Merge remote-tracking branch 'origin/main' into dependabot/npm_and_yarn/ts-jest-29.2.6

Fix for Candidate Not Iterable Error (#1082 )
* candidates not iterable * update the error message * update error to debug * update debug to info * error message updates
2026-03-15 06:58:03 +00:00 · 2025-04-22 16:21:12 +05:30 · 2025-04-17 08:55:44 -05:00 · 2025-04-11 13:36:23 -05:00 · 2025-03-24 16:24:56 +00:00
10 changed files with 204 additions and 58 deletions
--- a/.github/workflows/e2e-cache.yml
+++ b/.github/workflows/e2e-cache.yml
@@ -78,8 +78,12 @@ jobs:
            python-version: pypy-3.11-v7.x
          - os: ubuntu-22.04
            python-version: pypy-3.11-v7.x
+          - os: ubuntu-22.04-arm
+            python-version: pypy-3.10-v7.x
          - os: ubuntu-22.04-arm
            python-version: pypy-3.11-v7.x
+          - os: ubuntu-22.04-arm
+            python-version: pypy-3.10-v7.x
    steps:
      - uses: actions/checkout@v4
      - name: Setup Python
--- a/.github/workflows/e2e-tests.yml
+++ b/.github/workflows/e2e-tests.yml
@@ -19,7 +19,6 @@ jobs:
      matrix:
        operating-system:
          [
-            ubuntu-20.04,
            windows-latest,
            ubuntu-22.04,
            ubuntu-22.04-arm,
--- a/.github/workflows/test-graalpy.yml
+++ b/.github/workflows/test-graalpy.yml
@@ -21,7 +21,6 @@ jobs:
        os:
          [
            macos-latest,
-            ubuntu-20.04,
            ubuntu-22.04,
            ubuntu-22.04-arm,
            ubuntu-24.04-arm,
@@ -77,7 +76,6 @@ jobs:
        os:
          [
            macos-latest,
-            ubuntu-20.04,
            ubuntu-22.04,
            ubuntu-22.04-arm,
            ubuntu-24.04-arm,
--- a/.github/workflows/test-pypy.yml
+++ b/.github/workflows/test-pypy.yml
@@ -24,7 +24,6 @@ jobs:
          [
            macos-latest,
            windows-latest,
-            ubuntu-20.04,
            ubuntu-22.04,
            ubuntu-22.04-arm,
            ubuntu-24.04-arm,
@@ -142,7 +141,6 @@ jobs:
          [
            macos-latest,
            windows-latest,
-            ubuntu-20.04,
            ubuntu-22.04,
            ubuntu-22.04-arm,
            ubuntu-24.04-arm,
@@ -177,7 +175,6 @@ jobs:
          [
            macos-latest,
            windows-latest,
-            ubuntu-20.04,
            ubuntu-22.04,
            ubuntu-22.04-arm,
            ubuntu-24.04-arm,
@@ -220,7 +217,6 @@ jobs:
          [
            macos-latest,
            windows-latest,
-            ubuntu-20.04,
            ubuntu-22.04,
            ubuntu-22.04-arm,
            ubuntu-24.04-arm,
--- a/.github/workflows/test-python.yml
+++ b/.github/workflows/test-python.yml
@@ -24,7 +24,6 @@ jobs:
          [
            macos-latest,
            windows-latest,
-            ubuntu-20.04,
            ubuntu-22.04,
            ubuntu-22.04-arm,
            macos-13,
@@ -69,7 +68,6 @@ jobs:
          [
            macos-latest,
            windows-latest,
-            ubuntu-20.04,
            ubuntu-22.04,
            ubuntu-22.04-arm,
            macos-13,
@@ -117,7 +115,6 @@ jobs:
          [
            macos-latest,
            windows-latest,
-            ubuntu-20.04,
            ubuntu-22.04,
            ubuntu-22.04-arm,
            macos-13,
@@ -163,7 +160,6 @@ jobs:
          [
            macos-latest,
            windows-latest,
-            ubuntu-20.04,
            ubuntu-22.04,
            ubuntu-22.04-arm,
            macos-13,
@@ -214,7 +210,6 @@ jobs:
          [
            macos-latest,
            windows-latest,
-            ubuntu-20.04,
            ubuntu-22.04,
            ubuntu-22.04-arm,
            macos-13,
@@ -265,7 +260,6 @@ jobs:
          [
