prep release

* make pattern error opt in

* changelog link

.github/dependabot.yml

@@ -0,0 +1,14 @@
+version: 2
+updates:
+- package-ecosystem: npm
+  directory: "/"
+  schedule:
+    interval: weekly
+  ignore:
+  - dependency-name: node-fetch
+    versions:
+    - ">=3.0.0"
+- package-ecosystem: github-actions
+  directory: "/"
+  schedule:
+    interval: weekly

.github/workflows/main.yml

@@ -8,7 +8,7 @@ jobs:
     steps:
       # https://github.com/actions/checkout
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Install
         run: npm ci
       - name: Build
@@ -23,4 +23,4 @@ jobs:
       #     git diff --exit-code --stat -- . ':!node_modules' \
       #     || (echo "##[error] found changed files after build. please 'npm run build && npm run fmt'" \
       #             "and check in all changes" \
-      #         && exit 1)
+      #         && exit 1)

.nvmrc

@@ -0,0 +1 @@
+20.11.1

CHANGELOG.md

@@ -1,3 +1,25 @@
+## 2.0.3 (unreleased)
+
+## 2.0.2
+
+- Revisit approach to [#384](https://github.com/softprops/action-gh-release/pull/384) making unresolved pattern failures opt-in [#417](https://github.com/softprops/action-gh-release/pull/417)
+
+## 2.0.1
+
+- Add support for make_latest property [#304](https://github.com/softprops/action-gh-release/pull/304) via [@samueljseay](https://github.com/samueljseay)
+- Fail run if files setting contains invalid patterns [#384](https://github.com/softprops/action-gh-release/pull/384) via [@rpdelaney](https://github.com/rpdelaney)
+- Add support for proxy env variables (don't use node-fetch) [#386](https://github.com/softprops/action-gh-release/pull/386/) via [@timor-raiman](https://github.com/timor-raiman)
+- Suppress confusing warning when input_files is empty [#389](https://github.com/softprops/action-gh-release/pull/389) via [@Drowze](https://github.com/Drowze)
+
+## 2.0.0
+
+- `2.0.0`!? this release corrects a disjunction between git tag versions used in the marketplace and versions list this file. Previous versions should have really been 1.\*. Going forward this should be better aligned.
+- Upgrade action.yml declaration to node20 to address deprecations
+
+## 0.1.15
+
+- Upgrade to action.yml declaration to node16 to address deprecations
+- Upgrade dependencies
 - Add `asset` output as a JSON array containing information about the uploaded assets
 
 ## 0.1.14

LICENSE

@@ -1,4 +1,4 @@
-Copyright (c) 2019 Doug Tangren
+Copyright (c) 2019-current Doug Tangren
 
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the

README.md

@@ -41,9 +41,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         if: startsWith(github.ref, 'refs/tags/')
 ```
 
@@ -62,9 +62,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
 ```
 
 ### ⬆️ Uploading release assets
@@ -88,13 +88,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Build
         run: echo ${{ github.sha }} > Release.txt
       - name: Test
         run: cat Release.txt
       - name: Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         if: startsWith(github.ref, 'refs/tags/')
         with:
           files: Release.txt
@@ -112,13 +112,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Build
         run: echo ${{ github.sha }} > Release.txt
       - name: Test
         run: cat Release.txt
       - name: Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         if: startsWith(github.ref, 'refs/tags/')
         with:
           files: |
@@ -126,7 +126,9 @@ jobs:
             LICENSE
 ```
 
-> **⚠️ Note:** Notice the `|` in the yaml syntax above ☝️. That let's you effectively declare a multi-line yaml string. You can learn more about multi-line yaml syntax [here](https://yaml-multiline.info)
+> **⚠️ Note:** Notice the `|` in the yaml syntax above ☝️. That lets you effectively declare a multi-line yaml string. You can learn more about multi-line yaml syntax [here](https://yaml-multiline.info)
+
+> **⚠️ Note for Windows:** Paths must use `/` as a separator, not `\`, as `\` is used to escape characters with special meaning in the pattern; for example, instead of specifying `D:\Foo.txt`, you must specify `D:/Foo.txt`. If you're using PowerShell, you can do this with `$Path = $Path -replace '\\','/'`
 
 ### 📝 External release notes
 
@@ -144,11 +146,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Generate Changelog
         run: echo "# Good things have arrived" > ${{ github.workspace }}-CHANGELOG.txt
       - name: Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         if: startsWith(github.ref, 'refs/tags/')
         with:
           body_path: ${{ github.workspace }}-CHANGELOG.txt
@@ -176,10 +178,12 @@ The following are optional as `step.with` keys
 | `tag_name`                 | String  | Name of a tag. defaults to `github.ref`                                                                                                                                                                                                                                                                                                                                                                                                         |
 | `fail_on_unmatched_files`  | Boolean | Indicator of whether to fail if any of the `files` globs match nothing                                                                                                                                                                                                                                                                                                                                                                          |
 | `repository`               | String  | Name of a target repository in `<owner>/<repo>` format. Defaults to GITHUB_REPOSITORY env variable                                                                                                                                                                                                                                                                                                                                              |
-| `target_commitish`         | String  | Commitish value that determines where the Git tag is created from. Can be any branch or commit SHA.                                                                                                                                                                                                                                                                                                                                             |
+| `target_commitish`         | String  | Commitish value that determines where the Git tag is created from. Can be any branch or commit SHA. Defaults to repository default branch.                                                                                                                                                                                                                                                                                                      |
 | `token`                    | String  | Secret GitHub Personal Access Token. Defaults to `${{ github.token }}`                                                                                                                                                                                                                                                                                                                                                                          |
 | `discussion_category_name` | String  | If specified, a discussion of the specified category is created and linked to the release. The value must be a category that already exists in the repository. For more information, see ["Managing categories for discussions in your repository."](https://docs.github.com/en/discussions/managing-discussions-for-your-community/managing-categories-for-discussions-in-your-repository)                                                     |
 | `generate_release_notes`   | Boolean | Whether to automatically generate the name and body for this release. If name is specified, the specified name will be used; otherwise, a name will be automatically generated. If body is specified, the body will be pre-pended to the automatically generated notes. See the [GitHub docs for this feature](https://docs.github.com/en/repositories/releasing-projects-on-github/automatically-generated-release-notes) for more information |
+| `append_body`              | Boolean | Append to existing body instead of overwriting it                                                                                                                                                                                                                                                                                                                                                                                               |
+| `make_latest` | Boolean | Whether to mark the release as latest or not. |
 
 💡 When providing a `body` and `body_path` at the same time, `body_path` will be
 attempted first, then falling back on `body` if the path can not be read from.
@@ -192,12 +196,12 @@ release will retain its original info.
 
 The following outputs can be accessed via `${{ steps.<step-id>.outputs }}` from this action
 
-| Name         | Type   | Description                             |
-| ------------ | ------ | --------------------------------------- |
-| `url`        | String | Github.com URL for the release          |
-| `id`         | String | Release ID                              |
-| `upload_url` | String | URL for uploading assets to the release |
-| `assets`     | String | JSON array containing information about each uploaded asset, in the format given [here](https://docs.github.com/en/rest/reference/repos#upload-a-release-asset--code-samples) (minus the `uploader` field) |
+| Name         | Type   | Description                                                                                                                                                                                                |
+| ------------ | ------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `url`        | String | Github.com URL for the release                                                                                                                                                                             |
+| `id`         | String | Release ID                                                                                                                                                                                                 |
+| `upload_url` | String | URL for uploading assets to the release                                                                                                                                                                    |
+| `assets`     | String | JSON array containing information about each uploaded asset, in the format given [here](https://docs.github.com/en/rest/releases/assets#get-a-release-asset) (minus the `uploader` field) |
 
 As an example, you can use `${{ fromJSON(steps.<step-id>.outputs.assets)[0].browser_download_url }}` to get the download URL of the first asset.
 
@@ -221,6 +225,17 @@ permissions:
   contents: write
 ```
 
