Update CHANGELOG

Bumps [crazy-max/ghaction-github-labeler](https://github.com/crazy-max/ghaction-github-labeler) from v3.0.0 to v3.1.0.
- [Release notes](https://github.com/crazy-max/ghaction-github-labeler/releases)
- [Changelog](https://github.com/crazy-max/ghaction-github-labeler/blob/master/CHANGELOG.md)
- [Commits](https://github.com/crazy-max/ghaction-github-labeler/compare/v3.0.0...dbccbd0ebd1178b5942ba419c921b36525829588)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/CONTRIBUTING.md

@@ -7,11 +7,11 @@ Contributions to this project are [released](https://help.github.com/articles/gi
 ## Submitting a pull request
 
 1. [Fork](https://github.com/crazy-max/ghaction-upx/fork) and clone the repository
-2. Configure and install the dependencies: `npm install`
-3. Make sure the tests pass on your machine: `npm run test`
+2. Configure and install the dependencies: `yarn install`
+3. Make sure the tests pass on your machine: `yarn run test`
 4. Create a new branch: `git checkout -b my-branch-name`
 5. Make your change, add tests, and make sure the tests still pass
-6. Run pre-checkin: `npm run pre-checkin`
+6. Run pre-checkin: `yarn run pre-checkin`
 7. Push to your fork and [submit a pull request](https://github.com/crazy-max/ghaction-upx/compare)
 8. Pat your self on the back and wait for your pull request to be reviewed and merged.
 

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,33 @@
+---
+name: Bug report
+about: Create a report to help us improve
+---
+
+### Behaviour
+
+#### Steps to reproduce this issue
+
+1.
+2.
+3.
+
+#### Expected behaviour
+
+> Tell me what should happen
+
+#### Actual behaviour
+
+> Tell me what happens instead
+
+### Configuration
+
+* Repository URL (if public): 
+* Build URL (if public): 
+
+```yml
+# paste your YAML workflow file here and remove sensitive data
+```
+
+### Logs
+
+> Download the [log file of your build](https://help.github.com/en/actions/configuring-and-managing-workflows/managing-a-workflow-run#downloading-logs) and [attach it](https://help.github.com/en/github/managing-your-work-on-github/file-attachments-on-issues-and-pull-requests) to this issue.

.github/SUPPORT.md

@@ -0,0 +1,29 @@
+# Support [![](https://isitmaintained.com/badge/resolution/crazy-max/ghaction-upx.svg)](https://isitmaintained.com/project/crazy-max/ghaction-upx)
+
+## Reporting an issue
+
+Please do a search in [open issues](https://github.com/crazy-max/ghaction-upx/issues?utf8=%E2%9C%93&q=) to see if the issue or feature request has already been filed.
+
+If you find your issue already exists, make relevant comments and add your [reaction](https://github.com/blog/2119-add-reactions-to-pull-requests-issues-and-comments). Use a reaction in place of a "+1" comment.
+
+:+1: - upvote
+
+:-1: - downvote
+
+If you cannot find an existing issue that describes your bug or feature, submit an issue using the guidelines below.
+
+## Writing good bug reports and feature requests
+
+File a single issue per problem and feature request.
+
+* Do not enumerate multiple bugs or feature requests in the same issue.
+* Do not add your issue as a comment to an existing issue unless it's for the identical input. Many issues look similar, but have different causes.
+
+The more information you can provide, the more likely someone will be successful reproducing the issue and finding a fix.
+
+You are now ready to [create a new issue](https://github.com/crazy-max/ghaction-upx/issues/new/choose)!
+
+## Closure policy
+
+* Issues that don't have the information requested above (when applicable) will be closed immediately and the poster directed to the support guidelines.
+* Issues that go a week without a response from original poster are subject to closure at my discretion.

