Apply eslint auto-fix formatting to windows-path-matching test

Co-authored-by: salmanmkc <32169182+salmanmkc@users.noreply.github.com>
Remove unused 'path' import from windows-path-matching test
2025-12-11 14:03:26 +00:00 · 2025-12-11 10:12:06 +00:00 · 2025-12-11 09:49:13 +00:00 · 2025-12-10 23:36:01 +00:00 · 2025-12-10 23:33:20 +00:00 · 2025-12-10 23:31:29 +00:00
131 changed files with 1970 additions and 1781 deletions
@@ -5,3 +5,4 @@ packages/*/__tests__/_temp/
 .DS_Store
 *.xar
 packages/*/audit.json
+.nx/
@@ -4,33 +4,8 @@ module.exports = {
  roots: ['<rootDir>/packages'],
  testEnvironment: 'node',
  testMatch: ['**/__tests__/*.test.ts'],
-  moduleNameMapper: {
-    '^(\\.{1,2}/.*)\\.js$': '$1',
-    '^@actions/core$': '<rootDir>/packages/core/lib/core.js',
-    '^@actions/exec$': '<rootDir>/packages/exec/lib/exec.js',
-    '^@actions/io$': '<rootDir>/packages/io/lib/io.js',
-    '^@actions/io/lib/io-util$': '<rootDir>/packages/io/lib/io-util.js',
-    '^@actions/http-client$': '<rootDir>/packages/http-client/lib/index.js',
-    '^@actions/http-client/lib/auth$': '<rootDir>/packages/http-client/lib/auth.js',
-    '^@actions/http-client/lib/interfaces$': '<rootDir>/packages/http-client/lib/interfaces.js',
-    '^@actions/github$': '<rootDir>/packages/github/lib/github.js',
-    '^@actions/github/lib/utils$': '<rootDir>/packages/github/lib/utils.js',
-    '^@actions/glob$': '<rootDir>/packages/glob/lib/glob.js',
-    '^@actions/tool-cache$': '<rootDir>/packages/tool-cache/lib/tool-cache.js'
-  },
  transform: {
-    '^.+\\.(ts|js)$': ['ts-jest', {
-      diagnostics: {warnOnly: true},
-      tsconfig: {
-        allowJs: true,
-        esModuleInterop: true,
-        module: 'commonjs',
-        moduleResolution: 'node'
-      }
-    }]
+    '^.+\\.ts$': ['ts-jest', {isolatedModules: true, diagnostics: {warnOnly: true}}]
  },
-  transformIgnorePatterns: [
-    '/node_modules/(?!(@octokit|@actions/github|@actions/http-client|@actions/io|@actions/exec|@actions/core|@actions/glob|@actions/tool-cache|universal-user-agent|before-after-hook)/)'
-  ],
  verbose: true
 }
@@ -2956,67 +2956,67 @@
      }
    },
    "node_modules/@octokit/auth-token": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/auth-token/-/auth-token-6.0.0.tgz",
-      "integrity": "sha512-P4YJBPdPSpWTQ1NU4XYdvHvXJJDxM6YwpS0FZHRgP7YFkdVxsWcpWGy/NVqlAA7PcPCnMacXlRm1y2PFZRWL/w==",
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/@octokit/auth-token/-/auth-token-4.0.0.tgz",
+      "integrity": "sha512-tY/msAuJo6ARbK6SPIxZrPBms3xPbfwBrulZe0Wtr/DIY9lje2HeV1uoebShn6mx7SjCHif6EjMvoREj+gZ+SA==",
      "dev": true,
      "license": "MIT",
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      }
    },
    "node_modules/@octokit/core": {
-      "version": "7.0.6",
-      "resolved": "https://registry.npmjs.org/@octokit/core/-/core-7.0.6.tgz",
-      "integrity": "sha512-DhGl4xMVFGVIyMwswXeyzdL4uXD5OGILGX5N8Y+f6W7LhC1Ze2poSNrkF/fedpVDHEEZ+PHFW0vL14I+mm8K3Q==",
+      "version": "5.2.2",
+      "resolved": "https://registry.npmjs.org/@octokit/core/-/core-5.2.2.tgz",
+      "integrity": "sha512-/g2d4sW9nUDJOMz3mabVQvOGhVa4e/BN/Um7yca9Bb2XTzPPnfTWHWQg+IsEYO7M3Vx+EXvaM/I2pJWIMun1bg==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@octokit/auth-token": "^6.0.0",
-        "@octokit/graphql": "^9.0.3",
-        "@octokit/request": "^10.0.6",
-        "@octokit/request-error": "^7.0.2",
-        "@octokit/types": "^16.0.0",
-        "before-after-hook": "^4.0.0",
-        "universal-user-agent": "^7.0.0"
+        "@octokit/auth-token": "^4.0.0",
+        "@octokit/graphql": "^7.1.0",
+        "@octokit/request": "^8.4.1",
+        "@octokit/request-error": "^5.1.1",
+        "@octokit/types": "^13.0.0",
+        "before-after-hook": "^2.2.0",
+        "universal-user-agent": "^6.0.0"
      },
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      }
    },
    "node_modules/@octokit/endpoint": {
-      "version": "11.0.2",
-      "resolved": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-11.0.2.tgz",
-      "integrity": "sha512-4zCpzP1fWc7QlqunZ5bSEjxc6yLAlRTnDwKtgXfcI/FxxGoqedDG8V2+xJ60bV2kODqcGB+nATdtap/XYq2NZQ==",
+      "version": "9.0.6",
+      "resolved": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-9.0.6.tgz",
+      "integrity": "sha512-H1fNTMA57HbkFESSt3Y9+FBICv+0jFceJFPWDePYlR/iMGrwM5ph+Dd4XRQs+8X+PUFURLQgX9ChPfhJ/1uNQw==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@octokit/types": "^16.0.0",
-        "universal-user-agent": "^7.0.2"
+        "@octokit/types": "^13.1.0",
+        "universal-user-agent": "^6.0.0"
      },
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      }
    },
    "node_modules/@octokit/graphql": {
-      "version": "9.0.3",
-      "resolved": "https://registry.npmjs.org/@octokit/graphql/-/graphql-9.0.3.tgz",
-      "integrity": "sha512-grAEuupr/C1rALFnXTv6ZQhFuL1D8G5y8CN04RgrO4FIPMrtm+mcZzFG7dcBm+nq+1ppNixu+Jd78aeJOYxlGA==",
+      "version": "7.1.1",
+      "resolved": "https://registry.npmjs.org/@octokit/graphql/-/graphql-7.1.1.tgz",
+      "integrity": "sha512-3mkDltSfcDUoa176nlGoA32RGjeWjl3K7F/BwHwRMJUW/IteSa4bnSV8p2ThNkcIcZU2umkZWxwETSSCJf2Q7g==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@octokit/request": "^10.0.6",
-        "@octokit/types": "^16.0.0",
-        "universal-user-agent": "^7.0.0"
+        "@octokit/request": "^8.4.1",
+        "@octokit/types": "^13.0.0",
+        "universal-user-agent": "^6.0.0"
      },
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      }
    },
    "node_modules/@octokit/openapi-types": {
-      "version": "27.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-27.0.0.tgz",
-      "integrity": "sha512-whrdktVs1h6gtR+09+QsNk2+FO+49j6ga1c55YZudfEG+oKJVvJLQi3zkOm5JjiUXAagWK2tI2kTGKJ2Ys7MGA==",
+      "version": "24.2.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+      "integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
      "dev": true,
      "license": "MIT"
    },
@@ -3028,19 +3028,36 @@
      "license": "MIT"
    },
    "node_modules/@octokit/plugin-paginate-rest": {
-      "version": "14.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/plugin-paginate-rest/-/plugin-paginate-rest-14.0.0.tgz",
-      "integrity": "sha512-fNVRE7ufJiAA3XUrha2omTA39M6IXIc6GIZLvlbsm8QOQCYvpq/LkMNGyFlB1d8hTDzsAXa3OKtybdMAYsV/fw==",
+      "version": "9.2.2",
+      "resolved": "https://registry.npmjs.org/@octokit/plugin-paginate-rest/-/plugin-paginate-rest-9.2.2.tgz",
+      "integrity": "sha512-u3KYkGF7GcZnSD/3UP0S7K5XUFT2FkOQdcfXZGZQPGv3lm4F2Xbf71lvjldr8c1H3nNbF+33cLEkWYbokGWqiQ==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@octokit/types": "^16.0.0"
+        "@octokit/types": "^12.6.0"
      },
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      },
      "peerDependencies": {
-        "@octokit/core": ">=6"
+        "@octokit/core": "5"
+      }
+    },
+    "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/openapi-types": {
+      "version": "20.0.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
+      "integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/types": {
+      "version": "12.6.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
+      "integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@octokit/openapi-types": "^20.0.0"
      }
    },
    "node_modules/@octokit/plugin-request-log": {
@@ -3088,33 +3105,34 @@
      }
    },
    "node_modules/@octokit/request": {
-      "version": "10.0.7",
-      "resolved": "https://registry.npmjs.org/@octokit/request/-/request-10.0.7.tgz",
-      "integrity": "sha512-v93h0i1yu4idj8qFPZwjehoJx4j3Ntn+JhXsdJrG9pYaX6j/XRz2RmasMUHtNgQD39nrv/VwTWSqK0RNXR8upA==",
+      "version": "8.4.1",
+      "resolved": "https://registry.npmjs.org/@octokit/request/-/request-8.4.1.tgz",
+      "integrity": "sha512-qnB2+SY3hkCmBxZsR/MPCybNmbJe4KAlfWErXq+rBKkQJlbjdJeS85VI9r8UqeLYLvnAenU8Q1okM/0MBsAGXw==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@octokit/endpoint": "^11.0.2",
-        "@octokit/request-error": "^7.0.2",
-        "@octokit/types": "^16.0.0",
-        "fast-content-type-parse": "^3.0.0",
-        "universal-user-agent": "^7.0.2"
+        "@octokit/endpoint": "^9.0.6",
+        "@octokit/request-error": "^5.1.1",
+        "@octokit/types": "^13.1.0",
+        "universal-user-agent": "^6.0.0"
      },
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      }
    },
    "node_modules/@octokit/request-error": {
-      "version": "7.1.0",
-      "resolved": "https://registry.npmjs.org/@octokit/request-error/-/request-error-7.1.0.tgz",
-      "integrity": "sha512-KMQIfq5sOPpkQYajXHwnhjCC0slzCNScLHs9JafXc4RAJI+9f+jNDlBNaIMTvazOPLgb4BnlhGJOTbnN0wIjPw==",
+      "version": "5.1.1",
+      "resolved": "https://registry.npmjs.org/@octokit/request-error/-/request-error-5.1.1.tgz",
+      "integrity": "sha512-v9iyEQJH6ZntoENr9/yXxjuezh4My67CBSu9r6Ve/05Iu5gNgnisNWOsoJHTP6k0Rr0+HQIpnH+kyammu90q/g==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@octokit/types": "^16.0.0"
+        "@octokit/types": "^13.1.0",
+        "deprecation": "^2.0.0",
+        "once": "^1.4.0"
      },
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      }
    },
    "node_modules/@octokit/rest": {
@@ -3134,13 +3152,13 @@
      }
    },
    "node_modules/@octokit/types": {
-      "version": "16.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-16.0.0.tgz",
-      "integrity": "sha512-sKq+9r1Mm4efXW1FCk7hFSeJo4QKreL/tTbR0rz/qx/r1Oa2VV83LTA/H/MuCOX7uCIJmQVRKBcbmWoySjAnSg==",
+      "version": "13.10.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+      "integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@octokit/openapi-types": "^27.0.0"
+        "@octokit/openapi-types": "^24.2.0"
      }
    },
    "node_modules/@parcel/watcher": {
@@ -4498,9 +4516,9 @@
      }
    },
    "node_modules/before-after-hook": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/before-after-hook/-/before-after-hook-4.0.0.tgz",
-      "integrity": "sha512-q6tR3RPqIB1pMiTRMFcZwuG5T8vwp+vUvEG0vuI6B+Rikh5BfPp2fQ82c925FOs+b0lcFQ8CFrL+KbilfZFhOQ==",
+      "version": "2.2.3",
+      "resolved": "https://registry.npmjs.org/before-after-hook/-/before-after-hook-2.2.3.tgz",
+      "integrity": "sha512-NzUnlZexiaH/46WDhANlyR2bXRopNg4F/zuSA3OpZnllCUgRaOF2znDioDWrmbNVsuZk6l9pMquQB38cfBZwkQ==",
      "dev": true,
      "license": "Apache-2.0"
    },
@@ -6968,23 +6986,6 @@
        "node": ">=0.10.0"
      }
    },
-    "node_modules/fast-content-type-parse": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/fast-content-type-parse/-/fast-content-type-parse-3.0.0.tgz",
-      "integrity": "sha512-ZvLdcY8P+N8mGQJahJV5G4U88CSvT1rP8ApL6uETe88MBXrBHAkZlSEySdUlyztF7ccb+Znos3TFqaepHxdhBg==",
-      "dev": true,
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/fastify"
-        },
-        {
-          "type": "opencollective",
-          "url": "https://opencollective.com/fastify"
-        }
-      ],
-      "license": "MIT"
-    },
    "node_modules/fast-deep-equal": {
      "version": "3.1.3",
      "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
@@ -10761,9 +10762,9 @@
      }
    },
    "node_modules/lodash": {
-      "version": "4.17.23",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
-      "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==",
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
      "dev": true,
      "license": "MIT"
    },
@@ -15858,9 +15859,9 @@
      }
    },
    "node_modules/universal-user-agent": {
-      "version": "7.0.3",
-      "resolved": "https://registry.npmjs.org/universal-user-agent/-/universal-user-agent-7.0.3.tgz",
-      "integrity": "sha512-TmnEAEAsBJVZM/AADELsK76llnwcf9vMKuPz8JflO1frO8Lchitr0fNaN9d+Ap0BjKtqWqd/J17qeDnXh8CL2A==",
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/universal-user-agent/-/universal-user-agent-6.0.1.tgz",
+      "integrity": "sha512-yCzhz6FN2wU1NiiQRogkTQszlQSlpWaw8SvVegAc+bDxbzHgh1vX8uIe8OYyMH6DwH+sdTJsgMl36+mSMdRJIQ==",
      "dev": true,
      "license": "ISC"
    },
@@ -36,10 +36,10 @@
  "overrides": {
    "semver": "^7.6.0",
    "tar": "^6.2.1",
-    "@octokit/plugin-paginate-rest": "^14.0.0",
-    "@octokit/request": "^10.0.7",
-    "@octokit/request-error": "^7.1.0",
-    "@octokit/core": "^7.0.6",
+    "@octokit/plugin-paginate-rest": "^9.2.2",
+    "@octokit/request": "^8.4.1",
+    "@octokit/request-error": "^5.1.1",
+    "@octokit/core": "^5.0.3",
    "tmp": "^0.2.4",
    "@types/node": "^24.1.0",
    "brace-expansion": "^2.0.2",
@@ -4,6 +4,7 @@ Interact programmatically with [Actions Artifacts](https://docs.github.com/en/ac

 This is the core library that powers the [`@actions/upload-artifact`](https://github.com/actions/upload-artifact) and [`@actions/download-artifact`](https://github.com/actions/download-artifact) actions.

+
 - [`@actions/artifact`](#actionsartifact)
  - [v2 - What's New](#v2---whats-new)
    - [Improvements](#improvements)
@@ -1,144 +1,129 @@
 # @actions/artifact Releases

-## 5.0.3
-
- Bump `@actions/http-client` to `3.0.2`
-
-## 5.0.1
-
- Fix Node.js 24 punycode deprecation warning by updating `@azure/storage-blob` from `^12.15.0` to `^12.29.1` [#2211](https://github.com/actions/toolkit/pull/2211)
- Removed direct `@azure/core-http` dependency (now uses `@azure/core-rest-pipeline` via storage-blob)
-
-## 5.0.0
-
- Dependency updates for Node.js 24 runtime support
- Update `@actions/core` to v2
- Update `@actions/http-client` to v3
-
-## 4.0.0
+### 4.0.0

 - Add support for Node 24 [#2110](https://github.com/actions/toolkit/pull/2110)
 - Fix: artifact pagination bugs and configurable artifact count limits [#2165](https://github.com/actions/toolkit/pull/2165)
 - Fix: reject the promise on timeout [#2124](https://github.com/actions/toolkit/pull/2124)
 - Update dependency versions

-## 2.3.3
+### 2.3.3

 - Dependency updates [#2049](https://github.com/actions/toolkit/pull/2049)

-## 2.3.2
+### 2.3.2

 - Added masking for Shared Access Signature (SAS) artifact URLs [#1982](https://github.com/actions/toolkit/pull/1982)
- Change hash to digest for consistent terminology across runner logs [#1991](https://github.com/actions/toolkit/pull/1991)
+- Change hash to digest for consistent terminology across runner logs [#1991](https://github.com/actions/toolkit/pull/1991) 

-## 2.3.1
+### 2.3.1

 - Fix comment typo on expectedHash. [#1986](https://github.com/actions/toolkit/pull/1986)

-## 2.3.0
+### 2.3.0

 - Allow ArtifactClient to perform digest comparisons, if supplied. [#1975](https://github.com/actions/toolkit/pull/1975)

-## 2.2.2
+### 2.2.2

 - Default concurrency to 5 for uploading artifacts [#1962](https://github.com/actions/toolkit/pull/1962)

-## 2.2.1
+### 2.2.1

 - Add `ACTIONS_ARTIFACT_UPLOAD_CONCURRENCY` and `ACTIONS_ARTIFACT_UPLOAD_TIMEOUT_MS` environment variables [#1928](https://github.com/actions/toolkit/pull/1928)

-## 2.2.0
+### 2.2.0

 - Return artifact digest on upload [#1896](https://github.com/actions/toolkit/pull/1896)

-## 2.1.11
+### 2.1.11

 - Fixed a bug with relative symlinks resolution [#1844](https://github.com/actions/toolkit/pull/1844)
 - Use native `crypto` [#1815](https://github.com/actions/toolkit/pull/1815)

-## 2.1.10
+### 2.1.10

 - Fixed a regression with symlinks not being automatically resolved [#1830](https://github.com/actions/toolkit/pull/1830)
 - Fixed a regression with chunk timeout [#1786](https://github.com/actions/toolkit/pull/1786)

-## 2.1.9
+### 2.1.9

 - Fixed artifact upload chunk timeout logic [#1774](https://github.com/actions/toolkit/pull/1774)
 - Use lazy stream to prevent issues with open file limits [#1771](https://github.com/actions/toolkit/pull/1771)

-## 2.1.8
+### 2.1.8

 - Allows `*.localhost` domains for hostname checks for local development.

