refactor: extract tag object creation and improve annotation handling

Co-authored-by: jimeh <39563+jimeh@users.noreply.github.com>

.cursor/rules/00-agents.mdc

@@ -0,0 +1 @@
+../../AGENTS.md

.gitattributes

@@ -0,0 +1,3 @@
+* text=auto eol=lf
+
+dist/** -diff linguist-generated=true

.github/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.0.1"
+  ".": "2.0.0"
 }

.github/copilot-instructions.md

@@ -0,0 +1 @@
+../AGENTS.md

.github/dependabot.yml

@@ -0,0 +1,26 @@
+---
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      actions-minor:
+        update-types:
+          - minor
+          - patch
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      npm-development:
+        dependency-type: development
+        update-types:
+          - minor
+          - patch
+      npm-production:
+        dependency-type: production
+        update-types:
+          - patch

.github/release-please-config.json

@@ -3,9 +3,7 @@
     ".": {
       "release-type": "simple",
       "changelog-path": "CHANGELOG.md",
-      "extra-files": [
-        "README.md"
-      ],
+      "extra-files": ["README.md"],
       "bump-minor-pre-major": true,
       "bump-patch-for-minor-pre-major": true,
       "draft": false,

.github/workflows/ci.yml

@@ -1,36 +1,103 @@
 ---
 name: CI
-on: push
+
+on:
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
 
 jobs:
-  build:
+  check-dist:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
-          node-version: 16
-          cache: "npm"
+          node-version-file: .node-version
+          cache: npm
       - run: npm ci
-      - name: Run build script
-        run: npm run build
-      - name: Verify no changes after build
+      - name: build dist/*
+        run: npm run bundle
+      - name: Compare Directories
+        id: diff
         run: |
-          git diff --exit-code
+          if [ ! -d dist/ ]; then
+            echo "Expected dist/ directory does not exist.  See status below:"
+            ls -la ./
+            exit 1
+          fi
+          if [ "$(git diff --ignore-space-at-eol --text dist/ | wc -l)" -gt "0" ]; then
+            echo "Detected uncommitted changes after build. See status below:"
+            git diff --ignore-space-at-eol --text dist/
+            exit 1
+          fi
+      - name: Upload Artifact
+        if: ${{ failure() && steps.diff.outcome == 'failure' }}
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        with:
+          name: dist
+          path: dist/
+
+  lint:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: read
+      statuses: write
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+        with:
+          node-version-file: .node-version
+          cache: npm
+      - run: npm ci
+      - run: npm run lint
+
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+        with:
+          node-version-file: .node-version
+          cache: npm
+      - run: npm ci
+      - run: npm run ci-test
 
   release-please:
     runs-on: ubuntu-latest
-    if: github.ref == 'refs/heads/main'
+    if: ${{ github.ref == 'refs/heads/main' }}
+    needs: [check-dist]
+    outputs:
+      release_created: ${{ steps.release-please.outputs.release_created }}
+      major: ${{ steps.release-please.outputs.major }}
+      minor: ${{ steps.release-please.outputs.minor }}
     steps:
-      - uses: jimeh/release-please-manifest-action@v1
-        id: release
+      - uses: jimeh/release-please-manifest-action@84f33fd2828210488c36f3e0a7e3209252d2ae7d # v3.0.0
+        id: release-please
         with:
           app-id: ${{ secrets.RELEASE_BOT_APP_ID }}
           private-key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }}
-      - name: MAJOR and MAJOR.MINOR tags
-        if: ${{ steps.release.outputs.release_created }}
-        uses: jimeh/update-tags-action@main
+
+  release-tags:
+    runs-on: ubuntu-latest
+    needs: release-please
+    if: ${{ needs.release-please.outputs.release_created }}
+    permissions:
+      contents: write
+    steps:
+      - uses: jimeh/update-tags-action@e58fa0f2f874a12bf0eb90ef8ab4256808c0f373 # v1.0.1
         with:
           tags: |
-            v${{ steps.release.outputs.major }}
-            v${{ steps.release.outputs.major }}.${{ steps.release.outputs.minor }}
+            v${{ needs.release-please.outputs.major }}
+            v${{ needs.release-please.outputs.major }}.${{ needs.release-please.outputs.minor }}

.github/workflows/licensed.yml

@@ -0,0 +1,54 @@
+# This workflow checks the statuses of cached dependencies used in this action
+# with the help of the Licensed tool. If any licenses are invalid or missing,
+# this workflow will fail. See: https://github.com/licensee/licensed
+
+name: Licensed
+
+on:
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  check-licenses:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+        with:
+          node-version-file: .node-version
+          cache: npm
+      - run: npm ci
+      - uses: ruby/setup-ruby@d5126b9b3579e429dd52e51e68624dda2e05be25 # v1.267.0 # v1.266.0
+        with:
+          ruby-version: ruby
+          bundler-cache: true
+
+      # If this is a workflow_dispatch event, update the cached licenses.
+      - if: ${{ github.event_name == 'workflow_dispatch' }}
+        name: Update Licenses
+        id: update-licenses
+        run: bin/licensed cache
+
+      # Then, commit the updated licenses to the repository.
+      - if: ${{ github.event_name == 'workflow_dispatch' }}
+        name: Commit Licenses
+        id: commit-licenses
+        run: |
+          git config --local user.email "licensed-ci@users.noreply.github.com"
+          git config --local user.name "licensed-ci"
+          git add .
+          git commit -m "Auto-update license files"
+          git push
+
+      # Last, check the status of the cached licenses.
+      - name: Check Licenses
+        id: check-licenses
+        run: bin/licensed status

.gitignore

@@ -1,2 +1,105 @@
-.tool-versions
-node_modules/*
+# Dependency directory
+node_modules
+
+# Rest pulled from https://github.com/github/gitignore/blob/master/Node.gitignore
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+
+# Avoid locking Licensed to exact version.
+Gemfile.lock
+
+# Diagnostic reports (https://nodejs.org/api/report.html)
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+
+# Runtime data
+pids
+*.pid
+*.seed
+*.pid.lock
+
+# Directory for instrumented libs generated by jscoverage/JSCover
+lib-cov
+
+# Coverage directory used by tools like istanbul
+coverage
+*.lcov
+
+# nyc test coverage
+.nyc_output
+
+# Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
+.grunt
+
+# Bower dependency directory (https://bower.io/)
+bower_components
+
+# node-waf configuration
+.lock-wscript
+
+# Compiled binary addons (https://nodejs.org/api/addons.html)
+build/Release
+
+# Dependency directories
+jspm_packages/
+
+# TypeScript v1 declaration files
+typings/
+
+# TypeScript cache
+*.tsbuildinfo
+
+# Optional npm cache directory
+.npm
+
+# Optional eslint cache
+.eslintcache
+
+# Optional REPL history
+.node_repl_history
+
+# Output of 'npm pack'
+*.tgz
+
+# Yarn Integrity file
+.yarn-integrity
+
+# dotenv environment variables file
+.env
+.env.test
+
+# parcel-bundler cache (https://parceljs.org/)
+.cache
+
+# next.js build output
+.next
+
+# nuxt.js build output
+.nuxt
+
+# vuepress build output
+.vuepress/dist
+
+# Serverless directories
+.serverless/
+
+# FuseBox cache
+.fusebox/
+
+# DynamoDB Local files
+.dynamodb/
+
+# OS metadata
+.DS_Store
+Thumbs.db
+
+# Ignore built ts files
+__tests__/runner/*
+
+# IDE files
+.idea
+*.code-workspace

.licensed.yml

@@ -0,0 +1,13 @@
+# See: https://github.com/licensee/licensed/blob/main/docs/configuration.md
+
+sources:
+  npm: true
+
+allowed:
+  - apache-2.0
+  - bsd-2-clause
+  - bsd-3-clause
+  - isc
+  - mit
+  - cc0-1.0
+  - other

.licenses/npm/@actions/core.dep.yml

@@ -0,0 +1,20 @@
+---
+name: "@actions/core"
+version: 1.11.1
+type: npm
+summary: Actions core lib
+homepage: https://github.com/actions/toolkit/tree/main/packages/core
+license: mit
+licenses:
+- sources: LICENSE.md
+  text: |-
+    The MIT License (MIT)
+
+    Copyright 2019 GitHub
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+notices: []

.licenses/npm/@actions/exec.dep.yml

@@ -0,0 +1,20 @@
+---
+name: "@actions/exec"
+version: 1.1.1
+type: npm
+summary: Actions exec lib
+homepage: https://github.com/actions/toolkit/tree/main/packages/exec
+license: mit
+licenses:
+- sources: LICENSE.md
+  text: |-
+    The MIT License (MIT)
+
+    Copyright 2019 GitHub
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+notices: []

.licenses/npm/@actions/github.dep.yml

@@ -0,0 +1,20 @@
+---
+name: "@actions/github"
+version: 6.0.1
+type: npm
+summary: Actions github lib
+homepage: https://github.com/actions/toolkit/tree/main/packages/github
+license: mit
+licenses:
+- sources: LICENSE.md
+  text: |-
+    The MIT License (MIT)
+
+    Copyright 2019 GitHub
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+notices: []

.licenses/npm/@actions/http-client.dep.yml

@@ -0,0 +1,32 @@
+---
+name: "@actions/http-client"
+version: 2.2.3
+type: npm
+summary: Actions Http Client
+homepage: https://github.com/actions/toolkit/tree/main/packages/http-client
+license: other
+licenses:
+- sources: LICENSE
+  text: |
+    Actions Http Client for Node.js
+
+    Copyright (c) GitHub, Inc.
+
+    All rights reserved.
+
+    MIT License
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy of this software and
+    associated documentation files (the "Software"), to deal in the Software without restriction,
+    including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense,
+    and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so,
+    subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED *AS IS*, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT
+    LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN
+    NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+    WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+    SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+notices: []

.licenses/npm/@actions/io.dep.yml

@@ -0,0 +1,20 @@
+---
+name: "@actions/io"
+version: 1.1.3
+type: npm
+summary: Actions io lib
+homepage: https://github.com/actions/toolkit/tree/main/packages/io
+license: mit
+licenses:
+- sources: LICENSE.md
+  text: |-
+    The MIT License (MIT)
+
+    Copyright 2019 GitHub
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+notices: []

.licenses/npm/@fastify/busboy.dep.yml

@@ -0,0 +1,30 @@
+---
+name: "@fastify/busboy"
+version: 2.1.1
+type: npm
+summary: A streaming parser for HTML form data for node.js
+homepage:
+license: mit
+licenses:
+- sources: LICENSE
+  text: |-
+    Copyright Brian White. All rights reserved.
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to
+    deal in the Software without restriction, including without limitation the
+    rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+    sell copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in
+    all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+    FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+    IN THE SOFTWARE.
+notices: []

.licenses/npm/@octokit/auth-token.dep.yml

@@ -0,0 +1,34 @@
+---
+name: "@octokit/auth-token"
+version: 4.0.0
+type: npm
+summary: GitHub API token authentication for browsers and Node.js
+homepage:
+license: mit
+licenses:
+- sources: LICENSE
+  text: |
+    The MIT License
+
+    Copyright (c) 2019 Octokit contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in
+    all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+    THE SOFTWARE.
+- sources: README.md
+  text: "[MIT](LICENSE)"
+notices: []

.licenses/npm/@octokit/core.dep.yml

@@ -0,0 +1,34 @@
+---
+name: "@octokit/core"
+version: 5.2.2
+type: npm
+summary: Extendable client for GitHub's REST & GraphQL APIs
+homepage:
+license: mit
+licenses:
+- sources: LICENSE
+  text: |
+    The MIT License
+
+    Copyright (c) 2019 Octokit contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in
+    all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+    THE SOFTWARE.
+- sources: README.md
+  text: "[MIT](LICENSE)"
+notices: []

.licenses/npm/@octokit/endpoint.dep.yml

@@ -0,0 +1,34 @@
+---
+name: "@octokit/endpoint"
+version: 9.0.6
+type: npm
+summary: Turns REST API endpoints into generic request options
+homepage:
+license: mit
+licenses:
+- sources: LICENSE
+  text: |
+    The MIT License
+
+    Copyright (c) 2018 Octokit contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in
+    all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+    THE SOFTWARE.
+- sources: README.md
+  text: "[MIT](LICENSE)"
+notices: []

.licenses/npm/@octokit/graphql.dep.yml

@@ -0,0 +1,34 @@
+---
+name: "@octokit/graphql"
+version: 7.1.1
+type: npm
+summary: GitHub GraphQL API client for browsers and Node
+homepage:
+license: mit
+licenses:
+- sources: LICENSE
+  text: |
+    The MIT License
+
+    Copyright (c) 2018 Octokit contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in
+    all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+    THE SOFTWARE.
+- sources: README.md
+  text: "[MIT](LICENSE)"
+notices: []

.licenses/npm/@octokit/openapi-types-20.0.0.dep.yml

@@ -0,0 +1,20 @@
+---
+name: "@octokit/openapi-types"
+version: 20.0.0
+type: npm
+summary: Generated TypeScript definitions based on GitHub's OpenAPI spec for api.github.com
+homepage:
+license: mit
+licenses:
+- sources: LICENSE
+  text: |-
+    Copyright 2020 Gregor Martynus
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+- sources: README.md
+  text: "[MIT](LICENSE)"
+notices: []

