build

.github/CODEOWNERS

@@ -1 +1 @@
-* @Azure/cloud-native-github-action-owners
+* @Azure/aks-atlanta

.github/workflows/defaultLabels.yml

@@ -13,7 +13,7 @@ jobs:
 
       # Steps represent a sequence of tasks that will be executed as part of the job
       steps:
-         - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 #v9.1.0
+         - uses: actions/stale@v9
            name: Setting issue as idle
            with:
               repo-token: ${{ secrets.GITHUB_TOKEN }}
@@ -24,7 +24,7 @@ jobs:
               operations-per-run: 100
               exempt-issue-labels: 'backlog'
 
-         - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 #v9.1.0
+         - uses: actions/stale@v9
            name: Setting PR as idle
            with:
               repo-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/integration-tests.yml

@@ -7,23 +7,15 @@ on:
 jobs:
    trigger-integration-tests:
       name: Trigger Integration tests
-      strategy:
+      runs-on: ubuntu-latest
-         matrix:
-            os:
-               - ubuntu-latest
-               - ubuntu-24.04-arm
-               - macos-latest # arm
-               - macos-13 # x64
-         fail-fast: false
-      runs-on: ${{ matrix.os }}
       env:
-         HELM_3_18_4: 'v3.18.4'
+         HELM_3_8_0: 'v3.8.0'
-         HELM_3_18_0: 'v3.18.0'
+         HELM_3_7_2: 'v3.7.2'
-         HELM_NO_V: '3.18.4'
+         HELM_NO_V: '3.5.0'
          PR_BASE_REF: ${{ github.event.pull_request.base.ref }}
       steps:
          - name: Check out repository
-           uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+           uses: actions/checkout@v4
          - name: npm install and build
            id: action-npm-build
            run: |
@@ -35,41 +27,41 @@ jobs:
          - name: Setup helm
            uses: ./
            with:
-              version: ${{ env.HELM_3_18_4 }}
+              version: ${{ env.HELM_3_8_0 }}
-         - name: Validate helm 3.18.4
+         - name: Validate helm 3.8.0
            run: |
-              if [[ $(helm version) != *$HELM_3_18_4* ]]; then
+              if [[ $(helm version) != *$HELM_3_8_0* ]]; then
-                echo "HELM VERSION INCORRECT: HELM VERSION DOES NOT CONTAIN v3.18.4"
+                echo "HELM VERSION INCORRECT: HELM VERSION DOES NOT CONTAIN v3.8.0"
                 echo "HELM VERSION OUTPUT: $(helm version)"
                 exit 1
               else
-                echo "HELM VERSION $HELM_3_18_4 INSTALLED SUCCESSFULLY"
+                echo "HELM VERSION $HELM_3_8_0 INSTALLED SUCCESSFULLY"
               fi
-         - name: Setup helm 3.18.0
+         - name: Setup helm 3.7.2
            uses: ./
            with:
-              version: ${{ env.HELM_3_18_0 }}
+              version: ${{ env.HELM_3_7_2 }}
-         - name: Validate 3.18.0
+         - name: Validate 3.7.2
            run: |
-              if [[ $(helm version) != *$HELM_3_18_0* ]]; then
+              if [[ $(helm version) != *$HELM_3_7_2* ]]; then
-                echo "HELM VERSION INCORRECT: HELM VERSION DOES NOT CONTAIN v3.18.0"
+                echo "HELM VERSION INCORRECT: HELM VERSION DOES NOT CONTAIN v3.7.2"
                 echo "HELM VERSION OUTPUT: $(helm version)"
                 exit 1
               else
-                echo "HELM VERSION $HELM_3_18_0 INSTALLED SUCCESSFULLY"
+                echo "HELM VERSION $HELM_3_7_2 INSTALLED SUCCESSFULLY"
               fi
-         - name: Setup helm 3.18.4 with no v in version
+         - name: Setup helm 3.5.0 with no v in version
            uses: ./
            with:
               version: ${{ env.HELM_NO_V }}
-         - name: Validate 3.18.4 without v in version
+         - name: Validate 3.5.0 without v in version
            run: |
               if [[ $(helm version) != *$HELM_NO_V* ]]; then
-                echo "HELM VERSION INCORRECT: HELM VERSION DOES NOT CONTAIN 3.18.4"
+                echo "HELM VERSION INCORRECT: HELM VERSION DOES NOT CONTAIN v3.5.0"
                 echo "HELM VERSION OUTPUT: $(helm version)"
                 exit 1
               else
-                echo "HELM VERSION $HELM_NO_V INSTALLED SUCCESSFULLY"
+                echo "HELM VERSION $HELM_3_5_0 INSTALLED SUCCESSFULLY"
               fi
          - name: Setup helm latest version
            uses: ./
@@ -84,8 +76,7 @@ jobs:
                 --repo helm/helm \
                 --exclude-drafts \
                 --exclude-pre-releases \
-                --json name,isLatest \
+                --limit 1 | awk '{print $4}')
-                --jq '.[] | select(.isLatest)|.name' | awk '{print $2}')
 
