[dependabot skip] chore: update generated content

dist/index.cjs

@@ -156,18 +156,18 @@ Other caches with similar key:`);for(let c of i?.artifactCaches||[])B(`Cache Key
 `));let n=yield v1(r,"create");yield _1(n,t)})}o(k1,"createTar");var Np=function(t,e,r,n){function s(i){return i instanceof r?i:new r(function(a){a(i)})}return o(s,"adopt"),new(r||(r=Promise))(function(i,a){function c(d){try{u(n.next(d))}catch(A){a(A)}}o(c,"fulfilled");function l(d){try{u(n.throw(d))}catch(A){a(A)}}o(l,"rejected");function u(d){d.done?i(d.value):s(d.value).then(c,l)}o(u,"step"),u((n=n.apply(t,e||[])).next())})},Ri=class t extends Error{static{o(this,"ValidationError")}constructor(e){super(e),this.name="ValidationError",Object.setPrototypeOf(this,t.prototype)}},Lu=class t extends Error{static{o(this,"ReserveCacheError")}constructor(e){super(e),this.name="ReserveCacheError",Object.setPrototypeOf(this,t.prototype)}},D1="cache write denied:",e0=class t extends Lu{static{o(this,"CacheWriteDeniedError")}constructor(e){super(e),this.name="CacheWriteDeniedError",Object.setPrototypeOf(this,t.prototype)}},Cre=_I,t0=class t extends Error{static{o(this,"CacheReadDeniedError")}constructor(e){super(e),this.name="CacheReadDeniedError",Object.setPrototypeOf(this,t.prototype)}},r0=class t extends Error{static{o(this,"FinalizeCacheError")}constructor(e){super(e),this.name="FinalizeCacheError",Object.setPrototypeOf(this,t.prototype)}};function Ire(t){if(!t||t.length===0)throw new Ri("Path Validation Error: At least one directory or file path is required")}o(Ire,"checkPaths");function O1(t){if(t.length>512)throw new Ri(`Key Validation Error: ${t} cannot be larger than 512 characters.`);if(!/^[^,]*$/.test(t))throw new Ri(`Key Validation Error: ${t} cannot contain commas.`)}o(O1,"checkKey");function M1(){return mg()==="v2"?!!process.env.ACTIONS_RESULTS_URL:!!process.env.ACTIONS_CACHE_URL}o(M1,"isFeatureAvailable");function Bre(t,e,r,n){return Np(this,arguments,void 0,function*(s,i,a,c,l=!1){let u=mg();B(`Cache service version: ${u}`),Ire(s);let d=gL();if(!pte(d)){S(`Cache restore skipped: the effective cache-mode '${d}' does not permit reads.`),B(`Skipped restore for paths [${s.join(", ")}] with primary key '${i}'.`);return}return u==="v2"?yield EGe(s,i,a,c,l):yield gGe(s,i,a,c,l)})}o(Bre,"restoreCache");function gGe(t,e,r,n){return Np(this,arguments,void 0,function*(s,i,a,c,l=!1){var u;a=a||[];let d=[i,...a];if(B("Resolved Keys:"),B(JSON.stringify(d)),d.length>10)throw new Ri("Key Validation Error: Keys are limited to a maximum of 10.");for(let f of d)O1(f);let A=yield hm(),p="";try{let f;try{f=yield Ite(d,s,{compressionMethod:A,enableCrossOsArchive:l})}catch(g){let y=(u=g?.message)!==null&&u!==void 0?u:"";throw y.includes(Cre)?new t0(y):g}if(!f?.archiveLocation)return;if(c?.lookupOnly)return S("Lookup only - skipping download"),f.cacheKey;p=Pg.join(yield pm(),vc(A)),B(`Archive Path: ${p}`),yield yL(f.archiveLocation,p,c),Ia()&&(yield _g(p,A));let h=eo(p);return S(`Cache Size: ~${Math.round(h/(1024*1024))} MB (${h} B)`),yield P1(p,A),S("Cache restored successfully"),f.cacheKey}catch(f){let h=f;if(h.name===Ri.name)throw f;h instanceof to&&typeof h.statusCode=="number"&&h.statusCode>=500?BA(`Failed to restore: ${f.message}`):Je(`Failed to restore: ${f.message}`)}finally{try{yield fm(p)}catch(f){B(`Failed to delete archive: ${f}`)}}})}o(gGe,"restoreCacheV1");function EGe(t,e,r,n){return Np(this,arguments,void 0,function*(s,i,a,c,l=!1){var u;c=Object.assign(Object.assign({},c),{useAzureSdk:!0}),a=a||[];let d=[i,...a];if(B("Resolved Keys:"),B(JSON.stringify(d)),d.length>10)throw new Ri("Key Validation Error: Keys are limited to a maximum of 10.");for(let p of d)O1(p);let A="";try{let p=T1(),f=yield hm(),h={key:i,restoreKeys:a,version:PA(s,f,l)},g;try{g=yield p.GetCacheEntryDownloadURL(h)}catch(C){let I=(u=C?.message)!==null&&u!==void 0?u:"";throw I.includes(Cre)?new t0(I):C}if(!g.ok){B(`Cache not found for version ${h.version} of keys: ${d.join(", ")}`);return}if(h.key!==g.matchedKey?S(`Cache hit for restore-key: ${g.matchedKey}`):S(`Cache hit for: ${g.matchedKey}`),c?.lookupOnly)return S("Lookup only - skipping download"),g.matchedKey;A=Pg.join(yield pm(),vc(f)),B(`Archive path: ${A}`),B(`Starting download of archive to: ${A}`),yield yL(g.signedDownloadUrl,A,c);let E=eo(A);return S(`Cache Size: ~${Math.round(E/(1024*1024))} MB (${E} B)`),Ia()&&(yield _g(A,f)),yield P1(A,f),S("Cache restored successfully"),g.matchedKey}catch(p){let f=p;if(f.name===Ri.name)throw p;f instanceof to&&typeof f.statusCode=="number"&&f.statusCode>=500?BA(`Failed to restore: ${p.message}`):Je(`Failed to restore: ${p.message}`)}finally{try{A&&(yield fm(A))}catch(p){B(`Failed to delete archive: ${p}`)}}})}o(EGe,"restoreCacheV2");function L1(t,e,r){return Np(this,arguments,void 0,function*(n,s,i,a=!1){let c=mg();B(`Cache service version: ${c}`),Ire(n),O1(s);let l=gL();return fte(l)?c==="v2"?yield CGe(n,s,i,a):yield yGe(n,s,i,a):(S(`Cache save skipped: the effective cache-mode '${l}' does not permit writes.`),B(`Skipped save for paths [${n.join(", ")}] with key '${s}'.`),-1)})}o(L1,"saveCache");function yGe(t,e,r){return Np(this,arguments,void
Line truncated
 `,a).length:A,u?(c===null?0:c.length)+l.length:0,u?l.length+A:0);return p<f},"__needMoreData"),parse:o(function(n,s,i,a){let{bom:c,comment_no_infix:l,delimiter_auto:u,encoding:d,from_line:A,ltrim:p,max_record_size:f,raw:h,relax_quotes:g,rtrim:y,skip_empty_lines:E,to:C,to_line:I}=this.options,{comment:b,escape:N,quote:Q,record_delimiter:D}=this.options,{bomSkipped:ce,delimiterDiscovered:Me,delimiterBufPrevious:qe,rawBuffer:Ye,escapeIsQuote:Ce}=this.state;if(!Me&&u){let Ge;if(qe===void 0?Ge=n:qe!==void 0&&n===void 0?Ge=qe:Ge=Buffer.concat([qe,n]),n=void 0,s||Ge.length>u.size)this.options.delimiter=[Buffer.from(Ooe(Ge,this.options.delimiter_auto))],this.state.previousBuf=Ge,this.state.delimiterBufPrevious=void 0,this.state.delimiterDiscovered=!0;else{this.state.delimiterBufPrevious=Ge;return}}let{previousBuf:tt}=this.state,de;if(tt===void 0)if(n===void 0){a();return}else de=n;else tt!==void 0&&n===void 0?de=tt:de=Buffer.concat([tt,n]);if(ce===!1)if(c===!1)this.state.bomSkipped=!0;else if(de.length<3){if(s===!1){this.state.previousBuf=de;return}}else{for(let Ge in Gp)if(Gp[Ge].compare(de,0,Gp[Ge].length)===0){let Oi=Gp[Ge].length;this.state.bufBytesStart+=Oi,de=de.slice(Oi);let nc=qp({...this.original_options,encoding:Ge});for(let bt in nc)this.options[bt]=nc[bt];({comment:b,escape:N,quote:Q}=this.options);break}this.state.bomSkipped=!0}let Gr=de.length,$;for($=0;$<Gr&&!this.__needMoreData($,Gr,s);$++){if(this.state.wasRowDelimiter===!0&&(this.info.lines++,this.state.wasRowDelimiter=!1),I!==-1&&this.info.lines>I){this.state.stop=!0,a();return}this.state.quoting===!1&&D.length===0&&this.__autoDiscoverRecordDelimiter(de,$)&&(D=this.options.record_delimiter);let Ge=de[$];if(h===!0&&Ye.append(Ge),(Ge===zYe||Ge===$Ye)&&this.state.wasRowDelimiter===!1&&(this.state.wasRowDelimiter=!0),this.state.escaping===!0)this.state.escaping=!1;else{if(N!==null&&this.state.quoting===!0&&this.__isEscape(de,$,Ge)&&$+N.length<Gr)if(Ce){if(this.__isQuote(de,$+N.length)){this.state.escaping=!0,$+=N.length-1;continue}}else{this.state.escaping=!0,$+=N.length-1;continue}if(this.state.commenting===!1&&this.__isQuote(de,$))if(this.state.quoting===!0){let bt=de[$+Q.length],Mi=y&&this.__isCharTrimable(de,$+Q.length),Fn=b!==null&&this.__compareBytes(b,de,$+Q.length,bt),El=this.__isDelimiter(de,$+Q.length,bt),LE=D.length===0?this.__autoDiscoverRecordDelimiter(de,$+Q.length):this.__isRecordDelimiter(bt,de,$+Q.length);if(N!==null&&this.__isEscape(de,$,Ge)&&this.__isQuote(de,$+N.length))$+=N.length-1;else if(!bt||El||LE||Fn||Mi){this.state.quoting=!1,this.state.wasQuoting=!0,$+=Q.length-1;continue}else if(g===!1){let hG=this.__error(new Se("CSV_INVALID_CLOSING_QUOTE",["Invalid Closing Quote:",`got "${String.fromCharCode(bt)}"`,`at line ${this.info.lines}`,"instead of delimiter, record delimiter, trimable character","(if activated) or comment"],this.options,this.__infoField()));if(hG!==void 0)return hG}else this.state.quoting=!1,this.state.wasQuoting=!0,this.state.field.prepend(Q),$+=Q.length-1}else if(this.state.field.length!==0){if(g===!1){let bt=this.__infoField(),Mi=Object.keys(Gp).map(El=>Gp[El].equals(this.state.field.toString())?El:!1).filter(Boolean)[0],Fn=this.__error(new Se("INVALID_OPENING_QUOTE",["Invalid Opening Quote:",`a quote is found on field ${JSON.stringify(bt.column)} at line ${bt.lines}, value is ${JSON.stringify(this.state.field.toString(d))}`,Mi?`(${Mi} bom)`:void 0],this.options,bt,{field:this.state.field}));if(Fn!