-## 2.1.7
+### 2.1.7

 - Update unzip-stream dependency and reverted to using `unzip.Extract()`

-## 2.1.6
+### 2.1.6

 - Will retry on invalid request responses.

-## 2.1.5
+### 2.1.5

 - Bumped `archiver` dependency to 7.0.1

-## 2.1.4
+### 2.1.4

 - Adds info-level logging for zip extraction

-## 2.1.3
+### 2.1.3

 - Fixes a bug in the extract logic updated in 2.1.2

-## 2.1.2
+### 2.1.2

 - Updated the stream extract functionality to use `unzip.Parse()` instead of `unzip.Extract()` for greater control of unzipping artifacts

-## 2.1.1
+### 2.1.1

 - Updated `isGhes` check to include `.ghe.com` and `.ghe.localhost` as accepted hosts

-## 2.1.0
+### 2.1.0

 - Added `ArtifactClient#deleteArtifact` to delete artifacts by name [#1626](https://github.com/actions/toolkit/pull/1626)
 - Update error messaging to be more useful [#1628](https://github.com/actions/toolkit/pull/1628)

-## 2.0.1
+### 2.0.1

- Patch to fix transient request timeouts <https://github.com/actions/download-artifact/issues/249>
+- Patch to fix transient request timeouts https://github.com/actions/download-artifact/issues/249

-## 2.0.0
+### 2.0.0

 - Major release. Supports new Artifact backend for improved speed, reliability and behavior.
 - Numerous API changes, [some breaking](./README.md#breaking-changes).

 - [Blog post with more info](https://github.blog/2024-02-12-get-started-with-v4-of-github-actions-artifacts/)

-## 1.1.1
+### 1.1.1

 - Fixed a bug in Node16 where if an HTTP download finished too quickly (<1ms, e.g. when it's mocked) we attempt to delete a temp file that has not been created yet [#1278](https://github.com/actions/toolkit/pull/1278/commits/b9de68a590daf37c6747e38d3cb4f1dd2cfb791c)

-## 1.1.0
+### 1.1.0

 - Add `x-actions-results-crc64` and `x-actions-results-md5` checksum headers on upload [#1063](https://github.com/actions/toolkit/pull/1063)

-## 1.0.2
+### 1.0.2

 - Update to v2.0.1 of `@actions/http-client` [#1087](https://github.com/actions/toolkit/pull/1087)

-## 1.0.1
+### 1.0.1

 - Update to v2.0.0 of `@actions/http-client`

-## 1.0.0
+### 1.0.0

 - Update `lockfileVersion` to `v2` in `package-lock.json` [#1009](https://github.com/actions/toolkit/pull/1009)

-## 0.6.1
+### 0.6.1

 - Fix for failing 0 byte file uploads on Windows [#962](https://github.com/actions/toolkit/pull/962)

-## 0.6.0
+### 0.6.0

 - Support upload from named pipes [#748](https://github.com/actions/toolkit/pull/748)
 - Fixes to percentage values being greater than 100% when downloading all artifacts [#889](https://github.com/actions/toolkit/pull/889)
@@ -147,49 +132,49 @@
 - Faster upload speeds for certain types of large files by exempting gzip compression [#956](https://github.com/actions/toolkit/pull/956)
 - More detailed logging when dealing with chunked uploads [#957](https://github.com/actions/toolkit/pull/957)
  
-## 0.5.2
+### 0.5.2

 - Add HTTP 500 as a retryable status code for artifact upload and download.
  
-## 0.5.1
+### 0.5.1

 - Bump @actions/http-client to version 1.0.11 to fix proxy related issues during artifact upload and download

-## 0.5.0
+### 0.5.0

 - Improved retry-ability for all http calls during artifact upload and download if an error is encountered

-## 0.4.2
+### 0.4.2

 - Improved retry-ability when a partial artifact download is encountered

-## 0.4.1
+### 0.4.1

 - Update to latest @actions/core version

-## 0.4.0
+### 0.4.0

 - Add option to specify custom retentions on artifacts
-
-## 0.3.5
+- 
+### 0.3.5

 - Retry in the event of a 413 response

-## 0.3.3
+### 0.3.3

 - Increase chunk size during upload from 4MB to 8MB
 - Improve user-agent strings during API calls to help internally diagnose issues

-## 0.3.2
+### 0.3.2

 - Fix to ensure readstreams get correctly reset in the event of a retry

-## 0.3.1
+### 0.3.1

 - Fix to ensure temporary gzip files get correctly deleted during artifact upload
 - Remove spaces as a forbidden character during upload

-## 0.3.0
+### 0.3.0

 - Fixes to gzip decompression when downloading artifacts
 - Support handling 429 response codes
@@ -198,13 +183,13 @@
 - Clearer error message if storage quota has been reached
 - Improved logging and output during artifact download

-## 0.2.0
+### 0.2.0

 - Fixes to TCP connections not closing
 - GZip file compression to speed up downloads
 - Improved logging and output
 - Extra documentation

-## 0.1.0
+### 0.1.0

 - Initial release
@@ -1,10 +1,10 @@
 import * as http from 'http'
 import * as net from 'net'
 import {HttpClient} from '@actions/http-client'
-import * as config from '../src/internal/shared/config.js'
-import {internalArtifactTwirpClient} from '../src/internal/shared/artifact-twirp-client.js'
-import {noopLogs} from './common.js'
-import {NetworkError, UsageError} from '../src/internal/shared/errors.js'
+import * as config from '../src/internal/shared/config'
+import {internalArtifactTwirpClient} from '../src/internal/shared/artifact-twirp-client'
+import {noopLogs} from './common'
+import {NetworkError, UsageError} from '../src/internal/shared/errors'

 jest.mock('@actions/http-client')

@@ -1,4 +1,4 @@
-import * as config from '../src/internal/shared/config.js'
+import * as config from '../src/internal/shared/config'
 import os from 'os'

 // Mock the `cpus()` function in the `os` module
@@ -4,11 +4,11 @@ import type {RequestInterface} from '@octokit/types'
 import {
  deleteArtifactInternal,
  deleteArtifactPublic
-} from '../src/internal/delete/delete-artifact.js'
-import * as config from '../src/internal/shared/config.js'
-import {ArtifactServiceClientJSON, Timestamp} from '../src/generated/index.js'
-import * as util from '../src/internal/shared/util.js'
-import {noopLogs} from './common.js'
+} from '../src/internal/delete/delete-artifact'
+import * as config from '../src/internal/shared/config'
+import {ArtifactServiceClientJSON, Timestamp} from '../src/generated'
+import * as util from '../src/internal/shared/util'
+import {noopLogs} from './common'

 type MockedRequest = jest.MockedFunction<RequestInterface<object>>

@@ -11,12 +11,12 @@ import {
  downloadArtifactInternal,
  downloadArtifactPublic,
  streamExtractExternal
-} from '../src/internal/download/download-artifact.js'
-import {getUserAgentString} from '../src/internal/shared/user-agent.js'
-import {noopLogs} from './common.js'
-import * as config from '../src/internal/shared/config.js'
-import {ArtifactServiceClientJSON} from '../src/generated/index.js'
-import * as util from '../src/internal/shared/util.js'
+} from '../src/internal/download/download-artifact'
+import {getUserAgentString} from '../src/internal/shared/user-agent'
+import {noopLogs} from './common'
+import * as config from '../src/internal/shared/config'
+import {ArtifactServiceClientJSON} from '../src/generated'
+import * as util from '../src/internal/shared/util'

 type MockedDownloadArtifact = jest.MockedFunction<
  RestEndpointMethods['actions']['downloadArtifact']
@@ -3,15 +3,15 @@ import type {RequestInterface} from '@octokit/types'
 import {
  getArtifactInternal,
  getArtifactPublic
-} from '../src/internal/find/get-artifact.js'
-import * as config from '../src/internal/shared/config.js'
-import {ArtifactServiceClientJSON, Timestamp} from '../src/generated/index.js'
-import * as util from '../src/internal/shared/util.js'
-import {noopLogs} from './common.js'
+} from '../src/internal/find/get-artifact'
+import * as config from '../src/internal/shared/config'
+import {ArtifactServiceClientJSON, Timestamp} from '../src/generated'
+import * as util from '../src/internal/shared/util'
+import {noopLogs} from './common'
 import {
  ArtifactNotFoundError,
  InvalidResponseError
-} from '../src/internal/shared/errors.js'
+} from '../src/internal/shared/errors'

 type MockedRequest = jest.MockedFunction<RequestInterface<object>>

@@ -3,12 +3,12 @@ import type {RestEndpointMethodTypes} from '@octokit/plugin-rest-endpoint-method
 import {
  listArtifactsInternal,
  listArtifactsPublic
-} from '../src/internal/find/list-artifacts.js'
-import * as config from '../src/internal/shared/config.js'
-import {ArtifactServiceClientJSON, Timestamp} from '../src/generated/index.js'
-import * as util from '../src/internal/shared/util.js'
-import {noopLogs} from './common.js'
-import {Artifact} from '../src/internal/shared/interfaces.js'
+} from '../src/internal/find/list-artifacts'
+import * as config from '../src/internal/shared/config'
+import {ArtifactServiceClientJSON, Timestamp} from '../src/generated'
+import * as util from '../src/internal/shared/util'
+import {noopLogs} from './common'
+import {Artifact} from '../src/internal/shared/interfaces'
 import {RequestInterface} from '@octokit/types'

 type MockedRequest = jest.MockedFunction<RequestInterface<object>>
@@ -1,9 +1,9 @@
 import {
  validateArtifactName,
  validateFilePath
-} from '../src/internal/upload/path-and-artifact-name-validation.js'
+} from '../src/internal/upload/path-and-artifact-name-validation'

-import {noopLogs} from './common.js'
+import {noopLogs} from './common'

 describe('Path and artifact name validation', () => {
  beforeAll(() => {
@@ -1,5 +1,5 @@
-import {Timestamp} from '../src/generated/index.js'
-import * as retention from '../src/internal/upload/retention.js'
+import {Timestamp} from '../src/generated'
+import * as retention from '../src/internal/upload/retention'

 describe('retention', () => {
  beforeEach(() => {
@@ -1,12 +1,12 @@
-import * as uploadZipSpecification from '../src/internal/upload/upload-zip-specification.js'
-import * as zip from '../src/internal/upload/zip.js'
-import * as util from '../src/internal/shared/util.js'
-import * as config from '../src/internal/shared/config.js'
-import {ArtifactServiceClientJSON} from '../src/generated/index.js'
-import * as blobUpload from '../src/internal/upload/blob-upload.js'
-import {uploadArtifact} from '../src/internal/upload/upload-artifact.js'
-import {noopLogs} from './common.js'
-import {FilesNotFoundError} from '../src/internal/shared/errors.js'
+import * as uploadZipSpecification from '../src/internal/upload/upload-zip-specification'
+import * as zip from '../src/internal/upload/zip'
+import * as util from '../src/internal/shared/util'
+import * as config from '../src/internal/shared/config'
+import {ArtifactServiceClientJSON} from '../src/generated'
+import * as blobUpload from '../src/internal/upload/blob-upload'
+import {uploadArtifact} from '../src/internal/upload/upload-artifact'
+import {noopLogs} from './common'
+import {FilesNotFoundError} from '../src/internal/shared/errors'
 import {BlockBlobUploadStreamOptions} from '@azure/storage-blob'
 import * as fs from 'fs'
 import * as path from 'path'
@@ -4,8 +4,8 @@ import {promises as fs} from 'fs'
 import {
  getUploadZipSpecification,
  validateRootDirectory
-} from '../src/internal/upload/upload-zip-specification.js'
-import {noopLogs} from './common.js'
+} from '../src/internal/upload/upload-zip-specification'
+import {noopLogs} from './common'

 const root = path.join(__dirname, '_temp', 'upload-specification')
 const goodItem1Path = path.join(
@@ -1,6 +1,6 @@
-import * as config from '../src/internal/shared/config.js'
-import * as util from '../src/internal/shared/util.js'
-import {maskSigUrl, maskSecretUrls} from '../src/internal/shared/util.js'
+import * as config from '../src/internal/shared/config'
+import * as util from '../src/internal/shared/util'
+import {maskSigUrl, maskSecretUrls} from '../src/internal/shared/util'
 import {setSecret, debug} from '@actions/core'

 export const testRuntimeToken =
@@ -1,6 +1,6 @@
 {
  "name": "@actions/artifact",
-  "version": "6.0.0",
+  "version": "4.0.0",
  "preview": true,
  "description": "Actions artifact lib",
  "keywords": [
@@ -10,15 +10,8 @@
  ],
  "homepage": "https://github.com/actions/toolkit/tree/main/packages/artifact",
  "license": "MIT",
-  "type": "module",
  "main": "lib/artifact.js",
  "types": "lib/artifact.d.ts",
-  "exports": {
-    ".": {
-      "types": "./lib/artifact.d.ts",
-      "import": "./lib/artifact.js"
-    }
-  },
  "directories": {
    "lib": "lib",
    "test": "__tests__"
@@ -39,7 +32,7 @@
    "audit-moderate": "npm install && npm audit --json --audit-level=moderate > audit.json",
    "test": "cd ../../ && npm run test ./packages/artifact",
    "bootstrap": "cd ../../ && npm run bootstrap",
-    "tsc-run": "tsc && cp src/internal/shared/package-version.cjs lib/internal/shared/",
+    "tsc-run": "tsc",
    "tsc": "npm run bootstrap && npm run tsc-run",
    "gen:docs": "typedoc --plugin typedoc-plugin-markdown --out docs/generated src/artifact.ts --githubPages false --readme none"
  },
@@ -47,27 +40,27 @@
    "url": "https://github.com/actions/toolkit/issues"
  },
  "dependencies": {
-    "@actions/core": "^3.0.0",
-    "@actions/github": "^9.0.0",
-    "@actions/http-client": "^4.0.0",
-    "@azure/storage-blob": "^12.30.0",
-    "@octokit/core": "^7.0.6",
-    "@octokit/plugin-request-log": "^6.0.0",
-    "@octokit/plugin-retry": "^8.0.0",
-    "@octokit/request": "^10.0.7",
-    "@octokit/request-error": "^7.1.0",
+    "@actions/core": "^1.10.0",
+    "@actions/github": "^6.0.1",
+    "@actions/http-client": "^2.1.0",
+    "@azure/core-http": "^3.0.5",
+    "@azure/storage-blob": "^12.15.0",
+    "@octokit/core": "^5.2.1",
+    "@octokit/plugin-request-log": "^1.0.4",
+    "@octokit/plugin-retry": "^3.0.9",
+    "@octokit/request": "^8.4.1",
+    "@octokit/request-error": "^5.1.1",
    "@protobuf-ts/plugin": "^2.2.3-alpha.1",
-    "@protobuf-ts/runtime": "^2.9.4",
    "archiver": "^7.0.1",
-    "jwt-decode": "^4.0.0",
+    "jwt-decode": "^3.1.2",
    "unzip-stream": "^0.3.1"
  },
  "devDependencies": {
-    "@types/archiver": "^7.0.0",
+    "@types/archiver": "^5.3.2",
    "@types/unzip-stream": "^0.3.4",
-    "typedoc": "^0.28.16",
-    "typedoc-plugin-markdown": "^4.9.0",
-    "typescript": "^5.9.3"
+    "typedoc": "^0.28.13",
+    "typedoc-plugin-markdown": "^3.17.1",
+    "typescript": "^5.2.2"
  },
  "overrides": {
    "uri-js": "npm:uri-js-replace@^1.0.1",
@@ -1,8 +1,8 @@
-import {ArtifactClient, DefaultArtifactClient} from './internal/client.js'
+import {ArtifactClient, DefaultArtifactClient} from './internal/client'

-export * from './internal/shared/interfaces.js'
-export * from './internal/shared/errors.js'
-export * from './internal/client.js'
+export * from './internal/shared/interfaces'
+export * from './internal/shared/errors'
+export * from './internal/client'

 const client: ArtifactClient = new DefaultArtifactClient()
 export default client
@@ -1,4 +1,4 @@
-export * from './google/protobuf/timestamp.js'
-export * from './google/protobuf/wrappers.js'
-export * from './results/api/v1/artifact.js'
-export * from './results/api/v1/artifact.twirp-client.js'
+export * from './google/protobuf/timestamp'
+export * from './google/protobuf/wrappers'
+export * from './results/api/v1/artifact'
+export * from './results/api/v1/artifact.twirp-client'
@@ -12,9 +12,9 @@ import type { PartialMessage } from "@protobuf-ts/runtime";
 import { reflectionMergePartial } from "@protobuf-ts/runtime";
 import { MESSAGE_TYPE } from "@protobuf-ts/runtime";
 import { MessageType } from "@protobuf-ts/runtime";
-import { Int64Value } from "../../../google/protobuf/wrappers.js";
-import { StringValue } from "../../../google/protobuf/wrappers.js";
-import { Timestamp } from "../../../google/protobuf/timestamp.js";
+import { Int64Value } from "../../../google/protobuf/wrappers";
+import { StringValue } from "../../../google/protobuf/wrappers";
+import { Timestamp } from "../../../google/protobuf/timestamp";
 /**
 * @generated from protobuf message github.actions.results.api.v1.MigrateArtifactRequest
 */
@@ -9,7 +9,7 @@ import {
  GetSignedArtifactURLResponse,
  DeleteArtifactRequest,
  DeleteArtifactResponse,
-} from "./artifact.js";
+} from "./artifact";

