Update CHANGELOG

Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>

.dockerignore

@@ -0,0 +1,6 @@
+/.dev
+/coverage
+/dist
+/lib
+/node_modules
+/.env

.github/CONTRIBUTING.md

@@ -7,11 +7,11 @@ Contributions to this project are [released](https://help.github.com/articles/gi
 ## Submitting a pull request
 
 1. [Fork](https://github.com/crazy-max/ghaction-upx/fork) and clone the repository
-2. Configure and install the dependencies: `npm install`
-3. Make sure the tests pass on your machine: `npm run test`
-4. Create a new branch: `git checkout -b my-branch-name`
-5. Make your change, add tests, and make sure the tests still pass
-6. Run pre-checkin: `npm run pre-checkin`
+2. Configure and install the dependencies locally: `yarn install`
+3. Create a new branch: `git checkout -b my-branch-name`
+4. Make your changes
+5. Format code and build javascript artifacts: `docker buildx bake pre-checkin`
+6. Validate all code has correctly formatted and built: `docker buildx bake validate`
 7. Push to your fork and [submit a pull request](https://github.com/crazy-max/ghaction-upx/compare)
 8. Pat your self on the back and wait for your pull request to be reviewed and merged.
 

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,33 @@
+---
+name: Bug report
+about: Create a report to help us improve
+---
+
+### Behaviour
+
+#### Steps to reproduce this issue
+
+1.
+2.
+3.
+
+#### Expected behaviour
+
+> Tell me what should happen
+
+#### Actual behaviour
+
+> Tell me what happens instead
+
+### Configuration
+
+* Repository URL (if public): 
+* Build URL (if public): 
+
+```yml
+# paste your YAML workflow file here and remove sensitive data
+```
+
+### Logs
+
+> Download the [log file of your build](https://help.github.com/en/actions/configuring-and-managing-workflows/managing-a-workflow-run#downloading-logs) and [attach it](https://help.github.com/en/github/managing-your-work-on-github/file-attachments-on-issues-and-pull-requests) to this issue.

.github/SUPPORT.md

@@ -0,0 +1,29 @@
+# Support [![](https://isitmaintained.com/badge/resolution/crazy-max/ghaction-upx.svg)](https://isitmaintained.com/project/crazy-max/ghaction-upx)
+
+## Reporting an issue
+
+Please do a search in [open issues](https://github.com/crazy-max/ghaction-upx/issues?utf8=%E2%9C%93&q=) to see if the issue or feature request has already been filed.
+
+If you find your issue already exists, make relevant comments and add your [reaction](https://github.com/blog/2119-add-reactions-to-pull-requests-issues-and-comments). Use a reaction in place of a "+1" comment.
+
+:+1: - upvote
+
+:-1: - downvote
+
+If you cannot find an existing issue that describes your bug or feature, submit an issue using the guidelines below.
+
+## Writing good bug reports and feature requests
+
+File a single issue per problem and feature request.
+
+* Do not enumerate multiple bugs or feature requests in the same issue.
+* Do not add your issue as a comment to an existing issue unless it's for the identical input. Many issues look similar, but have different causes.
+
+The more information you can provide, the more likely someone will be successful reproducing the issue and finding a fix.
+
+You are now ready to [create a new issue](https://github.com/crazy-max/ghaction-upx/issues/new/choose)!
+
+## Closure policy
+
+* Issues that don't have the information requested above (when applicable) will be closed immediately and the poster directed to the support guidelines.
+* Issues that go a week without a response from original poster are subject to closure at my discretion.

.github/dependabot.yml

@@ -1,6 +1,6 @@
 version: 2
 updates:
-  - package-ecosystem: "npm"
+  - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "daily"
@@ -9,3 +9,14 @@ updates:
     labels:
       - ":game_die: dependencies"
       - ":robot: bot"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+      time: "06:00"
+      timezone: "Europe/Paris"
+    allow:
+      - dependency-type: "production"
+    labels:
+      - ":game_die: dependencies"
+      - ":robot: bot"

.github/labels.yml

@@ -1,4 +1,8 @@
 ## more info https://github.com/crazy-max/ghaction-github-labeler
+- # automerge
+  name: ":bell: automerge"
+  color: "8f4fbc"
+  description: ""
 - # bot
   name: ":robot: bot"
   color: "69cde9"
@@ -43,26 +47,34 @@
   name: ":pray: help wanted"
   color: "4caf50"
   description: ""
-- # hold
-  name: ":hand: hold"
-  color: "24292f"
-  description: ""
 - # invalid
   name: ":no_entry_sign: invalid"
   color: "e6e6e6"
   description: ""
-- # maybe bug
-  name: ":interrobang: maybe bug"
-  color: "ff5722"
+- # investigate
+  name: ":mag: investigate"
+  color: "e6625b"
   description: ""
 - # needs more info
   name: ":thinking: needs more info"
   color: "795548"
   description: ""
+- # pinned
+  name: ":pushpin: pinned"
+  color: "28008e"
+  description: ""
 - # question
   name: ":question: question"
   color: "3f51b5"
   description: ""
+- # sponsor
+  name: ":sparkling_heart: sponsor"
+  color: "fedbf0"
+  description: ""
+- # stale
+  name: ":skull: stale"
+  color: "237da0"
+  description: ""
 - # upstream
   name: ":eyes: upstream"
   color: "fbca04"