==void 0)return Fn}}else{this.state.quoting=!0,$+=Q.length-1;continue}if(this.state.quoting===!1){let bt=this.__isRecordDelimiter(Ge,de,$);if(bt!==0){if(this.state.commenting&&this.state.wasQuoting===!1&&this.state.record.length===0&&this.state.field.length===0)this.info.comment_lines++;else{if(this.state.enabled===!1&&this.info.lines+(this.state.wasRowDelimiter===!0?1:0)>=A){this.state.enabled=!0,this.__resetField(),this.__resetRecord(),$+=bt-1;continue}if(E===!0&&this.state.wasQuoting===!1&&this.state.record.length===0&&this.state.field.length===0){this.info.empty_lines++,$+=bt-1;continue}this.info.bytes=this.state.bufBytesStart+$;let El=this.__onField();if(El!==void 0)return El;this.info.bytes=this.state.bufBytesStart+$+bt;let LE=this.__onRecord(i);if(LE!==void 0)return LE;if(C!==-1&&this.info.records>=C){this.state.stop=!0,a();return}}this.state.commenting=!1,$+=bt-1;continue}if(this.state.commenting)continue;if(b!==null&&(l===!1||this.state.record.length===0&&this.state.field.length===0)&&this.__compareBytes(b,de,$,Ge)!==0){this.state.commenting=!0;continue}let Mi=this.__isDelimiter(de,$,Ge);if(Mi!==0){this.info.bytes=this.state.bufBytesStart+$;let Fn=this.__onField();if(Fn!==void 0)return Fn;$+=Mi-1;continue}}}if(this.state.commenting===!1&&f!==0&&this.state.record_length+this.state.field.length>f)return this.__error(new Se("CSV_MAX_RECORD_SIZE",["Max Record Size:","record exceed the maximum number of tolerated bytes",`of ${f}`,`at line ${this.info.lines}`],this.options,this.__infoField()));let Oi=p===!1||th
Line truncated
 `,i),Buffer.from(`
-`,i),Buffer.from("\r",i)];e:for(let c=0;c<a.length;c++){let l=a[c].length;for(let u=0;u<l;u++)if(a[c][u]!==n[s+u])continue e;return this.options.record_delimiter.push(a[c]),this.state.recordDelimiterMaxLength=a[c].length,a[c].length}return 0},"__autoDiscoverRecordDelimiter"),__error:o(function(n){let{encoding:s,raw:i,skip_records_with_error:a}=this.options,c=typeof n=="string"?new Error(n):n;if(a){if(this.state.recordHasError=!0,this.options.on_skip!==void 0)try{this.options.on_skip(c,i?this.state.rawBuffer.toString(s):void 0)}catch(l){return l}return}else return c},"__error"),__infoDataSet:o(function(){return{...this.info,columns:this.options.columns}},"__infoDataSet"),__infoRecord:o(function(){let{columns:n,raw:s,encoding:i}=this.options;return{...this.__infoDataSet(),bytes_records:this.info.bytes,error:this.state.error,header:n===!0,index:this.state.record.length,raw:s?this.state.rawBuffer.toString(i):void 0}},"__infoRecord"),__infoField:o(function(){let{columns:n}=this.options,s=Array.isArray(n),i=this.info.bytes_records;return{...this.__infoRecord(),bytes_records:i,column:s===!0?n.length>this.state.record.length?n[this.state.record.length].name:null:this.state.record.length,quoting:this.state.wasQuoting}},"__infoField")}},"transform");var ms=o(function(t,e={}){typeof t=="string"&&(t=Buffer.from(t));let r=e&&e.objname?Object.create(null):[],n=rS(e),s=o(c=>{n.options.objname===void 0?r.push(c):r[c[0]]=c[1]},"push"),i=o(()=>{},"close"),a=n.parse(t,!0,s,i);if(a!==void 0)throw a;return r},"parse");var Oe=class t{static{o(this,"Util")}static getInputList(e,r){return this.getList(Pr(e,{trimWhitespace:r?.trimWhitespace!==!1}),r)}static getList(e,r){let n=[];if(e=="")return n;let s=ms(e,{columns:!1,relaxQuotes:!0,comment:r?.comment,comment_no_infix:r?.commentNoInfix,relaxColumnCount:!0,skipEmptyLines:!0,quote:r?.quote});for(let i of s)i.length==1?r?.ignoreComma?n.push(i[0]):n.push(...i[0].split(",")):r?.ignoreComma?n.push(i.join(",")):n.push(...i);return n.filter(i=>i).map(i=>r?.trimWhitespace===!1?i:i.trim())}static getInputNumber(e){let r=Pr(e);if(r)return parseInt(r)}static async asyncForEach(e,r){for(let n=0;n<e.length;n++)await r(e[n],n,e)}static isValidURL(e){let r;try{r=new URL(e)}catch{return!1}return r.protocol==="http:"||r.protocol==="https:"}static isValidRef(e){if(t.isValidURL(e))return!0;for(let r of["git://","github.com/","git@"])if(e.startsWith(r))return!0;return!1}static async powershellCommand(e,r){let n=await Br("powershell",!0),s=e.replace(/'/g,"''"),i=[];if(r)for(let a in r)i.push(`-${a} '${r[a].replace(/'/g,"''")}'`);return{command:`"${n}"`,args:["-NoLogo","-Sta","-NoProfile","-NonInteractive","-ExecutionPolicy","Unrestricted","-EncodedCommand",Buffer.from(`& '${s}' ${i.join(" ")}`,"utf16le").toString("base64")]}}static isDirectory(e){try{return Loe.default.lstatSync(e).isDirectory()}catch{}return!1}static trimPrefix(e,r){return!e||!r||e.indexOf(r)!==0?e:e.substring(r.length)}static trimSuffix(e,r){if(!e||!r)return e;let n=e.lastIndexOf(r);return n===-1||n+r.length!==e.length?e:e.substring(0,n)}static sleep(e){return new Promise(r=>setTimeout(r,e*1e3))}static hash(e){return aU.default.createHash("sha256").update(e).digest("hex")}static parseBool(e){if(e===void 0)return!1;switch(e){case"1":case"t":case"T":case"true":case"TRUE":case"True":return!0;case"0":case"f":case"F":case"false":case"FALSE":case"False":return!1;default:throw new Error(`parseBool syntax error: ${e}`)}}static parseBoolOrDefault(e,r=!1){try{return this.parseBool(e)}catch{return r}}static formatFileSize(e){if(e===0)return"0 Bytes";let r=1024,n=["Bytes","KB","MB","GB","TB","PB","EB","ZB","YB"],s=Math.floor(Math.log(e)/Math.log(r));return parseFloat((e/Math.pow(r,s)).toFixed(2))+" "+n[s]}static generateRandomString(e=10){return aU.default.randomBytes(Math.ceil(e/2)).toString("hex").slice(0,e)}static compileHandlebars(e,r,n){return Foe.default.compile(e,r)(n)}static stringToUnicodeEntities(e){return Array.from(e).map(r=>`&#x${r.charCodeAt(0).toString(16)};`).join("")}static countLines(e){return e.split(/\r\n|\r|\n/).length}static isPathRelativeTo(e,r){let n=tE.default.resolve(e);return tE.default.resolve(r).startsWith(n.endsWith(tE.default.sep)?n:`${n}${tE.default.sep}`)}static formatDuration(e){if(e===0)return"0s";let r=Math.floor(e/1e9),n=Math.floor(r/3600),s=Math.floor(r%3600/60),i=r%60,a=[];return n&&a.push(`${n}h`),s&&a.push(`${s}m`),(i||a.length===0)&&a.push(`${i}s`),a.join("")}};var Ve=class t{static{o(this,"Docker")}static get configDir(){return process.env.DOCKER_CONFIG||rE.default.join(Uoe.default.homedir(),".docker")}static configFile(){let e=rE.default.join(t.configDir,"config.json");if(cU.default.existsSync(e))return JSON.parse(cU.default.readFileSync(e,{encoding:"utf-8"}))}static async isAvailable(){return await Br("docker",!0).then(e=>(B(`Docker.isAvailable ok: ${e}`),!0)).catch(e=>(B(`Docker.isAvailable error: ${e}`),!1))}static async isDaemonRunning(){try{return await t.getExecOutput(["version"],{silent:!0}),!0
Line truncated
-${n}`)},"onRetry")})}static isPullTransientError(e){return/Client\.Timeout exceeded|TLS handshake timeout|i\/o timeout|context deadline exceeded|request canceled|connection reset by peer|connection refused|connection timed out|temporary failure|unexpected EOF|\bEOF\b|server misbehaving/i.test(e)||/\b(500|502|503|504)\b/.test(e)||/\b(service unavailable|bad gateway|gateway timeout|internal server error)\b/i.test(e)}};var qae=w(require("crypto"),1);var nS=require("fs"),Hoe=require("os");var Hp=class{static{o(this,"Context")}constructor(){var e,r,n;if(this.payload={},process.env.GITHUB_EVENT_PATH)if((0,nS.existsSync)(process.env.GITHUB_EVENT_PATH))this.payload=JSON.parse((0,nS.readFileSync)(process.env.GITHUB_EVENT_PATH,{encoding:"utf8"}));else{let s=process.env.GITHUB_EVENT_PATH;process.stdout.write(`GITHUB_EVENT_PATH ${s} does not exist${Hoe.EOL}`)}this.eventName=process.env.GITHUB_EVENT_NAME,this.sha=process.env.GITHUB_SHA,this.ref=process.env.GITHUB_REF,this.workflow=process.env.GITHUB_WORKFLOW,this.action=process.env.GITHUB_ACTION,this.actor=process.env.GITHUB_ACTOR,this.job=process.env.GITHUB_JOB,this.runAttempt=parseInt(process.env.GITHUB_RUN_ATTEMPT,10),this.runNumber=parseInt(process.env.GITHUB_RUN_NUMBER,10),this.runId=parseInt(process.env.GITHUB_RUN_ID,10),this.apiUrl=(e=process.env.GITHUB_API_URL)!==null&&e!==void 0?e:"https://api.github.com",this.serverUrl=(r=process.env.GITHUB_SERVER_URL)!==null&&r!==void 0?r:"https://github.com",this.graphqlUrl=(n=process.env.GITHUB_GRAPHQL_URL)!==null&&n!