From ba3708a92cd83cb070a5c1872fbdf2fe4d61cf84 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 27 Apr 2026 07:13:43 +0000 Subject: [PATCH 1/5] APP-1824 - Upgrade jfrog-cli to 2.91.0 (#322) --- action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/action.yml b/action.yml index 3a92a7d..db77435 100644 --- a/action.yml +++ b/action.yml @@ -4,7 +4,7 @@ author: "step-security" inputs: version: description: "JFrog CLI Version" - default: "2.88.0" + default: "2.91.0" required: false download-repository: description: "Remote repository in Artifactory pointing to 'https://releases.jfrog.io/artifactory/jfrog-cli'. Use this parameter in case you don't have an Internet access." From 632dddbe7e1ced7ce41e129794c54bf0451b5511 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 27 Apr 2026 07:13:45 +0000 Subject: [PATCH 2/5] chore: update to node 24 (#328) * chore: update to node 24 Signed-off-by: Matthew Greenwald * ci: ran npm format Signed-off-by: Matthew Greenwald * ci: adding permissions to cla.yml Signed-off-by: Matthew Greenwald --------- Signed-off-by: Matthew Greenwald --- src/utils.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/utils.ts b/src/utils.ts index ef41683..6d97264 100644 --- a/src/utils.ts +++ b/src/utils.ts @@ -480,8 +480,8 @@ export class Utils { if (!jfrogCredentials.jfrogUrl) { throw new Error( `'download-repository' input provided, but no JFrog environment details found. ` + - `Hint - Ensure that the JFrog connection details environment variables are set: ` + - `either a Config Token with a JF_ENV_ prefix or separate env config (JF_URL, JF_USER, JF_PASSWORD, JF_ACCESS_TOKEN)`, + `Hint - Ensure that the JFrog connection details environment variables are set: ` + + `either a Config Token with a JF_ENV_ prefix or separate env config (JF_URL, JF_USER, JF_PASSWORD, JF_ACCESS_TOKEN)`, ); } serverObj.artifactoryUrl = jfrogCredentials.jfrogUrl.replace(/\/$/, '') + '/artifactory'; From b26c0c970e9e320ec1c4e2d2901b36d3d75e319f Mon Sep 17 00:00:00 2001 From: Raj-StepSecurity Date: Mon, 27 Apr 2026 12:52:58 +0530 Subject: [PATCH 3/5] conflicted commits cherry-picked --- .github/workflows/test.yml | 2 +- package-lock.json | 6 +++--- package.json | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 00186b6..45e917e 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -26,7 +26,7 @@ jobs: - name: Setup NodeJS uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0 with: - node-version: "20.x" + node-version: "24.x" # Run action according to the input version - name: Setup JFrog CLI diff --git a/package-lock.json b/package-lock.json index 1aeb866..9a0e023 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "@step-security/setup-jfrog-cli", - "version": "4.9.1", + "version": "5.0.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@step-security/setup-jfrog-cli", - "version": "4.9.1", + "version": "5.0.0", "license": "Apache-2.0", "dependencies": { "@actions/core": "~1.10.1", @@ -33,7 +33,7 @@ "typescript": "^5.4.5" }, "engines": { - "node": ">=20.0.0", + "node": ">=24.0.0", "npm": ">=10.0.0" } }, diff --git a/package.json b/package.json index fbc4483..ba2460e 100644 --- a/package.json +++ b/package.json @@ -1,12 +1,12 @@ { "name": "@step-security/setup-jfrog-cli", - "version": "4.9.1", + "version": "5.0.0", "private": true, "description": "Setup JFrog CLI in GitHub Actions", "main": "dist/index.js", "engines": { "npm": ">=10.0.0", - "node": ">=20.0.0" + "node": ">=24.0.0" }, "scripts": { "build": "npm run compile && npm run package", From 33e97e2da0ef5fbddc9f61244aa41fc6bdac44e6 Mon Sep 17 00:00:00 2001 From: Raj-StepSecurity Date: Mon, 27 Apr 2026 16:59:59 +0530 Subject: [PATCH 4/5] dist updated --- dist/index.js | 2 +- dist/post/index.js | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/dist/index.js b/dist/index.js index e00ec0b..624fdac 100644 --- a/dist/index.js +++ b/dist/index.js @@ -52257,7 +52257,7 @@ module.exports = /*#__PURE__*/JSON.parse('{"application/1d-interleaved-parityfec /***/ ((module) => { "use strict"; -module.exports = {"rE":"4.9.1"}; +module.exports = {"rE":"5.0.0"}; /***/ }) diff --git a/dist/post/index.js b/dist/post/index.js index f26b7a3..8a2c2df 100644 --- a/dist/post/index.js +++ b/dist/post/index.js @@ -43303,7 +43303,7 @@ module.exports = parseParams /***/ ((module) => { "use strict"; -module.exports = {"rE":"4.9.1"}; +module.exports = {"rE":"5.0.0"}; /***/ }) From add74077b82365f6d0cd668af6f2aec44522f365 Mon Sep 17 00:00:00 2001 From: Raj-StepSecurity Date: Mon, 27 Apr 2026 18:07:54 +0530 Subject: [PATCH 5/5] Update action.yml --- action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/action.yml b/action.yml index db77435..dfe5f75 100644 --- a/action.yml +++ b/action.yml @@ -42,7 +42,7 @@ outputs: oidc-user: description: "JFrog OIDC username from the OIDC token generated by the Setup JFrog CLI when setting oidc-provider-name." runs: - using: "node20" + using: "node24" main: "dist/index.js" post: "dist/post/index.js" branding: