dependabot[bot]
13ce09aa75
Bump actions/setup-node from 6.3.0 to 6.4.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](53b83947a5...48b55a011b
2026-04-20 03:56:24 +00:00
maxcleme
bf966a7aba
fix: typo glone -> clone
...
Was it on purpose? 😅
Signed-off-by: maxcleme <maxime.clement@docker.com>
2026-04-16 11:11:24 -06:00
Alex Chan
0611d734da
Merge pull request #275 from tailscale/mpminardi/remove-actions-github
...
package.json,package-lock.json: remove @actions/github dependency
2026-03-27 12:16:59 +00:00
Mario Minardi
85073788ab
package.json,package-lock.json: remove @actions/github dependency
...
Remove @actions/github since we don't actually seem to use this
dependency in the action. We can add this back in if / when we do need
it, otherwise it is just causing noise with dependabot updates for no
reason.
Updates #cleanup
Signed-off-by: Mario Minardi <mario@tailscale.com>
2026-03-11 12:58:21 -06:00
dependabot[bot]
306e68a486
Bump @actions/cache from 5.0.1 to 5.0.2
...
Bumps [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache ) from 5.0.1 to 5.0.2.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache )
---
updated-dependencies:
- dependency-name: "@actions/cache"
dependency-version: 5.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Mario Minardi <mario@tailscale.com>
2026-03-11 12:54:23 -06:00
dependabot[bot]
989d9be101
Bump @actions/tool-cache from 2.0.2 to 3.0.0
...
Bumps [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache ) from 2.0.2 to 3.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache )
---
updated-dependencies:
- dependency-name: "@actions/tool-cache"
dependency-version: 3.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-11 12:48:58 -06:00
dependabot[bot]
69584d71ae
Bump @actions/github from 6.0.1 to 7.0.0
...
Bumps [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github ) from 6.0.1 to 7.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github )
---
updated-dependencies:
- dependency-name: "@actions/github"
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Mario Minardi <mario@tailscale.com>
2026-03-11 12:15:08 -06:00
dependabot[bot]
cda17d523f
Bump @actions/core from 2.0.1 to 2.0.2
...
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core ) from 2.0.1 to 2.0.2.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core )
---
updated-dependencies:
- dependency-name: "@actions/core"
dependency-version: 2.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Mario Minardi <mario@tailscale.com>
2026-03-11 12:07:56 -06:00
dependabot[bot]
81231eb3b2
Bump actions/setup-node from 6.2.0 to 6.3.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](6044e13b5d...53b83947a5
2026-03-11 12:00:59 -06:00
Mario Minardi
48c6d0317a
action,dist,src: bump default version to 1.94.2
...
Bump default version used by the action to 1.94.2. This will resolve
warnings in the admin console about known security vulnerabilities in
the previous default of 1.90.4 which aren't applicable for the GitHub
action.
The security vulnerabilities are specifically related to MDM policies
for MacOS (see https://tailscale.com/security-bulletins#ts-2026-001 ) and
related to using Tailnet lock without passing `--statedir` or `--state`
to tailscaled (see https://tailscale.com/security-bulletins#ts-2025-008 ).
Neither of these impact the GitHub action as MacOS runners aren't
managed by MDM policies and we pass either `--statedir` or `--state` to
the tailscale daemon.
Fixes https://github.com/tailscale/github-action/issues/272
Signed-off-by: Mario Minardi <mario@tailscale.com>
2026-03-11 12:00:14 -06:00
fbrv
cfed5b8999
store tailscale.tgz and tailscaled.pid in XDG cache/runtime dirs instead of the working directory
2026-03-11 11:55:28 -06:00
Mario Minardi
31d93e60e2
.github/workflows: run integration test if event is a push
...
Run the integration tests if the event that triggered them is a push to
main. Previous changes to skip these tests on pull requests from forks
or dependabot had the unintended impact of disabling them on merges into
main.
Updates #cleanup
Signed-off-by: Mario Minardi <mario@tailscale.com>
2026-03-05 19:49:52 -07:00
Lukas Mracek
564fe381c8
chore: run make build to resolve linter error
2026-02-25 16:50:39 -07:00
git-mracek
127daded26
fix: add missing parentheses to core.isDebug()
2026-02-25 16:50:39 -07:00
dependabot[bot]
94b700f285
Bump actions/setup-node from 6.1.0 to 6.2.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](395ad32622...6044e13b5d
2026-02-11 21:06:52 -07:00
dependabot[bot]
ec0ada4dce
Bump actions/checkout from 6.0.1 to 6.0.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8e8c483db8...de0fac2e45
2026-02-11 21:06:25 -07:00
Dorin Geman
9c1802ce6b
fix: Windows MSI download on self-hosted runners
...
On self-hosted runners, the tool cache directory persists between runs.
When GitHub's cloud cache doesn't have an entry (first run, evicted, etc.), but the local MSI file exists from a previous run, tc.downloadTool() fails with "Destination file path already exists".
This fix checks if the existing MSI has a valid checksum before downloading:
- If valid: reuse it (skip download)
- If invalid: delete and re-download
Signed-off-by: Dorin Geman <dorin.geman@docker.com>
2026-01-15 16:39:13 -07:00
Mario Minardi
61e1192a01
.github/workflows: fix check to skip integration test for PRs from forks
...
Check that the full name of the repo from pull request events matches
the repo from the GitHub context to ensure we are properly skipping
integration tests coming from forks.
Updates #cleanup
Signed-off-by: Mario Minardi <mario@tailscale.com>
2026-01-14 13:18:36 -07:00
dependabot[bot]
53acf82332
Bump @actions/core from 2.0.0 to 2.0.1
...
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core ) from 2.0.0 to 2.0.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/@actions/artifact@2.0.1/packages/core )
---
updated-dependencies:
- dependency-name: "@actions/core"
dependency-version: 2.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-12-23 08:52:08 -07:00
dependabot[bot]
376b8a186d
Bump @actions/exec from 1.1.1 to 2.0.0
...
Bumps [@actions/exec](https://github.com/actions/toolkit/tree/HEAD/packages/exec ) from 1.1.1 to 2.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/exec/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/exec )
---
updated-dependencies:
- dependency-name: "@actions/exec"
dependency-version: 2.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-12-23 08:46:03 -07:00
dependabot[bot]
6b3a1307e5
Bump @actions/cache from 4.1.0 to 5.0.1
...
Bumps [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache ) from 4.1.0 to 5.0.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache )
---
updated-dependencies:
- dependency-name: "@actions/cache"
dependency-version: 5.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-12-23 08:38:59 -07:00
dependabot[bot]
f166a64f7b
Bump prettier-plugin-organize-imports from 3.2.4 to 4.3.0
...
Bumps [prettier-plugin-organize-imports](https://github.com/simonhaenisch/prettier-plugin-organize-imports ) from 3.2.4 to 4.3.0.
- [Release notes](https://github.com/simonhaenisch/prettier-plugin-organize-imports/releases )
- [Changelog](https://github.com/simonhaenisch/prettier-plugin-organize-imports/blob/master/changelog.md )
- [Commits](https://github.com/simonhaenisch/prettier-plugin-organize-imports/compare/v3.2.4...v4.3.0 )
---
updated-dependencies:
- dependency-name: prettier-plugin-organize-imports
dependency-version: 4.3.0
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 13:11:02 -07:00
dependabot[bot]
2d4cde5889
Bump prettier from 2.8.8 to 3.7.4
...
Bumps [prettier](https://github.com/prettier/prettier ) from 2.8.8 to 3.7.4.
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/2.8.8...3.7.4 )
---
updated-dependencies:
- dependency-name: prettier
dependency-version: 3.7.4
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 13:05:11 -07:00
dependabot[bot]
afff14da14
Bump semver from 6.3.1 to 7.7.3
...
Bumps [semver](https://github.com/npm/node-semver ) from 6.3.1 to 7.7.3.
- [Release notes](https://github.com/npm/node-semver/releases )
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md )
- [Commits](https://github.com/npm/node-semver/compare/v6.3.1...v7.7.3 )
---
updated-dependencies:
- dependency-name: semver
dependency-version: 7.7.3
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 12:52:06 -07:00
dependabot[bot]
fb25ad2e95
Bump @types/node from 20.19.21 to 24.10.2
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 20.19.21 to 24.10.2.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 24.10.2
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 12:32:18 -07:00
dependabot[bot]
e8244c1283
Bump @actions/core from 1.11.1 to 2.0.0
...
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core ) from 1.11.1 to 2.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core )
---
updated-dependencies:
- dependency-name: "@actions/core"
dependency-version: 2.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 08:43:18 -07:00
Mario Minardi
d197c1d0f5
package.json: specify required node version
...
Specify node >= 24.0.0 in the engines block as that is what we use and
test with in CI.
Updates #cleanup
Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-12-15 08:41:22 -07:00
Mario Minardi
8d0691471a
.github/workflows: disable integration tests for dependabot PRs
...
Disable integration tests for dependabot PRs since it does not have
access to the integration testing tailnet.