==void 0?n:"https://api.github.com/graphql"}get issue(){let e=this.payload;return Object.assign(Object.assign({},this.repo),{number:(e.issue||e.pull_request||e).number})}get repo(){if(process.env.GITHUB_REPOSITORY){let[e,r]=process.env.GITHUB_REPOSITORY.split("/");return{owner:e,repo:r}}if(this.payload.repository)return{owner:this.payload.repository.owner.login,repo:this.payload.repository.name};throw new Error("context.repo requires a GITHUB_REPOSITORY environment variable like 'owner/repo'")}};var AU=w(Yoe(),1),Woe=w(yA(),1);var i3e=function(t,e,r,n){function s(i){return i instanceof r?i:new r(function(a){a(i)})}return o(s,"adopt"),new(r||(r=Promise))(function(i,a){function c(d){try{u(n.next(d))}catch(A){a(A)}}o(c,"fulfilled");function l(d){try{u(n.throw(d))}catch(A){a(A)}}o(l,"rejected");function u(d){d.done?i(d.value):s(d.value).then(c,l)}o(u,"step"),u((n=n.apply(t,e||[])).next())})};function joe(t,e){if(!t&&!e.auth)throw new Error("Parameter token or opts.auth is required");if(t&&e.auth)throw new Error("Parameters token and opts.auth may not both be specified");return typeof e.auth=="string"?e.auth:`token ${t}`}o(joe,"getAuthString");function Koe(t){return new AU.HttpClient().getAgent(t)}o(Koe,"getProxyAgent");function o3e(t){return new AU.HttpClient().getAgentDispatcher(t)}o(o3e,"getProxyAgentDispatcher");function Xoe(t){let e=o3e(t);return o((n,s)=>i3e(this,void 0,void 0,function*(){return(0,Woe.fetch)(n,Object.assign(Object.assign({},s),{dispatcher:e}))}),"proxyFetch")}o(Xoe,"getProxyFetch");function Zoe(){return process.env.GITHUB_API_URL||"https://api.github.com"}o(Zoe,"getApiBaseUrl");function pU(t){var e;let r=(e=process.env.ACTIONS_ORCHESTRATION_ID)===null||e===void 0?void 0:e.trim();if(r){let s=`actions_orchestration_id/${r.replace(/[^a-z0-9_.-]/gi,"_")}`;return t?.includes(s)?t:`${t?`${t} `:""}${s}`}return t}o(pU,"getUserAgentWithOrchestrationId");function Xc(){return typeof navigator=="object"&&"userAgent"in navigator?navigator.userAgent:typeof process=="object"&&process.version!==void 0?`Node.js/${process.version.substr(1)} (${process.platform}; ${process.arch})`:"<environment undetectable>"}o(Xc,"getUserAgent");function uS(t,e,r,n){if(typeof r!="function")throw new Error("method for before hook must be a function");return n||(n={}),Array.isArray(e)?e.reverse().reduce((s,i)=>uS.bind(null,t,i,s,n),r)():Promise.resolve().then(()=>t.registry[e]?t.registry[e].reduce((s,i)=>i.hook.bind(null,s,n),r)():r(n))}o(uS,"register");function eae(t,e,r,n){let s=n;t.registry[r]||(t.registry[r]=[]),e==="before"&&(n=o((i,a)=>Promise.resolve().then(s.bind(null,a)).then(i.bind(null,a)),"hook")),e==="after"&&(n=o((i,a)=>{let c;return Promise.resolve().then(i.bind(null,a)).then(l=>(c=l,s(c,a))).then(()=>c)},"hook")),e==="error"&&(n=o((i,a)=>Promise.resolve().then(i.bind(null,a)).catch(c=>s(c,a)),"hook")),t.registry[r].push({hook:n,orig:s})}o(eae,"addHook");function tae(t,e,r){if(!t.registry[e])return;let n=t.registry[e].map(s=>s.orig).indexOf(r);n!==-1&&t.registry[e].splice(n,1)}o(tae,"removeHook");var rae=Function.bind,nae=rae.bind(rae);function sae(t,e,r){let n=nae(tae,null).apply(null,r?[e,r]:[e]);t.api={remove:n},t.remove=n,["before","error","after","wrap"].forEach(s=>{let i=r?[e,s,r]:[e,s];t[s]=t.api[s]=nae(eae,null).apply(null,i)})}o(sae,"bindApi");function c3e(){let t=Symbol("Singular"),e={registry:{}},r=uS.bind(null,e,t);return sae(r,e,t),r}o(c3e,"Singular");function l3e(){let t={registry:{}},e=uS.bind(null,
Line truncated
+`,i),Buffer.from("\r",i)];e:for(let c=0;c<a.length;c++){let l=a[c].length;for(let u=0;u<l;u++)if(a[c][u]!==n[s+u])continue e;return this.options.record_delimiter.push(a[c]),this.state.recordDelimiterMaxLength=a[c].length,a[c].length}return 0},"__autoDiscoverRecordDelimiter"),__error:o(function(n){let{encoding:s,raw:i,skip_records_with_error:a}=this.options,c=typeof n=="string"?new Error(n):n;if(a){if(this.state.recordHasError=!0,this.options.on_skip!==void 0)try{this.options.on_skip(c,i?this.state.rawBuffer.toString(s):void 0)}catch(l){return l}return}else return c},"__error"),__infoDataSet:o(function(){return{...this.info,columns:this.options.columns}},"__infoDataSet"),__infoRecord:o(function(){let{columns:n,raw:s,encoding:i}=this.options;return{...this.__infoDataSet(),bytes_records:this.info.bytes,error:this.state.error,header:n===!0,index:this.state.record.length,raw:s?this.state.rawBuffer.toString(i):void 0}},"__infoRecord"),__infoField:o(function(){let{columns:n}=this.options,s=Array.isArray(n),i=this.info.bytes_records;return{...this.__infoRecord(),bytes_records:i,column:s===!0?n.length>this.state.record.length?n[this.state.record.length].name:null:this.state.record.length,quoting:this.state.wasQuoting}},"__infoField")}},"transform");var ms=o(function(t,e={}){typeof t=="string"&&(t=Buffer.from(t));let r=e&&e.objname?Object.create(null):[],n=rS(e),s=o(c=>{n.options.objname===void 0?r.push(c):r[c[0]]=c[1]},"push"),i=o(()=>{},"close"),a=n.parse(t,!0,s,i);if(a!==void 0)throw a;return r},"parse");var Oe=class t{static{o(this,"Util")}static getInputList(e,r){return this.getList(Pr(e,{trimWhitespace:r?.trimWhitespace!==!1}),r)}static getList(e,r){let n=[];if(e=="")return n;let s=ms(e,{columns:!1,relaxQuotes:!0,comment:r?.comment,comment_no_infix:r?.commentNoInfix,relaxColumnCount:!0,skipEmptyLines:!0,quote:r?.quote});for(let i of s)i.length==1?r?.ignoreComma?n.push(i[0]):n.push(...i[0].split(",")):r?.ignoreComma?n.push(i.join(",")):n.push(...i);return n.filter(i=>i).map(i=>r?.trimWhitespace===!1?i:i.trim())}static getInputNumber(e){let r=Pr(e);if(r)return parseInt(r)}static async asyncForEach(e,r){for(let n=0;n<e.length;n++)await r(e[n],n,e)}static isValidURL(e){let r;try{r=new URL(e)}catch{return!1}return r.protocol==="http:"||r.protocol==="https:"}static isValidRef(e){if(t.isValidURL(e))return!0;for(let r of["git://","github.com/","git@"])if(e.startsWith(r))return!0;return!1}static async powershellCommand(e,r){let n=await Br("powershell",!0),s=e.replace(/'/g,"''"),i=[];if(r)for(let a in r)i.push(`-${a} '${r[a].replace(/'/g,"''")}'`);return{command:`"${n}"`,args:["-NoLogo","-Sta","-NoProfile","-NonInteractive","-ExecutionPolicy","Unrestricted","-EncodedCommand",Buffer.from(`& '${s}' ${i.join(" ")}`,"utf16le").toString("base64")]}}static isDirectory(e){try{return Loe.default.lstatSync(e).isDirectory()}catch{}return!1}static trimPrefix(e,r){return!e||!r||e.indexOf(r)!==0?e:e.substring(r.length)}static trimSuffix(e,r){if(!e||!r)return e;let n=e.lastIndexOf(r);return n===-1||n+r.length!==e.length?e:e.substring(0,n)}static sleep(e){return new Promise(r=>setTimeout(r,e*1e3))}static hash(e){return aU.default.createHash("sha256").update(e).digest("hex")}static parseBool(e){if(e===void 0)return!1;switch(e){case"1":case"t":case"T":case"true":case"TRUE":case"True":return!0;case"0":case"f":case"F":case"false":case"FALSE":case"False":return!1;default:throw new Error(`parseBool syntax error: ${e}`)}}static parseBoolOrDefault(e,r=!1){try{return this.parseBool(e)}catch{return r}}static formatFileSize(e){if(e===0)return"0 Bytes";let r=1024,n=["Bytes","KB","MB","GB","TB","PB","EB","ZB","YB"],s=Math.floor(Math.log(e)/Math.log(r));return parseFloat((e/Math.pow(r,s)).toFixed(2))+" "+n[s]}static generateRandomString(e=10){return aU.default.randomBytes(Math.ceil(e/2)).toString("hex").slice(0,e)}static compileHandlebars(e,r,n){return Foe.default.compile(e,r)(n)}static stringToUnicodeEntities(e){return Array.from(e).map(r=>`&#x${r.charCodeAt(0).toString(16)};`).join("")}static countLines(e){return e.split(/\r\n|\r|\n/).length}static isPathRelativeTo(e,r){let n=tE.default.resolve(e);return tE.default.resolve(r).startsWith(n.endsWith(tE.default.sep)?n:`${n}${tE.default.sep}`)}static formatDuration(e){if(e===0)return"0s";let r=Math.floor(e/1e9),n=Math.floor(r/3600),s=Math.floor(r%3600/60),i=r%60,a=[];return n&&a.push(`${n}h`),s&&a.push(`${s}m`),(i||a.length===0)&&a.push(`${i}s`),a.join("")}};var Ve=class t{static{o(this,"Docker")}static get configDir(){return process.env.DOCKER_CONFIG||rE.default.join(Uoe.default.homedir(),".docker")}static configFile(){let e=rE.default.join(t.configDir,"config.json");if(cU.default.existsSync(e))return JSON.parse(cU.default.readFileSync(e,{encoding:"utf-8"}))}static async isAvailable(){return await Br("docker",!0).then(e=>(B(`Docker.isAvailable ok: ${e}`),!0)).catch(e=>(B(`Docker.isAvailable error: ${e}`),!1))}static async isDaemonRunning(){try{return await t.getExecOutput(["version"],{silent:!0}),!0
Line truncated
