test

chore(action.yml): rename gitHubToken input in action.yml;

.changeset/README.md

@@ -0,0 +1,8 @@
+# Changesets
+
+Hello and welcome! This folder has been automatically generated by `@changesets/cli`, a build tool that works
+with multi-package repos, or single-package repos to help you version and deploy your code. You can
+find the full documentation for it [in our repository](https://github.com/changesets/changesets)
+
+We have a quick list of common questions to get you started engaging with this project in
+[our documentation](https://github.com/changesets/changesets/blob/main/docs/common-questions.md)

.changeset/bright-dryers-kneel.md

@@ -0,0 +1,5 @@
+---
+"wrangler-action": minor
+---
+
+Add GitHub deployments and job summaries for parity with pages-action

.changeset/config.json

@@ -0,0 +1,13 @@
+{
+	"$schema": "https://unpkg.com/@changesets/config@2.3.1/schema.json",
+	"changelog": [
+		"@changesets/changelog-github",
+		{ "repo": "cloudflare/wrangler-action" }
+	],
+	"commit": false,
+	"linked": [],
+	"access": "public",
+	"baseBranch": "main",
+	"updateInternalDependencies": "patch",
+	"ignore": []
+}

.github/workflows/deploy.yml

@@ -0,0 +1,165 @@
+name: Wrangler Action Self Testing
+on:
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  wrangler_action_self_testing:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repo
+        uses: actions/checkout@v3
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v3
+        with:
+          # Pinned due to compatibility issues on 23.2.0
+          node-version: "22"
+          cache: "npm"
+
+      - name: Install modules and build
+        run: npm ci && npm run build
+
+      - name: Unit Tests
+        run: npm run test
+
+      - name: Check Formatting
+        run: npm run check
+
+      - name: Only build app
+        uses: ./
+        with:
+          workingDirectory: "./src/test/fixtures/only-build"
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          command: deploy --dry-run
+
+      - name: Only build app w/ quiet enabled
+        uses: ./
+        with:
+          quiet: true
+          workingDirectory: "./src/test/fixtures/build-quiet"
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          command: deploy --dry-run
+
+      - name: Environment support
+        uses: ./
+        with:
+          workingDirectory: "./src/test/fixtures/environment"
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          environment: dev
+          preCommands: npx wrangler deploy --env dev # https://github.com/cloudflare/wrangler-action/issues/162
+          postCommands: npx wrangler delete --name wrangler-action-dev-environment-test --force
+          secrets: |
+            SECRET1
+            SECRET2
+        env:
+          SECRET1: ${{ secrets.SECRET1 }}
+          SECRET2: ${{ secrets.SECRET2 }}
+
+      # START Setup and teardown of Workers w/ Secrets Tests
+      - name: Deploy app secrets w/ hardcoded Wrangler v2
+        uses: ./
+        with:
+          wranglerVersion: "2.20.0"
+          workingDirectory: "./src/test/fixtures/secrets-v2"
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          secrets: |
+            SECRET1
+            SECRET2
+        env:
+          SECRET1: ${{ secrets.SECRET1 }}
+          SECRET2: ${{ secrets.SECRET2 }}
+
+      - name: Health Check Deployed Worker
+        run: node .github/workflows/workerHealthCheck.cjs wrangler-action-test-secrets-v2
+        shell: bash
+
+      - name: Deploy app secrets w/ default version
+        uses: ./
+        with:
+          workingDirectory: "./src/test/fixtures/secrets-default"
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          secrets: |
+            SECRET1
+            SECRET2
+        env:
+          SECRET1: ${{ secrets.SECRET1 }}
+          SECRET2: ${{ secrets.SECRET2 }}
+
+      - name: Health Check Deployed Worker
+        run: node .github/workflows/workerHealthCheck.cjs wrangler-action-test-secrets-default
+        shell: bash
+
+      - name: Clean Up Deployed Workers
+        uses: ./
+        with:
+          workingDirectory: "./src/test/fixtures/secrets-default"
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          command: delete --name wrangler-action-test-secrets-v2 --force
+          postCommands: npx wrangler delete --name wrangler-action-test-secrets-default --force
+      # END Setup and teardown of Workers w/ Secrets Tests
+
+      - name: Support packageManager variable
+        uses: ./
+        with:
+          workingDirectory: "./src/test/fixtures/specify-package-manager"
+          packageManager: "npm"
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          command: deploy --dry-run
+
+      - name: Support unspecified packageManager with no lockfile
+        uses: ./
+        with:
+          workingDirectory: "./src/test/fixtures/unspecified-package-manager"
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          command: deploy --dry-run
+
+      - name: Support npm package manager
+        uses: ./
+        with:
+          workingDirectory: "./src/test/fixtures/npm"
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          command: deploy --dry-run
+
+      - name: Install yarn
+        run: npm i -g yarn
+
+      - name: Support yarn package manager
+        uses: ./
+        with:
+          workingDirectory: "./src/test/fixtures/yarn"
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          command: deploy --dry-run
+
+      - name: Install pnpm
+        run: npm i -g pnpm
+
+      - name: Support pnpm package manager
+        uses: ./
+        with:
+          workingDirectory: "./src/test/fixtures/pnpm"
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          command: deploy --dry-run
+
+      - name: Change directory to pre-installed-wrangler and install dependencies
+        run: |
+          cd ./src/test/fixtures/pre-installed-wrangler
+          npm install
+
+      - name: Support pre-installed wrangler
+        uses: ./
+        with:
+          workingDirectory: "./src/test/fixtures/pre-installed-wrangler"
+          command: action-test

.github/workflows/release.yml

@@ -0,0 +1,56 @@
+name: Release
+
+on:
+  push:
+    branches:
+      - main
+
+concurrency: ${{ github.workflow }}-${{ github.ref }}
+
+jobs:
+  release:
+    if: ${{ github.repository_owner == 'cloudflare' }}
+    name: Release
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: write
+      pull-requests: write
+      issues: read
+    steps:
+      - name: Checkout Repo
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v3
+        with:
+          # Pinned due to compatibility issues on 23.2.0
+          node-version: "22"
+          cache: "npm"
+
+      - name: Install modules
+        run: npm ci
+
+      - name: Create Version PR
+        id: changesets
+        uses: changesets/action@v1
+        with:
+          createGithubReleases: true
+          publish: npx changeset tag
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build action
+        if: steps.changesets.outputs.published == 'true'
+        run: npm run build
+
+      - name: Push dist-tags
+        if: steps.changesets.outputs.published == 'true'
+        uses: JasonEtco/build-and-tag-action@v2
+        with:
+          tag_name: v${{ fromJSON(steps.changesets.outputs.publishedPackages)[0].version }}
+        env:
+          GITHUB_TOKEN: ${{ github.token }}

.github/workflows/semgrep.yml

@@ -0,0 +1,24 @@
+on:
+  pull_request: {}
+  workflow_dispatch: {}
+  push:
+    branches:
+      - main
+      - master
+  schedule:
+    - cron: "0 0 * * *"
+name: Semgrep config
+jobs:
+  semgrep:
+    name: semgrep/ci
+    runs-on: ubuntu-latest
+    env:
+      SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
+      SEMGREP_URL: https://cloudflare.semgrep.dev
+      SEMGREP_APP_URL: https://cloudflare.semgrep.dev
+      SEMGREP_VERSION_CHECK_URL: https://cloudflare.semgrep.dev/api/check-version
+    container:
+      image: semgrep/semgrep
+    steps:
+      - uses: actions/checkout@v4
+      - run: semgrep ci

.github/workflows/workerHealthCheck.cjs

@@ -0,0 +1,28 @@
+const { execSync } = require("child_process");
+
+function workerHealthCheck(workerName) {
+	const url = `https://${workerName}.devprod-testing7928.workers.dev/secret-health-check`;
+
+	const buffer = execSync(`curl ${url}`);
+
+	const response = buffer.toString();
+
+	if (response.includes("OK")) {
+		console.log(`Status: Worker is up! Response: ${response}`);
+	} else {
+		throw new Error(`Worker is down! Response: ${response}`);
+	}
+
+	return response;
+}
+
+const args = Array.from(process.argv);
+const workerName = args.pop();
+
+if (!workerName) {
+	throw new Error(
+		"Please provide the worker name as an argument when calling this program.",
+	);
+}
+
+workerHealthCheck(workerName);

.gitignore

@@ -0,0 +1,94 @@
+.idea
+.vscode
+
+### macOS ###
+# General
+.DS_Store
+.AppleDouble
+.LSOverride
+
+# Icon must end with two \r
+Icon
+
+
+# Thumbnails
+._*
+
+# Files that might appear in the root of a volume
+.DocumentRevisions-V100
+.fseventsd
+.Spotlight-V100
+.TemporaryItems
+.Trashes
+.VolumeIcon.icns
+.com.apple.timemachine.donotpresent
+
+# Directories potentially created on remote AFP share
+.AppleDB
+.AppleDesktop
+Network Trash Folder
+Temporary Items
+.apdisk
+
+### Node ###
+node_modules
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+.pnpm-debug.log*
+
+# Diagnostic reports (https://nodejs.org/api/report.html)
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+
+# Runtime data
+pids
+*.pid
+*.seed
+*.pid.lock
+
+# Directory for instrumented libs generated by jscoverage/JSCover
+lib-cov
+
+# Coverage directory used by tools like istanbul
+coverage
+*.lcov
+
+# nyc test coverage
+.nyc_output
+
+# Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
+.grunt
+
+# Bower dependency directory (https://bower.io/)
+bower_components
+
+# node-waf configuration
+.lock-wscript
+
+# Compiled binary addons (https://nodejs.org/api/addons.html)
+build/Release
+
+
+# Moved from ./templates for ignoring all locks in templates
+templates/**/*-lock.*
+templates/**/*.lock
+
+# Snowpack dependency directory (https://snowpack.dev/)
+web_modules/
+
+# TypeScript cache
+*.tsbuildinfo
+
+# Optional npm cache directory
+.npm
+
+# Optional eslint cache
+.eslintcache
+
+# Optional stylelint cache
+.stylelintcache
+

.prettierignore

@@ -0,0 +1 @@
+pnpm-lock.yaml

.prettierrc

@@ -0,0 +1,6 @@
+{
+	"printWidth": 80,
+	"singleQuote": false,
+	"semi": true,
+	"useTabs": true
+}