               if [[ $(helm version) != *$HELM_LATEST* ]]; then
                 echo "HELM VERSION INCORRECT: HELM VERSION DOES NOT CONTAIN $HELM_LATEST"

.github/workflows/prettify-code.yml

@@ -10,7 +10,9 @@ jobs:
       runs-on: ubuntu-latest
       steps:
          - name: Checkout Repository
-           uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+           uses: actions/checkout@v4
 
          - name: Enforce Prettier
-           run: npx prettier --check .
+           uses: actionsx/prettier@v3
+           with:
+              args: --check .

.github/workflows/release-pr.yml

@@ -13,6 +13,6 @@ jobs:
       permissions:
          actions: read
          contents: write
-      uses: Azure/action-release-workflows/.github/workflows/release_js_project.yaml@3c677ba5ab58f5c5c1a6f0cfb176b333b1f27405 # v1.0.3
+      uses: Azure/action-release-workflows/.github/workflows/release_js_project.yaml@v1
       with:
          changelogPath: ./CHANGELOG.md

.github/workflows/tag-and-draft.yml

@@ -7,4 +7,4 @@ on:
 
 jobs:
    tag-and-release:
-      uses: OliverMKing/javascript-release-workflow/.github/workflows/tag-and-release.yml@c753e1545b144562237cd1177a95bab21a785cff # main
+      uses: OliverMKing/javascript-release-workflow/.github/workflows/tag-and-release.yml@main

.github/workflows/unit-tests.yml

@@ -11,19 +11,9 @@ on: # rebuild any PRs and main branch changes
 
 jobs:
    build: # make sure build/ci works properly
-      strategy:
+      runs-on: ubuntu-latest
-         matrix:
-            os:
-               - ubuntu-latest
-               - ubuntu-24.04-arm
-               - windows-latest
-               - windows-11-arm
-               - macos-latest # arm
-               - macos-13 # x64
-         fail-fast: false
-      runs-on: ${{ matrix.os }}
       steps:
-         - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+         - uses: actions/checkout@v4
 
          - name: Run L0 tests.
            run: |

.husky/pre-commit

@@ -1,7 +0,0 @@
-npm test
-npm run format-check || {
-  echo ""
-  echo "❌ Formatting check failed."
-  echo "💡 Run 'npm run format' or 'prettier --write .' to fix formatting issues."
-  exit 1
-}

CHANGELOG.md

@@ -1,20 +1,5 @@
 # Change Log
 
-## [4.3.1] - 2025-08-12
-
-### Changed
-
-- #167 [Pinning Action Dependencies for Security and Reliability](https://github.com/Azure/setup-helm/pull/167)
-- #181 [Fix types, and update node version.](https://github.com/Azure/setup-helm/pull/181)
-- #191 [chore(tests): Mock arch to make tests pass on arm host](https://github.com/Azure/setup-helm/pull/191)
-- #192 [chore: remove unnecessary prebuild script](https://github.com/Azure/setup-helm/pull/192)
-- #203 [Update helm version retrieval to use JSON output for latest version](https://github.com/Azure/setup-helm/pull/203)
-- #207 [ci(workflows): update helm version to v3.18.4 and add matrix for tests](https://github.com/Azure/setup-helm/pull/207)
-
-### Added
-
-- #197 [Add pre-commit hook](https://github.com/Azure/setup-helm/pull/197)
-
 ## [4.3.0] - 2025-02-15
 
