2026-07-30 15:09:35 -04:00
export const id = 81 ;
export const ids = [ 81 ];
export const modules = {
/***/ 9081 :
/***/ (( __unused_webpack_module , __webpack_exports__ , __webpack_require__ ) => {
__webpack_require__ . r ( __webpack_exports__ );
/* harmony export */ __webpack_require__ . d ( __webpack_exports__ , {
/* harmony export */ configureAuthentication : () => ( /* binding */ configureAuthentication ),
/* harmony export */ createAuthenticationSettings : () => ( /* binding */ createAuthenticationSettings ),
/* harmony export */ generate : () => ( /* binding */ generate ),
2026-08-17 17:05:55 -04:00
/* harmony export */ getInputWithDeprecatedAlias : () => ( /* binding */ getInputWithDeprecatedAlias ),
2026-08-17 18:18:45 -04:00
/* harmony export */ getMavenRepositorySettings : () => ( /* binding */ getMavenRepositorySettings ),
2026-08-17 17:05:55 -04:00
/* harmony export */ getMavenServerSettings : () => ( /* binding */ getMavenServerSettings ),
2026-08-17 18:18:45 -04:00
/* harmony export */ parseMavenRepositories : () => ( /* binding */ parseMavenRepositories ),
2026-08-17 17:05:55 -04:00
/* harmony export */ parseMavenServerCredentials : () => ( /* binding */ parseMavenServerCredentials )
2026-07-30 15:09:35 -04:00
/* harmony export */ });
/* harmony import */ var path__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__ ( 6928 );
/* harmony import */ var path__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/ __webpack_require__ . n ( path__WEBPACK_IMPORTED_MODULE_0__ );
/* harmony import */ var _actions_core__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__ ( 3838 );
/* harmony import */ var _actions_io__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__ ( 8701 );
/* harmony import */ var fs__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__ ( 9896 );
/* harmony import */ var fs__WEBPACK_IMPORTED_MODULE_3___default = /*#__PURE__*/ __webpack_require__ . n ( fs__WEBPACK_IMPORTED_MODULE_3__ );
/* harmony import */ var os__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__ ( 857 );
/* harmony import */ var os__WEBPACK_IMPORTED_MODULE_4___default = /*#__PURE__*/ __webpack_require__ . n ( os__WEBPACK_IMPORTED_MODULE_4__ );
/* harmony import */ var _constants_js__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__ ( 7242 );
/* harmony import */ var _gpg_js__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__ ( 8343 );
/* harmony import */ var _util_js__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__ ( 4527 );
/* harmony import */ var _xml_js__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__ ( 22 );
async function configureAuthentication () {
2026-08-17 17:05:55 -04:00
const servers = getMavenServerSettings ();
2026-08-17 18:18:45 -04:00
const repositorySettings = getMavenRepositorySettings ();
2026-07-30 15:09:35 -04:00
const settingsDirectory = _actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .getInput */ . V4 ( _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_SETTINGS_PATH */ . Xh ) ||
path__WEBPACK_IMPORTED_MODULE_0__ . join ( os__WEBPACK_IMPORTED_MODULE_4__ . homedir (), _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .M2_DIR */ . iT );
const overwriteSettings = ( 0 , _util_js__WEBPACK_IMPORTED_MODULE_6__ /* .getBooleanInput */ . Vt )( _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_OVERWRITE_SETTINGS */ . TS , true );
const gpgPrivateKey = _actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .getInput */ . V4 ( _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_GPG_PRIVATE_KEY */ . wz ) ||
_constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_DEFAULT_GPG_PRIVATE_KEY */ . OD ;
const gpgPassphraseEnvVar = getInputWithDeprecatedAlias ( _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_GPG_PASSPHRASE_ENV_VAR */ . db , _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_GPG_PASSPHRASE_DEPRECATED */ . TY , gpgPrivateKey ? _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_DEFAULT_GPG_PASSPHRASE */ . RX : undefined );