.licenses/npm/@octokit/openapi-types-24.2.0.dep.yml

@@ -0,0 +1,20 @@
+---
+name: "@octokit/openapi-types"
+version: 24.2.0
+type: npm
+summary: Generated TypeScript definitions based on GitHub's OpenAPI spec for api.github.com
+homepage:
+license: mit
+licenses:
+- sources: LICENSE
+  text: |-
+    Copyright 2020 Gregor Martynus
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+- sources: README.md
+  text: "[MIT](LICENSE)"
+notices: []

.licenses/npm/@octokit/plugin-paginate-rest.dep.yml

@@ -0,0 +1,20 @@
+---
+name: "@octokit/plugin-paginate-rest"
+version: 9.2.2
+type: npm
+summary: Octokit plugin to paginate REST API endpoint responses
+homepage:
+license: mit
+licenses:
+- sources: LICENSE
+  text: |
+    MIT License Copyright (c) 2019 Octokit contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice (including the next paragraph) shall be included in all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+- sources: README.md
+  text: "[MIT](LICENSE)"
+notices: []

.licenses/npm/@octokit/plugin-rest-endpoint-methods.dep.yml

@@ -0,0 +1,20 @@
+---
+name: "@octokit/plugin-rest-endpoint-methods"
+version: 10.4.1
+type: npm
+summary: Octokit plugin adding one method for all of api.github.com REST API endpoints
+homepage:
+license: mit
+licenses:
+- sources: LICENSE
+  text: |
+    MIT License Copyright (c) 2019 Octokit contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice (including the next paragraph) shall be included in all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+- sources: README.md
+  text: "[MIT](LICENSE)"
+notices: []

.licenses/npm/@octokit/request-error.dep.yml

@@ -0,0 +1,34 @@
+---
+name: "@octokit/request-error"
+version: 5.1.1
+type: npm
+summary: Error class for Octokit request errors
+homepage:
+license: mit
+licenses:
+- sources: LICENSE
+  text: |
+    The MIT License
+
+    Copyright (c) 2019 Octokit contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in
+    all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+    THE SOFTWARE.
+- sources: README.md
+  text: "[MIT](LICENSE)"
+notices: []

.licenses/npm/@octokit/request.dep.yml

@@ -0,0 +1,35 @@
+---
+name: "@octokit/request"
+version: 8.4.1
+type: npm
+summary: Send parameterized requests to GitHub's APIs with sensible defaults in browsers
+  and Node
+homepage:
+license: mit
+licenses:
+- sources: LICENSE
+  text: |
+    The MIT License
+
+    Copyright (c) 2018 Octokit contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in
+    all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+    THE SOFTWARE.
+- sources: README.md
+  text: "[MIT](LICENSE)"
+notices: []

.licenses/npm/@octokit/types-12.6.0.dep.yml

@@ -0,0 +1,20 @@
+---
+name: "@octokit/types"
+version: 12.6.0
+type: npm
+summary: Shared TypeScript definitions for Octokit projects
+homepage:
+license: mit
+licenses:
+- sources: LICENSE
+  text: |
+    MIT License Copyright (c) 2019 Octokit contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice (including the next paragraph) shall be included in all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+- sources: README.md
+  text: "[MIT](LICENSE)"
+notices: []

.licenses/npm/@octokit/types-13.10.0.dep.yml

@@ -0,0 +1,20 @@
+---
+name: "@octokit/types"
+version: 13.10.0
+type: npm
+summary: Shared TypeScript definitions for Octokit projects
+homepage:
+license: mit
+licenses:
+- sources: LICENSE
+  text: |
+    MIT License Copyright (c) 2019 Octokit contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice (including the next paragraph) shall be included in all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+- sources: README.md
+  text: "[MIT](LICENSE)"
+notices: []

.licenses/npm/before-after-hook.dep.yml

@@ -0,0 +1,214 @@
+---
+name: before-after-hook
+version: 2.2.3
+type: npm
+summary: asynchronous before/error/after hooks for internal functionality
+homepage:
+license: apache-2.0
+licenses:
+- sources: LICENSE
+  text: |2
+                                     Apache License
+                               Version 2.0, January 2004
+                            http://www.apache.org/licenses/
+
+       TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+       1. Definitions.
+
+          "License" shall mean the terms and conditions for use, reproduction,
+          and distribution as defined by Sections 1 through 9 of this document.
+
+          "Licensor" shall mean the copyright owner or entity authorized by
+          the copyright owner that is granting the License.
+
+          "Legal Entity" shall mean the union of the acting entity and all
+          other entities that control, are controlled by, or are under common
+          control with that entity. For the purposes of this definition,
+          "control" means (i) the power, direct or indirect, to cause the
+          direction or management of such entity, whether by contract or
+          otherwise, or (ii) ownership of fifty percent (50%) or more of the
+          outstanding shares, or (iii) beneficial ownership of such entity.
+
+          "You" (or "Your") shall mean an individual or Legal Entity
+          exercising permissions granted by this License.
+
+          "Source" form shall mean the preferred form for making modifications,
+          including but not limited to software source code, documentation
+          source, and configuration files.
+
+          "Object" form shall mean any form resulting from mechanical
+          transformation or translation of a Source form, including but
+          not limited to compiled object code, generated documentation,
+          and conversions to other media types.
+
+          "Work" shall mean the work of authorship, whether in Source or
+          Object form, made available under the License, as indicated by a
+          copyright notice that is included in or attached to the work
+          (an example is provided in the Appendix below).
+
+          "Derivative Works" shall mean any work, whether in Source or Object
+          form, that is based on (or derived from) the Work and for which the
+          editorial revisions, annotations, elaborations, or other modifications
+          represent, as a whole, an original work of authorship. For the purposes
+          of this License, Derivative Works shall not include works that remain
+          separable from, or merely link (or bind by name) to the interfaces of,
+          the Work and Derivative Works thereof.
+
+          "Contribution" shall mean any work of authorship, including
+          the original version of the Work and any modifications or additions
+          to that Work or Derivative Works thereof, that is intentionally
+          submitted to Licensor for inclusion in the Work by the copyright owner
+          or by an individual or Legal Entity authorized to submit on behalf of
+          the copyright owner. For the purposes of this definition, "submitted"
+          means any form of electronic, verbal, or written communication sent
+          to the Licensor or its representatives, including but not limited to
+          communication on electronic mailing lists, source code control systems,
+          and issue tracking systems that are managed by, or on behalf of, the
+          Licensor for the purpose of discussing and improving the Work, but
+          excluding communication that is conspicuously marked or otherwise
+          designated in writing by the copyright owner as "Not a Contribution."
+
+          "Contributor" shall mean Licensor and any individual or Legal Entity
+          on behalf of whom a Contribution has been received by Licensor and
+          subsequently incorporated within the Work.
+
+       2. Grant of Copyright License. Subject to the terms and conditions of
+          this License, each Contributor hereby grants to You a perpetual,
+          worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+          copyright license to reproduce, prepare Derivative Works of,
+          publicly display, publicly perform, sublicense, and distribute the
+          Work and such Derivative Works in Source or Object form.
+
+       3. Grant of Patent License. Subject to the terms and conditions of
+          this License, each Contributor hereby grants to You a perpetual,
+          worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+          (except as stated in this section) patent license to make, have made,
+          use, offer to sell, sell, import, and otherwise transfer the Work,
+          where such license applies only to those patent claims licensable
+          by such Contributor that are necessarily infringed by their
+          Contribution(s) alone or by combination of their Contribution(s)
+          with the Work to which such Contribution(s) was submitted. If You
+          institute patent litigation against any entity (including a
+          cross-claim or counterclaim in a lawsuit) alleging that the Work
+          or a Contribution incorporated within the Work constitutes direct
+          or contributory patent infringement, then any patent licenses
+          granted to You under this License for that Work shall terminate
+          as of the date such litigation is filed.
+
+       4. Redistribution. You may reproduce and distribute copies of the
+          Work or Derivative Works thereof in any medium, with or without
+          modifications, and in Source or Object form, provided that You
+          meet the following conditions:
+
+          (a) You must give any other recipients of the Work or
+              Derivative Works a copy of this License; and
+
+          (b) You must cause any modified files to carry prominent notices
+              stating that You changed the files; and
+
+          (c) You must retain, in the Source form of any Derivative Works
+              that You distribute, all copyright, patent, trademark, and
+              attribution notices from the Source form of the Work,
+              excluding those notices that do not pertain to any part of
+              the Derivative Works; and
+
+          (d) If the Work includes a "NOTICE" text file as part of its
+              distribution, then any Derivative Works that You distribute must
+              include a readable copy of the attribution notices contained
+              within such NOTICE file, excluding those notices that do not
+              pertain to any part of the Derivative Works, in at least one
+              of the following places: within a NOTICE text file distributed
+              as part of the Derivative Works; within the Source form or
+              documentation, if provided along with the Derivative Works; or,
+              within a display generated by the Derivative Works, if and
+              wherever such third-party notices normally appear. The contents
+              of the NOTICE file are for informational purposes only and
+              do not modify the License. You may add Your own attribution
+              notices within Derivative Works that You distribute, alongside
+              or as an addendum to the NOTICE text from the Work, provided
+              that such additional attribution notices cannot be construed
+              as modifying the License.
+
+          You may add Your own copyright statement to Your modifications and
+          may provide additional or different license terms and conditions
+          for use, reproduction, or distribution of Your modifications, or
+          for any such Derivative Works as a whole, provided Your use,
+          reproduction, and distribution of the Work otherwise complies with
+          the conditions stated in this License.
+
+       5. Submission of Contributions. Unless You explicitly state otherwise,
+          any Contribution intentionally submitted for inclusion in the Work
+          by You to the Licensor shall be under the terms and conditions of
+          this License, without any additional terms or conditions.
+          Notwithstanding the above, nothing herein shall supersede or modify
+          the terms of any separate license agreement you may have executed
+          with Licensor regarding such Contributions.
+
+       6. Trademarks. This License does not grant permission to use the trade
+          names, trademarks, service marks, or product names of the Licensor,
+          except as required for reasonable and customary use in describing the
+          origin of the Work and reproducing the content of the NOTICE file.
+
+       7. Disclaimer of Warranty. Unless required by applicable law or
+          agreed to in writing, Licensor provides the Work (and each
+          Contributor provides its Contributions) on an "AS IS" BASIS,
+          WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+          implied, including, without limitation, any warranties or conditions
+          of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+          PARTICULAR PURPOSE. You are solely responsible for determining the
+          appropriateness of using or redistributing the Work and assume any
+          risks associated with Your exercise of permissions under this License.
+
+       8. Limitation of Liability. In no event and under no legal theory,
+          whether in tort (including negligence), contract, or otherwise,
+          unless required by applicable law (such as deliberate and grossly
+          negligent acts) or agreed to in writing, shall any Contributor be
+          liable to You for damages, including any direct, indirect, special,
+          incidental, or consequential damages of any character arising as a
+          result of this License or out of the use or inability to use the
+          Work (including but not limited to damages for loss of goodwill,
+          work stoppage, computer failure or malfunction, or any and all
+          other commercial damages or losses), even if such Contributor
+          has been advised of the possibility of such damages.
+
+       9. Accepting Warranty or Additional Liability. While redistributing
+          the Work or Derivative Works thereof, You may choose to offer,
+          and charge a fee for, acceptance of support, warranty, indemnity,
+          or other liability obligations and/or rights consistent with this
+          License. However, in accepting such obligations, You may act only
+          on Your own behalf and on Your sole responsibility, not on behalf
+          of any other Contributor, and only if You agree to indemnify,
+          defend, and hold each Contributor harmless for any liability
+          incurred by, or claims asserted against, such Contributor by reason
+          of your accepting any such warranty or additional liability.
+
+       END OF TERMS AND CONDITIONS
+
+       APPENDIX: How to apply the Apache License to your work.
+
+          To apply the Apache License to your work, attach the following
+          boilerplate notice, with the fields enclosed by brackets "{}"
+          replaced with your own identifying information. (Don't include
+          the brackets!)  The text should be enclosed in the appropriate
+          comment syntax for the file format. We also recommend that a
+          file or class name and description of purpose be included on the
+          same "printed page" as the copyright notice for easier
+          identification within third-party archives.
+
+       Copyright 2018 Gregor Martynus and other contributors.
+
+       Licensed under the Apache License, Version 2.0 (the "License");
+       you may not use this file except in compliance with the License.
+       You may obtain a copy of the License at
+
+           http://www.apache.org/licenses/LICENSE-2.0
+
+       Unless required by applicable law or agreed to in writing, software
+       distributed under the License is distributed on an "AS IS" BASIS,
+       WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+       See the License for the specific language governing permissions and
+       limitations under the License.
+- sources: README.md
+  text: "[Apache 2.0](LICENSE)"
+notices: []