 -  #152 feat: log when restoring from cache

README.md

@@ -14,7 +14,7 @@ Acceptable values are latest or any semantic version string like v3.5.0 Use this
 ```
 
 > [!NOTE]
-> If something goes wrong with fetching the latest version the action will use the hardcoded default version (currently v3.18.3). If you rely on a certain version higher than the default, you should explicitly use that version instead of latest.
+> If something goes wrong with fetching the latest version the action will use the hardcoded default stable version (currently v3.13.3). If you rely on a certain version higher than the default, you should explicitly use that version instead of latest.
 
 The cached helm binary path is prepended to the PATH environment variable as well as stored in the helm-path output variable.
 Refer to the action metadata file for details about all the inputs https://github.com/Azure/setup-helm/blob/master/action.yml

lib/index.js

@@ -14079,14 +14079,6 @@ const { isUint8Array, isArrayBuffer } = __nccwpck_require__(8253)
 const { File: UndiciFile } = __nccwpck_require__(3041)
 const { parseMIMEType, serializeAMimeType } = __nccwpck_require__(4322)
 
-let random
-try {
-  const crypto = __nccwpck_require__(7598)
-  random = (max) => crypto.randomInt(0, max)
-} catch {
-  random = (max) => Math.floor(Math.random(max))
-}
-
 let ReadableStream = globalThis.ReadableStream
 
 /** @type {globalThis['File']} */
@@ -14172,7 +14164,7 @@ function extractBody (object, keepalive = false) {
     // Set source to a copy of the bytes held by object.
     source = new Uint8Array(object.buffer.slice(object.byteOffset, object.byteOffset + object.byteLength))
   } else if (util.isFormDataLike(object)) {
-    const boundary = `----formdata-undici-0${`${random(1e11)}`.padStart(11, '0')}`
+    const boundary = `----formdata-undici-0${`${Math.floor(Math.random() * 1e11)}`.padStart(11, '0')}`
     const prefix = `--${boundary}\r\nContent-Disposition: form-data`
 
     /*! formdata-polyfill. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */
@@ -28204,7 +28196,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.walkSync = exports.stableHelmVersion = void 0;
+exports.walkSync = void 0;
 exports.run = run;
 exports.getValidVersion = getValidVersion;
 exports.getLatestHelmVersion = getLatestHelmVersion;
@@ -28222,7 +28214,7 @@ const fs = __nccwpck_require__(9896);
 const toolCache = __nccwpck_require__(3472);
 const core = __nccwpck_require__(7484);
 const helmToolName = 'helm';
-exports.stableHelmVersion = 'v3.18.4';
+const stableHelmVersion = 'v3.13.3';
 function run() {
     return __awaiter(this, void 0, void 0, function* () {
         let version = core.getInput('version', { required: true });
@@ -28262,8 +28254,8 @@ function getLatestHelmVersion() {
             return release;
         }
         catch (err) {
-            core.warning(`Error while fetching latest Helm release: ${err.toString()}. Using default version ${exports.stableHelmVersion}`);
+            core.warning(`Error while fetching latest Helm release: ${err.toString()}. Using default version ${stableHelmVersion}`);
-            return exports.stableHelmVersion;
+            return stableHelmVersion;
         }
     });
 }
@@ -28449,14 +28441,6 @@ module.exports = require("net");
 
 /***/ }),
 
-/***/ 7598:
-/***/ ((module) => {
-
-"use strict";
-module.exports = require("node:crypto");
-
-/***/ }),
-
 /***/ 8474:
 /***/ ((module) => {
 

package.json

@@ -1,6 +1,6 @@
 {
    "name": "setuphelm",
-   "version": "4.3.1",
+   "version": "4.3.0",
    "private": true,
    "description": "Setup helm",
    "author": "Anumita Shenoy",
@@ -10,26 +10,26 @@
       "@actions/exec": "^1.1.1",
       "@actions/io": "^1.1.2",
       "@actions/tool-cache": "2.0.2",
-      "@octokit/action": "^8.0.2",
+      "@octokit/action": "^7.0.0",
-      "semver": "^7.7.2"
+      "ncc": "^0.3.6",
+      "semver": "^7.7.1"
    },
    "main": "lib/index.js",
    "scripts": {
+      "prebuild": "npm i ncc",
       "build": "ncc build src/index.ts -o lib",
       "test": "jest",
       "test-coverage": "jest --coverage",
       "format": "prettier --write .",
-      "format-check": "prettier --check .",
+      "format-check": "prettier --check ."
