Optionally verify the checksum of the downloaded dependency-tree-diff.jar

[mateuszkwiecinski]

Closes #249

Adds an optional lib-checksum input holding the expected SHA-256 of the downloaded dependency-tree-diff.jar. When set, the action fails before running anything if the downloaded file doesn't match; when left empty (the default) nothing changes.

• Verification implemented in both entrypoint.sh (via shasum -a 256, available on both Linux and macOS runners) and entrypoint.ps1 (via Get-FileHash). Comparison is case-insensitive in both.
• New CI job runs on ubuntu + windows covering both scripts, and asserts both directions: a wrong checksum fails the action (cheap - it exits before any Gradle work), and the correct checksum for the pinned 1.2.1 release passes end to end.
• Documented in the Readme, including the real 1.2.1 checksum as an example.

🤖 Generated with Claude Code

[github-actions]

Test2

 +--- org.jetbrains.kotlin:kotlin-stdlib:2.4.10
-|    \--- org.jetbrains:annotations:13.0 -> 23.0.0
+|    +--- org.jetbrains:annotations:13.0
+|    +--- org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.8.0 (c)
+|    +--- org.jetbrains.kotlin:kotlin-stdlib-common:2.4.10 (c)
+|    \--- org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.8.0 (c)
-\--- androidx.paging:paging-common-ktx:3.5.0
-     +--- androidx.paging:paging-common:3.5.0
-     |    \--- androidx.paging:paging-common-desktop:3.5.0
-     |         +--- androidx.annotation:annotation:1.9.1
-     |         |    \--- androidx.annotation:annotation-jvm:1.9.1
-     |         |         \--- org.jetbrains.kotlin:kotlin-stdlib:1.9.24 -> 2.4.10 (*)
-     |         +--- androidx.arch.core:core-common:2.2.0
-     |         |    \--- androidx.annotation:annotation:1.1.0 -> 1.9.1 (*)
-     |         +--- org.jetbrains.kotlin:kotlin-stdlib:2.1.20 -> 2.4.10 (*)
-     |         +--- org.jetbrains.kotlinx:kotlinx-coroutines-core:1.9.0
-     |         |    \--- org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:1.9.0
-     |         |         +--- org.jetbrains:annotations:23.0.0
-     |         |         +--- org.jetbrains.kotlinx:kotlinx-coroutines-bom:1.9.0
-     |         |         |    +--- org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:1.9.0 (c)
-     |         |         |    \--- org.jetbrains.kotlinx:kotlinx-coroutines-core:1.9.0 (c)
-     |         |         \--- org.jetbrains.kotlin:kotlin-stdlib:2.0.0 -> 2.4.10 (*)
-     |         \--- androidx.paging:paging-common-ktx:3.5.0 (c)
-     +--- org.jetbrains.kotlin:kotlin-stdlib:2.1.20 -> 2.4.10 (*)
-     \--- androidx.paging:paging-common:3.5.0 (c)
+\--- androidx.paging:paging-common-ktx:3.2.0
+     +--- androidx.paging:paging-common:3.2.0
+     |    +--- androidx.annotation:annotation:1.3.0
+     |    +--- androidx.arch.core:core-common:2.2.0
+     |    |    \--- androidx.annotation:annotation:1.1.0 -> 1.3.0
+     |    +--- org.jetbrains.kotlin:kotlin-stdlib:1.8.21 -> 2.4.10 (*)
+     |    +--- org.jetbrains.kotlinx:kotlinx-coroutines-core:1.6.4
+     |    |    \--- org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:1.6.4
+     |    |         +--- org.jetbrains.kotlinx:kotlinx-coroutines-bom:1.6.4
+     |    |         |    +--- org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:1.6.4 (c)
+     |    |         |    \--- org.jetbrains.kotlinx:kotlinx-coroutines-core:1.6.4 (c)
+     |    |         +--- org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.6.21 -> 1.8.0
+     |    |         |    +--- org.jetbrains.kotlin:kotlin-stdlib:1.8.0 -> 2.4.10 (*)
+     |    |         |    \--- org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.8.0
+     |    |         |         \--- org.jetbrains.kotlin:kotlin-stdlib:1.8.0 -> 2.4.10 (*)
+     |    |         \--- org.jetbrains.kotlin:kotlin-stdlib-common:1.6.21 -> 2.4.10
+     |    |              \--- org.jetbrains.kotlin:kotlin-stdlib:2.4.10 (*)
+     |    \--- androidx.paging:paging-common-ktx:3.2.0 (c)
+     \--- androidx.paging:paging-common:3.2.0 (c)