CHANGELOG.md

@@ -0,0 +1,225 @@
+# Changelog
+
+## 3.12.1
+
+### Patch Changes
+
+- [#319](https://github.com/cloudflare/wrangler-action/pull/319) [`59c04629408d58978884fadd18755f1a15f96157`](https://github.com/cloudflare/wrangler-action/commit/59c04629408d58978884fadd18755f1a15f96157) Thanks [@Maximo-Guk](https://github.com/Maximo-Guk)! - Fixes #317: Generate a new output directory with a randomUUID in the tmpDir, so that when the action is executed multiple times, we use the artifacts from that run, opposed to the artifacts from a previous run.
+
+## 3.12.0
+
+### Minor Changes
+
+- [#312](https://github.com/cloudflare/wrangler-action/pull/312) [`122ee5cf5b66847e0b6cfa67ecd9e03e38a67a42`](https://github.com/cloudflare/wrangler-action/commit/122ee5cf5b66847e0b6cfa67ecd9e03e38a67a42) Thanks [@Maximo-Guk](https://github.com/Maximo-Guk)! - This reapplies [303](https://github.com/cloudflare/wrangler-action/pull/303) add parity with pages-action for pages deploy outputs. Thanks @courtney-sims! - Support pages-deployment-id, pages-environment, pages-deployment-alias-url and deployment-url outputs for Pages deploys when wrangler version is >=3.81.0. deployment-alias-url was also deprecated in favour of pages-deployment-alias.
+
+## 3.11.0
+
+### Minor Changes
+
+- [#309](https://github.com/cloudflare/wrangler-action/pull/309) [`10d5b9c1c1826adaec0a9ee49fdf5b91113508ef`](https://github.com/cloudflare/wrangler-action/commit/10d5b9c1c1826adaec0a9ee49fdf5b91113508ef) Thanks [@Maximo-Guk](https://github.com/Maximo-Guk)! - Revert "Add parity with pages-action for pages deploy outputs"
+
+## 3.10.0
+
+### Minor Changes
+
+- [#303](https://github.com/cloudflare/wrangler-action/pull/303) [`3ec7f8943ef83351f743cfaa8763a9056ef70993`](https://github.com/cloudflare/wrangler-action/commit/3ec7f8943ef83351f743cfaa8763a9056ef70993) Thanks [@courtney-sims](https://github.com/courtney-sims)! - Support id, environment, url, and alias outputs for Pages deploys.
+
+## 3.9.0
+
+### Minor Changes
+
+- [#298](https://github.com/cloudflare/wrangler-action/pull/298) [`134b5c2a3252d66b8c4d1cddd0b9baaeed6a4daa`](https://github.com/cloudflare/wrangler-action/commit/134b5c2a3252d66b8c4d1cddd0b9baaeed6a4daa) Thanks [@Maximo-Guk](https://github.com/Maximo-Guk)! - Update wrangler version from 3.13.2 to 3.78.10
+
+### Patch Changes
+
+- [#278](https://github.com/cloudflare/wrangler-action/pull/278) [`47d51f25c113ee9205110728599b43ed6a1e273b`](https://github.com/cloudflare/wrangler-action/commit/47d51f25c113ee9205110728599b43ed6a1e273b) Thanks [@acusti](https://github.com/acusti)! - fix: Detect existing wrangler install even when wrangler version output is multiline
+
+## 3.8.0
+
+### Minor Changes
+
+- [#291](https://github.com/cloudflare/wrangler-action/pull/291) [`a1467a0c8f2a058f8d43a4d0c40a55176ed5efe6`](https://github.com/cloudflare/wrangler-action/commit/a1467a0c8f2a058f8d43a4d0c40a55176ed5efe6) Thanks [@Ambroos](https://github.com/Ambroos)! - Adds `deployment-alias-url` output for Pages deployment aliases (since Wrangler v3.78.0): https://github.com/cloudflare/workers-sdk/pull/6643
+
+## 3.7.0
+
+### Minor Changes
+
+- [#271](https://github.com/cloudflare/wrangler-action/pull/271) [`66efca2cbb82a5a49df6af2e14c4b58d53b0e266`](https://github.com/cloudflare/wrangler-action/commit/66efca2cbb82a5a49df6af2e14c4b58d53b0e266) Thanks [@Maximo-Guk](https://github.com/Maximo-Guk)! - This unreverts #235 ensuring wrangler-action will re-use existing wrangler installations, thanks @AdiRishi! and ensures we don't automatically install wrangler when checking if it present
+
+## 3.6.1
+
+### Patch Changes
+
+- [#265](https://github.com/cloudflare/wrangler-action/pull/265) [`2d275a8f2d279dc91912c1ff8023af109ef3280c`](https://github.com/cloudflare/wrangler-action/commit/2d275a8f2d279dc91912c1ff8023af109ef3280c) Thanks [@Maximo-Guk](https://github.com/Maximo-Guk)! - Reverts #235 which may have caused the latest version of wrangler to be installed, if no wrangler version was found
+
+## 3.6.0
+
+### Minor Changes
+
+- [#235](https://github.com/cloudflare/wrangler-action/pull/235) [`0545ad285acaff2b92053d636ee17fb303b4c5f5`](https://github.com/cloudflare/wrangler-action/commit/0545ad285acaff2b92053d636ee17fb303b4c5f5) Thanks [@AdiRishi](https://github.com/AdiRishi)! - wrangler-action will now re-use existing wrangler installations when available
+
+## 3.5.0
+
+### Minor Changes
+
+- [#255](https://github.com/cloudflare/wrangler-action/pull/255) [`31a6263ef3ec73ff2d03cb4c0260379f96f7598c`](https://github.com/cloudflare/wrangler-action/commit/31a6263ef3ec73ff2d03cb4c0260379f96f7598c) Thanks [@matthewdavidrodgers](https://github.com/matthewdavidrodgers)! - Stop racing secret uploads
+
+  For up to date versions of wrangler, secrets are uploaded via the 'secret:bulk' command, which batches updates in a single API call.
+
+  For versions of wrangler without that capability, the action falls back to the single 'secret put' command for each secret. It races all these with a Promise.all()
+
+  Unfortunately, the single secret API cannot handle concurrency - at best, these calls have to wait on one another, holding requests open all the while. Often it times out and errors.
+
+  This fixes the legacy secret upload errors by making these calls serially instead of concurrently.
+
+## 3.4.1
+
+### Patch Changes
+
+- [#227](https://github.com/cloudflare/wrangler-action/pull/227) [`bbedd8e54f256d36f81f81f1f05b90937d533bb7`](https://github.com/cloudflare/wrangler-action/commit/bbedd8e54f256d36f81f81f1f05b90937d533bb7) Thanks [@AdiRishi](https://github.com/AdiRishi)! - Surface inner exception when secret:bulk upload command fails
+
+## 3.4.0
+
+### Minor Changes
+
+- [#213](https://github.com/cloudflare/wrangler-action/pull/213) [`d13856dfc92816473ebf47f66e263a2668a97896`](https://github.com/cloudflare/wrangler-action/commit/d13856dfc92816473ebf47f66e263a2668a97896) Thanks [@GrantBirki](https://github.com/GrantBirki)! - This change introduces three new GitHub Actions output variables. These variables are as follows:
+
+  - `command-output` - contains the string results of `stdout`
+  - `command-stderr` - contains the string results of `stderr`
+  - `deployment-url` - contains the string results of the URL that was deployed (ex: `https://<your_pages_site>.pages.dev`)
+
+  These output variables are intended to be used by more advanced workflows that require the output results or deployment url from Wrangler commands in subsequent workflow steps.
+
+### Patch Changes
+
+- [#216](https://github.com/cloudflare/wrangler-action/pull/216) [`9aba9c34daabca23a88191a5fe1b81fa721c1f11`](https://github.com/cloudflare/wrangler-action/commit/9aba9c34daabca23a88191a5fe1b81fa721c1f11) Thanks [@Cherry](https://github.com/Cherry)! - Fixes issues with semver comparison, where version parts were treated lexicographically instead of numerically.
+
+  Bulk secret uploading was introduced in wrangler `3.4.0`, and this action tries to check if the version used is greater than `3.4.0`, and then if so, using the new bulk secret API which is faster. Due to a bug in the semver comparison, `3.19.0` was being considered less than `3.4.0`, and then using an older and slower method for uploading secrets.
+
+  Now the semver comparison is fixed, the faster bulk method is used for uploading secrets when available.
+
+## 3.3.2
+
+### Patch Changes
+
+- [#171](https://github.com/cloudflare/wrangler-action/pull/171) [`76d614f`](https://github.com/cloudflare/wrangler-action/commit/76d614f400bd92237ed23c3df559f2c31b14a790) Thanks [@1000hz](https://github.com/1000hz)! - Fixed issues that caused the action to fail if any secret or var values contained shell metacharacters.
+
+- [#171](https://github.com/cloudflare/wrangler-action/pull/171) [`473d9cb`](https://github.com/cloudflare/wrangler-action/commit/473d9cbd296528b41c653af10062faba6540a7ab) Thanks [@1000hz](https://github.com/1000hz)! - Bumped `DEFAULT_WRANGLER_VERSION` to 3.13.2
+
+## 3.3.1
+
+### Patch Changes
+
+- [#193](https://github.com/cloudflare/wrangler-action/pull/193) [`a4509d5`](https://github.com/cloudflare/wrangler-action/commit/a4509d507c62dd7f49fba7df7d2db3997222393a) Thanks [@1000hz](https://github.com/1000hz)! - Fixed the package manager not being inferred based on lockfile when the `packageManager` input isn't set.
+
+## 3.3.0
+
+### Minor Changes
+
+- [#188](https://github.com/cloudflare/wrangler-action/pull/188) [`d9a0a00`](https://github.com/cloudflare/wrangler-action/commit/d9a0a00f8bc502ceea2a60e5af258416b35a85b9) Thanks [@simpleauthority](https://github.com/simpleauthority)! - Added support for Bun as a package manager
+
+## 3.2.1
+
+### Patch Changes
+
+- [#190](https://github.com/cloudflare/wrangler-action/pull/190) [`528687a`](https://github.com/cloudflare/wrangler-action/commit/528687aaf436f67565918533ffd15c250f39c47b) Thanks [@1000hz](https://github.com/1000hz)! - Fixed action failure when no `packageManager` specified and no lockfile is found. The action now falls back to using npm.
+
+## 3.2.0
+
+### Minor Changes
+
+- [#166](https://github.com/cloudflare/wrangler-action/pull/166) [`7d7b988`](https://github.com/cloudflare/wrangler-action/commit/7d7b98826e14e9ad422870a7263b7074b40bf16f) Thanks [@nix6839](https://github.com/nix6839)! - Support for package managers other than npm, such as pnpm and yarn.
+
+  fixes #156
+
+## 3.1.1
+
+### Patch Changes
+
+- [#161](https://github.com/cloudflare/wrangler-action/pull/161) [`e5251df`](https://github.com/cloudflare/wrangler-action/commit/e5251df52154e9ebc98edb02ee0598c7210dcf0f) Thanks [@1000hz](https://github.com/1000hz)! - Refactored error handling to stop execution when action fails. Previously, the action would continue executing to completion if one of the steps encountered an error. Fixes #160.
+
+## 3.1.0
+
+### Minor Changes
+
+- [#154](https://github.com/cloudflare/wrangler-action/pull/154) [`3f40637`](https://github.com/cloudflare/wrangler-action/commit/3f40637a1c48016d2101e412a7a06f1eb4b9c2fd) Thanks [@JacobMGEvans](https://github.com/JacobMGEvans)! - feat: Quiet mode
+  Some of the stderr, stdout, info & groupings can be a little noisy for some users and use cases.
+  This feature allows for a option to be passed 'quiet: true' this would significantly reduce the noise.
+
+  There will still be output that lets the user know Wrangler Installed and Wrangler Action completed successfully.
+  Any failure status will still be output to the user as well, to prevent silent failures.
+
+  resolves #142
+
+## 3.0.2
+
+### Patch Changes
+
+- [#147](https://github.com/cloudflare/wrangler-action/pull/147) [`58f274b`](https://github.com/cloudflare/wrangler-action/commit/58f274b9f70867447519c6fa983c813e2b167b85) Thanks [@JacobMGEvans](https://github.com/JacobMGEvans)! - Added more error logging when a command fails to execute
+  Previously, we prevented any error logs from propagating too far to prevent leaking of any potentially sensitive information. However, this made it difficult for developers to debug their code.
+
+  In this release, we have updated our error handling to allow for more error messaging from pre/post and custom commands. We still discourage the use of these commands for secrets or other sensitive information, but we believe this change will make it easier for developers to debug their code.
+
+  Relates to #137
+
+- [#147](https://github.com/cloudflare/wrangler-action/pull/147) [`58f274b`](https://github.com/cloudflare/wrangler-action/commit/58f274b9f70867447519c6fa983c813e2b167b85) Thanks [@JacobMGEvans](https://github.com/JacobMGEvans)! - Adding Changesets
+
+- [Version 3.0.0](#version-300)
+- [Version 2.0.0](#version-200)
+
+## Version 3.0.0 (Breaking update)
+
+### Additions
+
+- **Rewritten Wrangler Action in TypeScript.**
+- Bulk secrets API utilization from Wrangler.
+- Added testing for improved reliability.
+- Implemented multiline support for the `command` input to allow running multiple Wrangler commands.
+- Now using Node for the Action engine/runner.
+- Open discussions with the community on all changes through GitHub Discussions and monitored Issues.
+
+### Removals
+
+- Removed Docker as a dependency.
+- Dropped support for Wrangler v1.
+
+### Changes
+
+- Fixed CI/CD issues.
+
+### Breaking changes
+
+- Wrangler v1 is no longer supported.
+  - Please update to the latest version of Wrangler.
+- Updated default version of Wrangler to v3.4.0
+
+### Additional Notes
+
+- Major Version Default: [DEVX-632](https://jira.cfdata.org/browse/DEVX-632)
+- Rewrite Project Tickets: [DEVX-804](https://jira.cfdata.org/browse/DEVX-804), [DEVX-802](https://jira.cfdata.org/browse/DEVX-802), [DEVX-800](https://jira.cfdata.org/browse/DEVX-800), [DEVX-632](https://jira.cfdata.org/browse/DEVX-632)
+
+---
+
+## Version 2.0.0 (Breaking update)
+
+### Additions
+
+- New `command` input
+  - This allows you to specify the Wrangler command you would like to run.
+    For example, if you want to publish the production version of your Worker you may run `publish --env=production`.
+  - This opens up other possibilities too like publishing a Pages project: `pages publish <directory> --project-name=<name>`.
+- New `accountId` input
+  - This allows you to specify your account ID.
+
+### Removals
+
+- Removed `publish` input (refer to [Breaking changes](#breaking-changes)).
+
+### Changes
+
+-- no changes --
+
+### Breaking changes
+
+- `publish` has been removed.
+  - You should instead do `command:

