chore: remove upstream CI workflows (mirror inertization per internal#233)

2026-05-10 14:28:12 +00:00 · 2026-05-10 14:28:12 +00:00 · 2026-05-10 14:28:11 +00:00 · 2026-05-10 14:28:11 +00:00 · 2026-05-10 14:28:10 +00:00 · 2026-05-10 14:28:10 +00:00
47 changed files with 154336 additions and 167216 deletions
@@ -1,3 +0,0 @@
-node_modules/
-lib/
-dist/
@@ -1,16 +0,0 @@
-{
-    "env": { "node": true, "jest": true },
-    "parser": "@typescript-eslint/parser",
-    "parserOptions": { "ecmaVersion": 9, "sourceType": "module" },
-    "extends": [
-      "eslint:recommended",
-      "plugin:import/errors",
-      "plugin:import/warnings",
-      "plugin:import/typescript",
-      "plugin:prettier/recommended"
-    ],
-    "rules": {
-       "@typescript-eslint/no-empty-function": "off"
-    },
-    "plugins": ["@typescript-eslint", "jest"]
-}
@@ -1,53 +0,0 @@
-# `dist/index.js` is a special file in Actions.
-# When you reference an action with `uses:` in a workflow,
-# `index.js` is the code that will run.
-# For our project, we generate this file through a build process
-# from other source files.
-# We need to make sure the checked-in `index.js` actually matches what we expect it to be.
-name: Check dist/
-
-on:
-  push:
-    branches:
-      - main
-    paths-ignore:
-      - '**.md'
-  pull_request:
-    paths-ignore:
-      - '**.md'
-  workflow_dispatch:
-
-jobs:
-  check-dist:
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Setup Node 20
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20.x
-          cache: 'npm'
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Rebuild the dist/ directory
-        run: npm run release
-
-      - name: Compare the expected and actual dist/ directories
-        run: |
-          if [ "$(git diff --ignore-space-at-eol dist/ | wc -l)" -gt "0" ]; then
-            echo "Detected uncommitted changes after build.  See status below:"
-            git diff
-            exit 1
-          fi
-        id: diff
-
-      # If index.js was different than expected, upload the expected version as an artifact
-      - uses: actions/upload-artifact@v4
-        if: ${{ failure() && steps.diff.conclusion == 'failure' }}
-        with:
-          name: dist
-          path: dist/
@@ -1,46 +0,0 @@
-name: "Code scanning - action"
-
-on:
-  push:
-    branches-ignore: "dependabot/**"
-  pull_request:
-    paths-ignore:
-      - '**.md'
-  schedule:
-    - cron: '0 6 * * 3'
-
-jobs:
-  CodeQL-Build:
-
-    # CodeQL runs on ubuntu-latest and windows-latest
-    runs-on: ubuntu-latest
-
-    steps:
-    - name: Checkout repository
-      uses: actions/checkout@v3
-
-    # Initializes the CodeQL tools for scanning.
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
-      # Override language selection by uncommenting this and choosing your languages
-      # with:
-      #   languages: go, javascript, csharp, python, cpp, java
-
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
-
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 https://git.io/JvXDl
-
-    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
-    #    and modify them (or add more) to build your code if your project
-    #    uses a compiled language
-
-    #- run: |
-    #   make bootstrap
-    #   make release
-
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
@@ -1,24 +0,0 @@
-name: Licensed
-
-on:
-  push:
-    branches:
-      - main
-  pull_request:
-    branches:
-      - main
-
-jobs:
-  test:
-    runs-on: ubuntu-latest
-    name: Check licenses
-    steps:
-      - uses: actions/checkout@v4
-      - run: npm ci
-      - name: Install licensed
-        run: |
-          cd $RUNNER_TEMP
-          curl -Lfs -o licensed.tar.gz https://github.com/github/licensed/releases/download/2.12.2/licensed-2.12.2-linux-x64.tar.gz
-          sudo tar -xzf licensed.tar.gz
-          sudo mv licensed /usr/local/bin/licensed
-      - run: licensed status
@@ -1,28 +0,0 @@
-name: Release new action version
-on:
-  release:
-    types: [released]
-  workflow_dispatch:
-    inputs:
-      TAG_NAME:
-        description: 'Tag name that the major tag will point to'
-        required: true
-
-env:
-  TAG_NAME: ${{ github.event.inputs.TAG_NAME || github.event.release.tag_name }}
-permissions:
-  contents: write
-
-jobs:
-  update_tag:
-    name: Update the major tag to include the ${{ github.event.inputs.TAG_NAME || github.event.release.tag_name }} changes
-    environment:
-      name: releaseNewActionVersion
-    runs-on: ubuntu-latest
-    steps:
-    - name: Update the ${{ env.TAG_NAME }} tag
-      id: update-major-tag
-      uses: actions/publish-action@v0.3.0
-      with:
-        source-tag: ${{ env.TAG_NAME }}
-        slack-webhook: ${{ secrets.SLACK_WEBHOOK }}
@@ -1,251 +0,0 @@
-name: Test
-
-on:
-  push:
-    branches:
-      - main
-    paths-ignore:
-      - '**.md'
-  pull_request:
-    paths-ignore:
-      - '**.md'
-
-jobs:
-  build:
-    name: Build
-
-    strategy:
-      matrix:
-        runs-on: [ubuntu-latest, macos-latest, windows-latest]
-      fail-fast: false
-
-    runs-on: ${{ matrix.runs-on }}
-
-    steps:
-    - name: Checkout
-      uses: actions/checkout@v4
-
-    - name: Setup Node 20
-      uses: actions/setup-node@v4
-      with:
-        node-version: 20.x
-        cache: 'npm'
-
-    - name: Install dependencies
-      run: npm ci
-
-    - name: Compile
-      run: npm run build
-
-    - name: Lint
-      run: npm run lint
-
-    - name: Format
-      run: npm run format-check
-
-    - name: Test
-      run: npm run test
-
-    # Test end-to-end by uploading two artifacts and then downloading them
-    - name: Create artifact files
-      run: |
-        mkdir -p path/to/dir-1
-        mkdir -p path/to/dir-2
-        mkdir -p path/to/dir-3
-        echo "Lorem ipsum dolor sit amet" > path/to/dir-1/file1.txt
-        echo "Hello world from file #2" > path/to/dir-2/file2.txt
-
-    # Upload a single file artifact
-    - name: 'Upload artifact #1'
-      uses: ./
-      with:
-        name: 'Artifact-A-${{ matrix.runs-on }}'
-        path: path/to/dir-1/file1.txt
-
-    # Upload using a wildcard pattern
-    - name: 'Upload artifact #2'
-      uses: ./
-      with:
-        name: 'Artifact-Wildcard-${{ matrix.runs-on }}'
-        path: path/**/dir*/
-
-    # Upload a multi-path artifact
-    - name: 'Upload artifact #3'
-      uses: ./
-      with:
-        name: 'Multi-Path-Artifact-${{ matrix.runs-on }}'
-        path: |
-          path/to/dir-1/*
-          path/to/dir-[23]/*
-          !path/to/dir-3/*.txt
-
-    # Download Artifact #1 and verify the correctness of the content
-    - name: 'Download artifact #1'
-      uses: actions/download-artifact@v4
-      with:
-        name: 'Artifact-A-${{ matrix.runs-on }}'
-        path: some/new/path
-
-    - name: 'Verify Artifact #1'
-      run: |
-        $file = "some/new/path/file1.txt"
-        if(!(Test-Path -path $file))
-        {
-            Write-Error "Expected file does not exist"
-        }
-        if(!((Get-Content $file) -ceq "Lorem ipsum dolor sit amet"))
-        {
-            Write-Error "File contents of downloaded artifact are incorrect"
-        }
-      shell: pwsh
-
-    # Download Artifact #2 and verify the correctness of the content
-    - name: 'Download artifact #2'
-      uses: actions/download-artifact@v4
-      with:
-        name: 'Artifact-Wildcard-${{ matrix.runs-on }}'
-        path: some/other/path
-
-    - name: 'Verify Artifact #2'
-      run: |
-        $file1 = "some/other/path/to/dir-1/file1.txt"
-        $file2 = "some/other/path/to/dir-2/file2.txt"
-        if(!(Test-Path -path $file1) -or !(Test-Path -path $file2))
-        {
-            Write-Error "Expected files do not exist"
-        }
-        if(!((Get-Content $file1) -ceq "Lorem ipsum dolor sit amet") -or !((Get-Content $file2) -ceq "Hello world from file #2"))
-        {
-            Write-Error "File contents of downloaded artifacts are incorrect"
-        }
-      shell: pwsh
-
-    # Download Artifact #4 and verify the correctness of the content
-    - name: 'Download artifact #4'
-      uses: actions/download-artifact@v4
-      with:
-        name: 'Multi-Path-Artifact-${{ matrix.runs-on }}'
-        path: multi/artifact
-
-    - name: 'Verify Artifact #4'
-      run: |
-        $file1 = "multi/artifact/dir-1/file1.txt"
-        $file2 = "multi/artifact/dir-2/file2.txt"
-        if(!(Test-Path -path $file1) -or !(Test-Path -path $file2))
-        {
-            Write-Error "Expected files do not exist"
-        }
-        if(!((Get-Content $file1) -ceq "Lorem ipsum dolor sit amet") -or !((Get-Content $file2) -ceq "Hello world from file #2"))
-        {
-            Write-Error "File contents of downloaded artifacts are incorrect"
-        }
-      shell: pwsh
-
-    - name: 'Alter file 1 content'
-      run: |
-        echo "This file has changed" > path/to/dir-1/file1.txt
-
-    # Replace the contents of Artifact #1
-    - name: 'Overwrite artifact #1'
-      uses: ./
-      with:
-        name: 'Artifact-A-${{ matrix.runs-on }}'
-        path: path/to/dir-1/file1.txt
-        overwrite: true
-
-    # Download replaced Artifact #1 and verify the correctness of the content
-    - name: 'Download artifact #1 again'
-      uses: actions/download-artifact@v4
-      with:
-        name: 'Artifact-A-${{ matrix.runs-on }}'
-        path: overwrite/some/new/path
-
-    - name: 'Verify Artifact #1 again'
-      run: |
-        $file = "overwrite/some/new/path/file1.txt"
-        if(!(Test-Path -path $file))
-        {
-            Write-Error "Expected file does not exist"
-        }
-        if(!((Get-Content $file) -ceq "This file has changed"))
-        {
-            Write-Error "File contents of downloaded artifact are incorrect"
-        }
-      shell: pwsh
-  merge:
-    name: Merge
-    needs: build
-    runs-on: ubuntu-latest
-
-    steps:
-    - name: Checkout
-      uses: actions/checkout@v4
-
-    # Merge all artifacts from previous jobs
-    - name: Merge all artifacts in run
-      uses: ./merge/
-      with:
-        # our matrix produces artifacts with the same file, this prevents "stomping" on each other, also makes it
-        # easier to identify each of the merged artifacts
-        separate-directories: true
-    - name: 'Download merged artifacts'
-      uses: actions/download-artifact@v4
-      with:
-        name: merged-artifacts
-        path: all-merged-artifacts
-    - name: 'Check merged artifact has directories for each artifact'
-      run: |
-        $artifacts = @(
-          "Artifact-A-ubuntu-latest",
-          "Artifact-A-macos-latest",
-          "Artifact-A-windows-latest",
-          "Artifact-Wildcard-ubuntu-latest",
-          "Artifact-Wildcard-macos-latest",
-          "Artifact-Wildcard-windows-latest",
-          "Multi-Path-Artifact-ubuntu-latest",
-          "Multi-Path-Artifact-macos-latest",
-          "Multi-Path-Artifact-windows-latest"
-        )
-
-        foreach ($artifact in $artifacts) {
-          $path = "all-merged-artifacts/$artifact"
-          if (!(Test-Path $path)) {
-            Write-Error "$path does not exist."
-          }
-        }
-      shell: pwsh
-
-    # Merge Artifact-A-* from previous jobs
-    - name: Merge all Artifact-A
-      uses: ./merge/
-      with:
-        name: Merged-Artifact-As
-        pattern: 'Artifact-A-*'
-        separate-directories: true
-
-    # Download merged artifacts and verify the correctness of the content
-    - name: 'Download merged artifacts'
-      uses: actions/download-artifact@v4
-      with:
-        name: Merged-Artifact-As
-        path: merged-artifact-a
-
-    - name: 'Verify merged artifacts'
-      run: |
-        $files = @(
-          "merged-artifact-a/Artifact-A-ubuntu-latest/file1.txt",
-          "merged-artifact-a/Artifact-A-macos-latest/file1.txt",
-          "merged-artifact-a/Artifact-A-windows-latest/file1.txt"
-        )
-
-        foreach ($file in $files) {
-          if (!(Test-Path $file)) {
-            Write-Error "$file does not exist."
-          }
-
-          if (!((Get-Content $file) -ceq "This file has changed")) {
-            Write-Error "$file has incorrect content."
-          }
-        }
-      shell: pwsh
-
@@ -1,3 +1,4 @@
 node_modules/
 lib/
-__tests__/_temp/
+__tests__/_temp/
+.DS_Store
@@ -1,6 +1,9 @@
 sources:
  npm: true

