refactor: extract tag object creation and improve annotation handling

Co-authored-by: jimeh <39563+jimeh@users.noreply.github.com>
feat: add support for annotated tags via annotation input
2026-02-19 09:36:41 +00:00 · 2025-10-27 22:17:36 +00:00 · 2025-10-27 22:14:27 +00:00 · 2025-10-27 22:08:25 +00:00 · 2025-10-27 22:05:41 +00:00
30 changed files with 1559 additions and 35491 deletions
--- a/.github/.release-please-manifest.json
+++ b/.github/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "2.2.0"
+  ".": "2.0.0"
 }
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,7 +8,6 @@ updates:
    groups:
      actions-minor:
        update-types:
-          - major
          - minor
          - patch
  - package-ecosystem: npm
@@ -24,5 +23,4 @@ updates:
      npm-production:
        dependency-type: production
        update-types:
-          - minor
          - patch
--- a/.github/release-please-config.json
+++ b/.github/release-please-config.json
@@ -1,30 +1,15 @@
 {
-  "always-update": true,
  "packages": {
    ".": {
-      "release-type": "node",
+      "release-type": "simple",
      "changelog-path": "CHANGELOG.md",
      "extra-files": ["README.md"],
      "bump-minor-pre-major": true,
      "bump-patch-for-minor-pre-major": true,
      "draft": false,
      "prerelease": false,
-      "include-component-in-tag": false
+      "initial-version": "0.0.1"
    }
  },
-  "changelog-sections": [
-    { "type": "feat", "section": "Features" },
-    { "type": "feature", "section": "Features" },
-    { "type": "fix", "section": "Bug Fixes" },
-    { "type": "perf", "section": "Performance Improvements" },
-    { "type": "revert", "section": "Reverts" },
-    { "type": "docs", "section": "Documentation", "hidden": false },
-    { "type": "style", "section": "Styles", "hidden": true },
-    { "type": "chore", "section": "Miscellaneous Chores", "hidden": true },
-    { "type": "refactor", "section": "Code Refactoring", "hidden": true },
-    { "type": "test", "section": "Tests", "hidden": true },
-    { "type": "build", "section": "Build System", "hidden": true },
-    { "type": "ci", "section": "Continuous Integration", "hidden": true }
-  ],
  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json"
 }
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ jobs:
  check-dist:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
        with:
          node-version-file: .node-version
@@ -51,7 +51,7 @@ jobs:
      packages: read
      statuses: write
    steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
        with:
          fetch-depth: 0
      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
@@ -64,7 +64,7 @@ jobs:
  test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
        with:
          fetch-depth: 0
      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
@@ -77,6 +77,7 @@ jobs:
  release-please:
    runs-on: ubuntu-latest
    if: ${{ github.ref == 'refs/heads/main' }}
+    needs: [check-dist]
    outputs:
      release_created: ${{ steps.release-please.outputs.release_created }}
      major: ${{ steps.release-please.outputs.major }}
@@ -90,12 +91,12 @@ jobs:

  release-tags:
    runs-on: ubuntu-latest
-    needs: [release-please, check-dist, lint, test]
+    needs: release-please
    if: ${{ needs.release-please.outputs.release_created }}
    permissions:
      contents: write
    steps:
-      - uses: jimeh/update-tags-action@eecd8caae9a536ed536cff9b2b7f0bd187f67c13 # v2.2.0
+      - uses: jimeh/update-tags-action@e58fa0f2f874a12bf0eb90ef8ab4256808c0f373 # v1.0.1
        with:
          tags: |
            v${{ needs.release-please.outputs.major }}
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -1,27 +0,0 @@
-name: "Copilot Setup Steps"
-
-on:
-  workflow_dispatch:
-  push:
-    paths:
-      - .github/workflows/copilot-setup-steps.yml
-  pull_request:
-    paths:
-      - .github/workflows/copilot-setup-steps.yml
-
-jobs:
-  copilot-setup-steps:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-    steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
-      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
-        with:
-          node-version-file: .node-version
-          cache: npm
-      - run: npm ci
-      - uses: ruby/setup-ruby@8aeb6ff8030dd539317f8e1769a044873b56ea71 # v1.268.0
-        with:
-          ruby-version: ruby
-          bundler-cache: true
--- a/.github/workflows/dependabot-rebuild.yml
+++ b/.github/workflows/dependabot-rebuild.yml
@@ -1,42 +0,0 @@
---
-name: Dependabot Rebuild
-
-on:
-  pull_request:
-    types: [opened, synchronize]
-
-permissions:
-  contents: write
-  pull-requests: read
-
-jobs:
-  rebuild-dist:
-    runs-on: ubuntu-latest
-    if: |-
-      ${{ github.actor == 'dependabot[bot]' && github.event.sender.login == 'dependabot[bot]' }}
-    steps:
-      - name: Generate app token
-        id: app-token
-        uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0
-        with:
-          app-id: ${{ secrets.BOT_APP_ID }}
-          private-key: ${{ secrets.BOT_PRIVATE_KEY }}
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
-        with:
-          token: ${{ steps.app-token.outputs.token }}
-      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
-        with:
-          node-version-file: .node-version
-          cache: npm
-      - run: npm ci
-      - name: Rebuild dist
-        run: npm run bundle
-      - name: Commit and push if changed
-        uses: ryancyq/github-signed-commit@e9f3b28c80da7be66d24b8f501a5abe82a6b855f # v1.2.0
-        env:
-          GH_TOKEN: ${{ steps.app-token.outputs.token }}
-        with:
-          files: |
-            dist/
-          commit-message: |-
-            chore: rebuild dist
--- a/.github/workflows/licensed.yml
+++ b/.github/workflows/licensed.yml
@@ -20,13 +20,13 @@ jobs:
  check-licenses:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
        with:
          node-version-file: .node-version
          cache: npm
      - run: npm ci
-      - uses: ruby/setup-ruby@8aeb6ff8030dd539317f8e1769a044873b56ea71 # v1.268.0
+      - uses: ruby/setup-ruby@d5126b9b3579e429dd52e51e68624dda2e05be25 # v1.267.0 # v1.266.0
        with:
          ruby-version: ruby
          bundler-cache: true
--- a/.gitignore
+++ b/.gitignore
@@ -98,7 +98,7 @@ typings/
 Thumbs.db

 # Ignore built ts files
-tests/runner/*
+__tests__/runner/*

 # IDE files
 .idea
--- a/.prettierignore
+++ b/.prettierignore
@@ -3,4 +3,3 @@
 dist/
 node_modules/
 coverage/
-CHANGELOG.md
--- a/.vscode/settings.shared.json
+++ b/.vscode/settings.shared.json
@@ -1,14 +1,5 @@
 {
-  "[javascript]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode"
-  },
  "[typescript]": {
    "editor.defaultFormatter": "esbenp.prettier-vscode"
-  },
-  "[json]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode"
-  },
-  "[jsonc]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode"
  }
 }
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -35,7 +35,7 @@ npm run package       # Build src/index.ts -> dist/index.js via Rollup
 npm run bundle        # Alias: format + package

 # Run a single test file
-NODE_OPTIONS=--experimental-vm-modules NODE_NO_WARNINGS=1 npx jest tests/main.test.ts
+NODE_OPTIONS=--experimental-vm-modules NODE_NO_WARNINGS=1 npx jest __tests__/main.test.ts

 # CI variants (suppress warnings)
 npm run ci-test       # Run tests in CI mode
@@ -65,7 +65,7 @@ npm run package:watch # Auto-rebuild on changes
  - `processTag()`: Creates/updates individual tags based on `when_exists` mode
  - `resolveRefToSha()`: Converts git refs to commit SHAs (private helper)
 - **[action.yml](action.yml)**: GitHub Action metadata (inputs/outputs)
- **[tests/fixtures/](tests/fixtures)**: Mock implementations of @actions/core,
+- **[\_\_fixtures\_\_/](__fixtures__)**: Mock implementations of @actions/core,
  @actions/github, and csv-parse for testing

 ### Tag Input Parsing
@@ -97,12 +97,12 @@ jest.unstable_mockModule('@actions/core', () => core)
 const { run } = await import('../src/main.ts')
 ```

-Mock fixtures live in `tests/fixtures/` (e.g., `core.ts` mocks @actions/core).
+Mock fixtures live in `__fixtures__/` (e.g., `core.ts` mocks @actions/core).

 ### Testing Best Practices

 - Consider edge cases as well as the main success path
- Tests live in `tests/` directory, fixtures in `tests/fixtures/`
+- Tests live in `__tests__/` directory, fixtures in `__fixtures__/`
 - Run tests after any refactoring to ensure coverage requirements are met
 - Use `@actions/core` package for logging (not `console`) for GitHub Actions
  compatibility
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,31 +1,5 @@
 # Changelog

-## [2.2.0](https://github.com/jimeh/update-tags-action/compare/v2.1.1...v2.2.0) (2025-10-29)
-
-
-### Features
-
-* **action:** add skipped tags output and tracking ([#33](https://github.com/jimeh/update-tags-action/issues/33)) ([6723e4d](https://github.com/jimeh/update-tags-action/commit/6723e4d4aceb3ba7314907830d8b1d5186f0a5d9))
-
-## [2.1.1](https://github.com/jimeh/update-tags-action/compare/v2.1.0...v2.1.1) (2025-10-28)
-
-
-### Documentation
-
-* **readme:** fix outdated action inputs/outputs ([#26](https://github.com/jimeh/update-tags-action/issues/26)) ([c2d45bd](https://github.com/jimeh/update-tags-action/commit/c2d45bd3eff96a93679cc5dbac166c5a14400751))
-
-## [2.1.0](https://github.com/jimeh/update-tags-action/compare/v2.0.0...v2.1.0) (2025-10-28)
-
-
-### Features
-
-* **tag:** add support for annotated tags and improved tag handling ([40c0c24](https://github.com/jimeh/update-tags-action/commit/40c0c24c3478fe96765282b3f82b7f72696f0e92)), closes [#7](https://github.com/jimeh/update-tags-action/issues/7)
-
-
-### Bug Fixes
-
-* **when_exists:** fail-fast if tags exist if `when_exists` is `fail` ([40c0c24](https://github.com/jimeh/update-tags-action/commit/40c0c24c3478fe96765282b3f82b7f72696f0e92))
-
 ## [2.0.0](https://github.com/jimeh/update-tags-action/compare/v1.0.1...v2.0.0) (2025-10-27)


@@ -35,25 +9,22 @@

 ## [1.0.1](https://github.com/jimeh/update-tags-action/compare/v1.0.0...v1.0.1) (2023-05-18)

-
 ### Bug Fixes

-* **action:** tweak metadata for GitHub Marketplace
+- **action:** tweak metadata for GitHub Marketplace
  ([#4](https://github.com/jimeh/update-tags-action/issues/4))
  ([b74b3c7](https://github.com/jimeh/update-tags-action/commit/b74b3c77fc20bdfd61e29dbf680a9f84612e5fda))

 ## [1.0.0](https://github.com/jimeh/update-tags-action/compare/v0.0.1...v1.0.0) (2023-05-18)

-
 ### Miscellaneous Chores

-* **release:** bump version to 1.0.0
+- **release:** bump version to 1.0.0
  ([d4f686e](https://github.com/jimeh/update-tags-action/commit/d4f686ef9ff51ff4426907f89983bd286903c23e))

 ## 0.0.1 (2023-05-18)

-
 ### Features

-* initial implementation
+- initial implementation
  ([0185b10](https://github.com/jimeh/update-tags-action/commit/0185b100ff1752ce06ade4b147b6befb8c37e525))
--- a/README.md
+++ b/README.md
@@ -22,24 +22,43 @@ to move its own major and minor tags.

 ### Basic

-<!-- x-release-please-start-minor -->
+<!-- x-release-please-start-major -->

 ```yaml
 - uses: jimeh/update-tags-action@v2
  with:
-    tags: v2,v2.2
+    tags: v1,v1.2
 ```

 ```yaml
 - uses: jimeh/update-tags-action@v2
  with:
    tags: |
-      v2
-      v2.2
+      v1
+      v1.2
 ```

 <!-- x-release-please-end -->

+### Annotated Tags
+
+Create annotated tags with a custom message:
+
+```yaml
+- uses: jimeh/update-tags-action@v2
+  with:
+    tags: v1.0.0
+    annotation: |
+      Release version 1.0.0
+
+      This is a major release with new features and bug fixes.
+```
+
+Annotated tags in Git include metadata such as the tagger's name, email, date,
+and a message. They are stored as full objects in the Git database and are
+recommended for releases. If the `annotation` input is not provided (or is
+empty), lightweight tags will be created instead.
+
 ### With Release Please

 This example uses
@@ -100,38 +119,31 @@ jobs:

 <!-- x-release-please-end -->

-<!-- action-docs-inputs source="action.yml" -->
+<!-- action-docs-inputs -->

 ## Inputs

-| name           | description                                                                                                           | required | default               |
-| -------------- | --------------------------------------------------------------------------------------------------------------------- | -------- | --------------------- |
-| `tags`         | <p>List/CSV of tags to create/update.</p>                                                                             | `true`   | `""`                  |
-| `ref`          | <p>The SHA or ref to tag. Defaults to SHA of current commit.</p>                                                      | `false`  | `${{ github.sha }}`   |
-| `when_exists`  | <p>What to do if the tag already exists. Must be one of 'update', 'skip', or 'fail'.</p>                              | `false`  | `update`              |
-| `annotation`   | <p>Optional annotation message for tags. If provided, creates annotated tags. If empty, creates lightweight tags.</p> | `false`  | `""`                  |
-| `github_token` | <p>The GitHub token to use for authentication.</p>                                                                    | `false`  | `${{ github.token }}` |
+| parameter    | description                                                                                                  | required | default             |
+| ------------ | ------------------------------------------------------------------------------------------------------------ | -------- | ------------------- |
+| tags         | List/CSV of tags to create/update.                                                                           | `true`   |                     |
+| ref          | The SHA or ref to tag. Defaults to SHA of current commit.                                                    | `false`  | ${{ github.sha }}   |
+| when_exists  | What to do if the tag already exists. Must be one of 'update', 'skip', or 'fail'.                            | `false`  | update              |
+| annotation   | Optional annotation message for the tag. If provided, creates an annotated tag instead of a lightweight tag. | `false`  |                     |
+| github_token | The GitHub token to use for authentication.                                                                  | `false`  | ${{ github.token }} |

-<!-- action-docs-inputs source="action.yml" -->
-<!-- action-docs-outputs source="action.yml" -->
+<!-- action-docs-inputs -->
+
+<!-- action-docs-outputs -->

 ## Outputs

-| name      | description                                    |
-| --------- | ---------------------------------------------- |
-| `tags`    | <p>List of tags that were created/updated.</p> |
-| `created` | <p>List of tags that were created.</p>         |
-| `updated` | <p>List of tags that were updated.</p>         |
-| `skipped` | <p>List of tags that were skipped.</p>         |
+| parameter | description                             |
+| --------- | --------------------------------------- |
+| tags      | List of tags that were created/updated. |
+| created   | List of tags that were created.         |
+| updated   | List of tags that were updated.         |

-<!-- action-docs-outputs source="action.yml" -->
-<!-- action-docs-runs source="action.yml" -->
-
-## Runs
-
-This action is a `node24` action.