CODEOWNERS

@@ -0,0 +1,3 @@
+* @cloudflare/wrangler @cloudflare/banda-team
+
+CHANGELOG.md @cloudflare/wrangler-admins @cloudflare/banda-team

CONTRIBUTING.md

@@ -0,0 +1,21 @@
+# Contributing Guide
+
+## Releases
+
+### Changesets
+
+Every non-trivial change to the project - those that should appear in the changelog - must be captured in a "changeset". We use the changesets tool for creating changesets, publishing versions and updating the changelog.
+
+Create a changeset for the current change.
+
+> npx changeset
+> Select which workspaces are affected by the change and whether the version requires a major, minor or patch release.
+> Update the generated changeset with a description of the change.
+> Include the generate changeset in the current commit.
+> git add ./changeset/\*.md
+
+### Version Packages PRs
+
+Once you merge your PR, a new Version Packages PR will be opened in the wrangler-action repo. Once that PR is merged, your change will be released. Example: https://github.com/cloudflare/wrangler-action/pull/305
+
+Note: Version Packages PRs are only generated if there's been at least one PR merged with a changeset.

Dockerfile

@@ -1,5 +0,0 @@
-FROM node:12
-ENV XDG_CONFIG_HOME /github/workspace
-ENV WRANGLER_HOME /github/workspace
-COPY entrypoint.sh /entrypoint.sh
-ENTRYPOINT ["/entrypoint.sh"]

README.md

@@ -1,86 +1,383 @@
 # Wrangler GitHub Action
 
-✨ Zero-config [Cloudflare Workers](https://workers.cloudflare.com) deployment using [Wrangler](https://github.com/cloudflare/wrangler) and [GitHub Actions](https://github.com/actions)
+Easy-to-use GitHub Action to use [Wrangler](https://developers.cloudflare.com/workers/cli-wrangler/). Makes deploying Workers a breeze.
+
+## Big Changes in v3
+
+- Wrangler v1 is no longer supported.
+- Global API key & Email Auth no longer supported
+- Action version syntax is newly supported. This means e.g. `uses: cloudflare/wrangler-action@v3`, `uses: cloudflare/wrangler-action@v3.x`, and `uses: cloudflare/wrangler-action@v3.x.x` are all now valid syntax. Previously supported syntax e.g. `uses: cloudflare/wrangler-action@3.x.x` is no longer supported -- the prefix `v` is now necessary.
+
+[Refer to Changelog for more information](CHANGELOG.md).
 
 ## Usage
 
-Add `wrangler-action` to the workflow for your Workers application. The below example will publish your application on pushes to the `master` branch:
+Add `wrangler-action` to the workflow for your Workers/Pages application. The below example will deploy a Worker on a `git push` to the `main` branch:
+
+```yaml
+name: Deploy
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    name: Deploy
+    steps:
+      - uses: actions/checkout@v4
+      - name: Deploy
+        uses: cloudflare/wrangler-action@v3
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+```
+
+## Authentication
+
+You'll need to configure Wrangler using GitHub's Secrets feature - go to "Settings -> Secrets" and add your Cloudflare API token (for help finding this, see the [Workers documentation](https://developers.cloudflare.com/workers/wrangler/ci-cd/#api-token)). Your API token is encrypted by GitHub, and the action won't print it into logs, so it should be safe!
+
+With your API token set as a secret for your repository, pass it to the action in the `with` block of your workflow. Below, I've set the secret name to `CLOUDFLARE_API_TOKEN`:
+
+```yaml
+jobs:
+  deploy:
+    name: Deploy
+    steps:
+      uses: cloudflare/wrangler-action@v3
+      with:
+        apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+```
+
+## Configuration
+
+If you need to install a specific version of Wrangler to use for deployment, you can also pass the input `wranglerVersion` to install a specific version of Wrangler from NPM. This should be a [SemVer](https://semver.org/)-style version number, such as `2.20.0`:
+
+```yaml
+jobs:
+  deploy:
+    steps:
+      uses: cloudflare/wrangler-action@v3
+      with:
+        apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+        wranglerVersion: "2.20.0"
+```
+
+Optionally, you can also pass a `workingDirectory` key to the action. This will allow you to specify a subdirectory of the repo to run the Wrangler command from.
+
+```yaml
+jobs:
+  deploy:
+    steps:
+      uses: cloudflare/wrangler-action@v3
+      with:
+        apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+        workingDirectory: "subfoldername"
+```
+
+[Worker secrets](https://developers.cloudflare.com/workers/tooling/wrangler/secrets/) can optionally be passed in via `secrets` as a string of names separated by newlines. Each secret name must match the name of an environment variable specified in the `env` field. This creates or replaces the value for the Worker secret using the `wrangler secret put` command. It's also possible to specify worker environment using environment parameter.
+
+```yaml
+jobs:
+  deploy:
+    steps:
+      uses: cloudflare/wrangler-action@v3
+      with:
+        apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+        environment: production
+        secrets: |
+          SECRET1
+          SECRET2
+      env:
+        SECRET1: ${{ secrets.SECRET1 }}
+        SECRET2: ${{ secrets.SECRET2 }}
+```
+
+If you need to run additional shell commands before or after your command, you can specify them as input to `preCommands` (before `deploy`) or `postCommands` (after `deploy`). These can include additional `wrangler` commands (that is, `whoami`, `kv:key put`) or any other commands available inside the `wrangler-action` context.
+
+```yaml
+jobs:
+  deploy:
+    steps:
+      uses: cloudflare/wrangler-action@v3
+      with:
+        apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+        preCommands: echo "*** pre command ***"
+        postCommands: |
+          echo "*** post commands ***"
+          wrangler kv:key put --binding=MY_KV key2 value2
+          echo "******"
+```
+
+You can use the `command` option to do specific actions such as running `wrangler whoami` against your project:
+
+```yaml
+jobs:
+  deploy:
+    steps:
+      uses: cloudflare/wrangler-action@v3
+      with:
+        apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+        command: whoami
+```
+
+You can also add a command that spans multiple lines:
+
+```yaml
+jobs:
+  deploy:
+    steps:
+      uses: cloudflare/wrangler-action@v3
+      with:
+        apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+        command: |
+          pages project list
+          pages deploy .vercel/output/static --project-name=demo-actions --branch=test
+```
+
+## Use cases
+
+### Deploy when commits are merged to main
+
+The above workflow examples have already shown how to run `wrangler-action` when new commits are merged to the main branch. For most developers, this workflow will easily replace manual deploys and be a great first integration step with `wrangler-action`:
 
 ```yaml
 on:
   push:
     branches:
-    - master
+      - main
 
 jobs:
   deploy:
     runs-on: ubuntu-latest
     name: Deploy
     steps:
-    - uses: actions/checkout@master
-    - name: Publish
-      uses: signalnerve/wrangler-action@0.1.0
-      with:
-        apiKey: ${{ secrets.CLOUDFLARE_API_KEY }}
-        email: ${{ secrets.CLOUDFLARE_EMAIL }}
+      - uses: actions/checkout@v4
+      - name: Deploy
+        uses: cloudflare/wrangler-action@v3
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
 ```
 
-## Configuration
+Note that there are a number of possible events, like `push`, that can be used to trigger a workflow. For more details on the events available, refer to the [GitHub Actions documentation](https://help.github.com/en/articles/workflow-syntax-for-github-actions#on).
 
-You'll need to configure Wrangler using GitHub's Secrets feature - go to "Settings -> Secrets" and add your Cloudflare API key and email (for help finding these, see the [Workers documentation](https://developers.cloudflare.com/workers/quickstart/#finding-your-cloudflare-api-keys)). Your API key and email are encrypted by GitHub, and the action won't print them into logs, so they should be safe!
+### Deploy your Pages site (production & preview)
 
-With your API key and email set as secrets for your repository, pass them to the action in the `with` block of your workflow:
+If you want to deploy your Pages project with GitHub Actions rather than the built-in continous integration (CI), then this is a great way to do it. Wrangler 2 will populate the commit message and branch for you. You only need to pass the project name. If a push to a non-production branch is done, it will deploy as a preview deployment:
 
 ```yaml
+on: [push]
+
 jobs:
   deploy:
+    runs-on: ubuntu-latest
+    name: Deploy
+    permissions:
+      contents: read
+      deployments: write
+    steps:
+      - uses: actions/checkout@v4
+      - name: Deploy
+        uses: cloudflare/wrangler-action@v3
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          command: pages deploy YOUR_DIST_FOLDER --project-name=example
+          # Optional: Enable this if you want to have GitHub Deployments triggered
+          gitHubToken: ${{ secrets.GITHUB_TOKEN }}
+```
+
+### Deploying on a schedule
+
+If you would like to deploy your Workers application on a recurring basis – for example, every hour, or daily – the `schedule` trigger allows you to use cron syntax to define a workflow schedule. The below example will deploy at the beginning of every hour:
+
+```yaml
+on:
+  schedule:
+    - cron: "0 * * * *"
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
     name: Deploy
     steps:
-      uses: signalnerve/wrangler-action@0.1.0
-      with:
-        apiKey: ${{ secrets.CLOUDFLARE_API_KEY }}
-        email: ${{ secrets.CLOUDFLARE_EMAIL }}
+      - uses: actions/checkout@v4
+      - name: Deploy app
+        uses: cloudflare/wrangler-action@v3
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
 ```
 
