Add production dependencies & build

Co-authored-by: Derk-Jan Karrenbeld <derk-jan+github@karrenbeld.info>

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,29 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: "[BUG] "
+labels: bug
+assignees: SaschaMann
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Workflow file to reproduce the behavior:
+
+```yaml
+
+```
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Screenshots/Build logs**
+If applicable, add screenshots to help explain your problem.
+
+If possible, set the repo secret `ACTIONS_STEP_DEBUG` to `true` to [enable debug logs](https://github.com/actions/toolkit/blob/master/docs/action-debugging.md#how-to-access-step-debug-logs) and run the build again for more detailled logs.
+
+**Additional context**
+Add any other context about the problem here.

.github/workflows/example-builds-nightly.yml

@@ -0,0 +1,37 @@
+name: Example builds (nightly)
+
+on:
+  push:
+  pull_request:
+  schedule:
+    - cron: '37 17 * * *'
+
+jobs:
+  test:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        julia-arch: [x64, x86]
+        os: [ubuntu-latest, macOS-latest, windows-latest]
+        # 32-bit Julia binaries are not available on macOS
+        exclude:
+          - os: macOS-latest
+            julia-arch: x86
+    
+    steps:
+      - uses: actions/checkout@v1.0.0
+      
+      - name: "Install dependencies"
+        run: |
+          npm install
+          npm run build
+          npm run pack
+
+      - name: "Set up Julia (nightly)"
+        uses: ./
+        with:
+          version: nightly
+          arch: ${{ matrix.julia-arch }}
+          show-versioninfo: 'true'
+      - run: julia --version

.github/workflows/example-builds.yml

@@ -0,0 +1,35 @@
+name: Example builds
+
+on: [push, pull_request]
+
+jobs:
+  test:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        julia-version: ['1.0.5', '1', '^1.5.0-beta1']
+        julia-arch: [x64, x86]
+        os: [ubuntu-latest, macOS-latest, windows-latest]
+        # 32-bit Julia binaries are not available on macOS
+        exclude:
+          - os: macOS-latest
+            julia-arch: x86
+    
+    steps:
+      - uses: actions/checkout@v1.0.0
+
+      - name: "Install dependencies"
+        run: |
+          npm install
+          npm run build
+          npm run pack
+
+      - name: "Set up Julia"
+        id: setup-julia
+        uses: ./
+        with:
+          version: ${{ matrix.julia-version }}
+          arch: ${{ matrix.julia-arch }}
+          show-versioninfo: 'true'
+      - run: julia --version

.gitignore

@@ -1,2 +1,3 @@
 node_modules/
 __tests__/runner/*
+!dist/

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "bin"]
+	path = bin
+	url = git@github.com:julia-actions/bin.git

CONTRIBUTING.md

@@ -0,0 +1,11 @@
+# Dev docs / Contributing guide
+
+## Building and tagging a release (requires write access)
+
+1. Test your changes, merge into `master`.
+2. Checkout `master`.
+3. Bump the version number in [`package.json`](package.json).
+4. Run `./bin/build-release julia-actions/setup-julia` to create a release branch and build a release.
+5. Push the branch (**without tags**) and verify that CI is passing on it.
+6. Run `git push --tags --force` to update the tags.
+7. Create a release for the `vX.Y.Z` tag.

README.md

@@ -11,7 +11,8 @@ This action sets up a Julia environment for use in actions by downloading a spec
   - [Julia Versions](#julia-versions)
   - [Matrix Testing](#matrix-testing)
 - [Versioning](#versioning)
-- [Licence info](#licence-info)
+- [Debug logs](#debug-logs)
+- [Third party information](#third-party-information)
 
 ## Usage
 
@@ -39,11 +40,14 @@ You can either specify specific Julia versions or version ranges. If you specify
 #### Examples
 
 - `1.2.0` is a valid semver version. The action will try to download exactly this version. If it's not available, the build step will fail.
-- `1.0` is a version range that will match the highest available Julia version that starts with `1.0`, e.g. `1.0.5`.
+- `1.0` is a version range that will match the highest available Julia version that starts with `1.0`, e.g. `1.0.5`, excluding pre-releases.
-- `^1.3.0-rc1` is a caret version range that includes preleases. It matches all versions `≥ 1.3.0-rc1` and `< 1.4.0`.
+- `^1.3.0-rc1` is a **caret** version range that includes pre-releases starting at `rc1`. It matches all versions `≥ 1.3.0-rc1` and `< 2.0.0`.
+- `~1.3.0-rc1` is a **tilde** version range that includes pre-releases starting at `rc1`. It matches all versions `≥ 1.3.0-rc1` and `< 1.4.0`.
+- `^1.3.0-0` is a **caret** version range that includes _all_ pre-releases. It matches all versions `≥ 1.3.0-` and `< 2.0.0`.
+- `~1.3.0-0` is a **tilde** version range that includes _all_ pre-releases. It matches all versions `≥ 1.3.0-` and `< 1.4.0`.
 - `nightly` will install the latest nightly build.
 
-Internally the action uses node's semver package to resolve version ranges. Its [documentation](https://github.com/npm/node-semver#advanced-range-syntax) contains more details on the version range syntax.
+Internally the action uses node's semver package to resolve version ranges. Its [documentation](https://github.com/npm/node-semver#advanced-range-syntax) contains more details on the version range syntax. You can test what version will be selected for a given input in this JavaScript [REPL](https://repl.it/@SaschaMann/setup-julia-version-logic).
 
 #### WARNING: Version ranges are experimental and potentially out of date
 
@@ -51,6 +55,8 @@ Currently the list of available versions is hardcoded. You have to use the lates
 
 ### Matrix Testing
 
+`bash` is chosen as shell to enforce consistent behaviour across operating systems. [Other shells](https://help.github.com/en/actions/reference/workflow-syntax-for-github-actions#using-a-specific-shell) are available but you may have to escape quotation marks or otherwise adjust the syntax.
+
 #### 64-bit Julia only
 
 ```yaml
@@ -69,6 +75,7 @@ jobs:
         with:
           version: ${{ matrix.julia-version }}
       - run: julia -e 'println("Hello, World!")'
+        shell: bash
 ```
 
 #### 32-bit Julia
@@ -95,6 +102,7 @@ jobs:
           version: ${{ matrix.julia-version }}
           arch: ${{ matrix.julia-arch }}
       - run: julia -e 'println("Hello, World!")'
+        shell: bash
 ```
 
 Alternatively, you can include specific version and OS combinations that will use 32-bit Julia:
@@ -120,6 +128,7 @@ jobs:
         with:
           version: ${{ matrix.julia-version }}
       - run: julia -e 'println("Hello, World!")'
+        shell: bash
 ```
 
