Update CHANGELOG

Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>

.dockerignore

@@ -0,0 +1,6 @@
+/.dev
+/coverage
+/dist
+/lib
+/node_modules
+/.env

.github/CONTRIBUTING.md

@@ -7,11 +7,11 @@ Contributions to this project are [released](https://help.github.com/articles/gi
 ## Submitting a pull request
 
 1. [Fork](https://github.com/crazy-max/ghaction-upx/fork) and clone the repository
-2. Configure and install the dependencies: `npm install`
+2. Configure and install the dependencies locally: `yarn install`
-3. Make sure the tests pass on your machine: `npm run test`
+3. Create a new branch: `git checkout -b my-branch-name`
-4. Create a new branch: `git checkout -b my-branch-name`
+4. Make your changes
-5. Make your change, add tests, and make sure the tests still pass
+5. Format code and build javascript artifacts: `docker buildx bake pre-checkin`
-6. Run pre-checkin: `npm run pre-checkin`
+6. Validate all code has correctly formatted and built: `docker buildx bake validate`
 7. Push to your fork and [submit a pull request](https://github.com/crazy-max/ghaction-upx/compare)
 8. Pat your self on the back and wait for your pull request to be reviewed and merged.
 

.github/dependabot.yml

@@ -1,6 +1,6 @@
 version: 2
 updates:
-  - package-ecosystem: "npm"
+  - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "daily"
@@ -9,3 +9,14 @@ updates:
     labels:
       - ":game_die: dependencies"
       - ":robot: bot"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+      time: "06:00"
+      timezone: "Europe/Paris"
+    allow:
+      - dependency-type: "production"
+    labels:
+      - ":game_die: dependencies"
+      - ":robot: bot"

.github/labels.yml

@@ -1,4 +1,8 @@
 ## more info https://github.com/crazy-max/ghaction-github-labeler
+- # automerge
+  name: ":bell: automerge"
+  color: "8f4fbc"
+  description: ""
 - # bot
   name: ":robot: bot"
   color: "69cde9"
@@ -43,26 +47,34 @@
   name: ":pray: help wanted"
   color: "4caf50"
   description: ""
-- # hold
-  name: ":hand: hold"
-  color: "24292f"
-  description: ""
 - # invalid
   name: ":no_entry_sign: invalid"
   color: "e6e6e6"
   description: ""
-- # maybe bug
+- # investigate
-  name: ":interrobang: maybe bug"
+  name: ":mag: investigate"
-  color: "ff5722"
+  color: "e6625b"
   description: ""
 - # needs more info
   name: ":thinking: needs more info"
   color: "795548"
   description: ""
+- # pinned
+  name: ":pushpin: pinned"
+  color: "28008e"
+  description: ""
 - # question
   name: ":question: question"
   color: "3f51b5"
   description: ""
+- # sponsor
+  name: ":sparkling_heart: sponsor"
+  color: "fedbf0"
+  description: ""
+- # stale
+  name: ":skull: stale"
+  color: "237da0"
+  description: ""
 - # upstream
   name: ":eyes: upstream"
   color: "fbca04"

.github/stale.yml

@@ -0,0 +1,19 @@
+# Number of days of inactivity before an issue becomes stale
+daysUntilStale: 30
+# Number of days of inactivity before a stale issue is closed
+daysUntilClose: 7
+# Issues with these labels will never be considered stale
+exemptLabels:
+  - ":pushpin: pinned"
+  - ":game_die: dependencies"
+# Set to true to ignore issues in a milestone (defaults to false)
+exemptMilestones: true
+# Label to use when marking an issue as stale
+staleLabel: ":skull: stale"
+# Comment to post when marking an issue as stale. Set to `false` to disable
+markComment: >
+  This issue has been automatically marked as stale because it has not had
+  recent activity. It will be closed if no further activity occurs. Thank you
+  for your contributions.
+# Comment to post when closing a stale issue. Set to `false` to disable
+closeComment: false