-Optionally, you can also pass an `environment` key to the action. If you're using Wrangler's [environments](https://github.com/cloudflare/wrangler/blob/master/docs/content/environments.md) feature, you can customize _where_ the action deploys to by passing the matching environment in the `with` block of your workflow:
+If you need help defining the correct cron syntax, check out [crontab.guru](https://crontab.guru/), which provides a friendly user interface for validating your cron schedule.
+
+### Manually triggering a deployment
+
+If you need to trigger a workflow at-will, you can use GitHub's `workflow_dispatch` [event](https://docs.github.com/en/actions/reference/events-that-trigger-workflows#workflow_dispatch) in your workflow file. By setting your workflow to trigger on that event, you will be able to deploy your application via the GitHub UI. The UI also accepts inputs that can be used to configure the action:
+
+```yaml
+on:
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: "Choose an environment to deploy to: <dev|staging|prod>"
+        required: true
+        default: "dev"
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    name: Deploy
+    steps:
+      - uses: actions/checkout@v4
+      - name: Deploy app
+        uses: cloudflare/wrangler-action@v3
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          command: deploy --env ${{ github.event.inputs.environment }}
+```
+
+For more advanced usage or to programmatically trigger the workflow from scripts, refer to [the GitHub documentation](https://docs.github.com/en/rest/reference/actions#create-a-workflow-dispatch-event) for making API calls.
+
+### Upload a Worker Version
+
+To create a new version of your Worker that is not deployed immediately, use the `wrangler versions upload` command. Worker versions created in this way can then be deployed all at once at a later time or gradually deployed using the `wranger versions deploy` command or via the Cloudflare dashboard under the Deployments tab. Wrangler v3.40.0 or above is required to use this feature.
+
+```yaml
+jobs:
+  upload:
+    runs-on: ubuntu-latest
+    name: Deploy
+    steps:
+      - uses: actions/checkout@v4
+      - name: Upload Worker Version
+        uses: cloudflare/wrangler-action@v3
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          command: versions upload
+```
+
+## Advanced Usage
+
+### Setting A Worker Secret for A Specific Environment
+
+There is an environment parameter that can be set within the workflow to enable this. Example:
+
+```yaml
+- uses: cloudflare/wrangler-action@v3
+  with:
+    apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+    command: deploy --env production
+    secrets: |
+      SUPER_SECRET
+    environment: production
+  env:
+    SUPER_SECRET: ${{ secrets.SUPER_SECRET }}
+```
+
+### Using Wrangler Command Output in Subsequent Steps
+
+More advanced workflows may need to parse the resulting output of Wrangler commands. To do this, you can use the `command-output` output variable in subsequent steps. For example, if you want to print the output of the Wrangler command, you can do the following:
+
+```yaml
+- name: Deploy
+  id: deploy
+  uses: cloudflare/wrangler-action@v3
+  with:
+    apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+    accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+    command: pages deploy --project-name=example
+
+- name: print wrangler command output
+  env:
+    CMD_OUTPUT: ${{ steps.deploy.outputs.command-output }}
+  run: echo $CMD_OUTPUT
+```
+
+Now when you run your workflow, you will see the full output of the Wrangler command in your workflow logs. You can also use this output in subsequent workflow steps to parse the output for specific values.
+
+> Note: the `command-stderr` output variable is also available if you need to parse the standard error output of the Wrangler command.
+
+### Using the `deployment-url` and `pages-deployment-alias-url` Output Variables
+
+If you are executing a Wrangler command that results in either a Workers or Pages deployment, you can utilize the `deployment-url` output variable to get the URL of the deployment. For example, if you want to print the deployment URL after deploying your application, you can do the following:
+
+```yaml
+- name: Deploy
+  id: deploy
+  uses: cloudflare/wrangler-action@v3
+  with:
+    apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+    accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+    command: pages deploy --project-name=example
+
+- name: print deployment-url
+  env:
+    DEPLOYMENT_URL: ${{ steps.deploy.outputs.deployment-url }}
+  run: echo $DEPLOYMENT_URL
+```
+
+The resulting output will look something like this:
+
+```text
+https://<your_pages_site>.pages.dev
+```
+
+Pages deployments will also provide their alias URL (since Wrangler v3.78.0). You can use the `pages-deployment-alias-url` output variable to get the URL of the deployment alias. This is useful for, for example, branch aliases for preview deployments.
+
+If the sample action above was used to deploy a branch other than main, you could use the following to get the branch URL:
+
+```yaml
+- name: print pages-deployment-alias-url
+  env:
+    DEPLOYMENT_ALIAS_URL: ${{ steps.deploy.outputs.pages-deployment-alias-url }}
+  run: echo $DEPLOYMENT_ALIAS_URL
+```
+
+Resulting in:
+
+```text
+https://new-feature.<your_pages_site>.pages.dev
+```
+
+### Using a different package manager
+
+By default, this action will detect which package manager to use, based on the presence of a `package-lock.json`, `yarn.lock`, `pnpm-lock.yaml`, or `bun.lockb`/`bun.lock` file.
+
+If you need to use a specific package manager for your application, you can set the `packageManager` input to `npm`, `yarn`, `pnpm`, or `bun`. You don't need to set this option unless you want to override the default behavior.
 
 ```yaml
 jobs:
   deploy:
-    # ... previous configuration ...
     steps:
-      uses: signalnerve/wrangler-action@0.1.0
+      uses: cloudflare/wrangler-action@v3
       with:
-        # ... api key and email ...
-        environment: "production"
+        apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+        packageManager: pnpm
 ```
 
 ## Troubleshooting
 
-This action is in beta, and I'm looking for folks to use it! If something goes wrong, please file an issue! That being said, there's a couple things you should know:
-
 ### "I just started using Workers/Wrangler and I don't know what this is!"
 
-No problem! Check out the [Quick Start guide](https://developers.cloudflare.com/workers/quickstart) in our docs to get started. Once you have a Workers application, you may want to set it up to automatically deploy from GitHub whenever you change your project. That's where this action comes in - nice!
+Refer to the [Quick Start guide](https://developers.cloudflare.com/workers/quickstart) to get started. Once you have a Workers application, you may want to set it up to automatically deploy from GitHub whenever you change your project.
 
-### "I'm trying to deploy my static site but it isn't working!"
+### "[ERROR] No account id found, quitting.."
 
-To deploy static sites and frontend applications to Workers, check out the documentation for [Workers Sites](https://developers.cloudflare.com/workers/sites).
-
-Note that this action makes no assumptions about _how_ your project is built! **If you need to run a pre-publish step, like building your application, you need to specify a build step in your Workflow.** For instance, if I have an NPM command called `build`, my workflow TOML might resemble the following:
+You will need to add `account_id = ""` in your `wrangler.toml` file or set `accountId` in this GitHub Action.
 
 ```yaml
+on: [push]
+
 jobs:
   deploy:
     runs-on: ubuntu-latest
     name: Deploy
     steps:
-    - uses: actions/checkout@master
-    - name: Build site
-      run: "npm run build"
-    - name: Publish
-      uses: signalnerve/wrangler-action@0.1.0
-      with:
-        apiKey: ${{ secrets.CLOUDFLARE_API_KEY }}
-        email: ${{ secrets.CLOUDFLARE_EMAIL }}
+      - uses: actions/checkout@v4
+      - name: Deploy app
+        uses: cloudflare/wrangler-action@v3
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
 ```

action.yml

@@ -1,17 +1,62 @@
-name: 'Deploy to Cloudflare Workers with Wrangler'
+name: "Deploy to Cloudflare Workers with Wrangler"
 branding:
-  icon: 'upload-cloud'
-  color: 'orange'
-description: 'Deploy your Cloudflare Workers applications and sites directly from GitHub, using Wrangler'
+  icon: "upload-cloud"
+  color: "orange"
+description: "Deploy your Cloudflare projects from GitHub using Wrangler"
 runs:
-  using: 'docker'
-  image: 'Dockerfile'
+  # Possible values: https://github.com/actions/runner/blob/main/src/Runner.Common/Util/NodeUtil.cs#L9
+  using: "node20"
+  main: "dist/index.mjs"
 inputs:
-  apiKey:
-    description: "Your Cloudflare API Key"
-    required: true
-  email:
-    description: "Your Cloudflare Email"
-    required: true
+  apiToken:
+    description: "Your Cloudflare API Token"
+    required: false
+  accountId:
+    description: "Your Cloudflare Account ID"
+    required: false
+  quiet:
+    description: "Supresses output from Wrangler commands, defaults to `false`"
+    required: false
+    default: "false"
   environment:
-    description: "The environment you'd like to publish your Workers project to - must be defined in wrangler.toml"
+    description: "The environment you'd like to deploy your Workers project to - must be defined in wrangler.toml"
+  workingDirectory:
+    description: "The relative path which Wrangler commands should be run from"
+    required: false
+  wranglerVersion:
+    description: "The version of Wrangler you'd like to use to deploy your Workers project"
+    required: false
+  secrets:
+    description: "A string of environment variable names, separated by newlines. These will be bound to your Worker as Secrets and must match the names of environment variables declared in `env` of this workflow."
+    required: false
+  preCommands:
+    description: "Commands to execute before deploying the Workers project"
+    required: false
+  postCommands:
+    description: "Commands to execute after deploying the Workers project"
+    required: false
+  command:
+    description: 'The Wrangler command (along with any arguments) you wish to run. Multiple Wrangler commands can be run by separating each command with a newline. Defaults to `"deploy"`.'
+    required: false
+  vars:
+    description: "A string of environment variable names, separated by newlines. These will be bound to your Worker using the values of matching environment variables declared in `env` of this workflow."
+    required: false
+  packageManager:
+    description: "The package manager you'd like to use to install and run wrangler. If not specified, the preferred package manager will be inferred based on the presence of a lockfile or fallback to using npm if no lockfile is found. Valid values are `npm` | `pnpm` | `yarn` | `bun`."
+    required: false
+  gitHubToken:
+    description: "GitHub Token"
+    required: false
+outputs:
+  command-output:
+    description: "The output of the Wrangler command (comes from stdout)"
+  command-stderr:
+    description: "The error output of the Wrangler command (comes from stderr)"
+  deployment-url:
+    description: "If the command was a Workers or Pages deployment, this will be the URL of the deployment"
+  pages-deployment-alias-url:
+    description: "If the command was a Pages deployment, this will be the URL of the deployment alias (if it exists) - needs wrangler >= 3.78.0"
+  pages-deployment-id:
+    description: "If the command was a Pages deployment, this will be the ID of the deployment - needs wrangler >= 3.81.0"
+  pages-environment:
+    description: "If the command was a Pages deployment, this will be the environment of the deployment - needs wrangler >= 3.81.0"

dist/exec.d.ts

@@ -0,0 +1,6 @@
+import { exec as _childProcessExec } from "node:child_process";
+export { exec } from "@actions/exec";
+declare const childProcessExec: typeof _childProcessExec.__promisify__;
+export declare function execShell(command: string, { silent, ...options }?: Parameters<typeof childProcessExec>[1] & {
+    silent?: boolean;
+}): Promise<number | null>;

dist/index.d.ts

@@ -0,0 +1 @@
+export {};

dist/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "module"
+}

dist/packageManagers.d.ts

@@ -0,0 +1,24 @@
+export interface PackageManager {
+    install: string;
+    exec: string;
+    execNoInstall: string;
+}
+export declare function getPackageManager(name: string, { workingDirectory }?: {
+    workingDirectory?: string;
+}): {
+    readonly install: "npm i";
+    readonly exec: "npx";
+    readonly execNoInstall: "npx --no-install";
+} | {
+    readonly install: "yarn add";
+    readonly exec: "yarn";
+    readonly execNoInstall: "yarn";
+} | {
+    readonly install: "pnpm add";
+    readonly exec: "pnpm exec";
+    readonly execNoInstall: "pnpm exec";
+} | {
+    readonly install: "bun i";
+    readonly exec: "bunx";
+    readonly execNoInstall: "bun run";
+};

dist/packageManagers.test.d.ts

@@ -0,0 +1 @@
+export {};