.github/dependabot.yml

@@ -1,6 +1,6 @@
 version: 2
 updates:
-  - package-ecosystem: "npm"
+  - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "daily"
@@ -9,3 +9,14 @@ updates:
     labels:
       - ":game_die: dependencies"
       - ":robot: bot"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+      time: "06:00"
+      timezone: "Europe/Paris"
+    allow:
+      - dependency-type: "production"
+    labels:
+      - ":game_die: dependencies"
+      - ":robot: bot"

.github/labels.yml

@@ -1,4 +1,8 @@
 ## more info https://github.com/crazy-max/ghaction-github-labeler
+- # automerge
+  name: ":bell: automerge"
+  color: "8f4fbc"
+  description: ""
 - # bot
   name: ":robot: bot"
   color: "69cde9"

.github/workflows/ci.yml

@@ -1,12 +1,16 @@
 name: ci
 
 on:
+  schedule:
+    - cron: '0 10 * * *' # everyday at 10am
   pull_request:
     branches:
       - master
+      - releases/v*
   push:
     branches:
       - master
+      - releases/v*
 
 jobs:
   ci:
@@ -17,17 +21,18 @@ jobs:
         os:
           - ubuntu-latest
           - windows-latest
+        version:
+          - latest
+          - v3.95
         include:
           - os: ubuntu-latest
-            version: latest
             file: https://github.com/crazy-max/firefox-history-merger/releases/download/2.4.0/firefox-history-merger-linux-amd64
           - os: windows-latest
-            version: latest
             file: https://github.com/crazy-max/firefox-history-merger/releases/download/2.4.0/firefox-history-merger-windows-4.0-amd64.exe
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v1
+        uses: actions/checkout@v2.3.3
       -
         name: Download file
         id: download

.github/workflows/labels.yml

@@ -13,13 +13,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       -
-        # https://github.com/actions/checkout
         name: Checkout
-        uses: actions/checkout@v1
+        uses: actions/checkout@v2.3.3
       -
-        # https://github.com/crazy-max/ghaction-github-labeler
         name: Run Labeler
-        if: success()
-        uses: crazy-max/ghaction-github-labeler@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        uses: crazy-max/ghaction-github-labeler@v3.1.0

.github/workflows/lint.yml

@@ -1,22 +0,0 @@
-name: lint
-
-on:
-  pull_request:
-    paths:
-      - '.github/workflows/lint.yml'
-      - 'src/*'
-
-jobs:
-  lint:
-    runs-on: ubuntu-latest
-    steps:
-      -
-        # https://github.com/actions/checkout
-        name: Checkout
-        uses: actions/checkout@v1
-      -
-        name: Setup TS
-        run: npm install tslint typescript -g
-      -
-        name: Lint check
-        run: tslint './src/*.ts'

.github/workflows/master.yml

@@ -1,41 +0,0 @@
-name: master
-
-on:
-  push:
-    branches:
-      - master
-
-jobs:
-  prune:
-    runs-on: ubuntu-latest
-    steps:
-      -
-        # https://github.com/actions/checkout
-        name: Checkout
-        uses: actions/checkout@v1
-      -
-        # https://github.com/actions/checkout/issues/6
-        name: Fix detached HEAD
-        run: git checkout ${GITHUB_REF#refs/heads/}
-      -
-        name: Build
-        run: |
-          npm install
-          npm run format
-          npm run build
-      -
-        name: Set up Git
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          git config user.name "${GITHUB_ACTOR}"
-          git config user.email "${GITHUB_ACTOR}@users.noreply.github.com"
-          git remote set-url origin https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git
-      -
-        name: Commit and push changes
-        run: |
-          git add .
-          if output=$(git status --porcelain) && [ ! -z "$output" ]; then
-            git commit -m 'Update generated content'
-            git push
-          fi

.github/workflows/pre-checkin.yml

@@ -0,0 +1,30 @@
+name: pre-checkin
+
+on:
+  push:
+    paths-ignore:
+      - '**.md'
+  pull_request:
+    paths-ignore:
+      - '**.md'
+
+jobs:
+  pre-checkin:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v2.3.3
+      -
+        name: Install
+        run: yarn install
+      -
+        name: Pre-checkin
+        run: yarn run pre-checkin
+      -
+        name: Check for uncommitted changes
+        run: |
+          if [[ `git status --porcelain` ]]; then
+            git status --porcelain
+            echo "::warning::Found changes. Please run 'yarn run pre-checkin' and push"
+          fi