if ( gpgPrivateKey ) {
_actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .setSecret */ . Pq ( gpgPrivateKey );
}
2026-08-17 18:18:45 -04:00
await createAuthenticationSettings ( servers , settingsDirectory , overwriteSettings , gpgPassphraseEnvVar , repositorySettings );
2026-07-30 15:09:35 -04:00
if ( gpgPrivateKey ) {
_actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .info */ . pq ( 'Importing private gpg key' );
2026-08-05 18:05:36 +02:00
const gpgHome = await _gpg_js__WEBPACK_IMPORTED_MODULE_5__ /* .importKey */ . Fh ( gpgPrivateKey );
try {
_actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .saveState */ . LZ ( _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .STATE_GPG_HOME */ . Fi , gpgHome );
_actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .exportVariable */ . dN ( 'GNUPGHOME' , _gpg_js__WEBPACK_IMPORTED_MODULE_5__ /* .toGpgPath */ . nY ( gpgHome ));
}
catch ( error ) {
await _gpg_js__WEBPACK_IMPORTED_MODULE_5__ /* .removeGpgHome */ . mS ( gpgHome );
throw error ;
}
2026-07-30 15:09:35 -04:00
}
}
function getInputWithDeprecatedAlias ( inputName , deprecatedInputName , defaultValue ) {
const value = _actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .getInput */ . V4 ( inputName );
const deprecatedValue = _actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .getInput */ . V4 ( deprecatedInputName );
if ( deprecatedValue ) {
_actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .warning */ . $e ( `The ' ${ deprecatedInputName } ' input is deprecated and may be removed in a future release. Please use ' ${ inputName } ' instead.` );
}
return value || deprecatedValue || defaultValue || '' ;
}
2026-08-17 17:05:55 -04:00
// only exported for testing purposes
function getMavenServerSettings () {
const entries = _actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .getMultilineInput */ . q3 ( _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_MVN_SERVER_CREDENTIALS */ . MM );
if ( entries . some ( entry => entry . trim ())) {
return parseMavenServerCredentials ( entries );
}
return [
{
id : _actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .getInput */ . V4 ( _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_SERVER_ID */ . fd ),
usernameEnvVar : getInputWithDeprecatedAlias ( _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_SERVER_USERNAME_ENV_VAR */ . sc , _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_SERVER_USERNAME_DEPRECATED */ . sp , _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_DEFAULT_SERVER_USERNAME */ . Wj ),
passwordEnvVar : getInputWithDeprecatedAlias ( _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_SERVER_PASSWORD_ENV_VAR */ . r4 , _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_SERVER_PASSWORD_DEPRECATED */ . Vt , _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_DEFAULT_SERVER_PASSWORD */ . xp )
}
];
}
// only exported for testing purposes
function parseMavenServerCredentials ( entries ) {
const servers = [];
const serverIds = new Set ();
entries . forEach (( entry , index ) => {
if ( ! entry . trim ()) {
return ;
}
const fields = entry . split ( ':' );
if ( fields . length !== 3 ) {
throw new Error ( `Invalid mvn-server-credentials entry at line ${ index + 1 } . Expected format: server-id:USERNAME_ENV:PASSWORD_ENV` );
}
const [ id , usernameEnvVar , passwordEnvVar ] = fields . map ( field => field . trim ());
if ( ! id || ! usernameEnvVar || ! passwordEnvVar ) {
throw new Error ( `Invalid mvn-server-credentials entry at line ${ index + 1 } . server-id, username environment variable, and password environment variable are required` );
}
if ( serverIds . has ( id )) {
throw new Error ( `Duplicate server-id ' ${ id } ' in mvn-server-credentials input` );
}
serverIds . add ( id );
servers . push ({ id , usernameEnvVar , passwordEnvVar });
});
return servers ;
}
2026-08-17 18:18:45 -04:00
// only exported for testing purposes
function getMavenRepositorySettings () {