+# Force UTF-8 encoding
+encoding: 'utf-8'
+
 allowed:
  - apache-2.0
  - bsd-2-clause
@@ -9,7 +12,30 @@ allowed:
  - mit
  - cc0-1.0
  - unlicense
+  - 0bsd
+  - blueoak-1.0.0

 reviewed:
  npm:
-  - fs.realpath
+  - fs.realpath
+  - "@actions/http-client" # MIT
+  - "@bufbuild/protobuf" # Apache-2.0
+  - "@pkgjs/parseargs" # MIT
+  - "@protobuf-ts/runtime" # Apache-2.0
+  - argparse # Python-2.0
+  - buffers # MIT
+  - chainsaw # MIT
+  - color-convert # MIT
+  - ieee754 # BSD-3-Clause
+  - lodash # MIT
+  - mdurl # MIT
+  - neo-async # MIT
+  - package-json-from-dist # ISC
+  - readable-stream # MIT
+  - sax # ISC
+  - source-map # BSD-3-Clause
+  - string_decoder # MIT
+  - traverse # MIT
+  - tslib # 0BSD
+  - uglify-js # BSD-2-Clause
+  - wordwrap # MIT
@@ -1,9 +1,9 @@
 ---
 name: "@actions/artifact"
-version: 2.1.8
+version: 6.2.0
 type: npm
-summary: 
-homepage: 
+summary: Actions artifact lib
+homepage: https://github.com/actions/toolkit/tree/main/packages/artifact
 license: mit
 licenses:
 - sources: LICENSE.md
@@ -1,9 +1,9 @@
 ---
 name: "@actions/core"
-version: 1.10.1
+version: 3.0.0
 type: npm
-summary: 
-homepage: 
+summary: Actions core lib
+homepage: https://github.com/actions/toolkit/tree/main/packages/core
 license: mit
 licenses:
 - sources: LICENSE.md
@@ -1,9 +1,9 @@
 ---
 name: "@actions/github"
-version: 6.0.0
+version: 9.0.0
 type: npm
-summary: 
-homepage: 
+summary: Actions github lib
+homepage: https://github.com/actions/toolkit/tree/main/packages/github
 license: mit
 licenses:
 - sources: LICENSE.md
@@ -1,9 +1,9 @@
 ---
 name: "@actions/glob"
-version: 0.3.0
+version: 0.6.1
 type: npm
-summary: 
-homepage: 
+summary: Actions glob lib
+homepage: https://github.com/actions/toolkit/tree/main/packages/glob
 license: mit
 licenses:
 - sources: LICENSE.md
@@ -1,9 +1,9 @@
 ---
 name: "@actions/io"
-version: 1.1.2
+version: 3.0.2
 type: npm
-summary: 
-homepage: 
+summary: Actions io lib
+homepage: https://github.com/actions/toolkit/tree/main/packages/io
 license: mit
 licenses:
 - sources: LICENSE.md
@@ -1,26 +1,66 @@
 ---
 name: minimatch
-version: 9.0.3
+version: 10.2.4
 type: npm
 summary: 
 homepage: 
-license: isc
+license: blueoak-1.0.0
 licenses:
- sources: LICENSE
+- sources: LICENSE.md
  text: |
-    The ISC License
+    # Blue Oak Model License

-    Copyright (c) 2011-2023 Isaac Z. Schlueter and Contributors
+    Version 1.0.0

-    Permission to use, copy, modify, and/or distribute this software for any
-    purpose with or without fee is hereby granted, provided that the above
-    copyright notice and this permission notice appear in all copies.
+    ## Purpose

-    THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-    WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-    MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
-    ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
-    IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+    This license gives everyone as much permission to work with
+    this software as possible, while protecting contributors
+    from liability.
+
+    ## Acceptance
+
+    In order to receive this license, you must agree to its
+    rules. The rules of this license are both obligations
+    under that agreement and conditions to your license.
+    You must not do anything with this software that triggers
+    a rule that you cannot or will not follow.
+
+    ## Copyright
+
+    Each contributor licenses you to do everything with this
+    software that would otherwise infringe that contributor's
+    copyright in it.
+
+    ## Notices
+
+    You must ensure that everyone who gets a copy of
+    any part of this software from you, with or without
+    changes, also gets the text of this license or a link to
+    <https://blueoakcouncil.org/license/1.0.0>.
+
+    ## Excuse
+
+    If anyone notifies you in writing that you have not
+    complied with [Notices](#notices), you can keep your
+    license by taking all practical steps to comply within 30
+    days after the notice. If you do not do so, your license
+    ends immediately.
+
+    ## Patent
+
+    Each contributor licenses you to do everything with this
+    software that would otherwise infringe any patent claims
+    they can license or become able to license.
+
+    ## Reliability
+
+    No contributor can revoke this license.
+
+    ## No Liability
+
+    **_As far as the law allows, this software comes as is,
+    without any warranty or condition, and no contributor
+    will be liable to anyone for any damages related to this
+    software or this license, under any kind of legal claim._**
 notices: []
@@ -0,0 +1,36 @@
+{
+    "version": "0.2.0",
+    "configurations": [
+      {
+        "type": "node",
+        "request": "launch",
+        "name": "Debug Jest Tests",
+        "program": "${workspaceFolder}/node_modules/jest/bin/jest.js",
+        "args": [
+          "--runInBand",
+          "--testTimeout",
+          "10000"
+        ],
+        "cwd": "${workspaceFolder}",
+        "console": "integratedTerminal",
+        "internalConsoleOptions": "neverOpen",
+        "disableOptimisticBPs": true
+      },
+      {
+        "type": "node",
+        "request": "launch",
+        "name": "Debug Current Test File",
+        "program": "${workspaceFolder}/node_modules/jest/bin/jest.js",
+        "args": [
+          "--runInBand",
+          "--testTimeout",
+          "10000",
+          "${relativeFile}"
+        ],
+        "cwd": "${workspaceFolder}",
+        "console": "integratedTerminal",
+        "internalConsoleOptions": "neverOpen",
+        "disableOptimisticBPs": true
+      }
+    ]
+}
@@ -11,14 +11,14 @@ Upload [Actions Artifacts](https://docs.github.com/en/actions/using-workflows/st
 See also [download-artifact](https://github.com/actions/download-artifact).

 - [`@actions/upload-artifact`](#actionsupload-artifact)
-  - [v4 - What's new](#v4---whats-new)
-    - [Improvements](#improvements)
-    - [Breaking Changes](#breaking-changes)
+  - [What's new](#whats-new)
+  - [GHES Support](#ghes-support)
  - [Usage](#usage)
    - [Inputs](#inputs)
    - [Outputs](#outputs)
  - [Examples](#examples)
-    - [Upload an Individual File](#upload-an-individual-file)
+    - [Upload an Individual File (Zipped)](#upload-an-individual-file-zipped)
+    - [Upload an Individual File (Unzipped)](#upload-an-individual-file-unzipped)
    - [Upload an Entire Directory](#upload-an-entire-directory)
    - [Upload using a Wildcard Pattern](#upload-using-a-wildcard-pattern)
    - [Upload using Multiple Paths and Exclusions](#upload-using-multiple-paths-and-exclusions)
@@ -33,46 +33,41 @@ See also [download-artifact](https://github.com/actions/download-artifact).
    - [Overwriting an Artifact](#overwriting-an-artifact)
  - [Limitations](#limitations)
    - [Number of Artifacts](#number-of-artifacts)
-    - [Zip archives](#zip-archives)
    - [Permission Loss](#permission-loss)
  - [Where does the upload go?](#where-does-the-upload-go)

+## What's new

-## v4 - What's new
+Check out the [releases page](https://github.com/actions/upload-artifact/releases) for details on what's new.

-> [!IMPORTANT]
-> upload-artifact@v4+ is not currently supported on GHES yet. If you are on GHES, you must use [v3](https://github.com/actions/upload-artifact/releases/tag/v3).
+## Note

-The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.
+Thank you for your interest in this GitHub repo, however, right now we are not taking contributions.

-For more information, see the [`@actions/artifact`](https://github.com/actions/toolkit/tree/main/packages/artifact) documentation.
+We continue to focus our resources on strategic areas that help our customers be successful while making developers' lives easier. While GitHub Actions remains a key part of this vision, we are allocating resources towards other areas of Actions and are not taking contributions to this repository at this time. The GitHub public roadmap is the best place to follow along for any updates on features we’re working on and what stage they’re in.

-There is also a new sub-action, `actions/upload-artifact/merge`. For more info, check out that action's [README](./merge/README.md).
+We are taking the following steps to better direct requests related to GitHub Actions, including:

-### Improvements
+1. We will be directing questions and support requests to our [Community Discussions area](https://github.com/orgs/community/discussions/categories/actions)

-1. Uploads are significantly faster, upwards of 90% improvement in worst case scenarios.
-2. Once uploaded, an Artifact ID is returned and Artifacts are immediately available in the UI and [REST API](https://docs.github.com/en/rest/actions/artifacts). Previously, you would have to wait for the run to be completed before an ID was available or any APIs could be utilized.
-3. The contents of an Artifact are uploaded together into an _immutable_ archive. They cannot be altered by subsequent jobs unless the Artifacts are deleted and recreated (where they will have a new ID). Both of these factors help reduce the possibility of accidentally corrupting Artifact files.
-4. The compression level of an Artifact can be manually tweaked for speed or size reduction.
+2. High Priority bugs can be reported through Community Discussions or you can report these to our support team https://support.github.com/contact/bug-report.

-### Breaking Changes
+3. Security Issues should be handled as per our [security.md](SECURITY.md).

-1. On self hosted runners, additional [firewall rules](https://github.com/actions/toolkit/tree/main/packages/artifact#breaking-changes) may be required.
-2. Uploading to the same named Artifact multiple times.
+We will still provide security updates for this project and fix major breaking changes during this time.

-    Due to how Artifacts are created in this new version, it is no longer possible to upload to the same named Artifact multiple times. You must either split the uploads into multiple Artifacts with different names, or only upload once. Otherwise you _will_ encounter an error.
+You are welcome to still raise bugs in this repo.

-3. Limit of Artifacts for an individual job. Each job in a workflow run now has a limit of 500 artifacts.
+## GHES Support

-For assistance with breaking changes, see [MIGRATION.md](docs/MIGRATION.md).
+`upload-artifact@v4+` is not currently supported on GitHub Enterprise Server (GHES). If you are on GHES, you must use [v3.2.2](https://github.com/actions/upload-artifact/releases/tag/v3.2.2) (Node 24) or [v3.2.2-node20](https://github.com/actions/upload-artifact/releases/tag/v3.2.2-node20) (Node 20).

 ## Usage

 ### Inputs

 ```yaml
- uses: actions/upload-artifact@v4
+- uses: actions/upload-artifact@v7
  with:
    # Name of the artifact to upload.
    # Optional. Default is 'artifact'
@@ -107,6 +102,17 @@ For assistance with breaking changes, see [MIGRATION.md](docs/MIGRATION.md).
    # Does not fail if the artifact does not exist.
    # Optional. Default is 'false'
    overwrite:
+
+    # Whether to include hidden files in the provided path in the artifact
+    # The file contents of any hidden files in the path should be validated before
+    # enabled this to avoid uploading sensitive information.
+    # Optional. Default is 'false'
+    include-hidden-files:
+
+    # Whether to zip the artifact files before upload
+    # If 'false', only a single file can be uploaded. The name of the file will be used as the artifact name (the 'name' parameter is ignored)
+    # Optional. Default is 'true'
+    archive:
 ```

 ### Outputs
@@ -115,25 +121,38 @@ For assistance with breaking changes, see [MIGRATION.md](docs/MIGRATION.md).
 | - | - | - |
 | `artifact-id` | GitHub ID of an Artifact, can be used by the REST API | `1234` |
 | `artifact-url` | URL to download an Artifact. Can be used in many scenarios such as linking to artifacts in issues or pull requests. Users must be logged-in in order for this URL to work. This URL is valid as long as the artifact has not expired or the artifact, run or repository have not been deleted | `https://github.com/example-org/example-repo/actions/runs/1/artifacts/1234` |
+| `artifact-digest` | SHA-256 digest of an Artifact | 0fde654d4c6e659b45783a725dc92f1bfb0baa6c2de64b34e814dc206ff4aaaf |

 ## Examples

-### Upload an Individual File
+### Upload an Individual File (Zipped)

 ```yaml
 steps:
 - run: mkdir -p path/to/artifact
 - run: echo hello > path/to/artifact/world.txt
- uses: actions/upload-artifact@v4
+- uses: actions/upload-artifact@v7
  with:
    name: my-artifact
    path: path/to/artifact/world.txt
 ```

+### Upload an Individual File (Unzipped)
+
+```yaml
+steps:
+- run: mkdir -p path/to/artifact
+- run: echo hello > path/to/artifact/world.txt
+- uses: actions/upload-artifact@v7
+  with:
+    path: path/to/artifact/world.txt
+    archive: false
+```
+
 ### Upload an Entire Directory

 ```yaml
- uses: actions/upload-artifact@v4
+- uses: actions/upload-artifact@v7
  with:
    name: my-artifact
    path: path/to/artifact/ # or path/to/artifact
@@ -142,7 +161,7 @@ steps:
 ### Upload using a Wildcard Pattern