dist/service/github.d.ts

@@ -0,0 +1,23 @@
+import { getOctokit } from "@actions/github";
+import { OutputEntryPagesDeployment } from "../wranglerArtifactManager";
+import { WranglerActionConfig } from "../wranglerAction";
+type Octokit = ReturnType<typeof getOctokit>;
+export declare function createGitHubDeployment({ config, octokit, productionBranch, environment, deploymentId, projectName, deploymentUrl, }: {
+    config: WranglerActionConfig;
+    octokit: Octokit;
+    productionBranch: string;
+    environment: string;
+    deploymentId: string | null;
+    projectName: string;
+    deploymentUrl?: string;
+}): Promise<void>;
+export declare function createJobSummary({ commitHash, deploymentUrl, aliasUrl, }: {
+    commitHash: string;
+    deploymentUrl?: string;
+    aliasUrl?: string;
+}): Promise<void>;
+/**
+ * Create github deployment, if GITHUB_TOKEN is present in config
+ */
+export declare function createGitHubDeploymentAndJobSummary(config: WranglerActionConfig, pagesArtifactFields: OutputEntryPagesDeployment): Promise<void>;
+export {};

dist/service/github.spec.d.ts

@@ -0,0 +1 @@
+export {};

dist/test/fixtures/build-quiet/index.d.ts

@@ -0,0 +1,8 @@
+type Env = {
+    SECRET1?: string;
+    SECRET2?: string;
+};
+declare const _default: {
+    fetch(request: Request, env: Env): Response;
+};
+export default _default;

dist/test/fixtures/bun/index.d.ts

@@ -0,0 +1,8 @@
+type Env = {
+    SECRET1?: string;
+    SECRET2?: string;
+};
+declare const _default: {
+    fetch(request: Request, env: Env): Response;
+};
+export default _default;

dist/test/fixtures/environment/index.d.ts

@@ -0,0 +1,8 @@
+type Env = {
+    SECRET1?: string;
+    SECRET2?: string;
+};
+declare const _default: {
+    fetch(request: Request, env: Env): Response;
+};
+export default _default;

dist/test/fixtures/npm/index.d.ts

@@ -0,0 +1,8 @@
+type Env = {
+    SECRET1?: string;
+    SECRET2?: string;
+};
+declare const _default: {
+    fetch(request: Request, env: Env): Response;
+};
+export default _default;

dist/test/fixtures/only-build/index.d.ts

@@ -0,0 +1,8 @@
+type Env = {
+    SECRET1?: string;
+    SECRET2?: string;
+};
+declare const _default: {
+    fetch(request: Request, env: Env): Response;
+};
+export default _default;

dist/test/fixtures/pnpm/index.d.ts

@@ -0,0 +1,8 @@
+type Env = {
+    SECRET1?: string;
+    SECRET2?: string;
+};
+declare const _default: {
+    fetch(request: Request, env: Env): Response;
+};
+export default _default;

dist/test/fixtures/pre-installed-wrangler/index.d.ts

@@ -0,0 +1,8 @@
+type Env = {
+    SECRET1?: string;
+    SECRET2?: string;
+};
+declare const _default: {
+    fetch(request: Request, env: Env): Response;
+};
+export default _default;

dist/test/fixtures/secrets-default/index.d.ts

@@ -0,0 +1,8 @@
+type Env = {
+    SECRET1?: string;
+    SECRET2?: string;
+};
+declare const _default: {
+    fetch(request: Request, env: Env): Response;
+};
+export default _default;

dist/test/fixtures/secrets-v2/index.d.ts

@@ -0,0 +1,8 @@
+type Env = {
+    SECRET1?: string;
+    SECRET2?: string;
+};
+declare const _default: {
+    fetch(request: Request, env: Env): Response;
+};
+export default _default;

dist/test/fixtures/specify-package-manager/index.d.ts

@@ -0,0 +1,2 @@
+declare const _default: {};
+export default _default;

dist/test/fixtures/unspecified-package-manager/index.d.ts

@@ -0,0 +1,2 @@
+declare const _default: {};
+export default _default;

dist/test/fixtures/yarn/index.d.ts

@@ -0,0 +1,8 @@
+type Env = {
+    SECRET1?: string;
+    SECRET2?: string;
+};
+declare const _default: {
+    fetch(request: Request, env: Env): Response;
+};
+export default _default;

dist/test/mocks.d.ts

@@ -0,0 +1,6 @@
+export declare function mockGithubDeployments({ githubUser, githubRepoName, }: {
+    githubUser: string;
+    githubRepoName: string;
+}): {
+    handlers: import("msw").HttpHandler[];
+};

dist/test/test-utils.d.ts

@@ -0,0 +1,4 @@
+import { WranglerActionConfig } from "../wranglerAction";
+export declare function getTestConfig({ config, }?: {
+    config?: Partial<WranglerActionConfig>;
+}): WranglerActionConfig;

dist/utils.d.ts

@@ -0,0 +1,8 @@
+import { WranglerActionConfig } from "./wranglerAction";
+/**
+ * A helper function to compare two semver versions. If the second arg is greater than the first arg, it returns true.
+ */
+export declare function semverCompare(version1: string, version2: string): boolean;
+export declare function checkWorkingDirectory(workingDirectory?: string): string;
+export declare function info(config: WranglerActionConfig, message: string, bypass?: boolean): void;
+export declare function error(config: WranglerActionConfig, message: string, bypass?: boolean): void;

dist/utils.test.d.ts

@@ -0,0 +1 @@
+export {};

dist/wranglerAction.d.ts

@@ -0,0 +1,54 @@
+import { z } from "zod";
+import { PackageManager } from "./packageManagers";
+import { info } from "./utils";
+export type WranglerActionConfig = z.infer<typeof wranglerActionConfig>;
+export declare const wranglerActionConfig: z.ZodObject<{
+    WRANGLER_VERSION: z.ZodString;
+    didUserProvideWranglerVersion: z.ZodBoolean;
+    secrets: z.ZodArray<z.ZodString, "many">;
+    workingDirectory: z.ZodString;
+    CLOUDFLARE_API_TOKEN: z.ZodString;
+    CLOUDFLARE_ACCOUNT_ID: z.ZodString;
+    ENVIRONMENT: z.ZodString;
+    VARS: z.ZodArray<z.ZodString, "many">;
+    COMMANDS: z.ZodArray<z.ZodString, "many">;
+    QUIET_MODE: z.ZodBoolean;
+    PACKAGE_MANAGER: z.ZodString;
+    WRANGLER_OUTPUT_DIR: z.ZodString;
+    GITHUB_TOKEN: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    WRANGLER_VERSION: string;
+    didUserProvideWranglerVersion: boolean;
+    secrets: string[];
+    workingDirectory: string;
+    CLOUDFLARE_API_TOKEN: string;
+    CLOUDFLARE_ACCOUNT_ID: string;
+    ENVIRONMENT: string;
+    VARS: string[];
+    COMMANDS: string[];
+    QUIET_MODE: boolean;
+    PACKAGE_MANAGER: string;
+    WRANGLER_OUTPUT_DIR: string;
+    GITHUB_TOKEN: string;
+}, {
+    WRANGLER_VERSION: string;
+    didUserProvideWranglerVersion: boolean;
+    secrets: string[];
+    workingDirectory: string;
+    CLOUDFLARE_API_TOKEN: string;
+    CLOUDFLARE_ACCOUNT_ID: string;
+    ENVIRONMENT: string;
+    VARS: string[];
+    COMMANDS: string[];
+    QUIET_MODE: boolean;
+    PACKAGE_MANAGER: string;
+    WRANGLER_OUTPUT_DIR: string;
+    GITHUB_TOKEN: string;
+}>;
+declare function main(config: WranglerActionConfig, packageManager: PackageManager): Promise<void>;
+declare function installWrangler(config: WranglerActionConfig, packageManager: PackageManager): Promise<void>;
+declare function authenticationSetup(config: WranglerActionConfig): void;
+declare function execCommands(config: WranglerActionConfig, packageManager: PackageManager, commands: string[], cmdType: string): Promise<void>;
+declare function uploadSecrets(config: WranglerActionConfig, packageManager: PackageManager): Promise<void>;
+declare function wranglerCommands(config: WranglerActionConfig, packageManager: PackageManager): Promise<void>;
+export { authenticationSetup, execCommands, info, installWrangler, main, uploadSecrets, wranglerCommands, };

dist/wranglerAction.test.d.ts

@@ -0,0 +1 @@
+export {};

dist/wranglerArtifactManager.d.ts

@@ -0,0 +1,103 @@
+import { z } from "zod";
+declare const OutputEntryPagesDeployment: z.ZodObject<z.objectUtil.extendShape<{
+    version: z.ZodLiteral<1>;
+    type: z.ZodString;
+}, {
+    type: z.ZodLiteral<"pages-deploy-detailed">;
+    pages_project: z.ZodNullable<z.ZodString>;
+    deployment_id: z.ZodNullable<z.ZodString>;
+    url: z.ZodOptional<z.ZodString>;
+    alias: z.ZodOptional<z.ZodString>;
+    environment: z.ZodEnum<["production", "preview"]>;
+    production_branch: z.ZodOptional<z.ZodString>;
+    stages: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodEnum<["queued", "initialize", "clone_repo", "build", "deploy"]>;
+        status: z.ZodEnum<["idle", "active", "canceled", "success", "failure", "skipped"]>;
+        started_on: z.ZodNullable<z.ZodString>;
+        ended_on: z.ZodNullable<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        status: "idle" | "active" | "canceled" | "success" | "failure" | "skipped";
+        name: "deploy" | "queued" | "initialize" | "clone_repo" | "build";
+        started_on: string | null;
+        ended_on: string | null;
+    }, {
+        status: "idle" | "active" | "canceled" | "success" | "failure" | "skipped";
+        name: "deploy" | "queued" | "initialize" | "clone_repo" | "build";
+        started_on: string | null;
+        ended_on: string | null;
+    }>, "many">>;
+    deployment_trigger: z.ZodOptional<z.ZodObject<{
+        metadata: z.ZodObject<{
+            /** Commit hash of the deployment trigger metadata for the pages project */
+            commit_hash: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            commit_hash: string;
+        }, {
+            commit_hash: string;
+        }>;
+    }, "strip", z.ZodTypeAny, {
+        metadata: {
+            commit_hash: string;
+        };
+    }, {
+        metadata: {
+            commit_hash: string;
+        };
+    }>>;
+}>, "strip", z.ZodTypeAny, {
+    type: "pages-deploy-detailed";
+    environment: "production" | "preview";
+    version: 1;
+    pages_project: string | null;
+    deployment_id: string | null;
+    url?: string | undefined;
+    alias?: string | undefined;
+    production_branch?: string | undefined;
+    stages?: {
+        status: "idle" | "active" | "canceled" | "success" | "failure" | "skipped";
+        name: "deploy" | "queued" | "initialize" | "clone_repo" | "build";
+        started_on: string | null;
+        ended_on: string | null;
+    }[] | undefined;
+    deployment_trigger?: {
+        metadata: {
+            commit_hash: string;
+        };
+    } | undefined;
+}, {
+    type: "pages-deploy-detailed";
+    environment: "production" | "preview";
+    version: 1;
+    pages_project: string | null;
+    deployment_id: string | null;
+    url?: string | undefined;
+    alias?: string | undefined;
+    production_branch?: string | undefined;
+    stages?: {
+        status: "idle" | "active" | "canceled" | "success" | "failure" | "skipped";
+        name: "deploy" | "queued" | "initialize" | "clone_repo" | "build";
+        started_on: string | null;
+        ended_on: string | null;
+    }[] | undefined;
+    deployment_trigger?: {
+        metadata: {
+            commit_hash: string;
+        };
+    } | undefined;
+}>;
+export type OutputEntryPagesDeployment = z.infer<typeof OutputEntryPagesDeployment>;
+/**
+ * Parses file names in a directory to find wrangler artifact files
+ *
+ * @param artifactDirectory
+ * @returns All artifact files from the directory
+ */
+export declare function getWranglerArtifacts(artifactDirectory: string): Promise<string[]>;
+/**
+ * Searches for detailed wrangler output from a pages deploy
+ *
+ * @param artifactDirectory
+ * @returns The first pages-output-detailed found within a wrangler artifact directory
+ */
+export declare function getDetailedPagesDeployOutput(artifactDirectory: string): Promise<OutputEntryPagesDeployment | null>;
+export {};