-      "prepare": "husky"
    },
    "devDependencies": {
-      "@types/jest": "^30.0.0",
+      "@types/jest": "^29.5.14",
-      "@types/node": "^24.2.1",
+      "@types/node": "^22.13.1",
       "@vercel/ncc": "^0.38.3",
-      "husky": "^9.1.7",
+      "jest": "^29.7.0",
-      "jest": "^30.0.5",
+      "prettier": "^3.5.0",
-      "prettier": "^3.6.2",
+      "ts-jest": "^29.2.5",
-      "ts-jest": "^29.4.1",
+      "typescript": "^5.7.3"
-      "typescript": "^5.9.2"
    }
 }

src/run.test.ts

@@ -67,7 +67,7 @@ describe('run.ts', () => {
       expect(os.arch).toHaveBeenCalled()
    })
 
-   test('getHelmDownloadURL() - return the URL to download helm for Windows x64', () => {
+   test('getHelmDownloadURL() - return the URL to download helm for Windows', () => {
       jest.spyOn(os, 'platform').mockReturnValue('win32')
       jest.spyOn(os, 'arch').mockReturnValue('x64')
 
@@ -76,15 +76,6 @@ describe('run.ts', () => {
       expect(os.platform).toHaveBeenCalled()
    })
 
-   test('getHelmDownloadURL() - return the URL to download helm for Windows arm64', () => {
-      jest.spyOn(os, 'platform').mockReturnValue('win32')
-      jest.spyOn(os, 'arch').mockReturnValue('arm64')
-
-      const expected = 'https://test.tld/helm-v3.8.0-windows-arm64.zip'
-      expect(run.getHelmDownloadURL(downloadBaseURL, 'v3.8.0')).toBe(expected)
-      expect(os.platform).toHaveBeenCalled()
-   })
-
    test('getLatestHelmVersion() - return the latest version of HELM', async () => {
       const res = {
          status: 200,
@@ -97,7 +88,7 @@ describe('run.ts', () => {
    test('getLatestHelmVersion() - return the stable version of HELM when simulating a network error', async () => {
       const errorMessage: string = 'Network Error'
       global.fetch = jest.fn().mockRejectedValueOnce(new Error(errorMessage))
-      expect(await run.getLatestHelmVersion()).toBe(run.stableHelmVersion)
+      expect(await run.getLatestHelmVersion()).toBe('v3.13.3')
    })
 
    test('getValidVersion() - return version with v prepended', () => {
@@ -108,20 +99,20 @@ describe('run.ts', () => {
       jest.spyOn(fs, 'readdirSync').mockImplementation((file, _) => {
          if (file == 'mainFolder')
             return [
-               'file1' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>,
+               'file1' as unknown as fs.Dirent,
-               'file2' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>,
+               'file2' as unknown as fs.Dirent,
-               'folder1' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>,
+               'folder1' as unknown as fs.Dirent,
-               'folder2' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>
+               'folder2' as unknown as fs.Dirent
             ]
          if (file == path.join('mainFolder', 'folder1'))
             return [
-               'file11' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>,
+               'file11' as unknown as fs.Dirent,
-               'file12' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>
+               'file12' as unknown as fs.Dirent
             ]
          if (file == path.join('mainFolder', 'folder2'))
             return [
-               'file21' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>,
+               'file21' as unknown as fs.Dirent,
-               'file22' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>
+               'file22' as unknown as fs.Dirent
             ]
          return []
       })
@@ -143,20 +134,20 @@ describe('run.ts', () => {
       jest.spyOn(fs, 'readdirSync').mockImplementation((file, _) => {
          if (file == 'mainFolder')
             return [
-               'file1' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>,
+               'file1' as unknown as fs.Dirent,
-               'file2' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>,
+               'file2' as unknown as fs.Dirent,
-               'folder1' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>,
+               'folder1' as unknown as fs.Dirent,
-               'folder2' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>
+               'folder2' as unknown as fs.Dirent
             ]