const entries = _actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .getMultilineInput */ . q3 ( _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_MVN_REPOSITORIES */ . W2 );
if ( ! entries . some ( entry => entry . trim ())) {
return undefined ;
}
const includeCentral = ( 0 , _util_js__WEBPACK_IMPORTED_MODULE_6__ /* .getBooleanInput */ . Vt )( _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_MVN_REPOSITORIES_INCLUDE_CENTRAL */ . H5 , true );
return {
repositories : parseMavenRepositories ( entries , includeCentral ),
includeCentral ,
prioritizeCentral : ( 0 , _util_js__WEBPACK_IMPORTED_MODULE_6__ /* .getBooleanInput */ . Vt )( _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_MVN_REPOSITORIES_PRIORITIZE_CENTRAL */ . OT , true )
};
}
// only exported for testing purposes
function parseMavenRepositories ( entries , includeCentral ) {
const repositories = [];
const repositoryIds = new Set ();
entries . forEach (( entry , index ) => {
if ( ! entry . trim ()) {
return ;
}
const firstSeparator = entry . indexOf ( ':' );
const lastSeparator = entry . lastIndexOf ( ':' );
if ( firstSeparator <= 0 || lastSeparator <= firstSeparator ) {
throw new Error ( `Invalid mvn-repositories entry at line ${ index + 1 } . Expected format: repository-id:repository-url:snapshots-enabled` );
}
const id = entry . slice ( 0 , firstSeparator ). trim ();
const url = entry . slice ( firstSeparator + 1 , lastSeparator ). trim ();
const snapshotsValue = entry
. slice ( lastSeparator + 1 )
. trim ()
. toLowerCase ();
if ( ! id || ! url || ! snapshotsValue ) {
throw new Error ( `Invalid mvn-repositories entry at line ${ index + 1 } . repository-id, repository URL, and snapshots-enabled are required` );
}
if ( snapshotsValue !== 'true' && snapshotsValue !== 'false' ) {
throw new Error ( `Invalid snapshots-enabled value ' ${ snapshotsValue } ' in mvn-repositories entry at line ${ index + 1 } . Expected true or false` );
}
if ( repositoryIds . has ( id )) {
throw new Error ( `Duplicate repository-id ' ${ id } ' in mvn-repositories input` );
}
if ( includeCentral && id === _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .MAVEN_CENTRAL_REPOSITORY_ID */ . xg ) {
throw new Error ( `Repository-id ' ${ _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .MAVEN_CENTRAL_REPOSITORY_ID */ . xg } ' is reserved when ${ _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .INPUT_MVN_REPOSITORIES_INCLUDE_CENTRAL */ . H5 } is enabled` );
}
repositoryIds . add ( id );
repositories . push ({
id ,
url ,
snapshotsEnabled : snapshotsValue === 'true'
});
});
return repositories ;
}
async function createAuthenticationSettings ( servers , settingsDirectory , overwriteSettings , gpgPassphraseEnvVar = undefined , repositorySettings = undefined ) {
2026-08-17 17:05:55 -04:00
_actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .info */ . pq ( `Creating ${ _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .MVN_SETTINGS_FILE */ . vO } with server-id: ${ servers . map ( server => server . id ). join ( ', ' ) } ` );
2026-07-30 15:09:35 -04:00
// when an alternate m2 location is specified use only that location (no .m2 directory)
// otherwise use the home/.m2/ path
await _actions_io__WEBPACK_IMPORTED_MODULE_2__ /* .mkdirP */ . U$ ( settingsDirectory );
2026-08-17 18:18:45 -04:00
await write ( settingsDirectory , generate ( servers , gpgPassphraseEnvVar , repositorySettings ), overwriteSettings );
2026-07-30 15:09:35 -04:00
}
// only exported for testing purposes
2026-08-17 18:18:45 -04:00
function generate ( servers , gpgPassphraseEnvVar , repositorySettings ) {
2026-07-30 15:09:35 -04:00
// The maven-gpg-plugin reads the passphrase from the environment variable
// named by the `gpg.passphraseEnvName` property (default MAVEN_GPG_PASSPHRASE).
// Only configure it when the requested env var name differs from that default;
// otherwise the plugin already reads the right variable and no extra settings
// are needed. Writing `gpg.passphrase` to settings.xml is deprecated and fails
// when the plugin's `bestPractices` mode is enabled.
