move node_modules

.gitignore

@@ -6,6 +6,4 @@ logs
 !.github
 !.dockerignore
 _*
-node_modules
-!src/node_modules
 dist

node_modules/@actions/core/LICENSE.md

@@ -0,0 +1,9 @@
+The MIT License (MIT)
+
+Copyright 2019 GitHub
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

node_modules/@actions/core/README.md

@@ -0,0 +1,335 @@
+# `@actions/core`
+
+> Core functions for setting results, logging, registering secrets and exporting variables across actions
+
+## Usage
+
+### Import the package
+
+```js
+// javascript
+const core = require('@actions/core');
+
+// typescript
+import * as core from '@actions/core';
+```
+
+#### Inputs/Outputs
+
+Action inputs can be read with `getInput` which returns a `string` or `getBooleanInput` which parses a boolean based on the [yaml 1.2 specification](https://yaml.org/spec/1.2/spec.html#id2804923). If `required` set to be false, the input should have a default value in `action.yml`.
+
+Outputs can be set with `setOutput` which makes them available to be mapped into inputs of other actions to ensure they are decoupled.
+
+```js
+const myInput = core.getInput('inputName', { required: true });
+const myBooleanInput = core.getBooleanInput('booleanInputName', { required: true });
+const myMultilineInput = core.getMultilineInput('multilineInputName', { required: true });
+core.setOutput('outputKey', 'outputVal');
+```
+
+#### Exporting variables
+
+Since each step runs in a separate process, you can use `exportVariable` to add it to this step and future steps environment blocks.
+
+```js
+core.exportVariable('envVar', 'Val');
+```
+
+#### Setting a secret
+
+Setting a secret registers the secret with the runner to ensure it is masked in logs.
+
+```js
+core.setSecret('myPassword');
+```
+
+#### PATH Manipulation
+
+To make a tool's path available in the path for the remainder of the job (without altering the machine or containers state), use `addPath`.  The runner will prepend the path given to the jobs PATH.
+
+```js
+core.addPath('/path/to/mytool');
+```
+
+#### Exit codes
+
+You should use this library to set the failing exit code for your action.  If status is not set and the script runs to completion, that will lead to a success.
+
+```js
+const core = require('@actions/core');
+
+try {
+  // Do stuff
+}
+catch (err) {
+  // setFailed logs the message and sets a failing exit code
+  core.setFailed(`Action failed with error ${err}`);
+}
+```
+
+Note that `setNeutral` is not yet implemented in actions V2 but equivalent functionality is being planned.
+
+#### Logging
+
+Finally, this library provides some utilities for logging. Note that debug logging is hidden from the logs by default. This behavior can be toggled by enabling the [Step Debug Logs](../../docs/action-debugging.md#step-debug-logs).
+
+```js
+const core = require('@actions/core');
+
+const myInput = core.getInput('input');
+try {
+  core.debug('Inside try block');
+  
+  if (!myInput) {
+    core.warning('myInput was not set');
+  }
+  
+  if (core.isDebug()) {
+    // curl -v https://github.com
+  } else {
+    // curl https://github.com
+  }
+
+  // Do stuff
+  core.info('Output to the actions build log')
+
+  core.notice('This is a message that will also emit an annotation')
+}
+catch (err) {
+  core.error(`Error ${err}, action may still succeed though`);
+}
+```
+
+This library can also wrap chunks of output in foldable groups.
+
+```js
+const core = require('@actions/core')
+
+// Manually wrap output
+core.startGroup('Do some function')
+doSomeFunction()
+core.endGroup()
+
+// Wrap an asynchronous function call
+const result = await core.group('Do something async', async () => {
+  const response = await doSomeHTTPRequest()
+  return response
+})
+```
+
+#### Annotations
+
+This library has 3 methods that will produce [annotations](https://docs.github.com/en/rest/reference/checks#create-a-check-run). 
+```js
+core.error('This is a bad error. This will also fail the build.')
+
+core.warning('Something went wrong, but it\'s not bad enough to fail the build.')
+
+core.notice('Something happened that you might want to know about.')
+```
+
+These will surface to the UI in the Actions page and on Pull Requests. They look something like this:
+
+![Annotations Image](../../docs/assets/annotations.png)
+
+These annotations can also be attached to particular lines and columns of your source files to show exactly where a problem is occuring. 
+
+These options are: 
+```typescript
+export interface AnnotationProperties {
+  /**
+   * A title for the annotation.
+   */
+  title?: string
+
+  /**
+   * The name of the file for which the annotation should be created.
+   */
+  file?: string
+
+  /**
+   * The start line for the annotation.
+   */
+  startLine?: number
+
+  /**
+   * The end line for the annotation. Defaults to `startLine` when `startLine` is provided.
+   */
+  endLine?: number
+
+  /**
+   * The start column for the annotation. Cannot be sent when `startLine` and `endLine` are different values.
+   */
+  startColumn?: number
+
+  /**
+   * The start column for the annotation. Cannot be sent when `startLine` and `endLine` are different values.
+   * Defaults to `startColumn` when `startColumn` is provided.
+   */
+  endColumn?: number
+}
+```
+
+#### Styling output
+
+Colored output is supported in the Action logs via standard [ANSI escape codes](https://en.wikipedia.org/wiki/ANSI_escape_code). 3/4 bit, 8 bit and 24 bit colors are all supported.
+
+Foreground colors:
+
+```js
+// 3/4 bit
+core.info('\u001b[35mThis foreground will be magenta')
+
+// 8 bit
+core.info('\u001b[38;5;6mThis foreground will be cyan')
+
+// 24 bit
+core.info('\u001b[38;2;255;0;0mThis foreground will be bright red')
+```
+
+Background colors:
+
+```js
+// 3/4 bit
+core.info('\u001b[43mThis background will be yellow');
+
+// 8 bit
+core.info('\u001b[48;5;6mThis background will be cyan')
+
+// 24 bit
+core.info('\u001b[48;2;255;0;0mThis background will be bright red')
+```
+
+Special styles:
+
+```js
+core.info('\u001b[1mBold text')
+core.info('\u001b[3mItalic text')
+core.info('\u001b[4mUnderlined text')
+```
+
+ANSI escape codes can be combined with one another:
+
+```js
+core.info('\u001b[31;46mRed foreground with a cyan background and \u001b[1mbold text at the end');
+```
+
+> Note: Escape codes reset at the start of each line
+
+```js
+core.info('\u001b[35mThis foreground will be magenta')
+core.info('This foreground will reset to the default')
+```
+
+Manually typing escape codes can be a little difficult, but you can use third party modules such as [ansi-styles](https://github.com/chalk/ansi-styles).
+
+```js
+const style = require('ansi-styles');
+core.info(style.color.ansi16m.hex('#abcdef') + 'Hello world!')
+```
+
+#### Action state
+
+You can use this library to save state and get state for sharing information between a given wrapper action:
+
+**action.yml**:
+
+```yaml
+name: 'Wrapper action sample'
+inputs:
+  name:
+    default: 'GitHub'
+runs:
+  using: 'node12'
+  main: 'main.js'
+  post: 'cleanup.js'
+```
+
+In action's `main.js`:
+
+```js
+const core = require('@actions/core');
+
+core.saveState("pidToKill", 12345);
+```
+
+In action's `cleanup.js`:
+
+```js
+const core = require('@actions/core');
+
+var pid = core.getState("pidToKill");
+
+process.kill(pid);
+```
+
+#### OIDC Token
+
+You can use these methods to interact with the GitHub OIDC provider and get a JWT ID token which would help to get access token from third party cloud providers.
+
+**Method Name**: getIDToken()
+
+**Inputs**
+
+audience : optional
+
+**Outputs**
+
+A [JWT](https://jwt.io/) ID Token
+
+In action's `main.ts`:
+```js
+const core = require('@actions/core');
+async function getIDTokenAction(): Promise<void> {
+  
+   const audience = core.getInput('audience', {required: false})
+   
+   const id_token1 = await core.getIDToken()            // ID Token with default audience
+   const id_token2 = await core.getIDToken(audience)    // ID token with custom audience
+   
+   // this id_token can be used to get access token from third party cloud providers
+}
+getIDTokenAction()
+```
+
+In action's `actions.yml`:
+
+```yaml
+name: 'GetIDToken'
+description: 'Get ID token from Github OIDC provider'
+inputs:
+  audience:  
+    description: 'Audience for which the ID token is intended for'
+    required: false
+outputs:
+  id_token1: 
+    description: 'ID token obtained from OIDC provider'
+  id_token2: 
+    description: 'ID token obtained from OIDC provider'
+runs:
+  using: 'node12'
+  main: 'dist/index.js'
+```
+
+#### Filesystem path helpers
+
+You can use these methods to manipulate file paths across operating systems.
+
+The `toPosixPath` function converts input paths to Posix-style (Linux) paths.
+The `toWin32Path` function converts input paths to Windows-style paths. These
+functions work independently of the underlying runner operating system.
+
+```js
+toPosixPath('\\foo\\bar') // => /foo/bar
+toWin32Path('/foo/bar') // => \foo\bar
+```
+
+The `toPlatformPath` function converts input paths to the expected value on the runner's operating system.
+
+```js
+// On a Windows runner.
+toPlatformPath('/foo/bar') // => \foo\bar
+
+// On a Linux runner.
+toPlatformPath('\\foo\\bar') // => /foo/bar
+```