            macos-latest,
            windows-latest,
-            ubuntu-20.04,
            ubuntu-22.04,
            ubuntu-22.04-arm,
            macos-13,
@@ -300,7 +294,6 @@ jobs:
          [
            macos-latest,
            windows-latest,
-            ubuntu-20.04,
            ubuntu-22.04,
            ubuntu-22.04-arm,
            macos-13,
@@ -419,7 +412,6 @@ jobs:
          [
            macos-latest,
            windows-latest,
-            ubuntu-20.04,
            ubuntu-22.04,
            ubuntu-22.04-arm,
            macos-13,
--- a/tests/install-python.test.ts
+++ b/tests/install-python.test.ts
@@ -8,10 +8,29 @@ import * as tc from '@actions/tool-cache';

 jest.mock('@actions/http-client');
 jest.mock('@actions/tool-cache');
-
-const mockManifest = [{version: '1.0.0'}];
+jest.mock('@actions/tool-cache', () => ({
+  getManifestFromRepo: jest.fn()
+}));
+const mockManifest = [
+  {
+    version: '1.0.0',
+    stable: true,
+    files: [
+      {
+        filename: 'tool-v1.0.0-linux-x64.tar.gz',
+        platform: 'linux',
+        arch: 'x64',
+        download_url: 'https://example.com/tool-v1.0.0-linux-x64.tar.gz'
+      }
+    ]
+  }
+];

 describe('getManifest', () => {
+  beforeEach(() => {
+    jest.resetAllMocks();
+  });
+
  it('should return manifest from repo', async () => {
    (tc.getManifestFromRepo as jest.Mock).mockResolvedValue(mockManifest);
    const manifest = await getManifest();
--- a/dist/setup/index.js
+++ b/dist/setup/index.js
@@ -97461,16 +97461,36 @@ function findReleaseFromManifest(semanticVersionSpec, architecture, manifest) {
    });
 }
 exports.findReleaseFromManifest = findReleaseFromManifest;
+function isIToolRelease(obj) {
+    return (typeof obj === 'object' &&
+        obj !== null &&
+        typeof obj.version === 'string' &&
+        typeof obj.stable === 'boolean' &&
+        Array.isArray(obj.files) &&
+        obj.files.every((file) => typeof file.filename === 'string' &&
+            typeof file.platform === 'string' &&
+            typeof file.arch === 'string' &&
+            typeof file.download_url === 'string'));
+}
 function getManifest() {
    return __awaiter(this, void 0, void 0, function* () {
        try {
-            return yield getManifestFromRepo();
+            const repoManifest = yield getManifestFromRepo();
+            if (Array.isArray(repoManifest) &&
+                repoManifest.length &&
+                repoManifest.every(isIToolRelease)) {
+                return repoManifest;
+            }
+            throw new Error('The repository manifest is invalid or does not include any valid tool release (IToolRelease) entries.');
        }
        catch (err) {
            core.debug('Fetching the manifest via the API failed.');
            if (err instanceof Error) {
                core.debug(err.message);
            }
+            else {
+                core.error('An unexpected error occurred while fetching the manifest.');
+            }
        }
        return yield getManifestFromURL();
    });
@@ -97518,6 +97538,9 @@ function installPython(workingDirectory) {
 }
 function installCpythonFromRelease(release) {
    return __awaiter(this, void 0, void 0, function* () {
+        if (!release.files || release.files.length === 0) {
+            throw new Error('No files found in the release to download.');
+        }
        const downloadUrl = release.files[0].download_url;
        core.info(`Download from "${downloadUrl}"`);
        let pythonPath = '';
@@ -97538,8 +97561,11 @@ function installCpythonFromRelease(release) {
        catch (err) {
            if (err instanceof tc.HTTPError) {
                // Rate limit?