const includeGpgPassphraseProfile = gpgPassphraseEnvVar &&
gpgPassphraseEnvVar !== _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .MAVEN_GPG_PASSPHRASE_DEFAULT_ENV */ . ko ;
const lines = [
'<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"' ,
' xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"' ,
' xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 https://maven.apache.org/xsd/settings-1.0.0.xsd">' ,
' <interactiveMode>false</interactiveMode>' ,
2026-08-17 17:05:55 -04:00
' <servers>'
2026-07-30 15:09:35 -04:00
];
2026-08-17 17:05:55 -04:00
for ( const server of servers ) {
lines . push ( ' <server>' , ` <id> ${ ( 0 , _xml_js__WEBPACK_IMPORTED_MODULE_8__ /* .escapeXmlText */ . I )( server . id ) } </id>` , ` <username> ${ ( 0 , _xml_js__WEBPACK_IMPORTED_MODULE_8__ /* .escapeXmlText */ . I )( `\${env. ${ server . usernameEnvVar } }` ) } </username>` , ` <password> ${ ( 0 , _xml_js__WEBPACK_IMPORTED_MODULE_8__ /* .escapeXmlText */ . I )( `\${env. ${ server . passwordEnvVar } }` ) } </password>` , ' </server>' );
}
lines . push ( ' </servers>' );
2026-08-17 18:18:45 -04:00
if ( repositorySettings || includeGpgPassphraseProfile ) {
lines . push ( ' <profiles>' );
if ( repositorySettings ) {
const centralRepository = {
id : _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .MAVEN_CENTRAL_REPOSITORY_ID */ . xg ,
url : _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .MAVEN_CENTRAL_REPOSITORY_URL */ . jv ,
snapshotsEnabled : false
};
const customCentralConfigured = repositorySettings . repositories . some ( repository => repository . id === _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .MAVEN_CENTRAL_REPOSITORY_ID */ . xg );
const repositories = repositorySettings . includeCentral
? repositorySettings . prioritizeCentral
? [ centralRepository , ... repositorySettings . repositories ]
: [... repositorySettings . repositories , centralRepository ]
: customCentralConfigured
? repositorySettings . repositories
: [
... repositorySettings . repositories ,
{ ... centralRepository , releasesEnabled : false }
];
lines . push ( ' <profile>' , ` <id> ${ _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .MAVEN_REPOSITORIES_PROFILE_ID */ . hq } </id>` , ' <repositories>' );
for ( const repository of repositories ) {
lines . push ( ' <repository>' , ` <id> ${ ( 0 , _xml_js__WEBPACK_IMPORTED_MODULE_8__ /* .escapeXmlText */ . I )( repository . id ) } </id>` , ` <url> ${ ( 0 , _xml_js__WEBPACK_IMPORTED_MODULE_8__ /* .escapeXmlText */ . I )( repository . url ) } </url>` , ...( repository . releasesEnabled === undefined
? []
: [
' <releases>' ,
` <enabled> ${ repository . releasesEnabled } </enabled>` ,
' </releases>'
]), ' <snapshots>' , ` <enabled> ${ repository . snapshotsEnabled } </enabled>` , ' </snapshots>' , ' </repository>' );
}
lines . push ( ' </repositories>' , ' </profile>' );
}
if ( includeGpgPassphraseProfile ) {
lines . push ( ' <profile>' , ` <id> ${ _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .GPG_PASSPHRASE_PROFILE_ID */ . K$ } </id>` , ' <properties>' , ` <gpg.passphraseEnvName> ${ ( 0 , _xml_js__WEBPACK_IMPORTED_MODULE_8__ /* .escapeXmlText */ . I )( gpgPassphraseEnvVar ) } </gpg.passphraseEnvName>` , ' </properties>' , ' </profile>' );
}
lines . push ( ' </profiles>' , ' <activeProfiles>' );
if ( repositorySettings ) {
lines . push ( ` <activeProfile> ${ _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .MAVEN_REPOSITORIES_PROFILE_ID */ . hq } </activeProfile>` );
}
if ( includeGpgPassphraseProfile ) {
lines . push ( ` <activeProfile> ${ _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .GPG_PASSPHRASE_PROFILE_ID */ . K$ } </activeProfile>` );
}
lines . push ( ' </activeProfiles>' );
2026-07-30 15:09:35 -04:00
}
lines . push ( '</settings>' );
return lines . join ( '\n' );
}
async function write ( directory , settings , overwriteSettings ) {
const location = path__WEBPACK_IMPORTED_MODULE_0__ . join ( directory , _constants_js__WEBPACK_IMPORTED_MODULE_7__ /* .MVN_SETTINGS_FILE */ . vO );
const settingsExists = fs__WEBPACK_IMPORTED_MODULE_3__ . existsSync ( location );
if ( settingsExists && overwriteSettings ) {
_actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .info */ . pq ( `Overwriting existing file ${ location } ` );
}
else if ( ! settingsExists ) {
_actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .info */ . pq ( `Writing to ${ location } ` );
}
else {
_actions_core__WEBPACK_IMPORTED_MODULE_1__ /* .info */ . pq ( `Skipping generation ${ location } because file already exists and overwriting is not required` );
return ;
}
return fs__WEBPACK_IMPORTED_MODULE_3__ . writeFileSync ( location , settings , {
