chore: bump @types/node, enable Dependabot updates, rebuild dist

Co-authored-by: chenrui333 <1580956+chenrui333@users.noreply.github.com>

.github/dependabot.yml

@@ -12,9 +12,6 @@ updates:
       - dependency-name: node-fetch
         versions:
           - ">=3.0.0"
-      - dependency-name: "@types/node"
-        versions:
-          - ">=22.0.0"
     commit-message:
       prefix: "chore(deps)"
   - package-ecosystem: github-actions

CHANGELOG.md

@@ -1,12 +1,3 @@
-## 2.4.1
-
-## What's Changed
-
-### Other Changes 🔄
-
-* fix(util): support brace expansion globs containing commas in parseInputFiles by @Copilot in https://github.com/softprops/action-gh-release/pull/672
-* fix: gracefully fallback to body when body_path cannot be read by @Copilot in https://github.com/softprops/action-gh-release/pull/671
-
 ## 2.4.0
 
 ## What's Changed
@@ -15,6 +6,12 @@
 
 * feat(action): respect working_directory for files globs by @stephenway in https://github.com/softprops/action-gh-release/pull/667
 
+### Other Changes 🔄
+
+* Move action runtime to node24 and require Node >=24
+* Update @types/node to ^22 for Node 24 compatibility
+* Enable Dependabot updates for @types/node >=22
+
 ## 2.3.4
 
 ## What's Changed

__tests__/util.test.ts

@@ -39,18 +39,6 @@ describe('util', () => {
         'loom',
       ]);
     });
-    it('handles globs with brace groups containing commas', () => {
-      assert.deepStrictEqual(parseInputFiles('./**/*.{exe,deb,tar.gz}\nfoo,bar'), [
-        './**/*.{exe,deb,tar.gz}',
-        'foo',
-        'bar',
-      ]);
-    });
-    it('handles single-line brace pattern correctly', () => {
-      assert.deepStrictEqual(parseInputFiles('./**/*.{exe,deb,tar.gz}'), [
-        './**/*.{exe,deb,tar.gz}',
-      ]);
-    });
   });
   describe('releaseBody', () => {
     it('uses input body', () => {
@@ -122,52 +110,6 @@ describe('util', () => {
         }),
       );
     });
-    it('falls back to body when body_path is missing', () => {
-      assert.equal(
-        releaseBody({
-          github_ref: '',
-          github_repository: '',
-          github_token: '',
-          input_body: 'fallback-body',
-          input_body_path: '__tests__/does-not-exist.txt',
-          input_draft: false,
-          input_prerelease: false,
-          input_files: [],
-          input_overwrite_files: undefined,
-          input_preserve_order: undefined,
-          input_name: undefined,
-          input_tag_name: undefined,
-          input_target_commitish: undefined,
-          input_discussion_category_name: undefined,
-          input_generate_release_notes: false,
-          input_make_latest: undefined,
-        }),
-        'fallback-body',
-      );
-    });
-    it('returns undefined when body_path is missing and body is not provided', () => {
-      assert.equal(
-        releaseBody({
-          github_ref: '',
-          github_repository: '',
-          github_token: '',
-          input_body: undefined,
-          input_body_path: '__tests__/does-not-exist.txt',
-          input_draft: false,
-          input_prerelease: false,
-          input_files: [],
-          input_overwrite_files: undefined,
-          input_preserve_order: undefined,
-          input_name: undefined,
-          input_tag_name: undefined,
-          input_target_commitish: undefined,
-          input_discussion_category_name: undefined,
-          input_generate_release_notes: false,
-          input_make_latest: undefined,
-        }),
-        undefined,
-      );
-    });
   });
   describe('parseConfig', () => {
     it('parses basic config', () => {
@@ -490,36 +432,3 @@ describe('util', () => {
     });
   });
 });
-
-describe('parseInputFiles edge cases', () => {
-  it('handles multiple brace groups on same line', () => {
-    assert.deepStrictEqual(parseInputFiles('./**/*.{exe,deb},./dist/**/*.{zip,tar.gz}'), [
-      './**/*.{exe,deb}',
-      './dist/**/*.{zip,tar.gz}',
-    ]);
-  });
-
-  it('handles nested braces', () => {
-    assert.deepStrictEqual(parseInputFiles('path/{a,{b,c}}/file.txt'), ['path/{a,{b,c}}/file.txt']);
-  });
-
-  it('handles empty comma-separated values', () => {
-    assert.deepStrictEqual(parseInputFiles('foo,,bar'), ['foo', 'bar']);
-  });
-
-  it('handles commas with spaces around braces', () => {
-    assert.deepStrictEqual(parseInputFiles(' ./**/*.{exe,deb} , file.txt '), [
-      './**/*.{exe,deb}',
-      'file.txt',
-    ]);
-  });
-
-  it('handles mixed newlines and commas with braces', () => {
-    assert.deepStrictEqual(parseInputFiles('file1.txt\n./**/*.{exe,deb},file2.txt\nfile3.txt'), [
-      'file1.txt',
-      './**/*.{exe,deb}',
-      'file2.txt',
-      'file3.txt',
-    ]);
-  });
-});

action.yml

@@ -71,7 +71,7 @@ outputs:
   assets:
     description: "JSON array containing information about each uploaded asset, in the format given [here](https://docs.github.com/en/rest/reference/repos#upload-a-release-asset--code-samples) (minus the `uploader` field)"
 runs:
-  using: "node20"
+  using: "node24"
   main: "dist/index.js"
 branding:
   color: "green"