+When used with `discussion_category_name`, additional permission is needed:
+
+```yaml
+permissions:
+  contents: write
+  discussions: write
+```
+
 [GitHub token permissions](https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token) can be set for an individual job, workflow, or for Actions as a whole.
 
+Note that if you intend to run workflows on the release event (`on: { release: { types: [published] } }`), you need to use
+a personal access token for this action, as the [default `secrets.GITHUB_TOKEN` does not trigger another workflow](https://github.com/actions/create-release/issues/71).
+
 Doug Tangren (softprops) 2019

__tests__/util.test.ts

@@ -5,7 +5,7 @@ import {
   parseConfig,
   parseInputFiles,
   unmatchedPatterns,
-  uploadUrl
+  uploadUrl,
 } from "../src/util";
 import * as assert from "assert";
 
@@ -51,7 +51,8 @@ describe("util", () => {
           input_tag_name: undefined,
           input_target_commitish: undefined,
           input_discussion_category_name: undefined,
-          input_generate_release_notes: false
+          input_generate_release_notes: false,
+          input_make_latest: undefined,
         })
       );
     });
@@ -71,7 +72,8 @@ describe("util", () => {
           input_tag_name: undefined,
           input_target_commitish: undefined,
           input_discussion_category_name: undefined,
-          input_generate_release_notes: false
+          input_generate_release_notes: false,
+          input_make_latest: undefined,
         })
       );
     });
@@ -91,7 +93,8 @@ describe("util", () => {
           input_tag_name: undefined,
           input_target_commitish: undefined,
           input_discussion_category_name: undefined,
-          input_generate_release_notes: false
+          input_generate_release_notes: false,
+          input_make_latest: undefined,
         })
       );
     });
@@ -107,12 +110,13 @@ describe("util", () => {
           // so we cover that in a test case here to ensure undefined values are actually
           // resolved as undefined and not empty strings
           INPUT_TARGET_COMMITISH: "",
-          INPUT_DISCUSSION_CATEGORY_NAME: ""
+          INPUT_DISCUSSION_CATEGORY_NAME: "",
         }),
         {
           github_ref: "",
           github_repository: "",
           github_token: "",
+          input_append_body: false,
           input_body: undefined,
           input_body_path: undefined,
           input_draft: undefined,
@@ -123,7 +127,8 @@ describe("util", () => {
           input_fail_on_unmatched_files: false,
           input_target_commitish: undefined,
           input_discussion_category_name: undefined,
-          input_generate_release_notes: false
+          input_generate_release_notes: false,
+          input_make_latest: undefined,
         }
       );
     });
@@ -131,12 +136,13 @@ describe("util", () => {
     it("parses basic config with commitish", () => {
       assert.deepStrictEqual(
         parseConfig({
-          INPUT_TARGET_COMMITISH: "affa18ef97bc9db20076945705aba8c516139abd"
+          INPUT_TARGET_COMMITISH: "affa18ef97bc9db20076945705aba8c516139abd",
         }),
         {
           github_ref: "",
           github_repository: "",
           github_token: "",
+          input_append_body: false,
           input_body: undefined,
           input_body_path: undefined,
           input_draft: undefined,
@@ -147,19 +153,21 @@ describe("util", () => {
           input_fail_on_unmatched_files: false,
           input_target_commitish: "affa18ef97bc9db20076945705aba8c516139abd",
           input_discussion_category_name: undefined,
-          input_generate_release_notes: false
+          input_generate_release_notes: false,
+          input_make_latest: undefined,
         }
       );
     });
     it("supports discussion category names", () => {
       assert.deepStrictEqual(
         parseConfig({
-          INPUT_DISCUSSION_CATEGORY_NAME: "releases"
+          INPUT_DISCUSSION_CATEGORY_NAME: "releases",
         }),
         {
           github_ref: "",
           github_repository: "",
           github_token: "",
+          input_append_body: false,
           input_body: undefined,
           input_body_path: undefined,
           input_draft: undefined,
@@ -170,7 +178,8 @@ describe("util", () => {
           input_fail_on_unmatched_files: false,
           input_target_commitish: undefined,
           input_discussion_category_name: "releases",
-          input_generate_release_notes: false
+          input_generate_release_notes: false,
+          input_make_latest: undefined,
         }
       );
     });
@@ -178,12 +187,13 @@ describe("util", () => {
     it("supports generating release notes", () => {
       assert.deepStrictEqual(
         parseConfig({
-          INPUT_GENERATE_RELEASE_NOTES: "true"
+          INPUT_GENERATE_RELEASE_NOTES: "true",
         }),
         {
           github_ref: "",
           github_repository: "",
           github_token: "",
+          input_append_body: false,
           input_body: undefined,
           input_body_path: undefined,
           input_draft: undefined,
@@ -194,7 +204,8 @@ describe("util", () => {
           input_fail_on_unmatched_files: false,
           input_target_commitish: undefined,
           input_discussion_category_name: undefined,
-          input_generate_release_notes: true
+          input_generate_release_notes: true,
+          input_make_latest: undefined,
         }
       );
     });
@@ -205,12 +216,13 @@ describe("util", () => {
           INPUT_DRAFT: "false",
           INPUT_PRERELEASE: "true",
           GITHUB_TOKEN: "env-token",
-          INPUT_TOKEN: "input-token"
+          INPUT_TOKEN: "input-token",
         }),
         {
           github_ref: "",
           github_repository: "",
           github_token: "env-token",
+          input_append_body: false,
           input_body: undefined,
           input_body_path: undefined,
           input_draft: false,
@@ -221,7 +233,8 @@ describe("util", () => {
           input_fail_on_unmatched_files: false,
           input_target_commitish: undefined,
           input_discussion_category_name: undefined,
-          input_generate_release_notes: false
+          input_generate_release_notes: false,
+          input_make_latest: undefined,
         }
       );
     });
@@ -230,12 +243,13 @@ describe("util", () => {
         parseConfig({
           INPUT_DRAFT: "false",
           INPUT_PRERELEASE: "true",
-          INPUT_TOKEN: "input-token"
+          INPUT_TOKEN: "input-token",
         }),
         {
           github_ref: "",
           github_repository: "",
           github_token: "input-token",
+          input_append_body: false,
           input_body: undefined,
           input_body_path: undefined,
           input_draft: false,
@@ -246,7 +260,8 @@ describe("util", () => {
           input_fail_on_unmatched_files: false,
           input_target_commitish: undefined,
           input_discussion_category_name: undefined,
-          input_generate_release_notes: false
+          input_generate_release_notes: false,
+          input_make_latest: undefined,
         }
       );
     });
@@ -254,12 +269,13 @@ describe("util", () => {
       assert.deepStrictEqual(
         parseConfig({
           INPUT_DRAFT: "false",
-          INPUT_PRERELEASE: "true"
+          INPUT_PRERELEASE: "true",
         }),
         {
           github_ref: "",
           github_repository: "",
           github_token: "",
+          input_append_body: false,
           input_body: undefined,
           input_body_path: undefined,
           input_draft: false,
@@ -270,7 +286,58 @@ describe("util", () => {
           input_fail_on_unmatched_files: false,
           input_target_commitish: undefined,
           input_discussion_category_name: undefined,
-          input_generate_release_notes: false
+          input_generate_release_notes: false,
+          input_make_latest: undefined,
+        }
+      );
+    });
+    it("parses basic config where make_latest is passed", () => {
+      assert.deepStrictEqual(
+        parseConfig({
+          INPUT_MAKE_LATEST: "false",
+        }),
+        {
+          github_ref: "",
+          github_repository: "",
+          github_token: "",
+          input_append_body: false,
+          input_body: undefined,
+          input_body_path: undefined,
+          input_draft: undefined,
+          input_prerelease: undefined,
+          input_files: [],
+          input_name: undefined,
+          input_tag_name: undefined,
+          input_fail_on_unmatched_files: false,
+          input_target_commitish: undefined,
+          input_discussion_category_name: undefined,
+          input_generate_release_notes: false,
+          input_make_latest: "false",
+        }
+      );
+    });
+    it("parses basic config with append_body", () => {
+      assert.deepStrictEqual(
+        parseConfig({
+          INPUT_APPEND_BODY: "true",
+        }),
+        {
+          github_ref: "",
+          github_repository: "",
+          github_token: "",
+          input_append_body: true,
+          input_body: undefined,
+          input_body_path: undefined,
+          input_draft: undefined,
+          input_prerelease: undefined,
+          input_files: [],
+          input_name: undefined,
+          input_tag_name: undefined,
+          input_fail_on_unmatched_files: false,
+          input_target_commitish: undefined,
+          input_discussion_category_name: undefined,
+          input_generate_release_notes: false,
+          input_make_latest: undefined,
         }
       );
     });

action.yml

@@ -43,6 +43,9 @@ inputs:
   generate_release_notes:
     description: "Whether to automatically generate the name and body for this release. If name is specified, the specified name will be used; otherwise, a name will be automatically generated. If body is specified, the body will be pre-pended to the automatically generated notes."
     required: false
+  append_body:
+    description: "Append to existing body instead of overwriting it. Default is false."
+    required: false
 env:
   "GITHUB_TOKEN": "As provided by Github Actions"
 outputs:
@@ -55,7 +58,7 @@ outputs:
   assets:
     description: "JSON array containing information about each uploaded asset, in the format given [here](https://docs.github.com/en/rest/reference/repos#upload-a-release-asset--code-samples) (minus the `uploader` field)"
 runs:
-  using: "node12"
+  using: "node20"
   main: "dist/index.js"
 branding:
   color: "green"

dist/fixasync.js

@@ -1,83 +0,0 @@
-'use strict';
-
-// eslint-disable-next-line no-invalid-this, no-shadow
-const {GeneratorFunction, AsyncFunction, AsyncGeneratorFunction, global, internal, host, hook} = this;
-const {Contextify, Decontextify} = internal;
-// eslint-disable-next-line no-shadow
-const {Function, eval: eval_, Promise, Object, Reflect} = global;
-const {getOwnPropertyDescriptor, defineProperty, assign} = Object;
-const {apply: rApply, construct: rConstruct} = Reflect;
-
-const FunctionHandler = {
-	__proto__: null,
-	apply(target, thiz, args) {
-		const type = this.type;
-		args = Decontextify.arguments(args);
-		try {
-			args = Contextify.value(hook(type, args));
-		} catch (e) {
-			throw Contextify.value(e);
-		}
-		return rApply(target, thiz, args);
-	},
-	construct(target, args, newTarget) {
-		const type = this.type;
-		args = Decontextify.arguments(args);
-		try {
-			args = Contextify.value(hook(type, args));
-		} catch (e) {
-			throw Contextify.value(e);
-		}
-		return rConstruct(target, args, newTarget);
-	}
-};
-
-function makeCheckFunction(type) {
-	return assign({
-		__proto__: null,
-		type
-	}, FunctionHandler);
-}
-
-function override(obj, prop, value) {
-	const desc = getOwnPropertyDescriptor(obj, prop);
-	desc.value = value;
-	defineProperty(obj, prop, desc);
-}
-
-const proxiedFunction = new host.Proxy(Function, makeCheckFunction('function'));
-override(Function.prototype, 'constructor', proxiedFunction);
-if (GeneratorFunction) {
-	Object.setPrototypeOf(GeneratorFunction, proxiedFunction);
-	override(GeneratorFunction.prototype, 'constructor', new host.Proxy(GeneratorFunction, makeCheckFunction('generator_function')));
-}
-if (AsyncFunction) {
-	Object.setPrototypeOf(AsyncFunction, proxiedFunction);
-	override(AsyncFunction.prototype, 'constructor', new host.Proxy(AsyncFunction, makeCheckFunction('async_function')));
-}
-if (AsyncGeneratorFunction) {
-	Object.setPrototypeOf(AsyncGeneratorFunction, proxiedFunction);
-	override(AsyncGeneratorFunction.prototype, 'constructor', new host.Proxy(AsyncGeneratorFunction, makeCheckFunction('async_generator_function')));
-}
-
-global.Function = proxiedFunction;
-global.eval = new host.Proxy(eval_, makeCheckFunction('eval'));
-
-if (Promise) {
-
-	Promise.prototype.then = new host.Proxy(Promise.prototype.then, makeCheckFunction('promise_then'));
-	// This seems not to work, and will produce
-	// UnhandledPromiseRejectionWarning: TypeError: Method Promise.prototype.then called on incompatible receiver [object Object].
-	// This is likely caused since the host.Promise.prototype.then cannot use the VM Proxy object.
-	// Contextify.connect(host.Promise.prototype.then, Promise.prototype.then);
-
-	if (Promise.prototype.finally) {
-		Promise.prototype.finally = new host.Proxy(Promise.prototype.finally, makeCheckFunction('promise_finally'));
-		// Contextify.connect(host.Promise.prototype.finally, Promise.prototype.finally);
-	}
-	if (Promise.prototype.catch) {
-		Promise.prototype.catch = new host.Proxy(Promise.prototype.catch, makeCheckFunction('promise_catch'));
-		// Contextify.connect(host.Promise.prototype.catch, Promise.prototype.catch);
-	}
-
-}