 ```yaml
- uses: actions/upload-artifact@v4
+- uses: actions/upload-artifact@v7
  with:
    name: my-artifact
    path: path/**/[abc]rtifac?/*
@@ -151,7 +170,7 @@ steps:
 ### Upload using Multiple Paths and Exclusions

 ```yaml
- uses: actions/upload-artifact@v4
+- uses: actions/upload-artifact@v7
  with:
    name: my-artifact
    path: |
@@ -199,7 +218,7 @@ For instance, if you are uploading random binary data, you can save a lot of tim
 - name: Make a 1GB random binary file
  run: |
    dd if=/dev/urandom of=my-1gb-file bs=1M count=1000
- uses: actions/upload-artifact@v4
+- uses: actions/upload-artifact@v7
  with:
    name: my-artifact
    path: my-1gb-file
@@ -212,7 +231,7 @@ But, if you are uploading data that is easily compressed (like plaintext, code,
 - name: Make a file with a lot of repeated text
  run: |
    for i in {1..100000}; do echo -n 'foobar' >> foobar.txt; done
- uses: actions/upload-artifact@v4
+- uses: actions/upload-artifact@v7
  with:
    name: my-artifact
    path: foobar.txt
@@ -224,7 +243,7 @@ But, if you are uploading data that is easily compressed (like plaintext, code,
 If a path (or paths), result in no files being found for the artifact, the action will succeed but print out a warning. In certain scenarios it may be desirable to fail the action or suppress the warning. The `if-no-files-found` option allows you to customize the behavior of the action if no files are found:

 ```yaml
- uses: actions/upload-artifact@v4
+- uses: actions/upload-artifact@v7
  with:
    name: my-artifact
    path: path/to/artifact/
@@ -237,13 +256,13 @@ Unlike earlier versions of `upload-artifact`, uploading to the same artifact via

 ```yaml
 - run: echo hi > world.txt
- uses: actions/upload-artifact@v4
+- uses: actions/upload-artifact@v7
  with:
    # implicitly named as 'artifact'
    path: world.txt

 - run: echo howdy > extra-file.txt
- uses: actions/upload-artifact@v4
+- uses: actions/upload-artifact@v7
  with:
    # also implicitly named as 'artifact', will fail here!
    path: extra-file.txt
@@ -269,7 +288,7 @@ jobs:
    - name: Build
      run: ./some-script --version=${{ matrix.version }} > my-binary
    - name: Upload
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
      with:
        name: binary-${{ matrix.os }}-${{ matrix.version }}
        path: my-binary
@@ -287,7 +306,7 @@ You can use `~` in the path input as a substitute for `$HOME`. Basic tilde expan
  - run: |
      mkdir -p ~/new/artifact
      echo hello > ~/new/artifact/world.txt
-  - uses: actions/upload-artifact@v4
+  - uses: actions/upload-artifact@v7
    with:
      name: my-artifacts
      path: ~/new/**/*
@@ -302,7 +321,7 @@ Environment variables along with context expressions can also be used for input.
    - run: |
        mkdir -p ${{ github.workspace }}/artifact
        echo hello > ${{ github.workspace }}/artifact/world.txt
-    - uses: actions/upload-artifact@v4
+    - uses: actions/upload-artifact@v7
      with:
        name: ${{ env.name }}-name
        path: ${{ github.workspace }}/artifact/**/*
@@ -316,7 +335,7 @@ For environment variables created in other steps, make sure to use the `env` exp
        mkdir testing
        echo "This is a file to upload" > testing/file.txt
        echo "artifactPath=testing/file.txt" >> $GITHUB_ENV
-    - uses: actions/upload-artifact@v4
+    - uses: actions/upload-artifact@v7
      with:
        name: artifact
        path: ${{ env.artifactPath }} # this will resolve to testing/file.txt at runtime
@@ -331,7 +350,7 @@ Artifacts are retained for 90 days by default. You can specify a shorter retenti
    run: echo "I won't live long" > my_file.txt

  - name: Upload Artifact
-    uses: actions/upload-artifact@v4
+    uses: actions/upload-artifact@v7
    with:
      name: my-artifact
      path: my_file.txt
@@ -347,7 +366,7 @@ If an artifact upload is successful then an `artifact-id` output is available. T
 #### Example output between steps

 ```yml
-    - uses: actions/upload-artifact@v4
+    - uses: actions/upload-artifact@v7
      id: artifact-upload-step
      with:
        name: my-artifact
@@ -366,7 +385,7 @@ jobs:
    outputs:
      output1: ${{ steps.artifact-upload-step.outputs.artifact-id }}
    steps:
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
        id: artifact-upload-step
        with:
          name: my-artifact
@@ -392,7 +411,7 @@ jobs:
      - name: Create a file
        run: echo "hello world" > my-file.txt
      - name: Upload Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
        with:
          name: my-artifact # NOTE: same artifact name
          path: my-file.txt
@@ -403,13 +422,35 @@ jobs:
      - name: Create a different file
        run: echo "goodbye world" > my-file.txt
      - name: Upload Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
        with:
          name: my-artifact # NOTE: same artifact name
          path: my-file.txt
          overwrite: true
 ```

+### Uploading Hidden Files
+
+By default, hidden files are ignored by this action to avoid unintentionally uploading sensitive information.
+
+If you need to upload hidden files, you can use the `include-hidden-files` input.
+Any files that contain sensitive information that should not be in the uploaded artifact can be excluded
+using the `path`:
+
+```yaml
+- uses: actions/upload-artifact@v7
+  with:
+    name: my-artifact
+    include-hidden-files: true
+    path: |
+      path/output/
+      !path/output/.production.env
+```
+
+Hidden files are defined as any file beginning with `.` or files within folders beginning with `.`.
+On Windows, files and directories with the hidden attribute are not considered hidden files unless
+they have the `.` prefix.
+
 ## Limitations

 ### Number of Artifacts
@@ -418,33 +459,30 @@ Within an individual job, there is a limit of 500 artifacts that can be created

 You may also be limited by Artifacts if you have exceeded your shared storage quota. Storage is calculated every 6-12 hours. See [the documentation](https://docs.github.com/en/billing/managing-billing-for-github-actions/about-billing-for-github-actions#calculating-minute-and-storage-spending) for more info.

-### Zip archives
-
-When an Artifact is uploaded, all the files are assembled into an immutable Zip archive. There is currently no way to download artifacts in a format other than a Zip or to download individual artifact contents.
-
 ### Permission Loss

-File permissions are not maintained during artifact upload. All directories will have `755` and all files will have `644`. For example, if you make a file executable using `chmod` and then upload that file, post-download the file is no longer guaranteed to be set as an executable.
+File permissions are not maintained during zipped artifact upload. All directories will have `755` and all files will have `644`. For example, if you make a file executable using `chmod` and then upload that file with `archive: true`, post-download the file is no longer guaranteed to be set as an executable.

-If you must preserve permissions, you can `tar` all of your files together before artifact upload. Post download, the `tar` file will maintain file permissions and case sensitivity.
+If you must preserve permissions, you can `tar` all of your files together before artifact upload and upload that file directly with `archive: false`. Post download, the `tar` file will maintain file permissions and case sensitivity.

