Add production dependencies & build

Release 1.4.1
There are no code changes, this merely updates the README and therefore the Marketplace description
2026-02-13 03:26:53 +08:00 · 2020-11-09 23:25:44 +01:00 · 2020-11-09 23:24:45 +01:00 · 2020-11-09 23:23:44 +01:00 · 2020-11-08 17:17:31 +01:00 · 2020-11-08 17:15:46 +01:00
20 changed files with 5749 additions and 400 deletions
--- a/.github/ISSUE_TEMPLATE/bug_report.md
+++ b/.github/ISSUE_TEMPLATE/bug_report.md
@@ -0,0 +1,29 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: "[BUG] "
+labels: bug
+assignees: SaschaMann
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Workflow file to reproduce the behavior:
+
+```yaml
+
+```
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Screenshots/Build logs**
+If applicable, add screenshots to help explain your problem.
+
+If possible, set the repo secret `ACTIONS_STEP_DEBUG` to `true` to [enable debug logs](https://github.com/actions/toolkit/blob/master/docs/action-debugging.md#how-to-access-step-debug-logs) and run the build again for more detailled logs.
+
+**Additional context**
+Add any other context about the problem here.
--- a/.github/workflows/example-builds-nightly.yml
+++ b/.github/workflows/example-builds-nightly.yml
@@ -4,7 +4,7 @@ on:
  push:
  pull_request:
  schedule:
-    - cron: '0 3 * * *'
+    - cron: '37 17 * * *'

 jobs:
  test:
@@ -33,4 +33,5 @@ jobs:
        with:
          version: nightly
          arch: ${{ matrix.julia-arch }}
+          show-versioninfo: 'true'
      - run: julia --version
--- a/.github/workflows/example-builds.yml
+++ b/.github/workflows/example-builds.yml
@@ -26,8 +26,10 @@ jobs:
          npm run pack

      - name: "Set up Julia"
+        id: setup-julia
        uses: ./
        with:
          version: ${{ matrix.julia-version }}
          arch: ${{ matrix.julia-arch }}
+          show-versioninfo: 'true'
      - run: julia --version
--- a/.gitmodules
+++ b/.gitmodules
@@ -0,0 +1,3 @@
+[submodule "bin"]
+	path = bin
+	url = git@github.com:julia-actions/bin.git
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -0,0 +1,11 @@
+# Dev docs / Contributing guide
+
+## Building and tagging a release (requires write access)
+
+1. Test your changes, merge into `master`.
+2. Checkout `master`.
+3. Bump the version number in [`package.json`](package.json).
+4. Run `./bin/build-release julia-actions/setup-julia` to create a release branch and build a release.
+5. Push the branch (**without tags**) and verify that CI is passing on it.
+6. Run `git push --tags --force` to update the tags.
+7. Create a release for the `vX.Y.Z` tag.
--- a/README.md
+++ b/README.md
@@ -11,7 +11,7 @@ This action sets up a Julia environment for use in actions by downloading a spec
  - [Julia Versions](#julia-versions)
  - [Matrix Testing](#matrix-testing)
 - [Versioning](#versioning)
- [Privacy Info](#privacy-info)
+- [Debug logs](#debug-logs)
 - [Third party information](#third-party-information)

 ## Usage
@@ -40,16 +40,16 @@ You can either specify specific Julia versions or version ranges. If you specify
 #### Examples

 - `1.2.0` is a valid semver version. The action will try to download exactly this version. If it's not available, the build step will fail.
- `1.0` is a version range that will match the highest available Julia version that starts with `1.0`, e.g. `1.0.5`.
- `^1.3.0-rc1` is a caret version range that includes pre-releases starting at `rc1`. It matches all versions `≥ 1.3.0-rc1` and `< 1.4.0`.
- `^1.3-0` is a caret version range that includes _all_ pre-releases. It matches all versions `≥ 1.3.0-` and `< 1.4.0`.
+- `1.0` is a version range that will match the highest available Julia version that starts with `1.0`, e.g. `1.0.5`, excluding pre-releases.
+- `^1.3.0-rc1` is a **caret** version range that includes pre-releases starting at `rc1`. It matches all versions `≥ 1.3.0-rc1` and `< 2.0.0`.
+- `~1.3.0-rc1` is a **tilde** version range that includes pre-releases starting at `rc1`. It matches all versions `≥ 1.3.0-rc1` and `< 1.4.0`.
+- `^1.3.0-0` is a **caret** version range that includes _all_ pre-releases. It matches all versions `≥ 1.3.0-` and `< 2.0.0`.
+- `~1.3.0-0` is a **tilde** version range that includes _all_ pre-releases. It matches all versions `≥ 1.3.0-` and `< 1.4.0`.
 - `nightly` will install the latest nightly build.

 Internally the action uses node's semver package to resolve version ranges. Its [documentation](https://github.com/npm/node-semver#advanced-range-syntax) contains more details on the version range syntax. You can test what version will be selected for a given input in this JavaScript [REPL](https://repl.it/@SaschaMann/setup-julia-version-logic).

-#### WARNING: Version ranges are experimental and potentially out of date
-
-Currently the list of available versions is hardcoded. You have to use the latest version of the action to be able to install the latest Julia versions. Once available we will use a list of versions provided on julialang.org.
+The available Julia versions are pulled from [`versions.json`](https://julialang-s3.julialang.org/bin/versions.json). This file is automatically updated once a day. Therefore it may take up to 24 hours until a newly released Julia version is available in the action.

 ### Matrix Testing

@@ -141,21 +141,21 @@ You can specify commits, branches or tags in your workflows as follows:

 ```yaml
 steps:
-  - uses: julia-actions/setup-julia@6ae948d # commit SHA
+  - uses: julia-actions/setup-julia@d26d1111976eae5f00db04f0515ab744ec9cd79e # commit SHA of the tagged 1.3.1 commit
  - uses: julia-actions/setup-julia@master  # branch
  - uses: julia-actions/setup-julia@latest  # latest version tag (may break existing workflows)
  - uses: julia-actions/setup-julia@v1      # major version tag
  - uses: julia-actions/setup-julia@v0.1.0  # specific version tag
 ```

-## Privacy Info
+If your workflow requires access to secrets, you should always pin it to a commit SHA instead of a tag.
+This will protect you in case a bad actor gains access to the setup-julia repo.
+You can find more information in [GitHub's security hardening guide](https://docs.github.com/en/free-pro-team@latest/actions/learn-github-actions/security-hardening-for-github-actions#using-third-party-actions).

-Julia version 1.5 and later collects telemetry information during certain `Pkg` operations.
-Please refer to <https://julialang.org/legal/data/> for information on what data is collected.
-This action does not alter the Julia installation in any way, therefore telemetry on your CI runs will be collected by the Julia Pkg server unless you opt out.
-In a later release of the action, an action input to opt out of telemetry will be provided but for now you need to add a step to your workflows that edits `telemetry.toml` in the CI environment as described in the [Opting Out](https://julialang.org/legal/data/#opting_out) section of the above document.
+## Debug logs

-**This action itself does not collect any kind of personal data or telemetry information.**
+You can enable [Step Debug Logs](https://github.com/actions/toolkit/blob/main/docs/action-debugging.md#step-debug-logs) for more detailed logs.
+Note that when debug logs are enabled, a request will be sent to `https://httpbin.julialang.org/ip` and the runner's IP will be printed to the debug logs.

 ## Third party information
 Parts of this software have been derived from other open source software.
--- a/tests/fixtures/versions.json
+++ b/tests/fixtures/versions.json
--- a/tests/installer.test.ts
+++ b/tests/installer.test.ts
@@ -0,0 +1,113 @@
+// The testing setup has been derived from the actions/setup-go@bc6edb5 action.
+// Check README.md for licence information.
+
+import * as path from 'path'
+
+import * as io from '@actions/io'
+
+import nock = require('nock')
+import * as semver from 'semver'
+
+const testVersions = [
+    '0.1.2',       '0.2.0',           '0.2.1',          '0.3.0',
+    '0.3.1',       '0.3.10',          '0.3.11',         '0.3.12',
+    '0.3.2',       '0.3.3',           '0.3.4',          '0.3.5',
+    '0.3.6',       '0.3.7',           '0.3.8',          '0.3.9',
+    '0.4.0',       '0.4.0-rc1',       '0.4.0-rc2',      '0.4.0-rc3',
+    '0.4.0-rc4',   '0.4.1',           '0.4.2',          '0.4.3',
+    '0.4.4',       '0.4.5',           '0.4.6',          '0.4.7',
+    '0.5.0',       '0.5.0-rc0',       '0.5.0-rc1',      '0.5.0-rc2',
+    '0.5.0-rc3',   '0.5.0-rc4',       '0.5.1',          '0.5.2',
+    '0.6.0',       '0.6.0-pre.alpha', '0.6.0-pre.beta', '0.6.0-rc1',
+    '0.6.0-rc2',   '0.6.0-rc3',       '0.6.1',          '0.6.2',
+    '0.6.3',       '0.6.4',           '0.7.0',          '0.7.0-alpha',
+    '0.7.0-beta',  '0.7.0-beta2',     '0.7.0-rc1',      '0.7.0-rc2',
+    '0.7.0-rc3',   '1.0.0',           '1.0.0-rc1',      '1.0.1',
+    '1.0.2',       '1.0.3',           '1.0.4',          '1.0.5',
+    '1.1.0',       '1.1.0-rc1',       '1.1.0-rc2',      '1.1.1',
+    '1.2.0',       '1.2.0-rc1',       '1.2.0-rc2',      '1.2.0-rc3',
+    '1.3.0-alpha', '1.3.0-rc1',       '1.3.0-rc2',      '1.3.0-rc3',
+    '1.3.0-rc4'
+]
+
+const toolDir = path.join(__dirname, 'runner', 'tools')
+const tempDir = path.join(__dirname, 'runner', 'temp')
+const fixtureDir = path.join(__dirname, 'fixtures')
+
+process.env['RUNNER_TOOL_CACHE'] = toolDir
+process.env['RUNNER_TEMP'] = tempDir
+
+import * as installer from '../src/installer'
+
+describe('version matching tests', () => {
+    describe('specific versions', () => {
+        it('Doesn\'t change the version when given a valid semver version', () => {
+            expect(installer.getJuliaVersion([], '1.0.5')).toEqual('1.0.5')
+            expect(installer.getJuliaVersion(['v1.0.5', 'v1.0.6'], '1.0.5')).toEqual('1.0.5')
+            expect(installer.getJuliaVersion(['v1.0.4', 'v1.0.5'], '1.0.5')).toEqual('1.0.5')
+            expect(installer.getJuliaVersion(['v1.0.4'], '1.0.5')).toEqual('1.0.5')
+            expect(installer.getJuliaVersion([], '1.3.0-alpha')).toEqual('1.3.0-alpha')
+            expect(installer.getJuliaVersion(['v1.2.0', 'v1.3.0-alpha', 'v1.3.0-rc1', 'v1.3.0'], '1.3.0-alpha')).toEqual('1.3.0-alpha')
+            expect(installer.getJuliaVersion([], '1.3.0-rc2')).toEqual('1.3.0-rc2')
+        })
+
+        it('Doesn\'t change the version when given `nightly`', () => {
+            expect(installer.getJuliaVersion([], 'nightly')).toEqual('nightly')
+            expect(installer.getJuliaVersion(testVersions, 'nightly')).toEqual('nightly')
+        })
+    })
+
+    describe('version ranges', () => {
+        it('Chooses the highest available version that matches the input', () => {
+            expect(installer.getJuliaVersion(testVersions, '1')).toEqual('1.2.0')
+            expect(installer.getJuliaVersion(testVersions, '1.0')).toEqual('1.0.5')
+            expect(installer.getJuliaVersion(testVersions, '^1.3.0-rc1')).toEqual('1.3.0-rc4')
+            expect(installer.getJuliaVersion(testVersions, '^1.2.0-rc1')).toEqual('1.2.0')
+        })
+    })
+
+    describe('node-semver behaviour', () => {
+        describe('Windows installer change', () => {
+            it('Correctly understands >1.4.0', () => {
+                expect(semver.gtr('1.4.0-rc1', '1.3', {includePrerelease: true})).toBeTruthy()
+                expect(semver.gtr('1.4.0-DEV', '1.3', {includePrerelease: true})).toBeTruthy()
+                expect(semver.gtr('1.3.1', '1.3', {includePrerelease: true})).toBeFalsy()
+                expect(semver.gtr('1.3.2-rc1', '1.3', {includePrerelease: true})).toBeFalsy()
+            })
+        })
+    })
+})
+
+describe('installer tests', () => {
+    beforeAll(async () => {
+        await io.rmRF(toolDir)
+        await io.rmRF(tempDir)
+    }, 100000)
+
+    afterAll(async () => {
+        try {
+            await io.rmRF(toolDir)
+            await io.rmRF(tempDir)
+        } catch {
+            console.log('Failed to remove test directories')
+        }
+    }, 100000)
+
+    describe('versions.json parsing', () => {
+        // Instead of downloading versions.json, use fixtures/versions.json
+        beforeEach(() => {
+            nock('https://julialang-s3.julialang.org').persist()
+                .get('/bin/versions.json')
+                .replyWithFile(200, path.join(fixtureDir, 'versions.json'))
+        })
+
+        afterEach(() => {
+            nock.cleanAll()
+            nock.enableNetConnect()
+        })
+
+        it('Extracts the list of available versions', async () => {
+            expect(await (await installer.getJuliaVersions(await installer.getJuliaVersionInfo())).sort()).toEqual(testVersions.sort())
+        })
+    })
+})
--- a/tests/main.test.ts
+++ b/tests/main.test.ts
@@ -1,43 +0,0 @@
-import * as installer from '../src/installer'
-
-import * as semver from 'semver'
-
-const testVersions = ['v1.3.0-rc4', 'v1.3.0-rc3', 'v1.3.0-rc2', 'v1.0.5', 'v1.2.0', 'v1.3.0-rc1', 'v1.2.0-rc3', 'v1.3.0-alpha', 'v1.2.0-rc2', 'v1.2.0-rc1', 'v1.1.1', 'v1.0.4', 'v1.1.0', 'v1.1.0-rc2', 'v1.1.0-rc1', 'v1.0.3', 'v1.0.2', 'v1.0.1', 'v1.0.0']
-
-describe('installer tests', () => {
-    describe('version matching', () => {
-        describe('specific versions', () => {
-            it('Doesn\'t change the version when given a valid semver version', async () => {
-                expect(await installer.getJuliaVersion([], '1.0.5')).toEqual('1.0.5')
-                expect(await installer.getJuliaVersion(['v1.0.5', 'v1.0.6'], '1.0.5')).toEqual('1.0.5')
-                expect(await installer.getJuliaVersion(['v1.0.4', 'v1.0.5'], '1.0.5')).toEqual('1.0.5')
-                expect(await installer.getJuliaVersion(['v1.0.4'], '1.0.5')).toEqual('1.0.5')
-                expect(await installer.getJuliaVersion([], '1.3.0-alpha')).toEqual('1.3.0-alpha')
-                expect(await installer.getJuliaVersion(['v1.2.0', 'v1.3.0-alpha', 'v1.3.0-rc1', 'v1.3.0'], '1.3.0-alpha')).toEqual('1.3.0-alpha')
-                expect(await installer.getJuliaVersion([], '1.3.0-rc2')).toEqual('1.3.0-rc2')
-            })
-            it('Doesn\'t change the version when given `nightly`', async () => {
-                expect(await installer.getJuliaVersion([], 'nightly')).toEqual('nightly')
-                expect(await installer.getJuliaVersion(testVersions, 'nightly')).toEqual('nightly')
-            })
-        })
-        describe('version ranges', () => {
-            it('Chooses the highest available version that matches the input', async () => {
-                expect(await installer.getJuliaVersion(testVersions, '1')).toEqual('1.2.0')
-                expect(await installer.getJuliaVersion(testVersions, '1.0')).toEqual('1.0.5')
-                expect(await installer.getJuliaVersion(testVersions, '^1.3.0-rc1')).toEqual('1.3.0-rc4')
-                expect(await installer.getJuliaVersion(testVersions, '^1.2.0-rc1')).toEqual('1.2.0')
-            })
-        })
-    })
-    describe('node-semver behaviour', () => {
-        describe('Windows installer change', () => {
-            it('Correctly understands >1.4.0', () => {
-                expect(semver.gtr('1.4.0-rc1', '1.3', {includePrerelease: true})).toBeTruthy()
-                expect(semver.gtr('1.4.0-DEV', '1.3', {includePrerelease: true})).toBeTruthy()
-                expect(semver.gtr('1.3.1', '1.3', {includePrerelease: true})).toBeFalsy()
-                expect(semver.gtr('1.3.2-rc1', '1.3', {includePrerelease: true})).toBeFalsy()
-            })
-        })
-    })
-})
--- a/action.yml
+++ b/action.yml
@@ -13,6 +13,9 @@ inputs:
    description: 'Display InteractiveUtils.versioninfo() after installing'
    required: false
    default: 'false'
+outputs:
+  julia-bindir:
+    description: 'Path to the directory containing the Julia executable. Equivalent to JULIA_BINDIR: https://docs.julialang.org/en/v1/manual/environment-variables/#JULIA_BINDIR'
 runs:
  using: 'node12'
  main: 'dist/index.js'
--- a/1
+++ b/1
--- a/bin/build-release
+++ b/bin/build-release
@@ -1,44 +0,0 @@
-#!/bin/sh
-
-branch_name="$(git symbolic-ref --short -q HEAD)"
-version="v$(jq -r .version package.json)"
-repo="$1"
-
-if [ -z "$repo" ]; then
-    echo "ERROR: must specify repository"
-    exit 1
-fi
-
-echo "=== debug info ==="
-echo "branch: $branch_name"
-echo "version: $version"
-echo "repo: $repo"
-echo "=================="
-echo ""
-
-# Check that the version doesn't exist yet
-version_exists="$(curl -s https://api.github.com/repos/"$repo"/tags -H "Accept: application/vnd.github.v3.full+json" | jq -r '.[] | select(.name == "'"$version"'") | .name')"
-if [ -n "$version_exists" ]; then
-    echo "ERROR: version $version already exists"
-    exit 1
-fi
-
-git checkout -b releases/"$version"
-
-npm install
-npm run build
-npm test
-npm run pack
-
-sed -i 's/dist/!dist/g' .gitignore
-git add dist
-git commit -a -m "Add production dependencies & build"
-
-# Tags
-major_minor="$(sed 's/\.[^.]*$//' <<< "$version")"
-major="$(sed 's/\.[^.]*$//' <<< "$major_minor")"
-
-git tag "$version"
-git tag -f "$major_minor"
-git tag -f "$major"
-git tag -f "latest"
--- a/bin/build-test-release
+++ b/bin/build-test-release
@@ -1,36 +0,0 @@
-#!/bin/sh
-
-branch_name="$(git symbolic-ref --short -q HEAD)"
-version="v$(jq -r .version package.json)"
-repo="$1"
-
-if [ -z "$repo" ]; then
-    echo "ERROR: must specify repository"
-    exit 1
-fi
-
-echo "=== debug info ==="
-echo "branch: $branch_name"
-echo "version: $version"
-echo "repo: $repo"
-echo "=================="
-echo ""
-
-# Check that the version doesn't exist yet
-version_exists="$(curl -s https://api.github.com/repos/"$repo"/tags -H "Accept: application/vnd.github.v3.full+json" | jq -r '.[] | select(.name == "'"$version"'") | .name')"
-if [ -n "$version_exists" ]; then
-    echo "ERROR: version $version already exists"
-    exit 1
-fi
-
-git checkout -B test/"$branch_name"/releases/"$version"
-
-npm install
-npm run build
-npm test
-npm run pack
-
-# Add dist/ to git and commit it
-sed -i 's/dist/!dist/g' .gitignore
-git add dist
-git commit -a -m "Add production dependencies & build"
--- a/dist/index.js
+++ b/dist/index.js
@@ -926,6 +926,32 @@ module.exports = require("tls");

 /***/ }),

+/***/ 82:
+/***/ (function(__unusedmodule, exports) {
+
+"use strict";
+
+// We use any as a valid input type
+/* eslint-disable @typescript-eslint/no-explicit-any */
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Sanitizes an input into a string so it can be passed into issueCommand safely
+ * @param input input to sanitize into a string
+ */
+function toCommandValue(input) {
+    if (input === null || input === undefined) {
+        return '';
+    }
+    else if (typeof input === 'string' || input instanceof String) {
+        return input;
+    }
+    return JSON.stringify(input);
+}
+exports.toCommandValue = toCommandValue;
+//# sourceMappingURL=utils.js.map
+
+/***/ }),
+
 /***/ 87:
 /***/ (function(module) {

@@ -933,6 +959,42 @@ module.exports = require("os");

 /***/ }),

+/***/ 102:
+/***/ (function(__unusedmodule, exports, __webpack_require__) {
+
+"use strict";
+
+// For internal use, subject to change.
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (Object.hasOwnProperty.call(mod, k)) result[k] = mod[k];
+    result["default"] = mod;
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// We use any as a valid input type
+/* eslint-disable @typescript-eslint/no-explicit-any */
+const fs = __importStar(__webpack_require__(747));
+const os = __importStar(__webpack_require__(87));
+const utils_1 = __webpack_require__(82);
+function issueCommand(command, message) {
+    const filePath = process.env[`GITHUB_${command}`];
+    if (!filePath) {
+        throw new Error(`Unable to find environment variable for file command ${command}`);
+    }
+    if (!fs.existsSync(filePath)) {
+        throw new Error(`Missing file at path: ${filePath}`);
+    }
+    fs.appendFileSync(filePath, `${utils_1.toCommandValue(message)}${os.EOL}`, {
+        encoding: 'utf8'
+    });
+}
+exports.issueCommand = issueCommand;
+//# sourceMappingURL=file-command.js.map
+
+/***/ }),
+
 /***/ 129:
 /***/ (function(module) {

@@ -2847,28 +2909,36 @@ module.exports = require("crypto");

 "use strict";

+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (Object.hasOwnProperty.call(mod, k)) result[k] = mod[k];
+    result["default"] = mod;
+    return result;
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-const os = __webpack_require__(87);
+const os = __importStar(__webpack_require__(87));
+const utils_1 = __webpack_require__(82);
 /**
 * Commands
 *
 * Command Format:
- *   ##[name key=value;key=value]message
+ *   ::name key=value,key=value::message
 *
 * Examples:
- *   ##[warning]This is the user warning message
- *   ##[set-secret name=mypassword]definatelyNotAPassword!
+ *   ::warning::This is the message
+ *   ::set-env name=MY_VAR::some value
 */
 function issueCommand(command, properties, message) {
    const cmd = new Command(command, properties, message);
    process.stdout.write(cmd.toString() + os.EOL);
 }
 exports.issueCommand = issueCommand;
-function issue(name, message) {
+function issue(name, message = '') {
    issueCommand(name, {}, message);
 }
 exports.issue = issue;
-const CMD_PREFIX = '##[';
+const CMD_STRING = '::';
 class Command {
    constructor(command, properties, message) {
        if (!command) {
@@ -2879,37 +2949,42 @@ class Command {
        this.message = message;
    }
    toString() {
-        let cmdStr = CMD_PREFIX + this.command;
+        let cmdStr = CMD_STRING + this.command;
        if (this.properties && Object.keys(this.properties).length > 0) {
            cmdStr += ' ';
+            let first = true;
            for (const key in this.properties) {
                if (this.properties.hasOwnProperty(key)) {
                    const val = this.properties[key];
                    if (val) {
-                        // safely append the val - avoid blowing up when attempting to
-                        // call .replace() if message is not a string for some reason
-                        cmdStr += `${key}=${escape(`${val || ''}`)};`;
+                        if (first) {
+                            first = false;
+                        }
+                        else {
+                            cmdStr += ',';
+                        }
+                        cmdStr += `${key}=${escapeProperty(val)}`;
                    }
                }
            }
        }
-        cmdStr += ']';
-        // safely append the message - avoid blowing up when attempting to
-        // call .replace() if message is not a string for some reason
-        const message = `${this.message || ''}`;
-        cmdStr += escapeData(message);
+        cmdStr += `${CMD_STRING}${escapeData(this.message)}`;
        return cmdStr;
    }
 }
 function escapeData(s) {
-    return s.replace(/\r/g, '%0D').replace(/\n/g, '%0A');
+    return utils_1.toCommandValue(s)
+        .replace(/%/g, '%25')
+        .replace(/\r/g, '%0D')
+        .replace(/\n/g, '%0A');
 }
-function escape(s) {
-    return s
+function escapeProperty(s) {
+    return utils_1.toCommandValue(s)
+        .replace(/%/g, '%25')
        .replace(/\r/g, '%0D')
        .replace(/\n/g, '%0A')
-        .replace(/]/g, '%5D')
-        .replace(/;/g, '%3B');
+        .replace(/:/g, '%3A')
+        .replace(/,/g, '%2C');
 }
 //# sourceMappingURL=command.js.map

@@ -2920,9 +2995,28 @@ function escape(s) {

 "use strict";

+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (Object.hasOwnProperty.call(mod, k)) result[k] = mod[k];
+    result["default"] = mod;
+    return result;
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 const command_1 = __webpack_require__(431);
-const path = __webpack_require__(622);
+const file_command_1 = __webpack_require__(102);
+const utils_1 = __webpack_require__(82);
+const os = __importStar(__webpack_require__(87));
+const path = __importStar(__webpack_require__(622));
 /**
 * The code to exit an action
 */
@@ -2941,31 +3035,45 @@ var ExitCode;
 // Variables
 //-----------------------------------------------------------------------
 /**
- * sets env variable for this action and future actions in the job
+ * Sets env variable for this action and future actions in the job
 * @param name the name of the variable to set
- * @param val the value of the variable
+ * @param val the value of the variable. Non-string values will be converted to a string via JSON.stringify
 */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function exportVariable(name, val) {
-    process.env[name] = val;
-    command_1.issueCommand('set-env', { name }, val);
+    const convertedVal = utils_1.toCommandValue(val);
+    process.env[name] = convertedVal;
+    const filePath = process.env['GITHUB_ENV'] || '';
+    if (filePath) {
+        const delimiter = '_GitHubActionsFileCommandDelimeter_';
+        const commandValue = `${name}<<${delimiter}${os.EOL}${convertedVal}${os.EOL}${delimiter}`;
+        file_command_1.issueCommand('ENV', commandValue);
+    }
+    else {
+        command_1.issueCommand('set-env', { name }, convertedVal);
+    }
 }
 exports.exportVariable = exportVariable;
 /**
- * exports the variable and registers a secret which will get masked from logs
- * @param name the name of the variable to set
- * @param val value of the secret
+ * Registers a secret which will get masked from logs
+ * @param secret value of the secret
 */
-function exportSecret(name, val) {
-    exportVariable(name, val);
-    command_1.issueCommand('set-secret', {}, val);
+function setSecret(secret) {
+    command_1.issueCommand('add-mask', {}, secret);
 }
-exports.exportSecret = exportSecret;
+exports.setSecret = setSecret;
 /**
 * Prepends inputPath to the PATH (for this action and future actions)
 * @param inputPath
 */
 function addPath(inputPath) {
-    command_1.issueCommand('add-path', {}, inputPath);
+    const filePath = process.env['GITHUB_PATH'] || '';
+    if (filePath) {
+        file_command_1.issueCommand('PATH', inputPath);
+    }
+    else {
+        command_1.issueCommand('add-path', {}, inputPath);
+    }
    process.env['PATH'] = `${inputPath}${path.delimiter}${process.env['PATH']}`;
 }
 exports.addPath = addPath;
@@ -2977,7 +3085,7 @@ exports.addPath = addPath;
 * @returns   string
 */
 function getInput(name, options) {
-    const val = process.env[`INPUT_${name.replace(' ', '_').toUpperCase()}`] || '';
+    const val = process.env[`INPUT_${name.replace(/ /g, '_').toUpperCase()}`] || '';
    if (options && options.required && !val) {
        throw new Error(`Input required and not supplied: ${name}`);
    }
@@ -2988,12 +3096,22 @@ exports.getInput = getInput;
 * Sets the value of an output.
 *
 * @param     name     name of the output to set
- * @param     value    value to store
+ * @param     value    value to store. Non-string values will be converted to a string via JSON.stringify
 */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function setOutput(name, value) {
    command_1.issueCommand('set-output', { name }, value);
 }
 exports.setOutput = setOutput;
+/**
+ * Enables or disables the echoing of commands into stdout for the rest of the step.
+ * Echoing is disabled by default if ACTIONS_STEP_DEBUG is not set.
+ *
+ */
+function setCommandEcho(enabled) {
+    command_1.issue('echo', enabled ? 'on' : 'off');
+}
+exports.setCommandEcho = setCommandEcho;
 //-----------------------------------------------------------------------
 // Results
 //-----------------------------------------------------------------------
@@ -3010,6 +3128,13 @@ exports.setFailed = setFailed;
 //-----------------------------------------------------------------------
 // Logging Commands
 //-----------------------------------------------------------------------
+/**
+ * Gets whether Actions Step Debug is on or not
+ */
+function isDebug() {
+    return process.env['RUNNER_DEBUG'] === '1';
+}
+exports.isDebug = isDebug;
 /**
 * Writes debug message to user log
 * @param message debug message
@@ -3020,20 +3145,92 @@ function debug(message) {
 exports.debug = debug;
 /**
 * Adds an error issue
- * @param message error issue message
+ * @param message error issue message. Errors will be converted to string via toString()
 */
 function error(message) {
-    command_1.issue('error', message);
+    command_1.issue('error', message instanceof Error ? message.toString() : message);
 }
 exports.error = error;
 /**
 * Adds an warning issue
- * @param message warning issue message
+ * @param message warning issue message. Errors will be converted to string via toString()
 */
 function warning(message) {
-    command_1.issue('warning', message);
+    command_1.issue('warning', message instanceof Error ? message.toString() : message);
 }
 exports.warning = warning;
+/**
+ * Writes info to log with console.log.
+ * @param message info message
+ */
+function info(message) {
+    process.stdout.write(message + os.EOL);
+}
+exports.info = info;
+/**
+ * Begin an output group.
+ *
+ * Output until the next `groupEnd` will be foldable in this group
+ *
+ * @param name The name of the output group
+ */
+function startGroup(name) {
+    command_1.issue('group', name);
+}
+exports.startGroup = startGroup;
+/**
+ * End an output group.
+ */
+function endGroup() {
+    command_1.issue('endgroup');
+}
+exports.endGroup = endGroup;
+/**
+ * Wrap an asynchronous function call in a group.
+ *
+ * Returns the same type as the function itself.
+ *
+ * @param name The name of the group
+ * @param fn The function to wrap in the group
+ */
+function group(name, fn) {
+    return __awaiter(this, void 0, void 0, function* () {
+        startGroup(name);
+        let result;
+        try {
+            result = yield fn();
+        }
+        finally {
+            endGroup();
+        }
+        return result;
+    });
+}
+exports.group = group;
+//-----------------------------------------------------------------------
+// Wrapper action state
+//-----------------------------------------------------------------------
+/**
+ * Saves state for current action, the state can only be retrieved by this action's post job execution.
+ *
+ * @param     name     name of the state to store
+ * @param     value    value to store. Non-string values will be converted to a string via JSON.stringify
+ */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function saveState(name, value) {
+    command_1.issueCommand('save-state', { name }, value);
+}
+exports.saveState = saveState;
+/**
+ * Gets the value of an state set by this action's main execution.
+ *
+ * @param     name     name of the state to get
+ * @returns   string
+ */
+function getState(name) {
+    return process.env[`STATE_${name}`] || '';
+}
+exports.getState = getState;
 //# sourceMappingURL=core.js.map

 /***/ }),
@@ -3772,31 +3969,65 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core = __importStar(__webpack_require__(470));
 const exec = __importStar(__webpack_require__(986));
 const tc = __importStar(__webpack_require__(533));
+const fs = __importStar(__webpack_require__(747));
+const https = __importStar(__webpack_require__(211));
 const path = __importStar(__webpack_require__(622));
 const installer = __importStar(__webpack_require__(749));
 function run() {
    return __awaiter(this, void 0, void 0, function* () {
        try {
+            // Debugging info
+            if (core.isDebug()) {
+                // Log Runner IP Address
+                https.get('https://httpbin.julialang.org/ip', resp => {
+                    let data = '';
+                    resp.on('data', chunk => {
+                        data += chunk;
+                    });
+                    resp.on('end', () => {
+                        core.debug(`Runner IP address: ${JSON.parse(data).origin}`);
+                    });
+                }).on('error', err => {
+                    core.debug(`ERROR: Could not retrieve runner IP: ${err}`);
+                });
+            }
+            // Inputs
            const versionInput = core.getInput('version');
            const arch = core.getInput('arch');
-            const availableReleases = installer.juliaVersions;
-            const version = yield installer.getJuliaVersion(availableReleases, versionInput);
+            // It can easily happen that, for example, a workflow file contains an input `version: ${{ matrix.julia-version }}`
+            // while the strategy matrix only contains a key `${{ matrix.version }}`.
+            // In that case, we want the action to fail, rather than trying to download julia from an URL that's missing parts and 404ing.
+            // We _could_ fall back to the default but that means that builds silently do things differently than they're meant to, which
+            // is worse than failing the build.
+            if (!versionInput) {
+                throw new Error('Version input must not be null');
+            }
+            if (!arch) {
+                throw new Error(`Arch input must not be null`);
+            }
+            const versionInfo = yield installer.getJuliaVersionInfo();
+            const availableReleases = yield installer.getJuliaVersions(versionInfo);
+            const version = installer.getJuliaVersion(availableReleases, versionInput);
            core.debug(`selected Julia version: ${arch}/${version}`);
            // Search in cache
            let juliaPath;
            juliaPath = tc.find('julia', version, arch);
            if (!juliaPath) {
-                core.debug(`could not find Julia ${version} in cache`);
-                const juliaInstallationPath = yield installer.installJulia(version, arch);
+                core.debug(`could not find Julia ${arch}/${version} in cache`);
+                const juliaInstallationPath = yield installer.installJulia(versionInfo, version, arch);
                // Add it to cache
                juliaPath = yield tc.cacheDir(juliaInstallationPath, 'julia', version, arch);
                core.debug(`added Julia to cache: ${juliaPath}`);
+                // Remove temporary dir
+                fs.rmdirSync(juliaInstallationPath, { recursive: true });
            }
            else {
                core.debug(`using cached version of Julia: ${juliaPath}`);
            }
            // Add it to PATH
            core.addPath(path.join(juliaPath, 'bin'));
+            // Set output
+            core.setOutput('julia-bindir', path.join(juliaPath, 'bin'));
            // Test if Julia has been installed
            exec.exec('julia', ['--version']);
            // If enabled, also show the full version info
@@ -3845,122 +4076,167 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core = __importStar(__webpack_require__(470));
 const exec = __importStar(__webpack_require__(986));
 const tc = __importStar(__webpack_require__(533));
+const crypto = __importStar(__webpack_require__(417));
+const fs = __importStar(__webpack_require__(747));
 const os = __importStar(__webpack_require__(87));
 const path = __importStar(__webpack_require__(622));
 const semver = __importStar(__webpack_require__(280));
+// Translations between actions input and Julia arch names
+const osMap = {
+    'win32': 'winnt',
+    'darwin': 'mac',
+    'linux': 'linux'
+};
+const archMap = {
+    'x86': 'i686',
+    'x64': 'x86_64'
+};
 // Store information about the environment
 const osPlat = os.platform(); // possible values: win32 (Windows), linux (Linux), darwin (macOS)
 core.debug(`platform: ${osPlat}`);
-// This is temporary until we have a better way of fetching releases (see #1, #4 for details)
-exports.juliaVersions = ['v1.5.0-beta1', 'v1.4.2', 'v1.4.1', 'v1.4.0', 'v1.4.0-rc2', 'v1.4.0-rc1', 'v1.3.1', 'v1.3.0', 'v1.3.0-rc5', 'v1.3.0-rc4', 'v1.3.0-rc3', 'v1.3.0-rc2', 'v1.0.5', 'v1.2.0', 'v1.3.0-rc1', 'v1.2.0-rc3', 'v1.3.0-alpha', 'v1.2.0-rc2', 'v1.2.0-rc1', 'v1.1.1', 'v1.0.4', 'v1.1.0', 'v1.1.0-rc2', 'v1.1.0-rc1', 'v1.0.3', 'v1.0.2', 'v1.0.1', 'v1.0.0', 'v0.7.0', 'v1.0.0-rc1', 'v0.7.0-rc3', 'v0.7.0-rc2', 'v0.7.0-rc1', 'v0.7.0-beta2', 'v0.6.4', 'v0.7.0-beta', 'v0.7.0-alpha', 'v0.6.3', 'v0.6.2', 'v0.6.1', 'v0.6.0', 'v0.6.0-rc3', 'v0.6.0-rc2', 'v0.5.2', 'v0.6.0-rc1', 'v0.6.0-pre.beta', 'v0.5.1', 'v0.6.0-pre.alpha', 'v0.5.0', 'v0.4.7', 'v0.5.0-rc4', 'v0.5.0-rc3', 'v0.5.0-rc2', 'v0.5.0-rc1', 'v0.5.0-rc0', 'v0.4.6', 'v0.4.5', 'v0.4.4', 'v0.4.3', 'v0.4.2', 'v0.4.1', 'v0.3.12', 'v0.4.0', 'v0.4.0-rc4', 'v0.4.0-rc3', 'v0.4.0-rc2', 'v0.4.0-rc1', 'v0.3.11', 'v0.3.10', 'v0.3.9', 'v0.3.8', 'v0.3.7', 'v0.3.6', 'v0.3.5', 'v0.3.4', 'v0.3.3', 'v0.3.2', 'v0.3.1', 'v0.3.0', 'v0.3.0-rc4', 'v0.3.0-rc3', 'v0.3.0-rc2', 'v0.3.0-rc1', 'v0.2.0-rc1', 'v0.2.0-rc3', 'v0.2.0-rc4', 'v0.2.0', 'v0.2.0-rc2'];
-function getJuliaVersion(availableReleases, versionInput) {
+/**
+ * @returns The SHA256 checksum of a given file.
+ */
+function calculateChecksum(file) {
    return __awaiter(this, void 0, void 0, function* () {
-        if (semver.valid(versionInput) == versionInput) {
-            // versionInput is a valid version, use it directly
-            return versionInput;
-        }
-        // nightlies
-        if (versionInput == 'nightly') {
-            return 'nightly';
-        }
-        // Use the highest available version that matches versionInput
-        let version = semver.maxSatisfying(availableReleases, versionInput);
-        if (version == null) {
-            throw `Could not find a Julia version that matches ${versionInput}`;
-        }
-        // GitHub tags start with v, remove it
-        version = version.replace(/^v/, '');
-        return version;
+        const hash = crypto.createHash('sha256');
+        const input = fs.createReadStream(file);
+        return new Promise((resolve, reject) => {
+            input.on('data', (chunk) => {
+                hash.update(chunk);
+            });
+            input.on('end', () => {
+                const digest = hash.digest('hex');
+                digest ? resolve(digest) : reject(new Error(`Could not calculate checksum of file ${file}: digest was empty.`));
+            });
+        });
    });
 }
-exports.getJuliaVersion = getJuliaVersion;
-function getMajorMinorVersion(version) {
-    return version.split('.').slice(0, 2).join('.');
+/**
+ * @returns The content of the downloaded versions.json file as object.
+ */
+function getJuliaVersionInfo() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const versionsFile = yield tc.downloadTool('https://julialang-s3.julialang.org/bin/versions.json');
+        return JSON.parse(fs.readFileSync(versionsFile).toString());
+    });
 }
-function getDownloadURL(version, arch) {
-    let platform;
-    if (osPlat === 'win32') { // Windows
-        platform = 'winnt';
-    }
-    else if (osPlat === 'darwin') { // macOS
-        if (arch == 'x86') {
-            throw '32-bit Julia is not available on macOS';
+exports.getJuliaVersionInfo = getJuliaVersionInfo;
+/**
+ * @returns An array of all Julia versions available for download
+ */
+function getJuliaVersions(versionInfo) {
+    return __awaiter(this, void 0, void 0, function* () {
+        let versions = [];
+        for (let version in versionInfo) {
+            versions.push(version);
        }
-        platform = 'mac';
-    }
-    else if (osPlat === 'linux') { // Linux
-        platform = 'linux';
-    }
-    else {
-        throw `Platform ${osPlat} is not supported`;
+        return versions;
+    });
+}
+exports.getJuliaVersions = getJuliaVersions;
+function getJuliaVersion(availableReleases, versionInput) {
+    if (semver.valid(versionInput) == versionInput) {
+        // versionInput is a valid version, use it directly
+        return versionInput;
    }
    // nightlies
-    if (version == 'nightly') {
-        const baseURL = 'https://julialangnightlies-s3.julialang.org/bin';
-        return `${baseURL}/${platform}/${arch}/${getFileName('latest', arch)}`;
+    if (versionInput == 'nightly') {
+        return 'nightly';
    }
-    // normal versions
-    const baseURL = 'https://julialang-s3.julialang.org/bin';
-    const versionDir = getMajorMinorVersion(version);
-    return `${baseURL}/${platform}/${arch}/${versionDir}/${getFileName(version, arch)}`;
+    // Use the highest available version that matches versionInput
+    let version = semver.maxSatisfying(availableReleases, versionInput);
+    if (version == null) {
+        throw new Error(`Could not find a Julia version that matches ${versionInput}`);
+    }
+    // GitHub tags start with v, remove it
+    version = version.replace(/^v/, '');
+    return version;
 }
-function getFileName(version, arch) {
+exports.getJuliaVersion = getJuliaVersion;
+function getNightlyFileName(arch) {
    let versionExt, ext;
-    if (osPlat === 'win32') { // Windows
+    if (osPlat == 'win32') {
        versionExt = arch == 'x64' ? '-win64' : '-win32';
        ext = 'exe';
    }
-    else if (osPlat === 'darwin') { // macOS
+    else if (osPlat == 'darwin') {
        if (arch == 'x86') {
-            throw '32-bit Julia is not available on macOS';
+            throw new Error('32-bit Julia is not available on macOS');
        }
        versionExt = '-mac64';
        ext = 'dmg';
    }
-    else if (osPlat === 'linux') { // Linux
-        if (version == 'latest') { // nightly version
-            versionExt = arch == 'x64' ? '-linux64' : '-linux32';
-        }
-        else {
-            versionExt = arch == 'x64' ? '-linux-x86_64' : '-linux-i686';
-        }
+    else if (osPlat === 'linux') {
+        versionExt = arch == 'x64' ? '-linux64' : '-linux32';
        ext = 'tar.gz';
    }
    else {
-        throw `Platform ${osPlat} is not supported`;
+        throw new Error(`Platform ${osPlat} is not supported`);
    }
-    return `julia-${version}${versionExt}.${ext}`;
+    return `julia-latest${versionExt}.${ext}`;
 }
-function installJulia(version, arch) {
+function getFileInfo(versionInfo, version, arch) {
+    if (version == 'nightly') {
+        return null;
+    }
+    for (let file of versionInfo[version].files) {
+        if (file.os == osMap[osPlat] && file.arch == archMap[arch]) {
+            return file;
+        }
+    }
+    throw `Could not find ${archMap[arch]}/${version} binaries`;
+}
+exports.getFileInfo = getFileInfo;
+function getDownloadURL(fileInfo, version, arch) {
+    // nightlies
+    if (version == 'nightly') {
+        const baseURL = 'https://julialangnightlies-s3.julialang.org/bin';
+        return `${baseURL}/${osMap[osPlat]}/${arch}/${getNightlyFileName(arch)}`;
+    }
+    return fileInfo.url;
+}
+exports.getDownloadURL = getDownloadURL;
+function installJulia(versionInfo, version, arch) {
    return __awaiter(this, void 0, void 0, function* () {
        // Download Julia
-        const downloadURL = getDownloadURL(version, arch);
+        const fileInfo = getFileInfo(versionInfo, version, arch);
+        const downloadURL = getDownloadURL(fileInfo, version, arch);
        core.debug(`downloading Julia from ${downloadURL}`);
        const juliaDownloadPath = yield tc.downloadTool(downloadURL);
+        // Verify checksum
+        if (version != 'nightly') {
+            const checkSum = yield calculateChecksum(juliaDownloadPath);
+            if (fileInfo.sha256 != checkSum) {
+                throw new Error(`Checksum of downloaded file does not match the expected checksum from versions.json.\nExpected: ${fileInfo.sha256}\nGot: ${checkSum}`);
+            }
+            core.debug(`Checksum of downloaded file matches expected checksum: ${checkSum}`);
+        }
+        else {
+            core.debug('Skipping checksum check for nightly binaries.');
+        }
+        const tempInstallDir = fs.mkdtempSync(`julia-${arch}-${version}-`);
        // Install it
        switch (osPlat) {
            case 'linux':
                // tc.extractTar doesn't support stripping components, so we have to call tar manually
-                yield exec.exec('mkdir', [`${process.env.HOME}/julia`]);
-                yield exec.exec('tar', ['xf', juliaDownloadPath, '--strip-components=1', '-C', `${process.env.HOME}/julia`]);
-                return `${process.env.HOME}/julia`;
+                yield exec.exec('tar', ['xf', juliaDownloadPath, '--strip-components=1', '-C', tempInstallDir]);
+                return tempInstallDir;
            case 'win32':
-                const juliaInstallationPath = path.join('C:', 'Julia');
                if (version == 'nightly' || semver.gtr(version, '1.3', { includePrerelease: true })) {
                    // The installer changed in 1.4: https://github.com/JuliaLang/julia/blob/ef0c9108b12f3ae177c51037934351ffa703b0b5/NEWS.md#build-system-changes
-                    yield exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/SILENT /dir=${juliaInstallationPath}" -NoNewWindow -Wait`]);
+                    yield exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/SILENT /dir=${path.join(process.cwd(), tempInstallDir)}" -NoNewWindow -Wait`]);
                }
                else {
-                    yield exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/S /D=${juliaInstallationPath}" -NoNewWindow -Wait`]);
+                    yield exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/S /D=${path.join(process.cwd(), tempInstallDir)}" -NoNewWindow -Wait`]);
                }
-                return juliaInstallationPath;
+                return tempInstallDir;
            case 'darwin':
                yield exec.exec('hdiutil', ['attach', juliaDownloadPath]);
-                yield exec.exec('mkdir', [`${process.env.HOME}/julia`]);
-                yield exec.exec('/bin/bash', ['-c', `cp -a /Volumes/Julia-*/Julia-*.app/Contents/Resources/julia ${process.env.HOME}`]);
-                return `${process.env.HOME}/julia`;
+                yield exec.exec('/bin/bash', ['-c', `cp -a /Volumes/Julia-*/Julia-*.app/Contents/Resources/julia ${tempInstallDir}`]);
+                return path.join(tempInstallDir, 'julia');
            default:
-                throw `Platform ${osPlat} is not supported`;
+                throw new Error(`Platform ${osPlat} is not supported`);
        }
    });
 }
--- a/lib/installer.js
+++ b/lib/installer.js
@@ -18,122 +18,167 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core = __importStar(require("@actions/core"));
 const exec = __importStar(require("@actions/exec"));
 const tc = __importStar(require("@actions/tool-cache"));
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const semver = __importStar(require("semver"));
+// Translations between actions input and Julia arch names
+const osMap = {
+    'win32': 'winnt',
+    'darwin': 'mac',
+    'linux': 'linux'
+};
+const archMap = {
+    'x86': 'i686',
+    'x64': 'x86_64'
+};
 // Store information about the environment
 const osPlat = os.platform(); // possible values: win32 (Windows), linux (Linux), darwin (macOS)
 core.debug(`platform: ${osPlat}`);
-// This is temporary until we have a better way of fetching releases (see #1, #4 for details)
-exports.juliaVersions = ['v1.5.0-beta1', 'v1.4.2', 'v1.4.1', 'v1.4.0', 'v1.4.0-rc2', 'v1.4.0-rc1', 'v1.3.1', 'v1.3.0', 'v1.3.0-rc5', 'v1.3.0-rc4', 'v1.3.0-rc3', 'v1.3.0-rc2', 'v1.0.5', 'v1.2.0', 'v1.3.0-rc1', 'v1.2.0-rc3', 'v1.3.0-alpha', 'v1.2.0-rc2', 'v1.2.0-rc1', 'v1.1.1', 'v1.0.4', 'v1.1.0', 'v1.1.0-rc2', 'v1.1.0-rc1', 'v1.0.3', 'v1.0.2', 'v1.0.1', 'v1.0.0', 'v0.7.0', 'v1.0.0-rc1', 'v0.7.0-rc3', 'v0.7.0-rc2', 'v0.7.0-rc1', 'v0.7.0-beta2', 'v0.6.4', 'v0.7.0-beta', 'v0.7.0-alpha', 'v0.6.3', 'v0.6.2', 'v0.6.1', 'v0.6.0', 'v0.6.0-rc3', 'v0.6.0-rc2', 'v0.5.2', 'v0.6.0-rc1', 'v0.6.0-pre.beta', 'v0.5.1', 'v0.6.0-pre.alpha', 'v0.5.0', 'v0.4.7', 'v0.5.0-rc4', 'v0.5.0-rc3', 'v0.5.0-rc2', 'v0.5.0-rc1', 'v0.5.0-rc0', 'v0.4.6', 'v0.4.5', 'v0.4.4', 'v0.4.3', 'v0.4.2', 'v0.4.1', 'v0.3.12', 'v0.4.0', 'v0.4.0-rc4', 'v0.4.0-rc3', 'v0.4.0-rc2', 'v0.4.0-rc1', 'v0.3.11', 'v0.3.10', 'v0.3.9', 'v0.3.8', 'v0.3.7', 'v0.3.6', 'v0.3.5', 'v0.3.4', 'v0.3.3', 'v0.3.2', 'v0.3.1', 'v0.3.0', 'v0.3.0-rc4', 'v0.3.0-rc3', 'v0.3.0-rc2', 'v0.3.0-rc1', 'v0.2.0-rc1', 'v0.2.0-rc3', 'v0.2.0-rc4', 'v0.2.0', 'v0.2.0-rc2'];
-function getJuliaVersion(availableReleases, versionInput) {
+/**
+ * @returns The SHA256 checksum of a given file.
+ */
+function calculateChecksum(file) {
    return __awaiter(this, void 0, void 0, function* () {
-        if (semver.valid(versionInput) == versionInput) {
-            // versionInput is a valid version, use it directly
-            return versionInput;
-        }
-        // nightlies
-        if (versionInput == 'nightly') {
-            return 'nightly';
-        }
-        // Use the highest available version that matches versionInput
-        let version = semver.maxSatisfying(availableReleases, versionInput);
-        if (version == null) {
-            throw `Could not find a Julia version that matches ${versionInput}`;
-        }
-        // GitHub tags start with v, remove it
-        version = version.replace(/^v/, '');
-        return version;
+        const hash = crypto.createHash('sha256');
+        const input = fs.createReadStream(file);
+        return new Promise((resolve, reject) => {
+            input.on('data', (chunk) => {
+                hash.update(chunk);
+            });
+            input.on('end', () => {
+                const digest = hash.digest('hex');
+                digest ? resolve(digest) : reject(new Error(`Could not calculate checksum of file ${file}: digest was empty.`));
+            });
+        });
    });
 }
-exports.getJuliaVersion = getJuliaVersion;
-function getMajorMinorVersion(version) {
-    return version.split('.').slice(0, 2).join('.');
+/**
+ * @returns The content of the downloaded versions.json file as object.
+ */
+function getJuliaVersionInfo() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const versionsFile = yield tc.downloadTool('https://julialang-s3.julialang.org/bin/versions.json');
+        return JSON.parse(fs.readFileSync(versionsFile).toString());
+    });
 }
-function getDownloadURL(version, arch) {
-    let platform;
-    if (osPlat === 'win32') { // Windows
-        platform = 'winnt';
-    }
-    else if (osPlat === 'darwin') { // macOS
-        if (arch == 'x86') {
-            throw '32-bit Julia is not available on macOS';
+exports.getJuliaVersionInfo = getJuliaVersionInfo;
+/**
+ * @returns An array of all Julia versions available for download
+ */
+function getJuliaVersions(versionInfo) {
+    return __awaiter(this, void 0, void 0, function* () {
+        let versions = [];
+        for (let version in versionInfo) {
+            versions.push(version);
        }
-        platform = 'mac';
-    }
-    else if (osPlat === 'linux') { // Linux
-        platform = 'linux';
-    }
-    else {
-        throw `Platform ${osPlat} is not supported`;
+        return versions;
+    });
+}
+exports.getJuliaVersions = getJuliaVersions;
+function getJuliaVersion(availableReleases, versionInput) {
+    if (semver.valid(versionInput) == versionInput) {
+        // versionInput is a valid version, use it directly
+        return versionInput;
    }
    // nightlies
-    if (version == 'nightly') {
-        const baseURL = 'https://julialangnightlies-s3.julialang.org/bin';
-        return `${baseURL}/${platform}/${arch}/${getFileName('latest', arch)}`;
+    if (versionInput == 'nightly') {
+        return 'nightly';
    }
-    // normal versions
-    const baseURL = 'https://julialang-s3.julialang.org/bin';
-    const versionDir = getMajorMinorVersion(version);
-    return `${baseURL}/${platform}/${arch}/${versionDir}/${getFileName(version, arch)}`;
+    // Use the highest available version that matches versionInput
+    let version = semver.maxSatisfying(availableReleases, versionInput);
+    if (version == null) {
+        throw new Error(`Could not find a Julia version that matches ${versionInput}`);
+    }
+    // GitHub tags start with v, remove it
+    version = version.replace(/^v/, '');
+    return version;
 }
-function getFileName(version, arch) {
+exports.getJuliaVersion = getJuliaVersion;
+function getNightlyFileName(arch) {
    let versionExt, ext;
-    if (osPlat === 'win32') { // Windows
+    if (osPlat == 'win32') {
        versionExt = arch == 'x64' ? '-win64' : '-win32';
        ext = 'exe';
    }
-    else if (osPlat === 'darwin') { // macOS
+    else if (osPlat == 'darwin') {
        if (arch == 'x86') {
-            throw '32-bit Julia is not available on macOS';
+            throw new Error('32-bit Julia is not available on macOS');
        }
        versionExt = '-mac64';
        ext = 'dmg';
    }
-    else if (osPlat === 'linux') { // Linux
-        if (version == 'latest') { // nightly version
-            versionExt = arch == 'x64' ? '-linux64' : '-linux32';
-        }
-        else {
-            versionExt = arch == 'x64' ? '-linux-x86_64' : '-linux-i686';
-        }
+    else if (osPlat === 'linux') {
+        versionExt = arch == 'x64' ? '-linux64' : '-linux32';
        ext = 'tar.gz';
    }
    else {
-        throw `Platform ${osPlat} is not supported`;
+        throw new Error(`Platform ${osPlat} is not supported`);
    }
-    return `julia-${version}${versionExt}.${ext}`;
+    return `julia-latest${versionExt}.${ext}`;
 }
-function installJulia(version, arch) {
+function getFileInfo(versionInfo, version, arch) {
+    if (version == 'nightly') {
+        return null;
+    }
+    for (let file of versionInfo[version].files) {
+        if (file.os == osMap[osPlat] && file.arch == archMap[arch]) {
+            return file;
+        }
+    }
+    throw `Could not find ${archMap[arch]}/${version} binaries`;
+}
+exports.getFileInfo = getFileInfo;
+function getDownloadURL(fileInfo, version, arch) {
+    // nightlies
+    if (version == 'nightly') {
+        const baseURL = 'https://julialangnightlies-s3.julialang.org/bin';
+        return `${baseURL}/${osMap[osPlat]}/${arch}/${getNightlyFileName(arch)}`;
+    }
+    return fileInfo.url;
+}
+exports.getDownloadURL = getDownloadURL;
+function installJulia(versionInfo, version, arch) {
    return __awaiter(this, void 0, void 0, function* () {
        // Download Julia
-        const downloadURL = getDownloadURL(version, arch);
+        const fileInfo = getFileInfo(versionInfo, version, arch);
+        const downloadURL = getDownloadURL(fileInfo, version, arch);
        core.debug(`downloading Julia from ${downloadURL}`);
        const juliaDownloadPath = yield tc.downloadTool(downloadURL);
+        // Verify checksum
+        if (version != 'nightly') {
+            const checkSum = yield calculateChecksum(juliaDownloadPath);
+            if (fileInfo.sha256 != checkSum) {
+                throw new Error(`Checksum of downloaded file does not match the expected checksum from versions.json.\nExpected: ${fileInfo.sha256}\nGot: ${checkSum}`);
+            }
+            core.debug(`Checksum of downloaded file matches expected checksum: ${checkSum}`);
+        }
+        else {
+            core.debug('Skipping checksum check for nightly binaries.');
+        }
+        const tempInstallDir = fs.mkdtempSync(`julia-${arch}-${version}-`);
        // Install it
        switch (osPlat) {
            case 'linux':
                // tc.extractTar doesn't support stripping components, so we have to call tar manually
-                yield exec.exec('mkdir', [`${process.env.HOME}/julia`]);
-                yield exec.exec('tar', ['xf', juliaDownloadPath, '--strip-components=1', '-C', `${process.env.HOME}/julia`]);
-                return `${process.env.HOME}/julia`;
+                yield exec.exec('tar', ['xf', juliaDownloadPath, '--strip-components=1', '-C', tempInstallDir]);
+                return tempInstallDir;
            case 'win32':
-                const juliaInstallationPath = path.join('C:', 'Julia');
                if (version == 'nightly' || semver.gtr(version, '1.3', { includePrerelease: true })) {
                    // The installer changed in 1.4: https://github.com/JuliaLang/julia/blob/ef0c9108b12f3ae177c51037934351ffa703b0b5/NEWS.md#build-system-changes
-                    yield exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/SILENT /dir=${juliaInstallationPath}" -NoNewWindow -Wait`]);
+                    yield exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/SILENT /dir=${path.join(process.cwd(), tempInstallDir)}" -NoNewWindow -Wait`]);
                }
                else {
-                    yield exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/S /D=${juliaInstallationPath}" -NoNewWindow -Wait`]);
+                    yield exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/S /D=${path.join(process.cwd(), tempInstallDir)}" -NoNewWindow -Wait`]);
                }
-                return juliaInstallationPath;
+                return tempInstallDir;
            case 'darwin':
                yield exec.exec('hdiutil', ['attach', juliaDownloadPath]);
-                yield exec.exec('mkdir', [`${process.env.HOME}/julia`]);
-                yield exec.exec('/bin/bash', ['-c', `cp -a /Volumes/Julia-*/Julia-*.app/Contents/Resources/julia ${process.env.HOME}`]);
-                return `${process.env.HOME}/julia`;
+                yield exec.exec('/bin/bash', ['-c', `cp -a /Volumes/Julia-*/Julia-*.app/Contents/Resources/julia ${tempInstallDir}`]);
+                return path.join(tempInstallDir, 'julia');
            default:
-                throw `Platform ${osPlat} is not supported`;
+                throw new Error(`Platform ${osPlat} is not supported`);
        }
    });
 }
--- a/lib/setup-julia.js
+++ b/lib/setup-julia.js
@@ -18,31 +18,65 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core = __importStar(require("@actions/core"));
 const exec = __importStar(require("@actions/exec"));
 const tc = __importStar(require("@actions/tool-cache"));
+const fs = __importStar(require("fs"));
+const https = __importStar(require("https"));
 const path = __importStar(require("path"));
 const installer = __importStar(require("./installer"));
 function run() {
    return __awaiter(this, void 0, void 0, function* () {
        try {
+            // Debugging info
+            if (core.isDebug()) {
+                // Log Runner IP Address
+                https.get('https://httpbin.julialang.org/ip', resp => {
+                    let data = '';
+                    resp.on('data', chunk => {
+                        data += chunk;
+                    });
+                    resp.on('end', () => {
+                        core.debug(`Runner IP address: ${JSON.parse(data).origin}`);
+                    });
+                }).on('error', err => {
+                    core.debug(`ERROR: Could not retrieve runner IP: ${err}`);
+                });
+            }
+            // Inputs
            const versionInput = core.getInput('version');
            const arch = core.getInput('arch');
-            const availableReleases = installer.juliaVersions;
-            const version = yield installer.getJuliaVersion(availableReleases, versionInput);
+            // It can easily happen that, for example, a workflow file contains an input `version: ${{ matrix.julia-version }}`
+            // while the strategy matrix only contains a key `${{ matrix.version }}`.
+            // In that case, we want the action to fail, rather than trying to download julia from an URL that's missing parts and 404ing.
+            // We _could_ fall back to the default but that means that builds silently do things differently than they're meant to, which
+            // is worse than failing the build.
+            if (!versionInput) {
+                throw new Error('Version input must not be null');
+            }
+            if (!arch) {
+                throw new Error(`Arch input must not be null`);
+            }
+            const versionInfo = yield installer.getJuliaVersionInfo();
+            const availableReleases = yield installer.getJuliaVersions(versionInfo);
+            const version = installer.getJuliaVersion(availableReleases, versionInput);
            core.debug(`selected Julia version: ${arch}/${version}`);
            // Search in cache
            let juliaPath;
            juliaPath = tc.find('julia', version, arch);
            if (!juliaPath) {
-                core.debug(`could not find Julia ${version} in cache`);
-                const juliaInstallationPath = yield installer.installJulia(version, arch);
+                core.debug(`could not find Julia ${arch}/${version} in cache`);
+                const juliaInstallationPath = yield installer.installJulia(versionInfo, version, arch);
                // Add it to cache
                juliaPath = yield tc.cacheDir(juliaInstallationPath, 'julia', version, arch);
                core.debug(`added Julia to cache: ${juliaPath}`);
+                // Remove temporary dir
+                fs.rmdirSync(juliaInstallationPath, { recursive: true });
            }
            else {
                core.debug(`using cached version of Julia: ${juliaPath}`);
            }
            // Add it to PATH
            core.addPath(path.join(juliaPath, 'bin'));
+            // Set output
+            core.setOutput('julia-bindir', path.join(juliaPath, 'bin'));
            // Test if Julia has been installed
            exec.exec('julia', ['--version']);
            // If enabled, also show the full version info
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,13 +1,13 @@
 {
  "name": "setup-julia",
-  "version": "1.1.7",
+  "version": "1.4.1",
  "lockfileVersion": 1,
  "requires": true,
  "dependencies": {
    "@actions/core": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.0.0.tgz",
-      "integrity": "sha512-aMIlkx96XH4E/2YZtEOeyrYQfhlas9jIRkfGPqMwXD095Rdkzo4lB6ZmbxPQSzD+e1M+Xsm98ZhuSMYGv/AlqA=="
+      "version": "1.2.6",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.2.6.tgz",
+      "integrity": "sha512-ZQYitnqiyBc3D+k7LsgSBmMDVkOVidaagDG7j3fOym77jNunWRuYx7VSHa9GNfFZh+zh61xsCjRj4JxMZlDqTA=="
    },
    "@actions/exec": {
      "version": "1.0.0",
@@ -5235,9 +5235,9 @@
      }
    },
    "lodash": {
-      "version": "4.17.15",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
-      "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
+      "version": "4.17.19",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz",
+      "integrity": "sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==",
      "dev": true
    },
    "lodash.memoize": {
@@ -5461,6 +5461,36 @@
      "integrity": "sha512-1nh45deeb5olNY7eX82BkPO7SSxR5SSYJiPTrTdFUVYwAl8CKMA5N9PjTYkHiRjisVcxcQ1HXdLhx2qxxJzLNQ==",
      "dev": true
    },
+    "nock": {
+      "version": "11.7.2",
+      "resolved": "https://registry.npmjs.org/nock/-/nock-11.7.2.tgz",
+      "integrity": "sha512-7swr5bL1xBZ5FctyubjxEVySXOSebyqcL7Vy1bx1nS9IUqQWj81cmKjVKJLr8fHhtzI1MV8nyCdENA/cGcY1+Q==",
+      "dev": true,
+      "requires": {
+        "debug": "^4.1.0",
+        "json-stringify-safe": "^5.0.1",
+        "lodash": "^4.17.13",
+        "mkdirp": "^0.5.0",
+        "propagate": "^2.0.0"
+      },
+      "dependencies": {
+        "debug": {
+          "version": "4.1.1",
+          "resolved": "https://registry.npmjs.org/debug/-/debug-4.1.1.tgz",
+          "integrity": "sha512-pYAIzeRo8J6KPEaJ0VWOh5Pzkbw/RetuzehGM7QRRX5he4fPHx2rdKMB256ehJCkX+XRQm16eZLqLNS8RSZXZw==",
+          "dev": true,
+          "requires": {
+            "ms": "^2.1.1"
+          }
+        },
+        "ms": {
+          "version": "2.1.2",
+          "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
+          "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==",
+          "dev": true
+        }
+      }
+    },
    "node-int64": {
      "version": "0.4.0",
      "resolved": "https://registry.npmjs.org/node-int64/-/node-int64-0.4.0.tgz",
@@ -5821,6 +5851,12 @@
        "sisteransi": "^1.0.4"
      }
    },
+    "propagate": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/propagate/-/propagate-2.0.1.tgz",
+      "integrity": "sha512-vGrhOavPSTz4QVNuBNdcNXePNdNMaO1xj9yBeH1ScQPjk/rhg9sSlCXPhMkFuaNNW/syTvYqsnbIJxMBfRbbag==",
+      "dev": true
+    },
    "psl": {
      "version": "1.7.0",
      "resolved": "https://registry.npmjs.org/psl/-/psl-1.7.0.tgz",
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "setup-julia",
-  "version": "1.1.7",
+  "version": "1.4.1",
  "private": true,
  "description": "setup Julia action",
  "main": "lib/setup-julia.js",
@@ -21,7 +21,7 @@
  "author": "Sascha Mann <git@mail.saschamann.eu>",
  "license": "MIT",
  "dependencies": {
-    "@actions/core": "^1.0.0",
+    "@actions/core": "^1.2.6",
    "@actions/exec": "^1.0.0",
    "@actions/io": "^1.0.0",
    "@actions/tool-cache": "^1.0.0",
@@ -34,6 +34,7 @@
    "@zeit/ncc": "^0.22.0",
    "jest": "^24.8.0",
    "jest-circus": "^24.7.1",
+    "nock": "^11.7.2",
    "prettier": "^1.17.1",
    "ts-jest": "^26.0.0",
    "typescript": "^3.5.1"
--- a/src/installer.ts
+++ b/src/installer.ts
@@ -2,19 +2,70 @@ import * as core from '@actions/core'
 import * as exec from '@actions/exec'
 import * as tc from '@actions/tool-cache'

+import * as crypto from 'crypto'
+import * as fs from 'fs'
 import * as os from 'os'
 import * as path from 'path'

 import * as semver from 'semver'

+// Translations between actions input and Julia arch names
+const osMap = {
+    'win32': 'winnt',
+    'darwin': 'mac',
+    'linux': 'linux'
+}
+const archMap = {
+    'x86': 'i686',
+    'x64': 'x86_64'
+}
+
 // Store information about the environment
 const osPlat = os.platform() // possible values: win32 (Windows), linux (Linux), darwin (macOS)
 core.debug(`platform: ${osPlat}`)

-// This is temporary until we have a better way of fetching releases (see #1, #4 for details)
-export const juliaVersions = ['v1.5.0-beta1', 'v1.4.2', 'v1.4.1', 'v1.4.0', 'v1.4.0-rc2', 'v1.4.0-rc1', 'v1.3.1', 'v1.3.0', 'v1.3.0-rc5', 'v1.3.0-rc4', 'v1.3.0-rc3', 'v1.3.0-rc2', 'v1.0.5', 'v1.2.0', 'v1.3.0-rc1', 'v1.2.0-rc3', 'v1.3.0-alpha', 'v1.2.0-rc2', 'v1.2.0-rc1', 'v1.1.1', 'v1.0.4', 'v1.1.0', 'v1.1.0-rc2', 'v1.1.0-rc1', 'v1.0.3', 'v1.0.2', 'v1.0.1', 'v1.0.0', 'v0.7.0', 'v1.0.0-rc1', 'v0.7.0-rc3', 'v0.7.0-rc2', 'v0.7.0-rc1', 'v0.7.0-beta2', 'v0.6.4', 'v0.7.0-beta', 'v0.7.0-alpha', 'v0.6.3', 'v0.6.2', 'v0.6.1', 'v0.6.0', 'v0.6.0-rc3', 'v0.6.0-rc2', 'v0.5.2', 'v0.6.0-rc1', 'v0.6.0-pre.beta', 'v0.5.1', 'v0.6.0-pre.alpha', 'v0.5.0', 'v0.4.7', 'v0.5.0-rc4', 'v0.5.0-rc3', 'v0.5.0-rc2', 'v0.5.0-rc1', 'v0.5.0-rc0', 'v0.4.6', 'v0.4.5', 'v0.4.4', 'v0.4.3', 'v0.4.2', 'v0.4.1', 'v0.3.12', 'v0.4.0', 'v0.4.0-rc4', 'v0.4.0-rc3', 'v0.4.0-rc2', 'v0.4.0-rc1', 'v0.3.11', 'v0.3.10', 'v0.3.9', 'v0.3.8', 'v0.3.7', 'v0.3.6', 'v0.3.5', 'v0.3.4', 'v0.3.3', 'v0.3.2', 'v0.3.1', 'v0.3.0', 'v0.3.0-rc4', 'v0.3.0-rc3', 'v0.3.0-rc2', 'v0.3.0-rc1', 'v0.2.0-rc1', 'v0.2.0-rc3', 'v0.2.0-rc4', 'v0.2.0', 'v0.2.0-rc2']
+/**
+ * @returns The SHA256 checksum of a given file.
+ */
+async function calculateChecksum(file: string): Promise<string> {
+    const hash = crypto.createHash('sha256')
+    const input = fs.createReadStream(file)

-export async function getJuliaVersion(availableReleases: string[], versionInput: string): Promise<string> {
+    return new Promise((resolve, reject) => {
+        input.on('data', (chunk) => {
+            hash.update(chunk)
+        })
+
+        input.on('end', () => {
+            const digest = hash.digest('hex')
+            digest ? resolve(digest) : reject(new Error(`Could not calculate checksum of file ${file}: digest was empty.`))
+        })
+    })
+}
+
+/**
+ * @returns The content of the downloaded versions.json file as object.
+ */
+export async function getJuliaVersionInfo(): Promise<object> {
+    const versionsFile = await tc.downloadTool('https://julialang-s3.julialang.org/bin/versions.json')
+
+    return JSON.parse(fs.readFileSync(versionsFile).toString())
+}
+
+/**
+ * @returns An array of all Julia versions available for download
+ */
+export async function getJuliaVersions(versionInfo): Promise<string[]> {
+    let versions: string[] = []
+
+    for (let version in versionInfo) {
+        versions.push(version)
+    }
+
+    return versions
+}
+
+export function getJuliaVersion(availableReleases: string[], versionInput: string): string {
    if (semver.valid(versionInput) == versionInput) {
        // versionInput is a valid version, use it directly
        return versionInput
@@ -28,7 +79,7 @@ export async function getJuliaVersion(availableReleases: string[], versionInput:
    // Use the highest available version that matches versionInput
    let version = semver.maxSatisfying(availableReleases, versionInput)
    if (version == null) {
-        throw `Could not find a Julia version that matches ${versionInput}`
+        throw new Error(`Could not find a Julia version that matches ${versionInput}`)
    }

    // GitHub tags start with v, remove it
@@ -37,93 +88,91 @@ export async function getJuliaVersion(availableReleases: string[], versionInput:
    return version
 }

-function getMajorMinorVersion(version: string): string {
-    return version.split('.').slice(0, 2).join('.')
-}
-
-function getDownloadURL(version: string, arch: string): string {
-    let platform: string
-
-    if (osPlat === 'win32') { // Windows
-        platform = 'winnt'
-    } else if (osPlat === 'darwin') { // macOS
-        if (arch == 'x86') {
-            throw '32-bit Julia is not available on macOS'
-        }
-        platform = 'mac'
-    } else if (osPlat === 'linux') { // Linux
-        platform = 'linux'
-    } else {
-        throw `Platform ${osPlat} is not supported`
-    }
-
-    // nightlies
-    if (version == 'nightly') {
-        const baseURL = 'https://julialangnightlies-s3.julialang.org/bin'
-        return `${baseURL}/${platform}/${arch}/${getFileName('latest', arch)}`
-    }
-
-    // normal versions
-    const baseURL = 'https://julialang-s3.julialang.org/bin'
-    const versionDir = getMajorMinorVersion(version)
-
-    return `${baseURL}/${platform}/${arch}/${versionDir}/${getFileName(version, arch)}`
-}
-
-function getFileName(version: string, arch: string): string {
+function getNightlyFileName(arch: string): string {
    let versionExt: string, ext: string

-    if (osPlat === 'win32') { // Windows
+    if (osPlat == 'win32') {
        versionExt = arch == 'x64' ? '-win64' : '-win32'
        ext = 'exe'
-    } else if (osPlat === 'darwin') { // macOS
+    } else if (osPlat == 'darwin') {
        if (arch == 'x86') {
-            throw '32-bit Julia is not available on macOS'
+            throw new Error('32-bit Julia is not available on macOS')
        }
        versionExt = '-mac64'
        ext = 'dmg'
-    } else if (osPlat === 'linux') { // Linux
-        if (version == 'latest') { // nightly version
-            versionExt = arch == 'x64' ? '-linux64' : '-linux32'
-        } else {
-            versionExt = arch == 'x64' ? '-linux-x86_64' : '-linux-i686'
-        }
+    } else if (osPlat === 'linux') {
+        versionExt = arch == 'x64' ? '-linux64' : '-linux32'
        ext = 'tar.gz'
    } else {
-        throw `Platform ${osPlat} is not supported`
+        throw new Error(`Platform ${osPlat} is not supported`)
    }

-    return `julia-${version}${versionExt}.${ext}`
+    return `julia-latest${versionExt}.${ext}`
 }

-export async function installJulia(version: string, arch: string): Promise<string> {
+export function getFileInfo(versionInfo, version: string, arch: string) {
+    if (version == 'nightly') {
+        return null
+    }
+
+    for (let file of versionInfo[version].files) {
+        if (file.os == osMap[osPlat] && file.arch == archMap[arch]) {
+            return file
+        }
+    }
+
+    throw `Could not find ${archMap[arch]}/${version} binaries`
+}
+
+export function getDownloadURL(fileInfo, version: string, arch: string): string {
+    // nightlies
+    if (version == 'nightly') {
+        const baseURL = 'https://julialangnightlies-s3.julialang.org/bin'
+        return `${baseURL}/${osMap[osPlat]}/${arch}/${getNightlyFileName(arch)}`
+    }
+
+    return fileInfo.url
+}
+
+export async function installJulia(versionInfo, version: string, arch: string): Promise<string> {
    // Download Julia
-    const downloadURL = getDownloadURL(version, arch)
+    const fileInfo = getFileInfo(versionInfo, version, arch)
+    const downloadURL = getDownloadURL(fileInfo, version, arch)
    core.debug(`downloading Julia from ${downloadURL}`)
    const juliaDownloadPath = await tc.downloadTool(downloadURL)

