mirror of
https://github.com/actions/setup-java.git
synced 2026-07-31 14:41:36 +08:00
* Verify JDK downloads with vendor checksums Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a800a031-600e-4d28-b23e-be309555d38d * Handle missing vendor checksum values Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a800a031-600e-4d28-b23e-be309555d38d * Preserve checksum error during cleanup failure Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a800a031-600e-4d28-b23e-be309555d38d * Validate checksum metadata value types Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a800a031-600e-4d28-b23e-be309555d38d * Clarify checksum documentation Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a800a031-600e-4d28-b23e-be309555d38d * Expand vendor checksum verification Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a800a031-600e-4d28-b23e-be309555d38d * Accept SHA-256 or SHA-512 for JetBrains checksum sibling JetBrains publishes a single, generically-named ".checksum" sibling whose digest algorithm isn't disclosed by the filename. Older JBR 11 builds (e.g. jbrsdk_nomod-11_0_16-*-b2043.64.tar.gz) publish a SHA-256 digest there, while newer builds publish SHA-512. The JetBrains installer previously assumed SHA-512 unconditionally, so verification failed with "Malformed sha512 checksum metadata ... expected a 128-character hexadecimal digest" for those older builds, breaking the jetbrains 11 e2e job on macOS and Windows. fetchChecksum now accepts a list of candidate algorithms and infers the actual algorithm from the returned digest's length, preferring the strongest match. The JetBrains installer passes ['sha512', 'sha256']; all other callers are unaffected since they already pass a single, vendor-disclosed algorithm. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a800a031-600e-4d28-b23e-be309555d38d * Use SapMachine archive checksum files Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a800a031-600e-4d28-b23e-be309555d38d --------- Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a800a031-600e-4d28-b23e-be309555d38d
265 lines
7.8 KiB
TypeScript
265 lines
7.8 KiB
TypeScript
import {
|
|
jest,
|
|
describe,
|
|
it,
|
|
expect,
|
|
beforeEach,
|
|
afterEach,
|
|
beforeAll,
|
|
afterAll
|
|
} from '@jest/globals';
|
|
import os from 'os';
|
|
import {HttpClient} from '@actions/http-client';
|
|
|
|
// Mock @actions/core before importing source modules that depend on it
|
|
jest.unstable_mockModule('@actions/core', () => ({
|
|
info: jest.fn(),
|
|
warning: jest.fn(),
|
|
debug: jest.fn(),
|
|
error: jest.fn(),
|
|
notice: jest.fn(),
|
|
setFailed: jest.fn(),
|
|
setOutput: jest.fn(),
|
|
getInput: jest.fn(),
|
|
getBooleanInput: jest.fn(),
|
|
getMultilineInput: jest.fn(),
|
|
addPath: jest.fn(),
|
|
exportVariable: jest.fn(),
|
|
saveState: jest.fn(),
|
|
getState: jest.fn(),
|
|
setSecret: jest.fn(),
|
|
isDebug: jest.fn(() => false),
|
|
startGroup: jest.fn(),
|
|
endGroup: jest.fn(),
|
|
group: jest.fn((_name: string, fn: () => Promise<unknown>) => fn()),
|
|
toPlatformPath: jest.fn((p: string) => p),
|
|
toWin32Path: jest.fn((p: string) => p),
|
|
toPosixPath: jest.fn((p: string) => p)
|
|
}));
|
|
|
|
// Dynamic imports after mocking
|
|
const core = await import('@actions/core');
|
|
const {OracleDistribution} =
|
|
await import('../../src/distributions/oracle/installer.js');
|
|
const {getDownloadArchiveExtension} = await import('../../src/util.js');
|
|
|
|
describe('findPackageForDownload', () => {
|
|
let distribution: InstanceType<typeof OracleDistribution>;
|
|
let spyDebug: any;
|
|
let spyHttpClient: any;
|
|
let spyHttpClientGet: any;
|
|
let spyCoreError: any;
|
|
|
|
const ORACLE_CHECKSUM = 'f'.repeat(64);
|
|
|
|
beforeEach(() => {
|
|
distribution = new OracleDistribution({
|
|
version: '',
|
|
architecture: 'x64',
|
|
packageType: 'jdk',
|
|
checkLatest: false
|
|
});
|
|
|
|
spyDebug = core.debug as jest.Mock;
|
|
spyDebug.mockImplementation(() => {});
|
|
|
|
// Mock core.error to suppress error logs
|
|
spyCoreError = core.error as jest.Mock;
|
|
spyCoreError.mockImplementation(() => {});
|
|
|
|
// Every resolved release fetches its `${url}.sha256` sibling checksum;
|
|
// stub it so tests never reach the real network.