.github/workflows/ci.yml

@@ -1,12 +1,20 @@
 name: ci
 
 on:
-  pull_request:
+  schedule:
-    branches:
+    - cron: '0 10 * * *' # everyday at 10am
-      - master
   push:
     branches:
-      - master
+      - 'master'
+      - 'releases/v*'
+    paths-ignore:
+      - '**.md'
+  pull_request:
+    branches:
+      - 'master'
+      - 'releases/v*'
+    paths-ignore:
+      - '**.md'
 
 jobs:
   ci:
@@ -17,35 +25,31 @@ jobs:
         os:
           - ubuntu-latest
           - windows-latest
-        include:
+        version:
-          - os: ubuntu-latest
+          - latest
-            version: latest
+          - v3.95
-            file: https://github.com/crazy-max/firefox-history-merger/releases/download/2.4.0/firefox-history-merger-linux-amd64
-          - os: windows-latest
-            version: latest
-            file: https://github.com/crazy-max/firefox-history-merger/releases/download/2.4.0/firefox-history-merger-windows-4.0-amd64.exe
     steps:
       -
         name: Checkout
         uses: actions/checkout@v2
       -
-        name: Download file
+        name: Download files
-        id: download
+        shell: bash
         run: |
           mkdir ./bin
-          if [ "${{ matrix.os }}" == "windows-latest" ]; then
+          if [ "${{ matrix.os }}" = "windows-latest" ]; then
-            curl -sSLk ${{ matrix.file }} -o ./bin/firefox-history-merger.exe
+            curl -sSLk https://github.com/crazy-max/firefox-history-merger/releases/download/2.4.0/firefox-history-merger-windows-4.0-386.exe -o ./bin/firefox-history-merger-windows-4.0-386.exe
-            echo ::set-output name=filename::./bin/firefox-history-merger.exe
+            curl -sSLk https://github.com/crazy-max/firefox-history-merger/releases/download/2.4.0/firefox-history-merger-windows-4.0-amd64.exe -o ./bin/firefox-history-merger-windows-4.0-amd64.exe
           else
-            curl -sSLk ${{ matrix.file }} -o ./bin/firefox-history-merger
+            curl -sSLk https://github.com/crazy-max/firefox-history-merger/releases/download/2.4.0/firefox-history-merger-linux-386 -o ./bin/firefox-history-merger-linux-386
-            chmod +x ./bin/firefox-history-merger
+            curl -sSLk https://github.com/crazy-max/firefox-history-merger/releases/download/2.4.0/firefox-history-merger-linux-amd64 -o ./bin/firefox-history-merger-linux-amd64
-            echo ::set-output name=filename::./bin/firefox-history-merger
           fi
-        shell: bash
+          chmod +x ./bin/firefox-history-merger*
       -
         name: UPX
         uses: ./
         with:
           version: ${{ matrix.version }}
-          file: ${{ steps.download.outputs.filename }}
+          files: |
+            ./bin/firefox-history-merger*
           args: -fq

.github/workflows/label-sponsor.yml

@@ -0,0 +1,21 @@
+name: label-sponsor
+
+on:
+  pull_request:
+    types:
+      - 'opened'
+  issues:
+    types:
+      - 'opened'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Set sponsor label
+        uses: JasonEtco/is-sponsor-label-action@024ac24f8b170abce078cad4ee748852369853c8
+        with:
+          label: ":sparkling_heart: sponsor"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/labels.yml

@@ -13,13 +13,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       -
-        # https://github.com/actions/checkout
         name: Checkout
         uses: actions/checkout@v2
       -
-        # https://github.com/crazy-max/ghaction-github-labeler
         name: Run Labeler
-        if: success()
+        uses: crazy-max/ghaction-github-labeler@v3
-        uses: crazy-max/ghaction-github-labeler@v2
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/lint.yml

