109 Commits

Author	SHA1	Message	Date
George Adams	8f19afcc70	feat: add go-download-base-url input for custom Go distributions (#721) ... * feat: add go-download-base-url input for custom Go distributions Add support for downloading Go from custom sources such as Microsoft Go (aka.ms). Users can specify a custom download base URL via the `go-download-base-url` input or the `GO_DOWNLOAD_BASE_URL` environment variable (input takes precedence). When a custom URL is provided, the action skips the GitHub-hosted manifest and attempts to resolve versions from the custom URL's JSON listing. If the listing is unavailable (as with aka.ms redirect links), it falls back to constructing the download URL directly from the version, platform, and architecture. Usage: - uses: actions/setup-go@v6 with: go-version: '1.25' go-download-base-url: 'https://aka.ms/golang/release/latest' Changes: - action.yml: add go-download-base-url optional input - installer.ts: add getInfoFromDirectDownload() for URL construction fallback, thread custom URL through getGo/getInfoFromDist/findMatch - main.ts: read new input and GO_DOWNLOAD_BASE_URL env var - setup-go.test.ts: add 12 unit tests for custom URL behavior - microsoft-validation.yml: add E2E workflow testing Microsoft build of Go across ubuntu/windows/macos with versions 1.24 and 1.25 - README.md: document new input with Microsoft build of Go examples * run prettier * fixup PR review * revert cache-save * fixup * handle distinct cache * skip json for known URL * fix bug in JSON with custom URL	2026-03-16 12:43:44 -05:00
dependabot[bot]	27fdb267c1	Bump minimatch from 3.1.2 to 3.1.5 (#727) ... * Bump minimatch from 3.1.2 to 3.1.5 Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.2 to 3.1.5. - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5) --- updated-dependencies: - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Check failure fix --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: gowridurgad <gowridurgad@gmail.com>	2026-03-02 15:43:24 -06:00
Masahiro Furudate	4b73464bb3	Fix golang download url to go.dev (#469) ... * Fix golang download url to go.dev * Fix const name * Run `npm run build`	2026-02-25 13:26:30 -06:00
Priya Gupta	a5f9b05d2d	Update default Go module caching to use go.mod (#705) ... * Update module cache to use go.mod as key * Fix typo * Revise breaking changes in README for V6 Updated breaking changes section with enhanced formatting and clarified toolchain management details.	2026-01-26 10:59:03 -06:00
Salman Chishti	ae252ee6fb	Bump @actions/cache to v5 (#695) ... * Bump @actions/cache to version 5.0.0 in package.json and package-lock.json * Bump @actions/cache to v5 * prepease release 6.0.1 * Bump @actions/cache to v5.0.1 - Resolves punycode deprecation warning - Updates licensed cache metadata * upgrade actions/cache to 5.0.1 --------- Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>	2026-01-07 10:40:06 -06:00
dependabot[bot]	4dc6199c7b	Bump semver and @types/semver (#652) ... * Bump semver and @types/semver Bumps [semver](https://github.com/npm/node-semver) and [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver). These dependencies needed to be updated together. Updates `semver` from 7.7.1 to 7.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](https://github.com/npm/node-semver/compare/v7.7.1...v7.7.2) Updates `@types/semver` from 7.5.8 to 7.7.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver) --- updated-dependencies: - dependency-name: semver dependency-version: 7.7.2 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: "@types/semver" dependency-version: 7.7.1 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * chore: add license information for semver dependency --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>	2025-11-19 20:54:04 -06:00
priya-kinthali	faf52423ec	Add support for .tool-versions file in setup-go, update workflow (#673) ... * setup go in local * add .tool-versions file support	2025-10-28 10:26:52 -05:00
Nicholas Ngai	7bc60db215	Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang (#665) ... * Fall back to downloading from dl.google.com/go instead of storage.googleapis.com/golang * Use go.dev/dl instead	2025-10-27 15:43:21 -05:00