 ## Versioning
@@ -134,12 +143,22 @@ You can specify commits, branches or tags in your workflows as follows:
 
 ```yaml
 steps:
-  - uses: julia-actions/setup-julia@6ae948d # commit SHA
+  - uses: julia-actions/setup-julia@d26d1111976eae5f00db04f0515ab744ec9cd79e # commit SHA of the tagged 1.3.1 commit
   - uses: julia-actions/setup-julia@master  # branch
   - uses: julia-actions/setup-julia@latest  # latest version tag (may break existing workflows)
   - uses: julia-actions/setup-julia@v1      # major version tag
   - uses: julia-actions/setup-julia@v0.1.0  # specific version tag
 ```
 
-## Licence info
+If your workflow requires access to secrets, you should always pin it to a commit SHA instead of a tag.
-Parts of this software have been derived from the `setup-go` [action](https://github.com/actions/setup-go) and the [TypeScript Action Template](https://github.com/actions/typescript-action), both released by GitHub under the MIT licence.
+This will protect you in case a bad actor gains access to the setup-julia repo.
+You can find more information in [GitHub's security hardening guide](https://docs.github.com/en/free-pro-team@latest/actions/learn-github-actions/security-hardening-for-github-actions#using-third-party-actions).
+
+## Debug logs
+
+You can enable [Step Debug Logs](https://github.com/actions/toolkit/blob/main/docs/action-debugging.md#step-debug-logs) for more detailed logs.
+Note that when debug logs are enabled, a request will be sent to `https://httpbin.julialang.org/ip` and the runner's IP will be printed to the debug logs.
+
+## Third party information
+Parts of this software have been derived from other open source software.
+See [THIRD_PARTY_NOTICE.md](THIRD_PARTY_NOTICE.md) for details.

THIRD_PARTY_NOTICE.md

@@ -0,0 +1,55 @@
+# Third Party Notices and Information
+
+Parts of this software have been derived from other open source software.
+Find their full licence information below.
+
+- [`setup-go` action](#setup-go-action)
+- [TypeScript Action Template](#typescript-action-template)
+
+## [`setup-go` action](https://github.com/actions/setup-go)
+
+> The MIT License (MIT)
+> 
+> Copyright (c) 2018 GitHub, Inc. and contributors
+> 
+> Permission is hereby granted, free of charge, to any person obtaining a copy
+> of this software and associated documentation files (the "Software"), to deal
+> in the Software without restriction, including without limitation the rights
+> to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> copies of the Software, and to permit persons to whom the Software is
+> furnished to do so, subject to the following conditions:
+> 
+> The above copyright notice and this permission notice shall be included in
+> all copies or substantial portions of the Software.
+> 
+> THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+> THE SOFTWARE.
+
+## [TypeScript Action Template](https://github.com/actions/typescript-action)
+
+> The MIT License (MIT)
+>
+> Copyright (c) 2018 GitHub, Inc. and contributors
+> 
+> Permission is hereby granted, free of charge, to any person obtaining a copy
+> of this software and associated documentation files (the "Software"), to deal
+> in the Software without restriction, including without limitation the rights
+> to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> copies of the Software, and to permit persons to whom the Software is
+> furnished to do so, subject to the following conditions:
+> 
+> The above copyright notice and this permission notice shall be included in
+> all copies or substantial portions of the Software.
+> 
+> THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+> THE SOFTWARE.

__tests__/installer.test.ts

@@ -0,0 +1,113 @@
+// The testing setup has been derived from the actions/setup-go@bc6edb5 action.
+// Check README.md for licence information.
+
+import * as path from 'path'
+
+import * as io from '@actions/io'
+
+import nock = require('nock')
+import * as semver from 'semver'
+
+const testVersions = [
+    '0.1.2',       '0.2.0',           '0.2.1',          '0.3.0',
+    '0.3.1',       '0.3.10',          '0.3.11',         '0.3.12',
+    '0.3.2',       '0.3.3',           '0.3.4',          '0.3.5',
+    '0.3.6',       '0.3.7',           '0.3.8',          '0.3.9',
+    '0.4.0',       '0.4.0-rc1',       '0.4.0-rc2',      '0.4.0-rc3',
+    '0.4.0-rc4',   '0.4.1',           '0.4.2',          '0.4.3',
+    '0.4.4',       '0.4.5',           '0.4.6',          '0.4.7',
+    '0.5.0',       '0.5.0-rc0',       '0.5.0-rc1',      '0.5.0-rc2',
+    '0.5.0-rc3',   '0.5.0-rc4',       '0.5.1',          '0.5.2',
+    '0.6.0',       '0.6.0-pre.alpha', '0.6.0-pre.beta', '0.6.0-rc1',
+    '0.6.0-rc2',   '0.6.0-rc3',       '0.6.1',          '0.6.2',
+    '0.6.3',       '0.6.4',           '0.7.0',          '0.7.0-alpha',
+    '0.7.0-beta',  '0.7.0-beta2',     '0.7.0-rc1',      '0.7.0-rc2',
+    '0.7.0-rc3',   '1.0.0',           '1.0.0-rc1',      '1.0.1',
+    '1.0.2',       '1.0.3',           '1.0.4',          '1.0.5',
+    '1.1.0',       '1.1.0-rc1',       '1.1.0-rc2',      '1.1.1',
+    '1.2.0',       '1.2.0-rc1',       '1.2.0-rc2',      '1.2.0-rc3',
+    '1.3.0-alpha', '1.3.0-rc1',       '1.3.0-rc2',      '1.3.0-rc3',
+    '1.3.0-rc4'
+]
+
+const toolDir = path.join(__dirname, 'runner', 'tools')
+const tempDir = path.join(__dirname, 'runner', 'temp')
+const fixtureDir = path.join(__dirname, 'fixtures')
+
+process.env['RUNNER_TOOL_CACHE'] = toolDir
+process.env['RUNNER_TEMP'] = tempDir
+
+import * as installer from '../src/installer'
+
+describe('version matching tests', () => {
+    describe('specific versions', () => {
+        it('Doesn\'t change the version when given a valid semver version', () => {
+            expect(installer.getJuliaVersion([], '1.0.5')).toEqual('1.0.5')
+            expect(installer.getJuliaVersion(['v1.0.5', 'v1.0.6'], '1.0.5')).toEqual('1.0.5')
+            expect(installer.getJuliaVersion(['v1.0.4', 'v1.0.5'], '1.0.5')).toEqual('1.0.5')
+            expect(installer.getJuliaVersion(['v1.0.4'], '1.0.5')).toEqual('1.0.5')
+            expect(installer.getJuliaVersion([], '1.3.0-alpha')).toEqual('1.3.0-alpha')
+            expect(installer.getJuliaVersion(['v1.2.0', 'v1.3.0-alpha', 'v1.3.0-rc1', 'v1.3.0'], '1.3.0-alpha')).toEqual('1.3.0-alpha')
+            expect(installer.getJuliaVersion([], '1.3.0-rc2')).toEqual('1.3.0-rc2')
+        })
+
+        it('Doesn\'t change the version when given `nightly`', () => {
+            expect(installer.getJuliaVersion([], 'nightly')).toEqual('nightly')
+            expect(installer.getJuliaVersion(testVersions, 'nightly')).toEqual('nightly')
+        })
+    })
+
+    describe('version ranges', () => {
+        it('Chooses the highest available version that matches the input', () => {
+            expect(installer.getJuliaVersion(testVersions, '1')).toEqual('1.2.0')
+            expect(installer.getJuliaVersion(testVersions, '1.0')).toEqual('1.0.5')
+            expect(installer.getJuliaVersion(testVersions, '^1.3.0-rc1')).toEqual('1.3.0-rc4')
+            expect(installer.getJuliaVersion(testVersions, '^1.2.0-rc1')).toEqual('1.2.0')
+        })
+    })
+
+    describe('node-semver behaviour', () => {
+        describe('Windows installer change', () => {
+            it('Correctly understands >1.4.0', () => {
+                expect(semver.gtr('1.4.0-rc1', '1.3', {includePrerelease: true})).toBeTruthy()
+                expect(semver.gtr('1.4.0-DEV', '1.3', {includePrerelease: true})).toBeTruthy()
+                expect(semver.gtr('1.3.1', '1.3', {includePrerelease: true})).toBeFalsy()
+                expect(semver.gtr('1.3.2-rc1', '1.3', {includePrerelease: true})).toBeFalsy()
+            })
+        })
+    })
+})
+
+describe('installer tests', () => {
+    beforeAll(async () => {
+        await io.rmRF(toolDir)
+        await io.rmRF(tempDir)
+    }, 100000)
+
+    afterAll(async () => {
+        try {
+            await io.rmRF(toolDir)
+            await io.rmRF(tempDir)
+        } catch {
+            console.log('Failed to remove test directories')
+        }
+    }, 100000)
+
+    describe('versions.json parsing', () => {
+        // Instead of downloading versions.json, use fixtures/versions.json
+        beforeEach(() => {
+            nock('https://julialang-s3.julialang.org').persist()
+                .get('/bin/versions.json')
+                .replyWithFile(200, path.join(fixtureDir, 'versions.json'))
+        })
+
+        afterEach(() => {
+            nock.cleanAll()
+            nock.enableNetConnect()
+        })
+
+        it('Extracts the list of available versions', async () => {
+            expect(await (await installer.getJuliaVersions(await installer.getJuliaVersionInfo())).sort()).toEqual(testVersions.sort())
+        })
+    })
+})