|
|
spyHttpClientGet = jest.spyOn(HttpClient.prototype, 'get');
|
|
spyHttpClientGet.mockResolvedValue({
|
|
message: {statusCode: 200},
|
|
readBody: async () => ORACLE_CHECKSUM
|
|
});
|
|
});
|
|
|
|
it.each([
|
|
[
|
|
'21',
|
|
'21',
|
|
'https://download.oracle.com/java/21/latest/jdk-21_{{OS_TYPE}}-x64_bin.{{ARCHIVE_TYPE}}'
|
|
],
|
|
[
|
|
'20',
|
|
'20',
|
|
'https://download.oracle.com/java/20/latest/jdk-20_{{OS_TYPE}}-x64_bin.{{ARCHIVE_TYPE}}'
|
|
],
|
|
[
|
|
'18',
|
|
'18',
|
|
'https://download.oracle.com/java/18/archive/jdk-18_{{OS_TYPE}}-x64_bin.{{ARCHIVE_TYPE}}'
|
|
],
|
|
[
|
|
'20.0.1',
|
|
'20.0.1',
|
|
'https://download.oracle.com/java/20/archive/jdk-20.0.1_{{OS_TYPE}}-x64_bin.{{ARCHIVE_TYPE}}'
|
|
],
|
|
[
|
|
'17',
|
|
'17',
|
|
'https://download.oracle.com/java/17/latest/jdk-17_{{OS_TYPE}}-x64_bin.{{ARCHIVE_TYPE}}'
|
|
],
|
|
[
|
|
'17.0.1',
|
|
'17.0.1',
|
|
'https://download.oracle.com/java/17/archive/jdk-17.0.1_{{OS_TYPE}}-x64_bin.{{ARCHIVE_TYPE}}'
|
|
]
|
|
])('version is %s -> %s', async (input, expectedVersion, expectedUrl) => {
|
|
/* Needed only for this particular test because some urls might change */
|
|
spyHttpClient = jest.spyOn(HttpClient.prototype, 'head');
|
|
spyHttpClient.mockReturnValue(
|
|
Promise.resolve({
|
|
message: {
|
|
statusCode: 200
|
|
}
|
|
})
|
|
);
|
|
|
|
/**
|
|
* NOTE - Should fail to retrieve 18 from latest and check archive instead
|
|
*/
|
|
if (input === '18') {
|
|
spyHttpClient.mockReturnValueOnce(
|
|
Promise.resolve({
|
|
message: {
|
|
statusCode: 404
|
|
}
|
|
})
|
|
);
|
|
}
|
|
|
|
const result = await distribution['findPackageForDownload'](input);
|
|
|
|
jest.restoreAllMocks();
|
|
|
|
expect(result.version).toBe(expectedVersion);
|
|
const osType = distribution.getPlatform();
|
|
const archiveType = getDownloadArchiveExtension();
|
|
const url = expectedUrl
|
|
.replace('{{OS_TYPE}}', osType)
|
|
.replace('{{ARCHIVE_TYPE}}', archiveType);
|
|
expect(result.url).toBe(url);
|
|
});
|
|
|
|
it('fetches the authoritative sha256 checksum for the resolved archive', async () => {
|
|
spyHttpClient = jest.spyOn(HttpClient.prototype, 'head');
|
|
spyHttpClient.mockResolvedValue({message: {statusCode: 200}});
|
|
|
|
const result = await distribution['findPackageForDownload']('21');
|
|
|
|
jest.restoreAllMocks();
|
|
|
|
expect(result.checksum).toEqual({
|
|
algorithm: 'sha256',
|
|
value: ORACLE_CHECKSUM,
|
|
source: `${result.url}.sha256`
|
|
});
|
|
expect(spyHttpClientGet).toHaveBeenCalledWith(`${result.url}.sha256`);
|
|
expect(spyHttpClientGet).toHaveBeenCalledTimes(1);
|
|
});
|
|
|
|
it.each([
|
|
['amd64', 'x64'],
|
|
['arm64', 'aarch64']
|
|
])(
|
|
'defaults to os.arch(): %s mapped to distro arch: %s',
|
|
async (osArch: string, distroArch: string) => {
|
|
jest
|
|
.spyOn(os, 'arch')
|
|
.mockReturnValue(osArch as ReturnType<typeof os.arch>);
|
|
jest.spyOn(os, 'platform').mockReturnValue('linux');
|
|
|
|
const version = '18';
|
|