-
-<!-- action-docs-runs source="action.yml" -->
+<!-- action-docs-outputs -->

 ## License

--- a/tests/fixtures/core.ts
+++ b/tests/fixtures/core.ts
--- a/tests/fixtures/csv-parse.ts
+++ b/tests/fixtures/csv-parse.ts
--- a/tests/fixtures/github.ts
+++ b/tests/fixtures/github.ts
--- a/tests/main.test.ts
+++ b/tests/main.test.ts
@@ -0,0 +1,895 @@
+/**
+ * Unit tests for the action's main functionality, src/main.ts
+ */
+import { jest } from '@jest/globals'
+import * as core from '../__fixtures__/core.js'
+import * as github from '../__fixtures__/github.js'
+import * as csvParse from '../__fixtures__/csv-parse.js'
+
+// Mocks should be declared before the module being tested is imported.
+jest.unstable_mockModule('@actions/core', () => core)
+jest.unstable_mockModule('@actions/github', () => github)
+jest.unstable_mockModule('csv-parse/sync', () => csvParse)
+
+// The module being tested should be imported dynamically. This ensures that
+// the mocks are used in place of any actual dependencies.
+const { run } = await import('../src/main.js')
+
+// Helper functions for cleaner test setup
+const setupInputs = (inputs: Record<string, string>): void => {
+  core.getInput.mockImplementation((name: string) => {
+    return inputs[name] || ''
+  })
+}
+
+const setupCommitResolver = (
+  refToSha: Record<string, string> | string
+): void => {
+  if (typeof refToSha === 'string') {
+    github.mockOctokit.rest.repos.getCommit.mockResolvedValue({
+      data: { sha: refToSha }
+    })
+  } else {
+    github.mockOctokit.rest.repos.getCommit.mockImplementation(
+      async (args: unknown) => {
+        const { ref } = args as { ref: string }
+        const sha = refToSha[ref]
+        if (sha) return { data: { sha } }
+        throw new Error(`Unknown ref: ${ref}`)
+      }
+    )
+  }
+}
+
+const setupTagDoesNotExist = (): void => {
+  github.mockOctokit.rest.git.getRef.mockRejectedValue({
+    status: 404
+  })
+}
+
+const setupTagExists = (tagName: string, sha: string): void => {
+  github.mockOctokit.rest.git.getRef.mockImplementation(
+    async (args: unknown) => {
+      const { ref } = args as { ref: string }
+      if (ref === `tags/${tagName}`) {
+        return {
+          data: { ref: `refs/tags/${tagName}`, object: { sha } }
+        }
+      }
+      throw { status: 404 }
+    }
+  )
+}
+
+const setupTagExistsForAll = (sha: string): void => {
+  github.mockOctokit.rest.git.getRef.mockResolvedValue({
+    data: { ref: 'refs/tags/v1', object: { sha } }
+  })
+}
+
+describe('run', () => {
+  beforeEach(() => {
+    jest.resetAllMocks()
+    // Re-setup mocks after reset
+    github.getOctokit.mockReturnValue(github.mockOctokit)
+    csvParse.resetToRealImplementation()
+  })
+
+  it('creates new tags when they do not exist', async () => {
+    setupInputs({
+      tags: 'v1,v1.0',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagDoesNotExist()
+
+    await run()
+
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(2)
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v1',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v1.0',
+      sha: 'sha-abc123'
+    })
+
+    expect(core.info).toHaveBeenCalledWith(
+      "Tag 'v1' does not exist, creating with SHA sha-abc123."
+    )
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v1', 'v1.0'])
+    expect(core.setOutput).toHaveBeenCalledWith('updated', [])
+    expect(core.setOutput).toHaveBeenCalledWith('tags', ['v1', 'v1.0'])
+  })
+
+  it('updates existing tags when SHA differs', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'def456',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-def456')
+    setupTagExistsForAll('sha-old123')
+
+    await run()
+
+    expect(github.mockOctokit.rest.git.updateRef).toHaveBeenCalledTimes(1)
+    expect(github.mockOctokit.rest.git.updateRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'tags/v1',
+      sha: 'sha-def456',
+      force: true
+    })
+
+    expect(core.info).toHaveBeenCalledWith(
+      "Tag 'v1' exists, updating to SHA sha-def456 (was sha-old123)."
+    )
+    expect(core.setOutput).toHaveBeenCalledWith('created', [])
+    expect(core.setOutput).toHaveBeenCalledWith('updated', ['v1'])
+    expect(core.setOutput).toHaveBeenCalledWith('tags', ['v1'])
+  })
+
+  it('skips updating when tag exists with same SHA', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagExistsForAll('sha-abc123')
+
+    await run()
+
+    expect(github.mockOctokit.rest.git.updateRef).not.toHaveBeenCalled()
+    expect(github.mockOctokit.rest.git.createRef).not.toHaveBeenCalled()
+    expect(core.info).toHaveBeenCalledWith(
+      "Tag 'v1' already exists with desired SHA sha-abc123."
+    )
+    expect(core.setOutput).toHaveBeenCalledWith('created', [])
+    expect(core.setOutput).toHaveBeenCalledWith('updated', [])
+    expect(core.setOutput).toHaveBeenCalledWith('tags', [])
+  })
+
+  it('skips tags when when_exists is skip', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'skip'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagExistsForAll('sha-old123')
+
+    await run()
+
+    expect(github.mockOctokit.rest.git.updateRef).not.toHaveBeenCalled()
+    expect(github.mockOctokit.rest.git.createRef).not.toHaveBeenCalled()
+    expect(core.info).toHaveBeenCalledWith("Tag 'v1' exists, skipping.")
+    expect(core.setOutput).toHaveBeenCalledWith('created', [])
+    expect(core.setOutput).toHaveBeenCalledWith('updated', [])
+    expect(core.setOutput).toHaveBeenCalledWith('tags', [])
+  })
+
+  it('handles per-tag ref overrides', async () => {
+    setupInputs({
+      tags: 'v1:main,v2:develop',
+      ref: '',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver({
+      main: 'sha-main',
+      develop: 'sha-develop'
+    })
+    setupTagDoesNotExist()
+
+    await run()
+
+    expect(github.mockOctokit.rest.repos.getCommit).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'main'
+    })
+    expect(github.mockOctokit.rest.repos.getCommit).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'develop'
+    })
+
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v1',
+      sha: 'sha-main'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v2',
+      sha: 'sha-develop'
+    })
+
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v1', 'v2'])
+  })
+
+  it('handles various input formats (newlines and whitespace)', async () => {
+    setupInputs({
+      tags: ' v1 \n v1.0 \n v1.0.1 ',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagDoesNotExist()
+
+    await run()
+
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(3)
+    expect(core.setOutput).toHaveBeenCalledWith('created', [
+      'v1',
+      'v1.0',
+      'v1.0.1'
+    ])
+  })
+
+  it('creates and updates tags in single run', async () => {
+    setupInputs({
+      tags: 'v1,v2',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagExists('v1', 'sha-old')
+
+    await run()
+
+    expect(github.mockOctokit.rest.git.updateRef).toHaveBeenCalledTimes(1)
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(1)
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v2'])
+    expect(core.setOutput).toHaveBeenCalledWith('updated', ['v1'])
+    expect(core.setOutput).toHaveBeenCalledWith('tags', ['v2', 'v1'])
+  })
+
+  it('fails when ref is missing', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: '',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      expect.stringContaining("Missing ref: provide 'ref' input")
+    )
+  })
+
+  it('fails when when_exists is fail and tag exists', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'fail'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagExistsForAll('sha-old123')
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith("Tag 'v1' already exists.")
+    expect(github.mockOctokit.rest.git.updateRef).not.toHaveBeenCalled()
+    expect(github.mockOctokit.rest.git.createRef).not.toHaveBeenCalled()
+  })
+
+  it('fails when when_exists has invalid value', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'invalid'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagExistsForAll('sha-old123')
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      expect.stringContaining("Invalid value for 'when_exists'")
+    )
+  })
+
+  it('handles non-404 errors when checking if tag exists', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    github.mockOctokit.rest.git.getRef.mockRejectedValue({
+      status: 500,
+      message: 'Internal Server Error'
+    })
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      expect.stringContaining('Action failed with error')
+    )
+  })
+
+  it('handles errors when resolving ref to SHA', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'invalid-ref',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    github.mockOctokit.rest.repos.getCommit.mockRejectedValue(
+      new Error('Reference not found')
+    )
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      expect.stringContaining("Failed to resolve ref 'invalid-ref'")
+    )
+  })
+
+  it('handles non-Error thrown when parsing tags', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    csvParse.parse.mockImplementation(() => {
+      throw 'Parse error: not an Error instance'
+    })
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      'Parse error: not an Error instance'
+    )
+  })
+
+  it('defaults to update mode when when_exists is empty', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: ''
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagExistsForAll('sha-old123')
+
+    await run()
+
+    expect(github.mockOctokit.rest.git.updateRef).toHaveBeenCalledTimes(1)
+    expect(core.setOutput).toHaveBeenCalledWith('updated', ['v1'])
+  })
+
+  it('handles duplicate tags by using last occurrence', async () => {
+    setupInputs({
+      tags: 'v1,v2,v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagDoesNotExist()
+
+    await run()
+
+    // Should only create 2 tags (v1 and v2), not 3
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(2)
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v1', 'v2'])
+  })
+
+  it('optimizes by resolving unique refs only once', async () => {
+    setupInputs({
+      tags: 'v1:main,v2:main,v3:develop',
+      ref: '',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver({
+      main: 'sha-main',
+      develop: 'sha-develop'
+    })
+    setupTagDoesNotExist()
+
+    await run()
+
+    // Should only call getCommit 2 times (main and develop), not 3
+    expect(github.mockOctokit.rest.repos.getCommit).toHaveBeenCalledTimes(2)
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(3)
+  })
+
+  it('handles tag with colon but empty ref part', async () => {
+    setupInputs({
+      tags: 'v1:,v2',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagDoesNotExist()
+
+    await run()
+
+    // Both should use default ref
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(2)
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v1', 'v2'])
+  })
+
+  it('fails when tag specification has multiple colons', async () => {
+    setupInputs({
+      tags: 'stable:refs/heads/main:latest',
+      ref: '',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      expect.stringContaining('Invalid tag specification')
+    )
+    expect(core.setFailed).toHaveBeenCalledWith(
+      expect.stringContaining('too many colons')
+    )
+  })
+
+  it('handles mixed scenario with multiple tags', async () => {
+    setupInputs({
+      tags: 'v1,v2,v3',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'skip'
+    })
+    setupCommitResolver('sha-abc123')
+
+    // v1 exists, v2 and v3 don't
+    github.mockOctokit.rest.git.getRef.mockImplementation(
+      async (args: unknown) => {
+        const { ref } = args as { ref: string }
+        if (ref === 'tags/v1') {
+          return {
+            data: { ref: 'refs/tags/v1', object: { sha: 'sha-old' } }
+          }
+        }
+        throw { status: 404 }
+      }
+    )
+
+    await run()
+
+    // Should skip v1, create v2 and v3
+    expect(core.info).toHaveBeenCalledWith("Tag 'v1' exists, skipping.")