.licenses/npm/csv-parse.dep.yml

@@ -0,0 +1,32 @@
+---
+name: csv-parse
+version: 6.1.0
+type: npm
+summary: CSV parsing implementing the Node.js `stream.Transform` API
+homepage: https://csv.js.org/parse
+license: mit
+licenses:
+- sources: LICENSE
+  text: |
+    The MIT License (MIT)
+
+    Copyright (c) 2010 Adaltas
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all
+    copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE.
+notices: []

.licenses/npm/deprecation.dep.yml

@@ -0,0 +1,28 @@
+---
+name: deprecation
+version: 2.3.1
+type: npm
+summary: Log a deprecation message with stack
+homepage:
+license: isc
+licenses:
+- sources: LICENSE
+  text: |
+    The ISC License
+
+    Copyright (c) Gregor Martynus and contributors
+
+    Permission to use, copy, modify, and/or distribute this software for any
+    purpose with or without fee is hereby granted, provided that the above
+    copyright notice and this permission notice appear in all copies.
+
+    THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+    WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+    MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+    ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+    IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+- sources: README.md
+  text: "[ISC](LICENSE)"
+notices: []

.licenses/npm/once.dep.yml

@@ -0,0 +1,26 @@
+---
+name: once
+version: 1.4.0
+type: npm
+summary: Run a function exactly one time
+homepage:
+license: isc
+licenses:
+- sources: LICENSE
+  text: |
+    The ISC License
+
+    Copyright (c) Isaac Z. Schlueter and Contributors
+
+    Permission to use, copy, modify, and/or distribute this software for any
+    purpose with or without fee is hereby granted, provided that the above
+    copyright notice and this permission notice appear in all copies.
+
+    THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+    WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+    MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+    ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+    IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+notices: []

.licenses/npm/tunnel.dep.yml

@@ -0,0 +1,35 @@
+---
+name: tunnel
+version: 0.0.6
+type: npm
+summary: Node HTTP/HTTPS Agents for tunneling proxies
+homepage: https://github.com/koichik/node-tunnel/
+license: mit
+licenses:
+- sources: LICENSE
+  text: |
+    The MIT License (MIT)
+
+    Copyright (c) 2012 Koichi Kobayashi
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in
+    all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+    THE SOFTWARE.
+- sources: README.md
+  text: Licensed under the [MIT](https://github.com/koichik/node-tunnel/blob/master/LICENSE)
+    license.
+notices: []

.licenses/npm/undici.dep.yml

@@ -0,0 +1,34 @@
+---
+name: undici
+version: 5.29.0
+type: npm
+summary: An HTTP/1.1 client, written from scratch for Node.js
+homepage: https://undici.nodejs.org
+license: mit
+licenses:
+- sources: LICENSE
+  text: |
+    MIT License
+
+    Copyright (c) Matteo Collina and Undici contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all
+    copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE.
+- sources: README.md
+  text: MIT
+notices: []

.licenses/npm/universal-user-agent.dep.yml

@@ -0,0 +1,20 @@
+---
+name: universal-user-agent
+version: 6.0.1
+type: npm
+summary: Get a user agent string in both browser and node
+homepage:
+license: isc
+licenses:
+- sources: LICENSE.md
+  text: |
+    # [ISC License](https://spdx.org/licenses/ISC)
+
+    Copyright (c) 2018, Gregor Martynus (https://github.com/gr2m)
+
+    Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.
+
+    THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+- sources: README.md
+  text: "[ISC](LICENSE.md)"
+notices: []

.licenses/npm/wrappy.dep.yml

@@ -0,0 +1,26 @@
+---
+name: wrappy
+version: 1.0.2
+type: npm
+summary: Callback wrapping utility
+homepage: https://github.com/npm/wrappy
+license: isc
+licenses:
+- sources: LICENSE
+  text: |
+    The ISC License
+
+    Copyright (c) Isaac Z. Schlueter and Contributors
+
+    Permission to use, copy, modify, and/or distribute this software for any
+    purpose with or without fee is hereby granted, provided that the above
+    copyright notice and this permission notice appear in all copies.
+
+    THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+    WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+    MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+    ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+    IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+notices: []

.node-version

@@ -0,0 +1 @@
+24.4.0

.prettierignore

@@ -0,0 +1,5 @@
+.DS_Store
+.licenses/
+dist/
+node_modules/
+coverage/

.prettierrc.yml

@@ -0,0 +1,21 @@
+# See: https://prettier.io/docs/en/configuration
+
+printWidth: 80
+tabWidth: 2
+useTabs: false
+semi: false
+singleQuote: true
+quoteProps: as-needed
+jsxSingleQuote: false
+trailingComma: none
+bracketSpacing: true
+bracketSameLine: true
+arrowParens: always
+proseWrap: always
+htmlWhitespaceSensitivity: css
+endOfLine: lf
+
+overrides:
+  - files: ["*.yml", "*.yaml"]
+    options:
+      singleQuote: false

.vscode/extensions.json

@@ -0,0 +1,10 @@
+{
+  // See https://go.microsoft.com/fwlink/?LinkId=827846 to learn about workspace recommendations.
+  // Extension identifier format: ${publisher}.${name}. Example: vscode.csharp
+  // List of extensions which should be recommended for users of this workspace.
+  "recommendations": [
+    // Allows for use of settings.shared.json and settings.local.json.
+    "swellaby.workspace-config-plus",
+    "esbenp.prettier-vscode"
+  ]
+}

.vscode/settings.shared.json

@@ -0,0 +1,5 @@
+{
+  "[typescript]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode"
+  }
+}

AGENTS.md

@@ -0,0 +1,243 @@
+---
+alwaysApply: true
+---
+
+# AGENTS.md
+
+This file provides guidance to LLM agents when working with code in this
+repository.
+
+## Project Overview
+
+GitHub Action that creates/updates Git tags in repositories. Commonly used to
+maintain major (`v1`) and minor (`v1.2`) version tags pointing to the latest
+patch release (`v1.2.3`). The action uses itself in CI to manage its own version
+tags.
+
+**Important**: TypeScript sources in `src/` are transpiled to JavaScript in
+`dist/`. Both are checked into the repository. A CI workflow verifies `dist/` is
+up-to-date. Always run `npm run package` (or `npm run bundle`) after modifying
+`src/` files.
+
+## Development Commands
+
+Package manager: npm (Node 24 via mise.toml)
+
+```bash
+# Install dependencies
+npm install
+
+# Development workflow
+npm run format:write  # Format code with Prettier (80 char lines)
+npm run lint          # ESLint check
+npm run test          # Run Jest tests
+npm run package       # Build src/index.ts -> dist/index.js via Rollup
+npm run bundle        # Alias: format + package
+
+# Run a single test file
+NODE_OPTIONS=--experimental-vm-modules NODE_NO_WARNINGS=1 npx jest __tests__/main.test.ts
+
+# CI variants (suppress warnings)
+npm run ci-test       # Run tests in CI mode
+
+# Full pre-commit check
+npm run all  # format → lint → test → coverage → update-readme → package
+
+# Update README from action.yml
+npm run update-readme
+
+# Watch mode
+npm run package:watch # Auto-rebuild on changes
+```
+
+## Code Architecture
+
+### Source Structure
+
+- **[src/index.ts](src/index.ts)**: Entrypoint that imports and runs `main()`
+- **[src/main.ts](src/main.ts)**: Core orchestration logic. Exports `run()`
+  function that coordinates input parsing, tag processing, and output setting
+- **[src/inputs.ts](src/inputs.ts)**: Input parsing and validation. Exports
+  `getInputs()` that reads action inputs and `Inputs` interface
+- **[src/tags.ts](src/tags.ts)**: Tag parsing and processing logic:
+  - `parseTagsInput()`: Parses CSV/newline input, handles `tag:ref` syntax,
+    pre-resolves all unique refs to SHAs in parallel (optimization)
+  - `processTag()`: Creates/updates individual tags based on `when_exists` mode
+  - `resolveRefToSha()`: Converts git refs to commit SHAs (private helper)
+- **[action.yml](action.yml)**: GitHub Action metadata (inputs/outputs)
+- **[\_\_fixtures\_\_/](__fixtures__)**: Mock implementations of @actions/core,
+  @actions/github, and csv-parse for testing
+
+### Tag Input Parsing
+
+Uses `csv-parse/sync` to handle both CSV and newline-delimited formats. Supports
+per-tag ref overrides: `v1:main` tags `v1` to `main` branch.
+
+### Tag Update Logic
+
+1. Parse and validate inputs ([inputs.ts](src/inputs.ts))
+2. Parse tags and extract per-tag refs ([tags.ts](src/tags.ts):parseTagsInput)
+3. Pre-resolve all unique refs to SHAs in parallel (optimization)
+4. For each tag ([tags.ts](src/tags.ts):processTag):
+   - If exists + update mode: Update if SHA differs
+   - If exists + skip mode: Skip silently
+   - If exists + fail mode: Fail action
+   - If doesn't exist (404): Create it
+5. Set outputs with created/updated tag lists ([main.ts](src/main.ts))
+
+### Testing Patterns
+
+Uses Jest with ESM support. Key pattern for mocking ESM modules:
+
+```typescript
+// Declare mocks BEFORE importing tested module
+jest.unstable_mockModule('@actions/core', () => core)
+
+// Dynamic import AFTER mocks
+const { run } = await import('../src/main.ts')
+```
+
+Mock fixtures live in `__fixtures__/` (e.g., `core.ts` mocks @actions/core).
+
+### Testing Best Practices
+
+- Consider edge cases as well as the main success path
+- Tests live in `__tests__/` directory, fixtures in `__fixtures__/`
+- Run tests after any refactoring to ensure coverage requirements are met
+- Use `@actions/core` package for logging (not `console`) for GitHub Actions
+  compatibility
+
+## TypeScript Configuration
+
+- Target: ES2022, NodeNext module resolution
+- Strict mode enabled throughout
+- Build outputs ESM to dist/index.js with external sourcemaps
+- Line length: 80 chars (enforced by Prettier)
+
+## CI/CD
+
+`.github/workflows/ci.yml` runs:
+
+1. **check-dist**: Verify bundled dist/ matches source
+2. **lint**: ESLint with GitHub formatter
+3. **release-please**: Semantic versioning releases
+4. **release-tags**: Self-referential tag updates after release
+
+## Release Process
+
+This project uses [release-please](https://github.com/googleapis/release-please)
+to automate versioning and releases based on
+[Conventional Commits](https://www.conventionalcommits.org/).
+
+### How It Works
+
+1. **Commit with conventional format**: All commits must follow the Conventional
+   Commits specification (e.g., `feat:`, `fix:`, `chore:`, `docs:`)
+2. **Release PR is created**: release-please automatically opens/updates a
+   "Release PR" that:
+   - Proposes the next version number based on commit types
+   - Updates `CHANGELOG.md` with all changes since last release
+   - Updates version numbers in `package.json` and other files
+3. **Review the Release PR**: Check the proposed version bump and changelog
+   entries are correct
+4. **Merge to release**: Merging the Release PR triggers:
+   - Creation of a GitHub Release with the changelog
+   - Publishing of a new Git tag
+   - Execution of the `release-tags` workflow to update major/minor version tags
+
+### Conventional Commit Format
+
+All commit messages must follow this format:
+
+```text
+<type>[optional scope]: <description>
+
+[optional body]
+
+[optional footer(s)]
+```
+
+**Common types:**
+
+- `feat:` - New feature (triggers minor version bump)
+- `fix:` - Bug fix (triggers patch version bump)
+- `docs:` - Documentation changes only
+- `chore:` - Maintenance tasks, dependency updates
+- `refactor:` - Code refactoring without feature/behavior changes
+- `test:` - Adding or updating tests
+- `ci:` - CI/CD configuration changes
+- `BREAKING CHANGE:` - In footer, triggers major version bump
+
+**Examples:**
+
+```text
+feat: add support for multiple tag formats
+
+fix: handle 404 errors when tag doesn't exist
+
+docs: update README with new examples
+
+chore(deps): bump @actions/core to v1.10.0
+```
+
+## Action Interface
+
+**Inputs:**
+
+- `tags`: CSV/newline list, supports `tag:ref` syntax
+- `ref`: SHA/ref to tag (default: current commit)
+- `when_exists`: update|skip|fail (default: update)
+- `github_token`: Auth token (default: github.token)
+
+**Outputs:**
+
+- `tags`: All created/updated tags
+- `created`: Newly created tags
+- `updated`: Updated tags
+
+## Code Style and Guidelines
+
+- 80 character line length (Prettier)
+- No semicolons, single quotes, no trailing commas
+- Explicit function return types
+- Type imports: `import type * as core from '@actions/core'`
+- Error handling via try-catch with `core.setFailed()`
+- 404 errors specifically caught to distinguish "tag doesn't exist" from other
+  errors
+- Use descriptive variable and function names
+- Keep functions focused and manageable
+- Document functions with JSDoc comments
+- Follow DRY principles and avoid unnecessary complexity
+- Maintain consistency with existing patterns and style
+- Focus comments on explaining "why", not "what" (avoid basic unnecessary
+  comments)
+- Use TypeScript's type system for safety and clarity
+
+## Pull Request Guidelines
+
+When creating a pull request (PR), please ensure that:
+
+- Keep changes focused and minimal (avoid large changes, or consider breaking
+  them into separate, smaller PRs)
+- Formatting checks pass
+- Linting checks pass
+- Unit tests pass and coverage requirements are met
+- The action has been transpiled to JavaScript and the `dist` directory is
+  up-to-date with the latest changes in the `src` directory
+- If necessary, the `README.md` file is updated to reflect any changes in
+  functionality or usage
+
+The body of the PR should include:
+
+- A summary of the changes
+- A special note of any changes to dependencies
+- A link to any relevant issues or discussions
+- Any additional context that may be helpful for reviewers
+
+## Code Review Guidelines
+
+When performing a code review, please follow these guidelines:
+
+- If there are changes that modify the functionality/usage of the action,
+  validate that there are changes in the `README.md` file that document the new
+  or modified functionality