-                if (err.httpStatusCode === 403 || err.httpStatusCode === 429) {
-                    core.info(`Received HTTP status code ${err.httpStatusCode}.  This usually indicates the rate limit has been exceeded`);
+                if (err.httpStatusCode === 403) {
+                    core.error(`Received HTTP status code 403. This indicates a permission issue or restricted access.`);
+                }
+                else if (err.httpStatusCode === 429) {
+                    core.info(`Received HTTP status code 429.  This usually indicates the rate limit has been exceeded`);
                }
                else {
                    core.info(err.message);
--- a/package-lock.json
+++ b/package-lock.json
@@ -33,7 +33,7 @@
        "jest": "^29.7.0",
        "jest-circus": "^29.7.0",
        "prettier": "^2.8.4",
-        "ts-jest": "^29.1.2",
+        "ts-jest": "^29.3.0",
        "typescript": "^5.4.2"
      }
    },
@@ -1985,6 +1985,13 @@
        "node": ">=8"
      }
    },
+    "node_modules/async": {
+      "version": "3.2.6",
+      "resolved": "https://registry.npmjs.org/async/-/async-3.2.6.tgz",
+      "integrity": "sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==",
+      "dev": true,
+      "license": "MIT"
+    },
    "node_modules/asynckit": {
      "version": "0.4.0",
      "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
@@ -2476,6 +2483,22 @@
        "node": ">=6.0.0"
      }
    },
+    "node_modules/ejs": {
+      "version": "3.1.10",
+      "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz",
+      "integrity": "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "jake": "^10.8.5"
+      },
+      "bin": {
+        "ejs": "bin/cli.js"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
    "node_modules/electron-to-chromium": {
      "version": "1.4.587",
      "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.4.587.tgz",
@@ -2974,6 +2997,39 @@
        "node": "^10.12.0 || >=12.0.0"
      }
    },
+    "node_modules/filelist": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/filelist/-/filelist-1.0.4.tgz",
+      "integrity": "sha512-w1cEuf3S+DrLCQL7ET6kz+gmlJdbq9J7yXCSjK/OZCPA+qEN1WyF4ZAf0YYJa4/shHJra2t/d/r8SV4Ji+x+8Q==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "minimatch": "^5.0.1"
+      }
+    },
+    "node_modules/filelist/node_modules/brace-expansion": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
+      "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^1.0.0"
+      }
+    },
+    "node_modules/filelist/node_modules/minimatch": {
+      "version": "5.1.6",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.6.tgz",
+      "integrity": "sha512-lKwV/1brpG6mBUFHtb7NUmtABCb2WZZmm2wNiOA5hAb8VdCS4B3dtMWyvcoViccwAW/COERjXLt0zP1zXUN26g==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "brace-expansion": "^2.0.1"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
    "node_modules/fill-range": {
      "version": "7.1.1",
      "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz",
@@ -3446,6 +3502,25 @@
        "node": ">=8"
      }
    },
+    "node_modules/jake": {
+      "version": "10.9.2",
+      "resolved": "https://registry.npmjs.org/jake/-/jake-10.9.2.tgz",
+      "integrity": "sha512-2P4SQ0HrLQ+fw6llpLnOaGAvN2Zu6778SJMrCUwns4fOoG9ayrTiZk3VV8sCPkVZF8ab0zksVpS8FDY5pRCNBA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "async": "^3.2.3",
+        "chalk": "^4.0.2",
+        "filelist": "^1.0.4",
+        "minimatch": "^3.1.2"
+      },
+      "bin": {