.github/stale.yml

@@ -0,0 +1,19 @@
+# Number of days of inactivity before an issue becomes stale
+daysUntilStale: 30
+# Number of days of inactivity before a stale issue is closed
+daysUntilClose: 7
+# Issues with these labels will never be considered stale
+exemptLabels:
+  - ":pushpin: pinned"
+  - ":game_die: dependencies"
+# Set to true to ignore issues in a milestone (defaults to false)
+exemptMilestones: true
+# Label to use when marking an issue as stale
+staleLabel: ":skull: stale"
+# Comment to post when marking an issue as stale. Set to `false` to disable
+markComment: >
+  This issue has been automatically marked as stale because it has not had
+  recent activity. It will be closed if no further activity occurs. Thank you
+  for your contributions.
+# Comment to post when closing a stale issue. Set to `false` to disable
+closeComment: false

.github/workflows/ci.yml

@@ -1,12 +1,20 @@
 name: ci
 
 on:
-  pull_request:
-    branches:
-      - master
+  schedule:
+    - cron: '0 10 * * *' # everyday at 10am
   push:
     branches:
-      - master
+      - 'master'
+      - 'releases/v*'
+    paths-ignore:
+      - '**.md'
+  pull_request:
+    branches:
+      - 'master'
+      - 'releases/v*'
+    paths-ignore:
+      - '**.md'
 
 jobs:
   ci:
@@ -17,35 +25,31 @@ jobs:
         os:
           - ubuntu-latest
           - windows-latest
-        include:
-          - os: ubuntu-latest
-            version: latest
-            file: https://github.com/crazy-max/firefox-history-merger/releases/download/2.4.0/firefox-history-merger-linux-amd64
-          - os: windows-latest
-            version: latest
-            file: https://github.com/crazy-max/firefox-history-merger/releases/download/2.4.0/firefox-history-merger-windows-4.0-amd64.exe
+        version:
+          - latest
+          - v3.95
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v1
+        uses: actions/checkout@v2
       -
-        name: Download file
-        id: download
+        name: Download files
+        shell: bash
         run: |
           mkdir ./bin
-          if [ "${{ matrix.os }}" == "windows-latest" ]; then
-            curl -sSLk ${{ matrix.file }} -o ./bin/firefox-history-merger.exe
-            echo ::set-output name=filename::./bin/firefox-history-merger.exe
+          if [ "${{ matrix.os }}" = "windows-latest" ]; then
+            curl -sSLk https://github.com/crazy-max/firefox-history-merger/releases/download/2.4.0/firefox-history-merger-windows-4.0-386.exe -o ./bin/firefox-history-merger-windows-4.0-386.exe
+            curl -sSLk https://github.com/crazy-max/firefox-history-merger/releases/download/2.4.0/firefox-history-merger-windows-4.0-amd64.exe -o ./bin/firefox-history-merger-windows-4.0-amd64.exe
           else
-            curl -sSLk ${{ matrix.file }} -o ./bin/firefox-history-merger
-            chmod +x ./bin/firefox-history-merger
-            echo ::set-output name=filename::./bin/firefox-history-merger
+            curl -sSLk https://github.com/crazy-max/firefox-history-merger/releases/download/2.4.0/firefox-history-merger-linux-386 -o ./bin/firefox-history-merger-linux-386
+            curl -sSLk https://github.com/crazy-max/firefox-history-merger/releases/download/2.4.0/firefox-history-merger-linux-amd64 -o ./bin/firefox-history-merger-linux-amd64
           fi
-        shell: bash
+          chmod +x ./bin/firefox-history-merger*
       -
         name: UPX
         uses: ./
         with:
           version: ${{ matrix.version }}
-          file: ${{ steps.download.outputs.filename }}
+          files: |
+            ./bin/firefox-history-merger*
           args: -fq

.github/workflows/label-sponsor.yml

@@ -0,0 +1,21 @@
+name: label-sponsor
+
+on:
+  pull_request:
+    types:
+      - 'opened'
+  issues:
+    types:
+      - 'opened'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Set sponsor label
+        uses: JasonEtco/is-sponsor-label-action@024ac24f8b170abce078cad4ee748852369853c8
+        with:
+          label: ":sparkling_heart: sponsor"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/labels.yml

@@ -13,13 +13,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       -
-        # https://github.com/actions/checkout
         name: Checkout
-        uses: actions/checkout@v1
+        uses: actions/checkout@v2
       -
-        # https://github.com/crazy-max/ghaction-github-labeler
         name: Run Labeler
-        if: success()
-        uses: crazy-max/ghaction-github-labeler@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        uses: crazy-max/ghaction-github-labeler@v3

.github/workflows/lint.yml

@@ -1,22 +0,0 @@
-name: lint
-
-on:
-  pull_request:
-    paths:
-      - '.github/workflows/lint.yml'
-      - 'src/*'
-
-jobs:
-  lint:
-    runs-on: ubuntu-latest
-    steps:
-      -
-        # https://github.com/actions/checkout
-        name: Checkout
-        uses: actions/checkout@v1
-      -
-        name: Setup TS
-        run: npm install tslint typescript -g
-      -
-        name: Lint check
-        run: tslint './src/*.ts'