CHANGELOG.md

@@ -1,8 +1,30 @@
 # Changelog
 
-## 0.0.1 (2023-05-18)
+## [2.0.0](https://github.com/jimeh/update-tags-action/compare/v1.0.1...v2.0.0) (2025-10-27)
 
 
 ### Features
 
-* initial implementation ([0185b10](https://github.com/jimeh/update-tags-action/commit/0185b100ff1752ce06ade4b147b6befb8c37e525))
+* **action:** complete TypeScript rewrite with comprehensive test suite ([733ded1](https://github.com/jimeh/update-tags-action/commit/733ded1f0b9727d99d299cd42258479b4e64b27d))
+
+## [1.0.1](https://github.com/jimeh/update-tags-action/compare/v1.0.0...v1.0.1) (2023-05-18)
+
+### Bug Fixes
+
+- **action:** tweak metadata for GitHub Marketplace
+  ([#4](https://github.com/jimeh/update-tags-action/issues/4))
+  ([b74b3c7](https://github.com/jimeh/update-tags-action/commit/b74b3c77fc20bdfd61e29dbf680a9f84612e5fda))
+
+## [1.0.0](https://github.com/jimeh/update-tags-action/compare/v0.0.1...v1.0.0) (2023-05-18)
+
+### Miscellaneous Chores
+
+- **release:** bump version to 1.0.0
+  ([d4f686e](https://github.com/jimeh/update-tags-action/commit/d4f686ef9ff51ff4426907f89983bd286903c23e))
+
+## 0.0.1 (2023-05-18)
+
+### Features
+
+- initial implementation
+  ([0185b10](https://github.com/jimeh/update-tags-action/commit/0185b100ff1752ce06ade4b147b6befb8c37e525))

CLAUDE.md

@@ -0,0 +1 @@
+AGENTS.md

Gemfile

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+source "https://rubygems.org"
+
+gem "licensed", "~> 5"

LICENSE

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2023 Jim Myhrberg
+Copyright (c) 2025 Jim Myhrberg
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of
 this software and associated documentation files (the "Software"), to deal in

README.md

@@ -1,53 +1,64 @@
-<h1 align="center">
-  update-tags-action
-</h1>
+<div align="center">
 
-<p align="center">
-  <strong>
-    Create/update git tags via GitHub API.
-  </strong>
-</p>
+# update-tags-action
 
-<p align="center">
-  <a href="https://github.com/jimeh/update-tags-action/releases">
-    <img src="https://img.shields.io/github/v/tag/jimeh/update-tags-action?label=release" alt="GitHub tag (latest SemVer)">
-  </a>
-  <a href="https://github.com/jimeh/update-tags-action/issues">
-    <img src="https://img.shields.io/github/issues-raw/jimeh/update-tags-action.svg?style=flat&logo=github&logoColor=white" alt="GitHub issues">
-  </a>
-  <a href="https://github.com/jimeh/update-tags-action/pulls">
-    <img src="https://img.shields.io/github/issues-pr-raw/jimeh/update-tags-action.svg?style=flat&logo=github&logoColor=white" alt="GitHub pull requests">
-  </a>
-  <a href="https://github.com/jimeh/update-tags-action/blob/master/LICENSE">
-    <img src="https://img.shields.io/github/license/jimeh/update-tags-action.svg?style=flat" alt="License Status">
-  </a>
-</p>
+**Easily create/update one or more Git tags in a GitHub repository.**
 
-A simple action which makes it easy to create/update one or more tags on a
-GitHub repository.
+[![Latest Release](https://img.shields.io/github/release/jimeh/update-tags-action.svg)](https://github.com/jimeh/update-tags-action/releases)
+[![GitHub Issues](https://img.shields.io/github/issues/jimeh/update-tags-action.svg?logo=github&logoColor=white)](https://github.com/jimeh/update-tags-action/issues)
+[![GitHub Pull Requests](https://img.shields.io/github/issues-pr/jimeh/update-tags-action.svg?logo=github&logoColor=white)](https://github.com/jimeh/update-tags-action/pulls)
+[![License](https://img.shields.io/github/license/jimeh/update-tags-action.svg)](https://github.com/jimeh/update-tags-action/blob/main/LICENSE)
+
+</div>
 
 Generally useful for moving major (`v1`) and minor (`v1.2`) tags to same commit
-as the latest `v1.x.x` tag. This action uses itself to move it's own major and
-minor tags.
+as the latest `v1.x.x` tag.
+
+This action
+[uses itself](https://github.com/jimeh/update-tags-action/blob/main/.github/workflows/ci.yml)
+to move its own major and minor tags.
 
 ## Examples
 
 ### Basic
 
+<!-- x-release-please-start-major -->
+
 ```yaml
-- uses: jimeh/update-tags-action@v0
+- uses: jimeh/update-tags-action@v2
   with:
     tags: v1,v1.2
 ```
 
 ```yaml
-- uses: jimeh/update-tags-action@v0
+- uses: jimeh/update-tags-action@v2
   with:
     tags: |
       v1
       v1.2
 ```
 
+<!-- x-release-please-end -->
+
+### Annotated Tags
+
+Create annotated tags with a custom message:
+
+```yaml
+- uses: jimeh/update-tags-action@v2
+  with:
+    tags: v1.0.0
+    annotation: |
+      Release version 1.0.0
+
+      This is a major release with new features and bug fixes.
+```
+
+Annotated tags in Git include metadata such as the tagger's name, email, date,
+and a message. They are stored as full objects in the Git database and are
+recommended for releases. If the `annotation` input is not provided (or is
+empty), lightweight tags will be created instead.
+
 ### With Release Please
 
 This example uses
@@ -56,34 +67,69 @@ but you can just as easily use the official
 [google-github-actions/release-please-action](https://github.com/google-github-actions/release-please-action)
 instead.
 
-```yaml
-name: Push
-on: push
+First you'll want the workflow setup to run on push:
 