__tests__/main.test.ts

@@ -1,43 +0,0 @@
-import * as installer from '../src/installer'
-
-import * as semver from 'semver'
-
-const testVersions = ['v1.3.0-rc4', 'v1.3.0-rc3', 'v1.3.0-rc2', 'v1.0.5', 'v1.2.0', 'v1.3.0-rc1', 'v1.2.0-rc3', 'v1.3.0-alpha', 'v1.2.0-rc2', 'v1.2.0-rc1', 'v1.1.1', 'v1.0.4', 'v1.1.0', 'v1.1.0-rc2', 'v1.1.0-rc1', 'v1.0.3', 'v1.0.2', 'v1.0.1', 'v1.0.0']
-
-describe('installer tests', () => {
-    describe('version matching', () => {
-        describe('specific versions', () => {
-            it('Doesn\'t change the version when given a valid semver version', async () => {
-                expect(await installer.getJuliaVersion([], '1.0.5')).toEqual('1.0.5')
-                expect(await installer.getJuliaVersion(['v1.0.5', 'v1.0.6'], '1.0.5')).toEqual('1.0.5')
-                expect(await installer.getJuliaVersion(['v1.0.4', 'v1.0.5'], '1.0.5')).toEqual('1.0.5')
-                expect(await installer.getJuliaVersion(['v1.0.4'], '1.0.5')).toEqual('1.0.5')
-                expect(await installer.getJuliaVersion([], '1.3.0-alpha')).toEqual('1.3.0-alpha')
-                expect(await installer.getJuliaVersion(['v1.2.0', 'v1.3.0-alpha', 'v1.3.0-rc1', 'v1.3.0'], '1.3.0-alpha')).toEqual('1.3.0-alpha')
-                expect(await installer.getJuliaVersion([], '1.3.0-rc2')).toEqual('1.3.0-rc2')
-            })
-            it('Doesn\'t change the version when given `nightly`', async () => {
-                expect(await installer.getJuliaVersion([], 'nightly')).toEqual('nightly')
-                expect(await installer.getJuliaVersion(testVersions, 'nightly')).toEqual('nightly')
-            })
-        })
-        describe('version ranges', () => {
-            it('Chooses the highest available version that matches the input', async () => {
-                expect(await installer.getJuliaVersion(testVersions, '1')).toEqual('1.2.0')
-                expect(await installer.getJuliaVersion(testVersions, '1.0')).toEqual('1.0.5')
-                expect(await installer.getJuliaVersion(testVersions, '^1.3.0-rc1')).toEqual('1.3.0-rc4')
-                expect(await installer.getJuliaVersion(testVersions, '^1.2.0-rc1')).toEqual('1.2.0')
-            })
-        })
-    })
-    describe('node-semver behaviour', () => {
-        describe('Windows installer change', () => {
-            it('Correctly understands >1.4.0', () => {
-                expect(semver.gtr('1.4.0-rc1', '1.3', {includePrerelease: true})).toBeTruthy()
-                expect(semver.gtr('1.4.0-DEV', '1.3', {includePrerelease: true})).toBeTruthy()
-                expect(semver.gtr('1.3.1', '1.3', {includePrerelease: true})).toBeFalsy()
-                expect(semver.gtr('1.3.2-rc1', '1.3', {includePrerelease: true})).toBeFalsy()
-            })
-        })
-    })
-})

action.yml

@@ -9,9 +9,16 @@ inputs:
     description: 'Architecture of the Julia binaries. Defaults to x64.'
     required: false
     default: 'x64'
+  show-versioninfo:
+    description: 'Display InteractiveUtils.versioninfo() after installing'
+    required: false
+    default: 'false'
+outputs:
+  julia-bindir:
+    description: 'Path to the directory containing the Julia executable. Equivalent to JULIA_BINDIR: https://docs.julialang.org/en/v1/manual/environment-variables/#JULIA_BINDIR'
 runs:
   using: 'node12'
-  main: 'lib/setup-julia.js'
+  main: 'dist/index.js'
 branding:
   icon: 'download'
   color: 'green'

bin/build-release

@@ -1,13 +0,0 @@
-#!/bin/sh
-
-git checkout -b releases/"$1"
-
-npm install
-npm run build
-npm test
-npm prune --production
-
-sed -i 's/node_modules/!node_modules/g' .gitignore
-git add node_modules
-git commit -a -m "Add production dependencies & build"
-git tag "$1"

