    "pretty": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "target": "ES2022"
   },
   "exclude": ["__fixtures__", "__tests__", "coverage", "dist", "node_modules"],
   "include": ["src"]