+${s}`)},"onRetry")})}static isPullTransientError(e){return/Client\.Timeout exceeded|TLS handshake timeout|i\/o timeout|context deadline exceeded|request canceled|connection reset by peer|connection refused|connection timed out|temporary failure|unexpected EOF|\bEOF\b|server misbehaving/i.test(e)||/\b(500|502|503|504)\b/.test(e)||/\b(service unavailable|bad gateway|gateway timeout|internal server error)\b/i.test(e)}};var qae=w(require("crypto"),1);var nS=require("fs"),Hoe=require("os");var Hp=class{static{o(this,"Context")}constructor(){var e,r,n;if(this.payload={},process.env.GITHUB_EVENT_PATH)if((0,nS.existsSync)(process.env.GITHUB_EVENT_PATH))this.payload=JSON.parse((0,nS.readFileSync)(process.env.GITHUB_EVENT_PATH,{encoding:"utf8"}));else{let s=process.env.GITHUB_EVENT_PATH;process.stdout.write(`GITHUB_EVENT_PATH ${s} does not exist${Hoe.EOL}`)}this.eventName=process.env.GITHUB_EVENT_NAME,this.sha=process.env.GITHUB_SHA,this.ref=process.env.GITHUB_REF,this.workflow=process.env.GITHUB_WORKFLOW,this.action=process.env.GITHUB_ACTION,this.actor=process.env.GITHUB_ACTOR,this.job=process.env.GITHUB_JOB,this.runAttempt=parseInt(process.env.GITHUB_RUN_ATTEMPT,10),this.runNumber=parseInt(process.env.GITHUB_RUN_NUMBER,10),this.runId=parseInt(process.env.GITHUB_RUN_ID,10),this.apiUrl=(e=process.env.GITHUB_API_URL)!==null&&e!==void 0?e:"https://api.github.com",this.serverUrl=(r=process.env.GITHUB_SERVER_URL)!==null&&r!==void 0?r:"https://github.com",this.graphqlUrl=(n=process.env.GITHUB_GRAPHQL_URL)!==null&&n!==void 0?n:"https://api.github.com/graphql"}get issue(){let e=this.payload;return Object.assign(Object.assign({},this.repo),{number:(e.issue||e.pull_request||e).number})}get repo(){if(process.env.GITHUB_REPOSITORY){let[e,r]=process.env.GITHUB_REPOSITORY.split("/");return{owner:e,repo:r}}if(this.payload.repository)return{owner:this.payload.repository.owner.login,repo:this.payload.repository.name};throw new Error("context.repo requires a GITHUB_REPOSITORY environment variable like 'owner/repo'")}};var AU=w(Yoe(),1),Woe=w(yA(),1);var i3e=function(t,e,r,n){function s(i){return i instanceof r?i:new r(function(a){a(i)})}return o(s,"adopt"),new(r||(r=Promise))(function(i,a){function c(d){try{u(n.next(d))}catch(A){a(A)}}o(c,"fulfilled");function l(d){try{u(n.throw(d))}catch(A){a(A)}}o(l,"rejected");function u(d){d.done?i(d.value):s(d.value).then(c,l)}o(u,"step"),u((n=n.apply(t,e||[])).next())})};function joe(t,e){if(!t&&!e.auth)throw new Error("Parameter token or opts.auth is required");if(t&&e.auth)throw new Error("Parameters token and opts.auth may not both be specified");return typeof e.auth=="string"?e.auth:`token ${t}`}o(joe,"getAuthString");function Koe(t){return new AU.HttpClient().getAgent(t)}o(Koe,"getProxyAgent");function o3e(t){return new AU.HttpClient().getAgentDispatcher(t)}o(o3e,"getProxyAgentDispatcher");function Xoe(t){let e=o3e(t);return o((n,s)=>i3e(this,void 0,void 0,function*(){return(0,Woe.fetch)(n,Object.assign(Object.assign({},s),{dispatcher:e}))}),"proxyFetch")}o(Xoe,"getProxyFetch");function Zoe(){return process.env.GITHUB_API_URL||"https://api.github.com"}o(Zoe,"getApiBaseUrl");function pU(t){var e;let r=(e=process.env.ACTIONS_ORCHESTRATION_ID)===null||e===void 0?void 0:e.trim();if(r){let s=`actions_orchestration_id/${r.replace(/[^a-z0-9_.-]/gi,"_")}`;return t?.includes(s)?t:`${t?`${t} `:""}${s}`}return t}o(pU,"getUserAgentWithOrchestrationId");function Xc(){return typeof navigator=="object"&&"userAgent"in navigator?navigator.userAgent:typeof process=="object"&&process.version!==void 0?`Node.js/${process.version.substr(1)} (${process.platform}; ${process.arch})`:"<environment undetectable>"}o(Xc,"getUserAgent");function uS(t,e,r,n){if(typeof r!="function")throw new Error("method for before hook must be a function");return n||(n={}),Array.isArray(e)?e.reverse().reduce((s,i)=>uS.bind(null,t,i,s,n),r)():Promise.resolve().then(()=>t.registry[e]?t.registry[e].reduce((s,i)=>i.hook.bind(null,s,n),r)():r(n))}o(uS,"register");function eae(t,e,r,n){let s=n;t.registry[r]||(t.registry[r]=[]),e==="before"&&(n=o((i,a)=>Promise.resolve().then(s.bind(null,a)).then(i.bind(null,a)),"hook")),e==="after"&&(n=o((i,a)=>{let c;return Promise.resolve().then(i.bind(null,a)).then(l=>(c=l,s(c,a))).then(()=>c)},"hook")),e==="error"&&(n=o((i,a)=>Promise.resolve().then(i.bind(null,a)).catch(c=>s(c,a)),"hook")),t.registry[r].push({hook:n,orig:s})}o(eae,"addHook");function tae(t,e,r){if(!t.registry[e])return;let n=t.registry[e].map(s=>s.orig).indexOf(r);n!==-1&&t.registry[e].splice(n,1)}o(tae,"removeHook");var rae=Function.bind,nae=rae.bind(rae);function sae(t,e,r){let n=nae(tae,null).apply(null,r?[e,r]:[e]);t.api={remove:n},t.remove=n,["before","error","after","wrap"].forEach(s=>{let i=r?[e,s,r]:[e,s];t[s]=t.api[s]=nae(eae,null).apply(null,i)})}o(sae,"bindApi");function c3e(){let t=Symbol("Singular"),e={registry:{}},r=uS.bind(null,e,t);return sae(r,e,t),r}o(c3e,"Singular");function l3e(){let t={registry:{}},e=uS.bind(null,
Line truncated
 `+t.errors.map(e=>` - ${e.message}`).join(`
 `)}o(L3e,"_buildMessageForResponseErrors");var F3e=class extends Error{static{o(this,"GraphqlResponseError")}constructor(t,e,r){super(L3e(r)),this.request=t,this.headers=e,this.response=r,this.errors=r.errors,this.data=r.data,Error.captureStackTrace&&Error.captureStackTrace(this,this.constructor)}name="GraphqlResponseError";errors;data},U3e=["method","baseUrl","url","headers","request","query","mediaType","operationName"],q3e=["query","method","url"],Nae=/\/api\/v3\/?$/;function G3e(t,e,r){if(r){if(typeof e=="string"&&"query"in r)return Promise.reject(new Error('[@octokit/graphql] "query" cannot be used as variable name'));for(let a in r)if(q3e.includes(a))return Promise.reject(new Error(`[@octokit/graphql] "${a}" cannot be used as variable name`))}let n=typeof e=="string"?Object.assign({query:e},r):e,s=Object.keys(n).reduce((a,c)=>U3e.includes(c)?(a[c]=n[c],a):(a.variables||(a.variables={}),a.variables[c]=n[c],a),{}),i=n.baseUrl||t.endpoint.DEFAULTS.baseUrl;return Nae.test(i)&&(s.url=i.replace(Nae,"/api/graphql")),t(s).then(a=>{if(a.data.errors){let c={};for(let l of Object.keys(a.headers))c[l]=a.headers[l];throw new F3e(s,c,a.data)}return a.data.data})}o(G3e,"graphql");function yU(t,e){let r=t.defaults(e);return Object.assign(o((s,i)=>G3e(r,s,i),"newApi"),{defaults:yU.bind(null,r),endpoint:r.endpoint})}o(yU,"withDefaults");var dkt=yU(oE,{headers:{"user-agent":`octokit-graphql.js/${M3e} ${Xc()}`},method:"POST",url:"/graphql"});function xae(t){return yU(t,{method:"POST",url:"/graphql"})}o(xae,"withCustomRequest");var CU="(?:[a-zA-Z0-9_-]+)",Qae="\\.",Rae=new RegExp(`^${CU}${Qae}${CU}${Qae}${CU}$`),H3e=Rae.test.bind(Rae);async function V3e(t){let e=H3e(t),r=t.startsWith("v1.")||t.startsWith("ghs_"),n=t.startsWith("ghu_");return{type:"token",token:t,tokenType:e?"app":r?"installation":n?"user-to-server":"oauth"}}o(V3e,"auth");function z3e(t){return t.split(/\./).length===3?`bearer ${t}`:`token ${t}`}o(z3e,"withAuthorizationPrefix");async function $3e(t,e,r,n){let s=e.endpoint.merge(r,n);return s.headers.authorization=z3e(t),e(s)}o($3e,"hook");var Tae=o(function(e){if(!e)throw new Error("[@octokit/auth-token] No token passed to createTokenAuth");if(typeof e!="string")throw new Error("[@octokit/auth-token] Token passed to createTokenAuth is not a string");return e=e.replace(/^(token|bearer) +/i,""),Object.assign(V3e.bind(null,e),{hook:$3e.bind(null,e)})},"createTokenAuth2");var IU="7.0.6";var vae=o(()=>{},"noop"),J3e=console.warn.bind(console),Y3e=console.error.bind(console);function W3e(t={}){return typeof t.debug!="function"&&(t.debug=vae),typeof t.info!="function"&&(t.info=vae),typeof t.warn!="function"&&(t.warn=J3e),typeof t.error!="function"&&(t.error=Y3e),t}o(W3e,"createLogger");var _ae=`octokit-core.js/${IU} ${Xc()}`,fS=class{static{o(this,"Octokit")}static VERSION=IU;static defaults(e){return class extends this{static{o(this,"OctokitWithDefaults")}constructor(...n){let s=n[0]||{};if(typeof e=="function"){super(e(s));return}super(Object.assign({},e,s,s.userAgent&&e.userAgent?{userAgent:`${s.userAgent} ${e.userAgent}`}:null))}}}static plugins=[];static plugin(...e){let r=this.plugins;return class extends this{static{o(this,"NewOctokit")}static plugins=r.concat(e.filter(s=>!r.includes(s)))}}constructor(e={}){let r=new iae.Collection,n={baseUrl:oE.endpoint.DEFAULTS.baseUrl,headers:{},request:Object.assign({},e.request,{hook:r.bind(null,"request")}),mediaType:{previews:[],format:""}};if(n.headers["user-agent"]=e.userAgent?`${e.userAgent} ${_ae}`:_ae,e.baseUrl&&(n.baseUrl=e.baseUrl),e.previews&&(n.mediaType.previews=e.previews),e.timeZone&&(n.headers["time-zone"]=e.timeZone),this.request=oE.defaults(n),this.graphql=xae(this.request).defaults(n),this.log=W3e(e.log),this.hook=r,e.authStrategy){let{authStrategy:i,...a}=e,c=i(Object.assign({request:this.request,log:this.log,octokit:this,octokitOptions:a},e.auth));r.wrap("request",c.hook),this.auth=c}else if(!e.auth)this.auth=async()=>({type:"unauthenticated"});else{let i=Tae(e.auth);r.wrap("request",i.hook),this.auth=i}let s=this.constructor;for(let i=0;i<s.plugins.length;++i)Object.assign(this,s.plugins[i](this,e))}request;graphql;log;hook;auth};var BU="17.0.0";var j3e={actions:{addCustomLabelsToSelfHostedRunnerForOrg:["POST /orgs/{org}/actions/runners/{runner_id}/labels"],addCustomLabelsToSelfHostedRunnerForRepo:["POST /repos/{owner}/{repo}/actions/runners/{runner_id}/labels"],addRepoAccessToSelfHostedRunnerGroupInOrg:["PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}"],addSelectedRepoToOrgSecret:["PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}"],addSelectedRepoToOrgVariable:["PUT /orgs/{org}/actions/variables/{name}/repositories/{repository_id}"],approveWorkflowRun:["POST /repos/{owner}/{repo}/actions/runs/{run_id}/approve"],cancelWorkflowRun:["POST /repos/{owner}/{repo}/actions/runs/{run_id}/cancel"],createEnvironmentVariable:["POST /repos/{owner}/{repo}/environments/{environment_name}/variables"