dist/sandbox.js

@@ -1,682 +0,0 @@
-/* eslint-disable no-shadow, no-invalid-this */
-/* global vm, host, Contextify, Decontextify, VMError, options */
-
-'use strict';
-
-const {Script} = host.require('vm');
-const fs = host.require('fs');
-const pa = host.require('path');
-
-const BUILTIN_MODULES = host.process.binding('natives');
-const parseJSON = JSON.parse;
-const importModuleDynamically = () => {
-	// We can't throw an error object here because since vm.Script doesn't store a context, we can't properly contextify that error object.
-	// eslint-disable-next-line no-throw-literal
-	throw 'Dynamic imports are not allowed.';
-};
-
-/**
- * @param {Object} host Hosts's internal objects.
- */
-
-return ((vm, host) => {
-	'use strict';
-
-	const global = this;
-
-	const TIMERS = new host.WeakMap(); // Contains map of timers created inside sandbox
-	const BUILTINS = {__proto__: null};
-	const CACHE = {__proto__: null};
-	const EXTENSIONS = {
-		__proto__: null,
-		['.json'](module, filename) {
-			try {
-				const code = fs.readFileSync(filename, 'utf8');
-				module.exports = parseJSON(code);
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-		},
-		['.node'](module, filename) {
-			if (vm.options.require.context === 'sandbox') throw new VMError('Native modules can be required only with context set to \'host\'.');
-
-			try {
-				module.exports = Contextify.readonly(host.require(filename));
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-		}
-	};
-
-	for (let i = 0; i < vm.options.sourceExtensions.length; i++) {
-		const ext = vm.options.sourceExtensions[i];
-
-		EXTENSIONS['.' + ext] = (module, filename, dirname) => {
-			if (vm.options.require.context !== 'sandbox') {
-				try {
-					module.exports = Contextify.readonly(host.require(filename));
-				} catch (e) {
-					throw Contextify.value(e);
-				}
-			} else {
-				let script;
-
-				try {
-					// Load module
-					let contents = fs.readFileSync(filename, 'utf8');
-					contents = vm._compiler(contents, filename);
-
-					const code = host.STRICT_MODULE_PREFIX + contents + host.MODULE_SUFFIX;
-
-					const ccode = vm._hook('run', [code]);
-
-					// Precompile script
-					script = new Script(ccode, {
-						__proto__: null,
-						filename: filename || 'vm.js',
-						displayErrors: false,
-						importModuleDynamically
-					});
-
-				} catch (ex) {
-					throw Contextify.value(ex);
-				}
-
-				const closure = script.runInContext(global, {
-					__proto__: null,
-					filename: filename || 'vm.js',
-					displayErrors: false,
-					importModuleDynamically
-				});
-
-				// run the script
-				closure(module.exports, module.require, module, filename, dirname);
-			}
-		};
-	}
-
-	const _parseExternalOptions = (options) => {
-		if (host.Array.isArray(options)) {
-			return {
-				__proto__: null,
-				external: options,
-				transitive: false
-			};
-		}
-
-		return {
-			__proto__: null,
-			external: options.modules,
-			transitive: options.transitive
-		};
-	};
-
-	/**
-	 * Resolve filename.
-	 */
-
-	const _resolveFilename = (path) => {
-		if (!path) return null;
-		let hasPackageJson;
-		try {
-			path = pa.resolve(path);
-
-			const exists = fs.existsSync(path);
-			const isdir = exists ? fs.statSync(path).isDirectory() : false;
-
-			// direct file match
-			if (exists && !isdir) return path;
-
-			// load as file
-
-			for (let i = 0; i < vm.options.sourceExtensions.length; i++) {
-				const ext = vm.options.sourceExtensions[i];
-				if (fs.existsSync(`${path}.${ext}`)) return `${path}.${ext}`;
-			}
-			if (fs.existsSync(`${path}.json`)) return `${path}.json`;
-			if (fs.existsSync(`${path}.node`)) return `${path}.node`;
-
-			// load as module
-
-			hasPackageJson = fs.existsSync(`${path}/package.json`);
-		} catch (e) {
-			throw Contextify.value(e);
-		}
-
-		if (hasPackageJson) {
-			let pkg;
-			try {
-				pkg = fs.readFileSync(`${path}/package.json`, 'utf8');
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-			try {
-				pkg = parseJSON(pkg);
-			} catch (ex) {
-				throw new VMError(`Module '${path}' has invalid package.json`, 'EMODULEINVALID');
-			}
-
-			let main;
-			if (pkg && pkg.main) {
-				main = _resolveFilename(`${path}/${pkg.main}`);
-				if (!main) main = _resolveFilename(`${path}/index`);
-			} else {
-				main = _resolveFilename(`${path}/index`);
-			}
-
-			return main;
-		}
-
-		// load as directory
-
-		try {
-			for (let i = 0; i < vm.options.sourceExtensions.length; i++) {
-				const ext = vm.options.sourceExtensions[i];
-				if (fs.existsSync(`${path}/index.${ext}`)) return `${path}/index.${ext}`;
-			}
-
-			if (fs.existsSync(`${path}/index.json`)) return `${path}/index.json`;
-			if (fs.existsSync(`${path}/index.node`)) return `${path}/index.node`;
-		} catch (e) {
-			throw Contextify.value(e);
-		}
-
-		return null;
-	};
-
-	/**
-	 * Builtin require.
-	 */
-
-	const _requireBuiltin = (moduleName) => {
-		if (moduleName === 'buffer') return ({Buffer});
-		if (BUILTINS[moduleName]) return BUILTINS[moduleName].exports; // Only compiled builtins are stored here
-
-		if (moduleName === 'util') {
-			return Contextify.readonly(host.require(moduleName), {
-				// Allows VM context to use util.inherits
-				__proto__: null,
-				inherits: (ctor, superCtor) => {
-					ctor.super_ = superCtor;
-					Object.setPrototypeOf(ctor.prototype, superCtor.prototype);
-				}
-			});
-		}
-
-		if (moduleName === 'events' || moduleName === 'internal/errors') {
-			let script;
-			try {
-				script = new Script(`(function (exports, require, module, process, internalBinding) {
-						'use strict';
-						const primordials = global;
-						${BUILTIN_MODULES[moduleName]}
-						\n
-					});`, {
-					filename: `${moduleName}.vm.js`
-				});
-
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-
-			// setup module scope
-			const module = BUILTINS[moduleName] = {
-				exports: {},
-				require: _requireBuiltin
-			};
-
-			// run script
-			try {
-				// FIXME binding should be contextified
-				script.runInContext(global)(module.exports, module.require, module, host.process, host.process.binding);