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(2)
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v2', 'v3'])
+    expect(core.setOutput).toHaveBeenCalledWith('updated', [])
+  })
+
+  it('fails when tag name is empty (e.g., ":main")', async () => {
+    setupInputs({
+      tags: ':main',
+      ref: '',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-main')
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith("Invalid tag: ':main'")
+    expect(github.mockOctokit.rest.git.createRef).not.toHaveBeenCalled()
+    expect(github.mockOctokit.rest.git.updateRef).not.toHaveBeenCalled()
+  })
+
+  it('fails when one of multiple tags has empty name with ref', async () => {
+    setupInputs({
+      tags: 'v1,:develop,v2',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver({
+      abc123: 'sha-abc123',
+      develop: 'sha-develop'
+    })
+    setupTagDoesNotExist()
+
+    await run()
+
+    // Should fail on invalid tag during parsing, before processing any tags
+    expect(core.setFailed).toHaveBeenCalledWith("Invalid tag: ':develop'")
+    expect(github.mockOctokit.rest.git.createRef).not.toHaveBeenCalled()
+  })
+
+  it('fails when duplicate tag has different refs (explicit)', async () => {
+    setupInputs({
+      tags: 'v1:main,v1:develop',
+      ref: '',
+      github_token: 'test-token'
+    })
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      "Duplicate tag 'v1' with different refs: 'main' and 'develop'"
+    )
+    expect(github.mockOctokit.rest.git.createRef).not.toHaveBeenCalled()
+  })
+
+  it('fails when duplicate tag has different refs (default vs explicit)', async () => {
+    setupInputs({
+      tags: 'v1,v1:develop',
+      ref: 'main',
+      github_token: 'test-token'
+    })
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      "Duplicate tag 'v1' with different refs: 'main' and 'develop'"
+    )
+    expect(github.mockOctokit.rest.git.createRef).not.toHaveBeenCalled()
+  })
+
+  it('skips empty tags from double commas (e.g., "v1,,v2")', async () => {
+    setupInputs({
+      tags: 'v1,,v2',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagDoesNotExist()
+
+    await run()
+
+    // Should skip empty tag and process v1 and v2
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v1',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v2',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(2)
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v1', 'v2'])
+  })
+
+  it('skips empty lines in multi-line input (e.g., "v1\\n\\nv2")', async () => {
+    setupInputs({
+      tags: 'v1\n\nv2',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagDoesNotExist()
+
+    await run()
+
+    // Should skip empty line and process v1 and v2
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v1',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v2',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(2)
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v1', 'v2'])
+  })
+
+  it('skips empty tags from mix of empty CSV fields and empty lines', async () => {
+    setupInputs({
+      tags: 'v1,,v2\n\nv3,v4',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagDoesNotExist()
+
+    await run()
+
+    // Should skip all empty tags and process v1, v2, v3, v4
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v1',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v2',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v3',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v4',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(4)
+    expect(core.setOutput).toHaveBeenCalledWith('created', [
+      'v1',
+      'v2',
+      'v3',
+      'v4'
+    ])
+  })
+
+  describe('annotated tags', () => {
+    it('creates annotated tags when annotation is provided', async () => {
+      setupInputs({
+        tags: 'v1.0.0',
+        ref: 'abc123',
+        github_token: 'test-token',
+        when_exists: 'update',
+        annotation: 'Release version 1.0.0'
+      })
+      setupCommitResolver('sha-abc123')
+      setupTagDoesNotExist()
+
+      github.mockOctokit.rest.git.createTag.mockResolvedValue({
+        data: { sha: 'tag-object-sha' }
+      })
+
+      await run()
+
+      // Should create tag object first
+      expect(github.mockOctokit.rest.git.createTag).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        tag: 'v1.0.0',
+        message: 'Release version 1.0.0',
+        object: 'sha-abc123',
+        type: 'commit'
+      })
+
+      // Then create reference pointing to tag object
+      expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        ref: 'refs/tags/v1.0.0',
+        sha: 'tag-object-sha'
+      })
+
+      expect(core.setOutput).toHaveBeenCalledWith('created', ['v1.0.0'])
+    })
+
+    it('creates lightweight tags when annotation is empty', async () => {
+      setupInputs({
+        tags: 'v1.0.0',
+        ref: 'abc123',
+        github_token: 'test-token',
+        when_exists: 'update',
+        annotation: ''
+      })
+      setupCommitResolver('sha-abc123')
+      setupTagDoesNotExist()
+
+      await run()
+
+      // Should NOT create tag object
+      expect(github.mockOctokit.rest.git.createTag).not.toHaveBeenCalled()
+
+      // Should create reference pointing directly to commit
+      expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        ref: 'refs/tags/v1.0.0',
+        sha: 'sha-abc123'
+      })
+
+      expect(core.setOutput).toHaveBeenCalledWith('created', ['v1.0.0'])
+    })
+
+    it('creates lightweight tags when annotation is only whitespace', async () => {
+      setupInputs({
+        tags: 'v1.0.0',
+        ref: 'abc123',
+        github_token: 'test-token',
+        when_exists: 'update',
+        annotation: '   '
+      })
+      setupCommitResolver('sha-abc123')
+      setupTagDoesNotExist()
+
+      await run()
+
+      // Should NOT create tag object for whitespace-only annotation
+      expect(github.mockOctokit.rest.git.createTag).not.toHaveBeenCalled()
+
+      // Should create reference pointing directly to commit
+      expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        ref: 'refs/tags/v1.0.0',
+        sha: 'sha-abc123'
+      })
+
+      expect(core.setOutput).toHaveBeenCalledWith('created', ['v1.0.0'])
+    })
+
+    it('updates tags with annotation', async () => {
+      setupInputs({
+        tags: 'v1',
+        ref: 'def456',
+        github_token: 'test-token',
+        when_exists: 'update',
+        annotation: 'Updated version'
+      })
+      setupCommitResolver('sha-def456')
+      setupTagExistsForAll('sha-old123')
+
+      github.mockOctokit.rest.git.createTag.mockResolvedValue({
+        data: { sha: 'new-tag-object-sha' }
+      })
+
+      await run()
+
+      // Should create new tag object
+      expect(github.mockOctokit.rest.git.createTag).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        tag: 'v1',
+        message: 'Updated version',
+        object: 'sha-def456',
+        type: 'commit'
+      })
+
+      // Should update reference to new tag object
+      expect(github.mockOctokit.rest.git.updateRef).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        ref: 'tags/v1',
+        sha: 'new-tag-object-sha',
+        force: true
+      })
+
+      expect(core.setOutput).toHaveBeenCalledWith('updated', ['v1'])
+    })
+
+    it('handles existing annotated tag and compares commit SHA', async () => {
+      setupInputs({
+        tags: 'v1',
+        ref: 'abc123',
+        github_token: 'test-token',
+        when_exists: 'update',
+        annotation: 'Test annotation'
+      })
+      setupCommitResolver('sha-abc123')
+
+      // Mock existing annotated tag
+      github.mockOctokit.rest.git.getRef.mockResolvedValue({
+        data: {
+          ref: 'refs/tags/v1',
+          object: { sha: 'existing-tag-object-sha', type: 'tag' }
+        }
+      })
+
+      // Mock getTag to return commit SHA
+      github.mockOctokit.rest.git.getTag.mockResolvedValue({
+        data: {
+          sha: 'existing-tag-object-sha',
+          object: { sha: 'sha-abc123', type: 'commit' }
+        }
+      })
+
+      await run()
+
+      // Should fetch tag object to get commit SHA
+      expect(github.mockOctokit.rest.git.getTag).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        tag_sha: 'existing-tag-object-sha'
+      })
+
+      // Should skip update since commit SHA matches
+      expect(github.mockOctokit.rest.git.updateRef).not.toHaveBeenCalled()
+      expect(github.mockOctokit.rest.git.createTag).not.toHaveBeenCalled()
+      expect(core.info).toHaveBeenCalledWith(
+        "Tag 'v1' already exists with desired SHA sha-abc123."
+      )
+      expect(core.setOutput).toHaveBeenCalledWith('created', [])
+      expect(core.setOutput).toHaveBeenCalledWith('updated', [])
+    })
+
+    it('updates existing annotated tag when commit SHA differs', async () => {
+      setupInputs({
+        tags: 'v1',
+        ref: 'def456',
+        github_token: 'test-token',
+        when_exists: 'update',
+        annotation: 'Updated annotation'
+      })
+      setupCommitResolver('sha-def456')
+
+      // Mock existing annotated tag
+      github.mockOctokit.rest.git.getRef.mockResolvedValue({
+        data: {
+          ref: 'refs/tags/v1',
+          object: { sha: 'existing-tag-object-sha', type: 'tag' }
+        }
+      })
+
+      // Mock getTag to return different commit SHA
+      github.mockOctokit.rest.git.getTag.mockResolvedValue({
+        data: {
+          sha: 'existing-tag-object-sha',
+          object: { sha: 'sha-old123', type: 'commit' }
+        }
+      })
+
+      github.mockOctokit.rest.git.createTag.mockResolvedValue({
+        data: { sha: 'new-tag-object-sha' }
+      })
+
+      await run()
+
+      // Should fetch tag object to get commit SHA
+      expect(github.mockOctokit.rest.git.getTag).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        tag_sha: 'existing-tag-object-sha'
+      })
+
+      // Should create new tag object and update reference
+      expect(github.mockOctokit.rest.git.createTag).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        tag: 'v1',
+        message: 'Updated annotation',
+        object: 'sha-def456',
+        type: 'commit'
+      })
+
+      expect(github.mockOctokit.rest.git.updateRef).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        ref: 'tags/v1',
+        sha: 'new-tag-object-sha',
+        force: true
+      })
+
+      expect(core.setOutput).toHaveBeenCalledWith('updated', ['v1'])
+    })
+  })
+})
--- a/action.yml
+++ b/action.yml
@@ -22,8 +22,8 @@ inputs:
    default: "update"
  annotation:
    description: >-
-      Optional annotation message for tags. If provided, creates annotated tags.
-      If empty, creates lightweight tags.
+      Optional annotation message for the tag. If provided, creates an annotated
+      tag instead of a lightweight tag.
    required: false
    default: ""
  github_token:
@@ -38,8 +38,6 @@ outputs:
    description: "List of tags that were created."
  updated:
    description: "List of tags that were updated."
-  skipped:
-    description: "List of tags that were skipped."

 runs:
  using: node24
--- a/dist/index.js
+++ b/dist/index.js
--- a/dist/index.js.map
+++ b/dist/index.js.map
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,40 +1,41 @@
 {
  "name": "update-tags-action",
-  "version": "2.2.0",
+  "version": "1.0.1",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "update-tags-action",
-      "version": "2.2.0",
+      "version": "1.0.1",
      "dependencies": {
        "@actions/core": "^1.11.1",
        "@actions/github": "^6.0.1",
        "csv-parse": "^6.1.0"
      },
      "devDependencies": {
-        "@eslint/compat": "^2.0.0",
+        "@eslint/compat": "^1.4.0",
        "@jest/globals": "^30.2.0",
-        "@rollup/plugin-commonjs": "^29.0.0",
+        "@rollup/plugin-commonjs": "^28.0.9",
        "@rollup/plugin-node-resolve": "^16.0.3",
+        "@rollup/plugin-terser": "^0.4.4",
        "@rollup/plugin-typescript": "^12.3.0",
        "@types/jest": "^30.0.0",
-        "@types/node": "^24.10.1",
-        "@typescript-eslint/eslint-plugin": "^8.48.0",
+        "@types/node": "^24.9.1",
+        "@typescript-eslint/eslint-plugin": "^8.46.2",
        "@typescript-eslint/parser": "^8.46.2",
        "action-docs": "^2.5.1",
-        "eslint": "^9.39.1",
+        "eslint": "^9.38.0",
        "eslint-config-prettier": "^10.1.8",