.github/workflows/test.yml

@@ -1,12 +1,15 @@
 name: test
 
 on:
-  pull_request:
-    branches:
-      - master
   push:
     branches:
       - master
+      - releases/v*
+    paths-ignore:
+      - '**.md'
+  pull_request:
+    paths-ignore:
+      - '**.md'
 
 jobs:
   test:
@@ -19,20 +22,18 @@ jobs:
           - windows-latest
     steps:
       -
-        # https://github.com/actions/checkout
         name: Checkout
-        uses: actions/checkout@v1
-      -
-        name: Build
-        run: |
-          npm install
-          npm run build
+        uses: actions/checkout@v2.3.3
       -
         name: Install
-        run: npm ci
-      -
-        name: Build
-        run: npm run build
+        run: yarn install
       -
         name: Test
-        run: npm run test
+        run: yarn run test
+      -
+        name: Upload coverage
+        uses: codecov/codecov-action@v1.0.13
+        if: success()
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          file: ./coverage/clover.xml

CHANGELOG.md

@@ -0,0 +1,32 @@
+# Changelog
+
+## 1.3.3 (2020/10/01)
+
+* Fix CVE-2020-15228
+
+## 1.3.2 (2020/05/11)
+
+* Update README
+
+## 1.3.1 (2020/05/07)
+
+* Code cleanup
+
+## 1.3.0 (2020/05/06)
+
+* Use native tools
+* Add Codecov
+* Update deps
+
+## 1.2.0 (2020/04/09)
+
+* Use ncc and clean workflows
+* Update deps
+
+## 1.1.0 (2020/01/17)
+
+* Update deps
+
+## 1.0.0 (2020/01/17)
+
+* Initial version

README.md

@@ -1,7 +1,7 @@
 [![GitHub release](https://img.shields.io/github/release/crazy-max/ghaction-upx.svg?style=flat-square)](https://github.com/crazy-max/ghaction-upx/releases/latest)
 [![GitHub marketplace](https://img.shields.io/badge/marketplace-upx--github--action-blue?logo=github&style=flat-square)](https://github.com/marketplace/actions/upx-github-action)
-[![Release workflow](https://github.com/crazy-max/ghaction-upx/workflows/release/badge.svg)](https://github.com/crazy-max/ghaction-upx/actions?workflow=release)
-[![Test workflow](https://github.com/crazy-max/ghaction-upx/workflows/test/badge.svg)](https://github.com/crazy-max/ghaction-upx/actions?workflow=test)
+[![Test workflow](https://img.shields.io/github/workflow/status/crazy-max/ghaction-upx/test?label=test&logo=github&style=flat-square)](https://github.com/crazy-max/ghaction-upx/actions?workflow=test)
+[![Codecov](https://img.shields.io/codecov/c/github/crazy-max/ghaction-upx?logo=codecov&style=flat-square)](https://codecov.io/gh/crazy-max/ghaction-upx)
 [![Become a sponsor](https://img.shields.io/badge/sponsor-crazy--max-181717.svg?logo=github&style=flat-square)](https://github.com/sponsors/crazy-max)
 [![Paypal Donate](https://img.shields.io/badge/donate-paypal-00457c.svg?logo=paypal&style=flat-square)](https://www.paypal.me/crazyws)
 
@@ -9,9 +9,17 @@
 
 GitHub Action for [UPX](https://github.com/upx/upx), the Ultimate Packer for eXecutables.
 