.github/workflows/master.yml

@@ -1,41 +0,0 @@
-name: master
-
-on:
-  push:
-    branches:
-      - master
-
-jobs:
-  prune:
-    runs-on: ubuntu-latest
-    steps:
-      -
-        # https://github.com/actions/checkout
-        name: Checkout
-        uses: actions/checkout@v1
-      -
-        # https://github.com/actions/checkout/issues/6
-        name: Fix detached HEAD
-        run: git checkout ${GITHUB_REF#refs/heads/}
-      -
-        name: Build
-        run: |
-          npm install
-          npm run format
-          npm run build
-      -
-        name: Set up Git
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          git config user.name "${GITHUB_ACTOR}"
-          git config user.email "${GITHUB_ACTOR}@users.noreply.github.com"
-          git remote set-url origin https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git
-      -
-        name: Commit and push changes
-        run: |
-          git add .
-          if output=$(git status --porcelain) && [ ! -z "$output" ]; then
-            git commit -m 'Update generated content'
-            git push
-          fi

.github/workflows/test.yml

@@ -1,14 +1,39 @@
 name: test
 
 on:
-  pull_request:
-    branches:
-      - master
   push:
     branches:
-      - master
+      - 'master'
+      - 'releases/v*'
+    paths-ignore:
+      - '**.md'
+  pull_request:
+    branches:
+      - 'master'
+      - 'releases/v*'
+    paths-ignore:
+      - '**.md'
 
 jobs:
+  test-containerized:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+      -
+        name: Validate
+        uses: docker/bake-action@v1
+        with:
+          targets: validate
+      -
+        name: Test
+        uses: docker/bake-action@v1
+        with:
+          targets: test
+
   test:
     runs-on: ${{ matrix.os }}
     strategy:
@@ -19,20 +44,17 @@ jobs:
           - windows-latest
     steps:
       -
-        # https://github.com/actions/checkout
         name: Checkout
-        uses: actions/checkout@v1
-      -
-        name: Build
-        run: |
-          npm install
-          npm run build
+        uses: actions/checkout@v2
       -
         name: Install
-        run: npm ci
-      -
-        name: Build
-        run: npm run build
+        run: yarn install
       -
         name: Test
-        run: npm run test
+        run: yarn run test
+      -
+        name: Upload coverage
+        uses: codecov/codecov-action@v1
+        if: success()
+        with:
+          file: ./coverage/clover.xml

CHANGELOG.md

@@ -0,0 +1,40 @@
+# Changelog
+
+## 1.4.0 (2021/03/27)
+
+* Allow multiple files (#140)
+* Container dev workflow (#139)
+* Bump node-notifier from 8.0.0 to 8.0.1 (#135)
+* Bump @actions/tool-cache from 1.6.0 to 1.6.1 (#134)
+* Bump @actions/http-client from 1.0.8 to 1.0.11 (#131 #138)
+
+## 1.3.3 (2020/10/01)
+
+* Fix CVE-2020-15228
+
+## 1.3.2 (2020/05/11)
+
+* Update README
+
+## 1.3.1 (2020/05/07)
+
+* Code cleanup
+
+## 1.3.0 (2020/05/06)
+
+* Use native tools
+* Add Codecov
+* Update deps
+
+## 1.2.0 (2020/04/09)
+
+* Use ncc and clean workflows
+* Update deps
+
+## 1.1.0 (2020/01/17)
+
+* Update deps
+
+## 1.0.0 (2020/01/17)
+
+* Initial version

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2020 CrazyMax
+Copyright (c) 2020-2021 CrazyMax
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -1,7 +1,7 @@
 [![GitHub release](https://img.shields.io/github/release/crazy-max/ghaction-upx.svg?style=flat-square)](https://github.com/crazy-max/ghaction-upx/releases/latest)
 [![GitHub marketplace](https://img.shields.io/badge/marketplace-upx--github--action-blue?logo=github&style=flat-square)](https://github.com/marketplace/actions/upx-github-action)
-[![Release workflow](https://github.com/crazy-max/ghaction-upx/workflows/release/badge.svg)](https://github.com/crazy-max/ghaction-upx/actions?workflow=release)
-[![Test workflow](https://github.com/crazy-max/ghaction-upx/workflows/test/badge.svg)](https://github.com/crazy-max/ghaction-upx/actions?workflow=test)
+[![Test workflow](https://img.shields.io/github/workflow/status/crazy-max/ghaction-upx/test?label=test&logo=github&style=flat-square)](https://github.com/crazy-max/ghaction-upx/actions?workflow=test)
+[![Codecov](https://img.shields.io/codecov/c/github/crazy-max/ghaction-upx?logo=codecov&style=flat-square)](https://codecov.io/gh/crazy-max/ghaction-upx)
 [![Become a sponsor](https://img.shields.io/badge/sponsor-crazy--max-181717.svg?logo=github&style=flat-square)](https://github.com/sponsors/crazy-max)
 [![Paypal Donate](https://img.shields.io/badge/donate-paypal-00457c.svg?logo=paypal&style=flat-square)](https://www.paypal.me/crazyws)
 
@@ -9,15 +9,24 @@
 
 GitHub Action for [UPX](https://github.com/upx/upx), the Ultimate Packer for eXecutables.
 