        "eslint-import-resolver-typescript": "^4.4.4",
        "eslint-plugin-import": "^2.32.0",
-        "eslint-plugin-jest": "^29.2.1",
+        "eslint-plugin-jest": "^29.0.1",
        "eslint-plugin-prettier": "^5.5.4",
        "jest": "^30.2.0",
        "make-coverage-badge": "^1.2.0",
        "npm-run-all": "^4.1.5",
        "prettier": "^3.6.2",
        "prettier-eslint": "^16.4.2",
-        "rollup": "^4.53.3",
+        "rollup": "^4.52.5",
        "ts-jest": "^29.4.5",
        "ts-jest-resolver": "^2.0.1",
        "typescript": "^5.9.3"
@@ -673,16 +674,16 @@
      }
    },
    "node_modules/@eslint/compat": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/@eslint/compat/-/compat-2.0.0.tgz",
-      "integrity": "sha512-T9AfE1G1uv4wwq94ozgTGio5EUQBqAVe1X9qsQtSNVEYW6j3hvtZVm8Smr4qL1qDPFg+lOB2cL5RxTRMzq4CTA==",
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/@eslint/compat/-/compat-1.4.0.tgz",
+      "integrity": "sha512-DEzm5dKeDBPm3r08Ixli/0cmxr8LkRdwxMRUIJBlSCpAwSrvFEJpVBzV+66JhDxiaqKxnRzCXhtiMiczF7Hglg==",
      "dev": true,
      "license": "Apache-2.0",
      "dependencies": {
-        "@eslint/core": "^1.0.0"
+        "@eslint/core": "^0.16.0"
      },
      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
      },
      "peerDependencies": {
        "eslint": "^8.40 || 9"
@@ -693,19 +694,6 @@
        }
      }
    },
-    "node_modules/@eslint/compat/node_modules/@eslint/core": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/@eslint/core/-/core-1.0.0.tgz",
-      "integrity": "sha512-PRfWP+8FOldvbApr6xL7mNCw4cJcSTq4GA7tYbgq15mRb0kWKO/wEB2jr+uwjFH3sZvEZneZyCUGTxsv4Sahyw==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "dependencies": {
-        "@types/json-schema": "^7.0.15"
-      },
-      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
-      }
-    },
    "node_modules/@eslint/config-array": {
      "version": "0.21.1",
      "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.21.1.tgz",
@@ -746,22 +734,22 @@
      }
    },
    "node_modules/@eslint/config-helpers": {
-      "version": "0.4.2",
-      "resolved": "https://registry.npmjs.org/@eslint/config-helpers/-/config-helpers-0.4.2.tgz",
-      "integrity": "sha512-gBrxN88gOIf3R7ja5K9slwNayVcZgK6SOUORm2uBzTeIEfeVaIhOpCtTox3P6R7o2jLFwLFTLnC7kU/RGcYEgw==",
+      "version": "0.4.1",
+      "resolved": "https://registry.npmjs.org/@eslint/config-helpers/-/config-helpers-0.4.1.tgz",
+      "integrity": "sha512-csZAzkNhsgwb0I/UAV6/RGFTbiakPCf0ZrGmrIxQpYvGZ00PhTkSnyKNolphgIvmnJeGw6rcGVEXfTzUnFuEvw==",
      "dev": true,
      "license": "Apache-2.0",
      "dependencies": {
-        "@eslint/core": "^0.17.0"
+        "@eslint/core": "^0.16.0"
      },
      "engines": {
        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
      }
    },
    "node_modules/@eslint/core": {
-      "version": "0.17.0",
-      "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.17.0.tgz",
-      "integrity": "sha512-yL/sLrpmtDaFEiUj1osRP4TI2MDz1AddJL+jZ7KSqvBuliN4xqYY54IfdN8qD8Toa6g1iloph1fxQNkjOxrrpQ==",
+      "version": "0.16.0",
+      "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.16.0.tgz",
+      "integrity": "sha512-nmC8/totwobIiFcGkDza3GIKfAw1+hLiYVrh3I1nIomQ8PEr5cxg34jnkmGawul/ep52wGRAcyeDCNtWKSOj4Q==",
      "dev": true,
      "license": "Apache-2.0",
      "dependencies": {
@@ -830,9 +818,9 @@
      }
    },
    "node_modules/@eslint/js": {
-      "version": "9.39.1",
-      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.39.1.tgz",
-      "integrity": "sha512-S26Stp4zCy88tH94QbBv3XCuzRQiZ9yXofEILmglYTh/Ug/a9/umqvgFtYBAo3Lp0nsI/5/qH1CCrbdK3AP1Tw==",
+      "version": "9.38.0",
+      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.38.0.tgz",
+      "integrity": "sha512-UZ1VpFvXf9J06YG9xQBdnzU+kthors6KjhMAl6f4gH4usHyh31rUf2DLGInT8RFYIReYXNSydgPY0V2LuWgl7A==",
      "dev": true,
      "license": "MIT",
      "engines": {
@@ -853,13 +841,13 @@
      }
    },
    "node_modules/@eslint/plugin-kit": {
-      "version": "0.4.1",
-      "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.4.1.tgz",
-      "integrity": "sha512-43/qtrDUokr7LJqoF2c3+RInu/t4zfrpYdoSDfYyhg52rwLV6TnOvdG4fXm7IkSB3wErkcmJS9iEhjVtOSEjjA==",
+      "version": "0.4.0",
+      "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.4.0.tgz",
+      "integrity": "sha512-sB5uyeq+dwCWyPi31B2gQlVlo+j5brPlWx4yZBrEaRo/nhdDE8Xke1gsGgtiBdaBTxuTkceLVuVt/pclrasb0A==",
      "dev": true,
      "license": "Apache-2.0",
      "dependencies": {
-        "@eslint/core": "^0.17.0",
+        "@eslint/core": "^0.16.0",
        "levn": "^0.4.1"
      },
      "engines": {
@@ -1035,9 +1023,9 @@
      }
    },
    "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": {
-      "version": "3.14.2",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
-      "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==",
+      "version": "3.14.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz",
+      "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -1484,6 +1472,17 @@
        "node": ">=6.0.0"
      }
    },
+    "node_modules/@jridgewell/source-map": {
+      "version": "0.3.11",
+      "resolved": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.11.tgz",
+      "integrity": "sha512-ZMp1V8ZFcPG5dIWnQLr3NSI1MiCU7UETdS/A0G8V/XWHvJv3ZsFqutJn1Y5RPmAPX6F3BiE397OqveU/9NCuIA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/gen-mapping": "^0.3.5",
+        "@jridgewell/trace-mapping": "^0.3.25"
+      }
+    },
    "node_modules/@jridgewell/sourcemap-codec": {
      "version": "1.5.5",
      "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
@@ -1736,9 +1735,9 @@
      }
    },
    "node_modules/@rollup/plugin-commonjs": {
-      "version": "29.0.0",
-      "resolved": "https://registry.npmjs.org/@rollup/plugin-commonjs/-/plugin-commonjs-29.0.0.tgz",
-      "integrity": "sha512-U2YHaxR2cU/yAiwKJtJRhnyLk7cifnQw0zUpISsocBDoHDJn+HTV74ABqnwr5bEgWUwFZC9oFL6wLe21lHu5eQ==",
+      "version": "28.0.9",
+      "resolved": "https://registry.npmjs.org/@rollup/plugin-commonjs/-/plugin-commonjs-28.0.9.tgz",
+      "integrity": "sha512-PIR4/OHZ79romx0BVVll/PkwWpJ7e5lsqFa3gFfcrFPWwLXLV39JVUzQV9RKjWerE7B845Hqjj9VYlQeieZ2dA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -1787,6 +1786,29 @@
        }
      }
    },
+    "node_modules/@rollup/plugin-terser": {
+      "version": "0.4.4",
+      "resolved": "https://registry.npmjs.org/@rollup/plugin-terser/-/plugin-terser-0.4.4.tgz",
+      "integrity": "sha512-XHeJC5Bgvs8LfukDwWZp7yeqin6ns8RTl2B9avbejt6tZqsqvVoWI7ZTQrcNsfKEDWBTnTxM8nMDkO2IFFbd0A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "serialize-javascript": "^6.0.1",
+        "smob": "^1.0.0",
+        "terser": "^5.17.4"
+      },
+      "engines": {
+        "node": ">=14.0.0"
+      },
+      "peerDependencies": {
+        "rollup": "^2.0.0||^3.0.0||^4.0.0"
+      },
+      "peerDependenciesMeta": {
+        "rollup": {
+          "optional": true
+        }
+      }
+    },
    "node_modules/@rollup/plugin-typescript": {
      "version": "12.3.0",
      "resolved": "https://registry.npmjs.org/@rollup/plugin-typescript/-/plugin-typescript-12.3.0.tgz",
@@ -1838,9 +1860,9 @@
      }
    },
    "node_modules/@rollup/rollup-android-arm-eabi": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.53.3.tgz",
-      "integrity": "sha512-mRSi+4cBjrRLoaal2PnqH82Wqyb+d3HsPUN/W+WslCXsZsyHa9ZeQQX/pQsZaVIWDkPcpV6jJ+3KLbTbgnwv8w==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.52.5.tgz",
+      "integrity": "sha512-8c1vW4ocv3UOMp9K+gToY5zL2XiiVw3k7f1ksf4yO1FlDFQ1C2u72iACFnSOceJFsWskc2WZNqeRhFRPzv+wtQ==",
      "cpu": [
        "arm"
      ],
@@ -1852,9 +1874,9 @@
      ]
    },
    "node_modules/@rollup/rollup-android-arm64": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.53.3.tgz",
-      "integrity": "sha512-CbDGaMpdE9sh7sCmTrTUyllhrg65t6SwhjlMJsLr+J8YjFuPmCEjbBSx4Z/e4SmDyH3aB5hGaJUP2ltV/vcs4w==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.52.5.tgz",
+      "integrity": "sha512-mQGfsIEFcu21mvqkEKKu2dYmtuSZOBMmAl5CFlPGLY94Vlcm+zWApK7F/eocsNzp8tKmbeBP8yXyAbx0XHsFNA==",
      "cpu": [
        "arm64"
      ],
@@ -1866,9 +1888,9 @@
      ]
    },
    "node_modules/@rollup/rollup-darwin-arm64": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.53.3.tgz",
-      "integrity": "sha512-Nr7SlQeqIBpOV6BHHGZgYBuSdanCXuw09hon14MGOLGmXAFYjx1wNvquVPmpZnl0tLjg25dEdr4IQ6GgyToCUA==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.52.5.tgz",
+      "integrity": "sha512-takF3CR71mCAGA+v794QUZ0b6ZSrgJkArC+gUiG6LB6TQty9T0Mqh3m2ImRBOxS2IeYBo4lKWIieSvnEk2OQWA==",
      "cpu": [
        "arm64"
      ],
@@ -1880,9 +1902,9 @@
      ]
    },
    "node_modules/@rollup/rollup-darwin-x64": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.53.3.tgz",
-      "integrity": "sha512-DZ8N4CSNfl965CmPktJ8oBnfYr3F8dTTNBQkRlffnUarJ2ohudQD17sZBa097J8xhQ26AwhHJ5mvUyQW8ddTsQ==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.52.5.tgz",
+      "integrity": "sha512-W901Pla8Ya95WpxDn//VF9K9u2JbocwV/v75TE0YIHNTbhqUTv9w4VuQ9MaWlNOkkEfFwkdNhXgcLqPSmHy0fA==",
      "cpu": [
        "x64"
      ],
@@ -1894,9 +1916,9 @@
      ]
    },
    "node_modules/@rollup/rollup-freebsd-arm64": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.53.3.tgz",
-      "integrity": "sha512-yMTrCrK92aGyi7GuDNtGn2sNW+Gdb4vErx4t3Gv/Tr+1zRb8ax4z8GWVRfr3Jw8zJWvpGHNpss3vVlbF58DZ4w==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.52.5.tgz",
+      "integrity": "sha512-QofO7i7JycsYOWxe0GFqhLmF6l1TqBswJMvICnRUjqCx8b47MTo46W8AoeQwiokAx3zVryVnxtBMcGcnX12LvA==",
      "cpu": [
        "arm64"
      ],
@@ -1908,9 +1930,9 @@
      ]
    },
    "node_modules/@rollup/rollup-freebsd-x64": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.53.3.tgz",
-      "integrity": "sha512-lMfF8X7QhdQzseM6XaX0vbno2m3hlyZFhwcndRMw8fbAGUGL3WFMBdK0hbUBIUYcEcMhVLr1SIamDeuLBnXS+Q==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.52.5.tgz",
+      "integrity": "sha512-jr21b/99ew8ujZubPo9skbrItHEIE50WdV86cdSoRkKtmWa+DDr6fu2c/xyRT0F/WazZpam6kk7IHBerSL7LDQ==",
      "cpu": [
        "x64"
      ],
@@ -1922,9 +1944,9 @@
      ]
    },
    "node_modules/@rollup/rollup-linux-arm-gnueabihf": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.53.3.tgz",
-      "integrity": "sha512-k9oD15soC/Ln6d2Wv/JOFPzZXIAIFLp6B+i14KhxAfnq76ajt0EhYc5YPeX6W1xJkAdItcVT+JhKl1QZh44/qw==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.52.5.tgz",
+      "integrity": "sha512-PsNAbcyv9CcecAUagQefwX8fQn9LQ4nZkpDboBOttmyffnInRy8R8dSg6hxxl2Re5QhHBf6FYIDhIj5v982ATQ==",
      "cpu": [
        "arm"
      ],
@@ -1936,9 +1958,9 @@
      ]
    },
    "node_modules/@rollup/rollup-linux-arm-musleabihf": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.53.3.tgz",
-      "integrity": "sha512-vTNlKq+N6CK/8UktsrFuc+/7NlEYVxgaEgRXVUVK258Z5ymho29skzW1sutgYjqNnquGwVUObAaxae8rZ6YMhg==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.52.5.tgz",
+      "integrity": "sha512-Fw4tysRutyQc/wwkmcyoqFtJhh0u31K+Q6jYjeicsGJJ7bbEq8LwPWV/w0cnzOqR2m694/Af6hpFayLJZkG2VQ==",
      "cpu": [
        "arm"
      ],
@@ -1950,9 +1972,9 @@
      ]
    },
    "node_modules/@rollup/rollup-linux-arm64-gnu": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.53.3.tgz",
-      "integrity": "sha512-RGrFLWgMhSxRs/EWJMIFM1O5Mzuz3Xy3/mnxJp/5cVhZ2XoCAxJnmNsEyeMJtpK+wu0FJFWz+QF4mjCA7AUQ3w==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.52.5.tgz",
+      "integrity": "sha512-a+3wVnAYdQClOTlyapKmyI6BLPAFYs0JM8HRpgYZQO02rMR09ZcV9LbQB+NL6sljzG38869YqThrRnfPMCDtZg==",
      "cpu": [
        "arm64"
      ],
@@ -1964,9 +1986,9 @@
      ]
    },
    "node_modules/@rollup/rollup-linux-arm64-musl": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.53.3.tgz",
-      "integrity": "sha512-kASyvfBEWYPEwe0Qv4nfu6pNkITLTb32p4yTgzFCocHnJLAHs+9LjUu9ONIhvfT/5lv4YS5muBHyuV84epBo/A==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.52.5.tgz",
+      "integrity": "sha512-AvttBOMwO9Pcuuf7m9PkC1PUIKsfaAJ4AYhy944qeTJgQOqJYJ9oVl2nYgY7Rk0mkbsuOpCAYSs6wLYB2Xiw0Q==",
      "cpu": [
        "arm64"
      ],
@@ -1978,9 +2000,9 @@
      ]
    },
    "node_modules/@rollup/rollup-linux-loong64-gnu": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.53.3.tgz",
-      "integrity": "sha512-JiuKcp2teLJwQ7vkJ95EwESWkNRFJD7TQgYmCnrPtlu50b4XvT5MOmurWNrCj3IFdyjBQ5p9vnrX4JM6I8OE7g==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.52.5.tgz",
+      "integrity": "sha512-DkDk8pmXQV2wVrF6oq5tONK6UHLz/XcEVow4JTTerdeV1uqPeHxwcg7aFsfnSm9L+OO8WJsWotKM2JJPMWrQtA==",