dist/wranglerArtifactManager.test.d.ts

@@ -0,0 +1 @@
+export {};

entrypoint.sh

@@ -1,39 +0,0 @@
-#!/bin/sh
-
-set -e
-
-export HOME="/github/workspace"
-export NVM_DIR="/github/workspace/nvm"
-export WRANGLER_HOME="/github/workspace"
-
-# h/t https://github.com/elgohr/Publish-Docker-Github-Action
-sanitize() {
-  if [ -z "${1}" ]
-  then
-    >&2 echo "Unable to find ${2}. Did you set secrets.${2}?"
-    exit 1
-  fi
-}
-
-curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.35.0/install.sh | bash
-[ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
-[ -s "$NVM_DIR/bash_completion" ] && \. "$NVM_DIR/bash_completion"
-
-mkdir -p "$HOME/.wrangler"
-chmod -R 770 "$HOME/.wrangler"
-
-sanitize "${INPUT_EMAIL}" "email"
-sanitize "${INPUT_APIKEY}" "apiKey"
-
-export CF_EMAIL="$INPUT_EMAIL"
-export CF_API_KEY="$INPUT_APIKEY"
-
-npm i @cloudflare/wrangler -g
-
-if [ -z "$INPUT_ENVIRONMENT" ]
-then
-  wrangler publish
-else
-  wrangler publish -e "$INPUT_ENVIRONMENT"
-fi
-

package.json

@@ -0,0 +1,52 @@
+{
+	"name": "wrangler-action",
+	"version": "3.12.1",
+	"description": "GitHub Action to use [Wrangler](https://developers.cloudflare.com/workers/cli-wrangler/).",
+	"author": "wrangler@cloudflare.com",
+	"license": "MIT OR Apache-2.0",
+	"bugs": {
+		"url": "https://github.com/cloudflare/wrangler-action/issues"
+	},
+	"homepage": "https://github.com/cloudflare/wrangler-action#readme",
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/cloudflare/wrangler-action.git"
+	},
+	"keywords": [
+		"script",
+		"cli",
+		"serverless",
+		"cloudflare",
+		"cloudflare-workers",
+		"typescript"
+	],
+	"type": "module",
+	"main": "dist/index.mjs",
+	"scripts": {
+		"build": "npx ncc build ./src/index.ts && mv ./dist/index.js ./dist/index.mjs",
+		"test": "vitest",
+		"format": "prettier --write .",
+		"check": "prettier --check ."
+	},
+	"dependencies": {
+		"@actions/core": "^1.11.1",
+		"@actions/exec": "^1.1.1",
+		"@actions/github": "^6.0.0",
+		"zod": "^3.23.8"
+	},
+	"devDependencies": {
+		"@changesets/changelog-github": "^0.5.0",
+		"@changesets/cli": "^2.27.9",
+		"@cloudflare/workers-types": "^4.20241022.0",
+		"@types/mock-fs": "^4.13.4",
+		"@types/node": "^22.9.0",
+		"@types/semver": "^7.5.8",
+		"@vercel/ncc": "^0.38.2",
+		"mock-fs": "^5.4.1",
+		"msw": "^2.6.4",
+		"prettier": "^3.3.3",
+		"semver": "^7.6.3",
+		"typescript": "^5.6.3",
+		"vitest": "^2.1.4"
+	}
+}

src/exec.ts

@@ -0,0 +1,54 @@
+import {
+	exec as _childProcessExec,
+	type ExecException,
+} from "node:child_process";
+import { EOL } from "node:os";
+import { promisify } from "node:util";
+
+export { exec } from "@actions/exec";
+
+const childProcessExec = promisify(_childProcessExec);
+
+type ExecAsyncException = ExecException & {
+	stderr: string;
+	stdout: string;
+};
+
+function isExecAsyncException(err: unknown): err is ExecAsyncException {
+	return err instanceof Error && "code" in err && "stderr" in err;
+}
+
+export async function execShell(
+	command: string,
+	{
+		silent = false,
+		...options
+	}: Parameters<typeof childProcessExec>[1] & { silent?: boolean } = {},
+) {
+	if (!silent) {
+		process.stdout.write("[command]" + command + EOL);
+	}
+
+	try {
+		const promise = childProcessExec(command, {
+			...options,
+		});
+
+		const { child } = promise;
+
+		if (!silent) {
+			child.stdout?.on("data", (data: Buffer) => process.stdout.write(data));
+			child.stderr?.on("data", (data: Buffer) => process.stderr.write(data));
+		}
+
+		await promise;
+		return child.exitCode;
+	} catch (err) {
+		if (isExecAsyncException(err)) {
+			process.stderr.write(err.stderr);
+			throw new Error(`Process failed with exit code ${err.code}`);
+		}
+
+		throw err;
+	}
+}

src/index.ts

@@ -0,0 +1,36 @@
+import { getBooleanInput, getInput, getMultilineInput } from "@actions/core";
+import { tmpdir } from "os";
+import { join } from "path";
+import { getPackageManager } from "./packageManagers";
+import { checkWorkingDirectory } from "./utils";
+import { main, WranglerActionConfig } from "./wranglerAction";
+
+const DEFAULT_WRANGLER_VERSION = "3.81.0";
+
+/**
+ * A configuration object that contains all the inputs & immutable state for the action.
+ */
+const config: WranglerActionConfig = {
+	WRANGLER_VERSION: getInput("wranglerVersion") || DEFAULT_WRANGLER_VERSION,
+	didUserProvideWranglerVersion: Boolean(getInput("wranglerVersion")),
+	secrets: getMultilineInput("secrets"),
+	workingDirectory: checkWorkingDirectory(getInput("workingDirectory")),
+	CLOUDFLARE_API_TOKEN: getInput("apiToken"),
+	CLOUDFLARE_ACCOUNT_ID: getInput("accountId"),
+	ENVIRONMENT: getInput("environment"),
+	VARS: getMultilineInput("vars"),
+	COMMANDS: getMultilineInput("command"),
+	QUIET_MODE: getBooleanInput("quiet"),
+	PACKAGE_MANAGER: getInput("packageManager"),
+	WRANGLER_OUTPUT_DIR: `${join(
+		tmpdir(),
+		`wranglerArtifacts-${crypto.randomUUID()}`,
+	)}`,
+	GITHUB_TOKEN: getInput("gitHubToken", { required: false }),
+} as const;
+
+const packageManager = getPackageManager(config.PACKAGE_MANAGER, {
+	workingDirectory: config.workingDirectory,
+});
+
+main(config, packageManager);

src/packageManagers.test.ts

@@ -0,0 +1,110 @@
+import { describe, expect, test } from "vitest";
+import { getPackageManager } from "./packageManagers";
+
+describe("getPackageManager", () => {
+	test("should use provided value instead of inferring from lockfile", () => {
+		expect(
+			getPackageManager("npm", { workingDirectory: "src/test/fixtures/npm" }),
+		).toMatchInlineSnapshot(`
+				{
+				  "exec": "npx",
+				  "execNoInstall": "npx --no-install",
+				  "install": "npm i",
+				}
+			`);
+
+		expect(
+			getPackageManager("yarn", { workingDirectory: "src/test/fixtures/npm" }),
+		).toMatchInlineSnapshot(`
+				{
+				  "exec": "yarn",
+				  "execNoInstall": "yarn",
+				  "install": "yarn add",
+				}
+			`);
+
+		expect(
+			getPackageManager("pnpm", { workingDirectory: "src/test/fixtures/npm" }),
+		).toMatchInlineSnapshot(`
+				{
+				  "exec": "pnpm exec",
+				  "execNoInstall": "pnpm exec",
+				  "install": "pnpm add",
+				}
+			`);
+
+		expect(
+			getPackageManager("bun", { workingDirectory: "src/test/fixtures/bun" }),
+		).toMatchInlineSnapshot(`
+				{
+				  "exec": "bunx",
+				  "execNoInstall": "bun run",
+				  "install": "bun i",
+				}
+			`);
+	});
+
+	test("should use npm if no value provided and package-lock.json exists", () => {
+		expect(getPackageManager("", { workingDirectory: "src/test/fixtures/npm" }))
+			.toMatchInlineSnapshot(`
+				{
+				  "exec": "npx",
+				  "execNoInstall": "npx --no-install",
+				  "install": "npm i",
+				}
+			`);
+	});
+
+	test("should use yarn if no value provided and yarn.lock exists", () => {
+		expect(
+			getPackageManager("", { workingDirectory: "src/test/fixtures/yarn" }),
+		).toMatchInlineSnapshot(`
+				{
+				  "exec": "yarn",
+				  "execNoInstall": "yarn",
+				  "install": "yarn add",
+				}
+			`);
+	});
+
+	test("should use pnpm if no value provided and pnpm-lock.yaml exists", () => {
+		expect(
+			getPackageManager("", { workingDirectory: "src/test/fixtures/pnpm" }),
+		).toMatchInlineSnapshot(`
+				{
+				  "exec": "pnpm exec",
+				  "execNoInstall": "pnpm exec",
+				  "install": "pnpm add",
+				}
+			`);
+	});
+
+	test("should use bun if no value provided and bun.lockb exists", () => {
+		expect(getPackageManager("", { workingDirectory: "src/test/fixtures/bun" }))
+			.toMatchInlineSnapshot(`
+				{
+				  "exec": "bunx",
+				  "execNoInstall": "bun run",
+				  "install": "bun i",
+				}
+			`);
+	});
+
+	test("should use npm if no value provided and no lockfile is present", () => {
+		expect(
+			getPackageManager("", { workingDirectory: "src/test/fixtures/empty" }),
+		).toMatchInlineSnapshot(`
+				{
+				  "exec": "npx",
+				  "execNoInstall": "npx --no-install",
+				  "install": "npm i",
+				}
+			`);
+	});
+
+	test("should throw if an invalid value is provided", () => {
+		expect(() =>
+			getPackageManager("cargo", { workingDirectory: "src/test/fixtures/npm" }),
+		).toThrowError();
+	});
+});

src/packageManagers.ts

@@ -0,0 +1,76 @@
+import { existsSync } from "node:fs";
+import * as path from "node:path";
+
+export interface PackageManager {
+	install: string;
+	exec: string;
+	execNoInstall: string;
+}
+
+const PACKAGE_MANAGERS = {
+	npm: {
+		install: "npm i",
+		exec: "npx",
+		execNoInstall: "npx --no-install",
+	},
+	yarn: {
+		install: "yarn add",
+		exec: "yarn",
+		execNoInstall: "yarn",
+	},
+	pnpm: {
+		install: "pnpm add",
+		exec: "pnpm exec",
+		execNoInstall: "pnpm exec",
+	},
+	bun: {
+		install: "bun i",
+		exec: "bunx",
+		execNoInstall: "bun run",
+	},
+} as const satisfies Readonly<Record<string, PackageManager>>;
+
+type PackageManagerValue = keyof typeof PACKAGE_MANAGERS;
+
+function detectPackageManager(
+	workingDirectory = ".",
+): PackageManagerValue | null {
+	if (existsSync(path.join(workingDirectory, "package-lock.json"))) {
+		return "npm";
+	}
+	if (existsSync(path.join(workingDirectory, "yarn.lock"))) {
+		return "yarn";
+	}
+	if (existsSync(path.join(workingDirectory, "pnpm-lock.yaml"))) {
+		return "pnpm";
+	}
+	if (
+		existsSync(path.join(workingDirectory, "bun.lockb")) ||
+		existsSync(path.join(workingDirectory, "bun.lock"))
+	) {
+		return "bun";
+	}
+	return null;
+}
+
+function assertValidPackageManagerValue(
+	name: string,
+): asserts name is PackageManagerValue | "" {
+	if (name && !Object.keys(PACKAGE_MANAGERS).includes(name)) {
+		throw new TypeError(
+			`invalid value provided for "packageManager": ${name}
+	Value must be one of: [${Object.keys(PACKAGE_MANAGERS).join(", ")}]`,
+		);
+	}
+}
+
+export function getPackageManager(
+	name: string,
+	{ workingDirectory = "." }: { workingDirectory?: string } = {},
+) {
+	assertValidPackageManagerValue(name);
+
+	return PACKAGE_MANAGERS[
+		name || detectPackageManager(workingDirectory) || "npm"
+	];
+}

