Add production dependencies & build

* If the user does not specify the `arch` input, default to `${{ runner.arch }}` (instead of defaulting to `x64`)

* Add a CI workflow that tests the default arch (i.e. tests what happens when the user does not specify the `arch` input)

.github/dependabot.yml

@@ -0,0 +1,7 @@
+version: 2
+updates:
+- package-ecosystem: gitsubmodule
+  directory: "/"
+  schedule:
+    interval: daily
+  open-pull-requests-limit: 10

.github/workflows/checkin.yml

@@ -8,7 +8,7 @@ jobs:
     - uses: actions/checkout@v1
 
     - name: "npm ci"
-      run: npm ci
+      run: npm ci --legacy-peer-deps
 
     - name: "npm run build"
       run: npm run build

.github/workflows/example-builds-defaultarch.yml

@@ -0,0 +1,33 @@
+name: Example builds (default arch)
+
+on:
+  push:
+    branches: ['main', 'master', 'releases/*']
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  test:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        julia-version: ['1']
+        os: [ubuntu-latest, macOS-latest, windows-latest]
+
+    steps:
+      - uses: actions/checkout@v1.0.0
+
+      - name: "Install dependencies"
+        run: |
+          npm install --legacy-peer-deps
+          npm run build
+          npm run pack
+
+      - name: "Set up Julia"
+        id: setup-julia
+        uses: ./
+        with:
+          version: ${{ matrix.julia-version }}
+      - run: julia --version
+      - run: julia --compile=min -O0 -e 'import InteractiveUtils; InteractiveUtils.versioninfo()'

.github/workflows/example-builds-nightly.yml

@@ -13,7 +13,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        julia-version: [nightly, 1.6-nightly]
+        julia-version: [nightly, 1.8-nightly]
         julia-arch: [x64, x86]
         os: [ubuntu-latest, macOS-latest, windows-latest]
         # 32-bit Julia binaries are not available on macOS
@@ -26,7 +26,7 @@ jobs:
       
       - name: "Install dependencies"
         run: |
-          npm install
+          npm install --legacy-peer-deps
           npm run build
           npm run pack
 

.github/workflows/example-builds.yml

@@ -4,6 +4,7 @@ on:
   push:
     branches: ['main', 'master', 'releases/*']
   pull_request:
+  workflow_dispatch:
 
 jobs:
   test:
@@ -24,7 +25,7 @@ jobs:
 
       - name: "Install dependencies"
         run: |
-          npm install
+          npm install --legacy-peer-deps
           npm run build
           npm run pack
 

.gitignore

@@ -1,3 +1,3 @@
 node_modules/
 __tests__/runner/*
-dist/
+!dist/

README.md

@@ -38,9 +38,15 @@ This action sets up a Julia environment for use in actions by downloading a spec
 
     # The architecture of the Julia binaries.
     #
-    # Supported values: x64 | x86
+    # Please note that installing aarch64 binaries only makes sense on self-hosted aarch64 runners.
+    # We currently don't run test builds on that architecture, so we cannot guarantee that the input won't break randomly,
+    # although there is no reason why it would.
     #
-    # Default: x64
+    # Supported values: x64 | x86 | aarch64 (untested)
+    #
+    # Note: you can use X64, X86, and ARM64 as synonyms for x64, x86, and aarch64, respectively.
+    #
+    # Defaults to the architecture of the runner executing the job.
     arch: ''
 
     # Set the display setting for printing InteractiveUtils.versioninfo() after installing.
@@ -103,7 +109,7 @@ You can either specify specific Julia versions or version ranges. If you specify
 - `^1.3.0-0` is a **caret** version range that includes _all_ pre-releases. It matches all versions `≥ 1.3.0-` and `< 2.0.0`.
 - `~1.3.0-0` is a **tilde** version range that includes _all_ pre-releases. It matches all versions `≥ 1.3.0-` and `< 1.4.0`.
 - `nightly` will install the latest nightly build.
-- `1.6-nightly` will install the latest nightly build for the upcoming 1.6 release. This version will only be available during certain phases of the Julia release cycle.
+- `1.7-nightly` will install the latest nightly build for the upcoming 1.7 release. This version will only be available during certain phases of the Julia release cycle.
 