-## Usage
+![Screenshot](.github/ghaction-upx.png)
 
-Below is a simple snippet to use this action. A [live example](https://github.com/crazy-max/ghaction-upx/actions) is also available for this repository.
+___
+
+* [Usage](#usage)
+* [Customizing](#customizing)
+  * [inputs](#inputs)
+* [Keep up-to-date with GitHub Dependabot](#keep-up-to-date-with-github-dependabot)
+* [Limitation](#limitation)
+* [How can I help?](#how-can-i-help)
+* [License](#license)
+
+## Usage
 
 ```yaml
 name: upx
 
 on:
-  pull_request:
   push:
 
 jobs:
@@ -26,13 +35,14 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v1
+        uses: actions/checkout@v2
       -
         name: Run UPX
         uses: crazy-max/ghaction-upx@v1
         with:
           version: latest
-          file: ./bin/mybinary
+          files: |
+            ./bin/*.exe
           args: -fq
 ```
 
@@ -42,19 +52,38 @@ jobs:
 
 Following inputs can be used as `step.with` keys
 
-| Name          | Type    | Default   | Description                   |
-|---------------|---------|-----------|-------------------------------|
-| `version`     | String  | `latest`  | UPX version. Example: `3.95`  |
-| `file`        | String  |           | File to compress              |
-| `args`        | String  |           | Arguments to pass to UPX      |
+| Name          | Type    | Default   | Description                     |
+|---------------|---------|-----------|---------------------------------|
+| `version`     | String  | `latest`  | UPX version. Example: `v3.95`   |
+| `files`       | String  |           | Newline-delimited list of path globs for files to compress (**required**) |
+| `args`        | String  |           | Arguments to pass to UPX        |
+
+## Keep up-to-date with GitHub Dependabot
+
+Since [Dependabot](https://docs.github.com/en/github/administering-a-repository/keeping-your-actions-up-to-date-with-github-dependabot)
+has [native GitHub Actions support](https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates#package-ecosystem),
+to enable it on your GitHub repo all you need to do is add the `.github/dependabot.yml` file:
+
+```yaml
+version: 2
+updates:
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+```
 
 ## Limitation
 
 This action is only available for Linux and Windows [virtual environments](https://help.github.com/en/articles/virtual-environments-for-github-actions#supported-virtual-environments-and-hardware-resources).
 
-## How can I help ?
+## How can I help?
 
-All kinds of contributions are welcome :raised_hands:! The most basic way to show your support is to star :star2: the project, or to raise issues :speech_balloon: You can also support this project by [**becoming a sponsor on GitHub**](https://github.com/sponsors/crazy-max) :clap: or by making a [Paypal donation](https://www.paypal.me/crazyws) to ensure this journey continues indefinitely! :rocket:
+All kinds of contributions are welcome :raised_hands:! The most basic way to show your support is to star :star2:
+the project, or to raise issues :speech_balloon: You can also support this project by
+[**becoming a sponsor on GitHub**](https://github.com/sponsors/crazy-max) :clap: or by making a
+[Paypal donation](https://www.paypal.me/crazyws) to ensure this journey continues indefinitely! :rocket:
 
 Thanks again for your support, it is much appreciated! :pray:
 

__tests__/context.test.ts

@@ -0,0 +1,98 @@
+import * as context from '../src/context';
+import * as core from '@actions/core';
+import * as path from 'path';
+
+describe('getInputList', () => {
+  it('handles single line correctly', async () => {
+    await setInput('foo', 'bar');
+    const res = await context.getInputList(core.getInput('foo'));
+    console.log(res);
+    expect(res).toEqual(['bar']);
+  });
+
+  it('handles multiple lines correctly', async () => {
+    setInput('foo', 'bar\nbaz');
+    const res = await context.getInputList(core.getInput('foo'));
+    console.log(res);
+    expect(res).toEqual(['bar', 'baz']);
+  });
+
+  it('remove empty lines correctly', async () => {
+    setInput('foo', 'bar\n\nbaz');
+    const res = await context.getInputList(core.getInput('foo'));
+    console.log(res);
+    expect(res).toEqual(['bar', 'baz']);
+  });
+
+  it('handles comma correctly', async () => {
+    setInput('foo', 'bar,baz');
+    const res = await context.getInputList(core.getInput('foo'));
+    console.log(res);
+    expect(res).toEqual(['bar', 'baz']);
+  });
+
+  it('remove empty result correctly', async () => {
+    setInput('foo', 'bar,baz,');
+    const res = await context.getInputList(core.getInput('foo'));
+    console.log(res);
+    expect(res).toEqual(['bar', 'baz']);
+  });
+
+  it('handles different new lines correctly', async () => {
+    setInput('foo', 'bar\r\nbaz');
+    const res = await context.getInputList(core.getInput('foo'));
+    console.log(res);
+    expect(res).toEqual(['bar', 'baz']);
+  });
+
+  it('handles different new lines and comma correctly', async () => {
+    setInput('foo', 'bar\r\nbaz,bat');
+    const res = await context.getInputList(core.getInput('foo'));
+    console.log(res);
+    expect(res).toEqual(['bar', 'baz', 'bat']);
+  });
+
+  it('handles multiple lines and ignoring comma correctly', async () => {
+    setInput('files', './bin/binary.exe\n./bin/binary2.exe');
+    const res = await context.getInputList(core.getInput('files'), true);
+    console.log(res);
+    expect(res).toEqual(['./bin/binary.exe', './bin/binary2.exe']);
+  });
+
+  it('handles different new lines and ignoring comma correctly', async () => {
+    setInput('driver-opts', './bin/binary.exe\r\n./bin/binary2.exe');
+    const res = await context.getInputList(core.getInput('files'), true);
+    console.log(res);
+    expect(res).toEqual(['./bin/binary.exe', './bin/binary2.exe']);
+  });
+});
+
+describe('asyncForEach', () => {
+  it('executes async tasks sequentially', async () => {
+    const testValues = [1, 2, 3, 4, 5];
+    const results: number[] = [];
+
+    await context.asyncForEach(testValues, async value => {
+      results.push(value);
+    });
+
+    expect(results).toEqual(testValues);
+  });
+});
+
+describe('resolvePaths', () => {
+  it('resolve files given a set of paths', async () => {
+    expect(
+      context.resolvePaths([path.join(__dirname, 'fixtures/data/**/*').split(path.sep).join(path.posix.sep)])
+    ).toEqual([path.join(__dirname, 'fixtures/data/foo/bar.txt').split(path.sep).join(path.posix.sep)]);
+  });
+});
+
+// See: https://github.com/actions/toolkit/blob/master/packages/core/src/core.ts#L67
+function getInputName(name: string): string {
+  return `INPUT_${name.replace(/ /g, '_').toUpperCase()}`;
+}
+
+function setInput(name: string, value: string): void {
+  process.env[getInputName(name)] = value;
+}