 //==================================//
 //          Client Code             //
@@ -1,5 +1,5 @@
 import {warning} from '@actions/core'
-import {isGhes} from './shared/config.js'
+import {isGhes} from './shared/config'
 import {
  UploadArtifactOptions,
  UploadArtifactResponse,
@@ -10,22 +10,19 @@ import {
  DownloadArtifactResponse,
  FindOptions,
  DeleteArtifactResponse
-} from './shared/interfaces.js'
-import {uploadArtifact} from './upload/upload-artifact.js'
+} from './shared/interfaces'
+import {uploadArtifact} from './upload/upload-artifact'
 import {
  downloadArtifactPublic,
  downloadArtifactInternal
-} from './download/download-artifact.js'
+} from './download/download-artifact'
 import {
  deleteArtifactPublic,
  deleteArtifactInternal
-} from './delete/delete-artifact.js'
-import {getArtifactPublic, getArtifactInternal} from './find/get-artifact.js'
-import {
-  listArtifactsPublic,
-  listArtifactsInternal
-} from './find/list-artifacts.js'
-import {GHESNotSupportedError} from './shared/errors.js'
+} from './delete/delete-artifact'
+import {getArtifactPublic, getArtifactInternal} from './find/get-artifact'
+import {listArtifactsPublic, listArtifactsInternal} from './find/list-artifacts'
+import {GHESNotSupportedError} from './shared/errors'

 /**
 * Generic interface for the artifact client.
@@ -1,21 +1,21 @@
 import {info, debug} from '@actions/core'
 import {getOctokit} from '@actions/github'
-import {DeleteArtifactResponse} from '../shared/interfaces.js'
-import {getUserAgentString} from '../shared/user-agent.js'
-import {getRetryOptions} from '../find/retry-options.js'
+import {DeleteArtifactResponse} from '../shared/interfaces'
+import {getUserAgentString} from '../shared/user-agent'
+import {getRetryOptions} from '../find/retry-options'
 import {defaults as defaultGitHubOptions} from '@actions/github/lib/utils'
 import {requestLog} from '@octokit/plugin-request-log'
 import {retry} from '@octokit/plugin-retry'
-import type {OctokitOptions} from '@octokit/core/types'
-import {internalArtifactTwirpClient} from '../shared/artifact-twirp-client.js'
-import {getBackendIdsFromToken} from '../shared/util.js'
+import {OctokitOptions} from '@octokit/core/dist-types/types'
+import {internalArtifactTwirpClient} from '../shared/artifact-twirp-client'
+import {getBackendIdsFromToken} from '../shared/util'
 import {
  DeleteArtifactRequest,
  ListArtifactsRequest,
  StringValue
-} from '../../generated/index.js'
-import {getArtifactPublic} from '../find/get-artifact.js'
-import {ArtifactNotFoundError, InvalidResponseError} from '../shared/errors.js'
+} from '../../generated'
+import {getArtifactPublic} from '../find/get-artifact'
+import {ArtifactNotFoundError, InvalidResponseError} from '../shared/errors'

 export async function deleteArtifactPublic(
  artifactName: string,
@@ -10,17 +10,17 @@ import {
  DownloadArtifactOptions,
  DownloadArtifactResponse,
  StreamExtractResponse
-} from '../shared/interfaces.js'
-import {getUserAgentString} from '../shared/user-agent.js'
-import {getGitHubWorkspaceDir} from '../shared/config.js'
-import {internalArtifactTwirpClient} from '../shared/artifact-twirp-client.js'
+} from '../shared/interfaces'
+import {getUserAgentString} from '../shared/user-agent'
+import {getGitHubWorkspaceDir} from '../shared/config'
+import {internalArtifactTwirpClient} from '../shared/artifact-twirp-client'
 import {
  GetSignedArtifactURLRequest,
  Int64Value,
  ListArtifactsRequest
-} from '../../generated/index.js'
-import {getBackendIdsFromToken} from '../shared/util.js'
-import {ArtifactNotFoundError} from '../shared/errors.js'
+} from '../../generated'
+import {getBackendIdsFromToken} from '../shared/util'
+import {ArtifactNotFoundError} from '../shared/errors'

 const scrubQueryParameters = (url: string): string => {
  const parsed = new URL(url)
@@ -1,20 +1,16 @@
 import {getOctokit} from '@actions/github'
 import {retry} from '@octokit/plugin-retry'
 import * as core from '@actions/core'
-import type {OctokitOptions} from '@octokit/core/types'
+import {OctokitOptions} from '@octokit/core/dist-types/types'
 import {defaults as defaultGitHubOptions} from '@actions/github/lib/utils'
-import {getRetryOptions} from './retry-options.js'
+import {getRetryOptions} from './retry-options'
 import {requestLog} from '@octokit/plugin-request-log'
-import {GetArtifactResponse} from '../shared/interfaces.js'
-import {getBackendIdsFromToken} from '../shared/util.js'
-import {getUserAgentString} from '../shared/user-agent.js'
-import {internalArtifactTwirpClient} from '../shared/artifact-twirp-client.js'
-import {
-  ListArtifactsRequest,
-  StringValue,
-  Timestamp
-} from '../../generated/index.js'
-import {ArtifactNotFoundError, InvalidResponseError} from '../shared/errors.js'
+import {GetArtifactResponse} from '../shared/interfaces'
+import {getBackendIdsFromToken} from '../shared/util'
+import {getUserAgentString} from '../shared/user-agent'
+import {internalArtifactTwirpClient} from '../shared/artifact-twirp-client'
+import {ListArtifactsRequest, StringValue, Timestamp} from '../../generated'
+import {ArtifactNotFoundError, InvalidResponseError} from '../shared/errors'

 export async function getArtifactPublic(
  artifactName: string,
@@ -1,16 +1,16 @@
 import {info, warning, debug} from '@actions/core'
 import {getOctokit} from '@actions/github'
-import {ListArtifactsResponse, Artifact} from '../shared/interfaces.js'
-import {getUserAgentString} from '../shared/user-agent.js'
-import {getRetryOptions} from './retry-options.js'
+import {ListArtifactsResponse, Artifact} from '../shared/interfaces'
+import {getUserAgentString} from '../shared/user-agent'
+import {getRetryOptions} from './retry-options'
 import {defaults as defaultGitHubOptions} from '@actions/github/lib/utils'
 import {requestLog} from '@octokit/plugin-request-log'
 import {retry} from '@octokit/plugin-retry'
-import type {OctokitOptions} from '@octokit/core/types'
-import {internalArtifactTwirpClient} from '../shared/artifact-twirp-client.js'
-import {getBackendIdsFromToken} from '../shared/util.js'
-import {getMaxArtifactListCount} from '../shared/config.js'
-import {ListArtifactsRequest, Timestamp} from '../../generated/index.js'
+import {OctokitOptions} from '@octokit/core/dist-types/types'
+import {internalArtifactTwirpClient} from '../shared/artifact-twirp-client'
+import {getBackendIdsFromToken} from '../shared/util'
+import {getMaxArtifactListCount} from '../shared/config'
+import {ListArtifactsRequest, Timestamp} from '../../generated'

 const maximumArtifactCount = getMaxArtifactListCount()
 const paginationCount = 100
@@ -1,5 +1,5 @@
 import * as core from '@actions/core'
-import type {OctokitOptions} from '@octokit/core/types'
+import {OctokitOptions} from '@octokit/core/dist-types/types'
 import {RequestRequestOptions} from '@octokit/types'

 export type RetryOptions = {
@@ -1,11 +1,11 @@
 import {HttpClient, HttpClientResponse, HttpCodes} from '@actions/http-client'
 import {BearerCredentialHandler} from '@actions/http-client/lib/auth'
 import {info, debug} from '@actions/core'
-import {ArtifactServiceClientJSON} from '../../generated/index.js'
-import {getResultsServiceUrl, getRuntimeToken} from './config.js'
-import {getUserAgentString} from './user-agent.js'
-import {NetworkError, UsageError} from './errors.js'
-import {maskSecretUrls} from './util.js'
+import {ArtifactServiceClientJSON} from '../../generated'
+import {getResultsServiceUrl, getRuntimeToken} from './config'
+import {getUserAgentString} from './user-agent'
+import {NetworkError, UsageError} from './errors'
+import {maskSecretUrls} from './util'

 // The twirp http client must implement this interface
 interface Rpc {
@@ -1,7 +0,0 @@
-// This file exists as a CommonJS module to read the version from package.json.
-// In an ESM package, using `require()` directly in .ts files requires disabling
-// ESLint rules and doesn't work reliably across all Node.js versions.
-// By keeping this as a .cjs file, we can use require() naturally and export
-// the version for the ESM modules to import.
-const packageJson = require('../../../package.json')
-module.exports = { version: packageJson.version }
@@ -1,8 +1,9 @@
-import {version} from './package-version.cjs'
+// eslint-disable-next-line @typescript-eslint/no-var-requires, @typescript-eslint/no-require-imports
+const packageJson = require('../../../package.json')

 /**
 * Ensure that this User Agent String is used in all HTTP calls so that we can monitor telemetry between different versions of this package
 */
 export function getUserAgentString(): string {
-  return `@actions/artifact-${version}`
+  return `@actions/artifact-${packageJson.version}`
 }
@@ -1,6 +1,6 @@
 import * as core from '@actions/core'
-import {getRuntimeToken} from './config.js'
-import {jwtDecode} from 'jwt-decode'
+import {getRuntimeToken} from './config'
+import jwt_decode from 'jwt-decode'
 import {debug, setSecret} from '@actions/core'

 export interface BackendIds {
@@ -20,7 +20,7 @@ const InvalidJwtError = new Error(
 // workflow run and workflow job run backend ids
 export function getBackendIdsFromToken(): BackendIds {
  const token = getRuntimeToken()
-  const decoded = jwtDecode<ActionsToken>(token)
+  const decoded = jwt_decode<ActionsToken>(token)
  if (!decoded.scp) {
    throw InvalidJwtError
  }
@@ -1,15 +1,15 @@
 import {BlobClient, BlockBlobUploadStreamOptions} from '@azure/storage-blob'
 import {TransferProgressEvent} from '@azure/core-http-compat'
-import {ZipUploadStream} from './zip.js'
+import {ZipUploadStream} from './zip'
 import {
  getUploadChunkSize,
  getConcurrency,
  getUploadChunkTimeout
-} from '../shared/config.js'
+} from '../shared/config'
 import * as core from '@actions/core'
 import * as crypto from 'crypto'
 import * as stream from 'stream'
-import {NetworkError} from '../shared/errors.js'
+import {NetworkError} from '../shared/errors'

 export interface BlobUploadResponse {
  /**
@@ -1,4 +1,4 @@
-import {Timestamp} from '../../generated/index.js'
+import {Timestamp} from '../../generated'
 import * as core from '@actions/core'

 export function getExpiration(retentionDays?: number): Timestamp | undefined {
@@ -2,24 +2,24 @@ import * as core from '@actions/core'
 import {
  UploadArtifactOptions,
  UploadArtifactResponse
-} from '../shared/interfaces.js'
-import {getExpiration} from './retention.js'
-import {validateArtifactName} from './path-and-artifact-name-validation.js'
-import {internalArtifactTwirpClient} from '../shared/artifact-twirp-client.js'
+} from '../shared/interfaces'
+import {getExpiration} from './retention'
+import {validateArtifactName} from './path-and-artifact-name-validation'
+import {internalArtifactTwirpClient} from '../shared/artifact-twirp-client'
 import {
  UploadZipSpecification,
  getUploadZipSpecification,
  validateRootDirectory
-} from './upload-zip-specification.js'
-import {getBackendIdsFromToken} from '../shared/util.js'
-import {uploadZipToBlobStorage} from './blob-upload.js'
-import {createZipUploadStream} from './zip.js'
+} from './upload-zip-specification'
+import {getBackendIdsFromToken} from '../shared/util'
+import {uploadZipToBlobStorage} from './blob-upload'
+import {createZipUploadStream} from './zip'
 import {
  CreateArtifactRequest,
  FinalizeArtifactRequest,
  StringValue
-} from '../../generated/index.js'
-import {FilesNotFoundError, InvalidResponseError} from '../shared/errors.js'
+} from '../../generated'
+import {FilesNotFoundError, InvalidResponseError} from '../shared/errors'

 export async function uploadArtifact(
  name: string,
@@ -1,7 +1,7 @@
 import * as fs from 'fs'
 import {info} from '@actions/core'
 import {normalize, resolve} from 'path'
-import {validateFilePath} from './path-and-artifact-name-validation.js'
+import {validateFilePath} from './path-and-artifact-name-validation'

 export interface UploadZipSpecification {
  /**
@@ -1,9 +1,9 @@
 import * as stream from 'stream'
 import {realpath} from 'fs/promises'
-import archiver from 'archiver'
+import * as archiver from 'archiver'
 import * as core from '@actions/core'
-import {UploadZipSpecification} from './upload-zip-specification.js'
-import {getUploadChunkSize} from '../shared/config.js'
+import {UploadZipSpecification} from './upload-zip-specification'
+import {getUploadChunkSize} from '../shared/config'

 export const DEFAULT_COMPRESSION_LEVEL = 6

@@ -4,8 +4,6 @@
    "baseUrl": "./",
    "outDir": "./lib",
    "rootDir": "./src",
-    "module": "node16",
-    "moduleResolution": "node16",
    "paths": {
      "@actions/core": [
        "../core"
@@ -1,16 +1,5 @@
 # @actions/attest Releases

-### 2.2.1
-
- Bump `@actions/http-client` to `3.0.2`
- Bump `undici` to `6.23.0`
-
-### 2.2.0
-
- Bump @actions/core from 1.11.1 to 2.0.2
- Bump @actions/github from 6.0.0 to 7.0.0
- Bump @actions/http-client from 2.2.3 to 3.0.1
-
 ### 2.0.0