Matthew Hughes	1d76b952eb	Improve toolchain handling (#460) ... * Configure environment to avoid toolchain installs Force `go` to always use the local toolchain (i.e. the one the one that shipped with the go command being run) via setting the `GOTOOLCHAIN` environment variable to `local`[1]: > When GOTOOLCHAIN is set to local, the go command always runs the bundled Go toolchain. This is how things are setup in the official Docker images (e.g.[2], see also the discussion around that change[3]). The motivation behind this is to: * Reduce duplicate work: if the `toolchain` version in `go.mod` was greated than the `go` version, the version from the `go` directive would be installed, then Go would detect the `toolchain` version and additionally install that * Avoid Unexpected behaviour: if you specify this action runs with some Go version (e.g. `1.21.0`) but your go.mod contains a `toolchain` or `go` directive for a newer version (e.g. `1.22.0`) then, without any other configuration/environment setup, any go commands will be run using go `1.22.0` This will be a **breaking change** for some workflows. Given a `go.mod` like: module proj go 1.22.0 Then running any `go` command, e.g. `go mod tidy`, in an environment where only go versions before `1.22.0` were installed would previously trigger a toolchain download of Go `1.22.0` and that version being used to execute the command. With this change the above would error out with something like: > go: go.mod requires go >= 1.22.0 (running go 1.21.7; GOTOOLCHAIN=local) [1] https://go.dev/doc/toolchain#select [2] dae3405a32/Dockerfile-linux.template (L163) [3] https://github.com/docker-library/golang/issues/472 * Prefer installing version from `toolchain` directive Prefer this over the version from the `go` directive. Per the docs[1] > The toolchain line declares a suggested toolchain to use with the module or workspace It seems reasonable to use this, since running this action in a directory containing a `go.mod` (or `go.work`) suggests the user is wishing to work _with the module or workspace_. Link: https://go.dev/doc/toolchain#config [1] Issue: https://github.com/actions/setup-go/issues/457 * squash! Configure environment to avoid toolchain installs Only modify env if `GOTOOLCHAIN` is not set * squash! Prefer installing version from `toolchain` directive Avoid installing from `toolchain` if `GOTOOLCHAIN` is `local`, also better regex for matching toolchain directive	2025-08-28 22:21:56 -05:00
Matthew Hughes	e75c3e80bc	Bump form-data to bring in fix for critical vulnerability (#618) ... The vulnerability: $ npm audit --audit-level=high # npm audit report form-data >=4.0.0 <4.0.4 || <2.5.4 Severity: critical form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4 form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4 fix available via `npm audit fix` node_modules/@azure/core-http/node_modules/form-data node_modules/@types/node-fetch/node_modules/form-data node_modules/form-data 1 critical severity vulnerability To address all issues, run: npm audit fix This change is the result of from running `npm audit fix` and then using[1] to update licenses via `licensed cache`. It doesn't look like `dependabot` previously raised any PRs for this dependency, so this bumps it from `4.0.0` to `4.0.4`, see the changelog[2] for details. Link: https://github.com/licensee/licensed [1] Link: https://github.com/form-data/form-data/blob/v4.0.4/CHANGELOG.md [2]	2025-08-13 12:02:46 -05:00
dependabot[bot]	7c0b336c9a	Bump typescript from 5.4.2 to 5.8.3 (#538) ... * Bump typescript from 5.4.2 to 5.7.3 Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.4.2 to 5.7.3. - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml) - [Commits](https://github.com/microsoft/TypeScript/compare/v5.4.2...v5.7.3) --- updated-dependencies: - dependency-name: typescript dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * Fix low security alert --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>	2025-07-10 19:26:25 -05:00