-			} catch (e) {
-				// e could be from inside or outside of sandbox
-				throw new VMError(`Error loading '${moduleName}'`);
-			}
-			return module.exports;
-		}
-
-		return Contextify.readonly(host.require(moduleName));
-	};
-
-	/**
-	 * Prepare require.
-	 */
-
-	const _prepareRequire = (currentDirname, parentAllowsTransitive = false) => {
-		const _require = moduleName => {
-			let requireObj;
-			try {
-				const optionsObj = vm.options;
-				if (optionsObj.nesting && moduleName === 'vm2') return {VM: Contextify.readonly(host.VM), NodeVM: Contextify.readonly(host.NodeVM)};
-				requireObj = optionsObj.require;
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-
-			if (!requireObj) throw new VMError(`Access denied to require '${moduleName}'`, 'EDENIED');
-			if (moduleName == null) throw new VMError("Module '' not found.", 'ENOTFOUND');
-			if (typeof moduleName !== 'string') throw new VMError(`Invalid module name '${moduleName}'`, 'EINVALIDNAME');
-
-			let filename;
-			let allowRequireTransitive = false;
-
-			// Mock?
-
-			try {
-				const {mock} = requireObj;
-				if (mock) {
-					const mockModule = mock[moduleName];
-					if (mockModule) {
-						return Contextify.readonly(mockModule);
-					}
-				}
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-
-			// Builtin?
-
-			if (BUILTIN_MODULES[moduleName]) {
-				let allowed;
-				try {
-					const builtinObj = requireObj.builtin;
-					if (host.Array.isArray(builtinObj)) {
-						if (builtinObj.indexOf('*') >= 0) {
-							allowed = builtinObj.indexOf(`-${moduleName}`) === -1;
-						} else {
-							allowed = builtinObj.indexOf(moduleName) >= 0;
-						}
-					} else if (builtinObj) {
-						allowed = builtinObj[moduleName];
-					} else {
-						allowed = false;
-					}
-				} catch (e) {
-					throw Contextify.value(e);
-				}
-				if (!allowed) throw new VMError(`Access denied to require '${moduleName}'`, 'EDENIED');
-
-				return _requireBuiltin(moduleName);
-			}
-
-			// External?
-
-			let externalObj;
-			try {
-				externalObj = requireObj.external;
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-
-			if (!externalObj) throw new VMError(`Access denied to require '${moduleName}'`, 'EDENIED');
-
-			if (/^(\.|\.\/|\.\.\/)/.exec(moduleName)) {
-				// Module is relative file, e.g. ./script.js or ../script.js
-
-				if (!currentDirname) throw new VMError('You must specify script path to load relative modules.', 'ENOPATH');
-
-				filename = _resolveFilename(`${currentDirname}/${moduleName}`);
-			} else if (/^(\/|\\|[a-zA-Z]:\\)/.exec(moduleName)) {
-				// Module is absolute file, e.g. /script.js or //server/script.js or C:\script.js
-
-				filename = _resolveFilename(moduleName);
-			} else {
-				// Check node_modules in path
-
-				if (!currentDirname) throw new VMError('You must specify script path to load relative modules.', 'ENOPATH');
-
-				if (typeof externalObj === 'object') {
-					let isWhitelisted;
-					try {
-						const { external, transitive } = _parseExternalOptions(externalObj);
-
-						isWhitelisted = external.some(ext => host.helpers.match(ext, moduleName)) || (transitive && parentAllowsTransitive);
-					} catch (e) {
-						throw Contextify.value(e);
-					}
-					if (!isWhitelisted) {
-						throw new VMError(`The module '${moduleName}' is not whitelisted in VM.`, 'EDENIED');
-					}
-
-					allowRequireTransitive = true;
-				}
-
-				// FIXME the paths array has side effects
-				const paths = currentDirname.split(pa.sep);
-
-				while (paths.length) {
-					const path = paths.join(pa.sep);
-
-					// console.log moduleName, "#{path}#{pa.sep}node_modules#{pa.sep}#{moduleName}"
-
-					filename = _resolveFilename(`${path}${pa.sep}node_modules${pa.sep}${moduleName}`);
-					if (filename) break;
-
-					paths.pop();
-				}
-			}
-
-			if (!filename) {
-				let resolveFunc;
-				try {
-					resolveFunc = requireObj.resolve;
-				} catch (e) {
-					throw Contextify.value(e);
-				}
-				if (resolveFunc) {
-					let resolved;
-					try {
-						resolved = requireObj.resolve(moduleName, currentDirname);
-					} catch (e) {
-						throw Contextify.value(e);
-					}
-					filename = _resolveFilename(resolved);
-				}
-			}
-			if (!filename) throw new VMError(`Cannot find module '${moduleName}'`, 'ENOTFOUND');
-
-			// return cache whenever possible
-			if (CACHE[filename]) return CACHE[filename].exports;
-
-			const dirname = pa.dirname(filename);
-			const extname = pa.extname(filename);
-
-			let allowedModule = true;
-			try {
-				const rootObj = requireObj.root;
-				if (rootObj) {
-					const rootPaths = host.Array.isArray(rootObj) ? rootObj : host.Array.of(rootObj);
-					allowedModule = rootPaths.some(path => host.String.prototype.startsWith.call(dirname, pa.resolve(path)));
-				}
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-
-			if (!allowedModule) {
-				throw new VMError(`Module '${moduleName}' is not allowed to be required. The path is outside the border!`, 'EDENIED');
-			}
-
-			const module = CACHE[filename] = {
-				filename,
-				exports: {},
-				require: _prepareRequire(dirname, allowRequireTransitive)
-			};
-
-			// lookup extensions
-			if (EXTENSIONS[extname]) {
-				EXTENSIONS[extname](module, filename, dirname);
-				return module.exports;
-			}
-
-			throw new VMError(`Failed to load '${moduleName}': Unknown type.`, 'ELOADFAIL');
-		};
-
-		return _require;
-	};
-
-	/**
-	 * Prepare sandbox.
-	 */
-
-	// This is a function and not an arrow function, since the original is also a function
-	global.setTimeout = function setTimeout(callback, delay, ...args) {
-		if (typeof callback !== 'function') throw new TypeError('"callback" argument must be a function');
-		let tmr;
-		try {
-			tmr = host.setTimeout(Decontextify.value(() => {
-				// FIXME ...args has side effects
-				callback(...args);
-			}), Decontextify.value(delay));
-		} catch (e) {
-			throw Contextify.value(e);
-		}
-		const local = Contextify.value(tmr);
-
-		TIMERS.set(local, tmr);