+    // Verify checksum
+    if (version != 'nightly') {
+        const checkSum = await calculateChecksum(juliaDownloadPath)
+        if (fileInfo.sha256 != checkSum) {
+            throw new Error(`Checksum of downloaded file does not match the expected checksum from versions.json.\nExpected: ${fileInfo.sha256}\nGot: ${checkSum}`)
+        }
+        core.debug(`Checksum of downloaded file matches expected checksum: ${checkSum}`)
+    } else {
+        core.debug('Skipping checksum check for nightly binaries.')
+    }
+
+    const tempInstallDir = fs.mkdtempSync(`julia-${arch}-${version}-`)
+
    // Install it
    switch (osPlat) {
        case 'linux':
            // tc.extractTar doesn't support stripping components, so we have to call tar manually
-            await exec.exec('mkdir', [`${process.env.HOME}/julia`])
-            await exec.exec('tar', ['xf', juliaDownloadPath, '--strip-components=1', '-C', `${process.env.HOME}/julia`])
-            return `${process.env.HOME}/julia`
+            await exec.exec('tar', ['xf', juliaDownloadPath, '--strip-components=1', '-C', tempInstallDir])
+            return tempInstallDir
        case 'win32':
-            const juliaInstallationPath = path.join('C:', 'Julia')
            if (version == 'nightly' || semver.gtr(version, '1.3', {includePrerelease: true})) {
                // The installer changed in 1.4: https://github.com/JuliaLang/julia/blob/ef0c9108b12f3ae177c51037934351ffa703b0b5/NEWS.md#build-system-changes
-                await exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/SILENT /dir=${juliaInstallationPath}" -NoNewWindow -Wait`])
+                await exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/SILENT /dir=${path.join(process.cwd(), tempInstallDir)}" -NoNewWindow -Wait`])
            } else {
-                await exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/S /D=${juliaInstallationPath}" -NoNewWindow -Wait`])
+                await exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/S /D=${path.join(process.cwd(), tempInstallDir)}" -NoNewWindow -Wait`])
            }
-            return juliaInstallationPath
+            return tempInstallDir
        case 'darwin':
            await exec.exec('hdiutil', ['attach', juliaDownloadPath])
-            await exec.exec('mkdir', [`${process.env.HOME}/julia`])
-            await exec.exec('/bin/bash', ['-c', `cp -a /Volumes/Julia-*/Julia-*.app/Contents/Resources/julia ${process.env.HOME}`])
-            return `${process.env.HOME}/julia`
+            await exec.exec('/bin/bash', ['-c', `cp -a /Volumes/Julia-*/Julia-*.app/Contents/Resources/julia ${tempInstallDir}`])
+            return path.join(tempInstallDir, 'julia')
        default:
-            throw `Platform ${osPlat} is not supported`
+            throw new Error(`Platform ${osPlat} is not supported`)
    }
 }
--- a/src/setup-julia.ts
+++ b/src/setup-julia.ts
@@ -2,16 +2,51 @@ import * as core from '@actions/core'
 import * as exec from '@actions/exec'
 import * as tc from '@actions/tool-cache'

+import * as fs from 'fs'
+import * as https from 'https'
 import * as path from 'path'

 import * as installer from './installer'

 async function run() {
    try {
+        // Debugging info
+        if (core.isDebug()) {
+            // Log Runner IP Address
+            https.get('https://httpbin.julialang.org/ip', resp => {
+                let data = ''
+
+                resp.on('data', chunk => {
+                    data += chunk
+                })
+
+                resp.on('end', () => {
+                    core.debug(`Runner IP address: ${JSON.parse(data).origin}`)
+                })
+            }).on('error', err => {
+                core.debug(`ERROR: Could not retrieve runner IP: ${err}`)
+            })
+        }
+
+        // Inputs
        const versionInput = core.getInput('version')
        const arch = core.getInput('arch')
-        const availableReleases = installer.juliaVersions
-        const version = await installer.getJuliaVersion(availableReleases, versionInput)
+
+        // It can easily happen that, for example, a workflow file contains an input `version: ${{ matrix.julia-version }}`
+        // while the strategy matrix only contains a key `${{ matrix.version }}`.
+        // In that case, we want the action to fail, rather than trying to download julia from an URL that's missing parts and 404ing.
+        // We _could_ fall back to the default but that means that builds silently do things differently than they're meant to, which
+        // is worse than failing the build.
+        if (!versionInput) {
+            throw new Error('Version input must not be null')
+        }
+        if (!arch) {
+            throw new Error(`Arch input must not be null`)
+        }
+
+        const versionInfo = await installer.getJuliaVersionInfo()
+        const availableReleases = await installer.getJuliaVersions(versionInfo)
+        const version = installer.getJuliaVersion(availableReleases, versionInput)
        core.debug(`selected Julia version: ${arch}/${version}`)

        // Search in cache
@@ -19,18 +54,24 @@ async function run() {
        juliaPath = tc.find('julia', version, arch)

        if (!juliaPath) {
-            core.debug(`could not find Julia ${version} in cache`)
-            const juliaInstallationPath = await installer.installJulia(version, arch);
+            core.debug(`could not find Julia ${arch}/${version} in cache`)
+            const juliaInstallationPath = await installer.installJulia(versionInfo, version, arch)

            // Add it to cache
            juliaPath = await tc.cacheDir(juliaInstallationPath, 'julia', version, arch)
            core.debug(`added Julia to cache: ${juliaPath}`)
+
+            // Remove temporary dir
+            fs.rmdirSync(juliaInstallationPath, {recursive: true})
        } else {
            core.debug(`using cached version of Julia: ${juliaPath}`)
        }

        // Add it to PATH
        core.addPath(path.join(juliaPath, 'bin'))
+
+        // Set output
+        core.setOutput('julia-bindir', path.join(juliaPath, 'bin'))
        
        // Test if Julia has been installed
        exec.exec('julia', ['--version'])
Author	SHA1	Message	Date
Sascha Mann	d3ce119a16	Add production dependencies & build	2020-11-09 23:25:44 +01:00
Sascha Mann	405bfcbfbd	Release 1.4.1 There are no code changes, this merely updates the README and therefore the Marketplace description	2020-11-09 23:24:45 +01:00
Sascha Mann	b8741b9a13	Update versioning to reflect recent update	2020-11-09 23:23:44 +01:00
Sascha Mann	9956ebe960	Bump version.	2020-11-08 17:17:31 +01:00
Sascha Mann	71b841c6f2	Verify checksums (#49 ) Co-authored-by: Derk-Jan Karrenbeld <derk-jan+github@karrenbeld.info>	2020-11-08 17:15:46 +01:00
Sascha Mann	45f46ba622	Get Julia versions from versions.json (#24 ) This replaces the hardcoded versions array which will decouple the setup-julia version and the installable Julia versions.	2020-11-08 15:06:21 +01:00
Sascha Mann	c5d801f77b	Add security guide to README	2020-10-20 16:07:10 +02:00
Sascha Mann	82b1b42f54	Bump version	2020-10-07 19:17:44 +02:00
dependabot[bot]	3503abc570	Bump @actions/core from 1.2.4 to 1.2.6 (#47 ) Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.2.4 to 1.2.6. - [Release notes](https://github.com/actions/toolkit/releases) - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2020-10-01 19:29:31 +02:00
Sascha Mann	def57cde21	Bump version to 1.3.0	2020-09-26 18:24:53 +02:00
Sascha Mann	c639390e13	Handle install directories using tool-cache (#46 ) * Make test builds more verbose * Handle install directories using tool-cache * Bump version to 1.3.0-DEV	2020-09-26 18:20:43 +02:00
Sascha Mann	b469b93959	Bump version	2020-09-24 22:10:06 +02:00
Kyungdahm Yun	d622e3db7b	Add Julia 1.5.2	2020-09-24 22:08:18 +02:00
Sascha Mann	8aadcc1915	Add Julia 1.5.1	2020-08-26 21:17:30 +02:00
Sascha Mann	01ebb7f57a	Update example-builds-nightly.yml	2020-08-26 21:14:23 +02:00
Sascha Mann	44bf6b3b7d	Bump version to 1.2.0	2020-08-18 23:05:40 +02:00
Sascha Mann	b4e544c83e	Add IP to debug logs	2020-08-18 23:04:06 +02:00
dependabot-preview[bot]	fc275221aa	Bump bin from `ceb0aec` to `9ceca17` (#42 )	2020-08-03 10:03:49 +00:00
Sascha Mann	f7961d5fc8	Bump version	2020-08-02 15:16:43 +02:00
Sascha Mann	19781e4bbc	Add Julia 1.5.0	2020-08-02 15:12:22 +02:00
dependabot-preview[bot]	1b9230a354	Bump bin from `aca4c56` to `ceb0aec` (#41 )	2020-08-01 10:21:52 +00:00
Sascha Mann	a2cbd4a70f	Re-add scripts as submodule	2020-08-01 12:05:29 +02:00
Sascha Mann	28af8fd3e2	Delete scripts	2020-08-01 11:58:40 +02:00
Sascha Mann	aced07b9c9	Fail build when inputs are empty	2020-07-30 13:21:38 +02:00
Sascha Mann	6b1edeb409	Bump version	2020-07-27 22:10:47 +02:00
Sascha Mann	4f37a4b06c	Add Julia 1.5.0-rc2	2020-07-27 22:06:55 +02:00
Dilum Aluthge	b6c79c651a	Merge pull request #39 from julia-actions/dependabot/npm_and_yarn/lodash-4.17.19 Bump lodash from 4.17.15 to 4.17.19	2020-07-17 21:01:04 -04:00
dependabot[bot]	2686c6a9d0	Bump lodash from 4.17.15 to 4.17.19 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.19. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.15...4.17.19) Signed-off-by: dependabot[bot] <support@github.com>	2020-07-18 00:08:12 +00:00
Sascha Mann	55f774e778	Remove privacy info again See https://discourse.julialang.org/t/pkg-jl-telemetry-should-be-opt-in/42209/374?u=saschamann	2020-07-10 19:46:08 +02:00
Sascha Mann	d2ec2a4741	Remove redundant await	2020-07-10 15:19:45 +02:00
Sascha Mann	e8b6657769	Fix debug step order	2020-07-07 13:51:16 +02:00
Sascha Mann	9935e37e60	Add debug info to nightly builds and increase frequency temporarily	2020-07-06 00:41:49 +02:00
Sascha Mann	5c7eefcc01	Add basic contribution instructions	2020-07-05 16:27:49 +02:00
Sascha Mann	226eae6f8c	Add bug report issue template	2020-07-05 16:22:50 +02:00
Sascha Mann	415c8550da	Bump version	2020-07-05 14:10:58 +02:00
Sascha Mann	85cbcd387e	Fix error throwing throw 'error' does not display an error message on GitHub Actions anymore.	2020-07-05 14:10:57 +02:00
Sascha Mann	802776bd6a	Throw error if version range doesn't match anything fixes #38	2020-07-05 14:10:57 +02:00
Sascha Mann	477bec664c	Fix mistakes in version range examples	2020-07-03 10:15:16 +02:00
Sascha Mann	c766abf0da	Change ^1.3-0 -> ^1.3.0-0 in examples	2020-07-03 10:08:00 +02:00
Sascha Mann	3eb3524cb4	Fix divergence caused by not running npm i before build	2020-06-30 23:45:16 +02:00
Sascha Mann	6ac7df4cef	Add Julia 1.5.0-rc1	2020-06-30 23:39:12 +02:00