dependabot[bot]	6f26dcc668	Bump undici from 5.28.5 to 5.29.0 (#594) ... * Bump undici from 5.28.5 to 5.29.0 Bumps [undici](https://github.com/nodejs/undici) from 5.28.5 to 5.29.0. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v5.28.5...v5.29.0) --- updated-dependencies: - dependency-name: undici dependency-version: 5.29.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Fix CI failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>	2025-07-08 10:07:25 -05:00
dependabot[bot]	fa96338abe	Bump @actions/tool-cache from 2.0.1 to 2.0.2 (#591) ... * Bump @actions/tool-cache from 2.0.1 to 2.0.2 Bumps [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache) from 2.0.1 to 2.0.2. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache) --- updated-dependencies: - dependency-name: "@actions/tool-cache" dependency-version: 2.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Fix failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>	2025-06-18 17:01:53 -05:00
Priya Gupta	29694d72cd	Add manifest validation and improve error handling (#586)	2025-05-05 22:00:04 -05:00
dependabot[bot]	bb65d8857b	Bump ts-jest from 29.1.2 to 29.3.2 (#582) ... * Bump ts-jest from 29.1.2 to 29.3.2 Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.1.2 to 29.3.2. - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.2...v29.3.2) --- updated-dependencies: - dependency-name: ts-jest dependency-version: 29.3.2 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * fix check failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>	2025-04-30 10:37:00 -05:00
dependabot[bot]	7f17e836c0	Bump @actions/glob from 0.4.0 to 0.5.0 (#573) ... * Bump @actions/glob from 0.4.0 to 0.5.0 Bumps [@actions/glob](https://github.com/actions/toolkit/tree/HEAD/packages/glob) from 0.4.0 to 0.5.0. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/glob/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/glob) --- updated-dependencies: - dependency-name: "@actions/glob" dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * fix for check failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>	2025-04-29 12:31:28 -05:00
Priya Gupta	dca8468d37	Update self-hosted environment validation and bump undici version (#556) ... * Fix self-hosted environment check * Update isSelfHosted logic	2025-04-01 10:32:30 -05:00
aparnajyothi-y	691cc3533f	upgrade actions/cache to 4.0.3 (#574)	2025-04-01 10:24:42 -05:00
dependabot[bot]	0aaccfd150	Bump undici from 5.28.4 to 5.28.5 (#541) ... * Bump undici from 5.28.4 to 5.28.5 Bumps [undici](https://github.com/nodejs/undici) from 5.28.4 to 5.28.5. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5) --- updated-dependencies: - dependency-name: undici dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Bump undici from 5.28.4 to 5.28.5 Bumps [undici](https://github.com/nodejs/undici) from 5.28.4 to 5.28.5. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5) --- updated-dependencies: - dependency-name: undici dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Fix failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>	2025-03-18 10:29:43 -05:00
aparnajyothi-y	c4c1141886	upgrade actions/cache to 4.0.2 (#568)	2025-03-11 10:19:54 -05:00
dependabot[bot]	1d82324e53	Bump semver from 7.6.0 to 7.6.3 (#535) ... * Bump semver from 7.6.0 to 7.6.3 Bumps [semver](https://github.com/npm/node-semver) from 7.6.0 to 7.6.3. - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](https://github.com/npm/node-semver/compare/v7.6.0...v7.6.3) --- updated-dependencies: - dependency-name: semver dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * fix for check-dist and license failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>	2025-01-21 15:45:59 -06:00
Bassem Dghaidi	f81f022188	Use the new cache service: upgrade @actions/cache to ^4.0.0 (#531) ... * Use new cache service * Add licensed output * Review licenses & update types	2025-01-15 14:06:31 -06:00
Tobias	3041bf56c9	feat: fallback to "raw" endpoint for manifest when rate limit is reached (#496) ... * feat: fallback to "raw" endpoint for manifest when rate limit is reached * add information about raw access to the README * prettier * update cross-spawn to 7.0.6 to fix vulnerability	2024-11-25 12:37:21 -06:00