node_modules/@actions/core/lib/command.d.ts

@@ -0,0 +1,15 @@
+export interface CommandProperties {
+    [key: string]: any;
+}
+/**
+ * Commands
+ *
+ * Command Format:
+ *   ::name key=value,key=value::message
+ *
+ * Examples:
+ *   ::warning::This is the message
+ *   ::set-env name=MY_VAR::some value
+ */
+export declare function issueCommand(command: string, properties: CommandProperties, message: any): void;
+export declare function issue(name: string, message?: string): void;

node_modules/@actions/core/lib/command.js

@@ -0,0 +1,92 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.issue = exports.issueCommand = void 0;
+const os = __importStar(require("os"));
+const utils_1 = require("./utils");
+/**
+ * Commands
+ *
+ * Command Format:
+ *   ::name key=value,key=value::message
+ *
+ * Examples:
+ *   ::warning::This is the message
+ *   ::set-env name=MY_VAR::some value
+ */
+function issueCommand(command, properties, message) {
+    const cmd = new Command(command, properties, message);
+    process.stdout.write(cmd.toString() + os.EOL);
+}
+exports.issueCommand = issueCommand;
+function issue(name, message = '') {
+    issueCommand(name, {}, message);
+}
+exports.issue = issue;
+const CMD_STRING = '::';
+class Command {
+    constructor(command, properties, message) {
+        if (!command) {
+            command = 'missing.command';
+        }
+        this.command = command;
+        this.properties = properties;
+        this.message = message;
+    }
+    toString() {
+        let cmdStr = CMD_STRING + this.command;
+        if (this.properties && Object.keys(this.properties).length > 0) {
+            cmdStr += ' ';
+            let first = true;
+            for (const key in this.properties) {
+                if (this.properties.hasOwnProperty(key)) {
+                    const val = this.properties[key];
+                    if (val) {
+                        if (first) {
+                            first = false;
+                        }
+                        else {
+                            cmdStr += ',';
+                        }
+                        cmdStr += `${key}=${escapeProperty(val)}`;
+                    }
+                }
+            }
+        }
+        cmdStr += `${CMD_STRING}${escapeData(this.message)}`;
+        return cmdStr;
+    }
+}
+function escapeData(s) {
+    return utils_1.toCommandValue(s)
+        .replace(/%/g, '%25')
+        .replace(/\r/g, '%0D')
+        .replace(/\n/g, '%0A');
+}
+function escapeProperty(s) {
+    return utils_1.toCommandValue(s)
+        .replace(/%/g, '%25')
+        .replace(/\r/g, '%0D')
+        .replace(/\n/g, '%0A')
+        .replace(/:/g, '%3A')
+        .replace(/,/g, '%2C');
+}
+//# sourceMappingURL=command.js.map

node_modules/@actions/core/lib/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAwB;AACxB,mCAAsC;AAWtC;;;;;;;;;GASG;AACH,SAAgB,YAAY,CAC1B,OAAe,EACf,UAA6B,EAC7B,OAAY;IAEZ,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAA;AAC/C,CAAC;AAPD,oCAOC;AAED,SAAgB,KAAK,CAAC,IAAY,EAAE,OAAO,GAAG,EAAE;IAC9C,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;AACjC,CAAC;AAFD,sBAEC;AAED,MAAM,UAAU,GAAG,IAAI,CAAA;AAEvB,MAAM,OAAO;IAKX,YAAY,OAAe,EAAE,UAA6B,EAAE,OAAe;QACzE,IAAI,CAAC,OAAO,EAAE;YACZ,OAAO,GAAG,iBAAiB,CAAA;SAC5B;QAED,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAED,QAAQ;QACN,IAAI,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC,OAAO,CAAA;QAEtC,IAAI,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;YAC9D,MAAM,IAAI,GAAG,CAAA;YACb,IAAI,KAAK,GAAG,IAAI,CAAA;YAChB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE;gBACjC,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE;oBACvC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;oBAChC,IAAI,GAAG,EAAE;wBACP,IAAI,KAAK,EAAE;4BACT,KAAK,GAAG,KAAK,CAAA;yBACd;6BAAM;4BACL,MAAM,IAAI,GAAG,CAAA;yBACd;wBAED,MAAM,IAAI,GAAG,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAA;qBAC1C;iBACF;aACF;SACF;QAED,MAAM,IAAI,GAAG,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAA;QACpD,OAAO,MAAM,CAAA;IACf,CAAC;CACF;AAED,SAAS,UAAU,CAAC,CAAM;IACxB,OAAO,sBAAc,CAAC,CAAC,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,SAAS,cAAc,CAAC,CAAM;IAC5B,OAAO,sBAAc,CAAC,CAAC,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AACzB,CAAC"}