Line truncated
 More info: ${l.url}`);let f=l.range&&l.range.length>0?l.range[0]?.start.line:void 0,h=!1;for(let g of a)if(g.remote||g.path.endsWith(u)&&g.content===d){c.push({title:A,message:p,file:g.path,startLine:f}),h=!0;break}h||B(`Buildx.convertWarningsToGitHubAnnotations: skipping warning without matching Dockerfile ${u}: ${A}`)}return c}};var el=class t{static{o(this,"Builder")}buildx;constructor(e){this.buildx=e?.buildx||new Ie}async exists(e){let r=await this.buildx.getCommand(["inspect",e]),n=await Y.getExecOutput(r.command,r.args,{ignoreReturnCode:!0,silent:!0}).then(s=>s.stderr.length>0&&s.exitCode!=0?(B(`Builder.exists cmd err: ${s.stderr.trim()}`),!1):s.exitCode==0).catch(s=>(B(`Builder.exists error: ${s}`),!1));return B(`Builder.exists: ${n}`),n}async inspect(e){let r=Object.assign({},process.env,{DEBUG:"1"}),n=["inspect"];e&&n.push(e);let s=await this.buildx.getCommand(n);return await Y.getExecOutput(s.command,s.args,{ignoreReturnCode:!0,silent:!0,env:r}).then(i=>{if(i.stderr.length>0&&i.exitCode!=0)throw new Error(i.stderr.trim());return t.parseInspect(i.stdout)})}static parseInspect(e){let r={nodes:[]},n,s={},i,a,c;for(let l of e.trim().split(`
 `)){let[u,...d]=l.split(":"),A=u.toLowerCase(),p=d.map(f=>f.trim()).join(":");if(u.length!=0)switch(!0){case A=="name":n=void 0,r.name==null?r.name=p:(i&&s.gcPolicy&&(s.gcPolicy.push(i),i=void 0),s.name&&r.nodes.push(s),s={name:p});break;case A=="driver":n=void 0,r.driver=p;break;case A=="last activity":n=void 0,r.lastActivity=new Date(p);break;case A=="endpoint":n=void 0,s.endpoint=p;break;case A=="driver options":n=void 0,s["driver-opts"]=(p.match(/([a-zA-Z0-9_.]+)="([^"]*)"/g)||[]).map(f=>f.replace(/^(.*)="(.*)"$/g,"$1=$2"));break;case A=="status":n=void 0,s.status=p;break;case A=="buildkit daemon flags":case A=="flags":n=void 0,s["buildkitd-flags"]=p;break;case A=="buildkit version":case A=="buildkit":n=void 0,s.buildkit=p;break;case A=="platforms":{if(n=void 0,!p)break;let f=[];if(p.includes("*"))for(let h of p.split(", "))h.includes("*")&&f.push(h.replace(/\*/g,""));else f=p.split(", ");s.platforms=f.join(",");break}case A=="features":n="features",s.features={};break;case A=="labels":n="label",s.labels={};break;case A=="devices":n="devices",s.devices=s.devices||[];break;case A.startsWith("gc policy rule#"):n="gcpolicy",s.gcPolicy&&i&&(s.gcPolicy.push(i),i=void 0);break;case A.startsWith("file#"):n="file",c=u.split("#")[1],s.files=s.files||{},s.files[c]="";break;default:switch(n&&n!=="devices"&&s.devices&&a&&(s.devices.push(a),a=void 0),n||""){case"features":{s.features=s.features||{},s.features[u.trim()]=!!p;break}case"label":{s.labels=s.labels||{},s.labels[u.trim()]=p;break}case"devices":{switch(A.trim()){case"name":{s.devices&&a&&s.devices.push(a),a={},a.name=p;break}case"on-demand":{a&&p&&(a.onDemand=p=="true");break}case"automatically allowed":{a&&p&&(a.autoAllow=p=="true");break}case"annotations":{a&&(a.annotations=a.annotations||{});break}default:a&&a.annotations&&(a.annotations[u.trim()]=p)}break}case"gcpolicy":{switch(s.gcPolicy=s.gcPolicy||[],i=i||{},A.trim()){case"all":{i.all=p=="true";break}case"filters":{p&&(i.filter=p.split(","));break}case"keep duration":{i.keepDuration=p;break}case"keep bytes":{i.keepBytes=p;break}case"reserved space":{i.reservedSpace=p;break}case"max used space":{i.maxUsedSpace=p;break}case"min free space":{i.minFreeSpace=p;break}}break}case"file":{c&&s.files&&(s.files[c].length>0&&(s.files[c]+=`
 `),s.files[c]+=l.replace(/^\s>\s?/,""));break}}}}return a&&s.devices&&s.devices.push(a),i&&s.gcPolicy&&s.gcPolicy.push(i),s.name&&r.nodes.push(s),r}};var ju=w(require("fs"),1),PU=w(require("path"),1);var yS=class t{static{o(this,"Build")}buildx;iidFilename;metadataFilename;constructor(e){this.buildx=e?.buildx||new Ie,this.iidFilename=`build-iidfile-${Oe.generateRandomString()}.txt`,this.metadataFilename=`build-metadata-${Oe.generateRandomString()}.json`}async gitContext(e){let r=new Set(["ref","checksum","subdir"]),n=e?.attrs||{},s=Object.entries(n).filter(([f])=>!r.has(f)),i=Oe.parseBoolOrDefault(n["fetch-by-commit"]),a=e?.ref||n.ref||ln.ref;a.startsWith("refs/")?a.startsWith("refs/pull/")&&Oe.parseBoolOrDefault(process.env.DOCKER_DEFAULT_GIT_CONTEXT_PR_HEAD_REF)&&(a=a.replace(/\/merge$/g,"/head")):a=`refs/heads/${a}`;let c=`${Xe.serverURL}/${ln.repo.owner}/${ln.repo.repo}.git`,l=e?.checksum||n.checksum,u=e?.subdir||n.subdir,d=e?.format;if(!d){if(d="fragment",s.length>0)d="query";else if(Oe.parseBoolOrDefault(process.env.BUILDX_SEND_GIT_QUERY_AS_INPUT))try{await this.buildx.versionSatisfies(">=0.29.0")&&(d="query")}catch{}}let A=ln.sha||a;a.startsWith("refs/pull/")&&a.endsWith("/head")&&(A=typeof ln.payload.pull_request?.head?.sha=="string"?ln.payload.pull_request.head.sha:a);let p=l||A;if(d==="query"){let f=[`ref=${i||l?a:p}`],h=i?p:l;h&&f.push(`checksum=${h}`),u&&u!=="."&&f.push(`subdir=${u}`);for(let[g,y]of s)f.push(`${g}=${y}`);return`${c}?${f.join("&")}`}return`${c}#${p}${u&&u!=="."?`:${u}`:""}`}getImageIDFilePath(){return PU.default.join(De.tmpDir(),this.iidFilename)}resolveImageID(){let e=this.getImageIDFilePath();if(ju.default.existsSync(e))return ju.default.readFileSync(e,{encoding:"utf-8"}).trim()}getMetadataFilePath(){return PU.default.join(De.tmpDir(),this.metadataFilename)}resolveMetadata(){let e=this.getMetadataFilePath();if(!ju.default.existsSync(e))return;let r=ju.default.readFileSync(e,{encoding:"utf-8"}).trim();if(r!=="null")return JSON.parse(r)}resolveRef(e){if(!(!e&&(e=this.resolveMetadata(),!e))&&"buildx.build.ref"in e)return e["buildx.build.ref"]}resolveProvenance(e){if(!(!e&&(e=this.resolveMetadata(),!e))&&"buildx.build.provenance"in e)return e["buildx.build.provenance"]}resolveWarnings(e){if(!(!e&&(e=this.resolveMetadata(),!e))&&"buildx.build.warnings"in e)return e["buildx.build.warnings"]}resolveDigest(e){if(!(!e&&(e=this.resolveMetadata(),!e))&&"containerimage.digest"in e)return e["containerimage.digest"]}static resolveSecretString(e){let[r,n]=t.resolveSecret(e,{redact:!0});return`id=${r},src=${n}`}static resolveSecretFile(e){let[r,n]=t.resolveSecret(e,{asFile:!0});return`id=${r},src=${n}`}static resolveSecretEnv(e){let[r,n]=t.parseSecretKvp(e);return`id=${r},env=${n}`}static resolveSecret(e,r){let[n,s]=t.parseSecretKvp(e,r?.redact);if(r?.asFile){if(!ju.default.existsSync(s))throw new Error(`secret file ${s} not found`);return[n,s]}let i=De.tmpName({tmpdir:De.tmpDir()});return ju.default.writeFileSync(i,s),[n,i]}static getProvenanceInput(e){let r=Pr(e);if(!r)return r;try{return Zl(e)?`builder-id=${Xe.workflowRunURL(!0)}`:"false"}catch{return t.resolveProvenanceAttrs(r)}}static resolveProvenanceAttrs(e){if(!e)return`builder-id=${Xe.workflowRunURL(!0)}`;let r=ms(e,{relaxColumnCount:!0,skipEmptyLines:!0})[0];for(let n of r)if(n.toString().split(/(?<=^[^=]+?)=/).map(i=>i.trim())[0]=="builder-id")return e;return`${e},builder-id=${Xe.workflowRunURL(!0)}`}static resolveCacheToAttrs(e,r){if(!e)return e;let n="registry",s="",i="",a=ms(e,{relaxColumnCount:!0,skipEmptyLines:!0})[0];for(let c of a){let l=c.toString().split(/(?<=^[^=]+?)=/).map(u=>u.trim());l[0]==="type"?n=l[1]:l[0]==="repository"?s=l[1]:l[0]==="ghtoken"&&(i=l[1])}return n==="gha"&&(s||(e=`${e},repository=${Xe.repository}`),!i&&r&&(e=`${e},ghtoken=${r}`)),e}static hasLocalExporter(e){return t.hasExporterType("local",e)}static hasTarExporter(e){return t.hasExporterType("tar",e)}static hasDockerExporter(e,r){return r||t.hasExporterType("docker",e)}static hasExporterType(e,r){let n=ms(r.join(`