-## Usage
+___
 
-Below is a simple snippet to use this action. A [live example](https://github.com/crazy-max/ghaction-upx/actions) is also available for this repository.
+* [Usage](#usage)
+* [Customizing](#customizing)
+  * [inputs](#inputs)
+* [Keep up-to-date with GitHub Dependabot](#keep-up-to-date-with-github-dependabot)
+* [Limitation](#limitation)
+* [How can I help?](#how-can-i-help)
+* [License](#license)
+
+## Usage
 
 ```yaml
 name: upx
@@ -26,7 +34,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v1
+        uses: actions/checkout@v2
       -
         name: Run UPX
         uses: crazy-max/ghaction-upx@v1
@@ -42,17 +50,33 @@ jobs:
 
 Following inputs can be used as `step.with` keys
 
-| Name          | Type    | Default   | Description                   |
-|---------------|---------|-----------|-------------------------------|
-| `version`     | String  | `latest`  | UPX version. Example: `3.95`  |
-| `file`        | String  |           | File to compress              |
-| `args`        | String  |           | Arguments to pass to UPX      |
+| Name          | Type    | Default   | Description                     |
+|---------------|---------|-----------|---------------------------------|
+| `version`     | String  | `latest`  | UPX version. Example: `v3.95`   |
+| `file`        | String  |           | File to compress (**required**) |
+| `args`        | String  |           | Arguments to pass to UPX        |
+
+## Keep up-to-date with GitHub Dependabot
+
+Since [Dependabot](https://docs.github.com/en/github/administering-a-repository/keeping-your-actions-up-to-date-with-github-dependabot)
+has [native GitHub Actions support](https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates#package-ecosystem),
+to enable it on your GitHub repo all you need to do is add the `.github/dependabot.yml` file:
+
+```yaml
+version: 2
+updates:
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+```
 
 ## Limitation
 
 This action is only available for Linux and Windows [virtual environments](https://help.github.com/en/articles/virtual-environments-for-github-actions#supported-virtual-environments-and-hardware-resources).
 
-## How can I help ?
+## How can I help?
 
 All kinds of contributions are welcome :raised_hands:! The most basic way to show your support is to star :star2: the project, or to raise issues :speech_balloon: You can also support this project by [**becoming a sponsor on GitHub**](https://github.com/sponsors/crazy-max) :clap: or by making a [Paypal donation](https://www.paypal.me/crazyws) to ensure this journey continues indefinitely! :rocket:
 

__tests__/github.test.ts

@@ -0,0 +1,17 @@
+import * as github from '../src/github';
+
+describe('github', () => {
+  it('returns latest UPX GitHub release', async () => {
+    const release = await github.getRelease('latest');
+    console.log(release);
+    expect(release).not.toBeNull();
+    expect(release?.tag_name).not.toEqual('');
+  });
+
+  it('returns v3.96 GoReleaser GitHub release', async () => {
+    const release = await github.getRelease('v3.96');
+    console.log(release);
+    expect(release).not.toBeNull();
+    expect(release?.tag_name).toEqual('v3.96');
+  });
+});

__tests__/installer.test.ts

@@ -2,13 +2,15 @@ import fs = require('fs');
 import * as installer from '../src/installer';
 
 describe('installer', () => {
-  it('acquires 3.95 version of UPX', async () => {
-    const upx = await installer.getUPX('3.95');
+  it('acquires v3.95 version of UPX', async () => {
+    const upx = await installer.getUPX('v3.95');
+    console.log(upx);
     expect(fs.existsSync(upx)).toBe(true);
   }, 100000);
 
   it('acquires latest version of UPX', async () => {
     const upx = await installer.getUPX('latest');
+    console.log(upx);
     expect(fs.existsSync(upx)).toBe(true);
   }, 100000);
 });

action.yml

@@ -10,11 +10,13 @@ inputs:
   version:
     description: 'UPX version. Example: 3.95'
     default: 'latest'