node_modules/@actions/core/lib/core.d.ts

@@ -0,0 +1,198 @@
+/**
+ * Interface for getInput options
+ */
+export interface InputOptions {
+    /** Optional. Whether the input is required. If required and not present, will throw. Defaults to false */
+    required?: boolean;
+    /** Optional. Whether leading/trailing whitespace will be trimmed for the input. Defaults to true */
+    trimWhitespace?: boolean;
+}
+/**
+ * The code to exit an action
+ */
+export declare enum ExitCode {
+    /**
+     * A code indicating that the action was successful
+     */
+    Success = 0,
+    /**
+     * A code indicating that the action was a failure
+     */
+    Failure = 1
+}
+/**
+ * Optional properties that can be sent with annotatation commands (notice, error, and warning)
+ * See: https://docs.github.com/en/rest/reference/checks#create-a-check-run for more information about annotations.
+ */
+export interface AnnotationProperties {
+    /**
+     * A title for the annotation.
+     */
+    title?: string;
+    /**
+     * The path of the file for which the annotation should be created.
+     */
+    file?: string;
+    /**
+     * The start line for the annotation.
+     */
+    startLine?: number;
+    /**
+     * The end line for the annotation. Defaults to `startLine` when `startLine` is provided.
+     */
+    endLine?: number;
+    /**
+     * The start column for the annotation. Cannot be sent when `startLine` and `endLine` are different values.
+     */
+    startColumn?: number;
+    /**
+     * The start column for the annotation. Cannot be sent when `startLine` and `endLine` are different values.
+     * Defaults to `startColumn` when `startColumn` is provided.
+     */
+    endColumn?: number;
+}
+/**
+ * Sets env variable for this action and future actions in the job
+ * @param name the name of the variable to set
+ * @param val the value of the variable. Non-string values will be converted to a string via JSON.stringify
+ */
+export declare function exportVariable(name: string, val: any): void;
+/**
+ * Registers a secret which will get masked from logs
+ * @param secret value of the secret
+ */
+export declare function setSecret(secret: string): void;
+/**
+ * Prepends inputPath to the PATH (for this action and future actions)
+ * @param inputPath
+ */
+export declare function addPath(inputPath: string): void;
+/**
+ * Gets the value of an input.
+ * Unless trimWhitespace is set to false in InputOptions, the value is also trimmed.
+ * Returns an empty string if the value is not defined.
+ *
+ * @param     name     name of the input to get
+ * @param     options  optional. See InputOptions.
+ * @returns   string
+ */
+export declare function getInput(name: string, options?: InputOptions): string;
+/**
+ * Gets the values of an multiline input.  Each value is also trimmed.
+ *
+ * @param     name     name of the input to get
+ * @param     options  optional. See InputOptions.
+ * @returns   string[]
+ *
+ */
+export declare function getMultilineInput(name: string, options?: InputOptions): string[];
+/**
+ * Gets the input value of the boolean type in the YAML 1.2 "core schema" specification.
+ * Support boolean input list: `true | True | TRUE | false | False | FALSE` .
+ * The return value is also in boolean type.
+ * ref: https://yaml.org/spec/1.2/spec.html#id2804923
+ *
+ * @param     name     name of the input to get
+ * @param     options  optional. See InputOptions.
+ * @returns   boolean
+ */
+export declare function getBooleanInput(name: string, options?: InputOptions): boolean;
+/**
+ * Sets the value of an output.
+ *
+ * @param     name     name of the output to set
+ * @param     value    value to store. Non-string values will be converted to a string via JSON.stringify
+ */
+export declare function setOutput(name: string, value: any): void;
+/**
+ * Enables or disables the echoing of commands into stdout for the rest of the step.
+ * Echoing is disabled by default if ACTIONS_STEP_DEBUG is not set.
+ *
+ */
+export declare function setCommandEcho(enabled: boolean): void;
+/**
+ * Sets the action status to failed.
+ * When the action exits it will be with an exit code of 1
+ * @param message add error issue message
+ */
+export declare function setFailed(message: string | Error): void;
+/**
+ * Gets whether Actions Step Debug is on or not
+ */
+export declare function isDebug(): boolean;
+/**
+ * Writes debug message to user log
+ * @param message debug message
+ */
+export declare function debug(message: string): void;
+/**
+ * Adds an error issue
+ * @param message error issue message. Errors will be converted to string via toString()
+ * @param properties optional properties to add to the annotation.
+ */
+export declare function error(message: string | Error, properties?: AnnotationProperties): void;
+/**
+ * Adds a warning issue
+ * @param message warning issue message. Errors will be converted to string via toString()
+ * @param properties optional properties to add to the annotation.
+ */
+export declare function warning(message: string | Error, properties?: AnnotationProperties): void;
+/**
+ * Adds a notice issue
+ * @param message notice issue message. Errors will be converted to string via toString()
+ * @param properties optional properties to add to the annotation.
+ */
+export declare function notice(message: string | Error, properties?: AnnotationProperties): void;
+/**
+ * Writes info to log with console.log.
+ * @param message info message
+ */
+export declare function info(message: string): void;
+/**
+ * Begin an output group.
+ *
+ * Output until the next `groupEnd` will be foldable in this group
+ *
+ * @param name The name of the output group
+ */
+export declare function startGroup(name: string): void;
+/**
+ * End an output group.
+ */
+export declare function endGroup(): void;
+/**
+ * Wrap an asynchronous function call in a group.
+ *
+ * Returns the same type as the function itself.
+ *
+ * @param name The name of the group
+ * @param fn The function to wrap in the group
+ */
+export declare function group<T>(name: string, fn: () => Promise<T>): Promise<T>;
+/**
+ * Saves state for current action, the state can only be retrieved by this action's post job execution.
+ *
+ * @param     name     name of the state to store
+ * @param     value    value to store. Non-string values will be converted to a string via JSON.stringify
+ */
+export declare function saveState(name: string, value: any): void;
+/**
+ * Gets the value of an state set by this action's main execution.
+ *
+ * @param     name     name of the state to get
+ * @returns   string
+ */
+export declare function getState(name: string): string;
+export declare function getIDToken(aud?: string): Promise<string>;
+/**
+ * Summary exports
+ */
+export { summary } from './summary';
+/**
+ * @deprecated use core.summary
+ */
+export { markdownSummary } from './summary';
+/**
+ * Path exports
+ */
+export { toPosixPath, toWin32Path, toPlatformPath } from './path-utils';