 ```yaml
 - name: 'Tar files'
  run: tar -cvf my_files.tar /path/to/my/directory

 - name: 'Upload Artifact'
-  uses: actions/upload-artifact@v4
+  uses: actions/upload-artifact@v7
  with:
-    name: my-artifact
    path: my_files.tar
+    archive: false
 ```

 ## Where does the upload go?

 At the bottom of the workflow summary page, there is a dedicated section for artifacts. Here's a screenshot of something you might see:

-<img src="https://user-images.githubusercontent.com/16109154/103645952-223c6880-4f59-11eb-8268-8dca6937b5f9.png" width="700" height="300">
+<img src="https://github.com/user-attachments/assets/bcb7120f-f445-4a3e-9596-77f85f7e0af0" width="700" height="300">
+

 There is a trashcan icon that can be used to delete the artifact. This icon will only appear for users who have write permissions to the repository.

-The size of the artifact is denoted in bytes. The displayed artifact size denotes the size of the zip that `upload-artifact` creates during upload.
+The size of the artifact is denoted in bytes. The displayed artifact size denotes the size of the zip that `upload-artifact` creates during upload. The Digest column will display the SHA256 digest of the artifact being uploaded.
@@ -1,8 +1,65 @@
-import * as core from '@actions/core'
-import artifact from '@actions/artifact'
-import {run} from '../src/merge/merge-artifacts'
-import {Inputs} from '../src/merge/constants'
-import * as search from '../src/shared/search'
+import {jest, describe, test, expect, beforeEach} from '@jest/globals'
+
+// Mock @actions/github before importing modules that use it
+jest.unstable_mockModule('@actions/github', () => ({
+  context: {
+    repo: {
+      owner: 'actions',
+      repo: 'toolkit'
+    },
+    runId: 123,
+    serverUrl: 'https://github.com'
+  },
+  getOctokit: jest.fn()
+}))
+
+// Mock @actions/core
+jest.unstable_mockModule('@actions/core', () => ({
+  getInput: jest.fn(),
+  getBooleanInput: jest.fn(),
+  setOutput: jest.fn(),
+  setFailed: jest.fn(),
+  setSecret: jest.fn(),
+  info: jest.fn(),
+  warning: jest.fn(),
+  debug: jest.fn(),
+  error: jest.fn(),
+  notice: jest.fn(),
+  startGroup: jest.fn(),
+  endGroup: jest.fn(),
+  isDebug: jest.fn(() => false),
+  getState: jest.fn(),
+  saveState: jest.fn(),
+  exportVariable: jest.fn(),
+  addPath: jest.fn(),
+  group: jest.fn((name: string, fn: () => Promise<unknown>) => fn()),
+  toPlatformPath: jest.fn((p: string) => p),
+  toWin32Path: jest.fn((p: string) => p),
+  toPosixPath: jest.fn((p: string) => p)
+}))
+
+// Mock fs/promises
+const actualFsPromises = await import('fs/promises')
+jest.unstable_mockModule('fs/promises', () => ({
+  ...actualFsPromises,
+  mkdtemp: jest
+    .fn<() => Promise<string>>()
+    .mockResolvedValue('/tmp/merge-artifact'),
+  rm: jest.fn<() => Promise<void>>().mockResolvedValue(undefined)
+}))
+
+// Mock shared search module
+const mockFindFilesToUpload =
+  jest.fn<() => Promise<{filesToUpload: string[]; rootDirectory: string}>>()
+jest.unstable_mockModule('../src/shared/search.js', () => ({
+  findFilesToUpload: mockFindFilesToUpload
+}))
+
+// Dynamic imports after mocking
+const core = await import('@actions/core')
+const artifact = await import('@actions/artifact')
+const {run} = await import('../src/merge/merge-artifacts.js')
+const {Inputs} = await import('../src/merge/constants.js')

 const fixtures = {
  artifactName: 'my-merged-artifact',
@@ -34,27 +91,10 @@ const fixtures = {
  ]
 }

-jest.mock('@actions/github', () => ({
-  context: {
-    repo: {
-      owner: 'actions',
-      repo: 'toolkit'
-    },
-    runId: 123,
-    serverUrl: 'https://github.com'
-  }
-}))
-
-jest.mock('@actions/core')
-
-jest.mock('fs/promises', () => ({
-  mkdtemp: jest.fn().mockResolvedValue('/tmp/merge-artifact'),
-  rm: jest.fn().mockResolvedValue(undefined)
-}))
-
-/* eslint-disable no-unused-vars */
-const mockInputs = (overrides?: Partial<{[K in Inputs]?: any}>) => {
-  const inputs = {
+const mockInputs = (
+  overrides?: Partial<{[K in (typeof Inputs)[keyof typeof Inputs]]?: any}>
+) => {
+  const inputs: Record<string, any> = {
    [Inputs.Name]: 'my-merged-artifact',
    [Inputs.Pattern]: '*',
    [Inputs.SeparateDirectories]: false,
@@ -64,10 +104,14 @@ const mockInputs = (overrides?: Partial<{[K in Inputs]?: any}>) => {
    ...overrides
  }

-  ;(core.getInput as jest.Mock).mockImplementation((name: string) => {
-    return inputs[name]
-  })
-  ;(core.getBooleanInput as jest.Mock).mockImplementation((name: string) => {
+  ;(core.getInput as jest.Mock<typeof core.getInput>).mockImplementation(
+    (name: string) => {
+      return inputs[name]
+    }
+  )
+  ;(
+    core.getBooleanInput as jest.Mock<typeof core.getBooleanInput>
+  ).mockImplementation((name: string) => {
    return inputs[name]
  })

@@ -77,44 +121,45 @@ const mockInputs = (overrides?: Partial<{[K in Inputs]?: any}>) => {
 describe('merge', () => {
  beforeEach(async () => {
    mockInputs()
+    jest.clearAllMocks()

    jest
-      .spyOn(artifact, 'listArtifacts')
+      .spyOn(artifact.default, 'listArtifacts')
      .mockResolvedValue({artifacts: fixtures.artifacts})

-    jest.spyOn(artifact, 'downloadArtifact').mockResolvedValue({
+    jest.spyOn(artifact.default, 'downloadArtifact').mockResolvedValue({
      downloadPath: fixtures.tmpDirectory
    })

-    jest.spyOn(search, 'findFilesToUpload').mockResolvedValue({
+    mockFindFilesToUpload.mockResolvedValue({
      filesToUpload: fixtures.filesToUpload,
      rootDirectory: fixtures.tmpDirectory
    })

-    jest.spyOn(artifact, 'uploadArtifact').mockResolvedValue({
+    jest.spyOn(artifact.default, 'uploadArtifact').mockResolvedValue({
      size: 123,
      id: 1337
    })

    jest
-      .spyOn(artifact, 'deleteArtifact')
-      .mockImplementation(async artifactName => {
-        const artifact = fixtures.artifacts.find(a => a.name === artifactName)
-        if (!artifact) throw new Error(`Artifact ${artifactName} not found`)
-        return {id: artifact.id}
+      .spyOn(artifact.default, 'deleteArtifact')
+      .mockImplementation(async (artifactName: string) => {
+        const found = fixtures.artifacts.find(a => a.name === artifactName)
+        if (!found) throw new Error(`Artifact ${artifactName} not found`)
+        return {id: found.id}
      })
  })

-  it('merges artifacts', async () => {
+  test('merges artifacts', async () => {
    await run()

    for (const a of fixtures.artifacts) {
-      expect(artifact.downloadArtifact).toHaveBeenCalledWith(a.id, {
+      expect(artifact.default.downloadArtifact).toHaveBeenCalledWith(a.id, {
        path: fixtures.tmpDirectory
      })
    }

-    expect(artifact.uploadArtifact).toHaveBeenCalledWith(
+    expect(artifact.default.uploadArtifact).toHaveBeenCalledWith(
      fixtures.artifactName,
      fixtures.filesToUpload,
      fixtures.tmpDirectory,
@@ -122,23 +167,23 @@ describe('merge', () => {
    )
  })

-  it('fails if no artifacts found', async () => {
+  test('fails if no artifacts found', async () => {
    mockInputs({[Inputs.Pattern]: 'this-does-not-match'})

-    expect(run()).rejects.toThrow()
+    await expect(run()).rejects.toThrow()

-    expect(artifact.uploadArtifact).not.toBeCalled()
-    expect(artifact.downloadArtifact).not.toBeCalled()
+    expect(artifact.default.uploadArtifact).not.toHaveBeenCalled()
+    expect(artifact.default.downloadArtifact).not.toHaveBeenCalled()
  })

-  it('supports custom compression level', async () => {
+  test('supports custom compression level', async () => {
    mockInputs({
      [Inputs.CompressionLevel]: 2
    })

    await run()

-    expect(artifact.uploadArtifact).toHaveBeenCalledWith(
+    expect(artifact.default.uploadArtifact).toHaveBeenCalledWith(
      fixtures.artifactName,
      fixtures.filesToUpload,
      fixtures.tmpDirectory,
@@ -146,14 +191,14 @@ describe('merge', () => {
    )
  })

-  it('supports custom retention days', async () => {
+  test('supports custom retention days', async () => {
    mockInputs({
      [Inputs.RetentionDays]: 7
    })

    await run()

-    expect(artifact.uploadArtifact).toHaveBeenCalledWith(
+    expect(artifact.default.uploadArtifact).toHaveBeenCalledWith(
      fixtures.artifactName,
      fixtures.filesToUpload,
      fixtures.tmpDirectory,
@@ -161,7 +206,7 @@ describe('merge', () => {
    )
  })

-  it('supports deleting artifacts after merge', async () => {
+  test('supports deleting artifacts after merge', async () => {
    mockInputs({
      [Inputs.DeleteMerged]: true
    })
@@ -169,7 +214,7 @@ describe('merge', () => {
    await run()

    for (const a of fixtures.artifacts) {
-      expect(artifact.deleteArtifact).toHaveBeenCalledWith(a.name)
+      expect(artifact.default.deleteArtifact).toHaveBeenCalledWith(a.name)
    }
  })
 })
@@ -1,8 +1,37 @@
-import * as core from '@actions/core'
+import {jest, describe, test, expect, beforeAll} from '@jest/globals'
 import * as path from 'path'
 import * as io from '@actions/io'
 import {promises as fs} from 'fs'
-import {findFilesToUpload} from '../src/shared/search'
+import {fileURLToPath} from 'url'
+
+// Mock @actions/core to suppress output during tests
+jest.unstable_mockModule('@actions/core', () => ({
+  getInput: jest.fn(),
+  getBooleanInput: jest.fn(),
+  setOutput: jest.fn(),
+  setFailed: jest.fn(),
+  setSecret: jest.fn(),
+  info: jest.fn(),
+  warning: jest.fn(),
+  debug: jest.fn(),
+  error: jest.fn(),
+  notice: jest.fn(),
+  startGroup: jest.fn(),
+  endGroup: jest.fn(),
+  isDebug: jest.fn(() => false),
+  getState: jest.fn(),
+  saveState: jest.fn(),
+  exportVariable: jest.fn(),
+  addPath: jest.fn(),
+  group: jest.fn((name: string, fn: () => Promise<unknown>) => fn()),
+  toPlatformPath: jest.fn((p: string) => p),
+  toWin32Path: jest.fn((p: string) => p),
+  toPosixPath: jest.fn((p: string) => p)
+}))
+
+const {findFilesToUpload} = await import('../src/shared/search.js')
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))

 const root = path.join(__dirname, '_temp', 'search')
 const searchItem1Path = path.join(
@@ -61,13 +90,24 @@ const lonelyFilePath = path.join(
  'lonely-file.txt'
 )

+const hiddenFile = path.join(root, '.hidden-file.txt')
+const fileInHiddenFolderPath = path.join(
+  root,
+  '.hidden-folder',
+  'folder-in-hidden-folder',
+  'file.txt'
+)
+const fileInHiddenFolderInFolderA = path.join(
+  root,
+  'folder-a',
+  '.hidden-folder-in-folder-a',
+  'file.txt'
+)
+
 describe('Search', () => {
  beforeAll(async () => {
-    // mock all output so that there is less noise when running tests
+    // mock console.log to reduce noise
    jest.spyOn(console, 'log').mockImplementation(() => {})
-    jest.spyOn(core, 'debug').mockImplementation(() => {})
-    jest.spyOn(core, 'info').mockImplementation(() => {})
-    jest.spyOn(core, 'warning').mockImplementation(() => {})

    // clear temp directory
    await io.rmRF(root)
@@ -93,6 +133,14 @@ describe('Search', () => {
      recursive: true
    })

+    await fs.mkdir(
+      path.join(root, '.hidden-folder', 'folder-in-hidden-folder'),
+      {recursive: true}
+    )
+    await fs.mkdir(path.join(root, 'folder-a', '.hidden-folder-in-folder-a'), {
+      recursive: true
+    })
+
    await fs.writeFile(searchItem1Path, 'search item1 file')
    await fs.writeFile(searchItem2Path, 'search item2 file')
    await fs.writeFile(searchItem3Path, 'search item3 file')
@@ -110,37 +158,13 @@ describe('Search', () => {
    await fs.writeFile(amazingFileInFolderHPath, 'amazing file')

    await fs.writeFile(lonelyFilePath, 'all by itself')
-    /*
-      Directory structure of files that get created:
-      root/
-          folder-a/
-              folder-b/
-                  folder-c/
-                      search-item1.txt
-                      extraSearch-item1.txt
-                      extra-file-in-folder-c.txt
-                  folder-e/
-          folder-d/
-              search-item2.txt
-              search-item3.txt
-              search-item4.txt
-              extraSearch-item2.txt
-          folder-f/
-              extraSearch-item3.txt
-          folder-g/
-          folder-h/
-              amazing-item.txt
-              folder-i/
-                  extraSearch-item4.txt
-                  extraSearch-item5.txt
-              folder-j/
-                  folder-k/
-                      lonely-file.txt
-          search-item5.txt
-    */
+
+    await fs.writeFile(hiddenFile, 'hidden file')
+    await fs.writeFile(fileInHiddenFolderPath, 'file in hidden directory')
+    await fs.writeFile(fileInHiddenFolderInFolderA, 'file in hidden directory')
  })

-  it('Single file search - Absolute Path', async () => {
+  test('Single file search - Absolute Path', async () => {
    const searchResult = await findFilesToUpload(extraFileInFolderCPath)
    expect(searchResult.filesToUpload.length).toEqual(1)
    expect(searchResult.filesToUpload[0]).toEqual(extraFileInFolderCPath)
@@ -149,7 +173,7 @@ describe('Search', () => {
    )
  })

-  it('Single file search - Relative Path', async () => {
+  test('Single file search - Relative Path', async () => {
    const relativePath = path.join(
      '__tests__',
      '_temp',
@@ -168,7 +192,7 @@ describe('Search', () => {
    )
  })

-  it('Single file using wildcard', async () => {
+  test('Single file using wildcard', async () => {
    const expectedRoot = path.join(root, 'folder-h')
    const searchPath = path.join(root, 'folder-h', '**/*lonely*')
    const searchResult = await findFilesToUpload(searchPath)
@@ -177,7 +201,7 @@ describe('Search', () => {
    expect(searchResult.rootDirectory).toEqual(expectedRoot)
  })

-  it('Single file using directory', async () => {
+  test('Single file using directory', async () => {
    const searchPath = path.join(root, 'folder-h', 'folder-j')
    const searchResult = await findFilesToUpload(searchPath)
    expect(searchResult.filesToUpload.length).toEqual(1)
@@ -185,7 +209,7 @@ describe('Search', () => {
    expect(searchResult.rootDirectory).toEqual(searchPath)
  })

-  it('Directory search - Absolute Path', async () => {
+  test('Directory search - Absolute Path', async () => {
    const searchPath = path.join(root, 'folder-h')
    const searchResult = await findFilesToUpload(searchPath)
    expect(searchResult.filesToUpload.length).toEqual(4)
@@ -204,7 +228,7 @@ describe('Search', () => {
    expect(searchResult.rootDirectory).toEqual(searchPath)
  })

-  it('Directory search - Relative Path', async () => {
+  test('Directory search - Relative Path', async () => {
    const searchPath = path.join('__tests__', '_temp', 'search', 'folder-h')
    const expectedRootDirectory = path.join(root, 'folder-h')
    const searchResult = await findFilesToUpload(searchPath)
@@ -224,7 +248,7 @@ describe('Search', () => {
    expect(searchResult.rootDirectory).toEqual(expectedRootDirectory)
  })

-  it('Wildcard search - Absolute Path', async () => {
+  test('Wildcard search - Absolute Path', async () => {
    const searchPath = path.join(root, '**/*[Ss]earch*')
    const searchResult = await findFilesToUpload(searchPath)
    expect(searchResult.filesToUpload.length).toEqual(10)
@@ -253,7 +277,7 @@ describe('Search', () => {
    expect(searchResult.rootDirectory).toEqual(root)
  })

-  it('Wildcard search - Relative Path', async () => {
+  test('Wildcard search - Relative Path', async () => {
    const searchPath = path.join(
      '__tests__',
      '_temp',
@@ -287,11 +311,11 @@ describe('Search', () => {
    expect(searchResult.rootDirectory).toEqual(root)
  })

-  it('Multi path search - root directory', async () => {
+  test('Multi path search - root directory', async () => {
    const searchPath1 = path.join(root, 'folder-a')
    const searchPath2 = path.join(root, 'folder-d')

-    const searchPaths = searchPath1 + '\n' + searchPath2
+    const searchPaths = `${searchPath1}\n${searchPath2}`
    const searchResult = await findFilesToUpload(searchPaths)

    expect(searchResult.rootDirectory).toEqual(root)
@@ -311,13 +335,13 @@ describe('Search', () => {
    )
  })

-  it('Multi path search - with exclude character', async () => {
+  test('Multi path search - with exclude character', async () => {
    const searchPath1 = path.join(root, 'folder-a')
    const searchPath2 = path.join(root, 'folder-d')
    const searchPath3 = path.join(root, 'folder-a', 'folder-b', '**/extra*.txt')

    // negating the third search path
-    const searchPaths = searchPath1 + '\n' + searchPath2 + '\n!' + searchPath3
+    const searchPaths = `${searchPath1}\n${searchPath2}\n!${searchPath3}`
    const searchResult = await findFilesToUpload(searchPaths)

    expect(searchResult.rootDirectory).toEqual(root)
@@ -331,7 +355,7 @@ describe('Search', () => {
    )
  })

-  it('Multi path search - non root directory', async () => {
+  test('Multi path search - non root directory', async () => {
    const searchPath1 = path.join(root, 'folder-h', 'folder-i')
    const searchPath2 = path.join(root, 'folder-h', 'folder-j', 'folder-k')
    const searchPath3 = amazingFileInFolderHPath
@@ -352,4 +376,24 @@ describe('Search', () => {
    )
    expect(searchResult.filesToUpload.includes(lonelyFilePath)).toEqual(true)
  })
+
+  test('Hidden files ignored by default', async () => {
+    const searchPath = path.join(root, '**/*')
+    const searchResult = await findFilesToUpload(searchPath)
+
+    expect(searchResult.filesToUpload).not.toContain(hiddenFile)
+    expect(searchResult.filesToUpload).not.toContain(fileInHiddenFolderPath)
+    expect(searchResult.filesToUpload).not.toContain(
+      fileInHiddenFolderInFolderA
+    )
+  })
+
+  test('Hidden files included', async () => {
+    const searchPath = path.join(root, '**/*')
+    const searchResult = await findFilesToUpload(searchPath, true)
+
+    expect(searchResult.filesToUpload).toContain(hiddenFile)
+    expect(searchResult.filesToUpload).toContain(fileInHiddenFolderPath)
+    expect(searchResult.filesToUpload).toContain(fileInHiddenFolderInFolderA)
+  })
 })
@@ -1,9 +1,57 @@
-import * as core from '@actions/core'
-import * as github from '@actions/github'
-import artifact, {ArtifactNotFoundError} from '@actions/artifact'
-import {run} from '../src/upload/upload-artifact'
-import {Inputs} from '../src/upload/constants'
-import * as search from '../src/shared/search'
+import {jest, describe, test, expect, beforeEach} from '@jest/globals'
+
+// Mock @actions/github before importing modules that use it
+jest.unstable_mockModule('@actions/github', () => ({
+  context: {
+    repo: {
+      owner: 'actions',
+      repo: 'toolkit'
+    },
+    runId: 123,
+    serverUrl: 'https://github.com'
+  },
+  getOctokit: jest.fn()
+}))
+
+// Mock @actions/core
+jest.unstable_mockModule('@actions/core', () => ({
+  getInput: jest.fn(),
+  getBooleanInput: jest.fn(),
+  setOutput: jest.fn(),
+  setFailed: jest.fn(),
+  setSecret: jest.fn(),
+  info: jest.fn(),
+  warning: jest.fn(),
+  debug: jest.fn(),
+  error: jest.fn(),
+  notice: jest.fn(),
+  startGroup: jest.fn(),
+  endGroup: jest.fn(),
+  isDebug: jest.fn(() => false),
+  getState: jest.fn(),
+  saveState: jest.fn(),
+  exportVariable: jest.fn(),
+  addPath: jest.fn(),
+  group: jest.fn((name: string, fn: () => Promise<unknown>) => fn()),
+  toPlatformPath: jest.fn((p: string) => p),
+  toWin32Path: jest.fn((p: string) => p),
+  toPosixPath: jest.fn((p: string) => p)
+}))
+
+// Mock shared search module
+const mockFindFilesToUpload =
+  jest.fn<() => Promise<{filesToUpload: string[]; rootDirectory: string}>>()
+jest.unstable_mockModule('../src/shared/search.js', () => ({
+  findFilesToUpload: mockFindFilesToUpload
+}))
+
+// Dynamic imports after mocking
+const core = await import('@actions/core')
+const github = await import('@actions/github')
+const artifact = await import('@actions/artifact')
+const {run} = await import('../src/upload/upload-artifact.js')
+const {Inputs} = await import('../src/upload/constants.js')
+const {ArtifactNotFoundError} = artifact

 const fixtures = {
  artifactName: 'artifact-name',
@@ -14,35 +62,28 @@ const fixtures = {
  ]
 }

-jest.mock('@actions/github', () => ({
-  context: {
-    repo: {
-      owner: 'actions',
-      repo: 'toolkit'
-    },
-    runId: 123,
-    serverUrl: 'https://github.com'
-  }
-}))
-
-jest.mock('@actions/core')
-
-/* eslint-disable no-unused-vars */
-const mockInputs = (overrides?: Partial<{[K in Inputs]?: any}>) => {
-  const inputs = {
+const mockInputs = (
+  overrides?: Partial<{[K in (typeof Inputs)[keyof typeof Inputs]]?: any}>
+) => {
+  const inputs: Record<string, any> = {
    [Inputs.Name]: 'artifact-name',
    [Inputs.Path]: '/some/artifact/path',
    [Inputs.IfNoFilesFound]: 'warn',
    [Inputs.RetentionDays]: 0,
    [Inputs.CompressionLevel]: 6,
    [Inputs.Overwrite]: false,
+    [Inputs.Archive]: true,
    ...overrides
  }

-  ;(core.getInput as jest.Mock).mockImplementation((name: string) => {
-    return inputs[name]
-  })
-  ;(core.getBooleanInput as jest.Mock).mockImplementation((name: string) => {
+  ;(core.getInput as jest.Mock<typeof core.getInput>).mockImplementation(
+    (name: string) => {
+      return inputs[name]
+    }
+  )
+  ;(
+    core.getBooleanInput as jest.Mock<typeof core.getBooleanInput>
+  ).mockImplementation((name: string) => {
    return inputs[name]
  })

@@ -52,27 +93,29 @@ const mockInputs = (overrides?: Partial<{[K in Inputs]?: any}>) => {
 describe('upload', () => {
  beforeEach(async () => {
    mockInputs()
+    jest.clearAllMocks()

-    jest.spyOn(search, 'findFilesToUpload').mockResolvedValue({
+    mockFindFilesToUpload.mockResolvedValue({
      filesToUpload: fixtures.filesToUpload,
      rootDirectory: fixtures.rootDirectory
    })

-    jest.spyOn(artifact, 'uploadArtifact').mockResolvedValue({
+    jest.spyOn(artifact.default, 'uploadArtifact').mockResolvedValue({
      size: 123,
-      id: 1337
+      id: 1337,
+      digest: 'facefeed'
    })
  })

-  it('uploads a single file', async () => {
-    jest.spyOn(search, 'findFilesToUpload').mockResolvedValue({
+  test('uploads a single file', async () => {
+    mockFindFilesToUpload.mockResolvedValue({
      filesToUpload: [fixtures.filesToUpload[0]],
      rootDirectory: fixtures.rootDirectory
    })

    await run()

-    expect(artifact.uploadArtifact).toHaveBeenCalledWith(
+    expect(artifact.default.uploadArtifact).toHaveBeenCalledWith(
      fixtures.artifactName,
      [fixtures.filesToUpload[0]],
      fixtures.rootDirectory,
@@ -80,10 +123,10 @@ describe('upload', () => {
    )
  })

-  it('uploads multiple files', async () => {
+  test('uploads multiple files', async () => {
    await run()

-    expect(artifact.uploadArtifact).toHaveBeenCalledWith(
+    expect(artifact.default.uploadArtifact).toHaveBeenCalledWith(
      fixtures.artifactName,
      fixtures.filesToUpload,
      fixtures.rootDirectory,
@@ -91,26 +134,25 @@ describe('upload', () => {
    )
  })

-  it('sets outputs', async () => {
+  test('sets outputs', async () => {
    await run()

    expect(core.setOutput).toHaveBeenCalledWith('artifact-id', 1337)
+    expect(core.setOutput).toHaveBeenCalledWith('artifact-digest', 'facefeed')
    expect(core.setOutput).toHaveBeenCalledWith(
      'artifact-url',
-      `${github.context.serverUrl}/${github.context.repo.owner}/${
-        github.context.repo.repo
-      }/actions/runs/${github.context.runId}/artifacts/${1337}`
+      `${github.context.serverUrl}/${github.context.repo.owner}/${github.context.repo.repo}/actions/runs/${github.context.runId}/artifacts/${1337}`
    )
  })

-  it('supports custom compression level', async () => {
+  test('supports custom compression level', async () => {
    mockInputs({
      [Inputs.CompressionLevel]: 2
    })

    await run()

-    expect(artifact.uploadArtifact).toHaveBeenCalledWith(
+    expect(artifact.default.uploadArtifact).toHaveBeenCalledWith(
      fixtures.artifactName,
      fixtures.filesToUpload,
      fixtures.rootDirectory,
@@ -118,14 +160,14 @@ describe('upload', () => {
    )
  })

-  it('supports custom retention days', async () => {
+  test('supports custom retention days', async () => {
    mockInputs({
      [Inputs.RetentionDays]: 7
    })

    await run()

-    expect(artifact.uploadArtifact).toHaveBeenCalledWith(
+    expect(artifact.default.uploadArtifact).toHaveBeenCalledWith(
      fixtures.artifactName,
      fixtures.filesToUpload,
      fixtures.rootDirectory,
@@ -133,12 +175,12 @@ describe('upload', () => {
    )
  })

-  it('supports warn if-no-files-found', async () => {
+  test('supports warn if-no-files-found', async () => {
    mockInputs({
      [Inputs.IfNoFilesFound]: 'warn'
    })

-    jest.spyOn(search, 'findFilesToUpload').mockResolvedValue({
+    mockFindFilesToUpload.mockResolvedValue({
      filesToUpload: [],
      rootDirectory: fixtures.rootDirectory
    })
@@ -150,12 +192,12 @@ describe('upload', () => {
    )
  })

-  it('supports error if-no-files-found', async () => {
+  test('supports error if-no-files-found', async () => {
    mockInputs({
      [Inputs.IfNoFilesFound]: 'error'
    })

-    jest.spyOn(search, 'findFilesToUpload').mockResolvedValue({
+    mockFindFilesToUpload.mockResolvedValue({
      filesToUpload: [],
      rootDirectory: fixtures.rootDirectory
    })
@@ -167,12 +209,12 @@ describe('upload', () => {
    )
  })

-  it('supports ignore if-no-files-found', async () => {
+  test('supports ignore if-no-files-found', async () => {
    mockInputs({
      [Inputs.IfNoFilesFound]: 'ignore'
    })

-    jest.spyOn(search, 'findFilesToUpload').mockResolvedValue({
+    mockFindFilesToUpload.mockResolvedValue({
      filesToUpload: [],
      rootDirectory: fixtures.rootDirectory
    })
@@ -184,48 +226,105 @@ describe('upload', () => {
    )
  })

-  it('supports overwrite', async () => {
+  test('supports overwrite', async () => {
    mockInputs({
      [Inputs.Overwrite]: true
    })

-    jest.spyOn(artifact, 'deleteArtifact').mockResolvedValue({
+    jest.spyOn(artifact.default, 'deleteArtifact').mockResolvedValue({
      id: 1337
    })

    await run()

-    expect(artifact.uploadArtifact).toHaveBeenCalledWith(
+    expect(artifact.default.uploadArtifact).toHaveBeenCalledWith(
      fixtures.artifactName,
      fixtures.filesToUpload,
      fixtures.rootDirectory,
      {compressionLevel: 6}
    )

-    expect(artifact.deleteArtifact).toHaveBeenCalledWith(fixtures.artifactName)
+    expect(artifact.default.deleteArtifact).toHaveBeenCalledWith(
+      fixtures.artifactName
+    )
  })

-  it('supports overwrite and continues if not found', async () => {
+  test('supports overwrite and continues if not found', async () => {
    mockInputs({
      [Inputs.Overwrite]: true
    })

    jest
-      .spyOn(artifact, 'deleteArtifact')
+      .spyOn(artifact.default, 'deleteArtifact')
      .mockRejectedValue(new ArtifactNotFoundError('not found'))

    await run()

-    expect(artifact.uploadArtifact).toHaveBeenCalledWith(
+    expect(artifact.default.uploadArtifact).toHaveBeenCalledWith(
      fixtures.artifactName,
      fixtures.filesToUpload,
      fixtures.rootDirectory,
      {compressionLevel: 6}
    )

-    expect(artifact.deleteArtifact).toHaveBeenCalledWith(fixtures.artifactName)
+    expect(artifact.default.deleteArtifact).toHaveBeenCalledWith(
+      fixtures.artifactName
+    )
    expect(core.debug).toHaveBeenCalledWith(
      `Skipping deletion of '${fixtures.artifactName}', it does not exist`
    )
  })
+
+  test('passes skipArchive when archive is false', async () => {
+    mockInputs({
+      [Inputs.Archive]: false
+    })
+
+    mockFindFilesToUpload.mockResolvedValue({
+      filesToUpload: [fixtures.filesToUpload[0]],
+      rootDirectory: fixtures.rootDirectory
+    })
+
+    await run()
+
+    expect(artifact.default.uploadArtifact).toHaveBeenCalledWith(
+      fixtures.artifactName,
+      [fixtures.filesToUpload[0]],
+      fixtures.rootDirectory,
+      {compressionLevel: 6, skipArchive: true}
+    )
+  })
+
+  test('does not pass skipArchive when archive is true', async () => {
+    mockInputs({
+      [Inputs.Archive]: true
+    })
+
+    mockFindFilesToUpload.mockResolvedValue({
+      filesToUpload: [fixtures.filesToUpload[0]],
+      rootDirectory: fixtures.rootDirectory
+    })
+
+    await run()
+
+    expect(artifact.default.uploadArtifact).toHaveBeenCalledWith(
+      fixtures.artifactName,
+      [fixtures.filesToUpload[0]],
+      fixtures.rootDirectory,
+      {compressionLevel: 6}
+    )
+  })
+
+  test('fails when archive is false and multiple files are provided', async () => {
+    mockInputs({
+      [Inputs.Archive]: false
+    })
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      `When 'archive' is set to false, only a single file can be uploaded. Found ${fixtures.filesToUpload.length} files to upload.`
+    )
+    expect(artifact.default.uploadArtifact).not.toHaveBeenCalled()
+  })
 })
@@ -3,10 +3,10 @@ description: 'Upload a build artifact that can be used by subsequent workflow st
 author: 'GitHub'
 inputs:
  name:
-    description: 'Artifact name'
+    description: 'Artifact name. If the `archive` input is `false`, the name of the file uploaded will be the artifact name.'
    default: 'artifact'
  path:
-    description: 'A file, directory or wildcard pattern that describes what to upload'
+    description: 'A file, directory or wildcard pattern that describes what to upload.'
    required: true
  if-no-files-found:
    description: >
@@ -40,6 +40,17 @@ inputs:
      If false, the action will fail if an artifact for the given name already exists.
      Does not fail if the artifact does not exist.
    default: 'false'
+  include-hidden-files:
+    description: >
+      If true, hidden files will be included in the artifact.
+      If false, hidden files will be excluded from the artifact.
+    default: 'false'
+  archive:
+    description: >
+      If true, the artifact will be archived (zipped) before uploading.
+      If false, the artifact will be uploaded as-is without archiving.
+      When `archive` is `false`, only a single file can be uploaded. The name of the file will be used as the artifact name (ignoring the `name` parameter).
+    default: 'true'

 outputs:
  artifact-id:
@@ -56,6 +67,9 @@ outputs:

      This URL will be valid for as long as the artifact exists and the workflow run and repository exists. Once an artifact has expired this URL will no longer work.
      Common uses cases for such a download URL can be adding download links to artifacts in descriptions or comments on pull requests or issues.
+  artifact-digest:
+    description: >
+      SHA-256 digest for the artifact that was just uploaded. Empty if the artifact upload failed.
 runs:
-  using: 'node20'
+  using: 'node24'
  main: 'dist/upload/index.js'
@@ -0,0 +1,3 @@
+{
+  "type": "module"
+}
@@ -0,0 +1,3 @@
+{
+  "type": "module"
+}
@@ -4,6 +4,7 @@
  - [Multiple uploads to the same named Artifact](#multiple-uploads-to-the-same-named-artifact)
  - [Overwriting an Artifact](#overwriting-an-artifact)
  - [Merging multiple artifacts](#merging-multiple-artifacts)
+  - [Hidden files](#hidden-files)

 Several behavioral differences exist between Artifact actions `v3` and below vs `v4`. This document outlines common scenarios in `v3`, and how they would be handled in `v4`.

@@ -189,21 +190,59 @@ jobs:
      - name: Create a File
        run: echo "hello from ${{ matrix.runs-on }}" > file-${{ matrix.runs-on }}.txt
      - name: Upload Artifact
-        uses: actions/upload-artifact@v3
-+        uses: actions/upload-artifact@v4
+-       uses: actions/upload-artifact@v3
+       uses: actions/upload-artifact@v4
        with:
 -         name: all-my-files
 +         name: my-artifact-${{ matrix.runs-on }}
          path: file-${{ matrix.runs-on }}.txt
-+ merge:
-+   runs-on: ubuntu-latest
-+   needs: upload
-+   steps:
-+     - name: Merge Artifacts
-+       uses: actions/upload-artifact/merge@v4
-+       with:
-+         name: all-my-files
-+         pattern: my-artifact-*
+  merge:
+    runs-on: ubuntu-latest
+    needs: upload
+    steps:
+      - name: Merge Artifacts
+        uses: actions/upload-artifact/merge@v4
+        with:
+          name: all-my-files
+          pattern: my-artifact-*
 ```