+    required: false
   file:
     description: 'File to compress'
     required: true
   args:
     description: 'Arguments to pass to UPX'
+    required: false
 
 runs:
   using: 'node12'

jest.config.js

@@ -7,5 +7,5 @@ module.exports = {
   transform: {
     '^.+\\.ts$': 'ts-jest'
   },
-  verbose: true
-}
+  verbose: false
+}

lib/installer.js

@@ -1,83 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (Object.hasOwnProperty.call(mod, k)) result[k] = mod[k];
-    result["default"] = mod;
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const download = __importStar(require("download"));
-const fs = __importStar(require("fs"));
-const os = __importStar(require("os"));
-const path = __importStar(require("path"));
-const util = __importStar(require("util"));
-const restm = __importStar(require("typed-rest-client/RestClient"));
-const core = __importStar(require("@actions/core"));
-const tc = __importStar(require("@actions/tool-cache"));
-let osPlat = os.platform();
-let osArch = os.arch();
-function getUPX(version) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const selected = yield determineVersion(version);
-        if (selected) {
-            version = selected;
-        }
-        core.info(`✅ UPX version found: ${version}`);
-        const tmpdir = fs.mkdtempSync(path.join(os.tmpdir(), 'upx-'));
-        const fileName = getFileName(version);
-        const downloadUrl = util.format('https://github.com/upx/upx/releases/download/v%s/%s', version, fileName);
-        core.info(`⬇️ Downloading ${downloadUrl}...`);
-        yield download.default(downloadUrl, tmpdir, { filename: fileName });
-        core.info('📦 Extracting UPX...');
-        let extPath = tmpdir;
-        if (osPlat == 'win32') {
-            extPath = yield tc.extractZip(`${tmpdir}/${fileName}`);
-        }
-        else {
-            extPath = yield tc.extractTar(`${tmpdir}/${fileName}`, undefined, 'x');
-        }
-        return path.join(extPath, getFileNameWithoutExt(version), osPlat == 'win32' ? 'upx.exe' : 'upx');
-    });
-}
-exports.getUPX = getUPX;
-function getFileName(version) {
-    const ext = osPlat == 'win32' ? 'zip' : 'tar.xz';
-    return util.format('%s.%s', getFileNameWithoutExt(version), ext);
-}
-function getFileNameWithoutExt(version) {
-    let platform = '';
-    if (osPlat == 'win32') {
-        platform = osArch == 'x64' ? 'win64' : 'win32';
-    }
-    else if (osPlat == 'linux') {
-        platform = osArch == 'x64' ? 'amd64_linux' : 'i386_linux';
-    }
-    return util.format('upx-%s-%s', version, platform);
-}
-function determineVersion(version) {
-    return __awaiter(this, void 0, void 0, function* () {
-        let rest = new restm.RestClient('ghaction-upx', 'https://github.com', undefined, {
-            headers: {
-                Accept: 'application/json'
-            }
-        });
-        if (version !== 'latest') {
-            version = `v${version}`;
-        }
-        let res = yield rest.get(`/upx/upx/releases/${version}`);
-        if (res.statusCode != 200 || res.result === null) {
-            throw new Error(`Cannot find UPX ${version} release (http ${res.statusCode})`);
-        }
-        return res.result.tag_name.replace(/^v/, '');
-    });
-}

lib/main.js

@@ -1,49 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (Object.hasOwnProperty.call(mod, k)) result[k] = mod[k];
-    result["default"] = mod;
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const installer = __importStar(require("./installer"));
-const fs = __importStar(require("fs"));
-const os = __importStar(require("os"));
-const core = __importStar(require("@actions/core"));
-const exec = __importStar(require("@actions/exec"));
-function run(silent) {
-    return __awaiter(this, void 0, void 0, function* () {
-        try {
-            if (os.platform() == 'darwin') {
-                core.setFailed('Not supported on darwin platform');
-                return;