__tests__/fixtures/data/foo/bar.txt

@@ -0,0 +1 @@
+scan me

__tests__/github.test.ts

@@ -0,0 +1,17 @@
+import * as github from '../src/github';
+
+describe('github', () => {
+  it('returns latest UPX GitHub release', async () => {
+    const release = await github.getRelease('latest');
+    console.log(release);
+    expect(release).not.toBeNull();
+    expect(release?.tag_name).not.toEqual('');
+  });
+
+  it('returns v3.96 GoReleaser GitHub release', async () => {
+    const release = await github.getRelease('v3.96');
+    console.log(release);
+    expect(release).not.toBeNull();
+    expect(release?.tag_name).toEqual('v3.96');
+  });
+});

__tests__/installer.test.ts

@@ -2,13 +2,15 @@ import fs = require('fs');
 import * as installer from '../src/installer';
 
 describe('installer', () => {
-  it('acquires 3.95 version of UPX', async () => {
-    const upx = await installer.getUPX('3.95');
+  it('acquires v3.95 version of UPX', async () => {
+    const upx = await installer.getUPX('v3.95');
+    console.log(upx);
     expect(fs.existsSync(upx)).toBe(true);
   }, 100000);
 
   it('acquires latest version of UPX', async () => {
     const upx = await installer.getUPX('latest');
+    console.log(upx);
     expect(fs.existsSync(upx)).toBe(true);
   }, 100000);
 });

action.yml

@@ -10,11 +10,17 @@ inputs:
   version:
     description: 'UPX version. Example: 3.95'
     default: 'latest'
-  file:
-    description: 'File to compress'
-    required: true
+    required: false
+  files:
+    description: 'Newline-delimited list of path globs for files to compress'
+    required: false
   args:
     description: 'Arguments to pass to UPX'
+    required: false
+  file:
+    deprecationMessage: 'file is deprecated. Please use files input instead.'
+    description: 'File to compress'
+    required: false
 
 runs:
   using: 'node12'

dev.Dockerfile

@@ -0,0 +1,51 @@
+#syntax=docker/dockerfile:1.2
+
+FROM node:12 AS deps
+WORKDIR /src
+COPY package.json yarn.lock ./
+RUN --mount=type=cache,target=/src/node_modules \
+  yarn install
+
+FROM scratch AS update-yarn
+COPY --from=deps /src/yarn.lock /
+
+FROM deps AS validate-yarn
+COPY .git .git
+RUN status=$(git status --porcelain -- yarn.lock); if [ -n "$status" ]; then echo $status; exit 1; fi
+
+FROM deps AS base
+COPY . .
+
+FROM base AS build
+RUN --mount=type=cache,target=/src/node_modules \
+  yarn build
+
+FROM deps AS test
+ENV RUNNER_TEMP=/tmp/github_runner
+ENV RUNNER_TOOL_CACHE=/tmp/github_tool_cache
+COPY . .
+RUN --mount=type=cache,target=/src/node_modules \
+  yarn run test
+
+FROM scratch AS test-coverage
+COPY --from=test /src/coverage /coverage/
+
+FROM base AS run-format
+RUN --mount=type=cache,target=/src/node_modules \
+  yarn run format
+
+FROM scratch AS format
+COPY --from=run-format /src/src/*.ts /src/
+
+FROM base AS validate-format
+RUN --mount=type=cache,target=/src/node_modules \
+  yarn run format-check
+
+FROM scratch AS dist
+COPY --from=build /src/dist/ /dist/
+
+FROM build AS validate-build
+RUN status=$(git status --porcelain -- dist); if [ -n "$status" ]; then echo $status; exit 1; fi
+
+FROM base AS dev
+ENTRYPOINT ["bash"]