@@ -1,26 +0,0 @@
-name: lint
-
-on:
-  pull_request:
-    paths:
-      - '.github/workflows/lint.yml'
-      - 'src/*'
-
-jobs:
-  lint:
-    runs-on: ubuntu-latest
-    steps:
-      -
-        # https://github.com/actions/checkout
-        name: Checkout
-        uses: actions/checkout@v2
-      -
-        # https://github.com/actions/setup-node
-        name: Set up Node
-        uses: actions/setup-node@v1
-      -
-        name: Setup TS
-        run: npm install tslint typescript -g
-      -
-        name: Lint check
-        run: tslint './src/*.ts'

.github/workflows/master.yml

@@ -1,37 +0,0 @@
-name: master
-
-on:
-  push:
-    branches:
-      - master
-
-jobs:
-  prune:
-    runs-on: ubuntu-latest
-    steps:
-      -
-        # https://github.com/actions/checkout
-        name: Checkout
-        uses: actions/checkout@v2
-      -
-        name: Build
-        run: |
-          npm install
-          npm run format
-          npm run build
-      -
-        name: Set up Git
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          git config user.name "${GITHUB_ACTOR}"
-          git config user.email "${GITHUB_ACTOR}@users.noreply.github.com"
-          git remote set-url origin https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git
-      -
-        name: Commit and push changes
-        run: |
-          git add .
-          if output=$(git status --porcelain) && [ ! -z "$output" ]; then
-            git commit -m 'Update generated content'
-            git push
-          fi

.github/workflows/test.yml

@@ -1,14 +1,39 @@
 name: test
 
 on:
-  pull_request:
-    branches:
-      - master
   push:
     branches:
-      - master
+      - 'master'
+      - 'releases/v*'
+    paths-ignore:
+      - '**.md'
+  pull_request:
+    branches:
+      - 'master'
+      - 'releases/v*'
+    paths-ignore:
+      - '**.md'
 
 jobs:
+  test-containerized:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+      -
+        name: Validate
+        uses: docker/bake-action@v1
+        with:
+          targets: validate
+      -
+        name: Test
+        uses: docker/bake-action@v1
+        with:
+          targets: test
+
   test:
     runs-on: ${{ matrix.os }}
     strategy:
@@ -19,28 +44,17 @@ jobs:
           - windows-latest
     steps:
       -
-        # https://github.com/actions/checkout
         name: Checkout
         uses: actions/checkout@v2
-      -
-        name: Build
-        run: |
-          npm install
-          npm run build
       -
         name: Install
-        run: npm ci
+        run: yarn install
-      -
-        name: Build
-        run: npm run build
       -
         name: Test
-        run: npm run test
+        run: yarn run test
       -
-        # https://github.com/codecov/codecov-action
         name: Upload coverage
         uses: codecov/codecov-action@v1
         if: success()
         with:
-          token: ${{ secrets.CODECOV_TOKEN }}
           file: ./coverage/clover.xml

CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 1.4.0 (2021/03/27)
+
+* Allow multiple files (#140)
+* Container dev workflow (#139)
+* Bump node-notifier from 8.0.0 to 8.0.1 (#135)
+* Bump @actions/tool-cache from 1.6.0 to 1.6.1 (#134)
+* Bump @actions/http-client from 1.0.8 to 1.0.11 (#131 #138)
+
+## 1.3.3 (2020/10/01)
+
+* Fix CVE-2020-15228
+
+## 1.3.2 (2020/05/11)
+
+* Update README
+
+## 1.3.1 (2020/05/07)
+
+* Code cleanup
+
 ## 1.3.0 (2020/05/06)
 
 * Use native tools

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2020 CrazyMax
+Copyright (c) 2020-2021 CrazyMax
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -9,13 +9,24 @@
 
 GitHub Action for [UPX](https://github.com/upx/upx), the Ultimate Packer for eXecutables.
 