 Note that this will download all artifacts to a temporary directory and reupload them as a single artifact. For more information on inputs and other use cases for `actions/upload-artifact/merge@v4`, see [the action documentation](../merge/README.md).
+
+## Hidden Files
+
+By default, hidden files are ignored by this action to avoid unintentionally uploading sensitive
+information.
+
+In versions of this action before v4.4.0, these hidden files were included by default.
+
+If you need to upload hidden files, you can use the `include-hidden-files` input.
+
+```yaml
+jobs:
+  upload:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Create a Hidden File
+        run: echo "hello from a hidden file" > .hidden-file.txt
+      - name: Upload Artifact
+        uses: actions/upload-artifact@v3
+        with:
+          path: .hidden-file.txt
+```
+
+
+```diff
+jobs:
+  upload:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Create a Hidden File
+        run: echo "hello from a hidden file" > .hidden-file.txt
+      - name: Upload Artifact
+-       uses: actions/upload-artifact@v3
+       uses: actions/upload-artifact@v4
+        with:
+          path: .hidden-file.txt
+         include-hidden-files: true
+```
@@ -0,0 +1,52 @@
+import github from 'eslint-plugin-github'
+import jest from 'eslint-plugin-jest'
+import prettier from 'eslint-plugin-prettier/recommended'
+
+const githubConfigs = github.getFlatConfigs()
+
+export default [
+  {
+    ignores: ['**/node_modules/**', '**/lib/**', '**/dist/**']
+  },
+  githubConfigs.recommended,
+  ...githubConfigs.typescript,
+  prettier,
+  {
+    files: ['**/*.ts'],
+    languageOptions: {
+      parserOptions: {
+        project: './tsconfig.eslint.json'
+      }
+    },
+    rules: {
+      'prettier/prettier': ['error', {endOfLine: 'auto'}],
+      'eslint-comments/no-use': 'off',
+      'github/no-then': 'off',
+      'github/filenames-match-regex': 'off',
+      'github/array-foreach': 'off',
+      'import/no-namespace': 'off',
+      'import/named': 'off',
+      'import/no-unresolved': 'off',
+      'i18n-text/no-en': 'off',
+      'filenames/match-regex': 'off',
+      'no-shadow': 'off',
+      'no-unused-vars': 'off',
+      'no-undef': 'off',
+      camelcase: 'off',
+      '@typescript-eslint/no-unused-vars': 'off',
+      '@typescript-eslint/no-explicit-any': 'off',
+      '@typescript-eslint/no-shadow': 'off',
+      '@typescript-eslint/array-type': 'off',
+      '@typescript-eslint/no-require-imports': 'off'
+    }
+  },
+  {
+    files: ['**/__tests__/**/*.ts'],
+    ...jest.configs['flat/recommended'],
+    rules: {
+      ...jest.configs['flat/recommended'].rules,
+      'jest/expect-expect': 'off',
+      'jest/no-conditional-expect': 'off'
+    }
+  }
+]
@@ -1,12 +0,0 @@
-module.exports = {
-    clearMocks: true,
-    moduleFileExtensions: ['js', 'ts'],
-    roots: ['<rootDir>'],
-    testEnvironment: 'node',
-    testMatch: ['**/*.test.ts'],
-    testRunner: 'jest-circus/runner',
-    transform: {
-      '^.+\\.ts$': 'ts-jest'
-    },
-    verbose: true
-  }
@@ -0,0 +1,24 @@
+export default {
+  clearMocks: true,
+  moduleFileExtensions: ['js', 'ts'],
+  roots: ['<rootDir>'],
+  testEnvironment: 'node',
+  testMatch: ['**/*.test.ts'],
+  transform: {
+    '^.+\\.ts$': [
+      'ts-jest',
+      {
+        useESM: true,
+        diagnostics: {
+          ignoreCodes: [151002]
+        }
+      }
+    ]
+  },
+  extensionsToTreatAsEsm: ['.ts'],
+  transformIgnorePatterns: ['node_modules/(?!(@actions)/)'],
+  moduleNameMapper: {
+    '^(\\.{1,2}/.*)\\.js$': '$1'
+  },
+  verbose: true
+}
@@ -65,6 +65,7 @@ For most cases, this may not be the most efficient solution. See [the migration
 | - | - | - |
 | `artifact-id` | GitHub ID of an Artifact, can be used by the REST API | `1234` |
 | `artifact-url` | URL to download an Artifact. Can be used in many scenarios such as linking to artifacts in issues or pull requests. Users must be logged-in in order for this URL to work. This URL is valid as long as the artifact has not expired or the artifact, run or repository have not been deleted | `https://github.com/example-org/example-repo/actions/runs/1/artifacts/1234` |
+| `artifact-digest` | SHA-256 digest of an Artifact | 0fde654d4c6e659b45783a725dc92f1bfb0baa6c2de64b34e814dc206ff4aaaf |