-`),{delimiter:",",trim:!0,columns:!1,relaxColumnCount:!0});for(let s of n){if(s.length==1&&!s[0].startsWith("type="))return e=="local";for(let[i,a]of s.map(c=>c.split("=").map(l=>l.trim())))if(i=="type"&&a==e)return!0}return!1}static hasAttestationType(e,r){let n=ms(r,{delimiter:",",trim:!0,columns:!1,relaxColumnCount:!0});for(let s of n)for(let[i,a]of s.map(c=>c.split("=").map(l=>l.trim())))if(i=="type"&&a==e)return!0;return!1}static resolveAttestationAttrs(e){let r=ms(e,{delimiter:",",trim:!0,columns:!1,relaxColumnCount:!0}),n=[];for(let s of r)for(let i of s)try{let a=Oe.parseBool(i);n.push(`disabled=${!a}`)}catch{n.push(i)}return n.join(",")}static hasGitAuthTokenSecret(e,r){for(let n of e){if(r&&n.startsWith(`GIT_AUTH_TOKEN.${r}=`))return!0;if(n.startsWith("GIT_AUTH_TOKEN="))return!0}return!1}static parseSecretKvp(e,r){let n=e.indexOf("="),s=e.substring(0,n),i=e.substring(n+1);if(s.length==0||i.length==0)throw new Error(`${e} is not a valid secret`);return r&&Yi(i),[s,i]}};var kU=w(require("fs"),1),zae=w(require("path"),1);var CS=class t{static{o(this,"Bake")}buildx;metadataFilename;constructor(e){this.buildx=e?.buildx||new Ie,this.metadataFilename=`bake-metadata-${Oe.generateRandomString()}.json`}getMetadataFilePath(){return zae.default.join(De.tmpDir(),this.metadataFilename)}resolveMetadata(){let e=this.getMetadataFilePath();if(!kU.default.existsSync(e))return;let r=kU.default.readFileSync(e,{encoding:"utf-8"}).trim();if(r!=="null")return JSON.parse(r)}resolveRefs(e){if(!e&&(e=this.resolveMetadata(),!e))return;let r=new Array;for(let n in e)"buildx.build.ref"in e[n]&&r.push(e[n]["buildx.build.ref"]);return r.length>0?r:void 0}resolveWarnings(e){if(!(!e&&(e=this.resolveMetadata(),!e))&&"buildx.build.warnings"in e)return e["buildx.build.warnings"]}async getDefinition(e,r){r=r||{ignoreReturnCode:!0},r.ignoreReturnCode=!0,r.env=Object.assign({},process.env,r.env||{},e.githubToken?{BUILDX_BAKE_GIT_AUTH_TOKEN:e.githubToken}:{});let n=["bake"],s,i=[],a=[...e.files||[],e.source];if(a){for(let l of a.map(u=>u?u.trim():""))if(l.length!=0){if(!Oe.isValidRef(l)){i.push(l);continue}if(s)throw new Error("Only one remote bake definition can be defined");s=l}}s&&n.push(s);for(let l of i)n.push("--file",l);if(e.overrides)for(let l of e.overrides)n.push("--set",l);if(e.vars)for(let l of e.vars)n.push("--var",l);if(e.allow)for(let l of e.allow)n.push("--allow",l);e.call&&n.push("--call",e.call),e.load&&n.push("--load"),e.noCache&&n.push("--no-cache"),e.provenance&&n.push("--provenance",e.provenance),e.push&&n.push("--push"),e.sbom&&n.push("--sbom",e.sbom);let c=await this.buildx.getCommand([...n,"--print",...e.targets||[]]);return await Y.getExecOutput(c.command,c.args,r).then(l=>{if(l.stderr.length>0&&l.exitCode!=0)throw new Error(`cannot parse bake definitions: ${Ie.getErrorMessage(l.stderr)}`);return t.parseDefinition(l.stdout.trim())})}static parseDefinition(e){let r=JSON.parse(e);for(let n in r.target){let s=r.target[n];s.attest&&Array.isArray(s.attest)&&(s.attest=s.attest.map(i=>t.parseAttestEntry(i))),s["cache-from"]&&Array.isArray(s["cache-from"])&&(s["cache-from"]=s["cache-from"].map(i=>t.parseCacheEntry(i))),s["cache-to"]&&Array.isArray(s["cache-to"])&&(s["cache-to"]=s["cache-to"].map(i=>t.parseCacheEntry(i))),s.output&&Array.isArray(s.output)&&(s.output=s.output.map(i=>t.parseExportEntry(i))),s.secret&&Array.isArray(s.secret)&&(s.secret=s.secret.map(i=>t.parseSecretEntry(i))),s.ssh&&Array.isArray(s.ssh)&&(s.ssh=s.ssh.map(i=>t.parseSSHEntry(i)))}return r}static parseAttestEntry(e){if(typeof e!="string")return e;let r={type:""},n=ms(e,{relaxColumnCount:!0,skipEmptyLines:!0})[0];for(let s of n){let[i,a]=s.toString().split(/(?<=^[^=]+?)=/).map(c=>c.trim());switch(i){case"type":r.type=a;break;case"disabled":r.disabled=Oe.parseBool(a);break;default:r[i]=a}}return r}static parseCacheEntry(e){if(typeof e!="string")return e;let r={type:""},n=ms(e,{relaxColumnCount:!0,skipEmptyLines:!0})[0];if(n.length===1&&!n[0].includes("="))return r.type="registry",r.ref=n[0],r;for(let s of n){let[i,a]=s.toString().split(/(?<=^[^=]+?)=/).map(c=>c.trim());i==="type"?r.type=a:r[i]=a}return r}static parseExportEntry(e){if(typeof e!="string")return e;let r={type:""},n=ms(e,{relaxColumnCount:!0,skipEmptyLines:!0})[0];if(n.length===1&&n[0]===e&&!e.startsWith("type="))return e!=="-"?(r.type="local",r.dest=e,r):(r.type="tar",r.dest=e,r);for(let s of n){let[i,a]=s.toString().split(/(?<=^[^=]+?)=/).map(c=>c.trim());i==="type"?r.type=a:r[i]=a}return r}static parseSecretEntry(e){if(typeof e!="string")return e;let r={},n=ms(e,{relaxColumnCount:!0,skipEmptyLines:!0})[0],s="";for(let i of n){let[a,c]=i.toString().split(/(?<=^[^=]+?)=/).map(l=>l.trim());switch(a){case"type":s=c;break;case"id":r.id=c;break;case"source":case"src":r.src=c;break;case"env":r.env=c;break}}return s==="env"&&!r.env&&(r.env=r.src,r.src=void 0),r}static parseSSHEntry(e){if(typeof e!="string")return e;let r={},[n,s]=e.split("=",2);return r.id=n,s&&(r.paths=s.split(",")),r}s
Line truncated
+`),{delimiter:",",trim:!0,columns:!1,relaxColumnCount:!0});for(let s of n){if(s.length==1&&!s[0].startsWith("type="))return e=="local";for(let[i,a]of s.map(c=>c.split("=").map(l=>l.trim())))if(i=="type"&&a==e)return!0}return!1}static hasAttestationType(e,r){let n=ms(r,{delimiter:",",trim:!0,columns:!1,relaxColumnCount:!0});for(let s of n)for(let[i,a]of s.map(c=>c.split("=").map(l=>l.trim())))if(i=="type"&&a==e)return!0;return!1}static resolveAttestationAttrs(e){let r=ms(e,{delimiter:",",trim:!0,columns:!1,relaxColumnCount:!0}),n=[];for(let s of r)for(let i of s)try{let a=Oe.parseBool(i);n.push(`disabled=${!a}`)}catch{n.push(i)}return n.join(",")}static hasGitAuthTokenSecret(e,r){for(let n of e){if(r&&n.startsWith(`GIT_AUTH_TOKEN.${r}=`))return!0;if(n.startsWith("GIT_AUTH_TOKEN="))return!0}return!1}static parseSecretKvp(e,r){let n=e.indexOf("="),s=e.substring(0,n),i=e.substring(n+1);if(s.length==0||i.length==0)throw new Error(`${e} is not a valid secret`);return r&&Yi(i),[s,i]}};var kU=w(require("fs"),1),zae=w(require("path"),1);var CS=class t{static{o(this,"Bake")}buildx;metadataFilename;constructor(e){this.buildx=e?.buildx||new Ie,this.metadataFilename=`bake-metadata-${Oe.generateRandomString()}.json`}getMetadataFilePath(){return zae.default.join(De.tmpDir(),this.metadataFilename)}static resolveContextTargets(e,r){let n=e.target||{},s=Object.keys(n);if(s.length===0)throw new Error("Bake definition does not contain any targets");if(!Object.prototype.hasOwnProperty.call(n,r))throw new Error(`Unable to resolve ${r} target, found: ${s.join(", ")}`);let i=new Set([r]),a=[r];for(;a.length>0;){let c=a.pop();for(let l of Object.values(n[c].contexts||{})){let u=l.match(/^target:(.+)$/)?.[1];if(!(!u||i.has(u))){if(!Object.prototype.hasOwnProperty.call(n,u))throw new Error(`Target ${c} uses unknown named context target ${u}`);i.add(u),a.push(u)}}}return[...i]}resolveMetadata(){let e=this.getMetadataFilePath();if(!kU.default.existsSync(e))return;let r=kU.default.readFileSync(e,{encoding:"utf-8"}).trim();if(r!=="null")return JSON.parse(r)}resolveRefs(e){if(!e&&(e=this.resolveMetadata(),!e))return;let r=new Array;for(let n in e)"buildx.build.ref"in e[n]&&r.push(e[n]["buildx.build.ref"]);return r.length>0?r:void 0}resolveWarnings(e){if(!(!e&&(e=this.resolveMetadata(),!e))&&"buildx.build.warnings"in e)return e["buildx.build.warnings"]}async getDefinition(e,r){r=r||{ignoreReturnCode:!0},r.ignoreReturnCode=!0,r.env=Object.assign({},process.env,r.env||{},e.githubToken?{BUILDX_BAKE_GIT_AUTH_TOKEN:e.githubToken}:{});let n=["bake"],s,i=[],a=[...e.files||[],e.source];if(a){for(let l of a.map(u=>u?u.trim():""))if(l.length!=0){if(!Oe.isValidRef(l)){i.push(l);continue}if(s)throw new Error("Only one remote bake definition can be defined");s=l}}s&&n.push(s);for(let l of i)n.push("--file",l);if(e.overrides)for(let l of e.overrides)n.push("--set",l);if(e.vars)for(let l of e.vars)n.push("--var",l);if(e.allow)for(let l of e.allow)n.push("--allow",l);e.call&&n.push("--call",e.call),e.load&&n.push("--load"),e.noCache&&n.push("--no-cache"),e.provenance&&n.push("--provenance",e.provenance),e.push&&n.push("--push"),e.sbom&&n.push("--sbom",e.sbom);let c=await this.buildx.getCommand([...n,"--print",...e.targets||[]]);return await Y.getExecOutput(c.command,c.args,r).then(l=>{if(l.stderr.length>0&&l.exitCode!=0)throw new Error(`cannot parse bake definitions: ${Ie.getErrorMessage(l.stderr)}`);return t.parseDefinition(l.stdout.trim())})}static parseDefinition(e){let r=JSON.parse(e);for(let n in r.target){let s=r.target[n];s.attest&&Array.isArray(s.attest)&&(s.attest=s.attest.map(i=>t.parseAttestEntry(i))),s["cache-from"]&&Array.isArray(s["cache-from"])&&(s["cache-from"]=s["cache-from"].map(i=>t.parseCacheEntry(i))),s["cache-to"]&&Array.isArray(s["cache-to"])&&(s["cache-to"]=s["cache-to"].map(i=>t.parseCacheEntry(i))),s.output&&Array.isArray(s.output)&&(s.output=s.output.map(i=>t.parseExportEntry(i))),s.secret&&Array.isArray(s.secret)&&(s.secret=s.secret.map(i=>t.parseSecretEntry(i))),s.ssh&&Array.isArray(s.ssh)&&(s.ssh=s.ssh.map(i=>t.parseSSHEntry(i)))}return r}static parseAttestEntry(e){if(typeof e!="string")return e;let r={type:""},n=ms(e,{relaxColumnCount:!0,skipEmptyLines:!0})[0];for(let s of n){let[i,a]=s.toString().split(/(?<=^[^=]+?)=/).map(c=>c.trim());switch(i){case"type":r.type=a;break;case"disabled":r.disabled=Oe.parseBool(a);break;default:r[i]=a}}return r}static parseCacheEntry(e){if(typeof e!="string")return e;let r={type:""},n=ms(e,{relaxColumnCount:!0,skipEmptyLines:!0})[0];if(n.length===1&&!n[0].includes("="))return r.type="registry",r.ref=n[0],r;for(let s of n){let[i,a]=s.toString().split(/(?<=^[^=]+?)=/).map(c=>c.trim());i==="type"?r.type=a:r[i]=a}return r}static parseExportEntry(e){if(typeof e!="string")return e;let r={type:""},n=ms(e,{relaxColumnCount:!0,skipEmptyLines:!0})[0];if(n.length===1&&n[0]===e&&!e.startsWith("type="))return e!=="-"?(r.type="local",r.dest=e,r):(r.type="tar",r.dest=e,r);for(let s of n){let[i,a]=s.toStrin