John Wesley Walker III	941977282c	Revise isGhes logic (#511) ... * Revise `isGhes` logic * ran `npm run format` * added unit test * tweaked unit test * ran `npm run format`	2024-10-21 11:56:08 -05:00
Zxilly	b26d40294f	fix: add arch to cache key (#493)	2024-08-26 15:19:57 -05:00
dependabot[bot]	0a12ed9d6a	Bump braces from 3.0.2 to 3.0.3 (#487) ... * Bump braces from 3.0.2 to 3.0.3 Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3. - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3) --- updated-dependencies: - dependency-name: braces dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Bump undici from 5.28.3 to 5.28.4 --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>	2024-06-27 13:16:26 -05:00
dependabot[bot]	be1aa1186e	Bump undici from 5.28.2 to 5.28.3 (#465) ... * Bump undici from 5.28.2 to 5.28.3 Bumps [undici](https://github.com/nodejs/undici) from 5.28.2 to 5.28.3. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v5.28.2...v5.28.3) --- updated-dependencies: - dependency-name: undici dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * fixed check failures and update dependencies --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>	2024-03-21 15:04:22 -05:00
Dmitry Shibanov	0c52d547c9	Update dependencies for node20 (#445)	2023-12-05 17:50:42 +01:00
Piotr Galar	89a192af9d	fix: sync .complete marker when caching tools on windows	2023-08-12 23:52:21 +02:00
Sergey Dolin	93397bea11	Fix Install on Windows is very slow (#393) ... * Fix Install on Windows is very slow * Add unit test * Improve readability * Add e2e test * fix lint * Fix unit tests * Fix unit tests * limit to github hosted runners * test hosted version of go * AzDev environment * rename lnkSrc * refactor conditions * improve tests * refactoring * Fix e2e test * improve isHosted readability	2023-08-03 14:33:56 +02:00
Dusan Trickovic	0bb97b1c5c	Rebuild after updating Semver	2023-07-18 16:39:08 +02:00
Sergey Dolin	4e0b6c77c6	Limit to Linux only	2023-07-10 10:39:55 +02:00
Sergey Dolin	a4d10f0ea4	Add imageOS to primaryKey ... https://github.com/actions/setup-go/issues/368	2023-07-10 10:17:28 +02:00
Nikolai Laevskii	fac708d667	Bump @actions/cache dependency to v3.2.1 (#374)	2023-05-08 11:42:39 +02:00
Dmitry Shibanov	dd84a9531a	Update xml2js (#370)	2023-04-20 14:28:58 +02:00
Dmitry Shibanov	fdc0d672a1	Add Go bin if go-version input is empty (#351)	2023-03-14 16:29:10 +01:00
Dmitry Shibanov	ebfdf6ac95	add warning if go-version is empty (#350)	2023-03-14 16:07:41 +01:00
Sergey Dolin	c51a720768	Enable caching by default with default input (#332)	2023-03-10 16:25:35 +01:00
Ivan	7406d654ad	Add and configure ESLint and update configuration for Prettier (#341) ... * Turn on ESLint and update Prettier * Update eslint config * Update eslint config * Update dependencies * Update ESLint and Prettier configurations * update package.json * Update prettier command * Update prettier config file * Change CRLF to LF * Update docs * Update docs	2023-03-08 10:45:16 +02:00
Evgenii Korolevskii	b8eec33327	Merge branch 'main' into use-actual-version-in-cache	2023-01-31 13:39:54 +01:00
Serghei Iakovlev	807559307d	Use const declarations for variables that are never reassigned (#322)	2023-01-31 11:46:49 +01:00
Evgenii Korolevskii	65f50caf42	use actual version in key	2023-01-20 01:30:38 +01:00
Evgenii Korolevskii	89d7939d38	use real version instead of spec	2023-01-20 01:28:58 +01:00
Evgenii Korolevskii	2e7414f276	try get path	2023-01-20 01:27:11 +01:00
Evgenii Korolevskii	de201a09c0	log version-spec	2023-01-20 01:21:36 +01:00
Evgenii Korolevskii	17106403fa	Allow to use only GOCACHE for cache (#305)	2022-12-19 11:22:17 +01:00
Jongwoo Han	bb5ff97ab9	refactor: Use early return pattern to avoid nested conditions (#302)	2022-12-16 15:05:54 +01:00
Dmitry Shibanov	6edd4406fa	fix log for stable aliases (#303)	2022-12-12 15:45:36 +01:00
Milos Pantic	38dbe75f81	Add stable and oldstable aliases (#300)	2022-12-12 10:58:49 +01:00
Marko Zivic	e983b65a44	Merge pull request #283 from koba1t/add_support_gowork_for_go-version-file ... add support go.work file for go-version-file	2022-11-08 11:45:09 +01:00