+![Screenshot](.github/ghaction-upx.png)
+
+___
+
+* [Usage](#usage)
+* [Customizing](#customizing)
+  * [inputs](#inputs)
+* [Keep up-to-date with GitHub Dependabot](#keep-up-to-date-with-github-dependabot)
+* [Limitation](#limitation)
+* [How can I help?](#how-can-i-help)
+* [License](#license)
+
 ## Usage
 
 ```yaml
 name: upx
 
 on:
-  pull_request:
   push:
 
 jobs:
@@ -30,7 +41,8 @@ jobs:
         uses: crazy-max/ghaction-upx@v1
         with:
           version: latest
-          file: ./bin/mybinary
+          files: |
+            ./bin/*.exe
           args: -fq
 ```
 
@@ -41,18 +53,37 @@ jobs:
 Following inputs can be used as `step.with` keys
 
 | Name          | Type    | Default   | Description                     |
-|---------------|---------|-----------|-------------------------------|
+|---------------|---------|-----------|---------------------------------|
-| `version`     | String  | `latest`  | UPX version. Example: `3.95`  |
+| `version`     | String  | `latest`  | UPX version. Example: `v3.95`   |
-| `file`        | String  |           | File to compress              |
+| `files`       | String  |           | Newline-delimited list of path globs for files to compress (**required**) |
 | `args`        | String  |           | Arguments to pass to UPX        |
 
+## Keep up-to-date with GitHub Dependabot
+
+Since [Dependabot](https://docs.github.com/en/github/administering-a-repository/keeping-your-actions-up-to-date-with-github-dependabot)
+has [native GitHub Actions support](https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates#package-ecosystem),
+to enable it on your GitHub repo all you need to do is add the `.github/dependabot.yml` file:
+
+```yaml
+version: 2
+updates:
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+```
+
 ## Limitation
 
 This action is only available for Linux and Windows [virtual environments](https://help.github.com/en/articles/virtual-environments-for-github-actions#supported-virtual-environments-and-hardware-resources).
 
 ## How can I help?
 
-All kinds of contributions are welcome :raised_hands:! The most basic way to show your support is to star :star2: the project, or to raise issues :speech_balloon: You can also support this project by [**becoming a sponsor on GitHub**](https://github.com/sponsors/crazy-max) :clap: or by making a [Paypal donation](https://www.paypal.me/crazyws) to ensure this journey continues indefinitely! :rocket:
+All kinds of contributions are welcome :raised_hands:! The most basic way to show your support is to star :star2:
+the project, or to raise issues :speech_balloon: You can also support this project by
+[**becoming a sponsor on GitHub**](https://github.com/sponsors/crazy-max) :clap: or by making a
+[Paypal donation](https://www.paypal.me/crazyws) to ensure this journey continues indefinitely! :rocket:
 
 Thanks again for your support, it is much appreciated! :pray:
 