 - Add support for Node 24 [#2110](https://github.com/actions/toolkit/pull/2110)
@@ -1,17 +1,17 @@
 {
  "name": "@actions/attest",
-  "version": "2.2.1",
+  "version": "2.1.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@actions/attest",
-      "version": "2.2.1",
+      "version": "2.1.0",
      "license": "MIT",
      "dependencies": {
-        "@actions/core": "^2.0.2",
-        "@actions/github": "^7.0.0",
-        "@actions/http-client": "^3.0.2",
+        "@actions/core": "^1.11.1",
+        "@actions/github": "^6.0.0",
+        "@actions/http-client": "^2.2.3",
        "@octokit/plugin-retry": "^6.0.1",
        "@sigstore/bundle": "^3.1.0",
        "@sigstore/sign": "^3.1.0",
@@ -22,35 +22,35 @@
        "@sigstore/rekor-types": "^3.0.0",
        "@types/jsonwebtoken": "^9.0.6",
        "nock": "^13.5.1",
-        "undici": "^6.23.0"
+        "undici": "^6.20.0"
      }
    },
    "node_modules/@actions/core": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/@actions/core/-/core-2.0.2.tgz",
-      "integrity": "sha512-Ast1V7yHbGAhplAsuVlnb/5J8Mtr/Zl6byPPL+Qjq3lmfIgWF1ak1iYfF/079cRERiuTALTXkSuEUdZeDCfGtA==",
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.11.1.tgz",
+      "integrity": "sha512-hXJCSrkwfA46Vd9Z3q4cpEpHB1rL5NG04+/rbqW9d3+CSvtB1tYe8UTpAlixa1vj0m/ULglfEK2UKxMGxCxv5A==",
      "license": "MIT",
      "dependencies": {
-        "@actions/exec": "^2.0.0",
-        "@actions/http-client": "^3.0.1"
+        "@actions/exec": "^1.1.1",
+        "@actions/http-client": "^2.0.1"
      }
    },
    "node_modules/@actions/exec": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-2.0.0.tgz",
-      "integrity": "sha512-k8ngrX2voJ/RIN6r9xB82NVqKpnMRtxDoiO+g3olkIUpQNqjArXrCQceduQZCQj3P3xm32pChRLqRrtXTlqhIw==",
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-1.1.1.tgz",
+      "integrity": "sha512-+sCcHHbVdk93a0XT19ECtO/gIXoxvdsgQLzb2fE2/5sIZmWQuluYyjPQtrtTHdU1YzTZ7bAPN4sITq2xi1679w==",
      "license": "MIT",
      "dependencies": {
-        "@actions/io": "^2.0.0"
+        "@actions/io": "^1.0.1"
      }
    },
    "node_modules/@actions/github": {
-      "version": "7.0.0",
-      "resolved": "https://registry.npmjs.org/@actions/github/-/github-7.0.0.tgz",
-      "integrity": "sha512-PyGODO938aoBTZd/IfN/+e+Pd5hUcVpyf+thm4CPESLeqhdSkq5QwMTGX9v84XHE1ifmHWBQ60KB8kIgm96opw==",
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/@actions/github/-/github-6.0.1.tgz",
+      "integrity": "sha512-xbZVcaqD4XnQAe35qSQqskb3SqIAfRyLBrHMd/8TuL7hJSz2QtbDwnNM8zWx4zO5l2fnGtseNE3MbEvD7BxVMw==",
      "license": "MIT",
      "dependencies": {
-        "@actions/http-client": "^3.0.1",
+        "@actions/http-client": "^2.2.0",
        "@octokit/core": "^5.0.1",
        "@octokit/plugin-paginate-rest": "^9.2.2",
        "@octokit/plugin-rest-endpoint-methods": "^10.4.0",
@@ -72,19 +72,31 @@
      }
    },
    "node_modules/@actions/http-client": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.2.tgz",
-      "integrity": "sha512-JP38FYYpyqvUsz+Igqlc/JG6YO9PaKuvqjM3iGvaLqFnJ7TFmcLyy2IDrY0bI0qCQug8E9K+elv5ZNfw62ZJzA==",
+      "version": "2.2.3",
+      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-2.2.3.tgz",
+      "integrity": "sha512-mx8hyJi/hjFvbPokCg4uRd4ZX78t+YyRPtnKWwIl+RzNaVuFpQHfmlGVfsKEJN8LwTCvL+DfVgAM04XaHkm6bA==",
      "license": "MIT",
      "dependencies": {
        "tunnel": "^0.0.6",
-        "undici": "^6.23.0"
+        "undici": "^5.25.4"
+      }
+    },
+    "node_modules/@actions/http-client/node_modules/undici": {
+      "version": "5.29.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-5.29.0.tgz",
+      "integrity": "sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==",
+      "license": "MIT",
+      "dependencies": {
+        "@fastify/busboy": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=14.0"
      }
    },
    "node_modules/@actions/io": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/@actions/io/-/io-2.0.0.tgz",
-      "integrity": "sha512-Jv33IN09XLO+0HS79aaODsvIRyduiF7NY/F6LYeK5oeUmrsz7aFdRphQjFoESF4jS7lMauDOttKALcpapVDIAg==",
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.3.tgz",
+      "integrity": "sha512-wi9JjgKLYS7U/z8PPbco+PvTb/nRWjeoFlJ1Qer83k/3C5PHQi28hiVdeE2kHXmIL99mQFawx8qt/JPjZilJ8Q==",
      "license": "MIT"
    },
    "node_modules/@fastify/busboy": {
@@ -193,21 +205,6 @@
        "node": ">= 18"
      }
    },
-    "node_modules/@octokit/core/node_modules/@octokit/openapi-types": {
-      "version": "24.2.0",
-      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
-      "integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
-      "license": "MIT"
-    },
-    "node_modules/@octokit/core/node_modules/@octokit/types": {
-      "version": "13.10.0",
-      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
-      "integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
-      "license": "MIT",
-      "dependencies": {
-        "@octokit/openapi-types": "^24.2.0"
-      }
-    },
    "node_modules/@octokit/endpoint": {
      "version": "9.0.6",
      "resolved": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-9.0.6.tgz",
@@ -221,21 +218,6 @@
        "node": ">= 18"
      }
    },
-    "node_modules/@octokit/endpoint/node_modules/@octokit/openapi-types": {
-      "version": "24.2.0",
-      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
-      "integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
-      "license": "MIT"
-    },
-    "node_modules/@octokit/endpoint/node_modules/@octokit/types": {
-      "version": "13.10.0",
-      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
-      "integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
-      "license": "MIT",
-      "dependencies": {
-        "@octokit/openapi-types": "^24.2.0"
-      }
-    },
    "node_modules/@octokit/graphql": {
      "version": "7.1.1",
      "resolved": "https://registry.npmjs.org/@octokit/graphql/-/graphql-7.1.1.tgz",
@@ -250,27 +232,12 @@
        "node": ">= 18"
      }
    },
-    "node_modules/@octokit/graphql/node_modules/@octokit/openapi-types": {
+    "node_modules/@octokit/openapi-types": {
      "version": "24.2.0",
      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
      "integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
      "license": "MIT"
    },
-    "node_modules/@octokit/graphql/node_modules/@octokit/types": {
-      "version": "13.10.0",
-      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
-      "integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
-      "license": "MIT",
-      "dependencies": {
-        "@octokit/openapi-types": "^24.2.0"
-      }
-    },
-    "node_modules/@octokit/openapi-types": {
-      "version": "20.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
-      "integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA==",
-      "license": "MIT"
-    },
    "node_modules/@octokit/plugin-paginate-rest": {
      "version": "9.2.2",
      "resolved": "https://registry.npmjs.org/@octokit/plugin-paginate-rest/-/plugin-paginate-rest-9.2.2.tgz",
@@ -286,6 +253,21 @@
        "@octokit/core": "5"
      }
    },
+    "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/openapi-types": {
+      "version": "20.0.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
+      "integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA==",
+      "license": "MIT"
+    },
+    "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/types": {
+      "version": "12.6.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
+      "integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
+      "license": "MIT",
+      "dependencies": {
+        "@octokit/openapi-types": "^20.0.0"
+      }
+    },
    "node_modules/@octokit/plugin-rest-endpoint-methods": {
      "version": "10.4.1",
      "resolved": "https://registry.npmjs.org/@octokit/plugin-rest-endpoint-methods/-/plugin-rest-endpoint-methods-10.4.1.tgz",
@@ -301,6 +283,21 @@
        "@octokit/core": "5"
      }
    },
+    "node_modules/@octokit/plugin-rest-endpoint-methods/node_modules/@octokit/openapi-types": {
+      "version": "20.0.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
+      "integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA==",
+      "license": "MIT"
+    },
+    "node_modules/@octokit/plugin-rest-endpoint-methods/node_modules/@octokit/types": {
+      "version": "12.6.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
+      "integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
+      "license": "MIT",
+      "dependencies": {
+        "@octokit/openapi-types": "^20.0.0"
+      }
+    },
    "node_modules/@octokit/plugin-retry": {
      "version": "6.1.0",
      "resolved": "https://registry.npmjs.org/@octokit/plugin-retry/-/plugin-retry-6.1.0.tgz",
@@ -318,21 +315,6 @@
        "@octokit/core": "5"
      }
    },
-    "node_modules/@octokit/plugin-retry/node_modules/@octokit/openapi-types": {
-      "version": "24.2.0",
-      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
-      "integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
-      "license": "MIT"
-    },
-    "node_modules/@octokit/plugin-retry/node_modules/@octokit/types": {
-      "version": "13.10.0",
-      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
-      "integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
-      "license": "MIT",
-      "dependencies": {
-        "@octokit/openapi-types": "^24.2.0"
-      }
-    },
    "node_modules/@octokit/request": {
      "version": "8.4.1",
      "resolved": "https://registry.npmjs.org/@octokit/request/-/request-8.4.1.tgz",
@@ -362,43 +344,13 @@
        "node": ">= 18"
      }
    },
-    "node_modules/@octokit/request-error/node_modules/@octokit/openapi-types": {
-      "version": "24.2.0",
-      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
-      "integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
-      "license": "MIT"
-    },
-    "node_modules/@octokit/request-error/node_modules/@octokit/types": {
-      "version": "13.10.0",
-      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
-      "integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
-      "license": "MIT",
-      "dependencies": {
-        "@octokit/openapi-types": "^24.2.0"
-      }
-    },
-    "node_modules/@octokit/request/node_modules/@octokit/openapi-types": {
-      "version": "24.2.0",
-      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
-      "integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
-      "license": "MIT"
-    },
-    "node_modules/@octokit/request/node_modules/@octokit/types": {
-      "version": "13.10.0",
-      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
-      "integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
-      "license": "MIT",
-      "dependencies": {
-        "@octokit/openapi-types": "^24.2.0"
-      }
-    },
    "node_modules/@octokit/types": {
-      "version": "12.6.0",
-      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
-      "integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
+      "version": "13.10.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+      "integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
      "license": "MIT",
      "dependencies": {
-        "@octokit/openapi-types": "^20.0.0"
+        "@octokit/openapi-types": "^24.2.0"
      }
    },
    "node_modules/@peculiar/asn1-cms": {
@@ -1621,9 +1573,9 @@
      }
    },
    "node_modules/tar": {
-      "version": "7.5.6",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.6.tgz",
-      "integrity": "sha512-xqUeu2JAIJpXyvskvU3uvQW8PAmHrtXp2KDuMJwQqW8Sqq0CaZBAQ+dKS3RBXVhU4wC5NjAdKrmh84241gO9cA==",
+      "version": "7.5.2",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.2.tgz",
+      "integrity": "sha512-7NyxrTE4Anh8km8iEy7o0QYPs+0JKBTj5ZaqHg6B39erLg0qYXN3BijtShwbsNSvQ+LN75+KV+C4QR/f6Gwnpg==",
      "license": "BlueOak-1.0.0",
      "dependencies": {
        "@isaacs/fs-minipass": "^4.0.0",
@@ -1673,9 +1625,10 @@
      }
    },
    "node_modules/undici": {
-      "version": "6.23.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-6.23.0.tgz",
-      "integrity": "sha512-VfQPToRA5FZs/qJxLIinmU59u0r7LXqoJkCzinq3ckNJp3vKEh7jTWN589YQ5+aoAC/TGRLyJLCPKcLQbM8r9g==",
+      "version": "6.21.3",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-6.21.3.tgz",
+      "integrity": "sha512-gBLkYIlEnSp8pFbT64yFgGE6UIB9tAkhukC23PmMDCe5Nd+cRqKxSjw5y54MK2AZMgZfJWMaNE4nYUHgi1XEOw==",
+      "dev": true,
      "license": "MIT",
      "engines": {
        "node": ">=18.17"
@@ -1,6 +1,6 @@
 {
  "name": "@actions/attest",
-  "version": "2.2.1",
+  "version": "2.1.0",
  "description": "Actions attestation lib",
  "keywords": [
    "github",
@@ -39,12 +39,12 @@
    "@sigstore/rekor-types": "^3.0.0",
    "@types/jsonwebtoken": "^9.0.6",
    "nock": "^13.5.1",
-    "undici": "^6.23.0"
+    "undici": "^6.20.0"
  },
  "dependencies": {
-    "@actions/core": "^2.0.2",
-    "@actions/github": "^7.0.0",
-    "@actions/http-client": "^3.0.2",
+    "@actions/core": "^1.11.1",
+    "@actions/github": "^6.0.0",
+    "@actions/http-client": "^2.2.3",
    "@octokit/plugin-retry": "^6.0.1",
    "@sigstore/bundle": "^3.1.0",
    "@sigstore/sign": "^3.1.0",
@@ -1,34 +1,5 @@
 # @actions/cache Releases

-### 5.0.5
-
- Bump `@actions/glob` to `0.5.1`
-
-### 5.0.4
-
- Bump `@actions/http-client` to `3.0.2`
-
-### 5.0.3
-
-Prevent retries for rate limited cache operations [2243](https://github.com/actions/toolkit/pull/2243).
-
-### 5.0.1
-
- Fix Node.js 24 punycode deprecation warning by updating `@azure/storage-blob` from `^12.13.0` to `^12.29.1` [#2213](https://github.com/actions/toolkit/pull/2213)
- Newer storage-blob uses `@azure/core-rest-pipeline` instead of deprecated `@azure/core-http`, which eliminates the transitive dependency on `node-fetch@2` → `whatwg-url@5` → `tr46@0.0.3` that used the deprecated punycode module
-
-### 5.0.0
-
- Remove `@azure/ms-rest-js` dependency [#2197](https://github.com/actions/toolkit/pull/2197)
-  - The `TransferProgressEvent` type is now imported from `@azure/core-rest-pipeline` instead of `@azure/ms-rest-js`
- Bump `@actions/core` from `^1.11.1` to `^2.0.0` [#2198](https://github.com/actions/toolkit/pull/2198)
- Bump `@actions/exec` from `^1.0.1` to `^2.0.0` [#2198](https://github.com/actions/toolkit/pull/2198)
- Bump `@actions/glob` from `^0.1.0` to `^0.5.0` [#2198](https://github.com/actions/toolkit/pull/2198)
- Bump `@actions/http-client` from `^2.1.1` to `^3.0.0` [#2198](https://github.com/actions/toolkit/pull/2198)
- Bump `@actions/io` from `^1.0.1` to `^2.0.0` [#2198](https://github.com/actions/toolkit/pull/2198)
- Add support for Node.js 24 [#2110](https://github.com/actions/toolkit/pull/2110)
- Add `node-fetch` override to resolve audit vulnerabilities [#2110](https://github.com/actions/toolkit/pull/2110)
-
 ### 4.1.0