node_modules/@actions/core/lib/core.js

@@ -0,0 +1,336 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getIDToken = exports.getState = exports.saveState = exports.group = exports.endGroup = exports.startGroup = exports.info = exports.notice = exports.warning = exports.error = exports.debug = exports.isDebug = exports.setFailed = exports.setCommandEcho = exports.setOutput = exports.getBooleanInput = exports.getMultilineInput = exports.getInput = exports.addPath = exports.setSecret = exports.exportVariable = exports.ExitCode = void 0;
+const command_1 = require("./command");
+const file_command_1 = require("./file-command");
+const utils_1 = require("./utils");
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const oidc_utils_1 = require("./oidc-utils");
+/**
+ * The code to exit an action
+ */
+var ExitCode;
+(function (ExitCode) {
+    /**
+     * A code indicating that the action was successful
+     */
+    ExitCode[ExitCode["Success"] = 0] = "Success";
+    /**
+     * A code indicating that the action was a failure
+     */
+    ExitCode[ExitCode["Failure"] = 1] = "Failure";
+})(ExitCode = exports.ExitCode || (exports.ExitCode = {}));
+//-----------------------------------------------------------------------
+// Variables
+//-----------------------------------------------------------------------
+/**
+ * Sets env variable for this action and future actions in the job
+ * @param name the name of the variable to set
+ * @param val the value of the variable. Non-string values will be converted to a string via JSON.stringify
+ */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function exportVariable(name, val) {
+    const convertedVal = utils_1.toCommandValue(val);
+    process.env[name] = convertedVal;
+    const filePath = process.env['GITHUB_ENV'] || '';
+    if (filePath) {
+        return file_command_1.issueFileCommand('ENV', file_command_1.prepareKeyValueMessage(name, val));
+    }
+    command_1.issueCommand('set-env', { name }, convertedVal);
+}
+exports.exportVariable = exportVariable;
+/**
+ * Registers a secret which will get masked from logs
+ * @param secret value of the secret
+ */
+function setSecret(secret) {
+    command_1.issueCommand('add-mask', {}, secret);
+}
+exports.setSecret = setSecret;
+/**
+ * Prepends inputPath to the PATH (for this action and future actions)
+ * @param inputPath
+ */
+function addPath(inputPath) {
+    const filePath = process.env['GITHUB_PATH'] || '';
+    if (filePath) {
+        file_command_1.issueFileCommand('PATH', inputPath);
+    }
+    else {
+        command_1.issueCommand('add-path', {}, inputPath);
+    }
+    process.env['PATH'] = `${inputPath}${path.delimiter}${process.env['PATH']}`;
+}
+exports.addPath = addPath;
+/**
+ * Gets the value of an input.
+ * Unless trimWhitespace is set to false in InputOptions, the value is also trimmed.
+ * Returns an empty string if the value is not defined.
+ *
+ * @param     name     name of the input to get
+ * @param     options  optional. See InputOptions.
+ * @returns   string
+ */
+function getInput(name, options) {
+    const val = process.env[`INPUT_${name.replace(/ /g, '_').toUpperCase()}`] || '';
+    if (options && options.required && !val) {
+        throw new Error(`Input required and not supplied: ${name}`);
+    }
+    if (options && options.trimWhitespace === false) {
+        return val;
+    }
+    return val.trim();
+}
+exports.getInput = getInput;
+/**
+ * Gets the values of an multiline input.  Each value is also trimmed.
+ *
+ * @param     name     name of the input to get
+ * @param     options  optional. See InputOptions.
+ * @returns   string[]
+ *
+ */
+function getMultilineInput(name, options) {
+    const inputs = getInput(name, options)
+        .split('\n')
+        .filter(x => x !== '');
+    if (options && options.trimWhitespace === false) {
+        return inputs;
+    }
+    return inputs.map(input => input.trim());
+}
+exports.getMultilineInput = getMultilineInput;
+/**
+ * Gets the input value of the boolean type in the YAML 1.2 "core schema" specification.
+ * Support boolean input list: `true | True | TRUE | false | False | FALSE` .
+ * The return value is also in boolean type.
+ * ref: https://yaml.org/spec/1.2/spec.html#id2804923
+ *
+ * @param     name     name of the input to get
+ * @param     options  optional. See InputOptions.
+ * @returns   boolean
+ */
+function getBooleanInput(name, options) {
+    const trueValue = ['true', 'True', 'TRUE'];
+    const falseValue = ['false', 'False', 'FALSE'];
+    const val = getInput(name, options);
+    if (trueValue.includes(val))
+        return true;
+    if (falseValue.includes(val))
+        return false;
+    throw new TypeError(`Input does not meet YAML 1.2 "Core Schema" specification: ${name}\n` +
+        `Support boolean input list: \`true | True | TRUE | false | False | FALSE\``);
+}
+exports.getBooleanInput = getBooleanInput;
+/**
+ * Sets the value of an output.
+ *
+ * @param     name     name of the output to set
+ * @param     value    value to store. Non-string values will be converted to a string via JSON.stringify
+ */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function setOutput(name, value) {
+    const filePath = process.env['GITHUB_OUTPUT'] || '';
+    if (filePath) {
+        return file_command_1.issueFileCommand('OUTPUT', file_command_1.prepareKeyValueMessage(name, value));
+    }
+    process.stdout.write(os.EOL);
+    command_1.issueCommand('set-output', { name }, utils_1.toCommandValue(value));
+}
+exports.setOutput = setOutput;
+/**
+ * Enables or disables the echoing of commands into stdout for the rest of the step.
+ * Echoing is disabled by default if ACTIONS_STEP_DEBUG is not set.
+ *
+ */
+function setCommandEcho(enabled) {
+    command_1.issue('echo', enabled ? 'on' : 'off');
+}
+exports.setCommandEcho = setCommandEcho;
+//-----------------------------------------------------------------------
+// Results
+//-----------------------------------------------------------------------
+/**
+ * Sets the action status to failed.
+ * When the action exits it will be with an exit code of 1
+ * @param message add error issue message
+ */
+function setFailed(message) {
+    process.exitCode = ExitCode.Failure;
+    error(message);
+}
+exports.setFailed = setFailed;
+//-----------------------------------------------------------------------
+// Logging Commands
+//-----------------------------------------------------------------------
+/**
+ * Gets whether Actions Step Debug is on or not
+ */
+function isDebug() {
+    return process.env['RUNNER_DEBUG'] === '1';
+}
+exports.isDebug = isDebug;
+/**
+ * Writes debug message to user log
+ * @param message debug message
+ */
+function debug(message) {
+    command_1.issueCommand('debug', {}, message);
+}
+exports.debug = debug;
+/**
+ * Adds an error issue
+ * @param message error issue message. Errors will be converted to string via toString()
+ * @param properties optional properties to add to the annotation.
+ */
+function error(message, properties = {}) {
+    command_1.issueCommand('error', utils_1.toCommandProperties(properties), message instanceof Error ? message.toString() : message);
+}
+exports.error = error;
+/**
+ * Adds a warning issue
+ * @param message warning issue message. Errors will be converted to string via toString()
+ * @param properties optional properties to add to the annotation.
+ */
+function warning(message, properties = {}) {
+    command_1.issueCommand('warning', utils_1.toCommandProperties(properties), message instanceof Error ? message.toString() : message);
+}
+exports.warning = warning;
+/**
+ * Adds a notice issue
+ * @param message notice issue message. Errors will be converted to string via toString()
+ * @param properties optional properties to add to the annotation.
+ */
+function notice(message, properties = {}) {
+    command_1.issueCommand('notice', utils_1.toCommandProperties(properties), message instanceof Error ? message.toString() : message);
+}
+exports.notice = notice;
+/**
+ * Writes info to log with console.log.
+ * @param message info message
+ */
+function info(message) {
+    process.stdout.write(message + os.EOL);
+}
+exports.info = info;
+/**
+ * Begin an output group.
+ *
+ * Output until the next `groupEnd` will be foldable in this group
+ *
+ * @param name The name of the output group
+ */
+function startGroup(name) {
+    command_1.issue('group', name);
+}
+exports.startGroup = startGroup;
+/**
+ * End an output group.
+ */
+function endGroup() {
+    command_1.issue('endgroup');
+}
+exports.endGroup = endGroup;
+/**
+ * Wrap an asynchronous function call in a group.
+ *
+ * Returns the same type as the function itself.
+ *
+ * @param name The name of the group
+ * @param fn The function to wrap in the group
+ */
+function group(name, fn) {
+    return __awaiter(this, void 0, void 0, function* () {
+        startGroup(name);
+        let result;
+        try {
+            result = yield fn();
+        }
+        finally {
+            endGroup();
+        }
+        return result;
+    });
+}
+exports.group = group;
+//-----------------------------------------------------------------------
+// Wrapper action state
+//-----------------------------------------------------------------------
+/**
+ * Saves state for current action, the state can only be retrieved by this action's post job execution.
+ *
+ * @param     name     name of the state to store
+ * @param     value    value to store. Non-string values will be converted to a string via JSON.stringify
+ */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function saveState(name, value) {
+    const filePath = process.env['GITHUB_STATE'] || '';
+    if (filePath) {
+        return file_command_1.issueFileCommand('STATE', file_command_1.prepareKeyValueMessage(name, value));
+    }
+    command_1.issueCommand('save-state', { name }, utils_1.toCommandValue(value));
+}
+exports.saveState = saveState;
+/**
+ * Gets the value of an state set by this action's main execution.
+ *
+ * @param     name     name of the state to get
+ * @returns   string
+ */
+function getState(name) {
+    return process.env[`STATE_${name}`] || '';
+}
+exports.getState = getState;
+function getIDToken(aud) {
+    return __awaiter(this, void 0, void 0, function* () {
+        return yield oidc_utils_1.OidcClient.getIDToken(aud);
+    });
+}
+exports.getIDToken = getIDToken;
+/**
+ * Summary exports
+ */
+var summary_1 = require("./summary");
+Object.defineProperty(exports, "summary", { enumerable: true, get: function () { return summary_1.summary; } });
+/**
+ * @deprecated use core.summary
+ */
+var summary_2 = require("./summary");
+Object.defineProperty(exports, "markdownSummary", { enumerable: true, get: function () { return summary_2.markdownSummary; } });
+/**
+ * Path exports
+ */
+var path_utils_1 = require("./path-utils");
+Object.defineProperty(exports, "toPosixPath", { enumerable: true, get: function () { return path_utils_1.toPosixPath; } });
+Object.defineProperty(exports, "toWin32Path", { enumerable: true, get: function () { return path_utils_1.toWin32Path; } });
+Object.defineProperty(exports, "toPlatformPath", { enumerable: true, get: function () { return path_utils_1.toPlatformPath; } });
+//# sourceMappingURL=core.js.map

node_modules/@actions/core/lib/file-command.d.ts

@@ -0,0 +1,2 @@
+export declare function issueFileCommand(command: string, message: any): void;
+export declare function prepareKeyValueMessage(key: string, value: any): string;

node_modules/@actions/core/lib/file-command.js

@@ -0,0 +1,58 @@
+"use strict";
+// For internal use, subject to change.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.prepareKeyValueMessage = exports.issueFileCommand = void 0;
+// We use any as a valid input type
+/* eslint-disable @typescript-eslint/no-explicit-any */
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const uuid_1 = require("uuid");
+const utils_1 = require("./utils");
+function issueFileCommand(command, message) {
+    const filePath = process.env[`GITHUB_${command}`];
+    if (!filePath) {
+        throw new Error(`Unable to find environment variable for file command ${command}`);
+    }
+    if (!fs.existsSync(filePath)) {
+        throw new Error(`Missing file at path: ${filePath}`);
+    }
+    fs.appendFileSync(filePath, `${utils_1.toCommandValue(message)}${os.EOL}`, {
+        encoding: 'utf8'
+    });
+}
+exports.issueFileCommand = issueFileCommand;
+function prepareKeyValueMessage(key, value) {
+    const delimiter = `ghadelimiter_${uuid_1.v4()}`;
+    const convertedValue = utils_1.toCommandValue(value);
+    // These should realistically never happen, but just in case someone finds a
+    // way to exploit uuid generation let's not allow keys or values that contain
+    // the delimiter.
+    if (key.includes(delimiter)) {
+        throw new Error(`Unexpected input: name should not contain the delimiter "${delimiter}"`);
+    }
+    if (convertedValue.includes(delimiter)) {
+        throw new Error(`Unexpected input: value should not contain the delimiter "${delimiter}"`);
+    }
+    return `${key}<<${delimiter}${os.EOL}${convertedValue}${os.EOL}${delimiter}`;
+}
+exports.prepareKeyValueMessage = prepareKeyValueMessage;
+//# sourceMappingURL=file-command.js.map

node_modules/@actions/core/lib/file-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-command.js","sourceRoot":"","sources":["../src/file-command.ts"],"names":[],"mappings":";AAAA,uCAAuC;;;;;;;;;;;;;;;;;;;;;;AAEvC,mCAAmC;AACnC,uDAAuD;AAEvD,uCAAwB;AACxB,uCAAwB;AACxB,+BAAiC;AACjC,mCAAsC;AAEtC,SAAgB,gBAAgB,CAAC,OAAe,EAAE,OAAY;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,EAAE,CAAC,CAAA;IACjD,IAAI,CAAC,QAAQ,EAAE;QACb,MAAM,IAAI,KAAK,CACb,wDAAwD,OAAO,EAAE,CAClE,CAAA;KACF;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;QAC5B,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAA;KACrD;IAED,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,sBAAc,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE;QACjE,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAA;AACJ,CAAC;AAdD,4CAcC;AAED,SAAgB,sBAAsB,CAAC,GAAW,EAAE,KAAU;IAC5D,MAAM,SAAS,GAAG,gBAAgB,SAAM,EAAE,EAAE,CAAA;IAC5C,MAAM,cAAc,GAAG,sBAAc,CAAC,KAAK,CAAC,CAAA;IAE5C,4EAA4E;IAC5E,6EAA6E;IAC7E,iBAAiB;IACjB,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;QAC3B,MAAM,IAAI,KAAK,CACb,4DAA4D,SAAS,GAAG,CACzE,CAAA;KACF;IAED,IAAI,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;QACtC,MAAM,IAAI,KAAK,CACb,6DAA6D,SAAS,GAAG,CAC1E,CAAA;KACF;IAED,OAAO,GAAG,GAAG,KAAK,SAAS,GAAG,EAAE,CAAC,GAAG,GAAG,cAAc,GAAG,EAAE,CAAC,GAAG,GAAG,SAAS,EAAE,CAAA;AAC9E,CAAC;AApBD,wDAoBC"}

