From 6ef64e10be28ba32d8f06a18d4f9c653a5ea646f Mon Sep 17 00:00:00 2001 From: MK Date: Sat, 10 Oct 2026 23:58:26 +0800 Subject: [PATCH] chore: release v1.21.2 --- CONTRIBUTING.md | 6 +-- README.md | 78 ++++++++++++++++++------------------- azure/bootstrap.ps1 | 2 +- azure/bootstrap.sh | 2 +- azure/setup-vp.yml | 2 +- gitlab/bootstrap.ps1 | 2 +- gitlab/bootstrap.sh | 2 +- gitlab/setup-vp-windows.yml | 4 +- gitlab/setup-vp.yml | 4 +- package.json | 2 +- 10 files changed, 52 insertions(+), 52 deletions(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 8382772..acfd934 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -74,7 +74,7 @@ Renovate opens a PR when SocketDev publishes a new `sfw-free` release. The custo ## Releasing -Publish releases as Git tags, not as an npm package. Keep `package.json.version` aligned with the release tag. Consumers pin an exact tag such as `voidzero-dev/setup-vp@v1.21.1` or a commit SHA. Do not move the `v1` major tag, which is frozen at `v1.15.0`. +Publish releases as Git tags, not as an npm package. Keep `package.json.version` aligned with the release tag. Consumers pin an exact tag such as `voidzero-dev/setup-vp@v1.21.2` or a commit SHA. Do not move the `v1` major tag, which is frozen at `v1.15.0`. 1. Open a release PR. Set the upcoming version in `package.json`; use it as the source of truth for the release version. Update the release examples in `README.md` and this guide. Set these defaults to `v` followed by that version: @@ -98,6 +98,6 @@ Publish releases as Git tags, not as an npm package. Keep `package.json.version` 4. Create the new annotated version tag and push it. For example: ```bash - git tag -a v1.21.1 -m "v1.21.1" - git push origin v1.21.1 + git tag -a v1.21.2 -m "v1.21.2" + git push origin v1.21.2 ``` diff --git a/README.md b/README.md index f0a2235..bf1dec2 100644 --- a/README.md +++ b/README.md @@ -18,7 +18,7 @@ GitHub Action, GitLab CI/CD remote template, and Azure Pipelines step template t Reference this action with an exact release tag, or a commit SHA: ```yaml -- uses: voidzero-dev/setup-vp@v1.21.1 +- uses: voidzero-dev/setup-vp@v1.21.2 ``` Releases are listed on the [tags page](https://github.com/voidzero-dev/setup-vp/tags). [Renovate](https://docs.renovatebot.com/) and Dependabot can keep a pinned tag up to date. @@ -33,7 +33,7 @@ Releases are listed on the [tags page](https://github.com/voidzero-dev/setup-vp/ ```yaml steps: - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 ``` ### With Node.js Version @@ -41,7 +41,7 @@ steps: ```yaml steps: - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 with: node-version: "lts" ``` @@ -51,7 +51,7 @@ steps: ```yaml steps: - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 with: node-version-file: ".node-version" ``` @@ -68,7 +68,7 @@ steps: - uses: actions/setup-node@v5 with: node-version: 24 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 with: node-manager: false ``` @@ -78,7 +78,7 @@ steps: ```yaml steps: - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 with: working-directory: web node-version-file: ".nvmrc" @@ -91,7 +91,7 @@ steps: ```yaml steps: - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 with: node-version: "lts" cache: true @@ -103,7 +103,7 @@ steps: ```yaml steps: - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 with: version: "1.2.3" node-version: "lts" @@ -119,7 +119,7 @@ If your project uses an older Vite+ version, upgrade Vite+ to v0.3.1 or later. ```yaml steps: - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 - run: pnpm --version ``` @@ -140,7 +140,7 @@ to `latest` only when nothing pins a resolvable version. So a project that pins ```yaml steps: - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 with: cache: true ``` @@ -153,7 +153,7 @@ worth watching for, since it means the pinned version was not applied: ```yaml steps: - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 with: version-file: package.json cache: true @@ -213,7 +213,7 @@ action warns and falls back to `latest`. (Auto-detection instead resolves a ```yaml steps: - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 with: node-version: "lts" cache: true @@ -231,7 +231,7 @@ authentication for that registry: ```yaml steps: - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 with: node-version: "lts" registry-url: "https://npm.pkg.github.com" @@ -262,7 +262,7 @@ Set `sfw: true` to wrap `vp install` with [Socket Firewall Free](https://docs.so ```yaml steps: - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 with: sfw: true run-install: true @@ -285,7 +285,7 @@ steps: - uses: socketdev/action@ with: mode: firewall-free - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 with: sfw: true run-install: true @@ -309,7 +309,7 @@ jobs: steps: - run: apk add --no-cache bash curl gcompat libstdc++ - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 ``` ### Matrix Testing with Multiple Node.js Versions @@ -323,7 +323,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 with: node-version: ${{ matrix.node-version }} cache: true @@ -360,7 +360,7 @@ Omitting both `node-version` and `node-version-file` leaves the session without `package-manager` controls Vite+'s package-manager management independently of `node-manager`. When omitted, it leaves the installer default unchanged (enabled on CI) and runs no environment-mode commands. Set it to `false` to run `vp env off pm` and prefer system package managers, or provide a mapping: ```yaml -- uses: voidzero-dev/setup-vp@v1.21.1 +- uses: voidzero-dev/setup-vp@v1.21.2 with: node-manager: false package-manager: | @@ -425,7 +425,7 @@ Set `cache-save: false` to restore an existing dependency cache without writing For example, this workflow restores caches on every run but saves them only from the `main` branch: ```yaml -- uses: voidzero-dev/setup-vp@v1.21.1 +- uses: voidzero-dev/setup-vp@v1.21.2 with: cache: true cache-save: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }} @@ -443,9 +443,9 @@ Use an exact release tag in the `include:remote` URL, and pin `setup-ref` to the ```yaml include: - - remote: "https://raw.githubusercontent.com/voidzero-dev/setup-vp/v1.21.1/gitlab/setup-vp.yml" + - remote: "https://raw.githubusercontent.com/voidzero-dev/setup-vp/v1.21.2/gitlab/setup-vp.yml" inputs: - setup-ref: "v1.21.1" + setup-ref: "v1.21.2" test: extends: .setup-vp @@ -458,13 +458,13 @@ test: String inputs are passed as literal environment values. Quotes, dollar signs, and multiline values do not become shell commands. Inputs take precedence over the corresponding `SETUP_VP_*` variables when you extend `.setup-vp` or `.setup-vp-cached`; use `.setup-vp-bootstrap` directly to configure setup through variables instead. -`setup-ref` accepts ASCII letters, digits, underscores, and hyphens, with single dots or slashes between these groups (for example, `v1.21.1` or `refs/tags/v1.21.1`). The templates and bootstrap scripts reject other values before downloading executable files. The same validation applies to `SETUP_VP_SETUP_REF` when using `.setup-vp-bootstrap` directly. Keep this value under maintainer control because it selects code that runs on the runner. +`setup-ref` accepts ASCII letters, digits, underscores, and hyphens, with single dots or slashes between these groups (for example, `v1.21.2` or `refs/tags/v1.21.2`). The