encoding : 'utf-8' ,
flag : 'w'
});
}
/***/ }),
/***/ 8343 :
/***/ (( __unused_webpack_module , __webpack_exports__ , __webpack_require__ ) => {
/* harmony export */ __webpack_require__ . d ( __webpack_exports__ , {
/* harmony export */ Fh : () => ( /* binding */ importKey ),
2026-08-05 18:05:36 +02:00
/* harmony export */ Yi : () => ( /* binding */ verifyPackageSignature ),
/* harmony export */ mS : () => ( /* binding */ removeGpgHome ),
/* harmony export */ nY : () => ( /* binding */ toGpgPath )
2026-07-30 15:09:35 -04:00
/* harmony export */ });
2026-08-05 18:05:36 +02:00
/* unused harmony export GPG_HOME_PREFIX */
2026-07-30 15:09:35 -04:00
/* harmony import */ var fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__ ( 9896 );
/* harmony import */ var fs__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/ __webpack_require__ . n ( fs__WEBPACK_IMPORTED_MODULE_0__ );
/* harmony import */ var path__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__ ( 6928 );
/* harmony import */ var path__WEBPACK_IMPORTED_MODULE_1___default = /*#__PURE__*/ __webpack_require__ . n ( path__WEBPACK_IMPORTED_MODULE_1__ );
2026-08-05 18:05:36 +02:00
/* harmony import */ var crypto__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__ ( 6982 );
/* harmony import */ var crypto__WEBPACK_IMPORTED_MODULE_2___default = /*#__PURE__*/ __webpack_require__ . n ( crypto__WEBPACK_IMPORTED_MODULE_2__ );
/* harmony import */ var _actions_io__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__ ( 8701 );
/* harmony import */ var _actions_exec__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__ ( 5260 );
/* harmony import */ var _actions_tool_cache__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__ ( 9805 );
/* harmony import */ var _util_js__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__ ( 4527 );
2026-07-30 15:09:35 -04:00
2026-08-05 18:05:36 +02:00
const GPG_HOME_PREFIX = 'setup-java-gpg-' ;
const VERIFY_GPG_HOME_PREFIX = 'verify-signature-gpg-home-' ;
2026-07-30 15:09:35 -04:00
// Convert a Windows path (D:\a\_temp\...) to a POSIX path (/d/a/_temp/...).
// The Git-bundled GPG on Windows (MSYS2-based) uses POSIX path conventions
// internally. Passing Windows paths with backslashes can cause fatal GPG errors
// (exit code 2), so all paths passed to GPG must be in POSIX format on Windows.
function toGpgPath ( p ) {
if ( process . platform !== 'win32' )
return p ;
return p
. replace ( /\\/g , '/' )
. replace ( /^([A-Za-z]):\// , ( _ , drive ) => `/ ${ drive . toLowerCase () } /` );
}
2026-08-05 18:05:36 +02:00
function createGpgHome ( prefix ) {
const gpgHome = fs__WEBPACK_IMPORTED_MODULE_0__ . mkdtempSync ( path__WEBPACK_IMPORTED_MODULE_1__ . join ( _util_js__WEBPACK_IMPORTED_MODULE_6__ /* .getTempDir */ . G4 (), prefix ));
if ( process . platform !== 'win32' ) {
fs__WEBPACK_IMPORTED_MODULE_0__ . chmodSync ( gpgHome , 0o700 );
}
return gpgHome ;
2026-07-30 15:09:35 -04:00
}
2026-08-05 18:05:36 +02:00
async function importKey ( privateKey ) {
const gpgHome = createGpgHome ( GPG_HOME_PREFIX );
const privateKeyFile = path__WEBPACK_IMPORTED_MODULE_1__ . join ( gpgHome , `private-key- ${ ( 0 , crypto__WEBPACK_IMPORTED_MODULE_2__ . randomUUID )() } .asc` );
try {
fs__WEBPACK_IMPORTED_MODULE_0__ . writeFileSync ( privateKeyFile , privateKey , {
encoding : 'utf-8' ,
flag : 'wx' ,
mode : 0o600
});
try {
await _actions_exec__WEBPACK_IMPORTED_MODULE_4__ /* .exec */ . m ( 'gpg' , [
'--homedir' ,
toGpgPath ( gpgHome ),
'--batch' ,
'--import' ,
toGpgPath ( privateKeyFile )
], { silent : true });
}
finally {
fs__WEBPACK_IMPORTED_MODULE_0__ . rmSync ( privateKeyFile , { force : true });
}
return gpgHome ;
}
catch ( error ) {
await removeGpgHome ( gpgHome );
throw error ;
}
}
async function removeGpgHome ( gpgHome ) {
if ( ! gpgHome ) {
return ;
}
const resolvedGpgHome = path__WEBPACK_IMPORTED_MODULE_1__ . resolve ( gpgHome );
const resolvedTempDir = path__WEBPACK_IMPORTED_MODULE_1__ . resolve ( _util_js__WEBPACK_IMPORTED_MODULE_6__ /* .getTempDir */ . G4 ());
if ( path__WEBPACK_IMPORTED_MODULE_1__ . dirname ( resolvedGpgHome ) !== resolvedTempDir ||
! path__WEBPACK_IMPORTED_MODULE_1__ . basename ( resolvedGpgHome ). startsWith ( GPG_HOME_PREFIX )) {
throw new Error ( `Refusing to remove unexpected GPG home: ${ gpgHome } ` );
}
if ( ! fs__WEBPACK_IMPORTED_MODULE_0__ . existsSync ( resolvedGpgHome )) {
return ;
}
try {
await _actions_exec__WEBPACK_IMPORTED_MODULE_4__ /* .exec */ . m ( 'gpgconf' , [ '--homedir' , toGpgPath ( resolvedGpgHome ), '--kill' , 'gpg-agent' ], { silent : true , ignoreReturnCode : true });
}
catch {
// gpgconf may be unavailable, but directory removal must still be attempted.