          if (file == path.join('mainFolder', 'folder1'))
             return [
-               'file11' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>,
+               'file11' as unknown as fs.Dirent,
-               'file12' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>
+               'file12' as unknown as fs.Dirent
             ]
          if (file == path.join('mainFolder', 'folder2'))
             return [
-               'file21' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>,
+               'file21' as unknown as fs.Dirent,
-               'file22' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>
+               'file22' as unknown as fs.Dirent
             ]
          return []
       })
@@ -175,8 +166,7 @@ describe('run.ts', () => {
    test('findHelm() - change access permissions and find the helm in given directory', () => {
       jest.spyOn(fs, 'chmodSync').mockImplementation(() => {})
       jest.spyOn(fs, 'readdirSync').mockImplementation((file, _) => {
-         if (file == 'mainFolder')
+         if (file == 'mainFolder') return ['helm.exe' as unknown as fs.Dirent]
-            return ['helm.exe' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>]
          return []
       })
       jest.spyOn(fs, 'statSync').mockImplementation((file) => {
@@ -213,15 +203,12 @@ describe('run.ts', () => {
       const response = JSON.stringify([{tag_name: 'v4.0.0'}])
       jest.spyOn(fs, 'readFileSync').mockReturnValue(response)
       jest.spyOn(os, 'platform').mockReturnValue('win32')
-      jest.spyOn(os, 'arch').mockReturnValue('x64')
       jest.spyOn(fs, 'chmodSync').mockImplementation(() => {})
       jest.spyOn(toolCache, 'extractZip').mockResolvedValue('extractedPath')
       jest.spyOn(toolCache, 'cacheDir').mockResolvedValue('pathToCachedDir')
       jest
          .spyOn(fs, 'readdirSync')
-         .mockImplementation((file, _) => [
+         .mockImplementation((file, _) => ['helm.exe' as unknown as fs.Dirent])
-            'helm.exe' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>
-         ])
       jest.spyOn(fs, 'statSync').mockImplementation((file) => {
          const isDirectory =
             (file as string).indexOf('folder') == -1 ? false : true
@@ -249,7 +236,6 @@ describe('run.ts', () => {
          throw 'Unable to download'
       })
       jest.spyOn(os, 'platform').mockReturnValue('win32')
-      jest.spyOn(os, 'arch').mockReturnValue('x64')
 
       const downloadUrl = 'https://test.tld/helm-v3.2.1-windows-amd64.zip'
       await expect(run.downloadHelm(downloadBaseURL, 'v3.2.1')).rejects.toThrow(
@@ -265,13 +251,10 @@ describe('run.ts', () => {
       jest.spyOn(toolCache, 'downloadTool').mockResolvedValue('pathToTool')
       jest.spyOn(toolCache, 'extractZip').mockResolvedValue('extractedPath')
       jest.spyOn(os, 'platform').mockReturnValue('win32')
-      jest.spyOn(os, 'arch').mockReturnValue('x64')
       jest.spyOn(fs, 'chmodSync').mockImplementation(() => {})
       jest
          .spyOn(fs, 'readdirSync')
-         .mockReturnValue([
+         .mockReturnValue(['helm.exe' as unknown as fs.Dirent])
-            'helm.exe' as unknown as fs.Dirent<Buffer<ArrayBufferLike>>
-         ])
       jest.spyOn(fs, 'statSync').mockImplementation((file) => {
          const isDirectory =
             (file as string).indexOf('folder') == -1 ? false : true
@@ -295,7 +278,6 @@ describe('run.ts', () => {
       jest.spyOn(toolCache, 'downloadTool').mockResolvedValue('pathToTool')
       jest.spyOn(toolCache, 'extractZip').mockResolvedValue('extractedPath')
       jest.spyOn(os, 'platform').mockReturnValue('win32')
-      jest.spyOn(os, 'arch').mockReturnValue('x64')
       jest.spyOn(fs, 'chmodSync').mockImplementation()
       jest.spyOn(fs, 'readdirSync').mockImplementation((file, _) => [])
       jest.spyOn(fs, 'statSync').mockImplementation((file) => {

src/run.ts

@@ -10,7 +10,7 @@ import * as toolCache from '@actions/tool-cache'
 import * as core from '@actions/core'
 
 const helmToolName = 'helm'
-export const stableHelmVersion = 'v3.18.4'
+const stableHelmVersion = 'v3.13.3'
 
 export async function run() {
    let version = core.getInput('version', {required: true})