Line truncated
 `)[0])}static async isHeadDetached(e){return await t.exec(["branch","--show-current"],e).then(r=>r.length==0)}static async getDetachedRef(e){let r=await t.exec(["show","-s","--pretty=%D"],e);B(`detached HEAD ref: ${r}`);let n=r.replace(/^grafted, /,"").trim();if(n==="HEAD")return await t.inferRefFromHead(e);let s=n.match(/^HEAD, (.*)$/);if(!s||!s[1])throw new Error(`Cannot find detached HEAD ref in "${r}"`);let i=s[1].trim();if(i.startsWith("tag: "))return await t.findDetachedTagRef(i,r,e);if(i.match(/^pull\/\d+\/(head|merge)$/))return`refs/${i}`;let c=i.match(/^[^/]+\/[^/]+, (.+)$/);if(c)return`refs/heads/${c[1].trim()}`;let l=i.match(/^[^/]+\/(.+)$/);if(l)return`refs/heads/${l[1].trim()}`;throw new Error(`Unsupported detached HEAD ref in "${r}"`)}static async exec(e=[],r){return await Y.getExecOutput("git",e,{cwd:r,ignoreReturnCode:!0,silent:!0}).then(n=>{if(n.stderr.length>0&&n.exitCode!=0)throw new Error(n.stderr);return n.stdout.trim()})}static async inferRefFromHead(e){let r=await t.findContainingRef("refs/heads/",e);if(r)return r;let n=await t.findContainingRef("refs/remotes/",e);if(n){let a=n.match(/^refs\/remotes\/[^/]+\/(.+)$/);return a?`refs/heads/${a[1]}`:n}let s=await t.exec(["tag","--contains","HEAD"],e),[i]=s.split(`
 `).map(a=>a.trim()).filter(a=>a.length>0);return i?`refs/tags/${i}`:""}static async findDetachedTagRef(e,r,n){let i=(await t.exec(["for-each-ref","--format=%(refname)","--points-at","HEAD","refs/tags/"],n)).split(`
 `).map(a=>a.trim()).filter(a=>a.length>0).sort((a,c)=>c.length-a.length);for(let a of i){let c=`tag: ${a.slice(10)}`;if(e===c||e.startsWith(`${c}, `))return a}if(i.length===1)return i[0];throw new Error(`Cannot find detached tag ref in "${r}"`)}static async findContainingRef(e,r){let n=await t.exec(["for-each-ref","--format=%(refname)","--contains","HEAD","--sort=-committerdate",e],r),[s]=n.split(`
-`).map(i=>i.trim()).filter(i=>i.length>0);return s}static async commitDate(e,r){return new Date(await t.exec(["show","-s",'--format="%ci"',e],r))}};var ade=require("crypto"),Ko=w(require("fs"),1),Xo=w(require("path"),1);var Sf=w(GU(),1),cde=w(nq(),1),Nf=w(rde(),1);var sde=require("util");var oG=w(GU(),1);var ide=w(Ti(),1);var nde="application/vnd.oci.empty.v1+json";var Ln=class{static{o(this,"Cosign")}binPath;_version;_versionOnce;constructor(e){this.binPath=e?.binPath||"cosign",this._version="",this._versionOnce=!1}async isAvailable(){let e=await Y.getExecOutput(this.binPath,[],{ignoreReturnCode:!0,silent:!0}).then(r=>r.stderr.length>0&&r.exitCode!=0?(B(`Cosign.isAvailable cmd err: ${r.stderr.trim()}`),!1):r.exitCode==0).catch(r=>(B(`Cosign.isAvailable error: ${r}`),!1));return B(`Cosign.isAvailable: ${e}`),e}async version(){return this._versionOnce?this._version:(this._versionOnce=!0,this._version=await Y.getExecOutput(this.binPath,["version","--json"],{ignoreReturnCode:!0,silent:!0}).then(e=>{if(e.stderr.length>0&&e.exitCode!=0)throw new Error(e.stderr.trim());return JSON.parse(e.stdout.trim()).gitVersion}),this._version)}async printVersion(){await Y.exec(this.binPath,["version","--json"],{failOnStdErr:!1})}static getErrorMessage(e){let r=(0,sde.stripVTControlCharacters)(e).split(/[\r\n]/);for(let n=r.length-1;n>=0;n--){let s=r[n].trim();if(s)return s}return"unknown error"}async versionSatisfies(e,r){let n=r??await this.version();if(!n)return B("Cosign.versionSatisfies false: undefined version"),!1;let s=ide.satisfies(n,e)||/^[0-9a-f]{7}$/.exec(n)!==null;return B(`Cosign.versionSatisfies ${n} statisfies ${e}: ${s}`),s}static parseCommandOutput(e){let r,n,s,i;for(let a of e.split(/\r?\n/)){let c=a.trim();if(!c.startsWith("{")||!c.endsWith("}"))continue;let l;try{l=JSON.parse(c)}catch{continue}if(l&&Array.isArray(l.errors)&&l.errors.length>0&&(i=l.errors),!r&&l&&Array.isArray(l.manifests)&&l.manifests.length>0){let u=l.manifests[0];u?.artifactType===oG.BUNDLE_V03_MEDIA_TYPE&&typeof u.digest=="string"?r=u.digest:u?.artifactType===nde&&typeof u.digest=="string"&&(n=u.digest)}if(!s&&l&&l.mediaType===oG.BUNDLE_V03_MEDIA_TYPE&&(s=l),s&&(r||n)){i=void 0;break}}return{bundle:s,signatureManifestDigest:r||n,errors:i}}};var aG=w(require("fs"),1);var ZN=class t{static{o(this,"ImageTools")}buildx;constructor(e){this.buildx=e?.buildx||new Ie}async getCommand(e){return await this.buildx.getCommand(["imagetools",...e])}async getInspectCommand(e){return await this.getCommand(["inspect",...e])}async getCreateCommand(e){return await this.getCommand(["create",...e])}async inspectImage(e){return await this.inspect(e,"{{json .Image}}",r=>{if(typeof r=="object"&&!Array.isArray(r)&&r!==null)return Object.prototype.hasOwnProperty.call(r,"config"),r;throw new Error("Unexpected output format")})}async inspectManifest(e){return await this.inspect(e,"{{json .Manifest}}",r=>{if(typeof r=="object"&&!Array.isArray(r)&&r!==null)return Object.prototype.hasOwnProperty.call(r,"manifests"),r;throw new Error("Unexpected output format")})}async attestationDescriptors(e){let r=await this.inspectManifest(e);if(typeof r!="object"||r===null||!("manifests"in r)||!Array.isArray(r.manifests))throw new Error(`No descriptor found for ${e.name}`);let n=r.manifests.filter(a=>a.annotations?.["vnd.docker.reference.type"]==="attestation-manifest");if(!e.platform)return n;let s=e.platform,i=new Map;for(let a of r.manifests)a.digest&&i.set(a.digest,a);return n.filter(a=>{let c=a.annotations?.["vnd.docker.reference.digest"];if(!c)return!1;let l=i.get(c);return l?l.platform?.os===s.os&&l.platform?.architecture===s.architecture&&(l.platform?.variant??"")===(s.variant??""):!1})}async attestationDigests(e){return(await this.attestationDescriptors(e)).map(r=>r.digest)}async create(e){let r=[],n=De.tmpName({tmpdir:De.tmpDir(),template:"imagetools-metadata-XXXXXX"}),s=[],i=[];for(let c of e.sources){if(c.startsWith("cwd://")){let l=c.substring(6);l.length>0&&s.push(l);continue}i.push(c)}if(e.tags)for(let c of e.tags)r.push("--tag",c);if(e.platforms)for(let c of e.platforms)r.push("--platform",c);if(e.annotations)for(let c of e.annotations)r.push("--annotation",c);e.dryRun?r.push("--dry-run"):r.push("--metadata-file",n);for(let c of s)r.push("--file",c);for(let c of i)r.push(c);let a=await this.getCreateCommand(r);if(e.skipExec){S(`[command]${a.command} ${a.args.join(" ")}`),S("Skipped create command");return}return await Y.getExecOutput(a.command,a.args,{ignoreReturnCode:!0,silent:e.silent}).then(c=>{if(c.stderr.length>0&&c.exitCode!=0)throw new Error(c.stderr.trim());if(!e.dryRun){if(!aG.default.existsSync(n))return;let l=aG.default.readFileSync(n,{encoding:"utf-8"}).trim();if(l===""||l==="null")return;let u=JSON.parse(l),d=u["containerimage.descriptor"];return d?{digest:u["containerimage.digest"]||d.digest,descriptor:d,imageNames:u["image.name"]?u["image.name"].split(",").map(A=>A.trim()):[]}:void 0}})}async inspect(e,r,n){let s=await this.getInspectCommand([e.nam
Line truncated