 - Remove client side 10GiB cache size limit check & update twirp client [#2118](https://github.com/actions/toolkit/pull/2118)
@@ -1,174 +0,0 @@
-import * as http from 'http'
-import * as net from 'net'
-import {HttpClient} from '@actions/http-client'
-import * as core from '@actions/core'
-import * as config from '../src/internal/config'
-import * as cacheUtils from '../src/internal/cacheUtils'
-import {internalCacheTwirpClient} from '../src/internal/shared/cacheTwirpClient'
-
-jest.mock('@actions/http-client')
-
-const clientOptions = {
-  maxAttempts: 5,
-  retryIntervalMs: 1,
-  retryMultiplier: 1.5
-}
-
-// noopLogs mocks the console.log and core.* functions to prevent output in the console while testing
-const noopLogs = (): void => {
-  jest.spyOn(console, 'log').mockImplementation(() => {})
-  jest.spyOn(core, 'debug').mockImplementation(() => {})
-  jest.spyOn(core, 'info').mockImplementation(() => {})
-  jest.spyOn(core, 'warning').mockImplementation(() => {})
-}
-
-describe('cacheTwirpClient', () => {
-  beforeAll(() => {
-    noopLogs()
-    jest
-      .spyOn(config, 'getCacheServiceURL')
-      .mockReturnValue('http://localhost:8080')
-    jest.spyOn(cacheUtils, 'getRuntimeToken').mockReturnValue('token')
-  })
-
-  beforeEach(() => {
-    jest.clearAllMocks()
-  })
-
-  it('should fail immediately on 429 rate limit without retrying', async () => {
-    const mockPost = jest.fn(() => {
-      const msg = new http.IncomingMessage(new net.Socket())
-      msg.statusCode = 429
-      msg.statusMessage = 'Too Many Requests'
-      return {
-        message: msg,
-        readBody: async () => {
-          return Promise.resolve(`{"ok": false}`)
-        }
-      }
-    })
-
-    ;(HttpClient as unknown as jest.Mock).mockImplementation(() => {
-      return {
-        post: mockPost
-      }
-    })
-
-    const client = internalCacheTwirpClient(clientOptions)
-    await expect(
-      client.CreateCacheEntry({
-        key: 'test-key',
-        version: 'test-version'
-      })
-    ).rejects.toThrow(
-      'Failed to CreateCacheEntry: Rate limited: Failed request: (429) Too Many Requests'
-    )
-
-    // Should only be called once - no retries for 429
-    expect(mockPost).toHaveBeenCalledTimes(1)
-  })
-
-  it('should log warning with retry-after header on 429', async () => {
-    const warningSpy = jest.spyOn(core, 'warning')
-
-    const mockPost = jest.fn(() => {
-      const msg = new http.IncomingMessage(new net.Socket())
-      msg.statusCode = 429
-      msg.statusMessage = 'Too Many Requests'
-      msg.headers = {'retry-after': '60'}
-      return {
-        message: msg,
-        readBody: async () => {
-          return Promise.resolve(`{"ok": false}`)
-        }
-      }
-    })
-
-    ;(HttpClient as unknown as jest.Mock).mockImplementation(() => {
-      return {
-        post: mockPost
-      }
-    })
-
-    const client = internalCacheTwirpClient(clientOptions)
-    await expect(
-      client.CreateCacheEntry({
-        key: 'test-key',
-        version: 'test-version'
-      })
-    ).rejects.toThrow('Rate limited')
-
-    expect(mockPost).toHaveBeenCalledTimes(1)
-    expect(warningSpy).toHaveBeenCalledWith(
-      "You've hit a rate limit, your rate limit will reset in 60 seconds"
-    )
-  })
-
-  it('should not log warning if retry-after header is missing on 429', async () => {
-    const warningSpy = jest.spyOn(core, 'warning')
-
-    const mockPost = jest.fn(() => {
-      const msg = new http.IncomingMessage(new net.Socket())
-      msg.statusCode = 429
-      msg.statusMessage = 'Too Many Requests'
-      // No retry-after header
-      return {
-        message: msg,
-        readBody: async () => {
-          return Promise.resolve(`{"ok": false}`)
-        }
-      }
-    })
-
-    ;(HttpClient as unknown as jest.Mock).mockImplementation(() => {
-      return {
-        post: mockPost
-      }
-    })
-
-    const client = internalCacheTwirpClient(clientOptions)
-    await expect(
-      client.CreateCacheEntry({
-        key: 'test-key',
-        version: 'test-version'
-      })
-    ).rejects.toThrow('Rate limited')
-
-    expect(mockPost).toHaveBeenCalledTimes(1)
-    expect(warningSpy).not.toHaveBeenCalled()
-  })
-
-  it('should not log warning if retry-after header is invalid on 429', async () => {
-    const warningSpy = jest.spyOn(core, 'warning')
-
-    const mockPost = jest.fn(() => {
-      const msg = new http.IncomingMessage(new net.Socket())
-      msg.statusCode = 429
-      msg.statusMessage = 'Too Many Requests'
-      msg.headers = {'retry-after': 'invalid'}
-      return {
-        message: msg,
-        readBody: async () => {
-          return Promise.resolve(`{"ok": false}`)
-        }
-      }
-    })
-
-    ;(HttpClient as unknown as jest.Mock).mockImplementation(() => {
-      return {
-        post: mockPost
-      }
-    })
-
-    const client = internalCacheTwirpClient(clientOptions)
-    await expect(
-      client.CreateCacheEntry({
-        key: 'test-key',
-        version: 'test-version'
-      })
-    ).rejects.toThrow('Rate limited')
-
-    expect(mockPost).toHaveBeenCalledTimes(1)
-    expect(warningSpy).not.toHaveBeenCalled()
-  })
-})
@@ -1,22 +1,22 @@
 {
  "name": "@actions/cache",
-  "version": "5.0.5",
+  "version": "5.0.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@actions/cache",
-      "version": "5.0.5",
+      "version": "5.0.0",
      "license": "MIT",
      "dependencies": {
-        "@actions/core": "^2.0.0",
-        "@actions/exec": "^2.0.0",
-        "@actions/glob": "^0.5.1",
-        "@actions/http-client": "^3.0.2",
-        "@actions/io": "^2.0.0",
+        "@actions/core": "^1.11.1",
+        "@actions/exec": "^1.0.1",
+        "@actions/glob": "^0.1.0",
+        "@actions/http-client": "^2.1.1",
+        "@actions/io": "^1.0.1",
        "@azure/abort-controller": "^1.1.0",
        "@azure/core-rest-pipeline": "^1.22.0",
-        "@azure/storage-blob": "^12.29.1",
+        "@azure/storage-blob": "^12.13.0",
        "@protobuf-ts/runtime-rpc": "^2.11.1",
        "semver": "^6.3.1"
      },
@@ -28,57 +28,48 @@
      }
    },
    "node_modules/@actions/core": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/@actions/core/-/core-2.0.3.tgz",
-      "integrity": "sha512-Od9Thc3T1mQJYddvVPM4QGiLUewdh+3txmDYHHxoNdkqysR1MbCT+rFOtNUxYAz+7+6RIsqipVahY2GJqGPyxA==",
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.11.1.tgz",
+      "integrity": "sha512-hXJCSrkwfA46Vd9Z3q4cpEpHB1rL5NG04+/rbqW9d3+CSvtB1tYe8UTpAlixa1vj0m/ULglfEK2UKxMGxCxv5A==",
      "license": "MIT",
      "dependencies": {
-        "@actions/exec": "^2.0.0",
-        "@actions/http-client": "^3.0.2"
+        "@actions/exec": "^1.1.1",
+        "@actions/http-client": "^2.0.1"
      }
    },
    "node_modules/@actions/exec": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-2.0.0.tgz",
-      "integrity": "sha512-k8ngrX2voJ/RIN6r9xB82NVqKpnMRtxDoiO+g3olkIUpQNqjArXrCQceduQZCQj3P3xm32pChRLqRrtXTlqhIw==",
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-1.1.1.tgz",
+      "integrity": "sha512-+sCcHHbVdk93a0XT19ECtO/gIXoxvdsgQLzb2fE2/5sIZmWQuluYyjPQtrtTHdU1YzTZ7bAPN4sITq2xi1679w==",
      "license": "MIT",
      "dependencies": {
-        "@actions/io": "^2.0.0"
+        "@actions/io": "^1.0.1"
      }
    },
    "node_modules/@actions/glob": {
-      "version": "0.5.1",
-      "resolved": "https://registry.npmjs.org/@actions/glob/-/glob-0.5.1.tgz",
-      "integrity": "sha512-+dv/t2aKQdKp9WWSp+1yIXVJzH5Q38M0Mta26pzIbeec14EcIleMB7UU6N7sNgbEuYfyuVGpE5pOKjl6j1WXkA==",
+      "version": "0.1.2",
+      "resolved": "https://registry.npmjs.org/@actions/glob/-/glob-0.1.2.tgz",
+      "integrity": "sha512-SclLR7Ia5sEqjkJTPs7Sd86maMDw43p769YxBOxvPvEWuPEhpAnBsQfENOpXjFYMmhCqd127bmf+YdvJqVqR4A==",
      "license": "MIT",
      "dependencies": {
-        "@actions/core": "^2.0.3",
+        "@actions/core": "^1.2.6",
        "minimatch": "^3.0.4"
      }
    },
    "node_modules/@actions/http-client": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.2.tgz",
-      "integrity": "sha512-JP38FYYpyqvUsz+Igqlc/JG6YO9PaKuvqjM3iGvaLqFnJ7TFmcLyy2IDrY0bI0qCQug8E9K+elv5ZNfw62ZJzA==",
+      "version": "2.2.3",
+      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-2.2.3.tgz",
+      "integrity": "sha512-mx8hyJi/hjFvbPokCg4uRd4ZX78t+YyRPtnKWwIl+RzNaVuFpQHfmlGVfsKEJN8LwTCvL+DfVgAM04XaHkm6bA==",
      "license": "MIT",
      "dependencies": {
        "tunnel": "^0.0.6",
-        "undici": "^6.23.0"
-      }
-    },
-    "node_modules/@actions/http-client/node_modules/undici": {
-      "version": "6.23.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-6.23.0.tgz",
-      "integrity": "sha512-VfQPToRA5FZs/qJxLIinmU59u0r7LXqoJkCzinq3ckNJp3vKEh7jTWN589YQ5+aoAC/TGRLyJLCPKcLQbM8r9g==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=18.17"
+        "undici": "^5.25.4"
      }
    },
    "node_modules/@actions/io": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/@actions/io/-/io-2.0.0.tgz",
-      "integrity": "sha512-Jv33IN09XLO+0HS79aaODsvIRyduiF7NY/F6LYeK5oeUmrsz7aFdRphQjFoESF4jS7lMauDOttKALcpapVDIAg==",
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.3.tgz",
+      "integrity": "sha512-wi9JjgKLYS7U/z8PPbco+PvTb/nRWjeoFlJ1Qer83k/3C5PHQi28hiVdeE2kHXmIL99mQFawx8qt/JPjZilJ8Q==",
      "license": "MIT"
    },
    "node_modules/@azure/abort-controller": {
@@ -410,6 +401,15 @@
        "node": ">=14.17"
      }
    },
+    "node_modules/@fastify/busboy": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/@fastify/busboy/-/busboy-2.1.1.tgz",
+      "integrity": "sha512-vBZP4NlzfOlerQTnba4aqZoMhE/a9HY7HRqoOPaETQcSQuWEIyZMHGfVu6w9wGtGK5fED5qRs2DteVCjOH60sA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=14"
+      }
+    },
    "node_modules/@protobuf-ts/plugin": {
      "version": "2.11.1",
      "resolved": "https://registry.npmjs.org/@protobuf-ts/plugin/-/plugin-2.11.1.tgz",
@@ -673,6 +673,7 @@
      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
      "dev": true,
      "license": "Apache-2.0",
+      "peer": true,
      "bin": {
        "tsc": "bin/tsc",
        "tsserver": "bin/tsserver"
@@ -681,6 +682,18 @@
        "node": ">=14.17"
      }
    },
+    "node_modules/undici": {
+      "version": "5.29.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-5.29.0.tgz",
+      "integrity": "sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==",
+      "license": "MIT",
+      "dependencies": {
+        "@fastify/busboy": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=14.0"
+      }
+    },
    "node_modules/undici-types": {
      "version": "7.16.0",
      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz",
@@ -1,6 +1,6 @@
 {
  "name": "@actions/cache",
-  "version": "5.0.5",
+  "version": "5.0.0",
  "preview": true,
  "description": "Actions cache lib",
  "keywords": [
@@ -37,15 +37,15 @@
    "url": "https://github.com/actions/toolkit/issues"
  },
  "dependencies": {
-    "@actions/core": "^2.0.0",
-    "@actions/exec": "^2.0.0",
-    "@actions/glob": "^0.5.1",
+    "@actions/core": "^1.11.1",
+    "@actions/exec": "^1.0.1",
+    "@actions/glob": "^0.1.0",
    "@protobuf-ts/runtime-rpc": "^2.11.1",
-    "@actions/http-client": "^3.0.2",
-    "@actions/io": "^2.0.0",
+    "@actions/http-client": "^2.1.1",
+    "@actions/io": "^1.0.1",
    "@azure/abort-controller": "^1.1.0",
    "@azure/core-rest-pipeline": "^1.22.0",
-    "@azure/storage-blob": "^12.29.1",
+    "@azure/storage-blob": "^12.13.0",
    "semver": "^6.3.1"
  },
  "devDependencies": {
@@ -1,6 +1,6 @@
-import {info, debug, warning} from '@actions/core'
+import {info, debug} from '@actions/core'
 import {getUserAgentString} from './user-agent'
-import {NetworkError, RateLimitError, UsageError} from './errors'
+import {NetworkError, UsageError} from './errors'
 import {getCacheServiceURL} from '../config'
 import {getRuntimeToken} from '../cacheUtils'
 import {BearerCredentialHandler} from '@actions/http-client/lib/auth'
@@ -109,21 +109,6 @@ class CacheServiceClient implements Rpc {

          errorMessage = `${errorMessage}: ${body.msg}`
        }
-
-        // Handle rate limiting - don't retry, just warn and exit
-        // For more info, see https://docs.github.com/en/actions/reference/limits
-        if (statusCode === HttpCodes.TooManyRequests) {
-          const retryAfterHeader = response.message.headers['retry-after']
-          if (retryAfterHeader) {
-            const parsedSeconds = parseInt(retryAfterHeader, 10)
-            if (!isNaN(parsedSeconds) && parsedSeconds > 0) {
-              warning(
-                `You've hit a rate limit, your rate limit will reset in ${parsedSeconds} seconds`
-              )
-            }
-          }
-          throw new RateLimitError(`Rate limited: ${errorMessage}`)
-        }
      } catch (error) {
        if (error instanceof SyntaxError) {
          debug(`Raw Body: ${rawBody}`)
@@ -133,10 +118,6 @@ class CacheServiceClient implements Rpc {
          throw error
        }

-        if (error instanceof RateLimitError) {
-          throw error
-        }
-
        if (NetworkError.isNetworkErrorCode(error?.code)) {
          throw new NetworkError(error?.code)
        }
@@ -181,7 +162,8 @@ class CacheServiceClient implements Rpc {
      HttpCodes.BadGateway,
      HttpCodes.GatewayTimeout,
      HttpCodes.InternalServerError,
-      HttpCodes.ServiceUnavailable
+      HttpCodes.ServiceUnavailable,
+      HttpCodes.TooManyRequests
    ]

    return retryableStatusCodes.includes(statusCode)
@@ -70,10 +70,3 @@ export class UsageError extends Error {
    return msg.includes('insufficient usage')
  }
 }
-
-export class RateLimitError extends Error {
-  constructor(message: string) {
-    super(message)
-    this.name = 'RateLimitError'
-  }
-}
@@ -1,99 +1,70 @@
 # @actions/core Releases

-## 3.0.0
-
- **Breaking change**: Package is now ESM-only
-  - CommonJS consumers must use dynamic `import()` instead of `require()`
-
-## 2.0.3
-
- Bump `@actions/http-client` to `3.0.2`
-
 ## 2.0.1
-
 - Bump @actions/exec from 1.1.1 to 2.0.0 [#2199](https://github.com/actions/toolkit/pull/2199)

 ## 2.0.0
-
 - Add support for Node 24 [#2110](https://github.com/actions/toolkit/pull/2110)
 - Bump @actions/http-client from 2.0.1 to 3.0.0

 ## 1.11.1
-
 - Fix uses of `crypto.randomUUID` on Node 18 and earlier [#1842](https://github.com/actions/toolkit/pull/1842)

 ### 1.11.0
-
 - Add platform info utilities [#1551](https://github.com/actions/toolkit/pull/1551)
 - Remove dependency on `uuid` package [#1824](https://github.com/actions/toolkit/pull/1824)

 ### 1.10.1
-
 - Fix error message reference in oidc utils [#1511](https://github.com/actions/toolkit/pull/1511)

 ### 1.10.0
-
 - `saveState` and `setOutput` now use environment files if available [#1178](https://github.com/actions/toolkit/pull/1178)
 - `getMultilineInput` now correctly trims whitespace by default [#1185](https://github.com/actions/toolkit/pull/1185)

 ### 1.9.1
-
 - Randomize delimiter when calling `core.exportVariable`

 ### 1.9.0
-
 - Added `toPosixPath`, `toWin32Path` and `toPlatformPath` utilities [#1102](https://github.com/actions/toolkit/pull/1102)

 ### 1.8.2
-
 - Update to v2.0.1 of `@actions/http-client` [#1087](https://github.com/actions/toolkit/pull/1087)

 ### 1.8.1
-
 - Update to v2.0.0 of `@actions/http-client`

 ### 1.8.0
-
 - Deprecate `markdownSummary` extension export in favor of `summary`
-  - <https://github.com/actions/toolkit/pull/1072>
-  - <https://github.com/actions/toolkit/pull/1073>
+  - https://github.com/actions/toolkit/pull/1072
+  - https://github.com/actions/toolkit/pull/1073

 ### 1.7.0
-
 - [Added `markdownSummary` extension](https://github.com/actions/toolkit/pull/1014)

 ### 1.6.0
-
 - [Added OIDC Client function `getIDToken`](https://github.com/actions/toolkit/pull/919)
- [Added `file` parameter to `AnnotationProperties`](https://github.com/actions/toolkit/pull/896)
+- [Added `file` parameter to `AnnotationProperties`](https://github.com/actions/toolkit/pull/896) 

 ### 1.5.0
-
 - [Added support for notice annotations and more annotation fields](https://github.com/actions/toolkit/pull/855)

 ### 1.4.0
-
 - [Added the `getMultilineInput` function](https://github.com/actions/toolkit/pull/829)

 ### 1.3.0
-
 - [Added the trimWhitespace option to getInput](https://github.com/actions/toolkit/pull/802)
 - [Added the getBooleanInput function](https://github.com/actions/toolkit/pull/725)

 ### 1.2.7
-
 - [Prepend newline for set-output](https://github.com/actions/toolkit/pull/772)

 ### 1.2.6
-
 - [Update `exportVariable` and `addPath` to use environment files](https://github.com/actions/toolkit/pull/571)

 ### 1.2.5
-
 - [Correctly bundle License File with package](https://github.com/actions/toolkit/pull/548)

 ### 1.2.4
-
 - [Be more lenient in accepting non-string command inputs](https://github.com/actions/toolkit/pull/405)
 - [Add Echo commands](https://github.com/actions/toolkit/pull/411)

@@ -114,7 +85,7 @@

 - saveState and getState functions for wrapper tasks (on finally entry points that run post job)

-### 1.1.3
+### 1.1.3 

 - setSecret added to register a secret with the runner to be masked from the logs
 - exportSecret which was not implemented and never worked was removed after clarification from product.
@@ -1,4 +1,4 @@
-import * as command from '../src/command.js'
+import * as command from '../src/command'
 import * as os from 'os'

 /* eslint-disable @typescript-eslint/unbound-method */
@@ -1,9 +1,9 @@
 import * as fs from 'fs'
 import * as os from 'os'
 import * as path from 'path'
-import * as core from '../src/core.js'
+import * as core from '../src/core'
 import {HttpClient} from '@actions/http-client'
-import {toCommandProperties} from '../src/utils.js'
+import {toCommandProperties} from '../src/utils'

 /* eslint-disable @typescript-eslint/unbound-method */

@@ -1,6 +1,6 @@
 import * as path from 'path'

-import {toPlatformPath, toPosixPath, toWin32Path} from '../src/path-utils.js'
+import {toPlatformPath, toPosixPath, toWin32Path} from '../src/path-utils'

 describe('#toPosixPath', () => {
  const cases: {
@@ -1,5 +1,5 @@
 import os from 'os'
-import {platform} from '../src/core.js'
+import {platform} from '../src/core'

 describe('getInfo', () => {
  it('returns the platform info', async () => {
@@ -1,7 +1,7 @@
 import * as fs from 'fs'
 import * as os from 'os'
 import path from 'path'
-import {summary, SUMMARY_ENV_VAR} from '../src/summary.js'
+import {summary, SUMMARY_ENV_VAR} from '../src/summary'