+```yaml
+on: [push]
+```
+
+Then you'll want a release-please job which only runs on pushes to your `main`
+branch, and exposes relevant outputs from release please:
+
+```yaml
 jobs:
+  # [...]
   release-please:
     runs-on: ubuntu-latest
-    if: github.ref == 'refs/heads/main' || github.ref == 'refs/heads/master'
+    if: ${{ github.ref == 'refs/heads/main' }}
+    outputs:
+      release_created: ${{ steps.release-please.outputs.release_created }}
+      major: ${{ steps.release-please.outputs.major }}
+      minor: ${{ steps.release-please.outputs.minor }}
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
     steps:
-      - uses: jimeh/release-please-manifest-action@v1
+      - uses: jimeh/release-please-manifest-action@v3
         id: release-please
-      - uses: jimeh/update-tags-action@v0
+```
+
+And finally a job to create MAJOR and MINOR release tags, which only runs when
+release-please reports having created a release:
+
+<!-- x-release-please-start-major -->
+
+```yaml
+jobs:
+  # [...]
+  release-tags:
+    runs-on: ubuntu-latest
+    needs: release-please
+    if: ${{ needs.release-please.outputs.release_created }}
+    permissions:
+      contents: write
+    steps:
+      - uses: jimeh/update-tags-action@v2
         with:
           tags: |
-            v${{ steps.release-please.outputs.major }}
-            v${{ steps.release-please.outputs.major }}.${{ steps.release-please.outputs.minor }}
+            v${{ needs.release-please.outputs.major }}
+            v${{ needs.release-please.outputs.major }}.${{ needs.release-please.outputs.minor }}
 ```
 
+<!-- x-release-please-end -->
+
 <!-- action-docs-inputs -->
 
 ## Inputs
 
-| parameter    | description                                                                       | required | default             |
-| ------------ | --------------------------------------------------------------------------------- | -------- | ------------------- |
-| tags         | List/CSV of tags to create/update.                                                | `true`   |                     |
-| ref          | The SHA or ref to tag. Defaults to SHA of current commit.                         | `false`  | ${{ github.sha }}   |
-| when_exists  | What to do if the tag already exists. Must be one of 'update', 'skip', or 'fail'. | `false`  | update              |
-| github_token | The GitHub token to use for authentication.                                       | `false`  | ${{ github.token }} |
+| parameter    | description                                                                                                  | required | default             |
+| ------------ | ------------------------------------------------------------------------------------------------------------ | -------- | ------------------- |
+| tags         | List/CSV of tags to create/update.                                                                           | `true`   |                     |
+| ref          | The SHA or ref to tag. Defaults to SHA of current commit.                                                    | `false`  | ${{ github.sha }}   |
+| when_exists  | What to do if the tag already exists. Must be one of 'update', 'skip', or 'fail'.                            | `false`  | update              |
+| annotation   | Optional annotation message for the tag. If provided, creates an annotated tag instead of a lightweight tag. | `false`  |                     |
+| github_token | The GitHub token to use for authentication.                                                                  | `false`  | ${{ github.token }} |
 
 <!-- action-docs-inputs -->
 
@@ -98,3 +144,7 @@ jobs:
 | updated   | List of tags that were updated.         |
 
 <!-- action-docs-outputs -->
+
+## License
+
+[MIT](https://github.com/jimeh/update-tags-action/blob/main/LICENSE)

__fixtures__/core.ts

@@ -0,0 +1,10 @@
+import type * as core from '@actions/core'
+import { jest } from '@jest/globals'
+
+export const debug = jest.fn<typeof core.debug>()
+export const error = jest.fn<typeof core.error>()
+export const info = jest.fn<typeof core.info>()
+export const getInput = jest.fn<typeof core.getInput>()
+export const setOutput = jest.fn<typeof core.setOutput>()
+export const setFailed = jest.fn<typeof core.setFailed>()
+export const warning = jest.fn<typeof core.warning>()

__fixtures__/csv-parse.ts

@@ -0,0 +1,13 @@
+import { jest } from '@jest/globals'
+import { parse as realParse } from 'csv-parse/sync'
+
+export const parse = jest.fn()
+
+// Helper to reset to real implementation after jest.resetAllMocks()
+export const resetToRealImplementation = (): void => {
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  parse.mockImplementation(realParse as any)
+}
+
+// Initialize with real implementation
+resetToRealImplementation()

__fixtures__/github.ts

@@ -0,0 +1,27 @@
+import { jest } from '@jest/globals'
+
+export const mockOctokit = {
+  rest: {
+    git: {
+      getRef: jest.fn<(args: unknown) => Promise<unknown>>(),
+      createRef: jest.fn<(args: unknown) => Promise<unknown>>(),
+      updateRef: jest.fn<(args: unknown) => Promise<unknown>>(),
+      createTag: jest.fn<(args: unknown) => Promise<unknown>>(),
+      getTag: jest.fn<(args: unknown) => Promise<unknown>>()
+    },
+    repos: {
+      getCommit: jest.fn<(args: unknown) => Promise<unknown>>()
+    }
+  }
+}
+
+export const getOctokit = jest
+  .fn<(token: string) => typeof mockOctokit>()
+  .mockReturnValue(mockOctokit)
+
+export const context = {
+  repo: {
+    owner: 'test-owner',
+    repo: 'test-repo'
+  }
+}

__tests__/main.test.ts

@@ -0,0 +1,895 @@
+/**
+ * Unit tests for the action's main functionality, src/main.ts
+ */
+import { jest } from '@jest/globals'
+import * as core from '../__fixtures__/core.js'
+import * as github from '../__fixtures__/github.js'
+import * as csvParse from '../__fixtures__/csv-parse.js'
+
+// Mocks should be declared before the module being tested is imported.
+jest.unstable_mockModule('@actions/core', () => core)
+jest.unstable_mockModule('@actions/github', () => github)
+jest.unstable_mockModule('csv-parse/sync', () => csvParse)
+
+// The module being tested should be imported dynamically. This ensures that
+// the mocks are used in place of any actual dependencies.
+const { run } = await import('../src/main.js')
+
+// Helper functions for cleaner test setup
+const setupInputs = (inputs: Record<string, string>): void => {
+  core.getInput.mockImplementation((name: string) => {
+    return inputs[name] || ''
+  })
+}
+
+const setupCommitResolver = (
+  refToSha: Record<string, string> | string
+): void => {
+  if (typeof refToSha === 'string') {
+    github.mockOctokit.rest.repos.getCommit.mockResolvedValue({
+      data: { sha: refToSha }
+    })
+  } else {
+    github.mockOctokit.rest.repos.getCommit.mockImplementation(
+      async (args: unknown) => {
+        const { ref } = args as { ref: string }
+        const sha = refToSha[ref]
+        if (sha) return { data: { sha } }
+        throw new Error(`Unknown ref: ${ref}`)
+      }
+    )
+  }
+}
+
+const setupTagDoesNotExist = (): void => {
+  github.mockOctokit.rest.git.getRef.mockRejectedValue({
+    status: 404
+  })
+}
+
+const setupTagExists = (tagName: string, sha: string): void => {
+  github.mockOctokit.rest.git.getRef.mockImplementation(
+    async (args: unknown) => {
+      const { ref } = args as { ref: string }
+      if (ref === `tags/${tagName}`) {
+        return {
+          data: { ref: `refs/tags/${tagName}`, object: { sha } }
+        }
+      }
+      throw { status: 404 }
+    }
+  )
+}
+
+const setupTagExistsForAll = (sha: string): void => {
+  github.mockOctokit.rest.git.getRef.mockResolvedValue({
+    data: { ref: 'refs/tags/v1', object: { sha } }
+  })
+}
+
+describe('run', () => {
+  beforeEach(() => {
+    jest.resetAllMocks()
+    // Re-setup mocks after reset
+    github.getOctokit.mockReturnValue(github.mockOctokit)
+    csvParse.resetToRealImplementation()
+  })
+
+  it('creates new tags when they do not exist', async () => {
+    setupInputs({
+      tags: 'v1,v1.0',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagDoesNotExist()
+
+    await run()
+
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(2)
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v1',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v1.0',
+      sha: 'sha-abc123'
+    })
+
+    expect(core.info).toHaveBeenCalledWith(
+      "Tag 'v1' does not exist, creating with SHA sha-abc123."
+    )
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v1', 'v1.0'])
+    expect(core.setOutput).toHaveBeenCalledWith('updated', [])
+    expect(core.setOutput).toHaveBeenCalledWith('tags', ['v1', 'v1.0'])
+  })
+
+  it('updates existing tags when SHA differs', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'def456',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-def456')
+    setupTagExistsForAll('sha-old123')
+
+    await run()
+
+    expect(github.mockOctokit.rest.git.updateRef).toHaveBeenCalledTimes(1)
+    expect(github.mockOctokit.rest.git.updateRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'tags/v1',
+      sha: 'sha-def456',
+      force: true
+    })
+
+    expect(core.info).toHaveBeenCalledWith(
+      "Tag 'v1' exists, updating to SHA sha-def456 (was sha-old123)."
+    )
+    expect(core.setOutput).toHaveBeenCalledWith('created', [])
+    expect(core.setOutput).toHaveBeenCalledWith('updated', ['v1'])
+    expect(core.setOutput).toHaveBeenCalledWith('tags', ['v1'])
+  })
+
+  it('skips updating when tag exists with same SHA', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagExistsForAll('sha-abc123')
+
+    await run()
+
+    expect(github.mockOctokit.rest.git.updateRef).not.toHaveBeenCalled()
+    expect(github.mockOctokit.rest.git.createRef).not.toHaveBeenCalled()
+    expect(core.info).toHaveBeenCalledWith(
+      "Tag 'v1' already exists with desired SHA sha-abc123."
+    )
+    expect(core.setOutput).toHaveBeenCalledWith('created', [])
+    expect(core.setOutput).toHaveBeenCalledWith('updated', [])
+    expect(core.setOutput).toHaveBeenCalledWith('tags', [])
+  })
+
+  it('skips tags when when_exists is skip', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'skip'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagExistsForAll('sha-old123')
+
+    await run()
+
+    expect(github.mockOctokit.rest.git.updateRef).not.toHaveBeenCalled()
+    expect(github.mockOctokit.rest.git.createRef).not.toHaveBeenCalled()
+    expect(core.info).toHaveBeenCalledWith("Tag 'v1' exists, skipping.")
+    expect(core.setOutput).toHaveBeenCalledWith('created', [])
+    expect(core.setOutput).toHaveBeenCalledWith('updated', [])
+    expect(core.setOutput).toHaveBeenCalledWith('tags', [])
+  })
+
+  it('handles per-tag ref overrides', async () => {
+    setupInputs({
+      tags: 'v1:main,v2:develop',
+      ref: '',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver({
+      main: 'sha-main',
+      develop: 'sha-develop'
+    })
+    setupTagDoesNotExist()
+
+    await run()
+
+    expect(github.mockOctokit.rest.repos.getCommit).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'main'
+    })
+    expect(github.mockOctokit.rest.repos.getCommit).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'develop'
+    })
+
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v1',
+      sha: 'sha-main'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v2',
+      sha: 'sha-develop'
+    })
+
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v1', 'v2'])
+  })
+
+  it('handles various input formats (newlines and whitespace)', async () => {
+    setupInputs({
+      tags: ' v1 \n v1.0 \n v1.0.1 ',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagDoesNotExist()
+
+    await run()
+
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(3)
+    expect(core.setOutput).toHaveBeenCalledWith('created', [
+      'v1',
+      'v1.0',
+      'v1.0.1'
+    ])
+  })
+
+  it('creates and updates tags in single run', async () => {
+    setupInputs({
+      tags: 'v1,v2',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagExists('v1', 'sha-old')
+
+    await run()
+
+    expect(github.mockOctokit.rest.git.updateRef).toHaveBeenCalledTimes(1)
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(1)
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v2'])
+    expect(core.setOutput).toHaveBeenCalledWith('updated', ['v1'])
+    expect(core.setOutput).toHaveBeenCalledWith('tags', ['v2', 'v1'])
+  })
+
+  it('fails when ref is missing', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: '',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      expect.stringContaining("Missing ref: provide 'ref' input")
+    )
+  })
+
+  it('fails when when_exists is fail and tag exists', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'fail'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagExistsForAll('sha-old123')
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith("Tag 'v1' already exists.")
+    expect(github.mockOctokit.rest.git.updateRef).not.toHaveBeenCalled()
+    expect(github.mockOctokit.rest.git.createRef).not.toHaveBeenCalled()
+  })
+
+  it('fails when when_exists has invalid value', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'invalid'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagExistsForAll('sha-old123')
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      expect.stringContaining("Invalid value for 'when_exists'")
+    )
+  })
+
+  it('handles non-404 errors when checking if tag exists', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    github.mockOctokit.rest.git.getRef.mockRejectedValue({
+      status: 500,
+      message: 'Internal Server Error'
+    })
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      expect.stringContaining('Action failed with error')
+    )
+  })
+
+  it('handles errors when resolving ref to SHA', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'invalid-ref',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    github.mockOctokit.rest.repos.getCommit.mockRejectedValue(
+      new Error('Reference not found')
+    )
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      expect.stringContaining("Failed to resolve ref 'invalid-ref'")
+    )
+  })
+
+  it('handles non-Error thrown when parsing tags', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    csvParse.parse.mockImplementation(() => {
+      throw 'Parse error: not an Error instance'
+    })
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      'Parse error: not an Error instance'
+    )
+  })
+
+  it('defaults to update mode when when_exists is empty', async () => {
+    setupInputs({
+      tags: 'v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: ''
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagExistsForAll('sha-old123')
+
+    await run()
+
+    expect(github.mockOctokit.rest.git.updateRef).toHaveBeenCalledTimes(1)
+    expect(core.setOutput).toHaveBeenCalledWith('updated', ['v1'])