bin/build-test-release

@@ -1,14 +0,0 @@
-#!/bin/sh
-
-branch_name="$(git symbolic-ref --short -q HEAD)"
-
-git checkout -B test/"$branch_name"
-
-npm install
-npm run build
-npm test
-npm prune --production
-
-sed -i 's/node_modules/!node_modules/g' .gitignore
-git add node_modules
-git commit -a -m "Add production dependencies & build"

docs/release-checklist.md

@@ -1,16 +0,0 @@
-# Release checklist
-
-Version: `1.b.c`
-
-- [ ] Create release branch `releases/v1.b.c`
-  - [ ] Unignore `node_modules/` by adding `!` in front in `.gitignore`
-  - [ ] Delete `node_modules/`
-  - [ ] Install production dependencies: `npm install --production`
-  - [ ] Add `node_modules/`: `git add node_modules`
-  - [ ] Commit & push action: `git commit -a -m "Publish v1.b.c."`, then `git push`
-- [ ] Test the action with an example package
-- [ ] Create tags
-  - [ ] `v1.b.c` pointing at the last commit in `releases/v1.b.c`
-  - [ ] `latest` pointing at the latest version of the highest major version
-  - [ ] `v1` pointing at the latest `1.x.x` version
-- [ ] Push tags

lib/installer.js

@@ -18,122 +18,167 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core = __importStar(require("@actions/core"));
 const exec = __importStar(require("@actions/exec"));
 const tc = __importStar(require("@actions/tool-cache"));
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const semver = __importStar(require("semver"));
+// Translations between actions input and Julia arch names
+const osMap = {
+    'win32': 'winnt',
+    'darwin': 'mac',
+    'linux': 'linux'
+};
+const archMap = {
+    'x86': 'i686',
+    'x64': 'x86_64'
+};
 // Store information about the environment
 const osPlat = os.platform(); // possible values: win32 (Windows), linux (Linux), darwin (macOS)
 core.debug(`platform: ${osPlat}`);
-// This is temporary until we have a better way of fetching releases (see #1, #4 for details)
+/**
-exports.juliaVersions = ['v1.3.0-rc5', 'v1.3.0-rc4', 'v1.3.0-rc3', 'v1.3.0-rc2', 'v1.0.5', 'v1.2.0', 'v1.3.0-rc1', 'v1.2.0-rc3', 'v1.3.0-alpha', 'v1.2.0-rc2', 'v1.2.0-rc1', 'v1.1.1', 'v1.0.4', 'v1.1.0', 'v1.1.0-rc2', 'v1.1.0-rc1', 'v1.0.3', 'v1.0.2', 'v1.0.1', 'v1.0.0', 'v0.7.0', 'v1.0.0-rc1', 'v0.7.0-rc3', 'v0.7.0-rc2', 'v0.7.0-rc1', 'v0.7.0-beta2', 'v0.6.4', 'v0.7.0-beta', 'v0.7.0-alpha', 'v0.6.3', 'v0.6.2', 'v0.6.1', 'v0.6.0', 'v0.6.0-rc3', 'v0.6.0-rc2', 'v0.5.2', 'v0.6.0-rc1', 'v0.6.0-pre.beta', 'v0.5.1', 'v0.6.0-pre.alpha', 'v0.5.0', 'v0.4.7', 'v0.5.0-rc4', 'v0.5.0-rc3', 'v0.5.0-rc2', 'v0.5.0-rc1', 'v0.5.0-rc0', 'v0.4.6', 'v0.4.5', 'v0.4.4', 'v0.4.3', 'v0.4.2', 'v0.4.1', 'v0.3.12', 'v0.4.0', 'v0.4.0-rc4', 'v0.4.0-rc3', 'v0.4.0-rc2', 'v0.4.0-rc1', 'v0.3.11', 'v0.3.10', 'v0.3.9', 'v0.3.8', 'v0.3.7', 'v0.3.6', 'v0.3.5', 'v0.3.4', 'v0.3.3', 'v0.3.2', 'v0.3.1', 'v0.3.0', 'v0.3.0-rc4', 'v0.3.0-rc3', 'v0.3.0-rc2', 'v0.3.0-rc1', 'v0.2.0-rc1', 'v0.2.0-rc3', 'v0.2.0-rc4', 'v0.2.0', 'v0.2.0-rc2'];
+ * @returns The SHA256 checksum of a given file.
-function getJuliaVersion(availableReleases, versionInput) {
+ */
+function calculateChecksum(file) {
     return __awaiter(this, void 0, void 0, function* () {
-        if (semver.valid(versionInput) == versionInput) {
+        const hash = crypto.createHash('sha256');
-            // versionInput is a valid version, use it directly
+        const input = fs.createReadStream(file);
-            return versionInput;
+        return new Promise((resolve, reject) => {
-        }
+            input.on('data', (chunk) => {
-        // nightlies
+                hash.update(chunk);
-        if (versionInput == 'nightly') {
+            });
-            return 'nightly';
+            input.on('end', () => {
-        }
+                const digest = hash.digest('hex');
-        // Use the highest available version that matches versionInput
+                digest ? resolve(digest) : reject(new Error(`Could not calculate checksum of file ${file}: digest was empty.`));
-        let version = semver.maxSatisfying(availableReleases, versionInput);
+            });
-        if (version == null) {
+        });
-            throw `Could not find a Julia version that matches ${versionInput}`;
-        }
-        // GitHub tags start with v, remove it
-        version = version.replace(/^v/, '');
-        return version;
     });
 }
-exports.getJuliaVersion = getJuliaVersion;
+/**
-function getMajorMinorVersion(version) {
+ * @returns The content of the downloaded versions.json file as object.
-    return version.split('.').slice(0, 2).join('.');
+ */
+function getJuliaVersionInfo() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const versionsFile = yield tc.downloadTool('https://julialang-s3.julialang.org/bin/versions.json');
+        return JSON.parse(fs.readFileSync(versionsFile).toString());
+    });
 }
-function getDownloadURL(version, arch) {
+exports.getJuliaVersionInfo = getJuliaVersionInfo;
-    let platform;
+/**
-    if (osPlat === 'win32') { // Windows
+ * @returns An array of all Julia versions available for download
-        platform = 'winnt';
+ */
-    }
+function getJuliaVersions(versionInfo) {
-    else if (osPlat === 'darwin') { // macOS
+    return __awaiter(this, void 0, void 0, function* () {
-        if (arch == 'x86') {
+        let versions = [];
-            throw '32-bit Julia is not available on macOS';
+        for (let version in versionInfo) {
+            versions.push(version);
         }
-        platform = 'mac';
+        return versions;
-    }
+    });
-    else if (osPlat === 'linux') { // Linux
+}
-        platform = 'linux';
+exports.getJuliaVersions = getJuliaVersions;
-    }
+function getJuliaVersion(availableReleases, versionInput) {
-    else {
+    if (semver.valid(versionInput) == versionInput) {
-        throw `Platform ${osPlat} is not supported`;
+        // versionInput is a valid version, use it directly
+        return versionInput;
     }
     // nightlies
-    if (version == 'nightly') {
+    if (versionInput == 'nightly') {
-        const baseURL = 'https://julialangnightlies-s3.julialang.org/bin';
+        return 'nightly';
-        return `${baseURL}/${platform}/${arch}/${getFileName('latest', arch)}`;
     }
-    // normal versions