-		return local;
-	};
-
-	global.setInterval = function setInterval(callback, interval, ...args) {
-		if (typeof callback !== 'function') throw new TypeError('"callback" argument must be a function');
-		let tmr;
-		try {
-			tmr = host.setInterval(Decontextify.value(() => {
-				// FIXME ...args has side effects
-				callback(...args);
-			}), Decontextify.value(interval));
-		} catch (e) {
-			throw Contextify.value(e);
-		}
-
-		const local = Contextify.value(tmr);
-
-		TIMERS.set(local, tmr);
-		return local;
-	};
-
-	global.setImmediate = function setImmediate(callback, ...args) {
-		if (typeof callback !== 'function') throw new TypeError('"callback" argument must be a function');
-		let tmr;
-		try {
-			tmr = host.setImmediate(Decontextify.value(() => {
-				// FIXME ...args has side effects
-				callback(...args);
-			}));
-		} catch (e) {
-			throw Contextify.value(e);
-		}
-
-		const local = Contextify.value(tmr);
-
-		TIMERS.set(local, tmr);
-		return local;
-	};
-
-	global.clearTimeout = function clearTimeout(local) {
-		try {
-			host.clearTimeout(TIMERS.get(local));
-		} catch (e) {
-			throw Contextify.value(e);
-		}
-	};
-
-	global.clearInterval = function clearInterval(local) {
-		try {
-			host.clearInterval(TIMERS.get(local));
-		} catch (e) {
-			throw Contextify.value(e);
-		}
-	};
-
-	global.clearImmediate = function clearImmediate(local) {
-		try {
-			host.clearImmediate(TIMERS.get(local));
-		} catch (e) {
-			throw Contextify.value(e);
-		}
-	};
-
-	function addListener(name, handler) {
-		if (name !== 'beforeExit' && name !== 'exit') {
-			throw new Error(`Access denied to listen for '${name}' event.`);
-		}
-
-		try {
-			host.process.on(name, Decontextify.value(handler));
-		} catch (e) {
-			throw Contextify.value(e);
-		}
-
-		return this;
-	}
-
-	const {argv: optionArgv, env: optionsEnv} = options;
-
-	// FIXME wrong class structure
-	global.process = {
-		argv: optionArgv !== undefined ? Contextify.value(optionArgv) : [],
-		title: host.process.title,
-		version: host.process.version,
-		versions: Contextify.readonly(host.process.versions),
-		arch: host.process.arch,
-		platform: host.process.platform,
-		env: optionsEnv !== undefined ? Contextify.value(optionsEnv) : {},
-		pid: host.process.pid,
-		features: Contextify.readonly(host.process.features),
-		nextTick: function nextTick(callback, ...args) {
-			if (typeof callback !== 'function') {
-				throw new Error('Callback must be a function.');
-			}
-
-			try {
-				host.process.nextTick(Decontextify.value(() => {
-					// FIXME ...args has side effects
-					callback(...args);
-				}));
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-		},
-		hrtime: function hrtime(time) {
-			try {
-				return Contextify.value(host.process.hrtime(Decontextify.value(time)));
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-		},
-		cwd: function cwd() {
-			try {
-				return Contextify.value(host.process.cwd());
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-		},
-		addListener,
-		on: addListener,
-
-		once: function once(name, handler) {
-			if (name !== 'beforeExit' && name !== 'exit') {
-				throw new Error(`Access denied to listen for '${name}' event.`);
-			}
-
-			try {
-				host.process.once(name, Decontextify.value(handler));
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-
-			return this;
-		},
-
-		listeners: function listeners(name) {
-			if (name !== 'beforeExit' && name !== 'exit') {
-				// Maybe add ({__proto__:null})[name] to throw when name fails in https://tc39.es/ecma262/#sec-topropertykey.
-				return [];
-			}
-
-			// Filter out listeners, which were not created in this sandbox
-			try {
-				return Contextify.value(host.process.listeners(name).filter(listener => Contextify.isVMProxy(listener)));
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-		},
-
-		removeListener: function removeListener(name, handler) {
-			if (name !== 'beforeExit' && name !== 'exit') {
-				return this;
-			}
-
-			try {
-				host.process.removeListener(name, Decontextify.value(handler));
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-
-			return this;
-		},
-
-		umask: function umask() {
-			if (arguments.length) {
-				throw new Error('Access denied to set umask.');
-			}
-
-			try {
-				return Contextify.value(host.process.umask());
-			} catch (e) {
-				throw Contextify.value(e);
-			}
-		}
-	};
-
-	if (vm.options.console === 'inherit') {
-		global.console = Contextify.readonly(host.console);
-	} else if (vm.options.console === 'redirect') {
-		global.console = {
-			debug(...args) {
-				try {
-					// FIXME ...args has side effects
-					vm.emit('console.debug', ...Decontextify.arguments(args));
-				} catch (e) {
-					throw Contextify.value(e);
-				}
-			},
-			log(...args) {
-				try {
-					// FIXME ...args has side effects
-					vm.emit('console.log', ...Decontextify.arguments(args));
-				} catch (e) {
-					throw Contextify.value(e);
-				}
-			},
-			info(...args) {
-				try {
-					// FIXME ...args has side effects
-					vm.emit('console.info', ...Decontextify.arguments(args));
-				} catch (e) {
-					throw Contextify.value(e);
-				}
-			},
-			warn(...args) {
-				try {
-					// FIXME ...args has side effects
-					vm.emit('console.warn', ...Decontextify.arguments(args));
-				} catch (e) {
-					throw Contextify.value(e);
-				}
-			},
-			error(...args) {
-				try {
-					// FIXME ...args has side effects
-					vm.emit('console.error', ...Decontextify.arguments(args));
-				} catch (e) {
-					throw Contextify.value(e);
-				}
-			},
-			dir(...args) {
-				try {
-					vm.emit('console.dir', ...Decontextify.arguments(args));
-				} catch (e) {
-					throw Contextify.value(e);
-				}
-			},
-			time() {},
-			timeEnd() {},
-			trace(...args) {
-				try {
-					// FIXME ...args has side effects
-					vm.emit('console.trace', ...Decontextify.arguments(args));
-				} catch (e) {
-					throw Contextify.value(e);
-				}
-			}
-		};
-	}
-
-	/*
-	Return contextified require.
-	*/
-
-	return _prepareRequire;
-})(vm, host);