+  })
+
+  it('handles duplicate tags by using last occurrence', async () => {
+    setupInputs({
+      tags: 'v1,v2,v1',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagDoesNotExist()
+
+    await run()
+
+    // Should only create 2 tags (v1 and v2), not 3
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(2)
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v1', 'v2'])
+  })
+
+  it('optimizes by resolving unique refs only once', async () => {
+    setupInputs({
+      tags: 'v1:main,v2:main,v3:develop',
+      ref: '',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver({
+      main: 'sha-main',
+      develop: 'sha-develop'
+    })
+    setupTagDoesNotExist()
+
+    await run()
+
+    // Should only call getCommit 2 times (main and develop), not 3
+    expect(github.mockOctokit.rest.repos.getCommit).toHaveBeenCalledTimes(2)
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(3)
+  })
+
+  it('handles tag with colon but empty ref part', async () => {
+    setupInputs({
+      tags: 'v1:,v2',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagDoesNotExist()
+
+    await run()
+
+    // Both should use default ref
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(2)
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v1', 'v2'])
+  })
+
+  it('fails when tag specification has multiple colons', async () => {
+    setupInputs({
+      tags: 'stable:refs/heads/main:latest',
+      ref: '',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      expect.stringContaining('Invalid tag specification')
+    )
+    expect(core.setFailed).toHaveBeenCalledWith(
+      expect.stringContaining('too many colons')
+    )
+  })
+
+  it('handles mixed scenario with multiple tags', async () => {
+    setupInputs({
+      tags: 'v1,v2,v3',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'skip'
+    })
+    setupCommitResolver('sha-abc123')
+
+    // v1 exists, v2 and v3 don't
+    github.mockOctokit.rest.git.getRef.mockImplementation(
+      async (args: unknown) => {
+        const { ref } = args as { ref: string }
+        if (ref === 'tags/v1') {
+          return {
+            data: { ref: 'refs/tags/v1', object: { sha: 'sha-old' } }
+          }
+        }
+        throw { status: 404 }
+      }
+    )
+
+    await run()
+
+    // Should skip v1, create v2 and v3
+    expect(core.info).toHaveBeenCalledWith("Tag 'v1' exists, skipping.")
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(2)
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v2', 'v3'])
+    expect(core.setOutput).toHaveBeenCalledWith('updated', [])
+  })
+
+  it('fails when tag name is empty (e.g., ":main")', async () => {
+    setupInputs({
+      tags: ':main',
+      ref: '',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-main')
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith("Invalid tag: ':main'")
+    expect(github.mockOctokit.rest.git.createRef).not.toHaveBeenCalled()
+    expect(github.mockOctokit.rest.git.updateRef).not.toHaveBeenCalled()
+  })
+
+  it('fails when one of multiple tags has empty name with ref', async () => {
+    setupInputs({
+      tags: 'v1,:develop,v2',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver({
+      abc123: 'sha-abc123',
+      develop: 'sha-develop'
+    })
+    setupTagDoesNotExist()
+
+    await run()
+
+    // Should fail on invalid tag during parsing, before processing any tags
+    expect(core.setFailed).toHaveBeenCalledWith("Invalid tag: ':develop'")
+    expect(github.mockOctokit.rest.git.createRef).not.toHaveBeenCalled()
+  })
+
+  it('fails when duplicate tag has different refs (explicit)', async () => {
+    setupInputs({
+      tags: 'v1:main,v1:develop',
+      ref: '',
+      github_token: 'test-token'
+    })
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      "Duplicate tag 'v1' with different refs: 'main' and 'develop'"
+    )
+    expect(github.mockOctokit.rest.git.createRef).not.toHaveBeenCalled()
+  })
+
+  it('fails when duplicate tag has different refs (default vs explicit)', async () => {
+    setupInputs({
+      tags: 'v1,v1:develop',
+      ref: 'main',
+      github_token: 'test-token'
+    })
+
+    await run()
+
+    expect(core.setFailed).toHaveBeenCalledWith(
+      "Duplicate tag 'v1' with different refs: 'main' and 'develop'"
+    )
+    expect(github.mockOctokit.rest.git.createRef).not.toHaveBeenCalled()
+  })
+
+  it('skips empty tags from double commas (e.g., "v1,,v2")', async () => {
+    setupInputs({
+      tags: 'v1,,v2',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagDoesNotExist()
+
+    await run()
+
+    // Should skip empty tag and process v1 and v2
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v1',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v2',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(2)
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v1', 'v2'])
+  })
+
+  it('skips empty lines in multi-line input (e.g., "v1\\n\\nv2")', async () => {
+    setupInputs({
+      tags: 'v1\n\nv2',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagDoesNotExist()
+
+    await run()
+
+    // Should skip empty line and process v1 and v2
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v1',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v2',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(2)
+    expect(core.setOutput).toHaveBeenCalledWith('created', ['v1', 'v2'])
+  })
+
+  it('skips empty tags from mix of empty CSV fields and empty lines', async () => {
+    setupInputs({
+      tags: 'v1,,v2\n\nv3,v4',
+      ref: 'abc123',
+      github_token: 'test-token',
+      when_exists: 'update'
+    })
+    setupCommitResolver('sha-abc123')
+    setupTagDoesNotExist()
+
+    await run()
+
+    // Should skip all empty tags and process v1, v2, v3, v4
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v1',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v2',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v3',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+      owner: 'test-owner',
+      repo: 'test-repo',
+      ref: 'refs/tags/v4',
+      sha: 'sha-abc123'
+    })
+    expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledTimes(4)
+    expect(core.setOutput).toHaveBeenCalledWith('created', [
+      'v1',
+      'v2',
+      'v3',
+      'v4'
+    ])
+  })
+
+  describe('annotated tags', () => {
+    it('creates annotated tags when annotation is provided', async () => {
+      setupInputs({
+        tags: 'v1.0.0',
+        ref: 'abc123',
+        github_token: 'test-token',
+        when_exists: 'update',
+        annotation: 'Release version 1.0.0'
+      })
+      setupCommitResolver('sha-abc123')
+      setupTagDoesNotExist()
+
+      github.mockOctokit.rest.git.createTag.mockResolvedValue({
+        data: { sha: 'tag-object-sha' }
+      })
+
+      await run()
+
+      // Should create tag object first
+      expect(github.mockOctokit.rest.git.createTag).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        tag: 'v1.0.0',
+        message: 'Release version 1.0.0',
+        object: 'sha-abc123',
+        type: 'commit'
+      })
+
+      // Then create reference pointing to tag object
+      expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        ref: 'refs/tags/v1.0.0',
+        sha: 'tag-object-sha'
+      })
+
+      expect(core.setOutput).toHaveBeenCalledWith('created', ['v1.0.0'])
+    })
+
+    it('creates lightweight tags when annotation is empty', async () => {
+      setupInputs({
+        tags: 'v1.0.0',
+        ref: 'abc123',
+        github_token: 'test-token',
+        when_exists: 'update',
+        annotation: ''
+      })
+      setupCommitResolver('sha-abc123')
+      setupTagDoesNotExist()
+
+      await run()
+
+      // Should NOT create tag object
+      expect(github.mockOctokit.rest.git.createTag).not.toHaveBeenCalled()
+
+      // Should create reference pointing directly to commit
+      expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        ref: 'refs/tags/v1.0.0',
+        sha: 'sha-abc123'
+      })
+
+      expect(core.setOutput).toHaveBeenCalledWith('created', ['v1.0.0'])
+    })
+
+    it('creates lightweight tags when annotation is only whitespace', async () => {
+      setupInputs({
+        tags: 'v1.0.0',
+        ref: 'abc123',
+        github_token: 'test-token',
+        when_exists: 'update',
+        annotation: '   '
+      })
+      setupCommitResolver('sha-abc123')
+      setupTagDoesNotExist()
+
+      await run()
+
+      // Should NOT create tag object for whitespace-only annotation
+      expect(github.mockOctokit.rest.git.createTag).not.toHaveBeenCalled()
+
+      // Should create reference pointing directly to commit
+      expect(github.mockOctokit.rest.git.createRef).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        ref: 'refs/tags/v1.0.0',
+        sha: 'sha-abc123'
+      })
+
+      expect(core.setOutput).toHaveBeenCalledWith('created', ['v1.0.0'])
+    })
+
+    it('updates tags with annotation', async () => {
+      setupInputs({
+        tags: 'v1',
+        ref: 'def456',
+        github_token: 'test-token',
+        when_exists: 'update',
+        annotation: 'Updated version'
+      })
+      setupCommitResolver('sha-def456')
+      setupTagExistsForAll('sha-old123')
+
+      github.mockOctokit.rest.git.createTag.mockResolvedValue({
+        data: { sha: 'new-tag-object-sha' }
+      })
+
+      await run()
+
+      // Should create new tag object
+      expect(github.mockOctokit.rest.git.createTag).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        tag: 'v1',
+        message: 'Updated version',
+        object: 'sha-def456',
+        type: 'commit'
+      })
+
+      // Should update reference to new tag object
+      expect(github.mockOctokit.rest.git.updateRef).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        ref: 'tags/v1',
+        sha: 'new-tag-object-sha',
+        force: true
+      })
+
+      expect(core.setOutput).toHaveBeenCalledWith('updated', ['v1'])
+    })
+
+    it('handles existing annotated tag and compares commit SHA', async () => {
+      setupInputs({
+        tags: 'v1',
+        ref: 'abc123',
+        github_token: 'test-token',
+        when_exists: 'update',
+        annotation: 'Test annotation'
+      })
+      setupCommitResolver('sha-abc123')
+
+      // Mock existing annotated tag
+      github.mockOctokit.rest.git.getRef.mockResolvedValue({
+        data: {
+          ref: 'refs/tags/v1',
+          object: { sha: 'existing-tag-object-sha', type: 'tag' }
+        }
+      })
+
+      // Mock getTag to return commit SHA
+      github.mockOctokit.rest.git.getTag.mockResolvedValue({
+        data: {
+          sha: 'existing-tag-object-sha',
+          object: { sha: 'sha-abc123', type: 'commit' }
+        }
+      })
+
+      await run()
+
+      // Should fetch tag object to get commit SHA
+      expect(github.mockOctokit.rest.git.getTag).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        tag_sha: 'existing-tag-object-sha'
+      })
+
+      // Should skip update since commit SHA matches
+      expect(github.mockOctokit.rest.git.updateRef).not.toHaveBeenCalled()
+      expect(github.mockOctokit.rest.git.createTag).not.toHaveBeenCalled()
+      expect(core.info).toHaveBeenCalledWith(
+        "Tag 'v1' already exists with desired SHA sha-abc123."
+      )
+      expect(core.setOutput).toHaveBeenCalledWith('created', [])
+      expect(core.setOutput).toHaveBeenCalledWith('updated', [])
+    })
+
+    it('updates existing annotated tag when commit SHA differs', async () => {
+      setupInputs({
+        tags: 'v1',
+        ref: 'def456',
+        github_token: 'test-token',
+        when_exists: 'update',
+        annotation: 'Updated annotation'
+      })
+      setupCommitResolver('sha-def456')
+
+      // Mock existing annotated tag
+      github.mockOctokit.rest.git.getRef.mockResolvedValue({
+        data: {
+          ref: 'refs/tags/v1',
+          object: { sha: 'existing-tag-object-sha', type: 'tag' }
+        }
+      })
+
+      // Mock getTag to return different commit SHA
+      github.mockOctokit.rest.git.getTag.mockResolvedValue({
+        data: {
+          sha: 'existing-tag-object-sha',
+          object: { sha: 'sha-old123', type: 'commit' }
+        }
+      })
+
+      github.mockOctokit.rest.git.createTag.mockResolvedValue({
+        data: { sha: 'new-tag-object-sha' }
+      })
+
+      await run()
+
+      // Should fetch tag object to get commit SHA
+      expect(github.mockOctokit.rest.git.getTag).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        tag_sha: 'existing-tag-object-sha'
+      })
+
+      // Should create new tag object and update reference
+      expect(github.mockOctokit.rest.git.createTag).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        tag: 'v1',
+        message: 'Updated annotation',
+        object: 'sha-def456',
+        type: 'commit'
+      })
+
+      expect(github.mockOctokit.rest.git.updateRef).toHaveBeenCalledWith({
+        owner: 'test-owner',
+        repo: 'test-repo',
+        ref: 'tags/v1',
+        sha: 'new-tag-object-sha',
+        force: true
+      })
+
+      expect(core.setOutput).toHaveBeenCalledWith('updated', ['v1'])
+    })
+  })
+})

action.yml

@@ -1,6 +1,11 @@
-name: "Update Tags Action"
-description: "Create/update Git tags to point to a given sha or ref"
+name: "update-tags-action"
+description: "Easily create/update one or more tags in a GitHub repository."
 author: "jimeh"
+
+branding:
+  icon: "tag"
+  color: "blue"
+
 inputs:
   tags:
     description: "List/CSV of tags to create/update."
@@ -15,6 +20,12 @@ inputs:
       'fail'.
     required: false
     default: "update"
+  annotation:
+    description: >-
+      Optional annotation message for the tag. If provided, creates an annotated
+      tag instead of a lightweight tag.
+    required: false
+    default: ""
   github_token:
     description: "The GitHub token to use for authentication."
     required: false
@@ -29,8 +40,5 @@ outputs:
     description: "List of tags that were updated."
 
 runs:
-  using: "node16"
-  main: "dist/index.js"
-branding:
-  icon: "tag"
-  color: "blue"
+  using: node24
+  main: dist/index.js

badges/coverage.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="106" height="20" role="img" aria-label="Coverage: 100%"><title>Coverage: 100%</title><linearGradient id="s" x2="0" y2="100%"><stop offset="0" stop-color="#bbb" stop-opacity=".1"/><stop offset="1" stop-opacity=".1"/></linearGradient><clipPath id="r"><rect width="106" height="20" rx="3" fill="#fff"/></clipPath><g clip-path="url(#r)"><rect width="63" height="20" fill="#555"/><rect x="63" width="43" height="20" fill="#4c1"/><rect width="106" height="20" fill="url(#s)"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><text aria-hidden="true" x="325" y="150" fill="#010101" fill-opacity=".3" transform="scale(.1)" textLength="530">Coverage</text><text x="325" y="140" transform="scale(.1)" fill="#fff" textLength="530">Coverage</text><text aria-hidden="true" x="835" y="150" fill="#010101" fill-opacity=".3" transform="scale(.1)" textLength="330">100%</text><text x="835" y="140" transform="scale(.1)" fill="#fff" textLength="330">100%</text></g></svg>