Updates https://github.com/tailscale/corp/issues/33791
Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-12-15 08:23:09 -07:00
dependabot[bot]
95e09948b8
Bump actions/setup-node from 5.0.0 to 6.1.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 5.0.0 to 6.1.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](a0853c2454...395ad32622
2025-12-15 08:11:01 -07:00
dependabot[bot]
1cc03b2f9b
Bump actions/checkout from 4.2.2 to 6.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.2 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](11bd71901b...8e8c483db8
2025-12-15 08:00:42 -07:00
Mario Minardi
67f81e554b
dist: run make build to generated updated index.js
...
Running make build was missed on #235 and subsequently missed by me
when reviewing that PR (whoops).
Updates #cleanup
Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-12-11 11:09:57 -07:00
Lucino772
fee37da258
fix: use correct arch on macOs
2025-12-11 10:54:47 -07:00
Mario Minardi
bfc6672599
.github/workflows: remove tests for retired macOS 13 runners
...
Remove tests for macOS-13 based runner images as they are now retired.
Updates #cleanup
Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-12-10 13:40:02 -07:00
Mario Minardi
1ab6ecf072
.github/workflows: skip integration tests for forks
...
Skip the integration test workflows for forked versions of the repo.
Updates #cleanup
Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-12-10 13:13:40 -07:00
Max Coulombe
dea278bd44
Merge pull request #228 from tailscale/max/clarify-writable-auth_key-scope
...
README: clarify auth_key scope must be writable
2025-11-10 09:48:04 -05:00
mcoulombe
f987cba5e9
README: clarify auth_key scope must be writable
...
Fixes #217
Signed-off-by: mcoulombe <max@tailscale.com>
2025-11-10 09:36:35 -05:00
Mario Minardi
a392da0a18
Merge pull request #221 from tailscale/mpminardi/workload-identity
...
action.yml,src: add support for workload identity federation
2025-10-30 08:07:50 -06:00
Mario Minardi
ef403f0d06
action.yml,src: add support for workload identity federation
...
Add support for workload identity federation based authentication.
Updates https://github.com/tailscale/corp/issues/31264
Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-10-29 07:51:52 -06:00
Mario Minardi
c8de7faf7a
Merge pull request #220 from tailscale/mpminardi/latest-fix
...
src: check against platform specific versions for latest and unstable
2025-10-27 09:15:11 -06:00
Mario Minardi
bf5cb7c4d7
src: check against platform specific versions for latest and unstable
...
Check against platform and package specific version numbers returned
from pkgs.tailscale.com instead of defaulting to "Version" as this can
be incorrect for certain platforms when a release has only been built
for a subset of platforms.
For example. 1.90.2 is available for linux at the time of writing so
"Version" is 1.90.2, but only 1.90.1 is available for windows which
causes an error when using latest as the version specifier on windows
machines.
Fixes https://github.com/tailscale/github-action/issues/219
Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-10-26 18:34:14 -06:00
Mario Minardi
bd97ec6ea8
Merge pull request #218 from tailscale/mpminardi/gitattributes
...
.gitattributes: mark dist as a generated folder
2025-10-26 18:33:49 -06:00
Mario Minardi
c17f550392
.gitattributes: mark dist as a generated folder
...
Mark dist as a generated folder so that files within it are collapsed
by default in code review.
Updates #cleanup
Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-10-26 18:00:05 -06:00
Percy Wegmann
3a217367ca
validate that when using an OAuth client, tags are specified
...
Also include a troubleshooting section in the README with information about the
requested tags are invalid or not permitted error.
Updates #78
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-20 14:38:46 -05:00
Mario Minardi
1293ebc018
.github: add dependabot config
...
Add basic dependabot config to check for actions / npm updates daily.
This mirrors the config we currently have in the terraform provider repo
but with go swapped for npm.
Fixes https://github.com/tailscale/github-action/issues/207
Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-10-20 14:18:35 -05:00
Percy Wegmann
2ddbe90864
stop tailscale service after CI workload finishes
...
Updates #205
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-20 12:53:03 -05:00
Percy Wegmann
aa604318b6
run all commands silently
...
To avoid leaking any potentially sensitive information, all commands are now run
without logging to the console. Logging can be enabled by turning on debug logging
as described at https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging .
Updates tailscale/corp#33405
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-15 14:31:02 -05:00
Lee Briggs
b69384a992
Merge pull request #203 from tailscale/secrets
...
use `setSecret` to mask secrets from logs
2025-10-15 15:03:34 -04:00
Lee Briggs
0edb496506
mask secrets
...
Signed-off-by: Lee Briggs <lee@leebriggs.co.uk>
2025-10-15 14:59:05 -04:00
Percy Wegmann
ac425ca194
stop echoing tailscale status to console
...
Updates #201
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 16:46:07 -05:00
Percy Wegmann
2976a889fc
miscellaneous cleanup items from upgrading to TypeScript action
...
Updates tailscale/corp#32821
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