 ## Examples

@@ -36,6 +36,11 @@ inputs:
      If true, the artifacts that were merged will be deleted.
      If false, the artifacts will still exist.
    default: 'false'
+  include-hidden-files:
+    description: >
+      If true, hidden files will be included in the merged artifact.
+      If false, hidden files will be excluded from the merged artifact.
+    default: 'false'

 outputs:
  artifact-id:
@@ -52,6 +57,9 @@ outputs:

      This URL will be valid for as long as the artifact exists and the workflow run and repository exists. Once an artifact has expired this URL will no longer work.
      Common uses cases for such a download URL can be adding download links to artifacts in descriptions or comments on pull requests or issues.
+  artifact-digest:
+    description: >
+      SHA-256 digest for the artifact that was just uploaded. Empty if the artifact upload failed.
 runs:
-  using: 'node20'
+  using: 'node24'
  main: '../dist/merge/index.js'
@@ -1,7 +1,8 @@
 {
  "name": "upload-artifact",
-  "version": "4.3.6",
+  "version": "7.0.1",
  "description": "Upload an Actions Artifact in a workflow run",
+  "type": "module",
  "main": "dist/upload/index.js",
  "scripts": {
    "build": "tsc",
@@ -10,7 +11,7 @@
    "format": "prettier --write **/*.ts",
    "format-check": "prettier --check **/*.ts",
    "lint": "eslint **/*.ts",
-    "test": "jest --testTimeout 10000"
+    "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js --testTimeout 10000"
  },
  "repository": {
    "type": "git",
@@ -28,28 +29,35 @@
    "url": "https://github.com/actions/upload-artifact/issues"
  },
  "homepage": "https://github.com/actions/upload-artifact#readme",
+  "engines": {
+    "node": ">=24"
+  },
  "dependencies": {
-    "@actions/artifact": "2.1.8",
-    "@actions/core": "^1.10.1",
-    "@actions/github": "^6.0.0",
-    "@actions/glob": "^0.3.0",
-    "@actions/io": "^1.1.2",
-    "minimatch": "^9.0.3"
+    "@actions/artifact": "^6.2.0",
+    "@actions/core": "^3.0.0",
+    "@actions/github": "^9.0.0",
+    "@actions/glob": "^0.6.1",
+    "@actions/io": "^3.0.2",
+    "minimatch": "^10.1.1"
  },
  "devDependencies": {
-    "@types/jest": "^29.2.5",
-    "@types/node": "^18.11.18",
-    "@typescript-eslint/parser": "^5.48.0",
-    "@vercel/ncc": "^0.36.0",
-    "concurrently": "^7.6.0",
-    "eslint": "^8.31.0",
-    "eslint-plugin-github": "^4.6.0",
-    "eslint-plugin-jest": "^27.2.0",
-    "glob": "^8.0.3",
-    "jest": "^29.3.1",
-    "jest-circus": "^29.3.1",
-    "prettier": "^2.8.1",
-    "ts-jest": "^29.0.3",
-    "typescript": "^4.9.4"
+    "@types/jest": "^30.0.0",
+    "@types/node": "^25.1.0",
+    "@typescript-eslint/eslint-plugin": "^8.54.0",
+    "@typescript-eslint/parser": "^8.54.0",
+    "@vercel/ncc": "^0.38.4",
+    "concurrently": "^9.2.1",
+    "eslint": "^9.39.2",
+    "eslint-plugin-github": "^6.0.0",
+    "eslint-plugin-jest": "^29.12.1",
+    "eslint-plugin-prettier": "^5.5.5",
+    "jest": "^30.2.0",
+    "prettier": "^3.8.1",
+    "ts-jest": "^29.2.6",
+    "ts-node": "^10.9.2",
+    "typescript": "^5.3.3"
+  },
+  "overrides": {
+    "uri-js": "npm:uri-js-replace@^1.0.1"
  }
 }
@@ -5,5 +5,6 @@ export enum Inputs {
  SeparateDirectories = 'separate-directories',
  RetentionDays = 'retention-days',
  CompressionLevel = 'compression-level',
-  DeleteMerged = 'delete-merged'
+  DeleteMerged = 'delete-merged',
+  IncludeHiddenFiles = 'include-hidden-files'
 }
@@ -1,5 +1,5 @@
 import * as core from '@actions/core'
-import {run} from './merge-artifacts'
+import {run} from './merge-artifacts.js'

 run().catch(error => {
  core.setFailed((error as Error).message)
@@ -1,6 +1,6 @@
 import * as core from '@actions/core'
-import {Inputs} from './constants'
-import {MergeInputs} from './merge-inputs'
+import {Inputs} from './constants.js'
+import {MergeInputs} from './merge-inputs.js'