 const testDirectoryPath = path.join(__dirname, 'test')
 const testFilePath = path.join(testDirectoryPath, 'test-summary.md')
@@ -1,56 +1,62 @@
 {
  "name": "@actions/core",
-  "version": "3.0.0",
+  "version": "2.0.1",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@actions/core",
-      "version": "3.0.0",
+      "version": "2.0.1",
      "license": "MIT",
      "dependencies": {
-        "@actions/exec": "^3.0.0",
-        "@actions/http-client": "^4.0.0"
+        "@actions/exec": "^2.0.0",
+        "@actions/http-client": "^3.0.0"
      },
      "devDependencies": {
-        "@types/node": "^25.1.0"
+        "@types/node": "^16.18.112"
      }
    },
    "node_modules/@actions/exec": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-3.0.0.tgz",
-      "integrity": "sha512-6xH/puSoNBXb72VPlZVm7vQ+svQpFyA96qdDBvhB8eNZOE8LtPf9L4oAsfzK/crCL8YZ+19fKYVnM63Sl+Xzlw==",
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-2.0.0.tgz",
+      "integrity": "sha512-k8ngrX2voJ/RIN6r9xB82NVqKpnMRtxDoiO+g3olkIUpQNqjArXrCQceduQZCQj3P3xm32pChRLqRrtXTlqhIw==",
      "license": "MIT",
      "dependencies": {
-        "@actions/io": "^3.0.2"
+        "@actions/io": "^2.0.0"
      }
    },
    "node_modules/@actions/http-client": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-4.0.0.tgz",
-      "integrity": "sha512-QuwPsgVMsD6qaPD57GLZi9sqzAZCtiJT8kVBCDpLtxhL5MydQ4gS+DrejtZZPdIYyB1e95uCK9Luyds7ybHI3g==",
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.0.tgz",
+      "integrity": "sha512-1s3tXAfVMSz9a4ZEBkXXRQD4QhY3+GAsWSbaYpeknPOKEeyRiU3lH+bHiLMZdo2x/fIeQ/hscL1wCkDLVM2DZQ==",
      "license": "MIT",
      "dependencies": {
        "tunnel": "^0.0.6",
-        "undici": "^6.23.0"
+        "undici": "^5.28.5"
      }
    },
    "node_modules/@actions/io": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/@actions/io/-/io-3.0.2.tgz",
-      "integrity": "sha512-nRBchcMM+QK1pdjO7/idu86rbJI5YHUKCvKs0KxnSYbVe3F51UfGxuZX4Qy/fWlp6l7gWFwIkrOzN+oUK03kfw==",
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/io/-/io-2.0.0.tgz",
+      "integrity": "sha512-Jv33IN09XLO+0HS79aaODsvIRyduiF7NY/F6LYeK5oeUmrsz7aFdRphQjFoESF4jS7lMauDOttKALcpapVDIAg==",
      "license": "MIT"
    },
-    "node_modules/@types/node": {
-      "version": "25.1.0",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-25.1.0.tgz",
-      "integrity": "sha512-t7frlewr6+cbx+9Ohpl0NOTKXZNV9xHRmNOvql47BFJKcEG1CxtxlPEEe+gR9uhVWM4DwhnvTF110mIL4yP9RA==",
-      "dev": true,
+    "node_modules/@fastify/busboy": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/@fastify/busboy/-/busboy-2.1.1.tgz",
+      "integrity": "sha512-vBZP4NlzfOlerQTnba4aqZoMhE/a9HY7HRqoOPaETQcSQuWEIyZMHGfVu6w9wGtGK5fED5qRs2DteVCjOH60sA==",
      "license": "MIT",
-      "dependencies": {
-        "undici-types": "~7.16.0"
+      "engines": {
+        "node": ">=14"
      }
    },
+    "node_modules/@types/node": {
+      "version": "16.18.126",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-16.18.126.tgz",
+      "integrity": "sha512-OTcgaiwfGFBKacvfwuHzzn1KLxH/er8mluiy8/uM3sGXHaRe73RrSIj01jow9t4kJEW633Ov+cOexXeiApTyAw==",
+      "dev": true,
+      "license": "MIT"
+    },
    "node_modules/tunnel": {
      "version": "0.0.6",
      "resolved": "https://registry.npmjs.org/tunnel/-/tunnel-0.0.6.tgz",
@@ -61,20 +67,16 @@
      }
    },
    "node_modules/undici": {
-      "version": "6.23.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-6.23.0.tgz",
-      "integrity": "sha512-VfQPToRA5FZs/qJxLIinmU59u0r7LXqoJkCzinq3ckNJp3vKEh7jTWN589YQ5+aoAC/TGRLyJLCPKcLQbM8r9g==",
+      "version": "5.29.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-5.29.0.tgz",
+      "integrity": "sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==",
      "license": "MIT",
+      "dependencies": {
+        "@fastify/busboy": "^2.0.0"
+      },
      "engines": {
-        "node": ">=18.17"
+        "node": ">=14.0"
      }
-    },
-    "node_modules/undici-types": {
-      "version": "7.16.0",
-      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz",
-      "integrity": "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==",
-      "dev": true,
-      "license": "MIT"
    }
  }
 }
@@ -1,6 +1,6 @@
 {
  "name": "@actions/core",
-  "version": "3.0.0",
+  "version": "2.0.1",
  "description": "Actions core lib",
  "keywords": [
    "github",
@@ -9,15 +9,8 @@
  ],
  "homepage": "https://github.com/actions/toolkit/tree/main/packages/core",
  "license": "MIT",
-  "type": "module",
  "main": "lib/core.js",
  "types": "lib/core.d.ts",
-  "exports": {
-    ".": {
-      "types": "./lib/core.d.ts",
-      "import": "./lib/core.js"
-    }
-  },
  "directories": {
    "lib": "lib",
    "test": "__tests__"
@@ -43,10 +36,10 @@
    "url": "https://github.com/actions/toolkit/issues"
  },
  "dependencies": {
-    "@actions/exec": "^3.0.0",
-    "@actions/http-client": "^4.0.0"
+    "@actions/exec": "^2.0.0",
+    "@actions/http-client": "^3.0.0"
  },
  "devDependencies": {
-    "@types/node": "^25.1.0"
+    "@types/node": "^16.18.112"
  }
 }
@@ -1,5 +1,5 @@
 import * as os from 'os'
-import {toCommandValue} from './utils.js'
+import {toCommandValue} from './utils'

 // For internal use, subject to change.

@@ -1,11 +1,11 @@
-import {issue, issueCommand} from './command.js'
-import {issueFileCommand, prepareKeyValueMessage} from './file-command.js'
-import {toCommandProperties, toCommandValue} from './utils.js'
+import {issue, issueCommand} from './command'
+import {issueFileCommand, prepareKeyValueMessage} from './file-command'
+import {toCommandProperties, toCommandValue} from './utils'

 import * as os from 'os'
 import * as path from 'path'

-import {OidcClient} from './oidc-utils.js'
+import {OidcClient} from './oidc-utils'

 /**
 * Interface for getInput options
@@ -400,19 +400,19 @@ export async function getIDToken(aud?: string): Promise<string> {
 /**
 * Summary exports
 */
-export {summary} from './summary.js'
+export {summary} from './summary'

 /**
 * @deprecated use core.summary
 */
-export {markdownSummary} from './summary.js'
+export {markdownSummary} from './summary'

 /**
 * Path exports
 */
-export {toPosixPath, toWin32Path, toPlatformPath} from './path-utils.js'
+export {toPosixPath, toWin32Path, toPlatformPath} from './path-utils'

 /**
 * Platform utilities exports
 */
-export * as platform from './platform.js'
+export * as platform from './platform'
@@ -6,7 +6,7 @@
 import * as crypto from 'crypto'
 import * as fs from 'fs'
 import * as os from 'os'
-import {toCommandValue} from './utils.js'
+import {toCommandValue} from './utils'

 export function issueFileCommand(command: string, message: any): void {
  const filePath = process.env[`GITHUB_${command}`]
@@ -3,7 +3,7 @@ import * as actions_http_client from '@actions/http-client'
 import {RequestOptions} from '@actions/http-client/lib/interfaces'
 import {HttpClient} from '@actions/http-client'
 import {BearerCredentialHandler} from '@actions/http-client/lib/auth'
-import {debug, setSecret} from './core.js'
+import {debug, setSecret} from './core'
 interface TokenResponse {
  value?: string
 }
@@ -1,8 +1,8 @@
 // We use any as a valid input type
 /* eslint-disable @typescript-eslint/no-explicit-any */

-import {AnnotationProperties} from './core.js'
-import {CommandProperties} from './command.js'
+import {AnnotationProperties} from './core'
+import {CommandProperties} from './command'

 /**
 * Sanitizes an input into a string so it can be passed into issueCommand safely
@@ -4,9 +4,7 @@
    "baseUrl": "./",
    "outDir": "./lib",
    "declaration": true,
-    "rootDir": "./src",
-    "module": "node16",
-    "moduleResolution": "node16"
+    "rootDir": "./src"
  },
  "include": [
    "./src"
@@ -1,20 +1,13 @@
 # @actions/exec Releases

-## 3.0.0
-
- **Breaking change**: Package is now ESM-only
-  - CommonJS consumers must use dynamic `import()` instead of `require()`
-
-## 2.0.0
-
+### 2.0.0
 - Add support for Node 24 [#2110](https://github.com/actions/toolkit/pull/2110)
 - Bump @actions/io dependency from ^1.0.1 to ^2.0.0

-## 1.1.1
+### 1.1.1
+- Update `lockfileVersion` to `v2` in `package-lock.json [#1024](https://github.com/actions/toolkit/pull/1024) 

- Update `lockfileVersion` to `v2` in `package-lock.json` [#1024](https://github.com/actions/toolkit/pull/1024)
-
-## 1.1.0
+### 1.1.0

 - [Fix stdline dropping large output](https://github.com/actions/toolkit/pull/773)
 - [Add getExecOutput function](https://github.com/actions/toolkit/pull/814)
@@ -30,4 +23,4 @@

 ### 1.0.0

- Initial release
+- Initial release
@@ -1,5 +1,5 @@
-import * as exec from '../src/exec.js'
-import * as im from '../src/interfaces.js'
+import * as exec from '../src/exec'
+import * as im from '../src/interfaces'

 import * as childProcess from 'child_process'
 import * as fs from 'fs'
@@ -14,7 +14,7 @@ const IS_WINDOWS = process.platform === 'win32'
 const SPAWN_WAIT_SCRIPT = path.join(
  __dirname,
  'scripts',
-  'spawn-wait-for-file.cjs'
+  'spawn-wait-for-file.js'
 )

 let outstream: stream.Writable
@@ -196,7 +196,7 @@ describe('@actions/exec', () => {
    const scriptPath: string = path.join(
      __dirname,
      'scripts',
-      'stderroutput.cjs'
+      'stderroutput.js'
    )
    const nodePath: string = await io.which('node', true)

@@ -218,7 +218,7 @@ describe('@actions/exec', () => {
    const scriptPath: string = path.join(
      __dirname,
      'scripts',
-      'stderroutput.cjs'
+      'stderroutput.js'
    )
    const nodePath: string = await io.which('node', true)

@@ -255,12 +255,12 @@ describe('@actions/exec', () => {
    const stdErrPath: string = path.join(
      __dirname,
      'scripts',
-      'stderroutput.cjs'
+      'stderroutput.js'
    )
    const stdOutPath: string = path.join(
      __dirname,
      'scripts',
-      'stdoutoutput.cjs'
+      'stdoutoutput.js'
    )
    const nodePath: string = await io.which('node', true)
    let stdoutCalled = false
@@ -295,7 +295,7 @@ describe('@actions/exec', () => {
    const stdlinePath: string = path.join(
      __dirname,
      'scripts',
-      'stdlineoutput.cjs'
+      'stdlineoutput.js'
    )
    const nodePath: string = await io.which('node', true)

@@ -344,7 +344,7 @@ describe('@actions/exec', () => {
    const waitForInput: string = path.join(
      __dirname,
      'scripts',
-      'wait-for-input.cjs'
+      'wait-for-input.js'
    )

    const _testExecOptions = getExecOptions()
@@ -622,12 +622,12 @@ describe('@actions/exec', () => {
    const stdErrPath: string = path.join(
      __dirname,
      'scripts',
-      'stderroutput.cjs'
+      'stderroutput.js'
    )
    const stdOutPath: string = path.join(
      __dirname,
      'scripts',
-      'stdoutoutput.cjs'
+      'stdoutoutput.js'
    )
    const nodePath: string = await io.which('node', true)

@@ -653,12 +653,12 @@ describe('@actions/exec', () => {
    const stdErrPath: string = path.join(
      __dirname,
      'scripts',
-      'stderroutput.cjs'
+      'stderroutput.js'
    )
    const stdOutPath: string = path.join(
      __dirname,
      'scripts',
-      'stdoutoutput.cjs'
+      'stdoutoutput.js'
    )

    const nodePath: string = await io.which('node', true)
@@ -703,12 +703,12 @@ describe('@actions/exec', () => {
    const stdErrPath: string = path.join(
      __dirname,
      'scripts',
-      'stderroutput.cjs'
+      'stderroutput.js'
    )
    const stdOutPath: string = path.join(
      __dirname,
      'scripts',
-      'stdoutoutputlarge.cjs'
+      'stdoutoutputlarge.js'
    )

    const nodePath: string = await io.which('node', true)
@@ -753,7 +753,7 @@ describe('@actions/exec', () => {
    const stdOutPath: string = path.join(
      __dirname,
      'scripts',
-      'stdoutputspecial.cjs'
+      'stdoutputspecial.js'
    )

    const nodePath: string = await io.which('node', true)
@@ -15,10 +15,10 @@ if (!filePath) {
  throw new Error('file is not specified')
 }

-// Spawn wait-for-file.cjs with inherited stdio
+// Spawn wait-for-file.js with inherited stdio
 // This creates a grandchild process that holds the stdio handles open
 // after this process (the child) exits
-const waitScript = path.join(__dirname, 'wait-for-file.cjs')
+const waitScript = path.join(__dirname, 'wait-for-file.js')
 const isWindows = process.platform === 'win32'

 // On Windows, use detached:true to properly keep streams open
@@ -1,21 +1,21 @@
 {
  "name": "@actions/exec",
-  "version": "3.0.0",
+  "version": "2.0.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@actions/exec",
-      "version": "3.0.0",
+      "version": "2.0.0",
      "license": "MIT",
      "dependencies": {
-        "@actions/io": "^3.0.2"
+        "@actions/io": "^2.0.0"
      }
    },
    "node_modules/@actions/io": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/@actions/io/-/io-3.0.2.tgz",
-      "integrity": "sha512-nRBchcMM+QK1pdjO7/idu86rbJI5YHUKCvKs0KxnSYbVe3F51UfGxuZX4Qy/fWlp6l7gWFwIkrOzN+oUK03kfw==",
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@actions/io/-/io-2.0.0.tgz",
+      "integrity": "sha512-Jv33IN09XLO+0HS79aaODsvIRyduiF7NY/F6LYeK5oeUmrsz7aFdRphQjFoESF4jS7lMauDOttKALcpapVDIAg==",
      "license": "MIT"
    }
  }
@@ -1,6 +1,6 @@
 {
  "name": "@actions/exec",
-  "version": "3.0.0",
+  "version": "2.0.0",
  "description": "Actions exec lib",
  "keywords": [
    "github",
@@ -9,15 +9,8 @@
  ],
  "homepage": "https://github.com/actions/toolkit/tree/main/packages/exec",
  "license": "MIT",
-  "type": "module",
  "main": "lib/exec.js",
  "types": "lib/exec.d.ts",
-  "exports": {
-    ".": {
-      "types": "./lib/exec.d.ts",
-      "import": "./lib/exec.js"
-    }
-  },
  "directories": {
    "lib": "lib",
    "test": "__tests__"
@@ -43,6 +36,6 @@
    "url": "https://github.com/actions/toolkit/issues"
  },
  "dependencies": {
-    "@actions/io": "^3.0.2"
+    "@actions/io": "^2.0.0"
  }
 }
@@ -1,6 +1,6 @@
 import {StringDecoder} from 'string_decoder'
-import {ExecOptions, ExecOutput, ExecListeners} from './interfaces.js'
-import * as tr from './toolrunner.js'
+import {ExecOptions, ExecOutput, ExecListeners} from './interfaces'
+import * as tr from './toolrunner'

 export {ExecOptions, ExecOutput, ExecListeners}

@@ -3,7 +3,7 @@ import * as events from 'events'
 import * as child from 'child_process'
 import * as path from 'path'
 import * as stream from 'stream'
-import * as im from './interfaces.js'
+import * as im from './interfaces'
 import * as io from '@actions/io'
 import * as ioUtil from '@actions/io/lib/io-util'
 import {setTimeout} from 'timers'
@@ -3,9 +3,7 @@
  "compilerOptions": {
    "baseUrl": "./",
    "outDir": "./lib",
-    "rootDir": "./src",
-    "module": "node16",
-    "moduleResolution": "node16"
+    "rootDir": "./src"
  },
  "include": [
    "./src"
@@ -6,20 +6,9 @@

 Returns an authenticated Octokit client that follows the machine [proxy settings](https://help.github.com/en/actions/hosting-your-own-runners/using-a-proxy-server-with-self-hosted-runners) and correctly sets GHES base urls. See https://octokit.github.io/rest.js for the API.

-**Note:** This package is ESM-only starting from v9.0.0. For CommonJS projects, use dynamic import:
 ```js
-async function main() {
-    const { getOctokit, context } = await import('@actions/github');
-    // ... your code here
-}
-main();
-```
-
-For bundled actions (recommended), most bundlers like esbuild, webpack, and rollup handle ESM imports automatically.
-
-```js
-import * as github from '@actions/github';
-import * as core from '@actions/core';
+const github = require('@actions/github');
+const core = require('@actions/core');

 async function run() {
    // This should be a token with access to your repository scoped in as a secret.
@@ -57,7 +46,7 @@ const result = await octokit.graphql(query, variables);
 Finally, you can get the context of the current action:

 ```js
-import * as github from '@actions/github';
+const github = require('@actions/github');

 const context = github.context;

@@ -1,31 +1,5 @@
 # @actions/github Releases

-### 9.0.0
-
- **Breaking change**: Package is now ESM-only
-  - CommonJS consumers must use dynamic `import()` instead of `require()`
-  - Example: `const { getOctokit, context } = await import('@actions/github')`
- Fix TypeScript compilation by migrating to ESM, enabling proper imports from `@octokit/core/types`
-
-### 8.0.1
-
- Update `undici` to `6.23.0`
- Update `@actions/http-client` to `3.0.2`
-
-### 8.0.0
-
- Update @octokit dependencies 
-  - `@octokit/core` ^7.0.6
-  - `@octokit/plugin-paginate-rest` ^14.0.0
-  - `@octokit/plugin-rest-endpoint-methods` ^17.0.0
-  - `@octokit/request` ^10.0.7
-  - `@octokit/request-error` ^7.1.0
- **Breaking change**: Minimum Node.js version is now 20 (previously 18)
-
-### 7.0.0
-
- Update to v3.0.1 of `@actions/http-client`
-
 ### 6.0.1