__tests__/context.test.ts

@@ -0,0 +1,98 @@
+import * as context from '../src/context';
+import * as core from '@actions/core';
+import * as path from 'path';
+
+describe('getInputList', () => {
+  it('handles single line correctly', async () => {
+    await setInput('foo', 'bar');
+    const res = await context.getInputList(core.getInput('foo'));
+    console.log(res);
+    expect(res).toEqual(['bar']);
+  });
+
+  it('handles multiple lines correctly', async () => {
+    setInput('foo', 'bar\nbaz');
+    const res = await context.getInputList(core.getInput('foo'));
+    console.log(res);
+    expect(res).toEqual(['bar', 'baz']);
+  });
+
+  it('remove empty lines correctly', async () => {
+    setInput('foo', 'bar\n\nbaz');
+    const res = await context.getInputList(core.getInput('foo'));
+    console.log(res);
+    expect(res).toEqual(['bar', 'baz']);
+  });
+
+  it('handles comma correctly', async () => {
+    setInput('foo', 'bar,baz');
+    const res = await context.getInputList(core.getInput('foo'));
+    console.log(res);
+    expect(res).toEqual(['bar', 'baz']);
+  });
+
+  it('remove empty result correctly', async () => {
+    setInput('foo', 'bar,baz,');
+    const res = await context.getInputList(core.getInput('foo'));
+    console.log(res);
+    expect(res).toEqual(['bar', 'baz']);
+  });
+
+  it('handles different new lines correctly', async () => {
+    setInput('foo', 'bar\r\nbaz');
+    const res = await context.getInputList(core.getInput('foo'));
+    console.log(res);
+    expect(res).toEqual(['bar', 'baz']);
+  });
+
+  it('handles different new lines and comma correctly', async () => {
+    setInput('foo', 'bar\r\nbaz,bat');
+    const res = await context.getInputList(core.getInput('foo'));
+    console.log(res);
+    expect(res).toEqual(['bar', 'baz', 'bat']);
+  });
+
+  it('handles multiple lines and ignoring comma correctly', async () => {
+    setInput('files', './bin/binary.exe\n./bin/binary2.exe');
+    const res = await context.getInputList(core.getInput('files'), true);
+    console.log(res);
+    expect(res).toEqual(['./bin/binary.exe', './bin/binary2.exe']);
+  });
+
+  it('handles different new lines and ignoring comma correctly', async () => {
+    setInput('driver-opts', './bin/binary.exe\r\n./bin/binary2.exe');
+    const res = await context.getInputList(core.getInput('files'), true);
+    console.log(res);
+    expect(res).toEqual(['./bin/binary.exe', './bin/binary2.exe']);
+  });
+});
+
+describe('asyncForEach', () => {
+  it('executes async tasks sequentially', async () => {
+    const testValues = [1, 2, 3, 4, 5];
+    const results: number[] = [];
+
+    await context.asyncForEach(testValues, async value => {
+      results.push(value);
+    });
+
+    expect(results).toEqual(testValues);
+  });
+});
+
+describe('resolvePaths', () => {
+  it('resolve files given a set of paths', async () => {
+    expect(
+      context.resolvePaths([path.join(__dirname, 'fixtures/data/**/*').split(path.sep).join(path.posix.sep)])
+    ).toEqual([path.join(__dirname, 'fixtures/data/foo/bar.txt').split(path.sep).join(path.posix.sep)]);
+  });
+});
+
+// See: https://github.com/actions/toolkit/blob/master/packages/core/src/core.ts#L67
+function getInputName(name: string): string {
+  return `INPUT_${name.replace(/ /g, '_').toUpperCase()}`;
+}
+
+function setInput(name: string, value: string): void {
+  process.env[getInputName(name)] = value;
+}

__tests__/fixtures/data/foo/bar.txt

@@ -0,0 +1 @@
+scan me

__tests__/github.test.ts

@@ -1,8 +1,16 @@
 import * as github from '../src/github';
 
 describe('github', () => {
-  it('returns 3.96 GitHub release', async () => {
+  it('returns latest UPX GitHub release', async () => {
-    const release = await github.getRelease('3.96');
+    const release = await github.getRelease('latest');
+    console.log(release);
+    expect(release).not.toBeNull();
+    expect(release?.tag_name).not.toEqual('');
+  });
+
+  it('returns v3.96 GoReleaser GitHub release', async () => {
+    const release = await github.getRelease('v3.96');
+    console.log(release);
     expect(release).not.toBeNull();
     expect(release?.tag_name).toEqual('v3.96');
   });