      "cpu": [
        "loong64"
      ],
@@ -1992,9 +2014,9 @@
      ]
    },
    "node_modules/@rollup/rollup-linux-ppc64-gnu": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.53.3.tgz",
-      "integrity": "sha512-EoGSa8nd6d3T7zLuqdojxC20oBfNT8nexBbB/rkxgKj5T5vhpAQKKnD+h3UkoMuTyXkP5jTjK/ccNRmQrPNDuw==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.52.5.tgz",
+      "integrity": "sha512-W/b9ZN/U9+hPQVvlGwjzi+Wy4xdoH2I8EjaCkMvzpI7wJUs8sWJ03Rq96jRnHkSrcHTpQe8h5Tg3ZzUPGauvAw==",
      "cpu": [
        "ppc64"
      ],
@@ -2006,9 +2028,9 @@
      ]
    },
    "node_modules/@rollup/rollup-linux-riscv64-gnu": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.53.3.tgz",
-      "integrity": "sha512-4s+Wped2IHXHPnAEbIB0YWBv7SDohqxobiiPA1FIWZpX+w9o2i4LezzH/NkFUl8LRci/8udci6cLq+jJQlh+0g==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.52.5.tgz",
+      "integrity": "sha512-sjQLr9BW7R/ZiXnQiWPkErNfLMkkWIoCz7YMn27HldKsADEKa5WYdobaa1hmN6slu9oWQbB6/jFpJ+P2IkVrmw==",
      "cpu": [
        "riscv64"
      ],
@@ -2020,9 +2042,9 @@
      ]
    },
    "node_modules/@rollup/rollup-linux-riscv64-musl": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.53.3.tgz",
-      "integrity": "sha512-68k2g7+0vs2u9CxDt5ktXTngsxOQkSEV/xBbwlqYcUrAVh6P9EgMZvFsnHy4SEiUl46Xf0IObWVbMvPrr2gw8A==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.52.5.tgz",
+      "integrity": "sha512-hq3jU/kGyjXWTvAh2awn8oHroCbrPm8JqM7RUpKjalIRWWXE01CQOf/tUNWNHjmbMHg/hmNCwc/Pz3k1T/j/Lg==",
      "cpu": [
        "riscv64"
      ],
@@ -2034,9 +2056,9 @@
      ]
    },
    "node_modules/@rollup/rollup-linux-s390x-gnu": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.53.3.tgz",
-      "integrity": "sha512-VYsFMpULAz87ZW6BVYw3I6sWesGpsP9OPcyKe8ofdg9LHxSbRMd7zrVrr5xi/3kMZtpWL/wC+UIJWJYVX5uTKg==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.52.5.tgz",
+      "integrity": "sha512-gn8kHOrku8D4NGHMK1Y7NA7INQTRdVOntt1OCYypZPRt6skGbddska44K8iocdpxHTMMNui5oH4elPH4QOLrFQ==",
      "cpu": [
        "s390x"
      ],
@@ -2048,9 +2070,9 @@
      ]
    },
    "node_modules/@rollup/rollup-linux-x64-gnu": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.53.3.tgz",
-      "integrity": "sha512-3EhFi1FU6YL8HTUJZ51imGJWEX//ajQPfqWLI3BQq4TlvHy4X0MOr5q3D2Zof/ka0d5FNdPwZXm3Yyib/UEd+w==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.52.5.tgz",
+      "integrity": "sha512-hXGLYpdhiNElzN770+H2nlx+jRog8TyynpTVzdlc6bndktjKWyZyiCsuDAlpd+j+W+WNqfcyAWz9HxxIGfZm1Q==",
      "cpu": [
        "x64"
      ],
@@ -2062,9 +2084,9 @@
      ]
    },
    "node_modules/@rollup/rollup-linux-x64-musl": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.53.3.tgz",
-      "integrity": "sha512-eoROhjcc6HbZCJr+tvVT8X4fW3/5g/WkGvvmwz/88sDtSJzO7r/blvoBDgISDiCjDRZmHpwud7h+6Q9JxFwq1Q==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.52.5.tgz",
+      "integrity": "sha512-arCGIcuNKjBoKAXD+y7XomR9gY6Mw7HnFBv5Rw7wQRvwYLR7gBAgV7Mb2QTyjXfTveBNFAtPt46/36vV9STLNg==",
      "cpu": [
        "x64"
      ],
@@ -2076,9 +2098,9 @@
      ]
    },
    "node_modules/@rollup/rollup-openharmony-arm64": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.53.3.tgz",
-      "integrity": "sha512-OueLAWgrNSPGAdUdIjSWXw+u/02BRTcnfw9PN41D2vq/JSEPnJnVuBgw18VkN8wcd4fjUs+jFHVM4t9+kBSNLw==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.52.5.tgz",
+      "integrity": "sha512-QoFqB6+/9Rly/RiPjaomPLmR/13cgkIGfA40LHly9zcH1S0bN2HVFYk3a1eAyHQyjs3ZJYlXvIGtcCs5tko9Cw==",
      "cpu": [
        "arm64"
      ],
@@ -2090,9 +2112,9 @@
      ]
    },
    "node_modules/@rollup/rollup-win32-arm64-msvc": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.53.3.tgz",
-      "integrity": "sha512-GOFuKpsxR/whszbF/bzydebLiXIHSgsEUp6M0JI8dWvi+fFa1TD6YQa4aSZHtpmh2/uAlj/Dy+nmby3TJ3pkTw==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.52.5.tgz",
+      "integrity": "sha512-w0cDWVR6MlTstla1cIfOGyl8+qb93FlAVutcor14Gf5Md5ap5ySfQ7R9S/NjNaMLSFdUnKGEasmVnu3lCMqB7w==",
      "cpu": [
        "arm64"
      ],
@@ -2104,9 +2126,9 @@
      ]
    },
    "node_modules/@rollup/rollup-win32-ia32-msvc": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.53.3.tgz",
-      "integrity": "sha512-iah+THLcBJdpfZ1TstDFbKNznlzoxa8fmnFYK4V67HvmuNYkVdAywJSoteUszvBQ9/HqN2+9AZghbajMsFT+oA==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.52.5.tgz",
+      "integrity": "sha512-Aufdpzp7DpOTULJCuvzqcItSGDH73pF3ko/f+ckJhxQyHtp67rHw3HMNxoIdDMUITJESNE6a8uh4Lo4SLouOUg==",
      "cpu": [
        "ia32"
      ],
@@ -2118,9 +2140,9 @@
      ]
    },
    "node_modules/@rollup/rollup-win32-x64-gnu": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.53.3.tgz",
-      "integrity": "sha512-J9QDiOIZlZLdcot5NXEepDkstocktoVjkaKUtqzgzpt2yWjGlbYiKyp05rWwk4nypbYUNoFAztEgixoLaSETkg==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.52.5.tgz",
+      "integrity": "sha512-UGBUGPFp1vkj6p8wCRraqNhqwX/4kNQPS57BCFc8wYh0g94iVIW33wJtQAx3G7vrjjNtRaxiMUylM0ktp/TRSQ==",
      "cpu": [
        "x64"
      ],
@@ -2132,9 +2154,9 @@
      ]
    },
    "node_modules/@rollup/rollup-win32-x64-msvc": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.53.3.tgz",
-      "integrity": "sha512-UhTd8u31dXadv0MopwGgNOBpUVROFKWVQgAg5N1ESyCz8AuBcMqm4AuTjrwgQKGDfoFuz02EuMRHQIw/frmYKQ==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.52.5.tgz",
+      "integrity": "sha512-TAcgQh2sSkykPRWLrdyy2AiceMckNf5loITqXxFI5VuQjS5tSuw3WlwdN8qv8vzjLAUTvYaH/mVjSFpbkFbpTg==",
      "cpu": [
        "x64"
      ],
@@ -2305,9 +2327,9 @@
      "license": "MIT"
    },
    "node_modules/@types/node": {
-      "version": "24.10.1",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.10.1.tgz",
-      "integrity": "sha512-GNWcUTRBgIRJD5zj+Tq0fKOJ5XZajIiBroOF0yvj2bSU1WvNdYS/dn9UxwsujGW4JX06dnHyjV2y9rRaybH0iQ==",
+      "version": "24.9.1",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.9.1.tgz",
+      "integrity": "sha512-QoiaXANRkSXK6p0Duvt56W208du4P9Uye9hWLWgGMDTEoKPhuenzNcC4vGUmrNkiOKTlIrBoyNQYNpSwfEZXSg==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -2346,17 +2368,17 @@
      "license": "MIT"
    },
    "node_modules/@typescript-eslint/eslint-plugin": {
-      "version": "8.48.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.48.0.tgz",
-      "integrity": "sha512-XxXP5tL1txl13YFtrECECQYeZjBZad4fyd3cFV4a19LkAY/bIp9fev3US4S5fDVV2JaYFiKAZ/GRTOLer+mbyQ==",
+      "version": "8.46.2",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.46.2.tgz",
+      "integrity": "sha512-ZGBMToy857/NIPaaCucIUQgqueOiq7HeAKkhlvqVV4lm089zUFW6ikRySx2v+cAhKeUCPuWVHeimyk6Dw1iY3w==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "@eslint-community/regexpp": "^4.10.0",
-        "@typescript-eslint/scope-manager": "8.48.0",
-        "@typescript-eslint/type-utils": "8.48.0",
-        "@typescript-eslint/utils": "8.48.0",
-        "@typescript-eslint/visitor-keys": "8.48.0",
+        "@typescript-eslint/scope-manager": "8.46.2",
+        "@typescript-eslint/type-utils": "8.46.2",
+        "@typescript-eslint/utils": "8.46.2",
+        "@typescript-eslint/visitor-keys": "8.46.2",
        "graphemer": "^1.4.0",
        "ignore": "^7.0.0",
        "natural-compare": "^1.4.0",
@@ -2370,22 +2392,22 @@
        "url": "https://opencollective.com/typescript-eslint"
      },
      "peerDependencies": {
-        "@typescript-eslint/parser": "^8.48.0",
+        "@typescript-eslint/parser": "^8.46.2",
        "eslint": "^8.57.0 || ^9.0.0",
        "typescript": ">=4.8.4 <6.0.0"
      }
    },
    "node_modules/@typescript-eslint/parser": {
-      "version": "8.48.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.48.0.tgz",
-      "integrity": "sha512-jCzKdm/QK0Kg4V4IK/oMlRZlY+QOcdjv89U2NgKHZk1CYTj82/RVSx1mV/0gqCVMJ/DA+Zf/S4NBWNF8GQ+eqQ==",
+      "version": "8.46.2",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.46.2.tgz",
+      "integrity": "sha512-BnOroVl1SgrPLywqxyqdJ4l3S2MsKVLDVxZvjI1Eoe8ev2r3kGDo+PcMihNmDE+6/KjkTubSJnmqGZZjQSBq/g==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@typescript-eslint/scope-manager": "8.48.0",
-        "@typescript-eslint/types": "8.48.0",
-        "@typescript-eslint/typescript-estree": "8.48.0",
-        "@typescript-eslint/visitor-keys": "8.48.0",
+        "@typescript-eslint/scope-manager": "8.46.2",
+        "@typescript-eslint/types": "8.46.2",
+        "@typescript-eslint/typescript-estree": "8.46.2",
+        "@typescript-eslint/visitor-keys": "8.46.2",
        "debug": "^4.3.4"
      },
      "engines": {
@@ -2401,14 +2423,14 @@
      }
    },
    "node_modules/@typescript-eslint/project-service": {
-      "version": "8.48.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/project-service/-/project-service-8.48.0.tgz",
-      "integrity": "sha512-Ne4CTZyRh1BecBf84siv42wv5vQvVmgtk8AuiEffKTUo3DrBaGYZueJSxxBZ8fjk/N3DrgChH4TOdIOwOwiqqw==",
+      "version": "8.46.2",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/project-service/-/project-service-8.46.2.tgz",
+      "integrity": "sha512-PULOLZ9iqwI7hXcmL4fVfIsBi6AN9YxRc0frbvmg8f+4hQAjQ5GYNKK0DIArNo+rOKmR/iBYwkpBmnIwin4wBg==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@typescript-eslint/tsconfig-utils": "^8.48.0",
-        "@typescript-eslint/types": "^8.48.0",
+        "@typescript-eslint/tsconfig-utils": "^8.46.2",
+        "@typescript-eslint/types": "^8.46.2",
        "debug": "^4.3.4"
      },
      "engines": {
@@ -2423,14 +2445,14 @@
      }
    },
    "node_modules/@typescript-eslint/scope-manager": {
-      "version": "8.48.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.48.0.tgz",
-      "integrity": "sha512-uGSSsbrtJrLduti0Q1Q9+BF1/iFKaxGoQwjWOIVNJv0o6omrdyR8ct37m4xIl5Zzpkp69Kkmvom7QFTtue89YQ==",
+      "version": "8.46.2",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.46.2.tgz",
+      "integrity": "sha512-LF4b/NmGvdWEHD2H4MsHD8ny6JpiVNDzrSZr3CsckEgCbAGZbYM4Cqxvi9L+WqDMT+51Ozy7lt2M+d0JLEuBqA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@typescript-eslint/types": "8.48.0",
-        "@typescript-eslint/visitor-keys": "8.48.0"
+        "@typescript-eslint/types": "8.46.2",
+        "@typescript-eslint/visitor-keys": "8.46.2"
      },
      "engines": {
        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -2441,9 +2463,9 @@
      }
    },
    "node_modules/@typescript-eslint/tsconfig-utils": {
-      "version": "8.48.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/tsconfig-utils/-/tsconfig-utils-8.48.0.tgz",
-      "integrity": "sha512-WNebjBdFdyu10sR1M4OXTt2OkMd5KWIL+LLfeH9KhgP+jzfDV/LI3eXzwJ1s9+Yc0Kzo2fQCdY/OpdusCMmh6w==",
+      "version": "8.46.2",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/tsconfig-utils/-/tsconfig-utils-8.46.2.tgz",
+      "integrity": "sha512-a7QH6fw4S57+F5y2FIxxSDyi5M4UfGF+Jl1bCGd7+L4KsaUY80GsiF/t0UoRFDHAguKlBaACWJRmdrc6Xfkkag==",
      "dev": true,
      "license": "MIT",
      "engines": {
@@ -2458,15 +2480,15 @@
      }
    },
    "node_modules/@typescript-eslint/type-utils": {
-      "version": "8.48.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.48.0.tgz",
-      "integrity": "sha512-zbeVaVqeXhhab6QNEKfK96Xyc7UQuoFWERhEnj3mLVnUWrQnv15cJNseUni7f3g557gm0e46LZ6IJ4NJVOgOpw==",
+      "version": "8.46.2",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.46.2.tgz",
+      "integrity": "sha512-HbPM4LbaAAt/DjxXaG9yiS9brOOz6fabal4uvUmaUYe6l3K1phQDMQKBRUrr06BQkxkvIZVVHttqiybM9nJsLA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@typescript-eslint/types": "8.48.0",
-        "@typescript-eslint/typescript-estree": "8.48.0",
-        "@typescript-eslint/utils": "8.48.0",
+        "@typescript-eslint/types": "8.46.2",
+        "@typescript-eslint/typescript-estree": "8.46.2",
+        "@typescript-eslint/utils": "8.46.2",
        "debug": "^4.3.4",
        "ts-api-utils": "^2.1.0"
      },
@@ -2483,9 +2505,9 @@
      }
    },
    "node_modules/@typescript-eslint/types": {
-      "version": "8.48.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.48.0.tgz",
-      "integrity": "sha512-cQMcGQQH7kwKoVswD1xdOytxQR60MWKM1di26xSUtxehaDs/32Zpqsu5WJlXTtTTqyAVK8R7hvsUnIXRS+bjvA==",
+      "version": "8.46.2",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.46.2.tgz",
+      "integrity": "sha512-lNCWCbq7rpg7qDsQrd3D6NyWYu+gkTENkG5IKYhUIcxSb59SQC/hEQ+MrG4sTgBVghTonNWq42bA/d4yYumldQ==",
      "dev": true,
      "license": "MIT",
      "engines": {
@@ -2497,20 +2519,21 @@
      }
    },
    "node_modules/@typescript-eslint/typescript-estree": {
-      "version": "8.48.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.48.0.tgz",