node_modules/@actions/core/lib/oidc-utils.d.ts

@@ -0,0 +1,7 @@
+export declare class OidcClient {
+    private static createHttpClient;
+    private static getRequestToken;
+    private static getIDTokenUrl;
+    private static getCall;
+    static getIDToken(audience?: string): Promise<string>;
+}

node_modules/@actions/core/lib/oidc-utils.js

@@ -0,0 +1,77 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OidcClient = void 0;
+const http_client_1 = require("@actions/http-client");
+const auth_1 = require("@actions/http-client/lib/auth");
+const core_1 = require("./core");
+class OidcClient {
+    static createHttpClient(allowRetry = true, maxRetry = 10) {
+        const requestOptions = {
+            allowRetries: allowRetry,
+            maxRetries: maxRetry
+        };
+        return new http_client_1.HttpClient('actions/oidc-client', [new auth_1.BearerCredentialHandler(OidcClient.getRequestToken())], requestOptions);
+    }
+    static getRequestToken() {
+        const token = process.env['ACTIONS_ID_TOKEN_REQUEST_TOKEN'];
+        if (!token) {
+            throw new Error('Unable to get ACTIONS_ID_TOKEN_REQUEST_TOKEN env variable');
+        }
+        return token;
+    }
+    static getIDTokenUrl() {
+        const runtimeUrl = process.env['ACTIONS_ID_TOKEN_REQUEST_URL'];
+        if (!runtimeUrl) {
+            throw new Error('Unable to get ACTIONS_ID_TOKEN_REQUEST_URL env variable');
+        }
+        return runtimeUrl;
+    }
+    static getCall(id_token_url) {
+        var _a;
+        return __awaiter(this, void 0, void 0, function* () {
+            const httpclient = OidcClient.createHttpClient();
+            const res = yield httpclient
+                .getJson(id_token_url)
+                .catch(error => {
+                throw new Error(`Failed to get ID Token. \n 
+        Error Code : ${error.statusCode}\n 
+        Error Message: ${error.result.message}`);
+            });
+            const id_token = (_a = res.result) === null || _a === void 0 ? void 0 : _a.value;
+            if (!id_token) {
+                throw new Error('Response json body do not have ID Token field');
+            }
+            return id_token;
+        });
+    }
+    static getIDToken(audience) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                // New ID Token is requested from action service
+                let id_token_url = OidcClient.getIDTokenUrl();
+                if (audience) {
+                    const encodedAudience = encodeURIComponent(audience);
+                    id_token_url = `${id_token_url}&audience=${encodedAudience}`;
+                }
+                core_1.debug(`ID token url is ${id_token_url}`);
+                const id_token = yield OidcClient.getCall(id_token_url);
+                core_1.setSecret(id_token);
+                return id_token;
+            }
+            catch (error) {
+                throw new Error(`Error message: ${error.message}`);
+            }
+        });
+    }
+}
+exports.OidcClient = OidcClient;
+//# sourceMappingURL=oidc-utils.js.map

node_modules/@actions/core/lib/oidc-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-utils.js","sourceRoot":"","sources":["../src/oidc-utils.ts"],"names":[],"mappings":";;;;;;;;;;;;AAGA,sDAA+C;AAC/C,wDAAqE;AACrE,iCAAuC;AAKvC,MAAa,UAAU;IACb,MAAM,CAAC,gBAAgB,CAC7B,UAAU,GAAG,IAAI,EACjB,QAAQ,GAAG,EAAE;QAEb,MAAM,cAAc,GAAmB;YACrC,YAAY,EAAE,UAAU;YACxB,UAAU,EAAE,QAAQ;SACrB,CAAA;QAED,OAAO,IAAI,wBAAU,CACnB,qBAAqB,EACrB,CAAC,IAAI,8BAAuB,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC,EAC3D,cAAc,CACf,CAAA;IACH,CAAC;IAEO,MAAM,CAAC,eAAe;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAA;QAC3D,IAAI,CAAC,KAAK,EAAE;YACV,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAA;SACF;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,MAAM,CAAC,aAAa;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAA;QAC9D,IAAI,CAAC,UAAU,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;SAC3E;QACD,OAAO,UAAU,CAAA;IACnB,CAAC;IAEO,MAAM,CAAO,OAAO,CAAC,YAAoB;;;YAC/C,MAAM,UAAU,GAAG,UAAU,CAAC,gBAAgB,EAAE,CAAA;YAEhD,MAAM,GAAG,GAAG,MAAM,UAAU;iBACzB,OAAO,CAAgB,YAAY,CAAC;iBACpC,KAAK,CAAC,KAAK,CAAC,EAAE;gBACb,MAAM,IAAI,KAAK,CACb;uBACa,KAAK,CAAC,UAAU;yBACd,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CACtC,CAAA;YACH,CAAC,CAAC,CAAA;YAEJ,MAAM,QAAQ,SAAG,GAAG,CAAC,MAAM,0CAAE,KAAK,CAAA;YAClC,IAAI,CAAC,QAAQ,EAAE;gBACb,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;aACjE;YACD,OAAO,QAAQ,CAAA;;KAChB;IAED,MAAM,CAAO,UAAU,CAAC,QAAiB;;YACvC,IAAI;gBACF,gDAAgD;gBAChD,IAAI,YAAY,GAAW,UAAU,CAAC,aAAa,EAAE,CAAA;gBACrD,IAAI,QAAQ,EAAE;oBACZ,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;oBACpD,YAAY,GAAG,GAAG,YAAY,aAAa,eAAe,EAAE,CAAA;iBAC7D;gBAED,YAAK,CAAC,mBAAmB,YAAY,EAAE,CAAC,CAAA;gBAExC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;gBACvD,gBAAS,CAAC,QAAQ,CAAC,CAAA;gBACnB,OAAO,QAAQ,CAAA;aAChB;YAAC,OAAO,KAAK,EAAE;gBACd,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;aACnD;QACH,CAAC;KAAA;CACF;AAzED,gCAyEC"}

node_modules/@actions/core/lib/path-utils.d.ts

@@ -0,0 +1,25 @@
+/**
+ * toPosixPath converts the given path to the posix form. On Windows, \\ will be
+ * replaced with /.
+ *
+ * @param pth. Path to transform.
+ * @return string Posix path.
+ */
+export declare function toPosixPath(pth: string): string;
+/**
+ * toWin32Path converts the given path to the win32 form. On Linux, / will be
+ * replaced with \\.
+ *
+ * @param pth. Path to transform.
+ * @return string Win32 path.
+ */
+export declare function toWin32Path(pth: string): string;
+/**
+ * toPlatformPath converts the given path to a platform-specific path. It does
+ * this by replacing instances of / and \ with the platform-specific path
+ * separator.
+ *
+ * @param pth The path to platformize.
+ * @return string The platform-specific path.
+ */
+export declare function toPlatformPath(pth: string): string;

node_modules/@actions/core/lib/path-utils.js

@@ -0,0 +1,58 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toPlatformPath = exports.toWin32Path = exports.toPosixPath = void 0;
+const path = __importStar(require("path"));
+/**
+ * toPosixPath converts the given path to the posix form. On Windows, \\ will be
+ * replaced with /.
+ *
+ * @param pth. Path to transform.
+ * @return string Posix path.
+ */
+function toPosixPath(pth) {
+    return pth.replace(/[\\]/g, '/');
+}
+exports.toPosixPath = toPosixPath;
+/**
+ * toWin32Path converts the given path to the win32 form. On Linux, / will be
+ * replaced with \\.
+ *
+ * @param pth. Path to transform.
+ * @return string Win32 path.
+ */
+function toWin32Path(pth) {
+    return pth.replace(/[/]/g, '\\');
+}
+exports.toWin32Path = toWin32Path;
+/**
+ * toPlatformPath converts the given path to a platform-specific path. It does
+ * this by replacing instances of / and \ with the platform-specific path
+ * separator.
+ *
+ * @param pth The path to platformize.
+ * @return string The platform-specific path.
+ */
+function toPlatformPath(pth) {
+    return pth.replace(/[/\\]/g, path.sep);
+}
+exports.toPlatformPath = toPlatformPath;
+//# sourceMappingURL=path-utils.js.map