docker-bake.hcl

@@ -0,0 +1,57 @@
+variable "GITHUB_REPOSITORY" {
+  default = "crazy-max/ghaction-upx"
+}
+
+group "default" {
+  targets = ["build"]
+}
+
+group "pre-checkin" {
+  targets = ["update-yarn", "format", "build"]
+}
+
+group "validate" {
+  targets = ["validate-format", "validate-build", "validate-yarn"]
+}
+
+target "dockerfile" {
+  dockerfile = "dev.Dockerfile"
+}
+
+target "update-yarn" {
+  inherits = ["dockerfile"]
+  target = "update-yarn"
+  output = ["."]
+}
+
+target "build" {
+  inherits = ["dockerfile"]
+  target = "dist"
+  output = ["."]
+}
+
+target "test" {
+  inherits = ["dockerfile"]
+  target = "test"
+}
+
+target "format" {
+  inherits = ["dockerfile"]
+  target = "format"
+  output = ["."]
+}
+
+target "validate-format" {
+  inherits = ["dockerfile"]
+  target = "validate-format"
+}
+
+target "validate-build" {
+  inherits = ["dockerfile"]
+  target = "validate-build"
+}
+
+target "validate-yarn" {
+  inherits = ["dockerfile"]
+  target = "validate-yarn"
+}

jest.config.js

@@ -7,5 +7,5 @@ module.exports = {
   transform: {
     '^.+\\.ts$': 'ts-jest'
   },
-  verbose: true
-}
+  verbose: false
+}

lib/installer.js

@@ -1,83 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (Object.hasOwnProperty.call(mod, k)) result[k] = mod[k];
-    result["default"] = mod;
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const download = __importStar(require("download"));
-const fs = __importStar(require("fs"));
-const os = __importStar(require("os"));
-const path = __importStar(require("path"));
-const util = __importStar(require("util"));
-const restm = __importStar(require("typed-rest-client/RestClient"));
-const core = __importStar(require("@actions/core"));
-const tc = __importStar(require("@actions/tool-cache"));
-let osPlat = os.platform();
-let osArch = os.arch();
-function getUPX(version) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const selected = yield determineVersion(version);
-        if (selected) {
-            version = selected;
-        }
-        core.info(`✅ UPX version found: ${version}`);
-        const tmpdir = fs.mkdtempSync(path.join(os.tmpdir(), 'upx-'));
-        const fileName = getFileName(version);
-        const downloadUrl = util.format('https://github.com/upx/upx/releases/download/v%s/%s', version, fileName);
-        core.info(`⬇️ Downloading ${downloadUrl}...`);
-        yield download.default(downloadUrl, tmpdir, { filename: fileName });
-        core.info('📦 Extracting UPX...');
-        let extPath = tmpdir;
-        if (osPlat == 'win32') {
-            extPath = yield tc.extractZip(`${tmpdir}/${fileName}`);
-        }
-        else {
-            extPath = yield tc.extractTar(`${tmpdir}/${fileName}`, undefined, 'x');
-        }
-        return path.join(extPath, getFileNameWithoutExt(version), osPlat == 'win32' ? 'upx.exe' : 'upx');
-    });
-}
-exports.getUPX = getUPX;
-function getFileName(version) {
-    const ext = osPlat == 'win32' ? 'zip' : 'tar.xz';
-    return util.format('%s.%s', getFileNameWithoutExt(version), ext);
-}
-function getFileNameWithoutExt(version) {
-    let platform = '';
-    if (osPlat == 'win32') {
-        platform = osArch == 'x64' ? 'win64' : 'win32';
-    }
-    else if (osPlat == 'linux') {
-        platform = osArch == 'x64' ? 'amd64_linux' : 'i386_linux';
-    }
-    return util.format('upx-%s-%s', version, platform);
-}
-function determineVersion(version) {
-    return __awaiter(this, void 0, void 0, function* () {
-        let rest = new restm.RestClient('ghaction-upx', 'https://github.com', undefined, {
-            headers: {
-                Accept: 'application/json'
-            }
-        });
-        if (version !== 'latest') {
-            version = `v${version}`;
-        }
-        let res = yield rest.get(`/upx/upx/releases/${version}`);
-        if (res.statusCode != 200 || res.result === null) {
-            throw new Error(`Cannot find UPX ${version} release (http ${res.statusCode})`);
-        }
-        return res.result.tag_name.replace(/^v/, '');
-    });
-}

lib/main.js

@@ -1,49 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (Object.hasOwnProperty.call(mod, k)) result[k] = mod[k];
-    result["default"] = mod;
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const installer = __importStar(require("./installer"));
-const fs = __importStar(require("fs"));
-const os = __importStar(require("os"));
-const core = __importStar(require("@actions/core"));
-const exec = __importStar(require("@actions/exec"));
-function run(silent) {
-    return __awaiter(this, void 0, void 0, function* () {
-        try {
-            if (os.platform() == 'darwin') {
-                core.setFailed('Not supported on darwin platform');
-                return;
-            }
-            const version = core.getInput('version') || 'latest';
-            const file = core.getInput('file', { required: true });
-            const args = core.getInput('args');
-            const upx = yield installer.getUPX(version);
-            if (!fs.existsSync(file)) {
-                core.setFailed(`⛔ File to compress not found: ${file}`);
-            }
-            console.log('🏃 Running UPX...');
-            yield exec.exec(`${upx} ${args} ${file}`, undefined, {
-                silent: silent
-            });
-        }
-        catch (error) {
-            core.setFailed(error.message);
-        }
-    });
-}
-exports.run = run;
-run();