-            }
-            const version = core.getInput('version') || 'latest';
-            const file = core.getInput('file', { required: true });
-            const args = core.getInput('args');
-            const upx = yield installer.getUPX(version);
-            if (!fs.existsSync(file)) {
-                core.setFailed(`⛔ File to compress not found: ${file}`);
-            }
-            console.log('🏃 Running UPX...');
-            yield exec.exec(`${upx} ${args} ${file}`, undefined, {
-                silent: silent
-            });
-        }
-        catch (error) {
-            core.setFailed(error.message);
-        }
-    });
-}
-exports.run = run;
-run();

package.json

@@ -2,15 +2,12 @@
   "name": "upx-github-action",
   "description": "GitHub Action for UPX, the Ultimate Packer for eXecutables",
   "main": "lib/main.js",
-  "directories": {
-    "lib": "lib"
-  },
   "scripts": {
     "build": "tsc && ncc build",
-    "test": "jest",
+    "test": "jest --coverage",
     "format": "prettier --write **/*.ts",
     "format-check": "prettier --check **/*.ts",
-    "pre-checkin": "npm run format && npm run build"
+    "pre-checkin": "yarn run format && yarn run build"
   },
   "repository": {
     "type": "git",
@@ -23,23 +20,21 @@
   "author": "CrazyMax",
   "license": "MIT",
   "dependencies": {
-    "@actions/core": "^1.2.3",
-    "@actions/exec": "^1.0.3",
-    "@actions/tool-cache": "^1.3.3",
-    "download": "^8.0.0",
-    "typed-rest-client": "^1.7.3"
+    "@actions/core": "^1.2.6",
+    "@actions/exec": "^1.0.4",
+    "@actions/http-client": "^1.0.8",
+    "@actions/tool-cache": "^1.6.0"
   },
   "devDependencies": {
-    "@types/jest": "^25.2.1",
-    "@types/node": "^13.11.0",
-    "@types/download": "^6.2.4",
-    "@zeit/ncc": "^0.22.1",
-    "jest": "^25.2.7",
-    "jest-circus": "^25.2.7",
-    "jest-runtime": "^25.2.7",
-    "prettier": "^2.0.4",
-    "ts-jest": "^25.3.1",
-    "typescript": "^3.8.3",
+    "@types/jest": "^26.0.14",
+    "@types/node": "^14.11.2",
+    "@vercel/ncc": "^0.24.1",
+    "jest": "^26.4.2",
+    "jest-circus": "^26.4.2",
+    "jest-runtime": "^26.4.2",
+    "prettier": "^2.1.2",
+    "ts-jest": "^26.4.1",
+    "typescript": "^4.0.3",
     "typescript-formatter": "^7.2.2"
   }
 }

src/github.ts

@@ -0,0 +1,12 @@
+import * as httpm from '@actions/http-client';
+
+export interface GitHubRelease {
+  id: number;
+  tag_name: string;
+}
+
+export const getRelease = async (version: string): Promise<GitHubRelease | null> => {
+  const url: string = `https://github.com/upx/upx/releases/${version}`;
+  const http: httpm.HttpClient = new httpm.HttpClient('ghaction-upx');
+  return (await http.getJson<GitHubRelease>(url)).result;
+};

src/installer.ts

@@ -1,46 +1,47 @@
-import * as download from 'download';
-import * as fs from 'fs';
 import * as os from 'os';
 import * as path from 'path';
 import * as util from 'util';
-import * as restm from 'typed-rest-client/RestClient';
+import * as github from './github';
 import * as core from '@actions/core';
 import * as tc from '@actions/tool-cache';
 
-let osPlat: string = os.platform();
-let osArch: string = os.arch();
+const osPlat: string = os.platform();
+const osArch: string = os.arch();
 
 export async function getUPX(version: string): Promise<string> {
-  const selected = await determineVersion(version);
-  if (selected) {
-    version = selected;
+  const release: github.GitHubRelease | null = await github.getRelease(version);
+  if (!release) {
+    throw new Error(`Cannot find UPX ${version} release`);
   }
+  const semver: string = release.tag_name.replace(/^v/, '');
 
-  core.info(`✅ UPX version found: ${version}`);
-  const tmpdir = fs.mkdtempSync(path.join(os.tmpdir(), 'upx-'));
-  const fileName = getFileName(version);
-  const downloadUrl = util.format('https://github.com/upx/upx/releases/download/v%s/%s', version, fileName);
+  core.info(`✅ UPX version found: ${semver}`);