+        "jake": "bin/cli.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
    "node_modules/jest": {
      "version": "29.7.0",
      "resolved": "https://registry.npmjs.org/jest/-/jest-29.7.0.tgz",
@@ -4812,12 +4887,10 @@
      "integrity": "sha512-0s+oAmw9zLl1V1cS9BtZN7JAd0cW5e0QH4W3LWEK6a4LaLEA2OTpGYWDY+6XasBLtz6wkm3u1xRw95mRuJ59WA=="
    },
    "node_modules/semver": {
-      "version": "7.6.0",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",
-      "integrity": "sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",
-      "dependencies": {
-        "lru-cache": "^6.0.0"
-      },
+      "version": "7.7.1",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.1.tgz",
+      "integrity": "sha512-hlq8tAfn0m/61p4BVRcPzIGr6LKiMwo4VM6dGi6pt4qcRkmNzTcWq6eCEjEh+qXjkMDvPlOFFSGwQjoEa6gyMA==",
+      "license": "ISC",
      "bin": {
        "semver": "bin/semver.js"
      },
@@ -4825,22 +4898,6 @@
        "node": ">=10"
      }
    },
-    "node_modules/semver/node_modules/lru-cache": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz",
-      "integrity": "sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==",
-      "dependencies": {
-        "yallist": "^4.0.0"
-      },
-      "engines": {
-        "node": ">=10"
-      }
-    },
-    "node_modules/semver/node_modules/yallist": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz",
-      "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="
-    },
    "node_modules/shebang-command": {
      "version": "2.0.0",
      "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
@@ -5066,28 +5123,32 @@
      "integrity": "sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw=="
    },
    "node_modules/ts-jest": {
-      "version": "29.1.2",
-      "resolved": "https://registry.npmjs.org/ts-jest/-/ts-jest-29.1.2.tgz",
-      "integrity": "sha512-br6GJoH/WUX4pu7FbZXuWGKGNDuU7b8Uj77g/Sp7puZV6EXzuByl6JrECvm0MzVzSTkSHWTihsXt+5XYER5b+g==",
+      "version": "29.3.0",
+      "resolved": "https://registry.npmjs.org/ts-jest/-/ts-jest-29.3.0.tgz",
+      "integrity": "sha512-4bfGBX7Gd1Aqz3SyeDS9O276wEU/BInZxskPrbhZLyv+c1wskDCqDFMJQJLWrIr/fKoAH4GE5dKUlrdyvo+39A==",
      "dev": true,
+      "license": "MIT",
      "dependencies": {
-        "bs-logger": "0.x",
-        "fast-json-stable-stringify": "2.x",
+        "bs-logger": "^0.2.6",
+        "ejs": "^3.1.10",
+        "fast-json-stable-stringify": "^2.1.0",
        "jest-util": "^29.0.0",
        "json5": "^2.2.3",
-        "lodash.memoize": "4.x",
-        "make-error": "1.x",
-        "semver": "^7.5.3",
-        "yargs-parser": "^21.0.1"
+        "lodash.memoize": "^4.1.2",
+        "make-error": "^1.3.6",
+        "semver": "^7.7.1",
+        "type-fest": "^4.37.0",
+        "yargs-parser": "^21.1.1"
      },
      "bin": {
        "ts-jest": "cli.js"
      },
      "engines": {
-        "node": "^16.10.0 || ^18.0.0 || >=20.0.0"
+        "node": "^14.15.0 || ^16.10.0 || ^18.0.0 || >=20.0.0"
      },
      "peerDependencies": {
        "@babel/core": ">=7.0.0-beta.0 <8",
+        "@jest/transform": "^29.0.0",
        "@jest/types": "^29.0.0",
        "babel-jest": "^29.0.0",
        "jest": "^29.0.0",
@@ -5097,6 +5158,9 @@
        "@babel/core": {
          "optional": true
        },
+        "@jest/transform": {
+          "optional": true
+        },
        "@jest/types": {
          "optional": true
        },
@@ -5108,6 +5172,19 @@
        }
      }
    },
+    "node_modules/ts-jest/node_modules/type-fest": {
+      "version": "4.38.0",
+      "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-4.38.0.tgz",