package.json

@@ -2,15 +2,12 @@
   "name": "upx-github-action",
   "description": "GitHub Action for UPX, the Ultimate Packer for eXecutables",
   "main": "lib/main.js",
-  "directories": {
-    "lib": "lib"
-  },
   "scripts": {
     "build": "tsc && ncc build",
-    "test": "jest",
+    "test": "jest --coverage",
     "format": "prettier --write **/*.ts",
     "format-check": "prettier --check **/*.ts",
-    "pre-checkin": "npm run format && npm run build"
+    "pre-checkin": "yarn run format && yarn run build"
   },
   "repository": {
     "type": "git",
@@ -23,23 +20,21 @@
   "author": "CrazyMax",
   "license": "MIT",
   "dependencies": {
-    "@actions/core": "^1.2.3",
-    "@actions/exec": "^1.0.3",
-    "@actions/tool-cache": "^1.3.3",
-    "download": "^8.0.0",
-    "typed-rest-client": "^1.7.3"
+    "@actions/core": "^1.2.6",
+    "@actions/exec": "^1.0.4",
+    "@actions/http-client": "^1.0.11",
+    "@actions/tool-cache": "^1.6.1"
   },
   "devDependencies": {
-    "@types/jest": "^25.2.1",
-    "@types/node": "^13.11.0",
-    "@types/download": "^6.2.4",
-    "@zeit/ncc": "^0.22.1",
-    "jest": "^25.2.7",
-    "jest-circus": "^25.2.7",
-    "jest-runtime": "^25.2.7",
-    "prettier": "^2.0.4",
-    "ts-jest": "^25.3.1",
-    "typescript": "^3.8.3",
+    "@types/jest": "^26.0.14",
+    "@types/node": "^14.11.2",
+    "@vercel/ncc": "^0.24.1",
+    "jest": "^26.4.2",
+    "jest-circus": "^26.4.2",
+    "jest-runtime": "^26.4.2",
+    "prettier": "^2.1.2",
+    "ts-jest": "^26.4.1",
+    "typescript": "^4.0.3",
     "typescript-formatter": "^7.2.2"
   }
 }

src/context.ts

@@ -0,0 +1,42 @@
+import * as glob from 'glob';
+import {lstatSync} from 'fs';
+import * as core from '@actions/core';
+
+export interface Inputs {
+  version: string;
+  files: string[];
+  args: string;
+}
+
+export async function getInputs(): Promise<Inputs> {
+  return {
+    version: core.getInput('version') || 'latest',
+    files: getInputList(core.getInput('files') || core.getInput('file'), true),
+    args: core.getInput('args')
+  };
+}
+
+export function getInputList(items: string, ignoreComma?: boolean): string[] {
+  if (items == '') {
+    return [];
+  }
+  return items
+    .split(/\r?\n/)
+    .filter(x => x)
+    .reduce<string[]>(
+      (acc, line) => acc.concat(!ignoreComma ? line.split(',').filter(x => x) : line).map(pat => pat.trim()),
+      []
+    );
+}
+
+export const asyncForEach = async (array, callback) => {
+  for (let index = 0; index < array.length; index++) {
+    await callback(array[index], index, array);
+  }
+};
+
+export const resolvePaths = (patterns: string[]): string[] => {
+  return patterns.reduce((acc: string[], pattern: string): string[] => {
+    return acc.concat(glob.sync(pattern).filter(path => lstatSync(path).isFile()));
+  }, []);
+};

src/github.ts

@@ -0,0 +1,12 @@
+import * as httpm from '@actions/http-client';
+
+export interface GitHubRelease {
+  id: number;
+  tag_name: string;
+}
+
+export const getRelease = async (version: string): Promise<GitHubRelease | null> => {
+  const url: string = `https://github.com/upx/upx/releases/${version}`;
+  const http: httpm.HttpClient = new httpm.HttpClient('ghaction-upx');
+  return (await http.getJson<GitHubRelease>(url)).result;
+};

src/installer.ts

@@ -1,46 +1,50 @@
-import * as download from 'download';
-import * as fs from 'fs';
 import * as os from 'os';
 import * as path from 'path';
 import * as util from 'util';
-import * as restm from 'typed-rest-client/RestClient';
+import * as github from './github';
 import * as core from '@actions/core';
 import * as tc from '@actions/tool-cache';
 
-let osPlat: string = os.platform();
-let osArch: string = os.arch();
+const osPlat: string = os.platform();
+const osArch: string = os.arch();
 
 export async function getUPX(version: string): Promise<string> {
-  const selected = await determineVersion(version);
-  if (selected) {
-    version = selected;
+  core.startGroup(`Checking UPX ${version} release...`);
+  const release: github.GitHubRelease | null = await github.getRelease(version);
+  if (!release) {
+    throw new Error(`Cannot find UPX ${version} release`);
   }
+  const semver: string = release.tag_name.replace(/^v/, '');
+  core.info(`UPX ${semver} found`);
+  core.endGroup();
 