templates and bootstrap scripts reject other values before downloading executable files. The same validation applies to `SETUP_VP_SETUP_REF` when using `.setup-vp-bootstrap` directly. Keep this value under maintainer control because it selects code that runs on the runner. ```yaml include: - - remote: "https://raw.githubusercontent.com/voidzero-dev/setup-vp/v1.21.1/gitlab/setup-vp.yml" + - remote: "https://raw.githubusercontent.com/voidzero-dev/setup-vp/v1.21.2/gitlab/setup-vp.yml" inputs: - setup-ref: "v1.21.1" + setup-ref: "v1.21.2" version: "latest" working-directory: "web" run-install: "true" @@ -482,14 +482,14 @@ GitLab replaces array keywords such as `before_script` when a job uses `extends` ```yaml include: - - remote: "https://raw.githubusercontent.com/voidzero-dev/setup-vp/v1.21.1/gitlab/setup-vp.yml" + - remote: "https://raw.githubusercontent.com/voidzero-dev/setup-vp/v1.21.2/gitlab/setup-vp.yml" test: image: node:24 variables: SETUP_VP_VERSION: "latest" SETUP_VP_RUN_INSTALL: "true" - SETUP_VP_SETUP_REF: "v1.21.1" + SETUP_VP_SETUP_REF: "v1.21.2" before_script: - !reference [.setup-vp-bootstrap, before_script] - npm config set //registry.example.com/:_authToken "$NODE_AUTH_TOKEN" @@ -504,9 +504,9 @@ Use the same pattern when the project has `default:before_script`; put the share ```yaml include: - - remote: "https://raw.githubusercontent.com/voidzero-dev/setup-vp/v1.21.1/gitlab/setup-vp.yml" + - remote: "https://raw.githubusercontent.com/voidzero-dev/setup-vp/v1.21.2/gitlab/setup-vp.yml" inputs: - setup-ref: "v1.21.1" + setup-ref: "v1.21.2" run-install: | - cwd: ./packages/app args: ['--frozen-lockfile'] @@ -523,9 +523,9 @@ test: ```yaml include: - - remote: "https://raw.githubusercontent.com/voidzero-dev/setup-vp/v1.21.1/gitlab/setup-vp.yml" + - remote: "https://raw.githubusercontent.com/voidzero-dev/setup-vp/v1.21.2/gitlab/setup-vp.yml" inputs: - setup-ref: "v1.21.1" + setup-ref: "v1.21.2" sfw: true run-install: "true" @@ -542,9 +542,9 @@ Pass `NODE_AUTH_TOKEN` as a GitLab CI/CD variable and set `registry-url` when th ```yaml include: - - remote: "https://raw.githubusercontent.com/voidzero-dev/setup-vp/v1.21.1/gitlab/setup-vp.yml" + - remote: "https://raw.githubusercontent.com/voidzero-dev/setup-vp/v1.21.2/gitlab/setup-vp.yml" inputs: - setup-ref: "v1.21.1" + setup-ref: "v1.21.2" registry-url: "https://npm.pkg.github.com" scope: "@myorg" @@ -575,7 +575,7 @@ test: | `package-manager` | String input: `"true"`, `"false"`, or a YAML mapping of npm, pnpm, yarn, and bun to booleans (Vite+ 0.3.1+) | Unset (enabled on CI) | | `registry-url` | Optional registry URL to write to a temporary `.npmrc` | | | `scope` | Optional scope for authenticating against scoped registries | | -| `setup-ref` | setup-vp ref used to download the GitLab bootstrap and compiled runtime. Always set it to the same tag as the remote URL; the default is the latest release when the template was published | `v1.21.1` | +| `setup-ref` | setup-vp ref used to download the GitLab bootstrap and compiled runtime. Always set it to the same tag as the remote URL; the default is the latest release when the template was published | `v1.21.2` | ### GitLab Caching and Outputs @@ -607,7 +607,7 @@ Include `gitlab/setup-vp-windows.yml` instead of `gitlab/setup-vp.yml` on a Powe ### GitLab Notes -- Use an exact release tag such as `v1.21.1` in the remote URL. Do not use `main` (mutable) or `v1` (frozen at v1.15.0, no longer updated). +- Use an exact release tag such as `v1.21.2` in the remote URL. Do not use `main` (mutable) or `v1` (frozen at v1.15.0, no longer updated). - Always pin `setup-ref` to the same tag or commit