[github-actions]

Test1

 +--- org.jetbrains.kotlin:kotlin-stdlib:2.4.10
-|    \--- org.jetbrains:annotations:13.0 -> 23.0.0
+|    +--- org.jetbrains:annotations:13.0
+|    +--- org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.8.0 (c)
+|    +--- org.jetbrains.kotlin:kotlin-stdlib-common:2.4.10 (c)
+|    \--- org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.8.0 (c)
-\--- androidx.paging:paging-common-ktx:3.5.0
-     +--- androidx.paging:paging-common:3.5.0
-     |    \--- androidx.paging:paging-common-desktop:3.5.0
-     |         +--- androidx.annotation:annotation:1.9.1
-     |         |    \--- androidx.annotation:annotation-jvm:1.9.1
-     |         |         \--- org.jetbrains.kotlin:kotlin-stdlib:1.9.24 -> 2.4.10 (*)
-     |         +--- androidx.arch.core:core-common:2.2.0
-     |         |    \--- androidx.annotation:annotation:1.1.0 -> 1.9.1 (*)
-     |         +--- org.jetbrains.kotlin:kotlin-stdlib:2.1.20 -> 2.4.10 (*)
-     |         +--- org.jetbrains.kotlinx:kotlinx-coroutines-core:1.9.0
-     |         |    \--- org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:1.9.0
-     |         |         +--- org.jetbrains:annotations:23.0.0
-     |         |         +--- org.jetbrains.kotlinx:kotlinx-coroutines-bom:1.9.0
-     |         |         |    +--- org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:1.9.0 (c)
-     |         |         |    \--- org.jetbrains.kotlinx:kotlinx-coroutines-core:1.9.0 (c)
-     |         |         \--- org.jetbrains.kotlin:kotlin-stdlib:2.0.0 -> 2.4.10 (*)
-     |         \--- androidx.paging:paging-common-ktx:3.5.0 (c)
-     +--- org.jetbrains.kotlin:kotlin-stdlib:2.1.20 -> 2.4.10 (*)
-     \--- androidx.paging:paging-common:3.5.0 (c)
+\--- androidx.paging:paging-common-ktx:3.2.0
+     +--- androidx.paging:paging-common:3.2.0
+     |    +--- androidx.annotation:annotation:1.3.0
+     |    +--- androidx.arch.core:core-common:2.2.0
+     |    |    \--- androidx.annotation:annotation:1.1.0 -> 1.3.0
+     |    +--- org.jetbrains.kotlin:kotlin-stdlib:1.8.21 -> 2.4.10 (*)
+     |    +--- org.jetbrains.kotlinx:kotlinx-coroutines-core:1.6.4
+     |    |    \--- org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:1.6.4
+     |    |         +--- org.jetbrains.kotlinx:kotlinx-coroutines-bom:1.6.4
+     |    |         |    +--- org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:1.6.4 (c)
+     |    |         |    \--- org.jetbrains.kotlinx:kotlinx-coroutines-core:1.6.4 (c)
+     |    |         +--- org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.6.21 -> 1.8.0
+     |    |         |    +--- org.jetbrains.kotlin:kotlin-stdlib:1.8.0 -> 2.4.10 (*)
+     |    |         |    \--- org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.8.0
+     |    |         |         \--- org.jetbrains.kotlin:kotlin-stdlib:1.8.0 -> 2.4.10 (*)
+     |    |         \--- org.jetbrains.kotlin:kotlin-stdlib-common:1.6.21 -> 2.4.10
+     |    |              \--- org.jetbrains.kotlin:kotlin-stdlib:2.4.10 (*)
+     |    \--- androidx.paging:paging-common-ktx:3.2.0 (c)
+     \--- androidx.paging:paging-common:3.2.0 (c)

output path: /home/runner/work/dependency-tree-diff-action/dependency-tree-diff-action/testproject/dependency-tree-diff_output.txt
base dependencies: /home/runner/work/dependency-tree-diff-action/dependency-tree-diff-action/testproject/dependency-tree-diff_dependencies-base.txt
head dependencies: /home/runner/work/dependency-tree-diff-action/dependency-tree-diff-action/testproject/dependency-tree-diff_dependencies-head.txt