 - Dependency updates [#2043](https://github.com/actions/toolkit/pull/2043)
@@ -1,6 +1,8 @@
 import * as path from 'path'
-import {readFileSync} from 'fs'
-import {Context} from '../src/context.js'
+import {Context} from '../src/context'
+
+/* eslint-disable @typescript-eslint/no-require-imports */
+/* eslint-disable @typescript-eslint/no-var-requires */

 describe('@actions/context', () => {
  let context: Context
@@ -12,10 +14,7 @@ describe('@actions/context', () => {
  })

  it('returns the payload object', () => {
-    const payload = JSON.parse(
-      readFileSync(path.join(__dirname, 'payload.json'), 'utf8')
-    )
-    expect(context.payload).toEqual(payload)
+    expect(context.payload).toEqual(require('./payload.json'))
  })

  it('returns an empty payload if the GITHUB_EVENT_PATH environment variable is falsey', () => {
@@ -1,24 +0,0 @@
-/** @type {import('jest').Config} */
-module.exports = {
-  clearMocks: true,
-  moduleFileExtensions: ['js', 'ts'],
-  testEnvironment: 'node',
-  testMatch: ['**/*.test.ts'],
-  moduleNameMapper: {
-    '^(\\.{1,2}/.*)\\.js$': '$1'
-  },
-  transform: {
-    '^.+\\.(ts|js)$': ['ts-jest', {
-      tsconfig: {
-        allowJs: true,
-        esModuleInterop: true,
-        module: 'node16',
-        moduleResolution: 'node16'
-      }
-    }]
-  },
-  transformIgnorePatterns: [
-    '/node_modules/(?!(@octokit|universal-user-agent|before-after-hook)/)'
-  ],
-  verbose: true
-}
@@ -0,0 +1,10 @@
+module.exports = {
+  clearMocks: true,
+  moduleFileExtensions: ['js', 'ts'],
+  testEnvironment: 'node',
+  testMatch: ['**/*.test.ts'],
+  transform: {
+    '^.+\\.ts$': 'ts-jest'
+  },
+  verbose: true
+}
@@ -1,161 +1,201 @@
 {
  "name": "@actions/github",
-  "version": "9.0.0",
+  "version": "6.0.1",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@actions/github",
-      "version": "9.0.0",
+      "version": "6.0.1",
      "license": "MIT",
      "dependencies": {
-        "@actions/http-client": "^3.0.2",
-        "@octokit/core": "^7.0.6",
-        "@octokit/plugin-paginate-rest": "^14.0.0",
-        "@octokit/plugin-rest-endpoint-methods": "^17.0.0",
-        "@octokit/request": "^10.0.7",
-        "@octokit/request-error": "^7.1.0",
-        "undici": "^6.23.0"
+        "@actions/http-client": "^2.2.0",
+        "@octokit/core": "^5.0.1",
+        "@octokit/plugin-paginate-rest": "^9.2.2",
+        "@octokit/plugin-rest-endpoint-methods": "^10.4.0",
+        "@octokit/request": "^8.4.1",
+        "@octokit/request-error": "^5.1.1",
+        "undici": "^5.28.5"
      },
      "devDependencies": {
        "proxy": "^2.1.1"
      }
    },
    "node_modules/@actions/http-client": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.2.tgz",
-      "integrity": "sha512-JP38FYYpyqvUsz+Igqlc/JG6YO9PaKuvqjM3iGvaLqFnJ7TFmcLyy2IDrY0bI0qCQug8E9K+elv5ZNfw62ZJzA==",
+      "version": "2.2.3",
+      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-2.2.3.tgz",
+      "integrity": "sha512-mx8hyJi/hjFvbPokCg4uRd4ZX78t+YyRPtnKWwIl+RzNaVuFpQHfmlGVfsKEJN8LwTCvL+DfVgAM04XaHkm6bA==",
      "license": "MIT",
      "dependencies": {
        "tunnel": "^0.0.6",
-        "undici": "^6.23.0"
+        "undici": "^5.25.4"
+      }
+    },
+    "node_modules/@fastify/busboy": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/@fastify/busboy/-/busboy-2.1.1.tgz",
+      "integrity": "sha512-vBZP4NlzfOlerQTnba4aqZoMhE/a9HY7HRqoOPaETQcSQuWEIyZMHGfVu6w9wGtGK5fED5qRs2DteVCjOH60sA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=14"
      }
    },
    "node_modules/@octokit/auth-token": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/auth-token/-/auth-token-6.0.0.tgz",
-      "integrity": "sha512-P4YJBPdPSpWTQ1NU4XYdvHvXJJDxM6YwpS0FZHRgP7YFkdVxsWcpWGy/NVqlAA7PcPCnMacXlRm1y2PFZRWL/w==",
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/@octokit/auth-token/-/auth-token-4.0.0.tgz",
+      "integrity": "sha512-tY/msAuJo6ARbK6SPIxZrPBms3xPbfwBrulZe0Wtr/DIY9lje2HeV1uoebShn6mx7SjCHif6EjMvoREj+gZ+SA==",
      "license": "MIT",
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      }
    },
    "node_modules/@octokit/core": {
-      "version": "7.0.6",
-      "resolved": "https://registry.npmjs.org/@octokit/core/-/core-7.0.6.tgz",
-      "integrity": "sha512-DhGl4xMVFGVIyMwswXeyzdL4uXD5OGILGX5N8Y+f6W7LhC1Ze2poSNrkF/fedpVDHEEZ+PHFW0vL14I+mm8K3Q==",
+      "version": "5.2.2",
+      "resolved": "https://registry.npmjs.org/@octokit/core/-/core-5.2.2.tgz",
+      "integrity": "sha512-/g2d4sW9nUDJOMz3mabVQvOGhVa4e/BN/Um7yca9Bb2XTzPPnfTWHWQg+IsEYO7M3Vx+EXvaM/I2pJWIMun1bg==",
      "license": "MIT",
      "dependencies": {
-        "@octokit/auth-token": "^6.0.0",
-        "@octokit/graphql": "^9.0.3",
-        "@octokit/request": "^10.0.6",
-        "@octokit/request-error": "^7.0.2",
-        "@octokit/types": "^16.0.0",
-        "before-after-hook": "^4.0.0",
-        "universal-user-agent": "^7.0.0"
+        "@octokit/auth-token": "^4.0.0",
+        "@octokit/graphql": "^7.1.0",
+        "@octokit/request": "^8.4.1",
+        "@octokit/request-error": "^5.1.1",
+        "@octokit/types": "^13.0.0",
+        "before-after-hook": "^2.2.0",
+        "universal-user-agent": "^6.0.0"
      },
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      }
    },
    "node_modules/@octokit/endpoint": {
-      "version": "11.0.2",
-      "resolved": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-11.0.2.tgz",
-      "integrity": "sha512-4zCpzP1fWc7QlqunZ5bSEjxc6yLAlRTnDwKtgXfcI/FxxGoqedDG8V2+xJ60bV2kODqcGB+nATdtap/XYq2NZQ==",
+      "version": "9.0.6",
+      "resolved": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-9.0.6.tgz",
+      "integrity": "sha512-H1fNTMA57HbkFESSt3Y9+FBICv+0jFceJFPWDePYlR/iMGrwM5ph+Dd4XRQs+8X+PUFURLQgX9ChPfhJ/1uNQw==",
      "license": "MIT",
      "dependencies": {
-        "@octokit/types": "^16.0.0",
-        "universal-user-agent": "^7.0.2"
+        "@octokit/types": "^13.1.0",
+        "universal-user-agent": "^6.0.0"
      },
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      }
    },
    "node_modules/@octokit/graphql": {
-      "version": "9.0.3",
-      "resolved": "https://registry.npmjs.org/@octokit/graphql/-/graphql-9.0.3.tgz",
-      "integrity": "sha512-grAEuupr/C1rALFnXTv6ZQhFuL1D8G5y8CN04RgrO4FIPMrtm+mcZzFG7dcBm+nq+1ppNixu+Jd78aeJOYxlGA==",
+      "version": "7.1.1",
+      "resolved": "https://registry.npmjs.org/@octokit/graphql/-/graphql-7.1.1.tgz",
+      "integrity": "sha512-3mkDltSfcDUoa176nlGoA32RGjeWjl3K7F/BwHwRMJUW/IteSa4bnSV8p2ThNkcIcZU2umkZWxwETSSCJf2Q7g==",
      "license": "MIT",
      "dependencies": {
-        "@octokit/request": "^10.0.6",
-        "@octokit/types": "^16.0.0",
-        "universal-user-agent": "^7.0.0"
+        "@octokit/request": "^8.4.1",
+        "@octokit/types": "^13.0.0",
+        "universal-user-agent": "^6.0.0"
      },
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      }
    },
    "node_modules/@octokit/openapi-types": {
-      "version": "27.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-27.0.0.tgz",
-      "integrity": "sha512-whrdktVs1h6gtR+09+QsNk2+FO+49j6ga1c55YZudfEG+oKJVvJLQi3zkOm5JjiUXAagWK2tI2kTGKJ2Ys7MGA==",
+      "version": "24.2.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+      "integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
      "license": "MIT"
    },
    "node_modules/@octokit/plugin-paginate-rest": {
-      "version": "14.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/plugin-paginate-rest/-/plugin-paginate-rest-14.0.0.tgz",
-      "integrity": "sha512-fNVRE7ufJiAA3XUrha2omTA39M6IXIc6GIZLvlbsm8QOQCYvpq/LkMNGyFlB1d8hTDzsAXa3OKtybdMAYsV/fw==",
+      "version": "9.2.2",
+      "resolved": "https://registry.npmjs.org/@octokit/plugin-paginate-rest/-/plugin-paginate-rest-9.2.2.tgz",
+      "integrity": "sha512-u3KYkGF7GcZnSD/3UP0S7K5XUFT2FkOQdcfXZGZQPGv3lm4F2Xbf71lvjldr8c1H3nNbF+33cLEkWYbokGWqiQ==",
      "license": "MIT",
      "dependencies": {
-        "@octokit/types": "^16.0.0"
+        "@octokit/types": "^12.6.0"
      },
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      },
      "peerDependencies": {
-        "@octokit/core": ">=6"
+        "@octokit/core": "5"
+      }
+    },
+    "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/openapi-types": {
+      "version": "20.0.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
+      "integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA==",
+      "license": "MIT"
+    },
+    "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/types": {
+      "version": "12.6.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
+      "integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
+      "license": "MIT",
+      "dependencies": {
+        "@octokit/openapi-types": "^20.0.0"
      }
    },
    "node_modules/@octokit/plugin-rest-endpoint-methods": {
-      "version": "17.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/plugin-rest-endpoint-methods/-/plugin-rest-endpoint-methods-17.0.0.tgz",
-      "integrity": "sha512-B5yCyIlOJFPqUUeiD0cnBJwWJO8lkJs5d8+ze9QDP6SvfiXSz1BF+91+0MeI1d2yxgOhU/O+CvtiZ9jSkHhFAw==",
+      "version": "10.4.1",
+      "resolved": "https://registry.npmjs.org/@octokit/plugin-rest-endpoint-methods/-/plugin-rest-endpoint-methods-10.4.1.tgz",
+      "integrity": "sha512-xV1b+ceKV9KytQe3zCVqjg+8GTGfDYwaT1ATU5isiUyVtlVAO3HNdzpS4sr4GBx4hxQ46s7ITtZrAsxG22+rVg==",
      "license": "MIT",
      "dependencies": {
-        "@octokit/types": "^16.0.0"
+        "@octokit/types": "^12.6.0"
      },
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      },
      "peerDependencies": {
-        "@octokit/core": ">=6"
+        "@octokit/core": "5"
+      }
+    },
+    "node_modules/@octokit/plugin-rest-endpoint-methods/node_modules/@octokit/openapi-types": {
+      "version": "20.0.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
+      "integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA==",
+      "license": "MIT"
+    },
+    "node_modules/@octokit/plugin-rest-endpoint-methods/node_modules/@octokit/types": {
+      "version": "12.6.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
+      "integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
+      "license": "MIT",
+      "dependencies": {
+        "@octokit/openapi-types": "^20.0.0"
      }
    },
    "node_modules/@octokit/request": {
-      "version": "10.0.7",
-      "resolved": "https://registry.npmjs.org/@octokit/request/-/request-10.0.7.tgz",
-      "integrity": "sha512-v93h0i1yu4idj8qFPZwjehoJx4j3Ntn+JhXsdJrG9pYaX6j/XRz2RmasMUHtNgQD39nrv/VwTWSqK0RNXR8upA==",
+      "version": "8.4.1",
+      "resolved": "https://registry.npmjs.org/@octokit/request/-/request-8.4.1.tgz",
+      "integrity": "sha512-qnB2+SY3hkCmBxZsR/MPCybNmbJe4KAlfWErXq+rBKkQJlbjdJeS85VI9r8UqeLYLvnAenU8Q1okM/0MBsAGXw==",
      "license": "MIT",
      "dependencies": {
-        "@octokit/endpoint": "^11.0.2",
-        "@octokit/request-error": "^7.0.2",
-        "@octokit/types": "^16.0.0",
-        "fast-content-type-parse": "^3.0.0",
-        "universal-user-agent": "^7.0.2"
+        "@octokit/endpoint": "^9.0.6",
+        "@octokit/request-error": "^5.1.1",
+        "@octokit/types": "^13.1.0",
+        "universal-user-agent": "^6.0.0"
      },
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      }
    },
    "node_modules/@octokit/request-error": {
-      "version": "7.1.0",
-      "resolved": "https://registry.npmjs.org/@octokit/request-error/-/request-error-7.1.0.tgz",
-      "integrity": "sha512-KMQIfq5sOPpkQYajXHwnhjCC0slzCNScLHs9JafXc4RAJI+9f+jNDlBNaIMTvazOPLgb4BnlhGJOTbnN0wIjPw==",
+      "version": "5.1.1",
+      "resolved": "https://registry.npmjs.org/@octokit/request-error/-/request-error-5.1.1.tgz",
+      "integrity": "sha512-v9iyEQJH6ZntoENr9/yXxjuezh4My67CBSu9r6Ve/05Iu5gNgnisNWOsoJHTP6k0Rr0+HQIpnH+kyammu90q/g==",
      "license": "MIT",
      "dependencies": {
-        "@octokit/types": "^16.0.0"
+        "@octokit/types": "^13.1.0",
+        "deprecation": "^2.0.0",
+        "once": "^1.4.0"
      },
      "engines": {
-        "node": ">= 20"
+        "node": ">= 18"
      }
    },
    "node_modules/@octokit/types": {
-      "version": "16.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-16.0.0.tgz",
-      "integrity": "sha512-sKq+9r1Mm4efXW1FCk7hFSeJo4QKreL/tTbR0rz/qx/r1Oa2VV83LTA/H/MuCOX7uCIJmQVRKBcbmWoySjAnSg==",
+      "version": "13.10.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+      "integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
      "license": "MIT",
      "dependencies": {
-        "@octokit/openapi-types": "^27.0.0"
+        "@octokit/openapi-types": "^24.2.0"
      }
    },
    "node_modules/ansi-styles": {
@@ -194,9 +234,9 @@
      "dev": true
    },
    "node_modules/before-after-hook": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/before-after-hook/-/before-after-hook-4.0.0.tgz",
-      "integrity": "sha512-q6tR3RPqIB1pMiTRMFcZwuG5T8vwp+vUvEG0vuI6B+Rikh5BfPp2fQ82c925FOs+b0lcFQ8CFrL+KbilfZFhOQ==",
+      "version": "2.2.3",
+      "resolved": "https://registry.npmjs.org/before-after-hook/-/before-after-hook-2.2.3.tgz",
+      "integrity": "sha512-NzUnlZexiaH/46WDhANlyR2bXRopNg4F/zuSA3OpZnllCUgRaOF2znDioDWrmbNVsuZk6l9pMquQB38cfBZwkQ==",
      "license": "Apache-2.0"
    },
    "node_modules/camelcase": {
@@ -259,6 +299,12 @@
        }
      }
    },
+    "node_modules/deprecation": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/deprecation/-/deprecation-2.3.1.tgz",
+      "integrity": "sha512-xmHIy4F3scKVwMsQ4WnVaS8bHOx0DmVwRywosKhaILI0ywMDWPtBSku2HNxRvF7jtwDRsoEwYQSfbxj8b7RlJQ==",
+      "license": "ISC"
+    },
    "node_modules/escape-string-regexp": {
      "version": "1.0.5",
      "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz",
@@ -269,22 +315,6 @@
        "node": ">=0.8.0"
      }
    },
-    "node_modules/fast-content-type-parse": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/fast-content-type-parse/-/fast-content-type-parse-3.0.0.tgz",
-      "integrity": "sha512-ZvLdcY8P+N8mGQJahJV5G4U88CSvT1rP8ApL6uETe88MBXrBHAkZlSEySdUlyztF7ccb+Znos3TFqaepHxdhBg==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/fastify"
-        },
-        {
-          "type": "opencollective",
-          "url": "https://opencollective.com/fastify"
-        }
-      ],
-      "license": "MIT"
-    },
    "node_modules/has-flag": {
      "version": "3.0.0",
      "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz",
@@ -322,6 +352,15 @@
      "dev": true,
      "license": "MIT"
    },
+    "node_modules/once": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
+      "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
+      "license": "ISC",
+      "dependencies": {
+        "wrappy": "1"
+      }
+    },
    "node_modules/proxy": {
      "version": "2.2.0",
      "resolved": "https://registry.npmjs.org/proxy/-/proxy-2.2.0.tgz",
@@ -363,18 +402,27 @@
      }
    },
    "node_modules/undici": {
-      "version": "6.23.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-6.23.0.tgz",
-      "integrity": "sha512-VfQPToRA5FZs/qJxLIinmU59u0r7LXqoJkCzinq3ckNJp3vKEh7jTWN589YQ5+aoAC/TGRLyJLCPKcLQbM8r9g==",
+      "version": "5.29.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-5.29.0.tgz",
+      "integrity": "sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==",
      "license": "MIT",
+      "dependencies": {
+        "@fastify/busboy": "^2.0.0"
+      },
      "engines": {
-        "node": ">=18.17"
+        "node": ">=14.0"
      }
    },
    "node_modules/universal-user-agent": {
-      "version": "7.0.3",
-      "resolved": "https://registry.npmjs.org/universal-user-agent/-/universal-user-agent-7.0.3.tgz",
-      "integrity": "sha512-TmnEAEAsBJVZM/AADELsK76llnwcf9vMKuPz8JflO1frO8Lchitr0fNaN9d+Ap0BjKtqWqd/J17qeDnXh8CL2A==",
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/universal-user-agent/-/universal-user-agent-6.0.1.tgz",
+      "integrity": "sha512-yCzhz6FN2wU1NiiQRogkTQszlQSlpWaw8SvVegAc+bDxbzHgh1vX8uIe8OYyMH6DwH+sdTJsgMl36+mSMdRJIQ==",
+      "license": "ISC"
+    },
+    "node_modules/wrappy": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
+      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
      "license": "ISC"
    }
  }
@@ -1,6 +1,6 @@
 {
  "name": "@actions/github",
-  "version": "9.0.0",
+  "version": "6.0.1",
  "description": "Actions github lib",
  "keywords": [
    "github",
@@ -8,19 +8,8 @@
  ],
  "homepage": "https://github.com/actions/toolkit/tree/main/packages/github",
  "license": "MIT",
-  "type": "module",
  "main": "lib/github.js",
  "types": "lib/github.d.ts",
-  "exports": {
-    ".": {
-      "types": "./lib/github.d.ts",
-      "import": "./lib/github.js"
-    },
-    "./lib/utils": {
-      "types": "./lib/utils.d.ts",
-      "import": "./lib/utils.js"
-    }
-  },
  "directories": {
    "lib": "lib",
    "test": "__tests__"
@@ -49,13 +38,13 @@
    "url": "https://github.com/actions/toolkit/issues"
  },
  "dependencies": {
-    "@actions/http-client": "^3.0.2",
-    "@octokit/core": "^7.0.6",
-    "@octokit/plugin-paginate-rest": "^14.0.0",
-    "@octokit/plugin-rest-endpoint-methods": "^17.0.0",
-    "@octokit/request": "^10.0.7",
-    "@octokit/request-error": "^7.1.0",
-    "undici": "^6.23.0"
+    "@actions/http-client": "^2.2.0",
+    "@octokit/core": "^5.0.1",
+    "@octokit/plugin-paginate-rest": "^9.2.2",
+    "@octokit/plugin-rest-endpoint-methods": "^10.4.0",
+    "@octokit/request": "^8.4.1",
+    "@octokit/request-error": "^5.1.1",
+    "undici": "^5.28.5"
  },
  "devDependencies": {
    "proxy": "^2.1.1"
@@ -1,5 +1,5 @@
 // Originally pulled from https://github.com/JasonEtco/actions-toolkit/blob/main/src/context.ts
-import {WebhookPayload} from './interfaces.js'
+import {WebhookPayload} from './interfaces'
 import {readFileSync, existsSync} from 'fs'
 import {EOL} from 'os'

@@ -1,7 +1,8 @@
-import * as Context from './context.js'
-import {GitHub, getOctokitOptions} from './utils.js'
+import * as Context from './context'
+import {GitHub, getOctokitOptions} from './utils'
+
 // octokit + plugins
-import type {OctokitOptions, OctokitPlugin} from '@octokit/core/types'
+import {OctokitOptions, OctokitPlugin} from '@octokit/core/dist-types/types'

 export const context = new Context.Context()

@@ -1,6 +1,6 @@
 import * as http from 'http'
 import * as httpClient from '@actions/http-client'
-import type {OctokitOptions} from '@octokit/core/types'
+import {OctokitOptions} from '@octokit/core/dist-types/types'
 import {ProxyAgent, fetch} from 'undici'

 export function getAuthString(
@@ -1,9 +1,9 @@
-import * as Context from './context.js'
-import * as Utils from './internal/utils.js'
-import type {OctokitOptions} from '@octokit/core/types'
+import * as Context from './context'
+import * as Utils from './internal/utils'

 // octokit + plugins
 import {Octokit} from '@octokit/core'
+import {OctokitOptions} from '@octokit/core/dist-types/types'
 import {restEndpointMethods} from '@octokit/plugin-rest-endpoint-methods'
 import {paginateRest} from '@octokit/plugin-paginate-rest'

@@ -3,9 +3,7 @@
  "compilerOptions": {
    "baseUrl": "./",
    "outDir": "./lib",
-    "rootDir": "./src",
-    "module": "node16",
-    "moduleResolution": "node16"
+    "rootDir": "./src"
  },
  "include": [
    "./src"
@@ -1,43 +1,29 @@
 # @actions/glob Releases

-## 0.6.0
-
- **Breaking change**: Package is now ESM-only
-  - CommonJS consumers must use dynamic `import()` instead of `require()`
-
-## 0.5.1
-
- Bump `@actions/core` to `2.0.3`
-
-## 0.5.0
-
+### 0.5.0
 - Added `excludeHiddenFiles` option, which is disabled by default to preserve existing behavior [#1791: Add glob option to ignore hidden files](https://github.com/actions/toolkit/pull/1791)

-## 0.4.0
-
+### 0.4.0
 - Pass in the current workspace as a parameter to HashFiles [#1318](https://github.com/actions/toolkit/pull/1318)

-## 0.3.0
-
+### 0.3.0
 - Added a `verbose` option to HashFiles [#1052](https://github.com/actions/toolkit/pull/1052/files)

-## 0.2.1
-
- Update `lockfileVersion` to `v2` in `package-lock.json` [#1023](https://github.com/actions/toolkit/pull/1023)
-
-## 0.2.0
+### 0.2.1
+- Update `lockfileVersion` to `v2` in `package-lock.json [#1023](https://github.com/actions/toolkit/pull/1023) 

+### 0.2.0
 - [Added the hashFiles function to Glob](https://github.com/actions/toolkit/pull/830)
 - [Added an option to filter out directories](https://github.com/actions/toolkit/pull/728)

-## 0.1.2
+### 0.1.2

 - [Fix bug where files were matched incorrectly](https://github.com/actions/toolkit/pull/805)

-## 0.1.1
+### 0.1.1

 - Update @actions/core version
-
-## 0.1.0
+### 0.1.0

 - Initial release
+
@@ -1,6 +1,6 @@
-import * as io from '../../io/src/io.js'
+import * as io from '../../io/src/io'
 import * as path from 'path'
-import {hashFiles} from '../src/glob.js'
+import {hashFiles} from '../src/glob'
 import {promises as fs} from 'fs'

 const IS_WINDOWS = process.platform === 'win32'
@@ -1,9 +1,9 @@
 import * as child from 'child_process'
-import * as io from '../../io/src/io.js'
+import * as io from '../../io/src/io'
 import * as os from 'os'
 import * as path from 'path'
-import {Globber, DefaultGlobber} from '../src/internal-globber.js'
-import {GlobOptions} from '../src/internal-glob-options.js'
+import {Globber, DefaultGlobber} from '../src/internal-globber'
+import {GlobOptions} from '../src/internal-glob-options'
 import {promises as fs} from 'fs'

 const IS_WINDOWS = process.platform === 'win32'
@@ -1,4 +1,4 @@
-import * as pathHelper from '../src/internal-path-helper.js'
+import * as pathHelper from '../src/internal-path-helper'

 const IS_WINDOWS = process.platform === 'win32'

@@ -1,5 +1,5 @@
 import * as path from 'path'
-import {Path} from '../src/internal-path.js'
+import {Path} from '../src/internal-path'

 const IS_WINDOWS = process.platform === 'win32'

@@ -1,8 +1,8 @@
 import * as path from 'path'
-import * as patternHelper from '../src/internal-pattern-helper.js'
-import {MatchKind} from '../src/internal-match-kind.js'
-import {IS_WINDOWS} from '../../io/src/io-util.js'
-import {Pattern} from '../src/internal-pattern.js'
+import * as patternHelper from '../src/internal-pattern-helper'
+import {MatchKind} from '../src/internal-match-kind'
+import {IS_WINDOWS} from '../../io/src/io-util'
+import {Pattern} from '../src/internal-pattern'

 describe('pattern-helper', () => {
  it('getSearchPaths omits negate search paths', () => {
@@ -1,9 +1,9 @@
-import * as io from '../../io/src/io.js'
+import * as io from '../../io/src/io'
 import * as os from 'os'
 import * as path from 'path'
-import {MatchKind} from '../src/internal-match-kind.js'
+import {MatchKind} from '../src/internal-match-kind'
 import {promises as fs} from 'fs'
-import {Pattern} from '../src/internal-pattern.js'
+import {Pattern} from '../src/internal-pattern'

 const IS_WINDOWS = process.platform === 'win32'

@@ -0,0 +1,83 @@
+/**
+ * Test to validate that glob works correctly on Windows with backslash paths
+ * This test validates the fix for glob not working on GitHub's Windows runners
+ */
+
+import {MatchKind} from '../src/internal-match-kind'
+import {Pattern} from '../src/internal-pattern'
+
+const IS_WINDOWS = process.platform === 'win32'
+
+describe('Windows path matching', () => {
+  it('matches paths with backslashes on Windows', () => {
+    if (!IS_WINDOWS) {
+      // This test is only relevant on Windows
+      return
+    }
+
+    // Test basic pattern matching with Windows paths
+    const pattern = new Pattern('C:\\Users\\test\\*')
+
+    // The itemPath would come from fs.readdir with backslashes on Windows
+    const itemPath = 'C:\\Users\\test\\file.txt'
+
+    // This should match because the pattern and path both refer to the same file
+    expect(pattern.match(itemPath)).toBe(MatchKind.All)
+  })
+
+  it('partial matches work with backslashes on Windows', () => {
+    if (!IS_WINDOWS) {
+      return
+    }
+
+    // Test partial matching with Windows paths
+    const pattern = new Pattern('C:\\Users\\test\\**')
+
+    // Should partially match parent directory
+    expect(pattern.partialMatch('C:\\Users')).toBe(true)
+    expect(pattern.partialMatch('C:\\Users\\test')).toBe(true)
+  })
+
+  it('matches globstar patterns with backslashes on Windows', () => {
+    if (!IS_WINDOWS) {
+      return
+    }
+
+    const pattern = new Pattern('C:\\foo\\**')
+
+    // Should match the directory itself and descendants
+    expect(pattern.match('C:\\foo')).toBe(MatchKind.All)
+    expect(pattern.match('C:\\foo\\bar')).toBe(MatchKind.All)
+    expect(pattern.match('C:\\foo\\bar\\baz.txt')).toBe(MatchKind.All)
+  })
+
+  it('matches wildcard patterns with mixed separators on Windows', () => {
+    if (!IS_WINDOWS) {
+      return
+    }
+
+    // Pattern might be specified with forward slashes by user
+    const pattern = new Pattern('C:/Users/*/file.txt')
+
+    // But the actual path from filesystem will have backslashes
+    expect(pattern.match('C:\\Users\\test\\file.txt')).toBe(MatchKind.All)
+  })
+
+  it('handles complex patterns with backslashes on Windows', () => {
+    if (!IS_WINDOWS) {
+      return
+    }
+
+    const currentDrive = process.cwd().substring(0, 2)
+    const pattern = new Pattern(`${currentDrive}\\**\\*.txt`)
+
+    // Should match .txt files at any depth
+    expect(pattern.match(`${currentDrive}\\file.txt`)).toBe(MatchKind.All)
+    expect(pattern.match(`${currentDrive}\\foo\\bar\\test.txt`)).toBe(
+      MatchKind.All
+    )
+    expect(pattern.match(`${currentDrive}\\foo\\bar\\test.js`)).toBe(
+      MatchKind.None
+    )
+  })
+})
@@ -1,53 +1,62 @@
 {
  "name": "@actions/glob",
-  "version": "0.6.0",
+  "version": "0.5.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@actions/glob",
-      "version": "0.6.0",
+      "version": "0.5.0",
      "license": "MIT",
      "dependencies": {
-        "@actions/core": "^3.0.0",
+        "@actions/core": "^1.9.1",
        "minimatch": "^3.0.4"
      }
    },
    "node_modules/@actions/core": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/@actions/core/-/core-3.0.0.tgz",
-      "integrity": "sha512-zYt6cz+ivnTmiT/ksRVriMBOiuoUpDCJJlZ5KPl2/FRdvwU3f7MPh9qftvbkXJThragzUZieit2nyHUyw53Seg==",
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.11.1.tgz",
+      "integrity": "sha512-hXJCSrkwfA46Vd9Z3q4cpEpHB1rL5NG04+/rbqW9d3+CSvtB1tYe8UTpAlixa1vj0m/ULglfEK2UKxMGxCxv5A==",
      "license": "MIT",
      "dependencies": {
-        "@actions/exec": "^3.0.0",
-        "@actions/http-client": "^4.0.0"
+        "@actions/exec": "^1.1.1",
+        "@actions/http-client": "^2.0.1"
      }
    },
    "node_modules/@actions/exec": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-3.0.0.tgz",
-      "integrity": "sha512-6xH/puSoNBXb72VPlZVm7vQ+svQpFyA96qdDBvhB8eNZOE8LtPf9L4oAsfzK/crCL8YZ+19fKYVnM63Sl+Xzlw==",
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-1.1.1.tgz",
+      "integrity": "sha512-+sCcHHbVdk93a0XT19ECtO/gIXoxvdsgQLzb2fE2/5sIZmWQuluYyjPQtrtTHdU1YzTZ7bAPN4sITq2xi1679w==",
      "license": "MIT",
      "dependencies": {
-        "@actions/io": "^3.0.2"
+        "@actions/io": "^1.0.1"
      }
    },
    "node_modules/@actions/http-client": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-4.0.0.tgz",
-      "integrity": "sha512-QuwPsgVMsD6qaPD57GLZi9sqzAZCtiJT8kVBCDpLtxhL5MydQ4gS+DrejtZZPdIYyB1e95uCK9Luyds7ybHI3g==",
+      "version": "2.2.3",
+      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-2.2.3.tgz",
+      "integrity": "sha512-mx8hyJi/hjFvbPokCg4uRd4ZX78t+YyRPtnKWwIl+RzNaVuFpQHfmlGVfsKEJN8LwTCvL+DfVgAM04XaHkm6bA==",
      "license": "MIT",
      "dependencies": {
        "tunnel": "^0.0.6",
-        "undici": "^6.23.0"
+        "undici": "^5.25.4"
      }
    },
    "node_modules/@actions/io": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/@actions/io/-/io-3.0.2.tgz",
-      "integrity": "sha512-nRBchcMM+QK1pdjO7/idu86rbJI5YHUKCvKs0KxnSYbVe3F51UfGxuZX4Qy/fWlp6l7gWFwIkrOzN+oUK03kfw==",
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.3.tgz",
+      "integrity": "sha512-wi9JjgKLYS7U/z8PPbco+PvTb/nRWjeoFlJ1Qer83k/3C5PHQi28hiVdeE2kHXmIL99mQFawx8qt/JPjZilJ8Q==",
      "license": "MIT"
    },
+    "node_modules/@fastify/busboy": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/@fastify/busboy/-/busboy-2.1.1.tgz",
+      "integrity": "sha512-vBZP4NlzfOlerQTnba4aqZoMhE/a9HY7HRqoOPaETQcSQuWEIyZMHGfVu6w9wGtGK5fED5qRs2DteVCjOH60sA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=14"
+      }
+    },
    "node_modules/balanced-match": {
      "version": "1.0.2",
      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
@@ -92,12 +101,15 @@
      }
    },
    "node_modules/undici": {
-      "version": "6.23.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-6.23.0.tgz",
-      "integrity": "sha512-VfQPToRA5FZs/qJxLIinmU59u0r7LXqoJkCzinq3ckNJp3vKEh7jTWN589YQ5+aoAC/TGRLyJLCPKcLQbM8r9g==",
+      "version": "5.29.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-5.29.0.tgz",
+      "integrity": "sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==",
      "license": "MIT",
+      "dependencies": {
+        "@fastify/busboy": "^2.0.0"
+      },
      "engines": {
-        "node": ">=18.17"
+        "node": ">=14.0"
      }
    }
  }
@@ -1,6 +1,6 @@
 {
  "name": "@actions/glob",
-  "version": "0.6.0",
+  "version": "0.5.0",
  "preview": true,
  "description": "Actions glob lib",
  "keywords": [
@@ -10,15 +10,8 @@
  ],
  "homepage": "https://github.com/actions/toolkit/tree/main/packages/glob",
  "license": "MIT",
-  "type": "module",
  "main": "lib/glob.js",
  "types": "lib/glob.d.ts",
-  "exports": {
-    ".": {
-      "types": "./lib/glob.d.ts",
-      "import": "./lib/glob.js"
-    }
-  },
  "directories": {
    "lib": "lib",
    "test": "__tests__"
@@ -44,7 +37,7 @@
    "url": "https://github.com/actions/toolkit/issues"
  },
  "dependencies": {
-    "@actions/core": "^3.0.0",
+    "@actions/core": "^1.9.1",
    "minimatch": "^3.0.4"
  }
 }
@@ -1,7 +1,7 @@
-import {Globber, DefaultGlobber} from './internal-globber.js'
-import {GlobOptions} from './internal-glob-options.js'
-import {HashFileOptions} from './internal-hash-file-options.js'
-import {hashFiles as _hashFiles} from './internal-hash-files.js'
+import {Globber, DefaultGlobber} from './internal-globber'
+import {GlobOptions} from './internal-glob-options'
+import {HashFileOptions} from './internal-hash-file-options'
+import {hashFiles as _hashFiles} from './internal-hash-files'

 export {Globber, GlobOptions}

--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
copilot-swe-agent[bot]	1cd929181f	Apply eslint auto-fix formatting to windows-path-matching test Co-authored-by: salmanmkc <32169182+salmanmkc@users.noreply.github.com>	2025-12-11 14:03:26 +00:00
copilot-swe-agent[bot]	f4d818c7a2	Remove unused 'path' import from windows-path-matching test Co-authored-by: salmanmkc <32169182+salmanmkc@users.noreply.github.com>	2025-12-11 10:12:06 +00:00
copilot-swe-agent[bot]	9de8f6f5c3	Refactor: Extract convertToMinimatchPath helper to eliminate code duplication Co-authored-by: salmanmkc <32169182+salmanmkc@users.noreply.github.com>	2025-12-11 09:49:13 +00:00
copilot-swe-agent[bot]	a60e6db920	Address code review feedback: replace deprecated substr() with substring() Co-authored-by: salmanmkc <32169182+salmanmkc@users.noreply.github.com>	2025-12-10 23:36:01 +00:00
copilot-swe-agent[bot]	c050f7bc2e	Add Windows-specific tests for path matching with backslashes Co-authored-by: salmanmkc <32169182+salmanmkc@users.noreply.github.com>	2025-12-10 23:33:20 +00:00
copilot-swe-agent[bot]	0483fce47e	Fix glob pattern matching on Windows by converting paths to forward slashes Co-authored-by: salmanmkc <32169182+salmanmkc@users.noreply.github.com>	2025-12-10 23:31:29 +00:00
copilot-swe-agent[bot]	92cb8ef23c	Initial investigation of glob Windows issue Co-authored-by: salmanmkc <32169182+salmanmkc@users.noreply.github.com>	2025-12-10 23:28:52 +00:00
copilot-swe-agent[bot]	5d702dc7bd	Initial plan	2025-12-10 23:24:11 +00:00