__tests__/installer.test.ts

@@ -2,13 +2,15 @@ import fs = require('fs');
 import * as installer from '../src/installer';
 
 describe('installer', () => {
-  it('acquires 3.95 version of UPX', async () => {
+  it('acquires v3.95 version of UPX', async () => {
-    const upx = await installer.getUPX('3.95');
+    const upx = await installer.getUPX('v3.95');
+    console.log(upx);
     expect(fs.existsSync(upx)).toBe(true);
   }, 100000);
 
   it('acquires latest version of UPX', async () => {
     const upx = await installer.getUPX('latest');
+    console.log(upx);
     expect(fs.existsSync(upx)).toBe(true);
   }, 100000);
 });

action.yml

@@ -10,11 +10,17 @@ inputs:
   version:
     description: 'UPX version. Example: 3.95'
     default: 'latest'
-  file:
+    required: false
-    description: 'File to compress'
+  files:
-    required: true
+    description: 'Newline-delimited list of path globs for files to compress'
+    required: false
   args:
     description: 'Arguments to pass to UPX'
+    required: false
+  file:
+    deprecationMessage: 'file is deprecated. Please use files input instead.'
+    description: 'File to compress'
+    required: false
 
 runs:
   using: 'node12'

dev.Dockerfile

@@ -0,0 +1,51 @@
+#syntax=docker/dockerfile:1.2
+
+FROM node:12 AS deps
+WORKDIR /src
+COPY package.json yarn.lock ./
+RUN --mount=type=cache,target=/src/node_modules \
+  yarn install
+
+FROM scratch AS update-yarn
+COPY --from=deps /src/yarn.lock /
+
+FROM deps AS validate-yarn
+COPY .git .git
+RUN status=$(git status --porcelain -- yarn.lock); if [ -n "$status" ]; then echo $status; exit 1; fi
+
+FROM deps AS base
+COPY . .
+
+FROM base AS build
+RUN --mount=type=cache,target=/src/node_modules \
+  yarn build
+
+FROM deps AS test
+ENV RUNNER_TEMP=/tmp/github_runner
+ENV RUNNER_TOOL_CACHE=/tmp/github_tool_cache
+COPY . .
+RUN --mount=type=cache,target=/src/node_modules \
+  yarn run test
+
+FROM scratch AS test-coverage
+COPY --from=test /src/coverage /coverage/
+
+FROM base AS run-format
+RUN --mount=type=cache,target=/src/node_modules \
+  yarn run format
+
+FROM scratch AS format
+COPY --from=run-format /src/src/*.ts /src/
+
+FROM base AS validate-format
+RUN --mount=type=cache,target=/src/node_modules \
+  yarn run format-check
+
+FROM scratch AS dist
+COPY --from=build /src/dist/ /dist/
+
+FROM build AS validate-build
+RUN status=$(git status --porcelain -- dist); if [ -n "$status" ]; then echo $status; exit 1; fi
+
+FROM base AS dev
+ENTRYPOINT ["bash"]

docker-bake.hcl

@@ -0,0 +1,57 @@
+variable "GITHUB_REPOSITORY" {
+  default = "crazy-max/ghaction-upx"
+}
+
+group "default" {
+  targets = ["build"]
+}
+
+group "pre-checkin" {
+  targets = ["update-yarn", "format", "build"]
+}
+
+group "validate" {
+  targets = ["validate-format", "validate-build", "validate-yarn"]
+}
+
+target "dockerfile" {
+  dockerfile = "dev.Dockerfile"
+}
+
+target "update-yarn" {
+  inherits = ["dockerfile"]
+  target = "update-yarn"
+  output = ["."]
+}
+
+target "build" {
+  inherits = ["dockerfile"]
+  target = "dist"
+  output = ["."]
+}
+
+target "test" {
+  inherits = ["dockerfile"]
+  target = "test"
+}
+
+target "format" {
+  inherits = ["dockerfile"]
+  target = "format"
+  output = ["."]
+}
+
+target "validate-format" {
+  inherits = ["dockerfile"]
+  target = "validate-format"
+}
+
+target "validate-build" {
+  inherits = ["dockerfile"]
+  target = "validate-build"
+}
+
+target "validate-yarn" {
+  inherits = ["dockerfile"]
+  target = "validate-yarn"
+}