src/service/github.spec.ts

@@ -0,0 +1,59 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { setupServer } from "msw/node";
+import { createGitHubDeployment, createJobSummary } from "./github";
+import { getOctokit } from "@actions/github";
+import { mockGithubDeployments } from "../test/mocks";
+import { getTestConfig } from "../test/test-utils";
+import mockfs from "mock-fs";
+import { readFile } from "fs/promises";
+
+afterEach(() => {
+	mockfs.restore();
+});
+
+describe("github", () => {
+	it("Calls createGitHubDeployment successfully", async () => {
+		const githubUser = "mock-user";
+		const githubRepoName = "wrangler-action";
+		const server = setupServer(
+			...mockGithubDeployments({ githubUser, githubRepoName }).handlers,
+		);
+		server.listen({ onUnhandledRequest: "error" });
+		vi.stubEnv("GITHUB_REPOSITORY", `${githubUser}/${githubRepoName}`);
+
+		const testConfig = getTestConfig();
+		const octokit = getOctokit(testConfig.GITHUB_TOKEN, { request: fetch });
+		await createGitHubDeployment({
+			config: testConfig,
+			octokit,
+			productionBranch: "production-branch",
+			deploymentId: "fake-deployment-id",
+			projectName: "fake-project-name",
+			deploymentUrl: "https://fake-deployment-url.com",
+			environment: "production",
+		});
+		server.close();
+	});
+	it("Calls createJobSummary successfully", async () => {
+		vi.stubEnv("GITHUB_STEP_SUMMARY", "summary");
+		mockfs({
+			summary: mockfs.file(),
+		});
+		await createJobSummary({
+			commitHash: "fake-commit-hash",
+			deploymentUrl: "https://fake-deployment-url.com",
+			aliasUrl: "https://fake-alias-url.com",
+		});
+		expect((await readFile("summary")).toString()).toMatchInlineSnapshot(`
+			"
+			# Deploying with Cloudflare Pages
+
+			| Name                    | Result |
+			| ----------------------- | - |
+			| **Last commit:**        | fake-commit-hash |
+			| **Preview URL**:        | https://fake-deployment-url.com |
+			| **Branch Preview URL**: | https://fake-alias-url.com |
+			  "
+		`);
+	});
+});

src/service/github.ts

@@ -0,0 +1,120 @@
+import { summary } from "@actions/core";
+import { context, getOctokit } from "@actions/github";
+import { env } from "process";
+import { info } from "../utils";
+import { OutputEntryPagesDeployment } from "../wranglerArtifactManager";
+import { WranglerActionConfig } from "../wranglerAction";
+
+type Octokit = ReturnType<typeof getOctokit>;
+
+export async function createGitHubDeployment({
+	config,
+	octokit,
+	productionBranch,
+	environment,
+	deploymentId,
+	projectName,
+	deploymentUrl,
+}: {
+	config: WranglerActionConfig;
+	octokit: Octokit;
+	productionBranch: string;
+	environment: string;
+	deploymentId: string | null;
+	projectName: string;
+	deploymentUrl?: string;
+}) {
+	const githubBranch = env.GITHUB_HEAD_REF || env.GITHUB_REF_NAME;
+	const productionEnvironment = githubBranch === productionBranch;
+
+	const deployment = await octokit.rest.repos.createDeployment({
+		owner: context.repo.owner,
+		repo: context.repo.repo,
+		ref: githubBranch || context.ref,
+		auto_merge: false,
+		description: "Cloudflare Pages",
+		required_contexts: [],
+		environment,
+		production_environment: productionEnvironment,
+	});
+
+	if (deployment.status !== 201) {
+		info(config, "Error creating GitHub deployment");
+		return;
+	}
+	await octokit.rest.repos.createDeploymentStatus({
+		owner: context.repo.owner,
+		repo: context.repo.repo,
+		deployment_id: deployment.data.id,
+		environment,
+		environment_url: deploymentUrl,
+		production_environment: productionEnvironment,
+		// don't have project_name or deployment_id I think
+		log_url: `https://dash.cloudflare.com/${config.CLOUDFLARE_ACCOUNT_ID}/pages/view/${projectName}/${deploymentId}`,
+		description: "Cloudflare Pages",
+		state: "success",
+		auto_inactive: false,
+	});
+}
+
+export async function createJobSummary({
+	commitHash,
+	deploymentUrl,
+	aliasUrl,
+}: {
+	commitHash: string;
+	deploymentUrl?: string;
+	aliasUrl?: string;
+}) {
+	await summary
+		.addRaw(
+			`
+# Deploying with Cloudflare Pages
+
+| Name                    | Result |
+| ----------------------- | - |
+| **Last commit:**        | ${commitHash} |
+| **Preview URL**:        | ${deploymentUrl} |
+| **Branch Preview URL**: | ${aliasUrl} |
+  `,
+		)
+		.write();
+}
+
+/**
+ * Create github deployment, if GITHUB_TOKEN is present in config
+ */
+export async function createGitHubDeploymentAndJobSummary(
+	config: WranglerActionConfig,
+	pagesArtifactFields: OutputEntryPagesDeployment,
+) {
+	if (
+		config.GITHUB_TOKEN &&
+		pagesArtifactFields.production_branch &&
+		pagesArtifactFields.pages_project &&
+		pagesArtifactFields.deployment_trigger &&
+		pagesArtifactFields.stages
+	) {
+		const octokit = getOctokit(config.GITHUB_TOKEN);
+		await Promise.all([
+			createGitHubDeployment({
+				config,
+				octokit,
+				deploymentUrl: pagesArtifactFields.url,
+				productionBranch: pagesArtifactFields.production_branch,
+				environment: pagesArtifactFields.environment,
+				deploymentId: pagesArtifactFields.deployment_id,
+				projectName: pagesArtifactFields.pages_project,
+			}),
+			createJobSummary({
+				commitHash:
+					pagesArtifactFields.deployment_trigger.metadata.commit_hash.substring(
+						0,
+						8,
+					),
+				deploymentUrl: pagesArtifactFields.url,
+				aliasUrl: pagesArtifactFields.alias,
+			}),
+		]);
+	}
+}

src/test/fixtures/build-quiet/index.ts

@@ -0,0 +1,25 @@
+type Env = {
+	SECRET1?: string;
+	SECRET2?: string;
+};
+
+export default {
+	fetch(request: Request, env: Env) {
+		const url = new URL(request.url);
+
+		if (url.pathname === "/secret-health-check") {
+			const { SECRET1, SECRET2 } = env;
+
+			if (SECRET1 !== "SECRET_1_VALUE" || SECRET2 !== "SECRET_2_VALUE") {
+				throw new Error("SECRET1 or SECRET2 is not defined");
+			}
+
+			return new Response("OK");
+		}
+
+		return Response.json({
+			...request,
+			headers: Object.fromEntries(request.headers),
+		});
+	},
+};

src/test/fixtures/build-quiet/package-lock.json

@@ -0,0 +1,10 @@
+{
+	"name": "wrangler-action-test",
+	"lockfileVersion": 3,
+	"requires": true,
+	"packages": {
+		"": {
+			"name": "wrangler-action-test"
+		}
+	}
+}

src/test/fixtures/build-quiet/package.json

@@ -0,0 +1,5 @@
+{
+	"name": "wrangler-action-test",
+	"license": "MIT",
+	"private": true
+}

src/test/fixtures/build-quiet/wrangler.toml

@@ -0,0 +1,4 @@
+name = "wrangler-action-test-build-quiet"
+main = "./index.ts"
+compatibility_date = "2023-07-07"
+workers_dev = true

src/test/fixtures/bun/index.ts

@@ -0,0 +1,25 @@
+type Env = {
+	SECRET1?: string;
+	SECRET2?: string;
+};
+
+export default {
+	fetch(request: Request, env: Env) {
+		const url = new URL(request.url);
+
+		if (url.pathname === "/secret-health-check") {
+			const { SECRET1, SECRET2 } = env;
+
+			if (SECRET1 !== "SECRET_1_VALUE" || SECRET2 !== "SECRET_2_VALUE") {
+				throw new Error("SECRET1 or SECRET2 is not defined");
+			}
+
+			return new Response("OK");
+		}
+
+		return Response.json({
+			...request,
+			headers: Object.fromEntries(request.headers),
+		});
+	},
+};

src/test/fixtures/bun/package.json

@@ -0,0 +1,5 @@
+{
+	"name": "wrangler-action-bun-test",
+	"license": "MIT",
+	"private": true
+}

src/test/fixtures/bun/wrangler.toml

@@ -0,0 +1,4 @@
+name = "wrangler-action-test"
+main = "./index.ts"
+compatibility_date = "2023-07-07"
+workers_dev = true

src/test/fixtures/environment/index.ts

@@ -0,0 +1,20 @@
+type Env = {
+	SECRET1?: string;
+	SECRET2?: string;
+};
+
+export default {
+	fetch(request: Request, env: Env) {
+		const url = new URL(request.url);
+
+		if (url.pathname === "/secret") {
+			const { SECRET1 = "", SECRET2 = "" } = env;
+			return new Response(`${SECRET1} ${SECRET2}`);
+		}
+
+		return Response.json({
+			...request,
+			headers: Object.fromEntries(request.headers),
+		});
+	},
+};

src/test/fixtures/environment/package-lock.json

@@ -0,0 +1,10 @@
+{
+	"name": "wrangler-action-environment-test",
+	"lockfileVersion": 3,
+	"requires": true,
+	"packages": {
+		"": {
+			"name": "wrangler-action-environment-test"
+		}
+	}
+}

src/test/fixtures/environment/package.json

@@ -0,0 +1,5 @@
+{
+	"name": "wrangler-action-environment-test",
+	"license": "MIT",
+	"private": true
+}

src/test/fixtures/environment/wrangler.toml

@@ -0,0 +1,9 @@
+name = "wrangler-action-environment-test"
+main = "./index.ts"
+compatibility_date = "2023-07-07"
+workers_dev = true
+
+[env.dev]
+name = "wrangler-action-dev-environment-test"
+[env.dev.vars]
+DEV_VAR = "example_production_token"

src/test/fixtures/npm/index.ts

@@ -0,0 +1,25 @@
+type Env = {
+	SECRET1?: string;
+	SECRET2?: string;
+};
+
+export default {
+	fetch(request: Request, env: Env) {
+		const url = new URL(request.url);
+
+		if (url.pathname === "/secret-health-check") {
+			const { SECRET1, SECRET2 } = env;
+
+			if (SECRET1 !== "SECRET_1_VALUE" || SECRET2 !== "SECRET_2_VALUE") {
+				throw new Error("SECRET1 or SECRET2 is not defined");
+			}
+
+			return new Response("OK");
+		}
+
+		return Response.json({
+			...request,
+			headers: Object.fromEntries(request.headers),
+		});
+	},
+};