node_modules/@actions/core/lib/path-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-utils.js","sourceRoot":"","sources":["../src/path-utils.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA4B;AAE5B;;;;;;GAMG;AACH,SAAgB,WAAW,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;AAClC,CAAC;AAFD,kCAEC;AAED;;;;;;GAMG;AACH,SAAgB,WAAW,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AAClC,CAAC;AAFD,kCAEC;AAED;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,GAAW;IACxC,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;AACxC,CAAC;AAFD,wCAEC"}

node_modules/@actions/core/lib/summary.d.ts

@@ -0,0 +1,202 @@
+export declare const SUMMARY_ENV_VAR = "GITHUB_STEP_SUMMARY";
+export declare const SUMMARY_DOCS_URL = "https://docs.github.com/actions/using-workflows/workflow-commands-for-github-actions#adding-a-job-summary";
+export declare type SummaryTableRow = (SummaryTableCell | string)[];
+export interface SummaryTableCell {
+    /**
+     * Cell content
+     */
+    data: string;
+    /**
+     * Render cell as header
+     * (optional) default: false
+     */
+    header?: boolean;
+    /**
+     * Number of columns the cell extends
+     * (optional) default: '1'
+     */
+    colspan?: string;
+    /**
+     * Number of rows the cell extends
+     * (optional) default: '1'
+     */
+    rowspan?: string;
+}
+export interface SummaryImageOptions {
+    /**
+     * The width of the image in pixels. Must be an integer without a unit.
+     * (optional)
+     */
+    width?: string;
+    /**
+     * The height of the image in pixels. Must be an integer without a unit.
+     * (optional)
+     */
+    height?: string;
+}
+export interface SummaryWriteOptions {
+    /**
+     * Replace all existing content in summary file with buffer contents
+     * (optional) default: false
+     */
+    overwrite?: boolean;
+}
+declare class Summary {
+    private _buffer;
+    private _filePath?;
+    constructor();
+    /**
+     * Finds the summary file path from the environment, rejects if env var is not found or file does not exist
+     * Also checks r/w permissions.
+     *
+     * @returns step summary file path
+     */
+    private filePath;
+    /**
+     * Wraps content in an HTML tag, adding any HTML attributes
+     *
+     * @param {string} tag HTML tag to wrap
+     * @param {string | null} content content within the tag
+     * @param {[attribute: string]: string} attrs key-value list of HTML attributes to add
+     *
+     * @returns {string} content wrapped in HTML element
+     */
+    private wrap;
+    /**
+     * Writes text in the buffer to the summary buffer file and empties buffer. Will append by default.
+     *
+     * @param {SummaryWriteOptions} [options] (optional) options for write operation
+     *
+     * @returns {Promise<Summary>} summary instance
+     */
+    write(options?: SummaryWriteOptions): Promise<Summary>;
+    /**
+     * Clears the summary buffer and wipes the summary file
+     *
+     * @returns {Summary} summary instance
+     */
+    clear(): Promise<Summary>;
+    /**
+     * Returns the current summary buffer as a string
+     *
+     * @returns {string} string of summary buffer
+     */
+    stringify(): string;
+    /**
+     * If the summary buffer is empty
+     *
+     * @returns {boolen} true if the buffer is empty
+     */
+    isEmptyBuffer(): boolean;
+    /**
+     * Resets the summary buffer without writing to summary file
+     *
+     * @returns {Summary} summary instance
+     */
+    emptyBuffer(): Summary;
+    /**
+     * Adds raw text to the summary buffer
+     *
+     * @param {string} text content to add
+     * @param {boolean} [addEOL=false] (optional) append an EOL to the raw text (default: false)
+     *
+     * @returns {Summary} summary instance
+     */
+    addRaw(text: string, addEOL?: boolean): Summary;
+    /**
+     * Adds the operating system-specific end-of-line marker to the buffer
+     *
+     * @returns {Summary} summary instance
+     */
+    addEOL(): Summary;
+    /**
+     * Adds an HTML codeblock to the summary buffer
+     *
+     * @param {string} code content to render within fenced code block
+     * @param {string} lang (optional) language to syntax highlight code
+     *
+     * @returns {Summary} summary instance
+     */
+    addCodeBlock(code: string, lang?: string): Summary;
+    /**
+     * Adds an HTML list to the summary buffer
+     *
+     * @param {string[]} items list of items to render
+     * @param {boolean} [ordered=false] (optional) if the rendered list should be ordered or not (default: false)
+     *
+     * @returns {Summary} summary instance
+     */
+    addList(items: string[], ordered?: boolean): Summary;
+    /**
+     * Adds an HTML table to the summary buffer
+     *
+     * @param {SummaryTableCell[]} rows table rows
+     *
+     * @returns {Summary} summary instance
+     */
+    addTable(rows: SummaryTableRow[]): Summary;
+    /**
+     * Adds a collapsable HTML details element to the summary buffer
+     *
+     * @param {string} label text for the closed state
+     * @param {string} content collapsable content
+     *
+     * @returns {Summary} summary instance
+     */
+    addDetails(label: string, content: string): Summary;
+    /**
+     * Adds an HTML image tag to the summary buffer
+     *
+     * @param {string} src path to the image you to embed
+     * @param {string} alt text description of the image
+     * @param {SummaryImageOptions} options (optional) addition image attributes
+     *
+     * @returns {Summary} summary instance
+     */
+    addImage(src: string, alt: string, options?: SummaryImageOptions): Summary;
+    /**
+     * Adds an HTML section heading element
+     *
+     * @param {string} text heading text
+     * @param {number | string} [level=1] (optional) the heading level, default: 1
+     *
+     * @returns {Summary} summary instance
+     */
+    addHeading(text: string, level?: number | string): Summary;
+    /**
+     * Adds an HTML thematic break (<hr>) to the summary buffer
+     *
+     * @returns {Summary} summary instance
+     */
+    addSeparator(): Summary;
+    /**
+     * Adds an HTML line break (<br>) to the summary buffer
+     *
+     * @returns {Summary} summary instance
+     */
+    addBreak(): Summary;
+    /**
+     * Adds an HTML blockquote to the summary buffer
+     *
+     * @param {string} text quote text
+     * @param {string} cite (optional) citation url
+     *
+     * @returns {Summary} summary instance
+     */
+    addQuote(text: string, cite?: string): Summary;
+    /**
+     * Adds an HTML anchor tag to the summary buffer
+     *
+     * @param {string} text link text/content
+     * @param {string} href hyperlink
+     *
+     * @returns {Summary} summary instance
+     */
+    addLink(text: string, href: string): Summary;
+}
+/**
+ * @deprecated use `core.summary`
+ */
+export declare const markdownSummary: Summary;
+export declare const summary: Summary;
+export {};