bin/licensed

@@ -0,0 +1,16 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+#
+# This file was generated by Bundler.
+#
+# The application 'licensed' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+ENV["BUNDLE_GEMFILE"] ||= File.expand_path("../Gemfile", __dir__)
+
+require "rubygems"
+require "bundler/setup"
+
+load Gem.bin_path("licensed", "licensed")

dist/licenses.txt

@@ -1,660 +0,0 @@
-@actions/core
-MIT
-The MIT License (MIT)
-
-Copyright 2019 GitHub
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-@actions/github
-MIT
-The MIT License (MIT)
-
-Copyright 2019 GitHub
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-@actions/http-client
-MIT
-Actions Http Client for Node.js
-
-Copyright (c) GitHub, Inc.
-
-All rights reserved.
-
-MIT License
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and
-associated documentation files (the "Software"), to deal in the Software without restriction,
-including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense,
-and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so,
-subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED *AS IS*, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT
-LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN
-NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
-SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-
-@octokit/auth-token
-MIT
-The MIT License
-
-Copyright (c) 2019 Octokit contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-
-@octokit/core
-MIT
-The MIT License
-
-Copyright (c) 2019 Octokit contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-
-@octokit/endpoint
-MIT
-The MIT License
-
-Copyright (c) 2018 Octokit contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-
-@octokit/graphql
-MIT
-The MIT License
-
-Copyright (c) 2018 Octokit contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-
-@octokit/plugin-paginate-rest
-MIT
-MIT License Copyright (c) 2019 Octokit contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice (including the next paragraph) shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-
-@octokit/plugin-rest-endpoint-methods
-MIT
-MIT License Copyright (c) 2019 Octokit contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice (including the next paragraph) shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-
-@octokit/request
-MIT
-The MIT License
-
-Copyright (c) 2018 Octokit contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-
-@octokit/request-error
-MIT
-The MIT License
-
-Copyright (c) 2019 Octokit contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-
-@vercel/ncc
-MIT
-Copyright 2018 ZEIT, Inc.
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-before-after-hook
-Apache-2.0
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "{}"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright 2018 Gregor Martynus and other contributors.
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.
-
-
-csv-parse
-MIT
-The MIT License (MIT)
-
-Copyright (c) 2010 Adaltas
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-
-deprecation
-ISC
-The ISC License
-
-Copyright (c) Gregor Martynus and contributors
-
-Permission to use, copy, modify, and/or distribute this software for any
-purpose with or without fee is hereby granted, provided that the above
-copyright notice and this permission notice appear in all copies.
-
-THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
-ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
-IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-
-
-is-plain-object
-MIT
-The MIT License (MIT)
-
-Copyright (c) 2014-2017, Jon Schlinkert.
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-
-node-fetch
-MIT
-The MIT License (MIT)
-
-Copyright (c) 2016 David Frank
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-
-
-once
-ISC
-The ISC License
-
-Copyright (c) Isaac Z. Schlueter and Contributors
-
-Permission to use, copy, modify, and/or distribute this software for any
-purpose with or without fee is hereby granted, provided that the above
-copyright notice and this permission notice appear in all copies.
-
-THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
-ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
-IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-
-
-tr46
-MIT
-
-tunnel
-MIT
-The MIT License (MIT)
-
-Copyright (c) 2012 Koichi Kobayashi
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-
-universal-user-agent
-ISC
-# [ISC License](https://spdx.org/licenses/ISC)
-
-Copyright (c) 2018, Gregor Martynus (https://github.com/gr2m)
-
-Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.
-
-THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-
-
-uuid
-MIT
-The MIT License (MIT)
-
-Copyright (c) 2010-2020 Robert Kieffer and other contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-
-webidl-conversions
-BSD-2-Clause
-# The BSD 2-Clause License
-
-Copyright (c) 2014, Domenic Denicola
-All rights reserved.
-
-Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
-
-1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
-
-2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
-
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-
-whatwg-url
-MIT
-The MIT License (MIT)
-
-Copyright (c) 2015–2016 Sebastian Mayr
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-
-wrappy
-ISC
-The ISC License
-
-Copyright (c) Isaac Z. Schlueter and Contributors
-
-Permission to use, copy, modify, and/or distribute this software for any
-purpose with or without fee is hereby granted, provided that the above
-copyright notice and this permission notice appear in all copies.
-
-THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
-ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
-IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

eslint.config.mjs

@@ -0,0 +1,81 @@
+// See: https://eslint.org/docs/latest/use/configure/configuration-files
+
+import { fixupPluginRules } from '@eslint/compat'
+import { FlatCompat } from '@eslint/eslintrc'
+import js from '@eslint/js'
+import typescriptEslint from '@typescript-eslint/eslint-plugin'
+import tsParser from '@typescript-eslint/parser'
+import _import from 'eslint-plugin-import'
+import jest from 'eslint-plugin-jest'
+import prettier from 'eslint-plugin-prettier'
+import globals from 'globals'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const __filename = fileURLToPath(import.meta.url)
+const __dirname = path.dirname(__filename)
+const compat = new FlatCompat({
+  baseDirectory: __dirname,
+  recommendedConfig: js.configs.recommended,
+  allConfig: js.configs.all
+})
+
+export default [
+  {
+    ignores: ['**/coverage', '**/dist', '**/linter', '**/node_modules']
+  },
+  ...compat.extends(
+    'eslint:recommended',
+    'plugin:@typescript-eslint/eslint-recommended',
+    'plugin:@typescript-eslint/recommended',
+    'plugin:jest/recommended',
+    'plugin:prettier/recommended'
+  ),
+  {
+    plugins: {
+      import: fixupPluginRules(_import),
+      jest,
+      prettier,
+      '@typescript-eslint': typescriptEslint
+    },
+
+    languageOptions: {
+      globals: {
+        ...globals.node,
+        ...globals.jest,
+        Atomics: 'readonly',
+        SharedArrayBuffer: 'readonly'
+      },
+
+      parser: tsParser,
+      ecmaVersion: 2023,
+      sourceType: 'module',
+
+      parserOptions: {
+        project: ['tsconfig.eslint.json'],
+        tsconfigRootDir: __dirname
+      }
+    },
+
+    settings: {
+      'import/resolver': {
+        typescript: {
+          alwaysTryTypes: true,
+          project: 'tsconfig.eslint.json'
+        }
+      }
+    },
+
+    rules: {
+      camelcase: 'off',
+      'eslint-comments/no-use': 'off',
+      'eslint-comments/no-unused-disable': 'off',
+      'i18n-text/no-en': 'off',
+      'import/no-namespace': 'off',
+      'no-console': 'off',
+      'no-shadow': 'off',
+      'no-unused-vars': 'off',
+      'prettier/prettier': 'error'
+    }
+  }
+]

index.js

@@ -1,134 +0,0 @@
-const core = require("@actions/core");
-const github = require("@actions/github");
-const { parse } = require("csv-parse/sync");
-
-async function run() {
-  try {
-    const tagsInput = core.getInput("tags", { required: true });
-    const defaultRef = core.getInput("ref");
-    const token = core.getInput("github_token", { required: true });
-    const whenExists = core.getInput("when_exists") || "update";
-
-    const octokit = github.getOctokit(token);
-
-    const parsedTags = parse(tagsInput, {
-      delimiter: ",",
-      trim: true,
-      relax_column_count: true,
-    }).flat();
-
-    const { owner, repo } = github.context.repo;
-
-    const uniqueRefs = new Set();
-    const refToSha = {};
-    const tags = {};
-
-    for (const tag of parsedTags) {
-      const [t, tagRef] = tag.split(":").map((s) => s.trim());
-      const ref = tagRef || defaultRef;
-      tags[t] = ref;
-      uniqueRefs.add(ref);
-    }
-
-    // Pre-resolve all unique refs
-    for (const ref of uniqueRefs) {
-      refToSha[ref] = await resolveRefToSha(octokit, owner, repo, ref);
-    }
-
-    const created = [];
-    const updated = [];
-
-    // Create or update all tags by looping through tags
-    for (const tagName in tags) {
-      if (!tagName) {
-        core.setFailed(`Invalid tag: '${tagName}'`);
-        return;
-      }
-
-      const tagRef = tags[tagName];
-      const sha = refToSha[tagRef];
-
-      try {
-        // Check if the ref exists
-        const existing = await octokit.rest.git.getRef({
-          owner,
-          repo,
-          ref: `tags/${tagName}`,
-        });
-
-        // If the ref exists, decide action based on 'when_exists'
-        if (whenExists === "update") {
-          const existingSHA = existing.data.object.sha;
-          if (existingSHA === sha) {
-            core.info(
-              `Tag '${tagName}' already exists with desired SHA ${sha}.`
-            );
-            continue;
-          }
-
-          core.info(
-            `Tag '${tagName}' exists, updating to SHA ${sha} ` +
-            `(was ${existingSHA}).`
-          );
-          await octokit.rest.git.updateRef({
-            owner,
-            repo,
-            ref: `tags/${tagName}`,
-            sha,
-            force: true,
-          });
-          updated.push(tagName);
-        } else if (whenExists === "skip") {
-          core.info(`Tag '${tagName}' exists, skipping.`);
-        } else if (whenExists === "fail") {
-          core.setFailed(`Tag '${tagName}' already exists.`);
-          return;
-        } else {
-          core.setFailed(
-            `Invalid value for 'when_exists': '${whenExists}'. ` +
-            `Valid values are 'update', 'skip', and 'fail'.`
-          );
-          return;
-        }
-      } catch (error) {
-        if (error.status !== 404) {
-          throw error;
-        }
-
-        // If the ref doesn't exist, create it
-        core.info(`Tag '${tagName}' does not exist, creating with SHA ${sha}.`);
-        await octokit.rest.git.createRef({
-          owner,
-          repo,
-          ref: `refs/tags/${tagName}`,
-          sha,
-        });
-        created.push(tagName);
-      }
-    }
-
-    core.setOutput("created", created);
-    core.setOutput("updated", updated);
-    core.setOutput("tags", created.concat(updated));
-  } catch (error) {
-    core.setFailed(`Action failed with error: ${error}`);
-  }
-}
-
-async function resolveRefToSha(octokit, owner, repo, ref) {
-  try {
-    const {
-      data: { sha },
-    } = await octokit.rest.repos.getCommit({
-      owner,
-      repo,
-      ref,
-    });
-
-    return sha;
-  } catch (error) {
-    core.setFailed(`Failed to resolve ref '${ref}' to a SHA: ${error}`);
-  }
-}
-
-run();

jest.config.js

@@ -0,0 +1,40 @@
+// See: https://jestjs.io/docs/configuration
+
+/** @type {import('ts-jest').JestConfigWithTsJest} **/
+export default {
+  clearMocks: true,
+  collectCoverage: true,
+  collectCoverageFrom: ['./src/**', '!./src/index.ts'],
+  coverageDirectory: './coverage',
+  coveragePathIgnorePatterns: ['/node_modules/', '/dist/'],
+  coverageReporters: ['json-summary', 'text', 'lcov'],
+  // Uncomment the below lines if you would like to enforce a coverage threshold
+  // for your action. This will fail the build if the coverage is below the
+  // specified thresholds.
+  // coverageThreshold: {
+  //   global: {
+  //     branches: 100,
+  //     functions: 100,
+  //     lines: 100,
+  //     statements: 100
+  //   }
+  // },
+  extensionsToTreatAsEsm: ['.ts'],
+  moduleFileExtensions: ['ts', 'js'],
+  preset: 'ts-jest',
+  reporters: ['default'],
+  resolver: 'ts-jest-resolver',
+  testEnvironment: 'node',
+  testMatch: ['**/*.test.ts'],
+  testPathIgnorePatterns: ['/dist/', '/node_modules/'],
+  transform: {
+    '^.+\\.ts$': [
+      'ts-jest',
+      {
+        tsconfig: 'tsconfig.eslint.json',
+        useESM: true
+      }
+    ]
+  },
+  verbose: true
+}

mise.toml

@@ -0,0 +1,2 @@
+[tools]
+node = "24"

package.json

@@ -1,40 +1,76 @@
 {
   "name": "update-tags-action",
-  "version": "0.0.1",
-  "main": "dist/index.js",
-  "scripts": {
-    "build": "npm run dist && npm run update-readme",
-    "dist": "ncc build index.js --source-map --minify --license licenses.txt",
-    "lint": "eslint *.js",
-    "format": "eslint --fix *.js",
-    "update-readme": "action-docs --update-readme && prettier -w README.md"
+  "version": "1.0.1",
+  "author": "jimeh",
+  "type": "module",
+  "private": true,
+  "homepage": "https://github.com/jimeh/update-tags-action",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/jimeh/update-tags-action.git"
   },
-  "devDependencies": {
-    "@vercel/ncc": "^0.36.1",
-    "action-docs": "^1.2.0",
-    "csv-parse": "^5.3.10",
-    "eslint": "^8.40.0",
-    "eslint-config-prettier": "^8.8.0",
-    "eslint-plugin-prettier": "^4.2.1",
-    "prettier": "^2.8.8",
-    "ts-jest": "^29.1.0",
-    "typescript": "^5.0.4"
+  "bugs": {
+    "url": "https://github.com/jimeh/update-tags-action/issues"
+  },
+  "keywords": [
+    "actions",
+    "github",
+    "git",
+    "tags",
+    "update"
+  ],
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "engines": {
+    "node": ">=24.0.0"
+  },
+  "scripts": {
+    "all": "npx npm-run-all -s format:write lint test coverage update-readme package",
+    "bundle": "npx npm-run-all -s format:write package",
+    "coverage": "npx make-coverage-badge --output-path ./badges/coverage.svg",
+    "format:check": "npx prettier --check .",
+    "format:write": "npx prettier --write .",
+    "licensed:cache": "bin/licensed cache",
+    "licensed:status": "bin/licensed status",
+    "lint": "npx eslint .",
+    "package": "npx rollup --config rollup.config.ts --configPlugin @rollup/plugin-typescript",
