diff --git a/CHANGELOG.md b/CHANGELOG.md new file mode 100644 index 0000000..f2be2a7 --- /dev/null +++ b/CHANGELOG.md @@ -0,0 +1,8 @@ +# Changelog + +## [1.0.11] - 2026-05-04 + +### Deprecated + +- **`@v1` is deprecated.** v1 runs on Node.js 20, which reached [end-of-life on 2026-04-30](https://nodejs.org/en/about/previous-releases). Please migrate to [`@v2`](https://github.com/cloudsmith-io/cloudsmith-cli-action/tree/master#readme), which runs on Node.js 24. +- **Security-only patches** for `@v1` will continue until **2026-12-31**. No new features or non-security fixes will land on `@v1` after that date. diff --git a/README.md b/README.md index 49f1767..62409de 100644 --- a/README.md +++ b/README.md @@ -8,6 +8,14 @@ This GitHub Action installs the Cloudsmith CLI and pre-authenticates it using OIDC or API Key. 🚀 +> **🛑 DEPRECATED — `@v1` is end-of-life.** +> +> `@v1` runs on Node.js 20, which reached [end-of-life on 2026-04-30](https://nodejs.org/en/about/previous-releases). Please migrate to [`@v2`](https://github.com/cloudsmith-io/cloudsmith-cli-action/tree/master#readme), which runs on Node.js 24. +> +> - **Migration guide:** see the [v2 README](https://github.com/cloudsmith-io/cloudsmith-cli-action/tree/master#readme) for breaking changes (Node.js 24 runtime, OIDC audience default). +> - **Security-only patches** for `@v1` will continue until **2026-12-31**. No new features or non-security fixes will land on `@v1` after that date. +> - To migrate, change `cloudsmith-io/cloudsmith-cli-action@v1` → `cloudsmith-io/cloudsmith-cli-action@v2` in your workflows. + > **⚠️ Notice:** If you are running on self-hosted runners, Python version 3.9 or higher is required. Please ensure your runner meets this requirement to avoid any issues. We recommend using [setup-python](https://github.com/actions/setup-python) action for installing Python. 🐍 ## Inputs diff --git a/action.yml b/action.yml index 9fee716..6bebe49 100644 --- a/action.yml +++ b/action.yml @@ -1,5 +1,5 @@ name: Cloudsmith CLI Setup -description: Set up Cloudsmith CLI in GitHub Actions +description: '[DEPRECATED — please migrate to @v2 (Node.js 24). v1 runs on Node.js 20 (EoL 2026-04-30); security-only patches until 2026-12-31.] Set up Cloudsmith CLI in GitHub Actions' author: BartoszBlizniak inputs: cli-version: diff --git a/dist/index.js b/dist/index.js index 5a59b77..3dcee6e 100644 --- a/dist/index.js +++ b/dist/index.js @@ -35615,7 +35615,7 @@ fs.mkdirSync(path.dirname(EXECUTABLE_PATH), { recursive: true }); async function downloadFile(url, dest) { const res = await fetch(url); if (!res.ok) { - throw new Error(`Failed to fetch ${url}: ${res.statusText}`); + throw new Error(`Failed to fetch ${url} : ${res.statusText}`); } const fileStream = fs.createWriteStream(dest); await new Promise((resolve, reject) => { @@ -45703,6 +45703,12 @@ const { createConfigFile } = __nccwpck_require__(3145); async function run() { try { + core.warning( + "cloudsmith-cli-action @v1 is DEPRECATED. v1 runs on Node.js 20, which reached end-of-life on 2026-04-30 (https://nodejs.org/en/about/previous-releases). " + + "Please migrate to @v2, which runs on Node.js 24. Security-only patches for v1 will continue until 2026-12-31. " + + "Migration guide: https://github.com/cloudsmith-io/cloudsmith-cli-action#readme", + ); + // Get inputs from GitHub Actions workflow const orgName = core.getInput("oidc-namespace"); const serviceAccountSlug = core.getInput("oidc-service-slug"); diff --git a/package-lock.json b/package-lock.json index 6759dfe..5e91a67 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "cloudsmith-github-action", - "version": "1.0.3", + "version": "1.0.11", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "cloudsmith-github-action", - "version": "1.0.3", + "version": "1.0.11", "dependencies": { "@actions/core": "^1.10.1", "@actions/exec": "^1.1.1", diff --git a/package.json b/package.json index bbe3dea..3577541 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "cloudsmith-github-action", - "version": "1.0.3", + "version": "1.0.11", "description": "A GitHub Action to install Cloudsmith CLI and authenticate using OIDC", "main": "dist/index.js", "scripts": { diff --git a/src/download-cli.js b/src/download-cli.js index 65acace..7886286 100644 --- a/src/download-cli.js +++ b/src/download-cli.js @@ -22,7 +22,7 @@ fs.mkdirSync(path.dirname(EXECUTABLE_PATH), { recursive: true }); async function downloadFile(url, dest) { const res = await fetch(url); if (!res.ok) { - throw new Error(`Failed to fetch ${url}: ${res.statusText}`); + throw new Error(`Failed to fetch ${url} : ${res.statusText}`); } const fileStream = fs.createWriteStream(dest); await new Promise((resolve, reject) => { diff --git a/src/main.js b/src/main.js index 231ab39..0df0cc4 100644 --- a/src/main.js +++ b/src/main.js @@ -5,6 +5,12 @@ const { createConfigFile } = require("./create-config-file"); async function run() { try { + core.warning( + "cloudsmith-cli-action @v1 is DEPRECATED. v1 runs on Node.js 20, which reached end-of-life on 2026-04-30 (https://nodejs.org/en/about/previous-releases). " + + "Please migrate to @v2, which runs on Node.js 24. Security-only patches for v1 will continue until 2026-12-31. " + + "Migration guide: https://github.com/cloudsmith-io/cloudsmith-cli-action#readme", + ); + // Get inputs from GitHub Actions workflow const orgName = core.getInput("oidc-namespace"); const serviceAccountSlug = core.getInput("oidc-service-slug");