node_modules/@actions/core/lib/summary.js

@@ -0,0 +1,283 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.summary = exports.markdownSummary = exports.SUMMARY_DOCS_URL = exports.SUMMARY_ENV_VAR = void 0;
+const os_1 = require("os");
+const fs_1 = require("fs");
+const { access, appendFile, writeFile } = fs_1.promises;
+exports.SUMMARY_ENV_VAR = 'GITHUB_STEP_SUMMARY';
+exports.SUMMARY_DOCS_URL = 'https://docs.github.com/actions/using-workflows/workflow-commands-for-github-actions#adding-a-job-summary';
+class Summary {
+    constructor() {
+        this._buffer = '';
+    }
+    /**
+     * Finds the summary file path from the environment, rejects if env var is not found or file does not exist
+     * Also checks r/w permissions.
+     *
+     * @returns step summary file path
+     */
+    filePath() {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (this._filePath) {
+                return this._filePath;
+            }
+            const pathFromEnv = process.env[exports.SUMMARY_ENV_VAR];
+            if (!pathFromEnv) {
+                throw new Error(`Unable to find environment variable for $${exports.SUMMARY_ENV_VAR}. Check if your runtime environment supports job summaries.`);
+            }
+            try {
+                yield access(pathFromEnv, fs_1.constants.R_OK | fs_1.constants.W_OK);
+            }
+            catch (_a) {
+                throw new Error(`Unable to access summary file: '${pathFromEnv}'. Check if the file has correct read/write permissions.`);
+            }
+            this._filePath = pathFromEnv;
+            return this._filePath;
+        });
+    }
+    /**
+     * Wraps content in an HTML tag, adding any HTML attributes
+     *
+     * @param {string} tag HTML tag to wrap
+     * @param {string | null} content content within the tag
+     * @param {[attribute: string]: string} attrs key-value list of HTML attributes to add
+     *
+     * @returns {string} content wrapped in HTML element
+     */
+    wrap(tag, content, attrs = {}) {
+        const htmlAttrs = Object.entries(attrs)
+            .map(([key, value]) => ` ${key}="${value}"`)
+            .join('');
+        if (!content) {
+            return `<${tag}${htmlAttrs}>`;
+        }
+        return `<${tag}${htmlAttrs}>${content}</${tag}>`;
+    }
+    /**
+     * Writes text in the buffer to the summary buffer file and empties buffer. Will append by default.
+     *
+     * @param {SummaryWriteOptions} [options] (optional) options for write operation
+     *
+     * @returns {Promise<Summary>} summary instance
+     */
+    write(options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const overwrite = !!(options === null || options === void 0 ? void 0 : options.overwrite);
+            const filePath = yield this.filePath();
+            const writeFunc = overwrite ? writeFile : appendFile;
+            yield writeFunc(filePath, this._buffer, { encoding: 'utf8' });
+            return this.emptyBuffer();
+        });
+    }
+    /**
+     * Clears the summary buffer and wipes the summary file
+     *
+     * @returns {Summary} summary instance
+     */
+    clear() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.emptyBuffer().write({ overwrite: true });
+        });
+    }
+    /**
+     * Returns the current summary buffer as a string
+     *
+     * @returns {string} string of summary buffer
+     */
+    stringify() {
+        return this._buffer;
+    }
+    /**
+     * If the summary buffer is empty
+     *
+     * @returns {boolen} true if the buffer is empty
+     */
+    isEmptyBuffer() {
+        return this._buffer.length === 0;
+    }
+    /**
+     * Resets the summary buffer without writing to summary file
+     *
+     * @returns {Summary} summary instance
+     */
+    emptyBuffer() {
+        this._buffer = '';
+        return this;
+    }
+    /**
+     * Adds raw text to the summary buffer
+     *
+     * @param {string} text content to add
+     * @param {boolean} [addEOL=false] (optional) append an EOL to the raw text (default: false)
+     *
+     * @returns {Summary} summary instance
+     */
+    addRaw(text, addEOL = false) {
+        this._buffer += text;
+        return addEOL ? this.addEOL() : this;
+    }
+    /**
+     * Adds the operating system-specific end-of-line marker to the buffer
+     *
+     * @returns {Summary} summary instance
+     */
+    addEOL() {
+        return this.addRaw(os_1.EOL);
+    }
+    /**
+     * Adds an HTML codeblock to the summary buffer
+     *
+     * @param {string} code content to render within fenced code block
+     * @param {string} lang (optional) language to syntax highlight code
+     *
+     * @returns {Summary} summary instance
+     */
+    addCodeBlock(code, lang) {
+        const attrs = Object.assign({}, (lang && { lang }));
+        const element = this.wrap('pre', this.wrap('code', code), attrs);
+        return this.addRaw(element).addEOL();
+    }
+    /**
+     * Adds an HTML list to the summary buffer
+     *
+     * @param {string[]} items list of items to render
+     * @param {boolean} [ordered=false] (optional) if the rendered list should be ordered or not (default: false)
+     *
+     * @returns {Summary} summary instance
+     */
+    addList(items, ordered = false) {
+        const tag = ordered ? 'ol' : 'ul';
+        const listItems = items.map(item => this.wrap('li', item)).join('');
+        const element = this.wrap(tag, listItems);
+        return this.addRaw(element).addEOL();
+    }
+    /**
+     * Adds an HTML table to the summary buffer
+     *
+     * @param {SummaryTableCell[]} rows table rows
+     *
+     * @returns {Summary} summary instance
+     */
+    addTable(rows) {
+        const tableBody = rows
+            .map(row => {
+            const cells = row
+                .map(cell => {
+                if (typeof cell === 'string') {
+                    return this.wrap('td', cell);
+                }
+                const { header, data, colspan, rowspan } = cell;
+                const tag = header ? 'th' : 'td';
+                const attrs = Object.assign(Object.assign({}, (colspan && { colspan })), (rowspan && { rowspan }));
+                return this.wrap(tag, data, attrs);
+            })
+                .join('');
+            return this.wrap('tr', cells);
+        })
+            .join('');
+        const element = this.wrap('table', tableBody);
+        return this.addRaw(element).addEOL();
+    }
+    /**
+     * Adds a collapsable HTML details element to the summary buffer
+     *
+     * @param {string} label text for the closed state
+     * @param {string} content collapsable content
+     *
+     * @returns {Summary} summary instance
+     */
+    addDetails(label, content) {
+        const element = this.wrap('details', this.wrap('summary', label) + content);
+        return this.addRaw(element).addEOL();
+    }
+    /**
+     * Adds an HTML image tag to the summary buffer
+     *
+     * @param {string} src path to the image you to embed
+     * @param {string} alt text description of the image
+     * @param {SummaryImageOptions} options (optional) addition image attributes
+     *
+     * @returns {Summary} summary instance
+     */
+    addImage(src, alt, options) {
+        const { width, height } = options || {};
+        const attrs = Object.assign(Object.assign({}, (width && { width })), (height && { height }));
+        const element = this.wrap('img', null, Object.assign({ src, alt }, attrs));
+        return this.addRaw(element).addEOL();
+    }
+    /**
+     * Adds an HTML section heading element
+     *
+     * @param {string} text heading text
+     * @param {number | string} [level=1] (optional) the heading level, default: 1
+     *
+     * @returns {Summary} summary instance
+     */
+    addHeading(text, level) {
+        const tag = `h${level}`;
+        const allowedTag = ['h1', 'h2', 'h3', 'h4', 'h5', 'h6'].includes(tag)
+            ? tag
+            : 'h1';
+        const element = this.wrap(allowedTag, text);
+        return this.addRaw(element).addEOL();
+    }
+    /**
+     * Adds an HTML thematic break (<hr>) to the summary buffer
+     *
+     * @returns {Summary} summary instance
+     */
+    addSeparator() {
+        const element = this.wrap('hr', null);
+        return this.addRaw(element).addEOL();
+    }
+    /**
+     * Adds an HTML line break (<br>) to the summary buffer
+     *
+     * @returns {Summary} summary instance
+     */
+    addBreak() {
+        const element = this.wrap('br', null);
+        return this.addRaw(element).addEOL();
+    }
+    /**
+     * Adds an HTML blockquote to the summary buffer
+     *
+     * @param {string} text quote text
+     * @param {string} cite (optional) citation url
+     *
+     * @returns {Summary} summary instance
+     */
+    addQuote(text, cite) {
+        const attrs = Object.assign({}, (cite && { cite }));
+        const element = this.wrap('blockquote', text, attrs);
+        return this.addRaw(element).addEOL();
+    }
+    /**
+     * Adds an HTML anchor tag to the summary buffer
+     *
+     * @param {string} text link text/content
+     * @param {string} href hyperlink
+     *
+     * @returns {Summary} summary instance
+     */
+    addLink(text, href) {
+        const element = this.wrap('a', text, { href });
+        return this.addRaw(element).addEOL();
+    }
+}
+const _summary = new Summary();
+/**
+ * @deprecated use `core.summary`
+ */
+exports.markdownSummary = _summary;
+exports.summary = _summary;
+//# sourceMappingURL=summary.js.map

node_modules/@actions/core/lib/utils.d.ts

@@ -0,0 +1,14 @@
+import { AnnotationProperties } from './core';
+import { CommandProperties } from './command';
+/**
+ * Sanitizes an input into a string so it can be passed into issueCommand safely
+ * @param input input to sanitize into a string
+ */
+export declare function toCommandValue(input: any): string;
+/**
+ *
+ * @param annotationProperties
+ * @returns The command properties to send with the actual annotation command
+ * See IssueCommandProperties: https://github.com/actions/runner/blob/main/src/Runner.Worker/ActionCommandManager.cs#L646
+ */
+export declare function toCommandProperties(annotationProperties: AnnotationProperties): CommandProperties;

