Bump rhysd/actionlint from 1.7.5 to 1.7.6 (#22)

## Changelog

- Update license copyright year to 2025

---

Powered by
[FantasticFiasco/action-update-license-year](https://github.com/FantasticFiasco/action-update-license-year)

---------

Co-authored-by: github-actions <github-actions@github.com>
Co-authored-by: fabasoad <fabasoad@gmail.com>

Author: 3 people

.github/workflows/functional-tests.yml

@@ -5,6 +5,7 @@ on: # yamllint disable-line rule:truthy
   pull_request:
     paths:
       - .github/workflows/functional-tests.yml
+      - src/**
       - action.yml
   push:
     branches:
@@ -26,17 +27,21 @@ jobs:
     outputs:
       versions: ${{ steps.prepare-list.outputs.versions }}
     steps:
+      - name: Get releases
+        id: github-releases
+        uses: yakubique/github-releases@v1.2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          repository: "ciao-lang/ciao"
+          sort: "desc"
       - name: Prepare list
         id: prepare-list
         env:
           RELEASES_AMOUNT: "3"
-          TARGET_REPO: "ciao-lang/ciao"
         run: |
-          versions=$(curl -sL \
-            -H "Accept: application/vnd.github+json" \
-            -H "X-GitHub-Api-Version: 2022-11-28" \
-            "https://api.github.com/repos/${TARGET_REPO}/releases" \
-            | jq -c -r --arg n "${RELEASES_AMOUNT}" '[.[0:($n | tonumber)][].tag_name] | map(sub("^v"; "")) | . += ["latest"]')
+          versions=$(echo '${{ steps.github-releases.outputs.releases }}' \
+            | jq -c -r --arg n "${RELEASES_AMOUNT}" '.[0:($n | tonumber)] | map(sub("^v"; "")) | . += ["latest"]')
           echo "versions=${versions}" >> "$GITHUB_OUTPUT"
   setup-ciao:
     name: Setup Ciao
@@ -64,39 +69,11 @@ jobs:
               exit 1
             fi
           }
-          test_equal "Wrong completion status" \
-            "${{ steps.setup-ciao.outcome }}" \
-            "success"
-          test_equal "ciao should not be installed" \
+          test_equal "ciao should be installed" \
             "${{ steps.setup-ciao.outputs.installed }}" \
             "true"
       - name: Run command
         run: ciao list
-  windows-not-supported:
-    name: Windows not supported
-    runs-on: windows-latest
-    timeout-minutes: 5
-    steps:
-      - name: Checkout ${{ github.repository }}
-        uses: actions/checkout@v4
-      - name: Setup Ciao
-        id: setup-ciao
-        continue-on-error: true
-        uses: ./
-      - name: Test action completion
-        run: |
-          test_equal() {
-            if [ "${2}" != "${3}" ]; then
-              echo "::error title=${1}::Expected: ${3}. Actual: ${2}."
-              exit 1
-            fi
-          }
-          test_equal "Wrong completion status" \
-            "${{ steps.setup-ciao.outcome }}" \
-            "failure"
-          test_equal "ciao should not be installed" \
-            "${{ steps.setup-ciao.outputs.installed }}" \
-            "false"
   test-force:
     name: Test force
     runs-on: ubuntu-latest

.github/workflows/security.yml

@@ -14,3 +14,6 @@ jobs:
       contents: read
       security-events: write
     uses: fabasoad/reusable-workflows/.github/workflows/wf-security-sast.yml@main
+    with:
+      code-scanning: true
+      sca: true

.github/workflows/update-license.yml

@@ -3,6 +3,7 @@ name: License
 
 on: # yamllint disable-line rule:truthy
   schedule:
+    # Every January 1st at 14:00 JST
     - cron: "0 5 1 1 *"
 
 jobs:

.pre-commit-config.yaml

@@ -23,7 +23,7 @@ repos:
       - id: detect-secrets
         stages: ["pre-commit", "pre-push"]
   - repo: https://github.com/gitleaks/gitleaks
-    rev: v8.22.0
+    rev: v8.22.1
     hooks:
       - id: gitleaks
         stages: ["pre-commit", "pre-push"]
@@ -40,6 +40,13 @@ repos:
     rev: v0.43.0
     hooks:
       - id: markdownlint-fix
+  # Shell
+  - repo: https://github.com/openstack/bashate
+    rev: 2.1.1
+    hooks:
+      - id: bashate
+        args: ["-i", "E003,E006"]
+        stages: ["pre-commit"]
   # Yaml
   - repo: https://github.com/adrienverge/yamllint
     rev: v1.35.1
@@ -48,7 +55,7 @@ repos:
         stages: ["pre-push"]
   # GitHub Actions
   - repo: https://github.com/rhysd/actionlint
-    rev: v1.7.5
+    rev: v1.7.6
     hooks:
       - id: actionlint
         args: ["-pyflakes="]