}
await _actions_io__WEBPACK_IMPORTED_MODULE_3__ /* .rmRF */ . Yz ( resolvedGpgHome );
2026-07-30 15:09:35 -04:00
}
async function verifyPackageSignature ( archivePath , signatureUrl , publicKeyContent ) {
2026-08-05 18:05:36 +02:00
const signaturePath = await _actions_tool_cache__WEBPACK_IMPORTED_MODULE_5__ /* .downloadTool */ . bq ( signatureUrl );
2026-07-30 15:09:35 -04:00
let gpgHome ;
try {
2026-08-05 18:05:36 +02:00
gpgHome = createGpgHome ( VERIFY_GPG_HOME_PREFIX );
2026-07-30 15:09:35 -04:00
}
catch ( error ) {
try {
2026-08-05 18:05:36 +02:00
await _actions_io__WEBPACK_IMPORTED_MODULE_3__ /* .rmRF */ . Yz ( signaturePath );
2026-07-30 15:09:35 -04:00
}
catch {
// ignore cleanup failures
}
throw new Error ( `Failed to create temporary GPG home directory for signature verification: ${ error . message } ` , { cause : error });
}
try {
const publicKeyFile = path__WEBPACK_IMPORTED_MODULE_1__ . join ( gpgHome , 'public-key.asc' );
fs__WEBPACK_IMPORTED_MODULE_0__ . writeFileSync ( publicKeyFile , publicKeyContent , { encoding : 'utf-8' });
const options = { silent : true };
2026-08-05 18:05:36 +02:00
await _actions_exec__WEBPACK_IMPORTED_MODULE_4__ /* .exec */ . m ( 'gpg' , [
2026-07-30 15:09:35 -04:00
'--homedir' ,
toGpgPath ( gpgHome ),
'--batch' ,
'--import' ,
toGpgPath ( publicKeyFile )
], options );
2026-08-05 18:05:36 +02:00
await _actions_exec__WEBPACK_IMPORTED_MODULE_4__ /* .exec */ . m ( 'gpg' , [
2026-07-30 15:09:35 -04:00
'--homedir' ,
toGpgPath ( gpgHome ),
'--batch' ,
'--verify' ,
toGpgPath ( signaturePath ),
toGpgPath ( archivePath )
], options );
}
finally {
2026-08-05 18:05:36 +02:00
await _actions_io__WEBPACK_IMPORTED_MODULE_3__ /* .rmRF */ . Yz ( signaturePath );
await _actions_io__WEBPACK_IMPORTED_MODULE_3__ /* .rmRF */ . Yz ( gpgHome );
2026-07-30 15:09:35 -04:00
}
}
/***/ }),
/***/ 22 :
/***/ (( __unused_webpack_module , __webpack_exports__ , __webpack_require__ ) => {
/* harmony export */ __webpack_require__ . d ( __webpack_exports__ , {
/* harmony export */ I : () => ( /* binding */ escapeXmlText ),
/* harmony export */ R : () => ( /* binding */ escapeXmlAttribute )
/* harmony export */ });
function escapeXmlText ( value ) {
return value
. replace ( /&/g , '&' )
. replace ( /</g , '<' )
. replace ( />/g , '>' );
}
// Use for user-controlled values written into XML attributes. Text nodes should
// use escapeXmlText so quotes remain byte-compatible with previous output.
function escapeXmlAttribute ( value ) {
return escapeXmlText ( value ). replace ( /"/g , '"' ). replace ( /'/g , ''' );
}
/***/ })
};
