From 3d9f8e8a5d6da7b5fe532a2d6179426b491f23ac Mon Sep 17 00:00:00 2001 From: Matthew Greenwald Date: Mon, 16 Mar 2026 13:42:53 -0400 Subject: [PATCH 1/3] chore: update to node 24 Signed-off-by: Matthew Greenwald --- .github/workflows/auto-build-publish.yml | 2 +- .github/workflows/oidc-integration-test.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/test.yml | 6 +++--- action.yml | 2 +- package-lock.json | 2 +- package.json | 2 +- 7 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/auto-build-publish.yml b/.github/workflows/auto-build-publish.yml index 001eff58f..8a19842b4 100644 --- a/.github/workflows/auto-build-publish.yml +++ b/.github/workflows/auto-build-publish.yml @@ -27,7 +27,7 @@ jobs: runs-on: ${{ matrix.os }}-latest steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: ref: ${{ github.event.pull_request.head.sha }} diff --git a/.github/workflows/oidc-integration-test.yml b/.github/workflows/oidc-integration-test.yml index c1bf2f8dd..646d7fa7e 100644 --- a/.github/workflows/oidc-integration-test.yml +++ b/.github/workflows/oidc-integration-test.yml @@ -119,7 +119,7 @@ jobs: JFROG_CLI_LOG_LEVEL: DEBUG steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: ref: ${{ github.event.pull_request.head.sha }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 530b00741..f90601708 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -8,7 +8,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Extract Major and Minor Versions from Tag id: extract-version diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 06e97de28..e6840e7e0 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -21,11 +21,11 @@ jobs: steps: # Checkout and install prerequisites - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup NodeJS - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: - node-version: "20.x" + node-version: "24.x" # Run action according to the input version - name: Setup JFrog CLI diff --git a/action.yml b/action.yml index 32eea042f..70046bc2c 100644 --- a/action.yml +++ b/action.yml @@ -42,7 +42,7 @@ outputs: oidc-user: description: "JFrog OIDC username from the OIDC token generated by the Setup JFrog CLI when setting oidc-provider-name." runs: - using: "node20" + using: "node24" main: "lib/main.js" post: "lib/cleanup.js" branding: diff --git a/package-lock.json b/package-lock.json index 2652fa3a9..d263397d7 100644 --- a/package-lock.json +++ b/package-lock.json @@ -6,7 +6,7 @@ "packages": { "": { "name": "@jfrog/setup-jfrog-cli", - "version": "4.6.0", + "version": "4.9.1", "hasInstallScript": true, "license": "Apache-2.0", "dependencies": { diff --git a/package.json b/package.json index fb6261cf3..2a3b22b8f 100644 --- a/package.json +++ b/package.json @@ -6,7 +6,7 @@ "main": "lib/main.js", "engines": { "npm": ">=10.0.0", - "node": ">=20.0.0" + "node": ">=24.0.0" }, "scripts": { "build": "tsc", From fab861a373a4d4ec18fac4eadd0432a1a26ae601 Mon Sep 17 00:00:00 2001 From: Matthew Greenwald Date: Mon, 16 Mar 2026 13:44:10 -0400 Subject: [PATCH 2/3] ci: ran npm format Signed-off-by: Matthew Greenwald --- package-lock.json | 2 +- src/utils.ts | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index d263397d7..62f336342 100644 --- a/package-lock.json +++ b/package-lock.json @@ -33,7 +33,7 @@ "typescript": "^5.4.5" }, "engines": { - "node": ">=20.0.0", + "node": ">=24.0.0", "npm": ">=10.0.0" } }, diff --git a/src/utils.ts b/src/utils.ts index ef4168309..6d9726409 100644 --- a/src/utils.ts +++ b/src/utils.ts @@ -480,8 +480,8 @@ export class Utils { if (!jfrogCredentials.jfrogUrl) { throw new Error( `'download-repository' input provided, but no JFrog environment details found. ` + - `Hint - Ensure that the JFrog connection details environment variables are set: ` + - `either a Config Token with a JF_ENV_ prefix or separate env config (JF_URL, JF_USER, JF_PASSWORD, JF_ACCESS_TOKEN)`, + `Hint - Ensure that the JFrog connection details environment variables are set: ` + + `either a Config Token with a JF_ENV_ prefix or separate env config (JF_URL, JF_USER, JF_PASSWORD, JF_ACCESS_TOKEN)`, ); } serverObj.artifactoryUrl = jfrogCredentials.jfrogUrl.replace(/\/$/, '') + '/artifactory'; From 0033ad5c5552b932a8e3a35bb5d44a1889a346ff Mon Sep 17 00:00:00 2001 From: Matthew Greenwald Date: Mon, 16 Mar 2026 13:46:37 -0400 Subject: [PATCH 3/3] ci: adding permissions to cla.yml Signed-off-by: Matthew Greenwald --- .github/workflows/cla.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml index 92a57a439..68f21c790 100644 --- a/.github/workflows/cla.yml +++ b/.github/workflows/cla.yml @@ -6,6 +6,12 @@ on: pull_request_target: types: [ opened, synchronize ] +permissions: + actions: write + contents: write + pull-requests: write + statuses: write + jobs: CLAssistant: runs-on: ubuntu-latest