 /**
 * Helper to get all the inputs for the action
@@ -10,6 +10,7 @@ export function getInputs(): MergeInputs {
  const pattern = core.getInput(Inputs.Pattern, {required: true})
  const separateDirectories = core.getBooleanInput(Inputs.SeparateDirectories)
  const deleteMerged = core.getBooleanInput(Inputs.DeleteMerged)
+  const includeHiddenFiles = core.getBooleanInput(Inputs.IncludeHiddenFiles)

  const inputs = {
    name,
@@ -17,7 +18,8 @@ export function getInputs(): MergeInputs {
    separateDirectories,
    deleteMerged,
    retentionDays: 0,
-    compressionLevel: 6
+    compressionLevel: 6,
+    includeHiddenFiles
  } as MergeInputs

  const retentionDaysStr = core.getInput(Inputs.RetentionDays)
@@ -3,9 +3,9 @@ import {mkdtemp, rm} from 'fs/promises'
 import * as core from '@actions/core'
 import {Minimatch} from 'minimatch'
 import artifactClient, {UploadArtifactOptions} from '@actions/artifact'
-import {getInputs} from './input-helper'
-import {uploadArtifact} from '../shared/upload-artifact'
-import {findFilesToUpload} from '../shared/search'
+import {getInputs} from './input-helper.js'
+import {uploadArtifact} from '../shared/upload-artifact.js'
+import {findFilesToUpload} from '../shared/search.js'

 const PARALLEL_DOWNLOADS = 5

@@ -62,7 +62,10 @@ export async function run(): Promise<void> {
    options.compressionLevel = inputs.compressionLevel
  }

-  const searchResult = await findFilesToUpload(tmpDir)
+  const searchResult = await findFilesToUpload(
+    tmpDir,
+    inputs.includeHiddenFiles
+  )

  await uploadArtifact(
    inputs.name,
@@ -30,4 +30,9 @@ export interface MergeInputs {
   * If false, the artifacts will be merged into the root of the destination.
   */
  separateDirectories: boolean
+
+  /**
+   * Whether or not to include hidden files in the artifact
+   */
+  includeHiddenFiles: boolean
 }
@@ -11,11 +11,12 @@ export interface SearchResult {
  rootDirectory: string
 }

-function getDefaultGlobOptions(): glob.GlobOptions {
+function getDefaultGlobOptions(includeHiddenFiles: boolean): glob.GlobOptions {
  return {
    followSymbolicLinks: true,
    implicitDescendants: true,
-    omitBrokenSymbolicLinks: true
+    omitBrokenSymbolicLinks: true,
+    excludeHiddenFiles: !includeHiddenFiles
  }
 }

@@ -80,12 +81,12 @@ function getMultiPathLCA(searchPaths: string[]): string {

 export async function findFilesToUpload(
  searchPath: string,
-  globOptions?: glob.GlobOptions
+  includeHiddenFiles?: boolean
 ): Promise<SearchResult> {
  const searchResults: string[] = []
  const globber = await glob.create(
    searchPath,
-    globOptions || getDefaultGlobOptions()
+    getDefaultGlobOptions(includeHiddenFiles || false)
  )
  const rawSearchResults: string[] = await globber.glob()

@@ -19,6 +19,7 @@ export async function uploadArtifact(
    `Artifact ${artifactName} has been successfully uploaded! Final size is ${uploadResponse.size} bytes. Artifact ID is ${uploadResponse.id}`
  )
  core.setOutput('artifact-id', uploadResponse.id)
+  core.setOutput('artifact-digest', uploadResponse.digest)

  const repository = github.context.repo
  const artifactURL = `${github.context.serverUrl}/${repository.owner}/${repository.repo}/actions/runs/${github.context.runId}/artifacts/${uploadResponse.id}`
@@ -5,7 +5,9 @@ export enum Inputs {
  IfNoFilesFound = 'if-no-files-found',
  RetentionDays = 'retention-days',
  CompressionLevel = 'compression-level',
-  Overwrite = 'overwrite'
+  Overwrite = 'overwrite',
+  IncludeHiddenFiles = 'include-hidden-files',
+  Archive = 'archive'
 }

 export enum NoFileOptions {
@@ -1,5 +1,5 @@
 import * as core from '@actions/core'
-import {run} from './upload-artifact'
+import {run} from './upload-artifact.js'

 run().catch(error => {
  core.setFailed((error as Error).message)
@@ -1,6 +1,6 @@
 import * as core from '@actions/core'
-import {Inputs, NoFileOptions} from './constants'
-import {UploadInputs} from './upload-inputs'
+import {Inputs, NoFileOptions} from './constants.js'
+import {UploadInputs} from './upload-inputs.js'

 /**
 * Helper to get all the inputs for the action
@@ -9,6 +9,8 @@ export function getInputs(): UploadInputs {
  const name = core.getInput(Inputs.Name)
  const path = core.getInput(Inputs.Path, {required: true})
  const overwrite = core.getBooleanInput(Inputs.Overwrite)
+  const includeHiddenFiles = core.getBooleanInput(Inputs.IncludeHiddenFiles)
+  const archive = core.getBooleanInput(Inputs.Archive)

  const ifNoFilesFound = core.getInput(Inputs.IfNoFilesFound)
  const noFileBehavior: NoFileOptions = NoFileOptions[ifNoFilesFound]
@@ -27,7 +29,9 @@ export function getInputs(): UploadInputs {
    artifactName: name,
    searchPath: path,
    ifNoFilesFound: noFileBehavior,
-    overwrite: overwrite
+    overwrite: overwrite,
+    includeHiddenFiles: includeHiddenFiles,
+    archive: archive
  } as UploadInputs

  const retentionDaysStr = core.getInput(Inputs.RetentionDays)
@@ -3,10 +3,10 @@ import artifact, {
  UploadArtifactOptions,
  ArtifactNotFoundError
 } from '@actions/artifact'
-import {findFilesToUpload} from '../shared/search'
-import {getInputs} from './input-helper'
-import {NoFileOptions} from './constants'
-import {uploadArtifact} from '../shared/upload-artifact'
+import {findFilesToUpload} from '../shared/search.js'
+import {getInputs} from './input-helper.js'
+import {NoFileOptions} from './constants.js'
+import {uploadArtifact} from '../shared/upload-artifact.js'

 async function deleteArtifactIfExists(artifactName: string): Promise<void> {
  try {
@@ -24,7 +24,10 @@ async function deleteArtifactIfExists(artifactName: string): Promise<void> {

 export async function run(): Promise<void> {
  const inputs = getInputs()
-  const searchResult = await findFilesToUpload(inputs.searchPath)
+  const searchResult = await findFilesToUpload(
+    inputs.searchPath,
+    inputs.includeHiddenFiles
+  )
  if (searchResult.filesToUpload.length === 0) {
    // No files were found, different use cases warrant different types of behavior if nothing is found
    switch (inputs.ifNoFilesFound) {
@@ -54,6 +57,14 @@ export async function run(): Promise<void> {
    )
    core.debug(`Root artifact directory is ${searchResult.rootDirectory}`)

+    // Validate that only a single file is uploaded when archive is false
+    if (!inputs.archive && searchResult.filesToUpload.length > 1) {
+      core.setFailed(
+        `When 'archive' is set to false, only a single file can be uploaded. Found ${searchResult.filesToUpload.length} files to upload.`
+      )
+      return
+    }
+
    if (inputs.overwrite) {
      await deleteArtifactIfExists(inputs.artifactName)
    }
@@ -67,6 +78,10 @@ export async function run(): Promise<void> {
      options.compressionLevel = inputs.compressionLevel
    }

+    if (!inputs.archive) {
+      options.skipArchive = true
+    }
+
    await uploadArtifact(
      inputs.artifactName,
      searchResult.filesToUpload,
@@ -1,4 +1,4 @@
-import {NoFileOptions} from './constants'
+import {NoFileOptions} from './constants.js'