-      "integrity": "sha512-ljHab1CSO4rGrQIAyizUS6UGHHCiAYhbfcIZ1zVJr5nMryxlXMVWS3duFPSKvSUbFPwkXMFk1k0EMIjub4sRRQ==",
+      "version": "8.46.2",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.46.2.tgz",
+      "integrity": "sha512-f7rW7LJ2b7Uh2EiQ+7sza6RDZnajbNbemn54Ob6fRwQbgcIn+GWfyuHDHRYgRoZu1P4AayVScrRW+YfbTvPQoQ==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@typescript-eslint/project-service": "8.48.0",
-        "@typescript-eslint/tsconfig-utils": "8.48.0",
-        "@typescript-eslint/types": "8.48.0",
-        "@typescript-eslint/visitor-keys": "8.48.0",
+        "@typescript-eslint/project-service": "8.46.2",
+        "@typescript-eslint/tsconfig-utils": "8.46.2",
+        "@typescript-eslint/types": "8.46.2",
+        "@typescript-eslint/visitor-keys": "8.46.2",
        "debug": "^4.3.4",
+        "fast-glob": "^3.3.2",
+        "is-glob": "^4.0.3",
        "minimatch": "^9.0.4",
        "semver": "^7.6.0",
-        "tinyglobby": "^0.2.15",
        "ts-api-utils": "^2.1.0"
      },
      "engines": {
@@ -2525,16 +2548,16 @@
      }
    },
    "node_modules/@typescript-eslint/utils": {
-      "version": "8.48.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.48.0.tgz",
-      "integrity": "sha512-yTJO1XuGxCsSfIVt1+1UrLHtue8xz16V8apzPYI06W0HbEbEWHxHXgZaAgavIkoh+GeV6hKKd5jm0sS6OYxWXQ==",
+      "version": "8.46.2",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.46.2.tgz",
+      "integrity": "sha512-sExxzucx0Tud5tE0XqR0lT0psBQvEpnpiul9XbGUB1QwpWJJAps1O/Z7hJxLGiZLBKMCutjTzDgmd1muEhBnVg==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "@eslint-community/eslint-utils": "^4.7.0",
-        "@typescript-eslint/scope-manager": "8.48.0",
-        "@typescript-eslint/types": "8.48.0",
-        "@typescript-eslint/typescript-estree": "8.48.0"
+        "@typescript-eslint/scope-manager": "8.46.2",
+        "@typescript-eslint/types": "8.46.2",
+        "@typescript-eslint/typescript-estree": "8.46.2"
      },
      "engines": {
        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -2549,13 +2572,13 @@
      }
    },
    "node_modules/@typescript-eslint/visitor-keys": {
-      "version": "8.48.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.48.0.tgz",
-      "integrity": "sha512-T0XJMaRPOH3+LBbAfzR2jalckP1MSG/L9eUtY0DEzUyVaXJ/t6zN0nR7co5kz0Jko/nkSYCBRkz1djvjajVTTg==",
+      "version": "8.46.2",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.46.2.tgz",
+      "integrity": "sha512-tUFMXI4gxzzMXt4xpGJEsBsTox0XbNQ1y94EwlD/CuZwFcQP79xfQqMhau9HsRc/J0cAPA/HZt1dZPtGn9V/7w==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@typescript-eslint/types": "8.48.0",
+        "@typescript-eslint/types": "8.46.2",
        "eslint-visitor-keys": "^4.2.1"
      },
      "engines": {
@@ -4122,20 +4145,20 @@
      }
    },
    "node_modules/eslint": {
-      "version": "9.39.1",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.39.1.tgz",
-      "integrity": "sha512-BhHmn2yNOFA9H9JmmIVKJmd288g9hrVRDkdoIgRCRuSySRUHH7r/DI6aAXW9T1WwUuY3DFgrcaqB+deURBLR5g==",
+      "version": "9.38.0",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.38.0.tgz",
+      "integrity": "sha512-t5aPOpmtJcZcz5UJyY2GbvpDlsK5E8JqRqoKtfiKE3cNh437KIqfJr3A3AKf5k64NPx6d0G3dno6XDY05PqPtw==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "@eslint-community/eslint-utils": "^4.8.0",
        "@eslint-community/regexpp": "^4.12.1",
        "@eslint/config-array": "^0.21.1",
-        "@eslint/config-helpers": "^0.4.2",
-        "@eslint/core": "^0.17.0",
+        "@eslint/config-helpers": "^0.4.1",
+        "@eslint/core": "^0.16.0",
        "@eslint/eslintrc": "^3.3.1",
-        "@eslint/js": "9.39.1",
-        "@eslint/plugin-kit": "^0.4.1",
+        "@eslint/js": "9.38.0",
+        "@eslint/plugin-kit": "^0.4.0",
        "@humanfs/node": "^0.16.6",
        "@humanwhocodes/module-importer": "^1.0.1",
        "@humanwhocodes/retry": "^0.4.2",
@@ -4386,9 +4409,9 @@
      }
    },
    "node_modules/eslint-plugin-jest": {
-      "version": "29.2.1",
-      "resolved": "https://registry.npmjs.org/eslint-plugin-jest/-/eslint-plugin-jest-29.2.1.tgz",
-      "integrity": "sha512-0WLIezrIxitUGbjMIGwznVzSIp0uFJV0PZ2fiSvpyVcxe+QMXKUt7MRhUpzdbctnnLwiOTOFkACplgB0wAglFw==",
+      "version": "29.0.1",
+      "resolved": "https://registry.npmjs.org/eslint-plugin-jest/-/eslint-plugin-jest-29.0.1.tgz",
+      "integrity": "sha512-EE44T0OSMCeXhDrrdsbKAhprobKkPtJTbQz5yEktysNpHeDZTAL1SfDTNKmcFfJkY6yrQLtTKZALrD3j/Gpmiw==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -5072,9 +5095,9 @@
      }
    },
    "node_modules/glob": {
-      "version": "10.5.0",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-10.5.0.tgz",
-      "integrity": "sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==",
+      "version": "10.4.5",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-10.4.5.tgz",
+      "integrity": "sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg==",
      "dev": true,
      "license": "ISC",
      "dependencies": {
@@ -6625,9 +6648,9 @@
      "license": "MIT"
    },
    "node_modules/js-yaml": {
-      "version": "4.1.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
-      "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
+      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -8466,6 +8489,16 @@
      ],
      "license": "MIT"
    },
+    "node_modules/randombytes": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz",
+      "integrity": "sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "safe-buffer": "^5.1.0"
+      }
+    },
    "node_modules/react-is": {
      "version": "18.3.1",
      "resolved": "https://registry.npmjs.org/react-is/-/react-is-18.3.1.tgz",
@@ -8750,9 +8783,9 @@
      }
    },
    "node_modules/rollup": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.53.3.tgz",
-      "integrity": "sha512-w8GmOxZfBmKknvdXU1sdM9NHcoQejwF/4mNgj2JuEEdRaHwwF12K7e9eXn1nLZ07ad+du76mkVsyeb2rKGllsA==",
+      "version": "4.52.5",
+      "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.52.5.tgz",
+      "integrity": "sha512-3GuObel8h7Kqdjt0gxkEzaifHTqLVW56Y/bjN7PSQtkKr0w3V/QYSdt6QWYtd7A1xUtYQigtdUfgj1RvWVtorw==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -8766,28 +8799,28 @@
        "npm": ">=8.0.0"
      },
      "optionalDependencies": {
-        "@rollup/rollup-android-arm-eabi": "4.53.3",
-        "@rollup/rollup-android-arm64": "4.53.3",
-        "@rollup/rollup-darwin-arm64": "4.53.3",
-        "@rollup/rollup-darwin-x64": "4.53.3",
-        "@rollup/rollup-freebsd-arm64": "4.53.3",
-        "@rollup/rollup-freebsd-x64": "4.53.3",
-        "@rollup/rollup-linux-arm-gnueabihf": "4.53.3",
-        "@rollup/rollup-linux-arm-musleabihf": "4.53.3",
-        "@rollup/rollup-linux-arm64-gnu": "4.53.3",
-        "@rollup/rollup-linux-arm64-musl": "4.53.3",
-        "@rollup/rollup-linux-loong64-gnu": "4.53.3",
-        "@rollup/rollup-linux-ppc64-gnu": "4.53.3",
-        "@rollup/rollup-linux-riscv64-gnu": "4.53.3",
-        "@rollup/rollup-linux-riscv64-musl": "4.53.3",
-        "@rollup/rollup-linux-s390x-gnu": "4.53.3",
-        "@rollup/rollup-linux-x64-gnu": "4.53.3",
-        "@rollup/rollup-linux-x64-musl": "4.53.3",
-        "@rollup/rollup-openharmony-arm64": "4.53.3",
-        "@rollup/rollup-win32-arm64-msvc": "4.53.3",
-        "@rollup/rollup-win32-ia32-msvc": "4.53.3",
-        "@rollup/rollup-win32-x64-gnu": "4.53.3",
-        "@rollup/rollup-win32-x64-msvc": "4.53.3",
+        "@rollup/rollup-android-arm-eabi": "4.52.5",
+        "@rollup/rollup-android-arm64": "4.52.5",
+        "@rollup/rollup-darwin-arm64": "4.52.5",
+        "@rollup/rollup-darwin-x64": "4.52.5",
+        "@rollup/rollup-freebsd-arm64": "4.52.5",
+        "@rollup/rollup-freebsd-x64": "4.52.5",
+        "@rollup/rollup-linux-arm-gnueabihf": "4.52.5",
+        "@rollup/rollup-linux-arm-musleabihf": "4.52.5",
+        "@rollup/rollup-linux-arm64-gnu": "4.52.5",
+        "@rollup/rollup-linux-arm64-musl": "4.52.5",
+        "@rollup/rollup-linux-loong64-gnu": "4.52.5",
+        "@rollup/rollup-linux-ppc64-gnu": "4.52.5",
+        "@rollup/rollup-linux-riscv64-gnu": "4.52.5",
+        "@rollup/rollup-linux-riscv64-musl": "4.52.5",
+        "@rollup/rollup-linux-s390x-gnu": "4.52.5",
+        "@rollup/rollup-linux-x64-gnu": "4.52.5",
+        "@rollup/rollup-linux-x64-musl": "4.52.5",
+        "@rollup/rollup-openharmony-arm64": "4.52.5",
+        "@rollup/rollup-win32-arm64-msvc": "4.52.5",
+        "@rollup/rollup-win32-ia32-msvc": "4.52.5",
+        "@rollup/rollup-win32-x64-gnu": "4.52.5",
+        "@rollup/rollup-win32-x64-msvc": "4.52.5",
        "fsevents": "~2.3.2"
      }
    },
@@ -8835,6 +8868,27 @@
        "url": "https://github.com/sponsors/ljharb"
      }
    },
+    "node_modules/safe-buffer": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+      "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
    "node_modules/safe-push-apply": {
      "version": "1.0.0",
      "resolved": "https://registry.npmjs.org/safe-push-apply/-/safe-push-apply-1.0.0.tgz",
@@ -8883,6 +8937,16 @@
        "node": ">=10"
      }
    },
+    "node_modules/serialize-javascript": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.2.tgz",
+      "integrity": "sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "randombytes": "^2.1.0"
+      }
+    },
    "node_modules/set-function-length": {
      "version": "1.2.2",
      "resolved": "https://registry.npmjs.org/set-function-length/-/set-function-length-1.2.2.tgz",
@@ -9094,6 +9158,13 @@
        "node": ">=8"
      }
    },
+    "node_modules/smob": {
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/smob/-/smob-1.5.0.tgz",
+      "integrity": "sha512-g6T+p7QO8npa+/hNx9ohv1E5pVCmWrVCUzUXJyLdMmftX6ER0oiWY/w9knEonLpnOp6b6FenKnMfR8gqwWdwig==",
+      "dev": true,
+      "license": "MIT"
+    },
    "node_modules/source-map": {
      "version": "0.6.1",
      "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz",
@@ -9499,6 +9570,43 @@
        "url": "https://opencollective.com/synckit"
      }
    },
+    "node_modules/terser": {
+      "version": "5.44.0",
+      "resolved": "https://registry.npmjs.org/terser/-/terser-5.44.0.tgz",
+      "integrity": "sha512-nIVck8DK+GM/0Frwd+nIhZ84pR/BX7rmXMfYwyg+Sri5oGVE99/E3KvXqpC2xHFxyqXyGHTKBSioxxplrO4I4w==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "@jridgewell/source-map": "^0.3.3",
+        "acorn": "^8.15.0",
+        "commander": "^2.20.0",
+        "source-map-support": "~0.5.20"
+      },
+      "bin": {
+        "terser": "bin/terser"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/terser/node_modules/commander": {
+      "version": "2.20.3",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz",
+      "integrity": "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/terser/node_modules/source-map-support": {
+      "version": "0.5.21",
+      "resolved": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz",
+      "integrity": "sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "buffer-from": "^1.0.0",
+        "source-map": "^0.6.0"
+      }
+    },
    "node_modules/test-exclude": {
      "version": "6.0.0",
      "resolved": "https://registry.npmjs.org/test-exclude/-/test-exclude-6.0.0.tgz",
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "update-tags-action",
-  "version": "2.2.0",
+  "version": "1.0.1",
  "author": "jimeh",
  "type": "module",
  "private": true,
@@ -46,28 +46,29 @@
    "csv-parse": "^6.1.0"
  },
  "devDependencies": {
-    "@eslint/compat": "^2.0.0",
+    "@eslint/compat": "^1.4.0",
    "@jest/globals": "^30.2.0",
-    "@rollup/plugin-commonjs": "^29.0.0",
+    "@rollup/plugin-commonjs": "^28.0.9",
    "@rollup/plugin-node-resolve": "^16.0.3",
+    "@rollup/plugin-terser": "^0.4.4",
    "@rollup/plugin-typescript": "^12.3.0",
    "@types/jest": "^30.0.0",
-    "@types/node": "^24.10.1",
-    "@typescript-eslint/eslint-plugin": "^8.48.0",
+    "@types/node": "^24.9.1",
+    "@typescript-eslint/eslint-plugin": "^8.46.2",
    "@typescript-eslint/parser": "^8.46.2",
    "action-docs": "^2.5.1",
-    "eslint": "^9.39.1",
+    "eslint": "^9.38.0",
    "eslint-config-prettier": "^10.1.8",
    "eslint-import-resolver-typescript": "^4.4.4",
    "eslint-plugin-import": "^2.32.0",
-    "eslint-plugin-jest": "^29.2.1",
+    "eslint-plugin-jest": "^29.0.1",
    "eslint-plugin-prettier": "^5.5.4",
    "jest": "^30.2.0",
    "make-coverage-badge": "^1.2.0",
    "npm-run-all": "^4.1.5",
    "prettier": "^3.6.2",