-  core.info(`✅ UPX version found: ${version}`);
-  const tmpdir = fs.mkdtempSync(path.join(os.tmpdir(), 'upx-'));
-  const fileName = getFileName(version);
-  const downloadUrl = util.format('https://github.com/upx/upx/releases/download/v%s/%s', version, fileName);
+  const filename = util.format('%s.%s', getName(semver), osPlat == 'win32' ? 'zip' : 'tar.xz');
+  const downloadUrl = util.format('https://github.com/upx/upx/releases/download/v%s/%s', semver, filename);
 
-  core.info(`⬇️ Downloading ${downloadUrl}...`);
-  await download.default(downloadUrl, tmpdir, {filename: fileName});
+  core.startGroup(`Downloading ${downloadUrl}...`);
 
-  core.info('📦 Extracting UPX...');
-  let extPath: string = tmpdir;
+  const downloadPath: string = await tc.downloadTool(downloadUrl);
+  core.info(`Downloaded to ${downloadPath}`);
+
+  let extPath: string;
   if (osPlat == 'win32') {
-    extPath = await tc.extractZip(`${tmpdir}/${fileName}`);
+    extPath = await tc.extractZip(downloadPath);
   } else {
-    extPath = await tc.extractTar(`${tmpdir}/${fileName}`, undefined, 'x');
+    extPath = await tc.extractTar(downloadPath, undefined, 'x');
   }
+  core.info(`Extracted to ${extPath}`);
 
-  return path.join(extPath, getFileNameWithoutExt(version), osPlat == 'win32' ? 'upx.exe' : 'upx');
+  const cachePath: string = await tc.cacheDir(extPath, 'ghaction-upx', semver);
+  core.debug(`Cached to ${cachePath}`);
+
+  const exePath: string = path.join(cachePath, getName(semver), osPlat == 'win32' ? 'upx.exe' : 'upx');
+  core.debug(`Exe path is ${exePath}`);
+  core.endGroup();
+
+  return exePath;
 }
 
-function getFileName(version: string): string {
-  const ext: string = osPlat == 'win32' ? 'zip' : 'tar.xz';
-  return util.format('%s.%s', getFileNameWithoutExt(version), ext);
-}
-
-function getFileNameWithoutExt(version: string): string {
+function getName(version: string): string {
   let platform: string = '';
   if (osPlat == 'win32') {
     platform = osArch == 'x64' ? 'win64' : 'win32';
@@ -49,26 +53,3 @@ function getFileNameWithoutExt(version: string): string {
   }
   return util.format('upx-%s-%s', version, platform);
 }
-
-interface GitHubRelease {
-  tag_name: string;
-}
-
-async function determineVersion(version: string): Promise<string> {
-  let rest: restm.RestClient = new restm.RestClient('ghaction-upx', 'https://github.com', undefined, {
-    headers: {
-      Accept: 'application/json'
-    }
-  });
-
-  if (version !== 'latest') {
-    version = `v${version}`;
-  }
-
-  let res: restm.IRestResponse<GitHubRelease> = await rest.get<GitHubRelease>(`/upx/upx/releases/${version}`);
-  if (res.statusCode != 200 || res.result === null) {
-    throw new Error(`Cannot find UPX ${version} release (http ${res.statusCode})`);
-  }
-
-  return res.result.tag_name.replace(/^v/, '');
-}

src/main.ts

@@ -1,28 +1,29 @@
-import * as installer from './installer';
-import * as fs from 'fs';
 import * as os from 'os';
+import * as context from './context';
+import * as installer from './installer';
 import * as core from '@actions/core';
 import * as exec from '@actions/exec';
 
-export async function run(silent?: boolean) {
+async function run(): Promise<void> {
   try {
     if (os.platform() == 'darwin') {
       core.setFailed('Not supported on darwin platform');
       return;
     }
 
-    const version = core.getInput('version') || 'latest';
-    const file = core.getInput('file', {required: true});
-    const args = core.getInput('args');
-    const upx = await installer.getUPX(version);
+    const inputs: context.Inputs = await context.getInputs();
+    const upx = await installer.getUPX(inputs.version);
 
-    if (!fs.existsSync(file)) {
-      core.setFailed(`⛔ File to compress not found: ${file}`);
+    const files: string[] = await context.resolvePaths(inputs.files);
+    if (files.length == 0) {
+      core.warning(`No files were found. Please check the 'files' input.`);
+      return;
     }
 
-    console.log('🏃 Running UPX...');
-    await exec.exec(`${upx} ${args} ${file}`, undefined, {
-      silent: silent
+    await context.asyncForEach(files, async filepath => {
+      core.startGroup(`Compressing ${filepath}...`);
+      await exec.exec(`${upx} ${inputs.args} ${filepath}`);
+      core.endGroup();
     });
   } catch (error) {
     core.setFailed(error.message);

tsconfig.json

@@ -3,14 +3,16 @@
     "target": "es6",
     "module": "commonjs",
     "lib": [
-      "es6"
+      "es6",
+      "dom"
     ],
     "newLine": "lf",
     "outDir": "./lib",
     "rootDir": "./src",
     "strict": true,
     "noImplicitAny": false,
-    "esModuleInterop": true
+    "esModuleInterop": true,
+    "sourceMap": true
   },
   "exclude": ["node_modules", "**/*.test.ts"]
 }