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2022-2024 Yevhen Fabizhevskyi
+Copyright (c) 2022-2025 Yevhen Fabizhevskyi
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -32,6 +32,10 @@ None.
     # (Optional) If "false" skips installation if ciao is already installed. If
     # "true" installs ciao in any case. Defaults to "false".
     force: "false"
+    # (Optional) GitHub token that is used to send requests to GitHub API such
+    # as getting latest release. Defaults to the token provided by GitHub Actions
+    # environment.
+    github-token: "${{ github.token }}"
 ```
 
 ## Outputs

action.yml

@@ -16,6 +16,12 @@ inputs:
       installs ciao in any case. Defaults to "false".
     required: false
     default: "false"
+  github-token:
+    description: |
+      GitHub token that is used to send requests to GitHub API such as getting
+      latest release. Defaults to the token provided by GitHub Actions environment.
+    required: false
+    default: ${{ github.token }}
 outputs:
   installed:
     description: Whether ciao was installed or not.
@@ -29,32 +35,33 @@ runs:
         echo "::error title=OS is not supported::${RUNNER_OS} ${RUNNER_ARCH} is not supported"
         exit 1
       shell: sh
+
     - name: Collect info
       id: info
       env:
         INPUT_FORCE: "${{ inputs.force }}"
-      run: |
-        if [ "${INPUT_FORCE}" = "false" ] && command -v ciao >/dev/null 2>&1; then
-          bin_installed="true"
-        else
-          bin_installed="false"
-        fi
-        echo "bin-installed=${bin_installed}" >> "$GITHUB_OUTPUT"
-
-        bin_dir="ciao_$(date +%s)"
-        echo "bin-dir=${bin_dir}" >> "$GITHUB_OUTPUT"
+      run: ./collect-info.sh "${INPUT_FORCE}"
+      shell: sh
+      working-directory: "${{ github.action_path }}/src"
 
-        bin_path="$GITHUB_WORKSPACE/${bin_dir}"
-        echo "bin-path=${bin_path}" >> "$GITHUB_OUTPUT"
+    - name: Get latest release
+      if: ${{ steps.info.outputs.bin-installed == 'false' && inputs.version == 'latest' }}
+      id: latest-release
+      env:
+        INPUT_GITHUB_TOKEN: "${{ inputs.github-token }}"
+      run: ./get-latest-release.sh "ciao-lang/ciao" "${INPUT_GITHUB_TOKEN}"
       shell: sh
-    - name: Download Ciao
+      working-directory: "${{ github.action_path }}/src"
+
+    - name: Download ciao
       if: ${{ steps.info.outputs.bin-installed == 'false' }}
       uses: actions/checkout@v4
       with:
         repository: "ciao-lang/ciao"
-        ref: ${{ inputs.version == 'latest' && 'master' || format('v{0}', inputs.version) }}
+        ref: ${{ format('v{0}', inputs.version == 'latest' && steps.latest-release.outputs.version || inputs.version) }}
         fetch-depth: 1
         path: ${{ steps.info.outputs.bin-dir }}
+
     - name: Install Ciao
       if: ${{ steps.info.outputs.bin-installed == 'false' }}
       id: install-ciao

src/collect-info.sh

@@ -0,0 +1,33 @@
+#!/usr/bin/env sh
+
+SCRIPT_PATH=$(realpath "$0")
+SRC_DIR_PATH=$(dirname "$SCRIPT_PATH")
+LIB_DIR_PATH="${SRC_DIR_PATH}/lib"
+
+. "${LIB_DIR_PATH}/logging.sh"
+
+main() {
+  input_force="${1}"
+
+  bin_installed="false"
+  if command -v ciao >/dev/null 2>&1; then
+    if [ "${input_force}" = "false" ]; then
+      msg="Installation skipped."
+      bin_installed="true"
+    else
+      msg="Executing forced installation."
+    fi
+    log_info "ciao is found at $(which ciao). ${msg}"
+  else
+    log_info "ciao is not found. Executing installation."
+  fi
+  echo "bin-installed=${bin_installed}" >> "$GITHUB_OUTPUT"
+
+  bin_dir="ciao_$(date +%s)"
+  echo "bin-dir=${bin_dir}" >> "$GITHUB_OUTPUT"
+
+  bin_path="$GITHUB_WORKSPACE/${bin_dir}"
+  echo "bin-path=${bin_path}" >> "$GITHUB_OUTPUT"
+}
+
+main "$@"

src/get-latest-release.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env sh
+
+main() {
+  repo="${1}"
+  token="${2}"
+
+  version=$(curl -sL \
+    -H "Accept: application/vnd.github+json" \
+    -H "Authorization: Bearer ${token}" \
+    -H "X-GitHub-Api-Version: 2022-11-28" \
+    "https://api.github.com/repos/${repo}/releases/latest" \
+    | jq -r '.tag_name | sub("^v"; "")')
+  echo "version=${version}" >> "$GITHUB_OUTPUT"
+}
+
+main "$@"

src/lib/logging.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/env sh
+
+# Printing log to the console.
+# Parameters:
+# 1. (Required) Log level. Options: debug, info, warning, error.
+# 2. (Required) Message.
+log() {
+  header="setup-ciao-action"
+  printf "[%s] [%s] %s %s\n" "${1}" "${header}" "$(date +'%Y-%m-%d %T')" "${2}" 1>&2
+}
+
+log_info() {
+  log "info" "${1}"
+}