jest.config.js

@@ -7,5 +7,5 @@ module.exports = {
   transform: {
     '^.+\\.ts$': 'ts-jest'
   },
-  verbose: true
+  verbose: false
 }

package.json

@@ -7,7 +7,7 @@
     "test": "jest --coverage",
     "format": "prettier --write **/*.ts",
     "format-check": "prettier --check **/*.ts",
-    "pre-checkin": "npm run format && npm run build"
+    "pre-checkin": "yarn run format && yarn run build"
   },
   "repository": {
     "type": "git",
@@ -20,21 +20,21 @@
   "author": "CrazyMax",
   "license": "MIT",
   "dependencies": {
-    "@actions/core": "^1.2.4",
+    "@actions/core": "^1.2.6",
     "@actions/exec": "^1.0.4",
-    "@actions/http-client": "^1.0.8",
+    "@actions/http-client": "^1.0.11",
-    "@actions/tool-cache": "^1.3.4"
+    "@actions/tool-cache": "^1.6.1"
   },
   "devDependencies": {
-    "@types/jest": "^25.2.1",
+    "@types/jest": "^26.0.14",
-    "@types/node": "^13.13.4",
+    "@types/node": "^14.11.2",
-    "@zeit/ncc": "^0.22.1",
+    "@vercel/ncc": "^0.24.1",
-    "jest": "^25.5.0",
+    "jest": "^26.4.2",
-    "jest-circus": "^25.5.0",
+    "jest-circus": "^26.4.2",
-    "jest-runtime": "^25.5.0",
+    "jest-runtime": "^26.4.2",
-    "prettier": "^2.0.5",
+    "prettier": "^2.1.2",
-    "ts-jest": "^25.4.0",
+    "ts-jest": "^26.4.1",
-    "typescript": "^3.8.3",
+    "typescript": "^4.0.3",
     "typescript-formatter": "^7.2.2"
   }
 }

src/context.ts

@@ -0,0 +1,42 @@
+import * as glob from 'glob';
+import {lstatSync} from 'fs';
+import * as core from '@actions/core';
+
+export interface Inputs {
+  version: string;
+  files: string[];
+  args: string;
+}
+
+export async function getInputs(): Promise<Inputs> {
+  return {
+    version: core.getInput('version') || 'latest',
+    files: getInputList(core.getInput('files') || core.getInput('file'), true),
+    args: core.getInput('args')
+  };
+}
+
+export function getInputList(items: string, ignoreComma?: boolean): string[] {
+  if (items == '') {
+    return [];
+  }
+  return items
+    .split(/\r?\n/)
+    .filter(x => x)
+    .reduce<string[]>(
+      (acc, line) => acc.concat(!ignoreComma ? line.split(',').filter(x => x) : line).map(pat => pat.trim()),
+      []
+    );
+}
+
+export const asyncForEach = async (array, callback) => {
+  for (let index = 0; index < array.length; index++) {
+    await callback(array[index], index, array);
+  }
+};
+
+export const resolvePaths = (patterns: string[]): string[] => {
+  return patterns.reduce((acc: string[], pattern: string): string[] => {
+    return acc.concat(glob.sync(pattern).filter(path => lstatSync(path).isFile()));
+  }, []);
+};

src/github.ts

@@ -6,7 +6,7 @@ export interface GitHubRelease {
 }
 
 export const getRelease = async (version: string): Promise<GitHubRelease | null> => {
-  const url: string = `https://github.com/upx/upx/releases/${version !== 'latest' ? `v${version}` : version}`;
+  const url: string = `https://github.com/upx/upx/releases/${version}`;
   const http: httpm.HttpClient = new httpm.HttpClient('ghaction-upx');
   return (await http.getJson<GitHubRelease>(url)).result;
 };

src/installer.ts

@@ -5,36 +5,41 @@ import * as github from './github';
 import * as core from '@actions/core';
 import * as tc from '@actions/tool-cache';
 