+`).map(i=>i.trim()).filter(i=>i.length>0);return s}static async commitDate(e,r){return new Date(await t.exec(["show","-s",'--format="%ci"',e],r))}};var ade=require("crypto"),Ko=w(require("fs"),1),Xo=w(require("path"),1);var Sf=w(GU(),1),cde=w(nq(),1),Nf=w(rde(),1);var sde=require("util");var oG=w(GU(),1);var ide=w(Ti(),1);var nde="application/vnd.oci.empty.v1+json";var Ln=class{static{o(this,"Cosign")}binPath;_version;_versionOnce;constructor(e){this.binPath=e?.binPath||"cosign",this._version="",this._versionOnce=!1}async isAvailable(){let e=await Y.getExecOutput(this.binPath,[],{ignoreReturnCode:!0,silent:!0}).then(r=>r.stderr.length>0&&r.exitCode!=0?(B(`Cosign.isAvailable cmd err: ${r.stderr.trim()}`),!1):r.exitCode==0).catch(r=>(B(`Cosign.isAvailable error: ${r}`),!1));return B(`Cosign.isAvailable: ${e}`),e}async version(){return this._versionOnce?this._version:(this._versionOnce=!0,this._version=await Y.getExecOutput(this.binPath,["version","--json"],{ignoreReturnCode:!0,silent:!0}).then(e=>{if(e.stderr.length>0&&e.exitCode!=0)throw new Error(e.stderr.trim());return JSON.parse(e.stdout.trim()).gitVersion}),this._version)}async printVersion(){await Y.exec(this.binPath,["version","--json"],{failOnStdErr:!1})}static getErrorMessage(e){let r=(0,sde.stripVTControlCharacters)(e).split(/[\r\n]/);for(let n=r.length-1;n>=0;n--){let s=r[n].trim();if(s)return s}return"unknown error"}async versionSatisfies(e,r){let n=r??await this.version();if(!n)return B("Cosign.versionSatisfies false: undefined version"),!1;let s=ide.satisfies(n,e)||/^[0-9a-f]{7}$/.exec(n)!==null;return B(`Cosign.versionSatisfies ${n} statisfies ${e}: ${s}`),s}static parseCommandOutput(e){let r,n,s,i;for(let a of e.split(/\r?\n/)){let c=a.trim();if(!c.startsWith("{")||!c.endsWith("}"))continue;let l;try{l=JSON.parse(c)}catch{continue}if(l&&Array.isArray(l.errors)&&l.errors.length>0&&(i=l.errors),!r&&l&&Array.isArray(l.manifests)&&l.manifests.length>0){let u=l.manifests[0];u?.artifactType===oG.BUNDLE_V03_MEDIA_TYPE&&typeof u.digest=="string"?r=u.digest:u?.artifactType===nde&&typeof u.digest=="string"&&(n=u.digest)}if(!s&&l&&l.mediaType===oG.BUNDLE_V03_MEDIA_TYPE&&(s=l),s&&(r||n)){i=void 0;break}}return{bundle:s,signatureManifestDigest:r||n,errors:i}}};var aG=w(require("fs"),1);var ZN=class t{static{o(this,"ImageTools")}buildx;constructor(e){this.buildx=e?.buildx||new Ie}async getCommand(e){return await this.buildx.getCommand(["imagetools",...e])}async getInspectCommand(e){return await this.getCommand(["inspect",...e])}async getCreateCommand(e){return await this.getCommand(["create",...e])}async inspectImage(e){return await this.inspect(e,"{{json .Image}}",r=>{if(typeof r=="object"&&!Array.isArray(r)&&r!==null)return Object.prototype.hasOwnProperty.call(r,"config"),r;throw new Error("Unexpected output format")})}async inspectManifest(e){return await this.inspect(e,"{{json .Manifest}}",r=>{if(typeof r=="object"&&!Array.isArray(r)&&r!==null)return Object.prototype.hasOwnProperty.call(r,"manifests"),r;throw new Error("Unexpected output format")})}async attestationDescriptors(e){let r=await this.inspectManifest(e);if(typeof r!="object"||r===null||!("manifests"in r)||!Array.isArray(r.manifests))throw new Error(`No descriptor found for ${e.name}`);let n=r.manifests.filter(a=>a.annotations?.["vnd.docker.reference.type"]==="attestation-manifest");if(!e.platform)return n;let s=e.platform,i=new Map;for(let a of r.manifests)a.digest&&i.set(a.digest,a);return n.filter(a=>{let c=a.annotations?.["vnd.docker.reference.digest"];if(!c)return!1;let l=i.get(c);return l?l.platform?.os===s.os&&l.platform?.architecture===s.architecture&&(l.platform?.variant??"")===(s.variant??""):!1})}async attestationDigests(e){return(await this.attestationDescriptors(e)).map(r=>r.digest)}static toIndexAnnotation(e){let r=e.indexOf("="),n=r===-1?e:e.substring(0,r),s=r===-1?"":e.substring(r),i=n.indexOf(":");if(i!==-1){let a=n.substring(0,i),c=n.substring(i+1);if(a.split(",").map(u=>u.replace(/\[.*\]$/,"")).some(u=>["manifest","index","manifest-descriptor","index-descriptor"].includes(u)))return`index:${c}${s}`}return`index:${e}`}async create(e){let r=[],n=De.tmpName({tmpdir:De.tmpDir(),template:"imagetools-metadata-XXXXXX"}),s=[],i=[];for(let c of e.sources){if(c.startsWith("cwd://")){let l=c.substring(6);l.length>0&&s.push(l);continue}i.push(c)}if(e.tags)for(let c of e.tags)r.push("--tag",c);if(e.platforms)for(let c of e.platforms)r.push("--platform",c);if(e.annotations)for(let c of e.annotations)r.push("--annotation",c);e.dryRun?r.push("--dry-run"):r.push("--metadata-file",n);for(let c of s)r.push("--file",c);for(let c of i)r.push(c);let a=await this.getCreateCommand(r);if(e.skipExec){S(`[command]${a.command} ${a.args.join(" ")}`),S("Skipped create command");return}return await Y.getExecOutput(a.command,a.args,{ignoreReturnCode:!0,silent:e.silent}).then(c=>{if(c.stderr.length>0&&c.exitCode!=0)throw new Error(c.stderr.trim());if(!e.dryRun){if(!aG.default.existsSync(n))return;let l=aG
Line truncated
 ${a.message}`),await new Promise(u=>setTimeout(u,Math.pow(2,c)*100))}throw a??new Error(`ImageTools inspect command failed for ${e.name}`)}async execInspect(e,r,n){return await Y.getExecOutput(e,r,{ignoreReturnCode:!0,silent:!0}).then(s=>{if(s.stderr.length>0&&s.exitCode!=0)throw new Error(s.stderr.trim());return n(JSON.parse(s.stdout))})}static isManifestUnknownError(e){return/(MANIFEST_UNKNOWN|manifest unknown)/i.test(e)||/:\s*not found$/i.test(e)}};var wf="https://search.sigstore.dev";var ode="slsaprovenance1",ml=class t{static{o(this,"Sigstore")}cosign;imageTools;constructor(e){this.cosign=e?.cosign||new Ln,this.imageTools=e?.imageTools||new ZN}async signAttestationManifests(e){if(!await this.cosign.isAvailable())throw new Error("Cosign is required to sign attestation manifests");let r={};try{if(!process.env.ACTIONS_ID_TOKEN_REQUEST_URL)throw new Error('missing "id-token" permission. Please add "permissions: id-token: write" to your workflow.');let n={noTransparencyLog:e.noTransparencyLog,rekorV2:e.rekorV2},s=await this.cosignSigningConfigArgs(n);for(let i of e.imageNames){let a=await this.imageTools.attestationDigests({name:`${i}@${e.imageDigest}`,retryOnManifestUnknown:e.retryOnManifestUnknown,retryLimit:e.retryLimit});for(let c of a){let l=`${i}@${c}`;await nt(`Signing attestation manifest ${l}`,async()=>{let u=["sign","--yes","--oidc-provider","github-actions","--registry-referrers-mode","oci-1-1",...await this.bundleFormatArgs(),...s];S(`[command]${this.cosign.binPath} ${[...u,l].join(" ")}`);let d=await Y.getExecOutput(this.cosign.binPath,["--verbose",...u,l],{ignoreReturnCode:!0,silent:!0,env:Object.assign({},process.env,{COSIGN_EXPERIMENTAL:"1"})}),A=Ln.parseCommandOutput(d.stderr.trim());if(d.exitCode!=0)if(A.errors&&A.errors.length>0){let f=A.errors.map(h=>`- [${h.code}] ${h.message} : ${h.detail}`).join(`
 `);throw new Error(`Cosign sign command failed with errors:
 ${f}`)}else throw new Error(`Cosign sign command failed with: ${Ln.getErrorMessage(d.stderr)}`);let p=t.parseBundle((0,Sf.bundleFromJSON)(A.bundle));p.tlogID&&await this.logTransparencyUpload(p.tlogID,n),S(`Signature manifest pushed: https://oci.dag.dev/?referrers=${l}`),r[l]={...p,imageName:i}})}}}catch(n){throw new Error(`Signing BuildKit attestation manifests failed: ${n.message}`)}return r}async verifySignedManifests(e,r){let n={};for(let[s,i]of Object.entries(e))await nt(`Verifying signature of ${s}`,async()=>{let a=await this.verifyImageAttestation(s,{certificateIdentityRegexp:r.certificateIdentityRegexp,noTransparencyLog:r.noTransparencyLog||!i.tlogID,retryOnManifestUnknown:r.retryOnManifestUnknown,retryLimit:r.retryLimit});S(`Signature manifest verified: https://oci.dag.dev/?image=${i.imageName}@${a.signatureManifestDigest}`),n[s]=a});return n}async verifyImageAttestations(e,r){let n={},s=await this.imageTools.attestationDigests({name:e,platform:r.platform,retryOnManifestUnknown:r.retryOnManifestUnknown,retryLimit:r.retryLimit});if(s.length===0)throw new Error(`No attestation manifests found for ${e}`);let i=e.split(":",1)[0];for(let a of s){let c=`${i}@${a}`,l=await this.verifyImageAttestation(c,r);S(`Signature manifest verified: https://oci.dag.dev/?image=${i}@${l.signatureManifestDigest}`),n[c]=l}return n}async verifyImageAttestation(e,r){if(!await this.cosign.isAvailable())throw new Error("Cosign is required to verify signed manifests");let n=["verify","--experimental-oci11",...await this.bundleFormatArgs(),"--certificate-oidc-issuer","https://token.actions.githubusercontent.com","--certificate-identity-regexp",r.certificateIdentityRegexp];if(r.noTransparencyLog&&n.push("--use-signed-timestamps","--insecure-ignore-tlog"),!r.retryOnManifestUnknown){S(`[command]${this.cosign.binPath} ${[...n,e].join(" ")}`);let a=await Y.getExecOutput(this.cosign.binPath,["--verbose",...n,e],{ignoreReturnCode:!0,silent:!0,env:Object.assign({},process.env,{COSIGN_EXPERIMENTAL:"1"})});if(a.exitCode!==0)throw new Error(`Cosign verify command failed with: ${Ln.getErrorMessage(a.stderr)}`);let c=Ln.parseCommandOutput(a.stderr.trim());return{cosignArgs:n,signatureManifestDigest:c.signatureManifestDigest}}let s=r.retryLimit??15,i;S(`[command]${this.cosign.binPath} ${[...n,e].join(" ")}`);for(let a=0;a<s;a++){let c=await Y.getExecOutput(this.cosign.binPath,["--verbose",...n,e],{ignoreReturnCode:!0,silent:!0,env:Object.assign({},process.env,{COSIGN_EXPERIMENTAL:"1"})}),l=Ln.parseCommandOutput(c.stderr.trim());if(c.exitCode===0)return{cosignArgs:n,signatureManifestDigest:l.signatureManifestDigest};if(l.errors&&l.errors.length>0){let u=l.errors.map(d=>`- [${d.code}] ${d.message} : ${d.detail}`).join(`