src/test/fixtures/npm/package-lock.json

@@ -0,0 +1,10 @@
+{
+	"name": "wrangler-action-npm-test",
+	"lockfileVersion": 3,
+	"requires": true,
+	"packages": {
+		"": {
+			"name": "wrangler-action-npm-test"
+		}
+	}
+}

src/test/fixtures/npm/package.json

@@ -0,0 +1,3 @@
+{
+	"name": "wrangler-action-npm-test"
+}

src/test/fixtures/npm/wrangler.toml

@@ -0,0 +1,4 @@
+name = "wrangler-action-test"
+main = "./index.ts"
+compatibility_date = "2023-07-07"
+workers_dev = true

src/test/fixtures/only-build/index.ts

@@ -0,0 +1,25 @@
+type Env = {
+	SECRET1?: string;
+	SECRET2?: string;
+};
+
+export default {
+	fetch(request: Request, env: Env) {
+		const url = new URL(request.url);
+
+		if (url.pathname === "/secret-health-check") {
+			const { SECRET1, SECRET2 } = env;
+
+			if (SECRET1 !== "SECRET_1_VALUE" || SECRET2 !== "SECRET_2_VALUE") {
+				throw new Error("SECRET1 or SECRET2 is not defined");
+			}
+
+			return new Response("OK");
+		}
+
+		return Response.json({
+			...request,
+			headers: Object.fromEntries(request.headers),
+		});
+	},
+};

src/test/fixtures/only-build/package-lock.json

@@ -0,0 +1,10 @@
+{
+	"name": "wrangler-action-test",
+	"lockfileVersion": 3,
+	"requires": true,
+	"packages": {
+		"": {
+			"name": "wrangler-action-test"
+		}
+	}
+}

src/test/fixtures/only-build/package.json

@@ -0,0 +1,5 @@
+{
+	"name": "wrangler-action-test",
+	"license": "MIT",
+	"private": true
+}

src/test/fixtures/only-build/wrangler.toml

@@ -0,0 +1,4 @@
+name = "wrangler-action-test-only-build"
+main = "./index.ts"
+compatibility_date = "2023-07-07"
+workers_dev = true

src/test/fixtures/pnpm/index.ts

@@ -0,0 +1,25 @@
+type Env = {
+	SECRET1?: string;
+	SECRET2?: string;
+};
+
+export default {
+	fetch(request: Request, env: Env) {
+		const url = new URL(request.url);
+
+		if (url.pathname === "/secret-health-check") {
+			const { SECRET1, SECRET2 } = env;
+
+			if (SECRET1 !== "SECRET_1_VALUE" || SECRET2 !== "SECRET_2_VALUE") {
+				throw new Error("SECRET1 or SECRET2 is not defined");
+			}
+
+			return new Response("OK");
+		}
+
+		return Response.json({
+			...request,
+			headers: Object.fromEntries(request.headers),
+		});
+	},
+};

src/test/fixtures/pnpm/package.json

@@ -0,0 +1,5 @@
+{
+	"name": "wrangler-action-pnpm-test",
+	"license": "MIT",
+	"private": true
+}

src/test/fixtures/pnpm/pnpm-lock.yaml

@@ -0,0 +1,5 @@
+lockfileVersion: '6.0'
+
+settings:
+  autoInstallPeers: true
+  excludeLinksFromLockfile: false

src/test/fixtures/pnpm/wrangler.toml

@@ -0,0 +1,4 @@
+name = "wrangler-action-test"
+main = "./index.ts"
+compatibility_date = "2023-07-07"
+workers_dev = true

src/test/fixtures/pre-installed-wrangler/index.ts

@@ -0,0 +1,25 @@
+type Env = {
+	SECRET1?: string;
+	SECRET2?: string;
+};
+
+export default {
+	fetch(request: Request, env: Env) {
+		const url = new URL(request.url);
+
+		if (url.pathname === "/secret-health-check") {
+			const { SECRET1, SECRET2 } = env;
+
+			if (SECRET1 !== "SECRET_1_VALUE" || SECRET2 !== "SECRET_2_VALUE") {
+				throw new Error("SECRET1 or SECRET2 is not defined");
+			}
+
+			return new Response("OK");
+		}
+
+		return Response.json({
+			...request,
+			headers: Object.fromEntries(request.headers),
+		});
+	},
+};

src/test/fixtures/pre-installed-wrangler/mock_packages/wrangler/index.js

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+"use strict";
+
+const args = Array.from(process.argv);
+const command = args.pop();
+switch (command) {
+	case "--version":
+		console.log(`
+⛅️ wrangler 1.1.1 (update available 1.2.3)
+------------------------------------------`);
+		process.exit(0);
+	case "action-test":
+		console.log("Test successful.");
+		process.exit(0);
+	default:
+		console.error("Invalid command");
+		process.exit(1);
+}

src/test/fixtures/pre-installed-wrangler/mock_packages/wrangler/package.json

@@ -0,0 +1,7 @@
+{
+	"private": true,
+	"name": "wrangler",
+	"version": "1.1.1",
+	"main": "index.js",
+	"bin": "index.js"
+}

src/test/fixtures/pre-installed-wrangler/package-lock.json

@@ -0,0 +1,30 @@
+{
+	"name": "wrangler-action-pre-installed-wrangler-test",
+	"lockfileVersion": 2,
+	"requires": true,
+	"packages": {
+		"": {
+			"name": "wrangler-action-pre-installed-wrangler-test",
+			"license": "MIT",
+			"devDependencies": {
+				"wrangler": "file:mock_packages/wrangler"
+			}
+		},
+		"mock_packages/wrangler": {
+			"version": "1.1.1",
+			"dev": true,
+			"bin": {
+				"wrangler": "index.js"
+			}
+		},
+		"node_modules/wrangler": {
+			"resolved": "mock_packages/wrangler",
+			"link": true
+		}
+	},
+	"dependencies": {
+		"wrangler": {
+			"version": "file:mock_packages/wrangler"
+		}
+	}
+}

src/test/fixtures/pre-installed-wrangler/package.json

@@ -0,0 +1,8 @@
+{
+	"name": "wrangler-action-pre-installed-wrangler-test",
+	"license": "MIT",
+	"private": true,
+	"devDependencies": {
+		"wrangler": "file:mock_packages/wrangler"
+	}
+}

src/test/fixtures/secrets-default/index.ts

@@ -0,0 +1,25 @@
+type Env = {
+	SECRET1?: string;
+	SECRET2?: string;
+};
+
+export default {
+	fetch(request: Request, env: Env) {
+		const url = new URL(request.url);
+
+		if (url.pathname === "/secret-health-check") {
+			const { SECRET1, SECRET2 } = env;
+
+			if (SECRET1 !== "SECRET_1_VALUE" || SECRET2 !== "SECRET_2_VALUE") {
+				throw new Error("SECRET1 or SECRET2 is not defined");
+			}
+
+			return new Response("OK");
+		}
+
+		return Response.json({
+			...request,
+			headers: Object.fromEntries(request.headers),
+		});
+	},
+};

src/test/fixtures/secrets-default/package-lock.json

@@ -0,0 +1,10 @@
+{
+	"name": "wrangler-action-test",
+	"lockfileVersion": 3,
+	"requires": true,
+	"packages": {
+		"": {
+			"name": "wrangler-action-test"
+		}
+	}
+}

src/test/fixtures/secrets-default/package.json

@@ -0,0 +1,5 @@
+{
+	"name": "wrangler-action-test",
+	"license": "MIT",
+	"private": true
+}

src/test/fixtures/secrets-default/wrangler.toml

@@ -0,0 +1,4 @@
+name = "wrangler-action-test-secrets-default"
+main = "./index.ts"
+compatibility_date = "2023-07-07"
+workers_dev = true

src/test/fixtures/secrets-v2/index.ts

@@ -0,0 +1,25 @@
+type Env = {
+	SECRET1?: string;
+	SECRET2?: string;
+};
+
+export default {
+	fetch(request: Request, env: Env) {
+		const url = new URL(request.url);
+
+		if (url.pathname === "/secret-health-check") {
+			const { SECRET1, SECRET2 } = env;
+
+			if (SECRET1 !== "SECRET_1_VALUE" || SECRET2 !== "SECRET_2_VALUE") {
+				throw new Error("SECRET1 or SECRET2 is not defined");
+			}
+
+			return new Response("OK");
+		}
+
+		return Response.json({
+			...request,
+			headers: Object.fromEntries(request.headers),
+		});
+	},
+};

src/test/fixtures/secrets-v2/package-lock.json

@@ -0,0 +1,10 @@
+{
+	"name": "wrangler-action-test",
+	"lockfileVersion": 3,
+	"requires": true,
+	"packages": {
+		"": {
+			"name": "wrangler-action-test"
+		}
+	}
+}

src/test/fixtures/secrets-v2/package.json

@@ -0,0 +1,5 @@
+{
+	"name": "wrangler-action-test",
+	"license": "MIT",
+	"private": true
+}

src/test/fixtures/secrets-v2/wrangler.toml

@@ -0,0 +1,4 @@
+name = "wrangler-action-test-secrets-v2"
+main = "./index.ts"
+compatibility_date = "2023-07-07"
+workers_dev = true

src/test/fixtures/specify-package-manager/index.ts

@@ -0,0 +1 @@
+export default {};

src/test/fixtures/specify-package-manager/package.json

@@ -0,0 +1,5 @@
+{
+	"name": "wrangler-action-detect-package-manager-test",
+	"license": "MIT",
+	"private": true
+}

src/test/fixtures/specify-package-manager/wrangler.toml

@@ -0,0 +1,4 @@
+name = "wrangler-action-test-specify-package-manager"
+main = "./index.ts"
+compatibility_date = "2023-07-07"
+workers_dev = true

src/test/fixtures/unspecified-package-manager/index.ts

@@ -0,0 +1 @@
+export default {};

src/test/fixtures/unspecified-package-manager/package.json

@@ -0,0 +1,5 @@
+{
+	"name": "wrangler-action-detect-package-manager-test",
+	"license": "MIT",
+	"private": true
+}

src/test/fixtures/unspecified-package-manager/wrangler.toml

@@ -0,0 +1,4 @@
+name = "wrangler-action-test-unspecified-package-manager"
+main = "./index.ts"
+compatibility_date = "2023-07-07"
+workers_dev = true

src/test/fixtures/yarn/index.ts

@@ -0,0 +1,25 @@
+type Env = {
+	SECRET1?: string;
+	SECRET2?: string;
+};
+
+export default {
+	fetch(request: Request, env: Env) {
+		const url = new URL(request.url);
+
+		if (url.pathname === "/secret-health-check") {
+			const { SECRET1, SECRET2 } = env;
+
+			if (SECRET1 !== "SECRET_1_VALUE" || SECRET2 !== "SECRET_2_VALUE") {
+				throw new Error("SECRET1 or SECRET2 is not defined");
+			}
+
+			return new Response("OK");
+		}
+
+		return Response.json({
+			...request,
+			headers: Object.fromEntries(request.headers),
+		});
+	},
+};

src/test/fixtures/yarn/package.json

@@ -0,0 +1,5 @@
+{
+	"name": "wrangler-action-yarn-test",
+	"license": "MIT",
+	"private": true
+}

src/test/fixtures/yarn/wrangler.toml

@@ -0,0 +1,4 @@
+name = "wrangler-action-test"
+main = "./index.ts"
+compatibility_date = "2023-07-07"
+workers_dev = true

src/test/fixtures/yarn/yarn.lock

@@ -0,0 +1,4 @@
+# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+# yarn lockfile v1
+
+