 Internally the action uses node's semver package to resolve version ranges. Its [documentation](https://github.com/npm/node-semver#advanced-range-syntax) contains more details on the version range syntax. You can test what version will be selected for a given input in this JavaScript [REPL](https://repl.it/@SaschaMann/setup-julia-version-logic).
 

action.yml

@@ -6,9 +6,9 @@ inputs:
     description: 'The Julia version to download (if necessary) and use. Example: 1.0.4'
     default: '1'
   arch:
-    description: 'Architecture of the Julia binaries. Defaults to x64.'
+    description: 'Architecture of the Julia binaries. Defaults to the architecture of the runner executing the job.'
     required: false
-    default: 'x64'
+    default: '${{ runner.arch }}'
   show-versioninfo:
     description: 'Display InteractiveUtils.versioninfo() after installing'
     required: false
@@ -19,7 +19,7 @@ outputs:
   julia-bindir:
     description: 'Path to the directory containing the Julia executable. Equivalent to JULIA_BINDIR: https://docs.julialang.org/en/v1/manual/environment-variables/#JULIA_BINDIR'
 runs:
-  using: 'node12'
+  using: 'node16'
   main: 'dist/index.js'
 branding:
   icon: 'download'

lib/installer.js

@@ -32,7 +32,11 @@ const osMap = {
 };
 const archMap = {
     'x86': 'i686',
-    'x64': 'x86_64'
+    'X86': 'i686',
+    'x64': 'x86_64',
+    'X64': 'x86_64',
+    'aarch64': 'aarch64',
+    'ARM64': 'aarch64'
 };
 // Store information about the environment
 const osPlat = os.platform(); // possible values: win32 (Windows), linux (Linux), darwin (macOS)
@@ -124,15 +128,19 @@ function getNightlyFileName(arch) {
     return `julia-latest${versionExt}.${ext}`;
 }
 function getFileInfo(versionInfo, version, arch) {
+    const err = `Could not find ${archMap[arch]}/${version} binaries`;
     if (version.endsWith('nightly')) {
         return null;
     }
+    if (!versionInfo[version]) {
+        throw err;
+    }
     for (let file of versionInfo[version].files) {
         if (file.os == osMap[osPlat] && file.arch == archMap[arch]) {
             return file;
         }
     }
-    throw `Could not find ${archMap[arch]}/${version} binaries`;
+    throw err;
 }
 exports.getFileInfo = getFileInfo;
 function getDownloadURL(fileInfo, version, arch) {
@@ -146,6 +154,10 @@ function getDownloadURL(fileInfo, version, arch) {
     if (version == 'nightly') {
         return `${baseURL}/${getNightlyFileName(arch)}`;
     }
+    // Verify that fileInfo.url points at the official Julia download servers
+    if (!fileInfo.url.startsWith('https://julialang-s3.julialang.org/')) {
+        throw new Error(`versions.json points at a download location outside of Julia's download server: ${fileInfo.url}. Aborting for security reasons.`);
+    }
     return fileInfo.url;
 }
 exports.getDownloadURL = getDownloadURL;

package.json

@@ -1,6 +1,6 @@
 {
   "name": "setup-julia",
-  "version": "1.6.0",
+  "version": "1.8.0",
   "private": true,
   "description": "setup Julia action",
   "main": "lib/setup-julia.js",

src/installer.ts

@@ -18,7 +18,11 @@ const osMap = {
 }
 const archMap = {
     'x86': 'i686',
-    'x64': 'x86_64'
+    'X86': 'i686',
+    'x64': 'x86_64',
+    'X64': 'x86_64',
+    'aarch64': 'aarch64',
+    'ARM64': 'aarch64'
 }
 
 // Store information about the environment
@@ -115,17 +119,23 @@ function getNightlyFileName(arch: string): string {
 }
 
 export function getFileInfo(versionInfo, version: string, arch: string) {
+    const err = `Could not find ${archMap[arch]}/${version} binaries`
+
     if (version.endsWith('nightly')) {
         return null
     }
 
+    if (!versionInfo[version]) {
+       throw err
+    }
+
     for (let file of versionInfo[version].files) {
         if (file.os == osMap[osPlat] && file.arch == archMap[arch]) {
             return file
         }
     }
 
-    throw `Could not find ${archMap[arch]}/${version} binaries`
+    throw err
 }
 
 export function getDownloadURL(fileInfo, version: string, arch: string): string {
@@ -142,6 +152,10 @@ export function getDownloadURL(fileInfo, version: string, arch: string): string
         return `${baseURL}/${getNightlyFileName(arch)}`
     }
 
+    // Verify that fileInfo.url points at the official Julia download servers
+    if (!fileInfo.url.startsWith('https://julialang-s3.julialang.org/')) {
+        throw new Error(`versions.json points at a download location outside of Julia's download server: ${fileInfo.url}. Aborting for security reasons.`)
+    }
     return fileInfo.url
 }