 export interface UploadInputs {
  /**
@@ -30,4 +30,15 @@ export interface UploadInputs {
   * Whether or not to replace an existing artifact with the same name
   */
  overwrite: boolean
+
+  /**
+   * Whether or not to include hidden files in the artifact
+   */
+  includeHiddenFiles: boolean
+
+  /**
+   * Whether or not to archive (zip) the artifact before uploading.
+   * When false, only a single file can be uploaded.
+   */
+  archive: boolean
 }
@@ -0,0 +1,8 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "rootDir": "."
+  },
+  "include": ["src/**/*.ts", "__tests__/**/*.ts", "*.ts"],
+  "exclude": ["node_modules", "lib", "dist"]
+}
@@ -1,17 +1,13 @@
 {
-    "compilerOptions": {
-      "target": "es6",
-      "module": "commonjs",
-      "outDir": "./lib",
-      "rootDir": "./src",
-      "strict": true,
-      "noImplicitAny": false,
-      "moduleResolution": "node",
-      "allowSyntheticDefaultImports": true,
-      "esModuleInterop": true,
-      "declaration": false,
-      "sourceMap": true,
-      "lib": ["es6"]
-    },
-    "exclude": ["node_modules", "**/*.test.ts"]
-  }
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "outDir": "./lib",
+    "rootDir": "./src",
+    "strict": true,
+    "noImplicitAny": false,
+    "moduleResolution": "NodeNext",
+    "esModuleInterop": true
+  },
+  "exclude": ["node_modules", "**/*.test.ts", "jest.config.ts", "__tests__"]
+}
Author	SHA1	Message	Date
claude-ceo-assistant	4b83d4b229	chore: remove upstream CI workflows (mirror inertization per internal#233)	2026-05-10 14:28:12 +00:00
claude-ceo-assistant	cb7287dd3a	chore: remove upstream CI workflows (mirror inertization per internal#233)	2026-05-10 14:28:12 +00:00
claude-ceo-assistant	596d5a0c6b	chore: remove upstream CI workflows (mirror inertization per internal#233)	2026-05-10 14:28:11 +00:00
claude-ceo-assistant	f7aa3795e8	chore: remove upstream CI workflows (mirror inertization per internal#233)	2026-05-10 14:28:11 +00:00
claude-ceo-assistant	e892e37d4a	chore: remove upstream CI workflows (mirror inertization per internal#233)	2026-05-10 14:28:10 +00:00
claude-ceo-assistant	084fd67814	chore: remove upstream CI workflows (mirror inertization per internal#233)	2026-05-10 14:28:10 +00:00
claude-ceo-assistant	2f122edadd	chore: remove upstream CI workflows (mirror inertization per internal#233)	2026-05-10 14:28:09 +00:00
Yang Cao	043fb46d1a	Merge pull request #797 from actions/yacaovsnc/update-dependency Licensed / Check licenses (push) Failing after 1s Code scanning - action / CodeQL-Build (push) Failing after 2s Include changes in typespec/ts-http-runtime 0.3.5	2026-04-10 12:08:32 -04:00
Yang Cao	634250c138	Include changes in typespec/ts-http-runtime 0.3.5 Code scanning - action / CodeQL-Build (push) Failing after 1s	2026-04-10 11:58:04 -04:00
Daniel Kennedy	e454baaac2	Readme: bump all the example versions to v7 (#796 )	2026-04-10 10:55:51 -04:00
Daniel Kennedy	74fad66b98	Update the readme with direct upload details (#795 ) * Update the readme with direct upload details * Update the TOC and remove a section * Fix some wording * Remove a tautology	2026-04-10 10:49:57 -04:00
Daniel Kennedy	bbbca2ddaa	Support direct file uploads (#764 ) * Cache licenses * Bump minimatch to 10.1.1 * Try fixing licenced issues * More licensed fixes * Support direct file uploads * Add CI tests for direct uploads * Use download-artifact@main temporarily * CI: clean up artifacts on successful runs * Use script v8 * Fix some issues with the cleanup * Add unit tests * Clarify naming	2026-02-25 16:04:27 -05:00
Daniel Kennedy	589182c5a4	Upgrade the module to ESM and bump dependencies (#762 ) * Upgrade the module to ESM and bump dependencies * CI: bump node versions * Push build files * Fix linting issues * Bump the package version * Cache licenses * Bump minimatch to 10.1.1 * Try fixing licenced issues * More licensed fixes * eslint: don't allow common-js imports	2026-02-25 14:01:53 -05:00
Bassem Dghaidi	47309c993a	Merge pull request #754 from actions/Link-/add-proxy-integration-tests Add proxy integration test	2026-01-30 16:47:01 +01:00
Bassem Dghaidi	02a8460834	Add proxy integration test	2026-01-30 02:29:30 -08:00
Salman Chishti	b7c566a772	Merge pull request #745 from actions/upload-artifact-v6-release prepare release v6.0.0 for Node.js 24 support	2025-12-12 17:58:04 +00:00
Salman Muin Kayser Chishti	e516bc8500	docs: correct description of Node.js 24 support in README Code scanning - action / CodeQL-Build (push) Failing after 2s	2025-12-12 17:41:47 +00:00
Salman Muin Kayser Chishti	ddc45ed9bc	docs: update README to correct action name for Node.js 24 support	2025-12-12 17:38:00 +00:00
Salman Muin Kayser Chishti	615b319bd2	chore: release v6.0.0 for Node.js 24 support - Update to Node.js 24 runtime (runs.using: node24) - Bump version to 6.0.0 - Update README with v6 release notes - Rebuild dist	2025-12-12 17:31:54 +00:00
Salman Chishti	017748b48f	Merge pull request #744 from actions/fix-storage-blob fix: update @actions/artifact for Node.js 24 punycode deprecation	2025-12-12 17:15:18 +00:00
Salman Muin Kayser Chishti	38d4c7997f	chore: rebuild dist Code scanning - action / CodeQL-Build (push) Failing after 3s	2025-12-12 16:46:49 +00:00
Salman Muin Kayser Chishti	7d27270e0c	chore: add missing license cache files for @actions/core, @actions/io, and minimatch	2025-12-12 16:43:44 +00:00
Salman Muin Kayser Chishti	5f643d3c94	chore: update license files for @actions/artifact@5.0.1 dependencies	2025-12-12 16:39:57 +00:00
Salman Muin Kayser Chishti	1df1684032	chore: update package-lock.json with @actions/artifact@5.0.1	2025-12-12 16:39:51 +00:00
Salman Muin Kayser Chishti	b5b1a91840	fix: update @actions/artifact to ^5.0.0 for Node.js 24 punycode fix Updates @actions/artifact dependency to use the published npm version which includes @azure/storage-blob ^12.29.1 that fixes the punycode deprecation warning on Node.js 24.	2025-12-12 16:39:45 +00:00
Salman Muin Kayser Chishti	184708f738	fix: update @actions/artifact with storage-blob fix for Node.js 24 punycode deprecation	2025-12-12 15:06:59 +00:00
Salman Chishti	b340c4ff46	Merge pull request #719 from actions/node24 Upload Artifact Node 24 support	2025-12-12 14:39:28 +00:00
Salman Muin Kayser Chishti	867bba2a6b	chore: add missing eslint plugins and update to compatible versions Code scanning - action / CodeQL-Build (push) Failing after 1s	2025-12-12 09:08:26 +00:00
Salman Muin Kayser Chishti	471b053ce1	chore: add eslint-plugin-prettier and upgrade prettier to v3	2025-12-12 09:02:29 +00:00
Salman Muin Kayser Chishti	0d59ab325a	chore: add unversioned license files for @actions/core, @actions/io, and minimatch	2025-12-12 09:00:21 +00:00
Salman Muin Kayser Chishti	38cbf00a3a	chore: rebuild dist files	2025-12-12 08:55:51 +00:00
Salman Muin Kayser Chishti	65c405260d	fix: update license files for @bufbuild/protobuf and sax	2025-12-12 08:55:13 +00:00
Salman Muin Kayser Chishti	985108560d	fix: use published @actions/artifact@5.0.0 from npm	2025-12-12 08:52:57 +00:00
Salman Muin Kayser Chishti	0d8ecc924d	Merge origin/main and resolve conflicts for node24 - Updated @actions/artifact to ^5.0.0 - Updated @actions/core to ^2.0.0 - Regenerated dist files and license cache	2025-12-12 08:32:24 +00:00
Salman Muin Kayser Chishti	75274a8f39	chore: update package-lock.json	2025-12-11 23:05:12 +00:00
Salman Muin Kayser Chishti	f77a7e9888	chore: regenerate license cache for updated dependencies	2025-12-11 23:05:06 +00:00
Salman Muin Kayser Chishti	bed0e56780	chore: add license text for packages with missing licenses - @bufbuild/protobuf: Apache-2.0 (from upstream LICENSE file) - buffers: marked as reviewed (no license in npm) - chainsaw: MIT/X11 (from npm registry)	2025-12-11 23:05:00 +00:00
Salman Muin Kayser Chishti	91ba4ec18c	chore: update .licensed.yml config for node24 dependencies - Add 0bsd and blueoak-1.0.0 to allowed licenses - Add reviewed packages for dependencies with non-standard licenses - Enable UTF-8 encoding	2025-12-11 23:04:52 +00:00
Salman Muin Kayser Chishti	87458809df	chore: update dependencies to use published npm packages	2025-12-11 19:36:14 +00:00
Salman Muin Kayser Chishti	8b8de53667	chore: use local @actions/core, glob, io packages	2025-12-09 11:55:30 +00:00
Daniel Kennedy	330a01c490	Merge pull request #734 from actions/danwkennedy/prepare-5.0.0 Prepare `v5.0.0`	2025-10-24 14:15:34 -04:00
Daniel Kennedy	03f2824452	Update `github.dep.yml` Code scanning - action / CodeQL-Build (push) Failing after 1s	2025-10-24 14:06:12 -04:00
Daniel Kennedy	905a1ecb59	Prepare `v5.0.0`	2025-10-24 14:01:51 -04:00
Zachary Taylor	2d9f9cdfa9	Merge pull request #725 from patrikpolyak/patch-1 Update GHES guidance to include reference to Node 20 version	2025-10-23 10:20:12 -04:00
Salman Muin Kayser Chishti	d2e7727e56	update dist	2025-10-15 15:20:28 +01:00
Patrik Polyak	9687587dec	Merge branch 'main' into patch-1	2025-10-01 11:18:18 +02:00
Salman Muin Kayser Chishti	bdfe531d8f	licence updates	2025-09-29 14:50:01 +01:00
Salman Muin Kayser Chishti	98d3bf521e	upadate spacing	2025-09-29 14:48:36 +01:00
Salman Muin Kayser Chishti	48ddad3e02	Update to use Node 24 with local artifact package and security fixes	2025-09-29 14:44:42 +01:00
Yang Cao	2848b2cda0	Merge pull request #727 from danwkennedy/patch-1 Readme: spell out the first use of GHES	2025-09-24 09:57:02 -04:00
Daniel Kennedy	9b511775fd	Spell out the first use of GHES	2025-09-24 09:42:45 -04:00
Patrik Polyak	cd231ca1ed	Update GHES guidance to include reference to Node 20 version `v3` uses Node 16 which is deprecated. `v3-node20` has been available for a while which uses Node 20 so we should reflect this in the documentation.	2025-09-15 12:12:01 +02:00
Salman Chishti	6c33d18d0a	update to use node 24	2025-07-25 11:27:43 +00:00
Ben De St Paer-Gotch	de65e23aa2	Merge pull request #712 from actions/nebuk89-patch-1 Update README.md	2025-06-17 12:09:38 +01:00
Ben De St Paer-Gotch	8747d8cd76	Update README.md Code scanning - action / CodeQL-Build (push) Failing after 1s	2025-06-16 10:11:27 +01:00
Rob Herley	6027e3dd17	Merge pull request #681 from GhadimiR/patch-1 Update README.md	2025-03-25 09:24:05 -04:00
Ryan Ghadimi	d7079ed267	Merge branch 'main' into patch-1	2025-03-25 09:29:28 +00:00
Yang Cao	ea165f8d65	Merge pull request #685 from salmanmkc/salmanmkc/3-new-upload-artifacts-release Update to use artifact 2.3.2 package & prepare for new upload-artifact release	2025-03-19 10:34:59 -07:00
Salman Chishti	08396203c1	Prepare for new release of actions/upload-artifact with new toolkit cache version	2025-03-19 05:38:34 -07:00
Ryan Ghadimi	99ec7df36b	Update README.md	2025-03-14 15:03:00 +00:00
Yang Cao	4cec3d8aa0	Merge pull request #673 from actions/yacaovsnc/artifact_2.2.2 Update to use artifact 2.2.2 package	2025-02-21 13:56:39 -05:00
Yang Cao	e9fad966cc	license cache update for artifact Code scanning - action / CodeQL-Build (push) Failing after 7s	2025-02-21 13:16:50 -05:00
Yang Cao	b26fd06e9d	Update to use artifact 2.2.2 package	2025-02-21 13:05:59 -05:00
Yang Cao	65c4c4a1dd	Merge pull request #662 from actions/yacaovsnc/add_variable_for_concurrency_and_timeout Expose env vars to control concurrency and timeout	2025-01-09 10:32:47 -05:00
Yang Cao	0207619228	move files back to satisfy licensed ci Code scanning - action / CodeQL-Build (push) Failing after 3s	2025-01-09 10:18:40 -05:00
Yang Cao	1ecca81102	licensed cache updates	2025-01-09 09:57:34 -05:00
Yang Cao	97422693d3	Expose env vars to controll concurrency and timeout	2025-01-09 14:41:08 +00:00
Rob Herley	6f51ac03b9	Merge pull request #656 from bdehamer/bdehamer/artifact-digest Add new `artifact-digest` output	2024-12-17 17:02:00 -05:00
Brian DeHamer	c40c16d999	add new artifact-digest output Signed-off-by: Brian DeHamer <bdehamer@github.com>	2024-12-17 13:48:06 -08:00
Brian DeHamer	735efb4a0a	bump @actions/artifact from 2.1.11 to 2.2.0 Signed-off-by: Brian DeHamer <bdehamer@github.com>	2024-12-17 12:10:23 -08:00
Josh Gross	184d73b71b	Merge pull request #578 from hamirmahal/fix/deprecated-nodejs-usage-in-action fix: deprecated `Node.js` version in action	2024-10-09 13:44:23 -04:00
Josh Gross	b4a0a984a0	Merge branch 'main' into fix/deprecated-nodejs-usage-in-action	2024-10-09 13:29:53 -04:00
Josh Gross	b4b15b8c7c	Merge pull request #632 from actions/joshmgross/undo-dependency-changes Undo indirect dependency updates from #627	2024-10-09 13:16:31 -04:00
Josh Gross	92b01ebffa	Undo indirect dependency updates from #627	2024-10-09 12:35:22 -04:00
Rob Herley	84480863f2	Merge pull request #627 from actions/robherley/v4.4.2 Bump `@actions/artifact` to 2.1.11	2024-10-08 14:15:05 -04:00
Rob Herley	b1d4642b69	add explicit relative and absolute symlinks to workflow	2024-10-08 13:39:45 -04:00
Rob Herley	d50e66084c	bump version	2024-10-08 13:35:54 -04:00
Rob Herley	aabe6f8050	build with @actions/artifact v2.1.11	2024-10-08 12:46:18 -04:00
Rob Herley	604373da63	Merge pull request #625 from actions/robherley/artifact-2.1.10 Update @actions/artifact to latest version, includes symlink and timeout fixes	2024-10-07 11:46:25 -04:00
Rob Herley	0150148bdf	paste right core version	2024-10-07 09:57:16 -04:00
Rob Herley	a009b25faa	update licenses	2024-10-07 09:55:37 -04:00
Rob Herley	9f6f6f402e	update @actions/core and @actions/artifact to latest versions	2024-10-07 09:45:59 -04:00
Joel Ambass	3eadd8b791	Merge pull request #621 from actions/Jcambass-patch-1 Add workflow file for publishing releases to immutable action package	2024-09-26 08:20:21 +02:00
Joel Ambass	aeba9f7961	Add workflow file for publishing releases to immutable action package This workflow file publishes new action releases to the immutable action package of the same name as this repo. This is part of the Immutable Actions project which is not yet fully released to the public. First party actions like this one are part of our initial testing of this feature.	2024-09-24 15:53:26 +02:00
Josh Gross	b18b1d32f3	Merge pull request #607 from actions/joshmgross/hidden-files-readme Add a section about hidden files	2024-09-02 10:39:50 -04:00
Josh Gross	d7c12077c4	Add a section about hidden files	2024-09-02 10:30:03 -04:00
Josh Gross	50769540e7	Merge pull request #598 from actions/joshmgross/exclude-hidden-files Exclude hidden files by default	2024-08-29 10:38:39 -04:00
Josh Gross	d52396ac5d	Add a warning about enabling `include-hidden-files`	2024-08-15 19:45:59 -04:00
Josh Gross	710f362075	Remove "merged" from `include-hidden-files` input description	2024-08-15 19:39:39 -04:00
Josh Gross	3b315f26f6	`npm run release` again 🙂	2024-08-15 17:36:20 -04:00
Josh Gross	3be2180eb7	Remove another trailing comma	2024-08-15 17:35:00 -04:00
Josh Gross	453e8d0a40	Update glob license	2024-08-15 17:31:21 -04:00
Josh Gross	0a398c1480	`npm run release`	2024-08-15 17:30:44 -04:00
Josh Gross	a0c40cf602	Update to latest `@actions/glob` and fix tests	2024-08-15 17:26:43 -04:00
Josh Gross	acb59e4776	`lint`	2024-08-15 16:31:57 -04:00
Josh Gross	cb6558bb10	Exclude hidden files by default	2024-08-15 16:22:09 -04:00
Hamir Mahal	a954e16c38	fix: deprecated `Node.js` version in action	2024-06-17 13:25:23 -07:00
Hamir Mahal	a1d85e775a	ci: update `CodeQL Action` before deprecation	2024-06-17 13:00:34 -07:00