+      "integrity": "sha512-2dBz5D5ycHIoliLYLi0Q2V7KRaDlH0uWIvmk7TYlAg5slqwiPv1ezJdZm1QEM0xgk29oYWMCbIG7E6gHpvChlg==",
+      "dev": true,
+      "license": "(MIT OR CC0-1.0)",
+      "engines": {
+        "node": ">=16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
    "node_modules/tslib": {
      "version": "2.6.2",
      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.6.2.tgz",
--- a/package.json
+++ b/package.json
@@ -49,7 +49,7 @@
    "jest": "^29.7.0",
    "jest-circus": "^29.7.0",
    "prettier": "^2.8.4",
-    "ts-jest": "^29.1.2",
+    "ts-jest": "^29.3.0",
    "typescript": "^5.4.2"
  }
 }
--- a/src/install-python.ts
+++ b/src/install-python.ts
@@ -5,6 +5,7 @@ import * as exec from '@actions/exec';
 import * as httpm from '@actions/http-client';
 import {ExecOptions} from '@actions/exec/lib/interfaces';
 import {IS_WINDOWS, IS_LINUX, getDownloadFileName} from './utils';
+import {IToolRelease} from '@actions/tool-cache';

 const TOKEN = core.getInput('token');
 const AUTH = !TOKEN ? undefined : `token ${TOKEN}`;
@@ -31,14 +32,41 @@ export async function findReleaseFromManifest(

  return foundRelease;
 }
-
+function isIToolRelease(obj: any): obj is IToolRelease {
+  return (
+    typeof obj === 'object' &&
+    obj !== null &&
+    typeof obj.version === 'string' &&
+    typeof obj.stable === 'boolean' &&
+    Array.isArray(obj.files) &&
+    obj.files.every(
+      (file: any) =>
+        typeof file.filename === 'string' &&
+        typeof file.platform === 'string' &&
+        typeof file.arch === 'string' &&
+        typeof file.download_url === 'string'
+    )
+  );
+}
 export async function getManifest(): Promise<tc.IToolRelease[]> {
  try {
-    return await getManifestFromRepo();
+    const repoManifest = await getManifestFromRepo();
+    if (
+      Array.isArray(repoManifest) &&
+      repoManifest.length &&
+      repoManifest.every(isIToolRelease)
+    ) {
+      return repoManifest;
+    }
+    throw new Error(
+      'The repository manifest is invalid or does not include any valid tool release (IToolRelease) entries.'
+    );
  } catch (err) {
    core.debug('Fetching the manifest via the API failed.');
    if (err instanceof Error) {
      core.debug(err.message);
+    } else {
+      core.error('An unexpected error occurred while fetching the manifest.');
    }
  }
  return await getManifestFromURL();
@@ -93,6 +121,9 @@ async function installPython(workingDirectory: string) {
 }

 export async function installCpythonFromRelease(release: tc.IToolRelease) {
+  if (!release.files || release.files.length === 0) {
+    throw new Error('No files found in the release to download.');
+  }
  const downloadUrl = release.files[0].download_url;

  core.info(`Download from "${downloadUrl}"`);
@@ -113,9 +144,13 @@ export async function installCpythonFromRelease(release: tc.IToolRelease) {
  } catch (err) {
    if (err instanceof tc.HTTPError) {
      // Rate limit?
-      if (err.httpStatusCode === 403 || err.httpStatusCode === 429) {
+      if (err.httpStatusCode === 403) {
+        core.error(
+          `Received HTTP status code 403. This indicates a permission issue or restricted access.`
+        );
+      } else if (err.httpStatusCode === 429) {
        core.info(
-          `Received HTTP status code ${err.httpStatusCode}.  This usually indicates the rate limit has been exceeded`
+          `Received HTTP status code 429.  This usually indicates the rate limit has been exceeded`
        );
      } else {
        core.info(err.message);