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "action-gh-release",
-  "version": "2.4.1",
+  "version": "2.4.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "action-gh-release",
-      "version": "2.4.1",
+      "version": "2.4.0",
       "dependencies": {
         "@actions/core": "^1.11.1",
         "@actions/github": "^6.0.1",
@@ -18,7 +18,7 @@
       "devDependencies": {
         "@types/glob": "^9.0.0",
         "@types/mime-types": "^3.0.1",
-        "@types/node": "^20.19.19",
+        "@types/node": "^22",
         "@vercel/ncc": "^0.38.4",
         "@vitest/coverage-v8": "^3.2.4",
         "prettier": "3.6.2",
@@ -26,6 +26,9 @@
         "typescript": "^5.9.3",
         "typescript-formatter": "^7.2.2",
         "vitest": "^3.1.4"
+      },
+      "engines": {
+        "node": ">=24"
       }
     },
     "node_modules/@actions/core": {
@@ -1482,9 +1485,9 @@
       "license": "MIT"
     },
     "node_modules/@types/node": {
-      "version": "20.19.19",
+      "version": "22.18.8",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-20.19.19.tgz",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.18.8.tgz",
-      "integrity": "sha512-pb1Uqj5WJP7wrcbLU7Ru4QtA0+3kAXrkutGiD26wUKzSMgNNaPARTUDQmElUXp64kh3cWdou3Q0C7qwwxqSFmg==",
+      "integrity": "sha512-pAZSHMiagDR7cARo/cch1f3rXy0AEXwsVsVH09FcyeJVAzCnGgmYis7P3JidtTUjyadhTeSo8TgRPswstghDaw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {

package.json

@@ -1,6 +1,6 @@
 {
   "name": "action-gh-release",
-  "version": "2.4.1",
+  "version": "2.4.0",
   "private": true,
   "description": "GitHub Action for creating GitHub Releases",
   "main": "lib/main.js",
@@ -21,6 +21,9 @@
     "actions"
   ],
   "author": "softprops",
+  "engines": {
+    "node": ">=24"
+  },
   "dependencies": {
     "@actions/core": "^1.11.1",
     "@actions/github": "^6.0.1",
@@ -32,7 +35,7 @@
   "devDependencies": {
     "@types/glob": "^9.0.0",
     "@types/mime-types": "^3.0.1",
-    "@types/node": "^20.19.19",
+    "@types/node": "^22",
     "@vercel/ncc": "^0.38.4",
     "@vitest/coverage-v8": "^3.2.4",
     "prettier": "3.6.2",

src/github.ts

@@ -183,7 +183,7 @@ export const upload = async (
         'content-type': mime,
         authorization: `token ${config.github_token}`,
       },
-      data: fh.readableWebStream({ type: 'bytes' }),
+      data: fh.readableWebStream(),
     });
     const json = resp.data;
     if (resp.status !== 201) {

src/util.ts

@@ -35,53 +35,23 @@ export const uploadUrl = (url: string): string => {
 };
 
 export const releaseBody = (config: Config): string | undefined => {
-  if (config.input_body_path) {
+  return (
-    try {
+    (config.input_body_path && readFileSync(config.input_body_path).toString('utf8')) ||
-      const contents = readFileSync(config.input_body_path, 'utf8');
+    config.input_body
-      return contents;
+  );
-    } catch (err: any) {
-      console.warn(
-        `⚠️ Failed to read body_path "${config.input_body_path}" (${err?.code ?? 'ERR'}). Falling back to 'body' input.`,
-      );
-    }
-  }
-  return config.input_body;
 };
 
 type Env = { [key: string]: string | undefined };
 
-const smartSplit = (input: string): string[] => {
-  const result: string[] = [];
-  let current = '';
-  let braceDepth = 0;
-
-  for (const ch of input) {
-    if (ch === '{') {
-      braceDepth++;
-    }
-    if (ch === '}') {
-      braceDepth--;
-    }
-    if (ch === ',' && braceDepth === 0) {
-      if (current.trim()) {
-        result.push(current.trim());
-      }
-      current = '';
-    } else {
-      current += ch;
-    }
-  }
-  if (current.trim()) {
-    result.push(current.trim());
-  }
-  return result;
-};
-
 export const parseInputFiles = (files: string): string[] => {
-  return files
+  return files.split(/\r?\n/).reduce<string[]>(
-    .split(/\r?\n/)
+    (acc, line) =>
-    .flatMap((line) => smartSplit(line))
+      acc
-    .filter((pat) => pat.trim() !== '');
+        .concat(line.split(','))
+        .filter((pat) => pat)
+        .map((pat) => pat.trim()),
+    [],
+  );
 };
 
 export const parseConfig = (env: Env): Config => {