package.json

@@ -1,6 +1,6 @@
 {
   "name": "action-gh-release",
-  "version": "0.1.14",
+  "version": "0.1.15",
   "private": true,
   "description": "GitHub Action for creating GitHub Releases",
   "main": "lib/main.js",
@@ -18,28 +18,25 @@
     "actions"
   ],
   "author": "softprops",
-  "license": "MIT",
   "dependencies": {
-    "@octokit/action": "^3.18.0",
-    "@actions/core": "^1.4.0",
-    "@octokit/plugin-retry": "^3.0.9",
-    "@octokit/plugin-throttling": "^3.5.1",
-    "glob": "^7.1.6",
-    "mime": "^2.4.4",
-    "node-fetch": "^2.6.1"
+    "@actions/core": "^1.10.0",
+    "@actions/github": "^5.1.1",
+    "@octokit/plugin-retry": "^4.0.3",
+    "@octokit/plugin-throttling": "^4.3.2",
+    "glob": "^8.0.3",
+    "mime": "^3.0.0"
   },
   "devDependencies": {
-    "@types/glob": "^7.1.1",
-    "@types/jest": "^24.0.25",
-    "@types/mime": "^2.0.1",
-    "@types/node": "^12.12.24",
-    "@types/node-fetch": "^2.5.12",
-    "@vercel/ncc": "^0.33.0",
-    "jest": "^24.9.0",
-    "jest-circus": "^24.9.0",
-    "prettier": "1.19.1",
-    "ts-jest": "^24.2.0",
-    "typescript": "^3.7.4",
+    "@types/glob": "^8.0.0",
+    "@types/jest": "^29.2.3",
+    "@types/mime": "^3.0.1",
+    "@types/node": "^18.11.9",
+    "@vercel/ncc": "^0.34.0",
+    "jest": "^29.3.1",
+    "jest-circus": "^29.3.1",
+    "prettier": "2.8.0",
+    "ts-jest": "^29.0.3",
+    "typescript": "^4.9.3",
     "typescript-formatter": "^7.2.2"
   }
 }

release.sh

@@ -1,17 +0,0 @@
-#!/bin/bash
-# actions requires a node_modules dir https://github.com/actions/toolkit/blob/master/docs/javascript-action.md#publish-a-releasesv1-action
-# but its recommended not to check these in https://github.com/actions/toolkit/blob/master/docs/action-versioning.md#recommendations
-# as such the following hack is how we dill with it
-
-if [[ $# -ne 1 ]]; then
-	echo "please pass a release version. i.e. $0 v1"
-	exit 1
-fi
-
-git checkout -b releases/$1 # If this branch already exists, omit the -b flag
-rm -rf node_modules
-sed -i '/node_modules/d' .gitignore # Bash command that removes node_modules from .gitignore
-npm install --production
-git add node_modules -f .gitignore
-git commit -m node_modules
-git push origin releases/$1

src/github.ts

@@ -1,11 +1,10 @@
-import fetch from "node-fetch";
-import { Octokit } from "@octokit/action";
+import { GitHub } from "@actions/github/lib/utils";
 import { Config, isTag, releaseBody } from "./util";
 import { statSync, readFileSync } from "fs";
 import { getType } from "mime";
 import { basename } from "path";
 
-type GitHub = InstanceType<typeof Octokit>;
+type GitHub = InstanceType<typeof GitHub>;
 
 export interface ReleaseAsset {
   name: string;
@@ -45,6 +44,7 @@ export interface Releaser {
     target_commitish: string | undefined;
     discussion_category_name: string | undefined;
     generate_release_notes: boolean | undefined;
+    make_latest: string | undefined;
   }): Promise<{ data: Release }>;
 
   updateRelease(params: {
@@ -59,6 +59,7 @@ export interface Releaser {
     prerelease: boolean | undefined;
     discussion_category_name: string | undefined;
     generate_release_notes: boolean | undefined;
+    make_latest: string | undefined;
   }): Promise<{ data: Release }>;
 
   allReleases(params: {
@@ -92,6 +93,7 @@ export class GitHubReleaser implements Releaser {
     target_commitish: string | undefined;
     discussion_category_name: string | undefined;
     generate_release_notes: boolean | undefined;
+    make_latest: string | undefined;
   }): Promise<{ data: Release }> {
     return this.github.rest.repos.createRelease(params);
   }
@@ -108,6 +110,7 @@ export class GitHubReleaser implements Releaser {
     prerelease: boolean | undefined;
     discussion_category_name: string | undefined;
     generate_release_notes: boolean | undefined;
+    make_latest: string | undefined;
   }): Promise<{ data: Release }> {
     return this.github.rest.repos.updateRelease(params);
   }
@@ -128,7 +131,7 @@ export const asset = (path: string): ReleaseAsset => {
     name: basename(path),
     mime: mimeOrDefault(path),
     size: statSync(path).size,
-    data: readFileSync(path)
+    data: readFileSync(path),
   };
 };
 
@@ -153,22 +156,23 @@ export const upload = async (
     await github.rest.repos.deleteReleaseAsset({
       asset_id: currentAsset.id || 1,
       owner,
-      repo
+      repo,
     });
   }
   console.log(`⬆️ Uploading ${name}...`);
   const endpoint = new URL(url);
   endpoint.searchParams.append("name", name);
-  const resp = await fetch(endpoint, {
+  const resp = await github.request({
+    method: "POST",
+    url: endpoint.toString(),
     headers: {
       "content-length": `${size}`,
       "content-type": mime,
-      authorization: `token ${config.github_token}`
+      authorization: `token ${config.github_token}`,
     },
-    method: "POST",
-    body
+    data: body,
   });
-  const json = await resp.json();
+  const json = resp.data;
   if (resp.status !== 201) {
     throw new Error(
       `Failed to upload release asset ${name}. received status code ${
@@ -204,9 +208,9 @@ export const release = async (
     if (config.input_draft) {
       for await (const response of releaser.allReleases({
         owner,
-        repo
+        repo,
       })) {
-        let release = response.data.find(release => release.tag_name === tag);
+        let release = response.data.find((release) => release.tag_name === tag);
         if (release) {
           return release;
         }
@@ -215,7 +219,7 @@ export const release = async (
     let existingRelease = await releaser.getReleaseByTag({
       owner,
       repo,
-      tag
+      tag,
     });
 
     const release_id = existingRelease.data.id;
@@ -238,7 +242,14 @@ export const release = async (
     // body parts as a release gets updated. some users will likely want this while
     // others won't previously this was duplicating content for most which
     // no one wants
-    let body = releaseBody(config) || existingRelease.data.body || "";
+    const workflowBody = releaseBody(config) || "";
+    const existingReleaseBody = existingRelease.data.body || "";
+    let body: string;
+    if (config.input_append_body && workflowBody && existingReleaseBody) {
+      body = existingReleaseBody + "\n" + workflowBody;
+    } else {
+      body = workflowBody || existingReleaseBody;
+    }
 
     const draft =
       config.input_draft !== undefined
@@ -249,6 +260,8 @@ export const release = async (
         ? config.input_prerelease
         : existingRelease.data.prerelease;
 
+    const make_latest = config.input_make_latest;
+
     const release = await releaser.updateRelease({
       owner,
       repo,
@@ -260,7 +273,8 @@ export const release = async (
       draft,
       prerelease,
       discussion_category_name,
-      generate_release_notes
+      generate_release_notes,
+      make_latest,
     });
     return release.data;
   } catch (error) {
@@ -271,6 +285,7 @@ export const release = async (
       const draft = config.input_draft;
       const prerelease = config.input_prerelease;
       const target_commitish = config.input_target_commitish;
+      const make_latest = config.input_make_latest;
       let commitMessage: string = "";
       if (target_commitish) {
         commitMessage = ` using commit "${target_commitish}"`;
@@ -289,7 +304,8 @@ export const release = async (
           prerelease,
           target_commitish,
           discussion_category_name,
-          generate_release_notes
+          generate_release_notes,
+          make_latest,
         });
         return release.data;
       } catch (error) {
@@ -297,9 +313,9 @@ export const release = async (
         console.log(
           `⚠️ GitHub release failed with status: ${
             error.status
-          }\n${JSON.stringify(
-            error.response.data.errors
-          )}\nretrying... (${maxRetries - 1} retries remaining)`
+          }\n${JSON.stringify(error.response.data.errors)}\nretrying... (${
+            maxRetries - 1
+          } retries remaining)`
         );
         return release(config, releaser, maxRetries - 1);
       }

src/main.ts

@@ -3,13 +3,13 @@ import {
   parseConfig,
   isTag,
   unmatchedPatterns,
-  uploadUrl
+  uploadUrl,
 } from "./util";
 import { release, upload, GitHubReleaser } from "./github";
-import { Octokit } from "@octokit/action";
+import { getOctokit } from "@actions/github";
 import { setFailed, setOutput } from "@actions/core";
-import { retry } from "@octokit/plugin-retry";
-import { throttling } from "@octokit/plugin-throttling";
+import { GitHub, getOctokitOptions } from "@actions/github/lib/utils";
+
 import { env } from "process";
 
 async function run() {
@@ -24,17 +24,25 @@ async function run() {
     }
     if (config.input_files) {
       const patterns = unmatchedPatterns(config.input_files);
-      patterns.forEach(pattern =>
-        console.warn(`🤔 Pattern '${pattern}' does not match any files.`)
-      );
+      patterns.forEach((pattern) => {
+        if (config.input_fail_on_unmatched_files) {
+          throw new Error(`⚠️  Pattern '${pattern}' does not match any files.`);
+        } else {
+          console.warn(`🤔 Pattern '${pattern}' does not match any files.`);
+        }
+      });
       if (patterns.length > 0 && config.input_fail_on_unmatched_files) {
         throw new Error(`⚠️ There were unmatched files`);
       }
     }
 
-    const OctokitWithPlugins = Octokit.plugin(retry, throttling);
-    const gh = new OctokitWithPlugins({
-      auth: config.github_token,
+    // const oktokit = GitHub.plugin(
+    //   require("@octokit/plugin-throttling"),
+    //   require("@octokit/plugin-retry")
+    // );
+
+    const gh = getOctokit(config.github_token, {
+      //new oktokit(
       throttle: {
         onRateLimit: (retryAfter, options) => {
           console.warn(
@@ -51,19 +59,19 @@ async function run() {
           console.warn(
             `Abuse detected for request ${options.method} ${options.url}`
           );
-        }
-      }
+        },
+      },
     });
     //);
     const rel = await release(config, new GitHubReleaser(gh));
-    if (config.input_files) {
+    if (config.input_files && config.input_files.length > 0) {
       const files = paths(config.input_files);
       if (files.length == 0) {
-        console.warn(`🤔 ${config.input_files} not include valid file.`);
+        throw new Error(`⚠️ ${config.input_files} not include valid file.`);
       }
       const currentAssets = rel.assets;
       const assets = await Promise.all(
-        files.map(async path => {
+        files.map(async (path) => {
           const json = await upload(
             config,
             gh,
@@ -74,7 +82,7 @@ async function run() {
           delete json.uploader;
           return json;
         })
-      ).catch(error => {
+      ).catch((error) => {
         throw error;
       });
       setOutput("assets", assets);

src/util.ts

@@ -18,6 +18,8 @@ export interface Config {
   input_target_commitish?: string;
   input_discussion_category_name?: string;
   input_generate_release_notes?: boolean;
+  input_append_body?: boolean;
+  input_make_latest: string | undefined;
 }
 
 export const uploadUrl = (url: string): string => {
@@ -43,8 +45,8 @@ export const parseInputFiles = (files: string): string[] => {
     (acc, line) =>
       acc
         .concat(line.split(","))
-        .filter(pat => pat)
-        .map(pat => pat.trim()),
+        .filter((pat) => pat)
+        .map((pat) => pat.trim()),
     []
   );
 };
@@ -67,14 +69,18 @@ export const parseConfig = (env: Env): Config => {
     input_target_commitish: env.INPUT_TARGET_COMMITISH || undefined,
     input_discussion_category_name:
       env.INPUT_DISCUSSION_CATEGORY_NAME || undefined,
-    input_generate_release_notes: env.INPUT_GENERATE_RELEASE_NOTES == "true"
+    input_generate_release_notes: env.INPUT_GENERATE_RELEASE_NOTES == "true",
+    input_append_body: env.INPUT_APPEND_BODY == "true",
+    input_make_latest: env.INPUT_MAKE_LATEST
+      ? env.INPUT_MAKE_LATEST
+      : undefined,
   };
 };
 
 export const paths = (patterns: string[]): string[] => {
   return patterns.reduce((acc: string[], pattern: string): string[] => {
     return acc.concat(
-      glob.sync(pattern).filter(path => statSync(path).isFile())
+      glob.sync(pattern).filter((path) => statSync(path).isFile())
     );
   }, []);
 };
@@ -82,7 +88,7 @@ export const paths = (patterns: string[]): string[] => {
 export const unmatchedPatterns = (patterns: string[]): string[] => {
   return patterns.reduce((acc: string[], pattern: string): string[] => {
     return acc.concat(
-      glob.sync(pattern).filter(path => statSync(path).isFile()).length == 0
+      glob.sync(pattern).filter((path) => statSync(path).isFile()).length == 0
         ? [pattern]
         : []
     );

tsconfig.json

@@ -1,5 +1,6 @@
 {
   "compilerOptions": {
+    "useUnknownInCatchVariables": false,
     /* Basic Options */
     // "incremental": true,                   /* Enable incremental compilation */
     "target": "es6",                          /* Specify ECMAScript target version: 'ES3' (default), 'ES5', 'ES2015', 'ES2016', 'ES2017', 'ES2018', 'ES2019' or 'ESNEXT'. */