+    // Use the highest available version that matches versionInput
-    const baseURL = 'https://julialang-s3.julialang.org/bin';
+    let version = semver.maxSatisfying(availableReleases, versionInput);
-    const versionDir = getMajorMinorVersion(version);
+    if (version == null) {
-    return `${baseURL}/${platform}/${arch}/${versionDir}/${getFileName(version, arch)}`;
+        throw new Error(`Could not find a Julia version that matches ${versionInput}`);
+    }
+    // GitHub tags start with v, remove it
+    version = version.replace(/^v/, '');
+    return version;
 }
-function getFileName(version, arch) {
+exports.getJuliaVersion = getJuliaVersion;
+function getNightlyFileName(arch) {
     let versionExt, ext;
-    if (osPlat === 'win32') { // Windows
+    if (osPlat == 'win32') {
         versionExt = arch == 'x64' ? '-win64' : '-win32';
         ext = 'exe';
     }
-    else if (osPlat === 'darwin') { // macOS
+    else if (osPlat == 'darwin') {
         if (arch == 'x86') {
-            throw '32-bit Julia is not available on macOS';
+            throw new Error('32-bit Julia is not available on macOS');
         }
         versionExt = '-mac64';
         ext = 'dmg';
     }
-    else if (osPlat === 'linux') { // Linux
+    else if (osPlat === 'linux') {
-        if (version == 'latest') { // nightly version
+        versionExt = arch == 'x64' ? '-linux64' : '-linux32';
-            versionExt = arch == 'x64' ? '-linux64' : '-linux32';
-        }
-        else {
-            versionExt = arch == 'x64' ? '-linux-x86_64' : '-linux-i686';
-        }
         ext = 'tar.gz';
     }
     else {
-        throw `Platform ${osPlat} is not supported`;
+        throw new Error(`Platform ${osPlat} is not supported`);
     }
-    return `julia-${version}${versionExt}.${ext}`;
+    return `julia-latest${versionExt}.${ext}`;
 }
-function installJulia(version, arch) {
+function getFileInfo(versionInfo, version, arch) {
+    if (version == 'nightly') {
+        return null;
+    }
+    for (let file of versionInfo[version].files) {
+        if (file.os == osMap[osPlat] && file.arch == archMap[arch]) {
+            return file;
+        }
+    }
+    throw `Could not find ${archMap[arch]}/${version} binaries`;
+}
+exports.getFileInfo = getFileInfo;
+function getDownloadURL(fileInfo, version, arch) {
+    // nightlies
+    if (version == 'nightly') {
+        const baseURL = 'https://julialangnightlies-s3.julialang.org/bin';
+        return `${baseURL}/${osMap[osPlat]}/${arch}/${getNightlyFileName(arch)}`;
+    }
+    return fileInfo.url;
+}
+exports.getDownloadURL = getDownloadURL;
+function installJulia(versionInfo, version, arch) {
     return __awaiter(this, void 0, void 0, function* () {
         // Download Julia
-        const downloadURL = getDownloadURL(version, arch);
+        const fileInfo = getFileInfo(versionInfo, version, arch);
+        const downloadURL = getDownloadURL(fileInfo, version, arch);
         core.debug(`downloading Julia from ${downloadURL}`);
         const juliaDownloadPath = yield tc.downloadTool(downloadURL);
+        // Verify checksum
+        if (version != 'nightly') {
+            const checkSum = yield calculateChecksum(juliaDownloadPath);
+            if (fileInfo.sha256 != checkSum) {
+                throw new Error(`Checksum of downloaded file does not match the expected checksum from versions.json.\nExpected: ${fileInfo.sha256}\nGot: ${checkSum}`);
+            }
+            core.debug(`Checksum of downloaded file matches expected checksum: ${checkSum}`);
+        }
+        else {
+            core.debug('Skipping checksum check for nightly binaries.');
+        }
+        const tempInstallDir = fs.mkdtempSync(`julia-${arch}-${version}-`);
         // Install it
         switch (osPlat) {
             case 'linux':
                 // tc.extractTar doesn't support stripping components, so we have to call tar manually
-                yield exec.exec('mkdir', [`${process.env.HOME}/julia`]);
+                yield exec.exec('tar', ['xf', juliaDownloadPath, '--strip-components=1', '-C', tempInstallDir]);
-                yield exec.exec('tar', ['xf', juliaDownloadPath, '--strip-components=1', '-C', `${process.env.HOME}/julia`]);
+                return tempInstallDir;
-                return `${process.env.HOME}/julia`;
             case 'win32':
-                const juliaInstallationPath = path.join('C:', 'Julia');
                 if (version == 'nightly' || semver.gtr(version, '1.3', { includePrerelease: true })) {
                     // The installer changed in 1.4: https://github.com/JuliaLang/julia/blob/ef0c9108b12f3ae177c51037934351ffa703b0b5/NEWS.md#build-system-changes
-                    yield exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/SILENT /dir=${juliaInstallationPath}" -NoNewWindow -Wait`]);
+                    yield exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/SILENT /dir=${path.join(process.cwd(), tempInstallDir)}" -NoNewWindow -Wait`]);
                 }
                 else {
-                    yield exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/S /D=${juliaInstallationPath}" -NoNewWindow -Wait`]);
+                    yield exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/S /D=${path.join(process.cwd(), tempInstallDir)}" -NoNewWindow -Wait`]);
                 }
-                return juliaInstallationPath;
+                return tempInstallDir;
             case 'darwin':
                 yield exec.exec('hdiutil', ['attach', juliaDownloadPath]);
-                yield exec.exec('mkdir', [`${process.env.HOME}/julia`]);
+                yield exec.exec('/bin/bash', ['-c', `cp -a /Volumes/Julia-*/Julia-*.app/Contents/Resources/julia ${tempInstallDir}`]);
-                yield exec.exec('/bin/bash', ['-c', `cp -a /Volumes/Julia-*/Julia-*.app/Contents/Resources/julia ${process.env.HOME}`]);
+                return path.join(tempInstallDir, 'julia');
-                return `${process.env.HOME}/julia`;
             default:
-                throw `Platform ${osPlat} is not supported`;
+                throw new Error(`Platform ${osPlat} is not supported`);
         }
     });
 }