const distro = new OracleDistribution({
|
|
version,
|
|
architecture: '', // to get default value
|
|
packageType: 'jdk',
|
|
checkLatest: false
|
|
});
|
|
|
|
const osType = distribution.getPlatform();
|
|
if (osType === 'windows' && distroArch == 'aarch64') {
|
|
return; // skip, aarch64 is not available for Windows
|
|
}
|
|
const archiveType = getDownloadArchiveExtension();
|
|
const result = await distro['findPackageForDownload'](version);
|
|
const expectedUrl = `https://download.oracle.com/java/18/archive/jdk-18_${osType}-${distroArch}_bin.${archiveType}`;
|
|
|
|
expect(result.url).toBe(expectedUrl);
|
|
},
|
|
10000
|
|
);
|
|
|
|
it('should throw an error', async () => {
|
|
await expect(distribution['findPackageForDownload']('8')).rejects.toThrow(
|
|
/Oracle JDK is only supported for JDK 17 and later/
|
|
);
|
|
await expect(distribution['findPackageForDownload']('11')).rejects.toThrow(
|
|
/Oracle JDK is only supported for JDK 17 and later/
|
|
);
|
|
});
|
|
});
|
|
describe('findPackageForDownload with latest', () => {
|
|
let spyHttpClientHead: any;
|
|
let spyHttpClientGetJson: any;
|
|
|
|
beforeEach(() => {
|
|
(core.debug as jest.Mock).mockImplementation(() => {});
|
|
(core.error as jest.Mock).mockImplementation(() => {});
|
|
spyHttpClientGetJson = jest.spyOn(HttpClient.prototype, 'getJson');
|
|
spyHttpClientGetJson.mockResolvedValue({
|
|
statusCode: 200,
|
|
result: {most_recent_feature_release: 25},
|
|
headers: {}
|
|
});
|
|
});
|
|
|
|
afterEach(() => {
|
|
jest.restoreAllMocks();
|
|
});
|
|
|
|
it('resolves the newest major version from the Adoptium API', async () => {
|
|
spyHttpClientHead = jest.spyOn(HttpClient.prototype, 'head');
|
|
spyHttpClientHead.mockResolvedValue({message: {statusCode: 200}});
|
|
jest.spyOn(HttpClient.prototype, 'get').mockResolvedValue({
|
|
message: {statusCode: 200},
|
|
readBody: async () => 'f'.repeat(64)
|
|
} as any);
|
|
|
|
const distribution = new OracleDistribution({
|
|
version: 'latest',
|
|
architecture: 'x64',
|
|
packageType: 'jdk',
|
|
checkLatest: false
|
|
});
|
|
|
|
const result = await distribution['findPackageForDownload']('x');
|
|
const osType = distribution.getPlatform();
|
|
const archiveType = getDownloadArchiveExtension();
|
|
|
|
expect(result.version).toBe('25');
|
|
expect(result.url).toBe(
|
|
`https://download.oracle.com/java/25/latest/jdk-25_${osType}-x64_bin.${archiveType}`
|
|
);
|
|
});
|
|
|
|
it('throws an actionable error when the latest major is not yet available', async () => {
|
|
spyHttpClientHead = jest.spyOn(HttpClient.prototype, 'head');
|
|
spyHttpClientHead.mockResolvedValue({message: {statusCode: 404}});
|
|
|
|
const distribution = new OracleDistribution({
|
|
version: 'latest',
|
|
architecture: 'x64',
|
|
packageType: 'jdk',
|
|
checkLatest: false
|
|
});
|
|
|
|
await expect(distribution['findPackageForDownload']('x')).rejects.toThrow(
|
|
/is not yet available for the Oracle JDK distribution/
|
|
);
|
|
});
|
|
});
|