    "prettier-eslint": "^16.4.2",
-    "rollup": "^4.53.3",
+    "rollup": "^4.52.5",
    "ts-jest": "^29.4.5",
    "ts-jest-resolver": "^2.0.1",
    "typescript": "^5.9.3"
--- a/rollup.config.ts
+++ b/rollup.config.ts
@@ -2,6 +2,7 @@

 import commonjs from '@rollup/plugin-commonjs'
 import nodeResolve from '@rollup/plugin-node-resolve'
+import terser from '@rollup/plugin-terser'
 import typescript from '@rollup/plugin-typescript'

 const config = {
@@ -12,7 +13,12 @@ const config = {
    format: 'es',
    sourcemap: true
  },
-  plugins: [typescript(), nodeResolve({ preferBuiltins: true }), commonjs()]
+  plugins: [
+    typescript(),
+    nodeResolve({ preferBuiltins: true }),
+    commonjs(),
+    terser()
+  ]
 }

 export default config
--- a/src/inputs.ts
+++ b/src/inputs.ts
@@ -1,18 +1,17 @@
 import * as core from '@actions/core'
 import * as github from '@actions/github'
-import { parse } from 'csv-parse/sync'
+import { parseTagsInput, type Tag } from './tags.js'

 const WHEN_EXISTS_MODES = ['update', 'skip', 'fail'] as const
 export type WhenExistsMode = (typeof WHEN_EXISTS_MODES)[number]

 export interface Inputs {
-  tags: string[]
-  defaultRef: string
+  tags: Tag[]
  whenExists: WhenExistsMode
  annotation: string
  owner: string
  repo: string
-  token: string
+  octokit: ReturnType<typeof github.getOctokit>
 }

 /**
@@ -37,34 +36,27 @@ function validateWhenExists(input: string): WhenExistsMode {
 *
 * @returns Parsed and validated inputs
 */
-export function getInputs(): Inputs {
+export async function getInputs(): Promise<Inputs> {
  const tagsInput: string = core.getInput('tags', { required: true })
  const defaultRef: string = core.getInput('ref')
  const whenExistsInput = core.getInput('when_exists') || 'update'
  const whenExists = validateWhenExists(whenExistsInput)
-  const annotation: string = core.getInput('annotation')
+  const annotation: string = core.getInput('annotation') || ''
  const token: string = core.getInput('github_token', {
    required: true
  })

+  const octokit = github.getOctokit(token)
  const { owner, repo } = github.context.repo

-  // Parse tags as CSV/newline delimited strings
-  const tags = (
-    parse(tagsInput, {
-      delimiter: ',',
-      trim: true,
-      relax_column_count: true
-    }) as string[][]
-  ).flat()
+  const tags = await parseTagsInput(octokit, tagsInput, defaultRef, owner, repo)

  return {
    tags,
-    defaultRef,
    whenExists,
    annotation,
    owner,
    repo,
-    token
+    octokit
  }
 }
--- a/src/main.ts
+++ b/src/main.ts
@@ -1,7 +1,6 @@
 import * as core from '@actions/core'
-import * as github from '@actions/github'
 import { getInputs } from './inputs.js'
-import { planTagOperations, executeTagOperation } from './tags.js'
+import { processTag } from './tags.js'

 /**
 * The main function for the action.
@@ -10,33 +9,45 @@ import { planTagOperations, executeTagOperation } from './tags.js'
 */
 export async function run(): Promise<void> {
  try {
-    const inputs = getInputs()
-    const octokit = github.getOctokit(inputs.token)
-    const operations = await planTagOperations(inputs, octokit)
+    let inputs
+    try {
+      inputs = await getInputs()
+    } catch (error) {
+      // For parsing/validation errors, pass message directly.
+      const message = error instanceof Error ? error.message : String(error)
+      core.setFailed(message)
+      return
+    }
+
+    const { tags, whenExists, annotation, owner, repo, octokit } = inputs

    const created: string[] = []
    const updated: string[] = []
-    const skipped: string[] = []

-    // Execute all planned operations.
-    for (const operation of operations) {
-      await executeTagOperation(operation, octokit)
+    // Create or update all tags.
+    for (const tag of tags) {
+      const result = await processTag(
+        tag,
+        whenExists,
+        annotation,
+        owner,
+        repo,
+        octokit
+      )

-      if (operation.operation === 'create') {
-        created.push(operation.name)
-      } else if (operation.operation === 'update') {
-        updated.push(operation.name)
-      } else if (operation.operation === 'skip') {
-        skipped.push(operation.name)
+      if (result === 'failed') {
+        return
+      } else if (result === 'created') {
+        created.push(tag.name)
+      } else if (result === 'updated') {
+        updated.push(tag.name)
      }
    }

    core.setOutput('created', created)
    core.setOutput('updated', updated)
-    core.setOutput('skipped', skipped)
    core.setOutput('tags', created.concat(updated))
  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error)
-    core.setFailed(message)
+    core.setFailed(`Action failed with error: ${String(error)}`)
  }
 }
--- a/src/tags.ts
+++ b/src/tags.ts
@@ -1,63 +1,44 @@
 import * as core from '@actions/core'
 import * as github from '@actions/github'
-import type { Inputs } from './inputs.js'
+import { parse } from 'csv-parse/sync'

-export interface ExistingTagInfo {
-  commitSHA: string
-  isAnnotated: boolean
-  annotation?: string
-}
-
-interface BaseOperation {
+export interface Tag {
  name: string
  ref: string
  sha: string
-  owner: string
-  repo: string
 }

-export interface CreateOperation extends BaseOperation {
-  operation: 'create'
-  annotation: string
-}
-
-export interface UpdateOperation extends BaseOperation {
-  operation: 'update'
-  annotation: string
-  existingSHA: string
-  existingIsAnnotated: boolean
-  reasons: string[]
-}
-
-export interface SkipOperation extends BaseOperation {
-  operation: 'skip'
-  existingIsAnnotated: boolean
-  reason: 'when_exists_skip' | 'already_matches'
-}
-
-export type TagOperation = CreateOperation | UpdateOperation | SkipOperation
-
-interface Context {
-  owner: string
-  repo: string
-  octokit: ReturnType<typeof github.getOctokit>
-}
+export type TagResult = 'created' | 'updated' | 'skipped' | 'failed'

 /**
- * Plan tag operations based on inputs.
+ * Parse tags input string and resolve refs to SHAs.
 *
- * @param inputs - The validated inputs containing tags, refs, and configuration
 * @param octokit - The GitHub API client
- * @returns Array of planned tag operations (create, update, or skip)
+ * @param tagsInput - The raw tags input string
+ * @param defaultRef - The default ref to use if not specified per-tag
+ * @param owner - The repository owner
+ * @param repo - The repository name
+ * @returns Array of desired tags with resolved SHAs
 */
-export async function planTagOperations(
-  inputs: Inputs,
-  octokit: ReturnType<typeof github.getOctokit>
-): Promise<TagOperation[]> {
-  const uniqueRefs = new Set<string>()
-  const tagRefs: Record<string, string> = {}
+export async function parseTagsInput(
+  octokit: ReturnType<typeof github.getOctokit>,
+  tagsInput: string,
+  defaultRef: string,
+  owner: string,
+  repo: string
+): Promise<Tag[]> {
+  const parsedTags: string[] = (
+    parse(tagsInput, {
+      delimiter: ',',
+      trim: true,
+      relax_column_count: true
+    }) as string[][]
+  ).flat()

-  for (const tag of inputs.tags) {
+  const uniqueRefs = new Set<string>()
+  const tags: Record<string, string> = {}
+
+  for (const tag of parsedTags) {
    const parts = tag.split(':').map((s) => s.trim())
    if (parts.length > 2) {
      throw new Error(
@@ -74,221 +55,246 @@ export async function planTagOperations(
      continue
    }

-    const ref = tagRef || inputs.defaultRef
+    const ref = tagRef || defaultRef
    if (!ref) {
      throw new Error("Missing ref: provide 'ref' input or specify per-tag ref")
    }

-    // Check for duplicate tag with different ref
-    if (tagRefs[tagName] && tagRefs[tagName] !== ref) {
+    // Check for duplicate tag with different ref.
+    if (tags[tagName] && tags[tagName] !== ref) {
      throw new Error(
        `Duplicate tag '${tagName}' with different refs: ` +
-          `'${tagRefs[tagName]}' and '${ref}'`
+          `'${tags[tagName]}' and '${ref}'`
      )
    }

-    tagRefs[tagName] = ref
+    tags[tagName] = ref
    uniqueRefs.add(ref)
  }

  // Pre-resolve all unique refs in parallel.
-  const ctx: Context = { owner: inputs.owner, repo: inputs.repo, octokit }
-  const refSHAs: Record<string, string> = {}
+  const refToSha: Record<string, string> = {}
  await Promise.all(
    Array.from(uniqueRefs).map(async (ref) => {
-      refSHAs[ref] = await resolveRefToSha(ctx, ref)
+      refToSha[ref] = await resolveRefToSha(octokit, owner, repo, ref)
    })
  )

-  // Build result array with planned operations
-  const tagNames = Object.keys(tagRefs)
-  const result: TagOperation[] = await Promise.all(
-    tagNames.map(async (tagName) => {
-      const tagRef = tagRefs[tagName]
-      const sha = refSHAs[tagRef]
-
-      // Check if tag already exists
-      let existing: ExistingTagInfo | undefined
-      try {
-        existing = await fetchTagInfo(ctx, tagName)
-
-        // Fail early if when_exists is 'fail'
-        if (inputs.whenExists === 'fail') {
-          throw new Error(`Tag '${tagName}' already exists.`)
-        }
-      } catch (error: unknown) {
-        // Check if it's a GitHub API error with a status property
-        if (typeof error === 'object' && error !== null && 'status' in error) {
-          const apiError = error as { status: number; message?: string }
-          if (apiError.status === 404) {
-            // Tag doesn't exist, existing remains undefined
-          } else {
-            // Some other API error
-            throw new Error(
-              `Failed to check if tag '${tagName}' exists: ${apiError.message || String(error)}`
-            )
-          }
-        } else {
-          throw error
-        }
-      }
-
-      const baseOp = {
-        name: tagName,
-        ref: tagRef,
-        sha,
-        owner: inputs.owner,
-        repo: inputs.repo
-      }
-
-      // Tag doesn't exist - plan creation
-      if (!existing) {
-        return {
-          ...baseOp,
-          operation: 'create',
-          annotation: inputs.annotation
-        } as CreateOperation
-      }
-
-      // Tag exists - determine operation based on mode and state
-      if (inputs.whenExists === 'skip') {
-        return {
-          ...baseOp,
-          operation: 'skip',
-          existingIsAnnotated: existing.isAnnotated,
-          reason: 'when_exists_skip'
-        } as SkipOperation
-      }
-
-      // whenExists === 'update' - check if update is needed
-      const { commitMatches, annotationMatches } = compareTagState(
-        sha,
-        inputs.annotation,
-        existing
-      )
-
-      if (commitMatches && annotationMatches) {
-        return {
-          ...baseOp,
-          operation: 'skip',
-          existingIsAnnotated: existing.isAnnotated,
-          reason: 'already_matches'
-        } as SkipOperation
-      }
-
-      // Plan update with reasons
-      const reasons = getUpdateReasons(sha, inputs.annotation, existing)
-      return {
-        ...baseOp,
-        operation: 'update',
-        annotation: inputs.annotation,
-        existingSHA: existing.commitSHA,
-        existingIsAnnotated: existing.isAnnotated,
-        reasons
-      } as UpdateOperation
+  // Build result array with resolved SHAs.
+  const result: Tag[] = []
+  for (const tagName in tags) {
+    const tagRef = tags[tagName]
+    result.push({
+      name: tagName,
+      ref: tagRef,
+      sha: refToSha[tagRef]
    })
-  )
+  }

  return result
 }

 /**
- * Execute a planned tag operation.
+ * Process a single desired tag: create or update it based on configuration.
 *
- * @param operation - The planned tag operation to execute
+ * @param tag - The desired tag to process
+ * @param whenExists - What to do if the tag already exists
+ * @param annotation - Optional annotation message for the tag
+ * @param owner - Repository owner
+ * @param repo - Repository name
+ * @param octokit - GitHub API client
+ * @returns The result of the tag operation
+ */
+export async function processTag(
+  tag: Tag,
+  whenExists: 'update' | 'skip' | 'fail',
+  annotation: string,
+  owner: string,
+  repo: string,
+  octokit: ReturnType<typeof github.getOctokit>
+): Promise<TagResult> {
+  const { name: tagName, sha } = tag
+
+  try {
+    // Check if the tag exists.
+    const existing = await octokit.rest.git.getRef({
+      owner,
+      repo,
+      ref: `tags/${tagName}`
+    })
+
+    // If the tag exists, decide action based on 'when_exists'.