+  const filename = util.format('%s.%s', getName(semver), osPlat == 'win32' ? 'zip' : 'tar.xz');
+  const downloadUrl = util.format('https://github.com/upx/upx/releases/download/v%s/%s', semver, filename);
 
   core.info(`⬇️ Downloading ${downloadUrl}...`);
-  await download.default(downloadUrl, tmpdir, {filename: fileName});
+  const downloadPath: string = await tc.downloadTool(downloadUrl);
+  core.debug(`Downloaded to ${downloadPath}`);
 
   core.info('📦 Extracting UPX...');
-  let extPath: string = tmpdir;
+  let extPath: string;
   if (osPlat == 'win32') {
-    extPath = await tc.extractZip(`${tmpdir}/${fileName}`);
+    extPath = await tc.extractZip(downloadPath);
   } else {
-    extPath = await tc.extractTar(`${tmpdir}/${fileName}`, undefined, 'x');
+    extPath = await tc.extractTar(downloadPath, undefined, 'x');
   }
+  core.debug(`Extracted to ${extPath}`);
 
-  return path.join(extPath, getFileNameWithoutExt(version), osPlat == 'win32' ? 'upx.exe' : 'upx');
+  const cachePath: string = await tc.cacheDir(extPath, 'ghaction-upx', semver);
+  core.debug(`Cached to ${cachePath}`);
+
+  const exePath: string = path.join(cachePath, getName(semver), osPlat == 'win32' ? 'upx.exe' : 'upx');
+  core.debug(`Exe path is ${exePath}`);
+
+  return exePath;
 }
 
-function getFileName(version: string): string {
-  const ext: string = osPlat == 'win32' ? 'zip' : 'tar.xz';
-  return util.format('%s.%s', getFileNameWithoutExt(version), ext);
-}
-
-function getFileNameWithoutExt(version: string): string {
+function getName(version: string): string {
   let platform: string = '';
   if (osPlat == 'win32') {
     platform = osArch == 'x64' ? 'win64' : 'win32';
@@ -49,26 +50,3 @@ function getFileNameWithoutExt(version: string): string {
   }
   return util.format('upx-%s-%s', version, platform);
 }
-
-interface GitHubRelease {
-  tag_name: string;
-}
-
-async function determineVersion(version: string): Promise<string> {
-  let rest: restm.RestClient = new restm.RestClient('ghaction-upx', 'https://github.com', undefined, {
-    headers: {
-      Accept: 'application/json'
-    }
-  });
-
-  if (version !== 'latest') {
-    version = `v${version}`;
-  }
-
-  let res: restm.IRestResponse<GitHubRelease> = await rest.get<GitHubRelease>(`/upx/upx/releases/${version}`);
-  if (res.statusCode != 200 || res.result === null) {
-    throw new Error(`Cannot find UPX ${version} release (http ${res.statusCode})`);
-  }
-
-  return res.result.tag_name.replace(/^v/, '');
-}

src/main.ts

@@ -1,10 +1,10 @@
-import * as installer from './installer';
 import * as fs from 'fs';
 import * as os from 'os';
+import * as installer from './installer';
 import * as core from '@actions/core';
 import * as exec from '@actions/exec';
 
-export async function run(silent?: boolean) {
+async function run(): Promise<void> {
   try {
     if (os.platform() == 'darwin') {
       core.setFailed('Not supported on darwin platform');
@@ -14,16 +14,16 @@ export async function run(silent?: boolean) {
     const version = core.getInput('version') || 'latest';
     const file = core.getInput('file', {required: true});
     const args = core.getInput('args');
-    const upx = await installer.getUPX(version);
 
     if (!fs.existsSync(file)) {
-      core.setFailed(`⛔ File to compress not found: ${file}`);
+      core.setFailed(`File to compress not found: ${file}`);
+      return;
     }
 
-    console.log('🏃 Running UPX...');
-    await exec.exec(`${upx} ${args} ${file}`, undefined, {
-      silent: silent
-    });
+    const upx = await installer.getUPX(version);
+
+    core.info('🏃 Running UPX...');
+    await exec.exec(`${upx} ${args} ${file}`);
   } catch (error) {
     core.setFailed(error.message);
   }

tsconfig.json

@@ -10,7 +10,8 @@
     "rootDir": "./src",
     "strict": true,
     "noImplicitAny": false,
-    "esModuleInterop": true
+    "esModuleInterop": true,
+    "sourceMap": true
   },
   "exclude": ["node_modules", "**/*.test.ts"]
 }