lib/setup-julia.js

@@ -18,33 +18,71 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core = __importStar(require("@actions/core"));
 const exec = __importStar(require("@actions/exec"));
 const tc = __importStar(require("@actions/tool-cache"));
+const fs = __importStar(require("fs"));
+const https = __importStar(require("https"));
 const path = __importStar(require("path"));
 const installer = __importStar(require("./installer"));
 function run() {
     return __awaiter(this, void 0, void 0, function* () {
         try {
+            // Debugging info
+            if (core.isDebug()) {
+                // Log Runner IP Address
+                https.get('https://httpbin.julialang.org/ip', resp => {
+                    let data = '';
+                    resp.on('data', chunk => {
+                        data += chunk;
+                    });
+                    resp.on('end', () => {
+                        core.debug(`Runner IP address: ${JSON.parse(data).origin}`);
+                    });
+                }).on('error', err => {
+                    core.debug(`ERROR: Could not retrieve runner IP: ${err}`);
+                });
+            }
+            // Inputs
             const versionInput = core.getInput('version');
             const arch = core.getInput('arch');
-            const availableReleases = installer.juliaVersions;
+            // It can easily happen that, for example, a workflow file contains an input `version: ${{ matrix.julia-version }}`
-            const version = yield installer.getJuliaVersion(availableReleases, versionInput);
+            // while the strategy matrix only contains a key `${{ matrix.version }}`.
+            // In that case, we want the action to fail, rather than trying to download julia from an URL that's missing parts and 404ing.
+            // We _could_ fall back to the default but that means that builds silently do things differently than they're meant to, which
+            // is worse than failing the build.
+            if (!versionInput) {
+                throw new Error('Version input must not be null');
+            }
+            if (!arch) {
+                throw new Error(`Arch input must not be null`);
+            }
+            const versionInfo = yield installer.getJuliaVersionInfo();
+            const availableReleases = yield installer.getJuliaVersions(versionInfo);
+            const version = installer.getJuliaVersion(availableReleases, versionInput);
             core.debug(`selected Julia version: ${arch}/${version}`);
             // Search in cache
             let juliaPath;
             juliaPath = tc.find('julia', version, arch);
             if (!juliaPath) {
-                core.debug(`could not find Julia ${version} in cache`);
+                core.debug(`could not find Julia ${arch}/${version} in cache`);
-                const juliaInstallationPath = yield installer.installJulia(version, arch);
+                const juliaInstallationPath = yield installer.installJulia(versionInfo, version, arch);
                 // Add it to cache
                 juliaPath = yield tc.cacheDir(juliaInstallationPath, 'julia', version, arch);
                 core.debug(`added Julia to cache: ${juliaPath}`);
+                // Remove temporary dir
+                fs.rmdirSync(juliaInstallationPath, { recursive: true });
             }
             else {
                 core.debug(`using cached version of Julia: ${juliaPath}`);
             }
             // Add it to PATH
             core.addPath(path.join(juliaPath, 'bin'));
-            // Test if Julia has been installed by showing versioninfo()
+            // Set output
-            yield exec.exec('julia', ['-e', 'using InteractiveUtils; versioninfo()']);
+            core.setOutput('julia-bindir', path.join(juliaPath, 'bin'));
+            // Test if Julia has been installed
+            exec.exec('julia', ['--version']);
+            // If enabled, also show the full version info
+            if (core.getInput('show-versioninfo') == 'true') {
+                exec.exec('julia', ['-e', 'using InteractiveUtils; versioninfo()']);
+            }
         }
         catch (error) {
             core.setFailed(error.message);

package.json

@@ -1,13 +1,12 @@
 {
   "name": "setup-julia",
-  "version": "0.1.0",
+  "version": "1.4.0",
   "private": true,
   "description": "setup Julia action",
   "main": "lib/setup-julia.js",
   "scripts": {
     "build": "tsc",
-    "format": "prettier --single-quote --print-width 120 --tab-width 4 --no-semi --write **/*.ts",
+    "pack": "ncc build",
-    "format-check": "prettier  --single-quote --print-width 120 --tab-width 4 --no-semi --check **/*.ts",
     "test": "jest"
   },
   "repository": {
@@ -22,9 +21,8 @@
   "author": "Sascha Mann <git@mail.saschamann.eu>",
   "license": "MIT",
   "dependencies": {
-    "@actions/core": "^1.0.0",
+    "@actions/core": "^1.2.6",
     "@actions/exec": "^1.0.0",
-    "@actions/github": "^1.0.0",
     "@actions/io": "^1.0.0",
     "@actions/tool-cache": "^1.0.0",
     "semver": "^6.3.0"
@@ -33,10 +31,12 @@
     "@types/jest": "^24.0.13",
     "@types/node": "^12.12.7",
     "@types/semver": "^6.0.0",
+    "@zeit/ncc": "^0.22.0",
     "jest": "^24.8.0",
     "jest-circus": "^24.7.1",
+    "nock": "^11.7.2",
     "prettier": "^1.17.1",
-    "ts-jest": "^24.0.2",
+    "ts-jest": "^26.0.0",
     "typescript": "^3.5.1"
   }
 }

src/installer.ts

@@ -2,20 +2,70 @@ import * as core from '@actions/core'
 import * as exec from '@actions/exec'
 import * as tc from '@actions/tool-cache'
 
-import * as https from 'https'
+import * as crypto from 'crypto'
+import * as fs from 'fs'
 import * as os from 'os'
 import * as path from 'path'
 
 import * as semver from 'semver'
 
+// Translations between actions input and Julia arch names
+const osMap = {
+    'win32': 'winnt',
+    'darwin': 'mac',
+    'linux': 'linux'
+}
+const archMap = {
+    'x86': 'i686',
+    'x64': 'x86_64'
+}
+
 // Store information about the environment
 const osPlat = os.platform() // possible values: win32 (Windows), linux (Linux), darwin (macOS)
 core.debug(`platform: ${osPlat}`)
 
-// This is temporary until we have a better way of fetching releases (see #1, #4 for details)
+/**
-export const juliaVersions = ['v1.3.0-rc5', 'v1.3.0-rc4', 'v1.3.0-rc3', 'v1.3.0-rc2', 'v1.0.5', 'v1.2.0', 'v1.3.0-rc1', 'v1.2.0-rc3', 'v1.3.0-alpha', 'v1.2.0-rc2', 'v1.2.0-rc1', 'v1.1.1', 'v1.0.4', 'v1.1.0', 'v1.1.0-rc2', 'v1.1.0-rc1', 'v1.0.3', 'v1.0.2', 'v1.0.1', 'v1.0.0', 'v0.7.0', 'v1.0.0-rc1', 'v0.7.0-rc3', 'v0.7.0-rc2', 'v0.7.0-rc1', 'v0.7.0-beta2', 'v0.6.4', 'v0.7.0-beta', 'v0.7.0-alpha', 'v0.6.3', 'v0.6.2', 'v0.6.1', 'v0.6.0', 'v0.6.0-rc3', 'v0.6.0-rc2', 'v0.5.2', 'v0.6.0-rc1', 'v0.6.0-pre.beta', 'v0.5.1', 'v0.6.0-pre.alpha', 'v0.5.0', 'v0.4.7', 'v0.5.0-rc4', 'v0.5.0-rc3', 'v0.5.0-rc2', 'v0.5.0-rc1', 'v0.5.0-rc0', 'v0.4.6', 'v0.4.5', 'v0.4.4', 'v0.4.3', 'v0.4.2', 'v0.4.1', 'v0.3.12', 'v0.4.0', 'v0.4.0-rc4', 'v0.4.0-rc3', 'v0.4.0-rc2', 'v0.4.0-rc1', 'v0.3.11', 'v0.3.10', 'v0.3.9', 'v0.3.8', 'v0.3.7', 'v0.3.6', 'v0.3.5', 'v0.3.4', 'v0.3.3', 'v0.3.2', 'v0.3.1', 'v0.3.0', 'v0.3.0-rc4', 'v0.3.0-rc3', 'v0.3.0-rc2', 'v0.3.0-rc1', 'v0.2.0-rc1', 'v0.2.0-rc3', 'v0.2.0-rc4', 'v0.2.0', 'v0.2.0-rc2']
+ * @returns The SHA256 checksum of a given file.
+ */
+async function calculateChecksum(file: string): Promise<string> {
+    const hash = crypto.createHash('sha256')
+    const input = fs.createReadStream(file)
 
-export async function getJuliaVersion(availableReleases: string[], versionInput: string): Promise<string> {
+    return new Promise((resolve, reject) => {
+        input.on('data', (chunk) => {
+            hash.update(chunk)
+        })
+
+        input.on('end', () => {
+            const digest = hash.digest('hex')
+            digest ? resolve(digest) : reject(new Error(`Could not calculate checksum of file ${file}: digest was empty.`))
+        })
+    })
+}
+
+/**
+ * @returns The content of the downloaded versions.json file as object.
+ */
+export async function getJuliaVersionInfo(): Promise<object> {
+    const versionsFile = await tc.downloadTool('https://julialang-s3.julialang.org/bin/versions.json')
+
+    return JSON.parse(fs.readFileSync(versionsFile).toString())
+}
+
+/**
+ * @returns An array of all Julia versions available for download
+ */
+export async function getJuliaVersions(versionInfo): Promise<string[]> {
+    let versions: string[] = []
+
+    for (let version in versionInfo) {
+        versions.push(version)
+    }
+
+    return versions
+}
+
+export function getJuliaVersion(availableReleases: string[], versionInput: string): string {
     if (semver.valid(versionInput) == versionInput) {
         // versionInput is a valid version, use it directly
         return versionInput
@@ -29,7 +79,7 @@ export async function getJuliaVersion(availableReleases: string[], versionInput:
     // Use the highest available version that matches versionInput
     let version = semver.maxSatisfying(availableReleases, versionInput)
     if (version == null) {
-        throw `Could not find a Julia version that matches ${versionInput}`
+        throw new Error(`Could not find a Julia version that matches ${versionInput}`)
     }
 
     // GitHub tags start with v, remove it
@@ -38,93 +88,91 @@ export async function getJuliaVersion(availableReleases: string[], versionInput:
     return version
 }
 
-function getMajorMinorVersion(version: string): string {
+function getNightlyFileName(arch: string): string {
-    return version.split('.').slice(0, 2).join('.')
-}
-
-function getDownloadURL(version: string, arch: string): string {
-    let platform: string
-
-    if (osPlat === 'win32') { // Windows
-        platform = 'winnt'
-    } else if (osPlat === 'darwin') { // macOS
-        if (arch == 'x86') {
-            throw '32-bit Julia is not available on macOS'
-        }
-        platform = 'mac'
-    } else if (osPlat === 'linux') { // Linux
-        platform = 'linux'
-    } else {
-        throw `Platform ${osPlat} is not supported`
-    }
-
-    // nightlies
-    if (version == 'nightly') {
-        const baseURL = 'https://julialangnightlies-s3.julialang.org/bin'
-        return `${baseURL}/${platform}/${arch}/${getFileName('latest', arch)}`
-    }
-
-    // normal versions
-    const baseURL = 'https://julialang-s3.julialang.org/bin'
-    const versionDir = getMajorMinorVersion(version)
-
-    return `${baseURL}/${platform}/${arch}/${versionDir}/${getFileName(version, arch)}`
-}
-
-function getFileName(version: string, arch: string): string {
     let versionExt: string, ext: string
 
-    if (osPlat === 'win32') { // Windows
+    if (osPlat == 'win32') {
         versionExt = arch == 'x64' ? '-win64' : '-win32'
         ext = 'exe'
-    } else if (osPlat === 'darwin') { // macOS
+    } else if (osPlat == 'darwin') {
         if (arch == 'x86') {
-            throw '32-bit Julia is not available on macOS'
+            throw new Error('32-bit Julia is not available on macOS')
         }
         versionExt = '-mac64'
         ext = 'dmg'
-    } else if (osPlat === 'linux') { // Linux
+    } else if (osPlat === 'linux') {
-        if (version == 'latest') { // nightly version
+        versionExt = arch == 'x64' ? '-linux64' : '-linux32'
-            versionExt = arch == 'x64' ? '-linux64' : '-linux32'
-        } else {
-            versionExt = arch == 'x64' ? '-linux-x86_64' : '-linux-i686'
-        }
         ext = 'tar.gz'
     } else {
-        throw `Platform ${osPlat} is not supported`
+        throw new Error(`Platform ${osPlat} is not supported`)
     }
 
-    return `julia-${version}${versionExt}.${ext}`
+    return `julia-latest${versionExt}.${ext}`
 }
 
-export async function installJulia(version: string, arch: string): Promise<string> {
+export function getFileInfo(versionInfo, version: string, arch: string) {
+    if (version == 'nightly') {
+        return null
+    }
+
+    for (let file of versionInfo[version].files) {
+        if (file.os == osMap[osPlat] && file.arch == archMap[arch]) {
+            return file
+        }
+    }
+
+    throw `Could not find ${archMap[arch]}/${version} binaries`
+}
+
+export function getDownloadURL(fileInfo, version: string, arch: string): string {
+    // nightlies
+    if (version == 'nightly') {
+        const baseURL = 'https://julialangnightlies-s3.julialang.org/bin'
+        return `${baseURL}/${osMap[osPlat]}/${arch}/${getNightlyFileName(arch)}`
+    }
+
+    return fileInfo.url
+}
+
+export async function installJulia(versionInfo, version: string, arch: string): Promise<string> {
     // Download Julia
-    const downloadURL = getDownloadURL(version, arch)
+    const fileInfo = getFileInfo(versionInfo, version, arch)
+    const downloadURL = getDownloadURL(fileInfo, version, arch)
     core.debug(`downloading Julia from ${downloadURL}`)
     const juliaDownloadPath = await tc.downloadTool(downloadURL)
 
+    // Verify checksum
+    if (version != 'nightly') {
+        const checkSum = await calculateChecksum(juliaDownloadPath)
+        if (fileInfo.sha256 != checkSum) {
+            throw new Error(`Checksum of downloaded file does not match the expected checksum from versions.json.\nExpected: ${fileInfo.sha256}\nGot: ${checkSum}`)
+        }
+        core.debug(`Checksum of downloaded file matches expected checksum: ${checkSum}`)
+    } else {
+        core.debug('Skipping checksum check for nightly binaries.')
+    }
+
+    const tempInstallDir = fs.mkdtempSync(`julia-${arch}-${version}-`)
+
     // Install it
     switch (osPlat) {
         case 'linux':
             // tc.extractTar doesn't support stripping components, so we have to call tar manually
-            await exec.exec('mkdir', [`${process.env.HOME}/julia`])
+            await exec.exec('tar', ['xf', juliaDownloadPath, '--strip-components=1', '-C', tempInstallDir])
-            await exec.exec('tar', ['xf', juliaDownloadPath, '--strip-components=1', '-C', `${process.env.HOME}/julia`])
+            return tempInstallDir
-            return `${process.env.HOME}/julia`
         case 'win32':
-            const juliaInstallationPath = path.join('C:', 'Julia')
             if (version == 'nightly' || semver.gtr(version, '1.3', {includePrerelease: true})) {
                 // The installer changed in 1.4: https://github.com/JuliaLang/julia/blob/ef0c9108b12f3ae177c51037934351ffa703b0b5/NEWS.md#build-system-changes
-                await exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/SILENT /dir=${juliaInstallationPath}" -NoNewWindow -Wait`])
+                await exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/SILENT /dir=${path.join(process.cwd(), tempInstallDir)}" -NoNewWindow -Wait`])
             } else {
-                await exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/S /D=${juliaInstallationPath}" -NoNewWindow -Wait`])
+                await exec.exec('powershell', ['-Command', `Start-Process -FilePath ${juliaDownloadPath} -ArgumentList "/S /D=${path.join(process.cwd(), tempInstallDir)}" -NoNewWindow -Wait`])
             }
-            return juliaInstallationPath
+            return tempInstallDir
         case 'darwin':
             await exec.exec('hdiutil', ['attach', juliaDownloadPath])
-            await exec.exec('mkdir', [`${process.env.HOME}/julia`])
+            await exec.exec('/bin/bash', ['-c', `cp -a /Volumes/Julia-*/Julia-*.app/Contents/Resources/julia ${tempInstallDir}`])
-            await exec.exec('/bin/bash', ['-c', `cp -a /Volumes/Julia-*/Julia-*.app/Contents/Resources/julia ${process.env.HOME}`])
+            return path.join(tempInstallDir, 'julia')
-            return `${process.env.HOME}/julia`
         default:
-            throw `Platform ${osPlat} is not supported`
+            throw new Error(`Platform ${osPlat} is not supported`)
     }
 }

src/setup-julia.ts

@@ -2,16 +2,51 @@ import * as core from '@actions/core'
 import * as exec from '@actions/exec'
 import * as tc from '@actions/tool-cache'
 
+import * as fs from 'fs'
+import * as https from 'https'
 import * as path from 'path'
 
 import * as installer from './installer'
 
 async function run() {
     try {
+        // Debugging info
+        if (core.isDebug()) {
+            // Log Runner IP Address
+            https.get('https://httpbin.julialang.org/ip', resp => {
+                let data = ''
+
+                resp.on('data', chunk => {
+                    data += chunk
+                })
+
+                resp.on('end', () => {
+                    core.debug(`Runner IP address: ${JSON.parse(data).origin}`)
+                })
+            }).on('error', err => {
+                core.debug(`ERROR: Could not retrieve runner IP: ${err}`)
+            })
+        }
+
+        // Inputs
         const versionInput = core.getInput('version')
         const arch = core.getInput('arch')
-        const availableReleases = installer.juliaVersions
+
-        const version = await installer.getJuliaVersion(availableReleases, versionInput)
+        // It can easily happen that, for example, a workflow file contains an input `version: ${{ matrix.julia-version }}`
+        // while the strategy matrix only contains a key `${{ matrix.version }}`.
+        // In that case, we want the action to fail, rather than trying to download julia from an URL that's missing parts and 404ing.
+        // We _could_ fall back to the default but that means that builds silently do things differently than they're meant to, which
+        // is worse than failing the build.
+        if (!versionInput) {
+            throw new Error('Version input must not be null')
+        }
+        if (!arch) {
+            throw new Error(`Arch input must not be null`)
+        }
+
+        const versionInfo = await installer.getJuliaVersionInfo()
+        const availableReleases = await installer.getJuliaVersions(versionInfo)
+        const version = installer.getJuliaVersion(availableReleases, versionInput)
         core.debug(`selected Julia version: ${arch}/${version}`)
 
         // Search in cache
@@ -19,21 +54,32 @@ async function run() {
         juliaPath = tc.find('julia', version, arch)
 
         if (!juliaPath) {
-            core.debug(`could not find Julia ${version} in cache`)
+            core.debug(`could not find Julia ${arch}/${version} in cache`)
-            const juliaInstallationPath = await installer.installJulia(version, arch);
+            const juliaInstallationPath = await installer.installJulia(versionInfo, version, arch)
 
             // Add it to cache
             juliaPath = await tc.cacheDir(juliaInstallationPath, 'julia', version, arch)
             core.debug(`added Julia to cache: ${juliaPath}`)
+
+            // Remove temporary dir
+            fs.rmdirSync(juliaInstallationPath, {recursive: true})
         } else {
             core.debug(`using cached version of Julia: ${juliaPath}`)
         }
 
         // Add it to PATH
         core.addPath(path.join(juliaPath, 'bin'))
+
+        // Set output
+        core.setOutput('julia-bindir', path.join(juliaPath, 'bin'))
         
-        // Test if Julia has been installed by showing versioninfo()
+        // Test if Julia has been installed
-        await exec.exec('julia', ['-e', 'using InteractiveUtils; versioninfo()'])
+        exec.exec('julia', ['--version'])
+
+        // If enabled, also show the full version info
+        if (core.getInput('show-versioninfo') == 'true') {
+            exec.exec('julia', ['-e', 'using InteractiveUtils; versioninfo()'])
+        }
     } catch (error) {
         core.setFailed(error.message)
     }