+    if (whenExists === 'update') {
+      const existingSHA = existing.data.object.sha
+
+      // For annotated tags, we need to get the commit SHA from the tag object
+      let existingCommitSHA = existingSHA
+      if (existing.data.object.type === 'tag') {
+        const tagObject = await octokit.rest.git.getTag({
+          owner,
+          repo,
+          tag_sha: existingSHA
+        })
+        existingCommitSHA = tagObject.data.object.sha
+      }
+
+      if (existingCommitSHA === sha) {
+        core.info(`Tag '${tagName}' already exists with desired SHA ${sha}.`)
+        return 'skipped'
+      }
+
+      core.info(
+        `Tag '${tagName}' exists, updating to SHA ${sha} ` +
+          `(was ${existingCommitSHA}).`
+      )
+      await updateTag(tagName, sha, annotation, owner, repo, octokit)
+      return 'updated'
+    } else if (whenExists === 'skip') {
+      core.info(`Tag '${tagName}' exists, skipping.`)
+      return 'skipped'
+    } else {
+      // whenExists === 'fail'
+      core.setFailed(`Tag '${tagName}' already exists.`)
+      return 'failed'
+    }
+  } catch (error: unknown) {
+    const err = error as { status?: number }
+    if (err?.status !== 404) {
+      throw error
+    }
+
+    // If the tag doesn't exist (404), create it.
+    core.info(`Tag '${tagName}' does not exist, creating with SHA ${sha}.`)
+    await createTag(tagName, sha, annotation, owner, repo, octokit)
+    return 'created'
+  }
+}
+
+/**
+ * Create a tag object for an annotated tag.
+ *
+ * @param tagName - Name of the tag
+ * @param sha - Commit SHA to tag
+ * @param annotation - Annotation message
+ * @param owner - Repository owner
+ * @param repo - Repository name
+ * @param octokit - GitHub API client
+ * @returns SHA of the created tag object
+ */
+async function createTagObject(
+  tagName: string,
+  sha: string,
+  annotation: string,
+  owner: string,
+  repo: string,
+  octokit: ReturnType<typeof github.getOctokit>
+): Promise<string> {
+  const tagObject = await octokit.rest.git.createTag({
+    owner,
+    repo,
+    tag: tagName,
+    message: annotation,
+    object: sha,
+    type: 'commit'
+  })
+  return tagObject.data.sha
+}
+
+/**
+ * Create a tag (annotated or lightweight based on annotation parameter).
+ *
+ * @param tagName - Name of the tag
+ * @param sha - Commit SHA to tag
+ * @param annotation - Optional annotation message
+ * @param owner - Repository owner
+ * @param repo - Repository name
 * @param octokit - GitHub API client
 */
-export async function executeTagOperation(
-  operation: TagOperation,
+async function createTag(
+  tagName: string,
+  sha: string,
+  annotation: string,
+  owner: string,
+  repo: string,
  octokit: ReturnType<typeof github.getOctokit>
 ): Promise<void> {
-  const ctx: Context = {
-    owner: operation.owner,
-    repo: operation.repo,
-    octokit
+  let refSha = sha
+
+  // If annotation is provided and non-empty, create an annotated tag object first
+  if (annotation && annotation.trim()) {
+    refSha = await createTagObject(
+      tagName,
+      sha,
+      annotation,
+      owner,
+      repo,
+      octokit
+    )
  }

-  if (operation.operation === 'skip') {
-    if (operation.reason === 'when_exists_skip') {
-      core.info(`Tag '${operation.name}' exists, skipping.`)
-    } else {
-      core.info(
-        `Tag '${operation.name}' already exists with desired commit SHA ${operation.sha}` +
-          (operation.existingIsAnnotated ? ' (annotated).' : '.')
-      )
-    }
-    return
-  }
-
-  if (operation.operation === 'create') {
-    await createTag(ctx, operation)
-    return
-  }
-
-  if (operation.operation === 'update') {
-    await updateExistingTag(ctx, operation)
-    return
-  }
-
-  throw new Error(
-    `Unknown operation type: ${(operation as TagOperation).operation}`
-  )
+  // Create the reference pointing to the tag object (or commit for lightweight)
+  await octokit.rest.git.createRef({
+    owner,
+    repo,
+    ref: `refs/tags/${tagName}`,
+    sha: refSha
+  })
 }

 /**
- * Fetch information about an existing tag, dereferencing if annotated.
+ * Update a tag to point to a new SHA.
 *
- * @param ctx - Operation context
- * @param tagName - The name of the tag to fetch
- * @returns Information about the existing tag
+ * @param tagName - Name of the tag
+ * @param sha - New commit SHA
+ * @param annotation - Optional annotation message
+ * @param owner - Repository owner
+ * @param repo - Repository name
+ * @param octokit - GitHub API client
 */
-async function fetchTagInfo(
-  ctx: Context,
-  tagName: string
-): Promise<ExistingTagInfo> {
-  const ref = await ctx.octokit.rest.git.getRef({
-    owner: ctx.owner,
-    repo: ctx.repo,
-    ref: `tags/${tagName}`
-  })
-  const object = ref.data.object
-  const isAnnotated = object.type === 'tag'
+async function updateTag(
+  tagName: string,
+  sha: string,
+  annotation: string,
+  owner: string,
+  repo: string,
+  octokit: ReturnType<typeof github.getOctokit>
+): Promise<void> {
+  let refSha = sha

-  if (!isAnnotated) {
-    return {
-      commitSHA: object.sha,
-      isAnnotated: false
-    }
+  // If annotation is provided and non-empty, create an annotated tag object first
+  if (annotation && annotation.trim()) {
+    refSha = await createTagObject(
+      tagName,
+      sha,
+      annotation,
+      owner,
+      repo,
+      octokit
+    )
  }

-  // Dereference annotated tag to get underlying commit
-  const tagRef = await ctx.octokit.rest.git.getTag({
-    owner: ctx.owner,
-    repo: ctx.repo,
-    tag_sha: object.sha
+  // Update the reference
+  await octokit.rest.git.updateRef({
+    owner,
+    repo,
+    ref: `tags/${tagName}`,
+    sha: refSha,
+    force: true
  })
-
-  return {
-    commitSHA: tagRef.data.object.sha,
-    isAnnotated: true,
-    annotation: tagRef.data.message
-  }
 }

-/**
- * Resolve a ref to a SHA.
- *
- * @param ctx - Operation context
- * @param ref - The ref to resolve
- * @returns The SHA
- */
-async function resolveRefToSha(ctx: Context, ref: string): Promise<string> {
+async function resolveRefToSha(
+  octokit: ReturnType<typeof github.getOctokit>,
+  owner: string,
+  repo: string,
+  ref: string
+): Promise<string> {
  try {
    const {
      data: { sha }
-    } = await ctx.octokit.rest.repos.getCommit({
-      owner: ctx.owner,
-      repo: ctx.repo,
+    } = await octokit.rest.repos.getCommit({
+      owner,
+      repo,
      ref
    })

@@ -297,165 +303,3 @@ async function resolveRefToSha(ctx: Context, ref: string): Promise<string> {
    throw new Error(`Failed to resolve ref '${ref}' to a SHA: ${String(error)}`)
  }
 }
-
-/**
- * Update an existing tag to point to a new commit and/or annotation.
- */
-async function updateExistingTag(
-  ctx: Context,
-  operation: UpdateOperation
-): Promise<void> {
-  const commitMatches = operation.existingSHA === operation.sha
-
-  if (commitMatches) {
-    core.info(
-      `Tag '${operation.name}' exists with same commit but ${operation.reasons.join(', ')}.`
-    )
-  } else {
-    core.info(
-      `Tag '${operation.name}' exists` +
-        `${operation.existingIsAnnotated ? ' (annotated)' : ''}` +
-        `, updating to ${operation.reasons.join(', ')}.`
-    )
-  }
-
-  const targetSha = await resolveTargetSHA(
-    ctx,
-    operation.name,
-    operation.sha,
-    operation.annotation
-  )
-
-  await ctx.octokit.rest.git.updateRef({
-    owner: ctx.owner,
-    repo: ctx.repo,
-    ref: `tags/${operation.name}`,
-    sha: targetSha,
-    force: true
-  })
-}
-
-/**
- * Create a tag (doesn't exist yet).
- */
-async function createTag(
-  ctx: Context,
-  operation: CreateOperation
-): Promise<void> {
-  core.info(
-    `Tag '${operation.name}' does not exist, creating with commit SHA ${operation.sha}.`
-  )
-
-  const targetSha = await resolveTargetSHA(
-    ctx,
-    operation.name,
-    operation.sha,
-    operation.annotation
-  )
-
-  await ctx.octokit.rest.git.createRef({
-    owner: ctx.owner,
-    repo: ctx.repo,
-    ref: `refs/tags/${operation.name}`,
-    sha: targetSha
-  })
-}
-
-/**
- * Resolve the target SHA for a tag (creates annotated tag object if needed).
- *
- * @param ctx - Operation context
- * @param tagName - The tag name
- * @param commitSha - The commit SHA
- * @param annotation - The annotation message (if any)
- * @returns The SHA to use (tag object SHA if annotated, commit SHA otherwise)
- */
-async function resolveTargetSHA(
-  ctx: Context,
-  tagName: string,
-  commitSha: string,
-  annotation: string
-): Promise<string> {
-  if (!annotation) {
-    return commitSha
-  }
-
-  const tagObject = await ctx.octokit.rest.git.createTag({
-    owner: ctx.owner,
-    repo: ctx.repo,
-    tag: tagName,
-    message: annotation,
-    object: commitSha,
-    type: 'commit'
-  })
-
-  return tagObject.data.sha
-}
-
-/**
- * Compare existing tag state with desired target state.
- *
- * @param sha - The desired commit SHA
- * @param annotation - The desired annotation
- * @param existing - Information about the existing tag
- * @returns Object indicating whether commit and annotation match
- */
-function compareTagState(
-  sha: string,
-  annotation: string,
-  existing: ExistingTagInfo
-): {
-  commitMatches: boolean
-  annotationMatches: boolean
-} {
-  const isAnnotated = existing.isAnnotated === true
-
-  const commitMatches = existing.commitSHA === sha
-  const annotationMatches =
-    (isAnnotated && !!annotation && existing.annotation === annotation) ||
-    (!isAnnotated && !annotation) ||
-    false
-
-  return { commitMatches, annotationMatches }
-}
-
-/**
- * Get update reason messages based on what changed.
- *
- * @param sha - The desired commit SHA
- * @param annotation - The desired annotation
- * @param existing - Information about the existing tag
- * @returns Array of reason strings
- */
-function getUpdateReasons(
-  sha: string,
-  annotation: string,
-  existing: ExistingTagInfo
-): string[] {
-  const { commitMatches, annotationMatches } = compareTagState(
-    sha,
-    annotation,
-    existing
-  )
-  const reasons: string[] = []
-
-  if (!commitMatches) {
-    reasons.push(`commit SHA ${sha} (was ${existing.commitSHA})`)
-  }
-
-  if (!annotationMatches && annotation) {
-    if (existing.isAnnotated === true) {
-      reasons.push('annotation message changed')
-    } else {
-      reasons.push('adding annotation')
-    }
-  } else if (
-    !annotationMatches &&
-    !annotation &&
-    existing.isAnnotated === true
-  ) {
-    reasons.push('removing annotation')
-  }
-
-  return reasons
-}
--- a/tests/main.test.ts
+++ b/tests/main.test.ts
--- a/tests/tags.test.ts
+++ b/tests/tags.test.ts
@@ -1,37 +0,0 @@
-/**
- * Unit tests for tag operation execution, src/tags.ts
- */
-import { jest } from '@jest/globals'
-import * as core from './fixtures/core.js'
-import * as github from './fixtures/github.js'
-
-// Mocks should be declared before the module being tested is imported.
-jest.unstable_mockModule('@actions/core', () => core)
-jest.unstable_mockModule('@actions/github', () => github)
-
-// The module being tested should be imported dynamically.
-const { executeTagOperation } = await import('../src/tags.js')
-import type { TagOperation } from '../src/tags.js'
-
-describe('executeTagOperation', () => {
-  beforeEach(() => {
-    jest.resetAllMocks()
-    github.getOctokit.mockReturnValue(github.mockOctokit)
-  })
-
-  it('throws error for unknown operation type', async () => {
-    const invalidOperation = {
-      operation: 'invalid',
-      name: 'v1',
-      ref: 'main',
-      sha: 'abc123',
-      owner: 'test-owner',
-      repo: 'test-repo'
-    } as unknown as TagOperation
-
-    await expect(
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
-      executeTagOperation(invalidOperation, github.mockOctokit as any)
-    ).rejects.toThrow('Unknown operation type: invalid')
-  })
-})
--- a/tsconfig.eslint.json
+++ b/tsconfig.eslint.json
@@ -7,7 +7,8 @@
  },
  "exclude": ["dist", "node_modules"],
  "include": [
-    "tests",
+    "__fixtures__",
+    "__tests__",
    "src",
    "eslint.config.mjs",
    "jest.config.js",
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -6,6 +6,6 @@
    "moduleResolution": "NodeNext",
    "outDir": "./dist"
  },
-  "exclude": ["tests", "coverage", "dist", "node_modules"],
+  "exclude": ["__fixtures__", "__tests__", "coverage", "dist", "node_modules"],
  "include": ["src"]
 }
Author	SHA1	Message	Date
copilot-swe-agent[bot]	eb98d277e4	refactor: extract tag object creation and improve annotation handling Co-authored-by: jimeh <39563+jimeh@users.noreply.github.com>	2025-10-27 22:17:36 +00:00
copilot-swe-agent[bot]	937c3e6f65	feat: add support for annotated tags via annotation input Co-authored-by: jimeh <39563+jimeh@users.noreply.github.com>	2025-10-27 22:14:27 +00:00
copilot-swe-agent[bot]	fed61b3f3c	Initial exploration of annotated tags feature Co-authored-by: jimeh <39563+jimeh@users.noreply.github.com>	2025-10-27 22:08:25 +00:00
copilot-swe-agent[bot]	a77500883a	Initial plan	2025-10-27 22:05:41 +00:00