SHA as the remote URL, so the compiled runtime matches the included template. - Quote GitLab string inputs such as `run-install: "false"`; unquoted booleans are rejected by GitLab before the setup runtime can parse them. - GitLab 17.9+ users can add `integrity` to pin the remote file hash. @@ -631,7 +631,7 @@ resources: type: github endpoint: github name: voidzero-dev/setup-vp - ref: refs/tags/v1.21.1 + ref: refs/tags/v1.21.2 pool: vmImage: ubuntu-latest @@ -641,7 +641,7 @@ steps: - template: azure/setup-vp.yml@setupVp parameters: - setupRef: v1.21.1 + setupRef: v1.21.2 nodeVersion: 24.x cache: true runInstall: true @@ -651,7 +651,7 @@ steps: Pin `ref` and `setupRef` to the same exact tag or commit SHA. Do not use the `v1` tag: it is frozen at v1.15.0 and no longer updated. -`setupRef` accepts ASCII letters, digits, underscores, and hyphens, with single dots or slashes between these groups (for example, `v1.21.1` or `refs/tags/v1.21.1`). Other values fail before any bootstrap download. Keep this parameter under maintainer control because it selects code that runs on the agent. +`setupRef` accepts ASCII letters, digits, underscores, and hyphens, with single dots or slashes between these groups (for example, `v1.21.2` or `refs/tags/v1.21.2`). Other values fail before any bootstrap download. Keep this parameter under maintainer control because it selects code that runs on the agent. ### Azure Parameters @@ -668,7 +668,7 @@ Pin `ref` and `setupRef` to the same exact tag or commit SHA. Do not use the `v1 | `authEnv` | `{}` | Extra environment mappings for custom registry secrets, such as `{ PRIVATE_TOKEN: "$(PRIVATE_TOKEN)" }`. | | `registryUrl` | | Optional registry URL for a temporary `.npmrc`. | | `scope` | | Optional npm registry scope. | -| `setupRef` | `v1.21.1` | Ref used to download bootstrap scripts and `dist/azure/index.mjs`. Always set it to the same tag as `ref`; the default is the latest release when the template was published. | +| `setupRef` | `v1.21.2` | Ref used to download bootstrap scripts and `dist/azure/index.mjs`. Always set it to the same tag as `ref`; the default is the latest release when the template was published. | | `nodeVersion` | | Select Node.js with `vp env use`; takes precedence over `nodeVersionFile`. | | `nodeManager` | | Control Vite+'s Node.js manager: `false` keeps the agent's Node.js (e.g. from `UseNode@1`); `true` leaves the installer default unchanged; empty lets the installer decide. | | `packageManager` | Unset (enabled on CI) | Boolean or object mapping npm, pnpm, yarn, and bun to booleans (Vite+ 0.3.1+). Only false entries change modes. | @@ -715,7 +715,7 @@ jobs: steps: - uses: actions/checkout@v7 - - uses: voidzero-dev/setup-vp@v1.21.1 + - uses: voidzero-dev/setup-vp@v1.21.2 with: node-version: "lts" cache: true diff --git a/azure/bootstrap.ps1 b/azure/bootstrap.ps1 index 6eb38c8..37d4cf0 100644 --- a/azure/bootstrap.ps1 +++ b/azure/bootstrap.ps1 @@ -13,7 +13,7 @@ function Setup-VpDownload { Invoke-WebRequest -Uri $Url -OutFile $OutFile -TimeoutSec 60 } -$setupRef = if ($env:SETUP_VP_SETUP_REF) { $env:SETUP_VP_SETUP_REF } else { 'v1.21.1' } +$setupRef = if ($env:SETUP_VP_SETUP_REF) { $env:SETUP_VP_SETUP_REF } else { 'v1.21.2' } if ($setupRef -cnotmatch '\A[A-Za-z0-9_-]+([./][A-Za-z0-9_-]+)*\z') { throw 'setup-vp: invalid setupRef; use a tag, branch or commit SHA with safe ref characters.' } diff --git a/azure/bootstrap.sh b/azure/bootstrap.sh index 89c3161..5ded2f2 100644 --- a/azure/bootstrap.sh +++ b/azure/bootstrap.sh @@ -19,7 +19,7 @@ setup_vp_download() { fi } -SETUP_VP_SETUP_REF="${SETUP_VP_SETUP_REF:-v1.21.1}" +SETUP_VP_SETUP_REF="${SETUP_VP_SETUP_REF:-v1.21.2}" if [[ ! "$SETUP_VP_SETUP_REF" =~ ^[A-Za-z0-9_-]+([./][A-Za-z0-9_-]+)*$ ]]; then echo 'setup-vp: invalid setupRef; use a tag, branch or commit SHA with safe ref characters.' >&2 exit 1 diff --git a/azure/setup-vp.yml b/azure/setup-vp.yml index 92274be..675787e 100644 --- a/azure/setup-vp.yml +++ b/azure/setup-vp.yml @@ -34,7 +34,7 @@ parameters: default: "" - name: setupRef type: string - default: v1.21.1 + default: v1.21.2 - name: nodeVersion type: string default: "" diff --git a/gitlab/bootstrap.ps1 b/gitlab/bootstrap.ps1 index 6fdb888..1595498 100644 --- a/gitlab/bootstrap.ps1 +++ b/gitlab/bootstrap.ps1 @@ -1,6 +1,6 @@ $ErrorActionPreference = 'Stop' $runtimeNode = (Get-Command node -ErrorAction Stop).Source -$setupRef = if ($env:SETUP_VP_SETUP_REF) { $env:SETUP_VP_SETUP_REF } else { 'v1.21.1' } +$setupRef = if ($env:SETUP_VP_SETUP_REF) { $env:SETUP_VP_SETUP_REF } else { 'v1.21.2' } if ($setupRef -cnotmatch '\A[A-Za-z0-9_-]+([./][A-Za-z0-9_-]+)*\z') { throw 'setup-vp: invalid setup-ref; use a tag, branch or commit SHA with safe ref characters.' } diff --git a/gitlab/bootstrap.sh b/gitlab/bootstrap.sh index f3ccdfa..f7ba2eb 100644 --- a/gitlab/bootstrap.sh +++ b/gitlab/bootstrap.sh @@ -18,7 +18,7 @@ setup_vp_download() { return 127 fi } -SETUP_VP_SETUP_REF="${SETUP_VP_SETUP_REF:-v1.21.1}" +SETUP_VP_SETUP_REF="${SETUP_VP_SETUP_REF:-v1.21.2}" if [[ ! "$SETUP_VP_SETUP_REF" =~ ^[A-Za-z0-9_-]+([./][A-Za-z0-9_-]+)*$ ]]; then echo 'setup-vp: invalid setup-ref; use a tag, branch or commit SHA with safe ref characters.' >&2 exit 1 diff --git a/gitlab/setup-vp-windows.yml b/gitlab/setup-vp-windows.yml index a2df0bc..a6a419b 100644 --- a/gitlab/setup-vp-windows.yml +++ b/gitlab/setup-vp-windows.yml @@ -46,14 +46,14 @@ spec: default: "" setup-ref: description: "setup-vp ref used to download the GitLab bootstrap and compiled runtime. Pin this to the same tag or commit as the remote template; the default is the latest release when this template was published." - default: "v1.21.1" + default: "v1.21.2" regex: '\A[A-Za-z0-9_-]+([./][A-Za-z0-9_-]+)*\z' --- .setup-vp-bootstrap: before_script: - | $ErrorActionPreference = 'Stop' - if (-not $env:SETUP_VP_SETUP_REF) { $env:SETUP_VP_SETUP_REF = 'v1.21.1' } + if (-not $env:SETUP_VP_SETUP_REF) { $env:SETUP_VP_SETUP_REF = 'v1.21.2' } if ($env:SETUP_VP_SETUP_REF -cnotmatch '\A[A-Za-z0-9_-]+([./][A-Za-z0-9_-]+)*\z') { throw 'setup-vp: invalid setup-ref; use a tag, branch or commit SHA with safe ref characters.' } diff --git a/gitlab/setup-vp.yml b/gitlab/setup-vp.yml index aeb4976..51c95ea 100644 --- a/gitlab/setup-vp.yml +++ b/gitlab/setup-vp.yml @@ -46,7 +46,7 @@ spec: default: "" setup-ref: description: "setup-vp ref used to download the GitLab bootstrap and compiled runtime. Pin this to the same tag or commit as the remote template; the default is the latest release when this template was published." - default: "v1.21.1" + default: "v1.21.2" regex: '\A[A-Za-z0-9_-]+([./][A-Za-z0-9_-]+)*\z' --- .setup-vp-bootstrap: @@ -80,7 +80,7 @@ spec: export SETUP_VP_NODE_MANAGER="${SETUP_VP_NODE_MANAGER:-}" export SETUP_VP_REGISTRY_URL="${SETUP_VP_REGISTRY_URL:-}" export SETUP_VP_SCOPE="${SETUP_VP_SCOPE:-}" - export SETUP_VP_SETUP_REF="${SETUP_VP_SETUP_REF:-v1.21.1}" + export SETUP_VP_SETUP_REF="${SETUP_VP_SETUP_REF:-v1.21.2}" # Keep this check POSIX-compatible: the runner may use sh before Bash starts. case "$SETUP_VP_SETUP_REF" in diff --git a/package.json b/package.json index 61bf108..48935b6 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "setup-vp", - "version": "1.21.1", + "version": "1.21.2", "private": true, "type": "module", "scripts": {