+    "package:watch": "npm run package -- --watch",
+    "test": "NODE_OPTIONS=--experimental-vm-modules NODE_NO_WARNINGS=1 jest",
+    "ci-test": "NODE_OPTIONS=--experimental-vm-modules NODE_NO_WARNINGS=1 npx jest",
+    "update-readme": "npx action-docs --update-readme && npx prettier --write README.md"
   },
   "dependencies": {
-    "@actions/core": "^1.10.0",
-    "@actions/github": "^5.1.1"
+    "@actions/core": "^1.11.1",
+    "@actions/github": "^6.0.1",
+    "csv-parse": "^6.1.0"
   },
-  "eslintConfig": {
-    "env": {
-      "node": true,
-      "es2021": true
-    },
-    "extends": [
-      "eslint:recommended",
-      "plugin:prettier/recommended"
-    ],
-    "plugins": [
-      "prettier"
-    ]
+  "devDependencies": {
+    "@eslint/compat": "^1.4.0",
+    "@jest/globals": "^30.2.0",
+    "@rollup/plugin-commonjs": "^28.0.9",
+    "@rollup/plugin-node-resolve": "^16.0.3",
+    "@rollup/plugin-terser": "^0.4.4",
+    "@rollup/plugin-typescript": "^12.3.0",
+    "@types/jest": "^30.0.0",
+    "@types/node": "^24.9.1",
+    "@typescript-eslint/eslint-plugin": "^8.46.2",
+    "@typescript-eslint/parser": "^8.46.2",
+    "action-docs": "^2.5.1",
+    "eslint": "^9.38.0",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-import-resolver-typescript": "^4.4.4",
+    "eslint-plugin-import": "^2.32.0",
+    "eslint-plugin-jest": "^29.0.1",
+    "eslint-plugin-prettier": "^5.5.4",
+    "jest": "^30.2.0",
+    "make-coverage-badge": "^1.2.0",
+    "npm-run-all": "^4.1.5",
+    "prettier": "^3.6.2",
+    "prettier-eslint": "^16.4.2",
+    "rollup": "^4.52.5",
+    "ts-jest": "^29.4.5",
+    "ts-jest-resolver": "^2.0.1",
+    "typescript": "^5.9.3"
   }
 }

rollup.config.ts

@@ -0,0 +1,24 @@
+// See: https://rollupjs.org/introduction/
+
+import commonjs from '@rollup/plugin-commonjs'
+import nodeResolve from '@rollup/plugin-node-resolve'
+import terser from '@rollup/plugin-terser'
+import typescript from '@rollup/plugin-typescript'
+
+const config = {
+  input: 'src/index.ts',
+  output: {
+    esModule: true,
+    file: 'dist/index.js',
+    format: 'es',
+    sourcemap: true
+  },
+  plugins: [
+    typescript(),
+    nodeResolve({ preferBuiltins: true }),
+    commonjs(),
+    terser()
+  ]
+}
+
+export default config

src/index.ts

@@ -0,0 +1,8 @@
+/**
+ * The entrypoint for the action. This file simply imports and runs the action's
+ * main logic.
+ */
+import { run } from './main.js'
+
+/* istanbul ignore next */
+void run()

src/inputs.ts

@@ -0,0 +1,62 @@
+import * as core from '@actions/core'
+import * as github from '@actions/github'
+import { parseTagsInput, type Tag } from './tags.js'
+
+const WHEN_EXISTS_MODES = ['update', 'skip', 'fail'] as const
+export type WhenExistsMode = (typeof WHEN_EXISTS_MODES)[number]
+
+export interface Inputs {
+  tags: Tag[]
+  whenExists: WhenExistsMode
+  annotation: string
+  owner: string
+  repo: string
+  octokit: ReturnType<typeof github.getOctokit>
+}
+
+/**
+ * Validate when_exists input value.
+ *
+ * @param input - The when_exists input value to validate
+ * @returns The validated when_exists mode
+ */
+function validateWhenExists(input: string): WhenExistsMode {
+  if (!WHEN_EXISTS_MODES.includes(input as WhenExistsMode)) {
+    const validList = WHEN_EXISTS_MODES.map((m) => `'${m}'`).join(', ')
+    throw new Error(
+      `Invalid value for 'when_exists': '${input}'. ` +
+        `Valid values are ${validList}.`
+    )
+  }
+  return input as WhenExistsMode
+}
+
+/**
+ * Get and validate action inputs.
+ *
+ * @returns Parsed and validated inputs
+ */
+export async function getInputs(): Promise<Inputs> {
+  const tagsInput: string = core.getInput('tags', { required: true })
+  const defaultRef: string = core.getInput('ref')
+  const whenExistsInput = core.getInput('when_exists') || 'update'
+  const whenExists = validateWhenExists(whenExistsInput)
+  const annotation: string = core.getInput('annotation') || ''
+  const token: string = core.getInput('github_token', {
+    required: true
+  })
+
+  const octokit = github.getOctokit(token)
+  const { owner, repo } = github.context.repo
+
+  const tags = await parseTagsInput(octokit, tagsInput, defaultRef, owner, repo)
+
+  return {
+    tags,
+    whenExists,
+    annotation,
+    owner,
+    repo,
+    octokit
+  }
+}

src/main.ts

@@ -0,0 +1,53 @@
+import * as core from '@actions/core'
+import { getInputs } from './inputs.js'
+import { processTag } from './tags.js'
+
+/**
+ * The main function for the action.
+ *
+ * @returns Resolves when the action is complete.
+ */
+export async function run(): Promise<void> {
+  try {
+    let inputs
+    try {
+      inputs = await getInputs()
+    } catch (error) {
+      // For parsing/validation errors, pass message directly.
+      const message = error instanceof Error ? error.message : String(error)
+      core.setFailed(message)
+      return
+    }
+
+    const { tags, whenExists, annotation, owner, repo, octokit } = inputs
+
+    const created: string[] = []
+    const updated: string[] = []
+
+    // Create or update all tags.
+    for (const tag of tags) {
+      const result = await processTag(
+        tag,
+        whenExists,
+        annotation,
+        owner,
+        repo,
+        octokit
+      )
+
+      if (result === 'failed') {
+        return
+      } else if (result === 'created') {
+        created.push(tag.name)
+      } else if (result === 'updated') {
+        updated.push(tag.name)
+      }
+    }
+
+    core.setOutput('created', created)
+    core.setOutput('updated', updated)
+    core.setOutput('tags', created.concat(updated))
+  } catch (error) {
+    core.setFailed(`Action failed with error: ${String(error)}`)
+  }
+}

src/tags.ts

@@ -0,0 +1,305 @@
+import * as core from '@actions/core'
+import * as github from '@actions/github'
+import { parse } from 'csv-parse/sync'
+
+export interface Tag {
+  name: string
+  ref: string
+  sha: string
+}
+
+export type TagResult = 'created' | 'updated' | 'skipped' | 'failed'
+
+/**
+ * Parse tags input string and resolve refs to SHAs.
+ *
+ * @param octokit - The GitHub API client
+ * @param tagsInput - The raw tags input string
+ * @param defaultRef - The default ref to use if not specified per-tag
+ * @param owner - The repository owner
+ * @param repo - The repository name
+ * @returns Array of desired tags with resolved SHAs
+ */
+export async function parseTagsInput(
+  octokit: ReturnType<typeof github.getOctokit>,
+  tagsInput: string,
+  defaultRef: string,
+  owner: string,
+  repo: string
+): Promise<Tag[]> {
+  const parsedTags: string[] = (
+    parse(tagsInput, {
+      delimiter: ',',
+      trim: true,
+      relax_column_count: true
+    }) as string[][]
+  ).flat()
+
+  const uniqueRefs = new Set<string>()
+  const tags: Record<string, string> = {}
+
+  for (const tag of parsedTags) {
+    const parts = tag.split(':').map((s) => s.trim())
+    if (parts.length > 2) {
+      throw new Error(
+        `Invalid tag specification '${tag}': too many colons. ` +
+          `Format should be 'tag' or 'tag:ref'.`
+      )
+    }
+    const [tagName, tagRef] = parts
+    if (!tagName) {
+      // Skip completely empty tags, but fail on invalid ones like ":main"
+      if (tagRef) {
+        throw new Error(`Invalid tag: '${tag}'`)
+      }
+      continue
+    }
+
+    const ref = tagRef || defaultRef
+    if (!ref) {
+      throw new Error("Missing ref: provide 'ref' input or specify per-tag ref")
+    }
+
+    // Check for duplicate tag with different ref.
+    if (tags[tagName] && tags[tagName] !== ref) {
+      throw new Error(
+        `Duplicate tag '${tagName}' with different refs: ` +
+          `'${tags[tagName]}' and '${ref}'`
+      )
+    }
+
+    tags[tagName] = ref
+    uniqueRefs.add(ref)
+  }
+
+  // Pre-resolve all unique refs in parallel.
+  const refToSha: Record<string, string> = {}
+  await Promise.all(
+    Array.from(uniqueRefs).map(async (ref) => {
+      refToSha[ref] = await resolveRefToSha(octokit, owner, repo, ref)
+    })
+  )
+
+  // Build result array with resolved SHAs.
+  const result: Tag[] = []
+  for (const tagName in tags) {
+    const tagRef = tags[tagName]
+    result.push({
+      name: tagName,
+      ref: tagRef,
+      sha: refToSha[tagRef]
+    })
+  }
+
+  return result
+}
+
+/**
+ * Process a single desired tag: create or update it based on configuration.
+ *
+ * @param tag - The desired tag to process
+ * @param whenExists - What to do if the tag already exists
+ * @param annotation - Optional annotation message for the tag
+ * @param owner - Repository owner
+ * @param repo - Repository name
+ * @param octokit - GitHub API client
+ * @returns The result of the tag operation
+ */
+export async function processTag(
+  tag: Tag,
+  whenExists: 'update' | 'skip' | 'fail',
+  annotation: string,
+  owner: string,
+  repo: string,
+  octokit: ReturnType<typeof github.getOctokit>
+): Promise<TagResult> {
+  const { name: tagName, sha } = tag
+
+  try {
+    // Check if the tag exists.
+    const existing = await octokit.rest.git.getRef({
+      owner,
+      repo,
+      ref: `tags/${tagName}`
+    })
+
+    // If the tag exists, decide action based on 'when_exists'.
+    if (whenExists === 'update') {
+      const existingSHA = existing.data.object.sha
+
+      // For annotated tags, we need to get the commit SHA from the tag object
+      let existingCommitSHA = existingSHA
+      if (existing.data.object.type === 'tag') {
+        const tagObject = await octokit.rest.git.getTag({
+          owner,
+          repo,
+          tag_sha: existingSHA
+        })
+        existingCommitSHA = tagObject.data.object.sha
+      }
+
+      if (existingCommitSHA === sha) {
+        core.info(`Tag '${tagName}' already exists with desired SHA ${sha}.`)
+        return 'skipped'
+      }
+
+      core.info(
+        `Tag '${tagName}' exists, updating to SHA ${sha} ` +
+          `(was ${existingCommitSHA}).`
+      )
+      await updateTag(tagName, sha, annotation, owner, repo, octokit)
+      return 'updated'
+    } else if (whenExists === 'skip') {
+      core.info(`Tag '${tagName}' exists, skipping.`)
+      return 'skipped'
+    } else {
+      // whenExists === 'fail'
+      core.setFailed(`Tag '${tagName}' already exists.`)
+      return 'failed'
+    }
+  } catch (error: unknown) {
+    const err = error as { status?: number }
+    if (err?.status !== 404) {
+      throw error
+    }
+
+    // If the tag doesn't exist (404), create it.
+    core.info(`Tag '${tagName}' does not exist, creating with SHA ${sha}.`)
+    await createTag(tagName, sha, annotation, owner, repo, octokit)
+    return 'created'
+  }
+}
+
+/**
+ * Create a tag object for an annotated tag.
+ *
+ * @param tagName - Name of the tag
+ * @param sha - Commit SHA to tag
+ * @param annotation - Annotation message
+ * @param owner - Repository owner
+ * @param repo - Repository name
+ * @param octokit - GitHub API client
+ * @returns SHA of the created tag object
+ */
+async function createTagObject(
+  tagName: string,
+  sha: string,
+  annotation: string,
+  owner: string,
+  repo: string,
+  octokit: ReturnType<typeof github.getOctokit>
+): Promise<string> {
+  const tagObject = await octokit.rest.git.createTag({
+    owner,
+    repo,
+    tag: tagName,
+    message: annotation,
+    object: sha,
+    type: 'commit'
+  })
+  return tagObject.data.sha
+}
+
+/**
+ * Create a tag (annotated or lightweight based on annotation parameter).
+ *
+ * @param tagName - Name of the tag
+ * @param sha - Commit SHA to tag
+ * @param annotation - Optional annotation message
+ * @param owner - Repository owner
+ * @param repo - Repository name
+ * @param octokit - GitHub API client
+ */
+async function createTag(
+  tagName: string,
+  sha: string,
+  annotation: string,
+  owner: string,
+  repo: string,
+  octokit: ReturnType<typeof github.getOctokit>
+): Promise<void> {
+  let refSha = sha
+
+  // If annotation is provided and non-empty, create an annotated tag object first
+  if (annotation && annotation.trim()) {
+    refSha = await createTagObject(
+      tagName,
+      sha,
+      annotation,
+      owner,
+      repo,
+      octokit
+    )
+  }
+
+  // Create the reference pointing to the tag object (or commit for lightweight)
+  await octokit.rest.git.createRef({
+    owner,
+    repo,
+    ref: `refs/tags/${tagName}`,
+    sha: refSha
+  })
+}
+
+/**
+ * Update a tag to point to a new SHA.
+ *
+ * @param tagName - Name of the tag
+ * @param sha - New commit SHA
+ * @param annotation - Optional annotation message
+ * @param owner - Repository owner
+ * @param repo - Repository name
+ * @param octokit - GitHub API client
+ */
+async function updateTag(
+  tagName: string,
+  sha: string,
+  annotation: string,
+  owner: string,
+  repo: string,
+  octokit: ReturnType<typeof github.getOctokit>
+): Promise<void> {
+  let refSha = sha
+
+  // If annotation is provided and non-empty, create an annotated tag object first
+  if (annotation && annotation.trim()) {
+    refSha = await createTagObject(
+      tagName,
+      sha,
+      annotation,
+      owner,
+      repo,
+      octokit
+    )
+  }
+
+  // Update the reference
+  await octokit.rest.git.updateRef({
+    owner,
+    repo,
+    ref: `tags/${tagName}`,
+    sha: refSha,
+    force: true
+  })
+}
+
+async function resolveRefToSha(
+  octokit: ReturnType<typeof github.getOctokit>,
+  owner: string,
+  repo: string,
+  ref: string
+): Promise<string> {
+  try {
+    const {
+      data: { sha }
+    } = await octokit.rest.repos.getCommit({
+      owner,
+      repo,
+      ref
+    })
+
+    return sha
+  } catch (error) {
+    throw new Error(`Failed to resolve ref '${ref}' to a SHA: ${String(error)}`)
+  }
+}

tsconfig.base.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "compilerOptions": {
+    "allowSyntheticDefaultImports": true,
+    "declaration": false,
+    "declarationMap": false,
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true,
+    "isolatedModules": true,
+    "lib": ["ES2022"],
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "newLine": "lf",
+    "noImplicitAny": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": false,
+    "pretty": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "target": "ES2022"
+  }
+}

tsconfig.eslint.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "extends": "./tsconfig.base.json",
+  "compilerOptions": {
+    "allowJs": true,
+    "noEmit": true
+  },
+  "exclude": ["dist", "node_modules"],
+  "include": [
+    "__fixtures__",
+    "__tests__",
+    "src",
+    "eslint.config.mjs",
+    "jest.config.js",
+    "rollup.config.ts"
+  ]
+}

tsconfig.json

@@ -0,0 +1,11 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "extends": "./tsconfig.base.json",
+  "compilerOptions": {
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "outDir": "./dist"
+  },
+  "exclude": ["__fixtures__", "__tests__", "coverage", "dist", "node_modules"],
+  "include": ["src"]
+}