-let osPlat: string = os.platform();
+const osPlat: string = os.platform();
-let osArch: string = os.arch();
+const osArch: string = os.arch();
 
 export async function getUPX(version: string): Promise<string> {
+  core.startGroup(`Checking UPX ${version} release...`);
   const release: github.GitHubRelease | null = await github.getRelease(version);
   if (!release) {
     throw new Error(`Cannot find UPX ${version} release`);
   }
-
   const semver: string = release.tag_name.replace(/^v/, '');
-  core.debug(`Semver is ${semver}`);
+  core.info(`UPX ${semver} found`);
+  core.endGroup();
 
-  core.info(`✅ UPX version found: ${semver}`);
   const filename = util.format('%s.%s', getName(semver), osPlat == 'win32' ? 'zip' : 'tar.xz');
   const downloadUrl = util.format('https://github.com/upx/upx/releases/download/v%s/%s', semver, filename);
 
-  core.info(`⬇️ Downloading ${downloadUrl}...`);
+  core.startGroup(`Downloading ${downloadUrl}...`);
+
   const downloadPath: string = await tc.downloadTool(downloadUrl);
-  core.debug(`Downloaded to ${downloadPath}`);
+  core.info(`Downloaded to ${downloadPath}`);
 
-  core.info('📦 Extracting UPX...');
+  let extPath: string;
-  const extPath: string =
+  if (osPlat == 'win32') {
-    osPlat == 'win32' ? await tc.extractZip(downloadPath) : await tc.extractTar(downloadPath, undefined, 'x');
+    extPath = await tc.extractZip(downloadPath);
-  core.debug(`Extracted to ${extPath}`);
+  } else {
+    extPath = await tc.extractTar(downloadPath, undefined, 'x');
+  }
+  core.info(`Extracted to ${extPath}`);
 
-  const cachePath: string = await tc.cacheDir(extPath, 'ghaction-upx', version);
+  const cachePath: string = await tc.cacheDir(extPath, 'ghaction-upx', semver);
   core.debug(`Cached to ${cachePath}`);
 
   const exePath: string = path.join(cachePath, getName(semver), osPlat == 'win32' ? 'upx.exe' : 'upx');
   core.debug(`Exe path is ${exePath}`);
+  core.endGroup();
 
   return exePath;
 }

src/main.ts

@@ -1,29 +1,30 @@
-import * as fs from 'fs';
 import * as os from 'os';
+import * as context from './context';
 import * as installer from './installer';
 import * as core from '@actions/core';
 import * as exec from '@actions/exec';
 
-export async function run() {
+async function run(): Promise<void> {
   try {
     if (os.platform() == 'darwin') {
       core.setFailed('Not supported on darwin platform');
       return;
     }
 
-    const version = core.getInput('version') || 'latest';
+    const inputs: context.Inputs = await context.getInputs();
-    const file = core.getInput('file', {required: true});
+    const upx = await installer.getUPX(inputs.version);
-    const args = core.getInput('args');
 
-    if (!fs.existsSync(file)) {
+    const files: string[] = await context.resolvePaths(inputs.files);
-      core.setFailed(`File to compress not found: ${file}`);
+    if (files.length == 0) {
+      core.warning(`No files were found. Please check the 'files' input.`);
       return;
     }
 
-    const upx = await installer.getUPX(version);
+    await context.asyncForEach(files, async filepath => {
-
+      core.startGroup(`Compressing ${filepath}...`);
-    core.info('🏃 Running UPX...');
+      await exec.exec(`${upx} ${inputs.args} ${filepath}`);
-    await exec.exec(`${upx} ${args} ${file}`);
+      core.endGroup();
+    });
   } catch (error) {
     core.setFailed(error.message);
   }

tsconfig.json

@@ -3,7 +3,8 @@
     "target": "es6",
     "module": "commonjs",
     "lib": [
-      "es6"
+      "es6",
+      "dom"
     ],
     "newLine": "lf",
     "outDir": "./lib",