node_modules/@actions/core/lib/utils.js

@@ -0,0 +1,40 @@
+"use strict";
+// We use any as a valid input type
+/* eslint-disable @typescript-eslint/no-explicit-any */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toCommandProperties = exports.toCommandValue = void 0;
+/**
+ * Sanitizes an input into a string so it can be passed into issueCommand safely
+ * @param input input to sanitize into a string
+ */
+function toCommandValue(input) {
+    if (input === null || input === undefined) {
+        return '';
+    }
+    else if (typeof input === 'string' || input instanceof String) {
+        return input;
+    }
+    return JSON.stringify(input);
+}
+exports.toCommandValue = toCommandValue;
+/**
+ *
+ * @param annotationProperties
+ * @returns The command properties to send with the actual annotation command
+ * See IssueCommandProperties: https://github.com/actions/runner/blob/main/src/Runner.Worker/ActionCommandManager.cs#L646
+ */
+function toCommandProperties(annotationProperties) {
+    if (!Object.keys(annotationProperties).length) {
+        return {};
+    }
+    return {
+        title: annotationProperties.title,
+        file: annotationProperties.file,
+        line: annotationProperties.startLine,
+        endLine: annotationProperties.endLine,
+        col: annotationProperties.startColumn,
+        endColumn: annotationProperties.endColumn
+    };
+}
+exports.toCommandProperties = toCommandProperties;
+//# sourceMappingURL=utils.js.map

node_modules/@actions/core/lib/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":";AAAA,mCAAmC;AACnC,uDAAuD;;;AAKvD;;;GAGG;AACH,SAAgB,cAAc,CAAC,KAAU;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE;QACzC,OAAO,EAAE,CAAA;KACV;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,MAAM,EAAE;QAC/D,OAAO,KAAe,CAAA;KACvB;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;AAC9B,CAAC;AAPD,wCAOC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CACjC,oBAA0C;IAE1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,MAAM,EAAE;QAC7C,OAAO,EAAE,CAAA;KACV;IAED,OAAO;QACL,KAAK,EAAE,oBAAoB,CAAC,KAAK;QACjC,IAAI,EAAE,oBAAoB,CAAC,IAAI;QAC/B,IAAI,EAAE,oBAAoB,CAAC,SAAS;QACpC,OAAO,EAAE,oBAAoB,CAAC,OAAO;QACrC,GAAG,EAAE,oBAAoB,CAAC,WAAW;QACrC,SAAS,EAAE,oBAAoB,CAAC,SAAS;KAC1C,CAAA;AACH,CAAC;AAfD,kDAeC"}

node_modules/@actions/core/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@actions/core",
+  "version": "1.10.0",
+  "description": "Actions core lib",
+  "keywords": [
+    "github",
+    "actions",
+    "core"
+  ],
+  "homepage": "https://github.com/actions/toolkit/tree/main/packages/core",
+  "license": "MIT",
+  "main": "lib/core.js",
+  "types": "lib/core.d.ts",
+  "directories": {
+    "lib": "lib",
+    "test": "__tests__"
+  },
+  "files": [
+    "lib",
+    "!.DS_Store"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/actions/toolkit.git",
+    "directory": "packages/core"
+  },
+  "scripts": {
+    "audit-moderate": "npm install && npm audit --json --audit-level=moderate > audit.json",
+    "test": "echo \"Error: run tests from root\" && exit 1",
+    "tsc": "tsc"
+  },
+  "bugs": {
+    "url": "https://github.com/actions/toolkit/issues"
+  },
+  "dependencies": {
+    "@actions/http-client": "^2.0.1",
+    "uuid": "^8.3.2"
+  },
+  "devDependencies": {
+    "@types/node": "^12.0.2",
+    "@types/uuid": "^8.3.4"
+  }
+}

node_modules/@actions/http-client/LICENSE

@@ -0,0 +1,21 @@
+Actions Http Client for Node.js
+
+Copyright (c) GitHub, Inc.
+
+All rights reserved.
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and
+associated documentation files (the "Software"), to deal in the Software without restriction,
+including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense,
+and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED *AS IS*, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT
+LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN
+NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

node_modules/@actions/http-client/README.md

@@ -0,0 +1,73 @@
+# `@actions/http-client`
+
+A lightweight HTTP client optimized for building actions.
+
+## Features
+
+  - HTTP client with TypeScript generics and async/await/Promises
+  - Typings included!
+  - [Proxy support](https://help.github.com/en/actions/automating-your-workflow-with-github-actions/about-self-hosted-runners#using-a-proxy-server-with-self-hosted-runners) just works with actions and the runner
+  - Targets ES2019 (runner runs actions with node 12+).  Only supported on node 12+.
+  - Basic, Bearer and PAT Support out of the box.  Extensible handlers for others.
+  - Redirects supported
+
+Features and releases [here](./RELEASES.md)
+
+## Install
+
+```
+npm install @actions/http-client --save
+```
+
+## Samples
+
+See the [tests](./__tests__) for detailed examples.
+
+## Errors
+
+### HTTP
+
+The HTTP client does not throw unless truly exceptional.
+
+* A request that successfully executes resulting in a 404, 500 etc... will return a response object with a status code and a body.
+* Redirects (3xx) will be followed by default.
+
+See the [tests](./__tests__) for detailed examples.
+
+## Debugging
+
+To enable detailed console logging of all HTTP requests and responses, set the NODE_DEBUG environment varible:
+
+```shell
+export NODE_DEBUG=http
+```
+
+## Node support
+
+The http-client is built using the latest LTS version of Node 12. It may work on previous node LTS versions but it's tested and officially supported on Node12+.
+
+## Support and Versioning
+
+We follow semver and will hold compatibility between major versions and increment the minor version with new features and capabilities (while holding compat).
+
+## Contributing
+
+We welcome PRs.  Please create an issue and if applicable, a design before proceeding with code.
+
+once:
+
+```
+npm install
+```
+
+To build:
+
+```
+npm run build
+```
+
+To run all tests:
+
+```
+npm test
+```

node_modules/@actions/http-client/lib/auth.d.ts

@@ -0,0 +1,26 @@
+/// <reference types="node" />
+import * as http from 'http';
+import * as ifm from './interfaces';
+import { HttpClientResponse } from './index';
+export declare class BasicCredentialHandler implements ifm.RequestHandler {
+    username: string;
+    password: string;
+    constructor(username: string, password: string);
+    prepareRequest(options: http.RequestOptions): void;
+    canHandleAuthentication(): boolean;
+    handleAuthentication(): Promise<HttpClientResponse>;
+}
+export declare class BearerCredentialHandler implements ifm.RequestHandler {
+    token: string;
+    constructor(token: string);
+    prepareRequest(options: http.RequestOptions): void;
+    canHandleAuthentication(): boolean;
+    handleAuthentication(): Promise<HttpClientResponse>;
+}
+export declare class PersonalAccessTokenCredentialHandler implements ifm.RequestHandler {
+    token: string;
+    constructor(token: string);
+    prepareRequest(options: http.RequestOptions): void;
+    canHandleAuthentication(): boolean;
+    handleAuthentication(): Promise<HttpClientResponse>;
+}

node_modules/@actions/http-client/lib/auth.js

@@ -0,0 +1,81 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PersonalAccessTokenCredentialHandler = exports.BearerCredentialHandler = exports.BasicCredentialHandler = void 0;
+class BasicCredentialHandler {
+    constructor(username, password) {
+        this.username = username;
+        this.password = password;
+    }
+    prepareRequest(options) {
+        if (!options.headers) {
+            throw Error('The request has no headers');
+        }
+        options.headers['Authorization'] = `Basic ${Buffer.from(`${this.username}:${this.password}`).toString('base64')}`;
+    }
+    // This handler cannot handle 401
+    canHandleAuthentication() {
+        return false;
+    }
+    handleAuthentication() {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new Error('not implemented');
+        });
+    }
+}
+exports.BasicCredentialHandler = BasicCredentialHandler;
+class BearerCredentialHandler {
+    constructor(token) {
+        this.token = token;
+    }
+    // currently implements pre-authorization
+    // TODO: support preAuth = false where it hooks on 401
+    prepareRequest(options) {
+        if (!options.headers) {
+            throw Error('The request has no headers');
+        }
+        options.headers['Authorization'] = `Bearer ${this.token}`;
+    }
+    // This handler cannot handle 401
+    canHandleAuthentication() {
+        return false;
+    }
+    handleAuthentication() {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new Error('not implemented');
+        });
+    }
+}
+exports.BearerCredentialHandler = BearerCredentialHandler;
+class PersonalAccessTokenCredentialHandler {
+    constructor(token) {
+        this.token = token;
+    }
+    // currently implements pre-authorization
+    // TODO: support preAuth = false where it hooks on 401
+    prepareRequest(options) {
+        if (!options.headers) {
+            throw Error('The request has no headers');
+        }
+        options.headers['Authorization'] = `Basic ${Buffer.from(`PAT:${this.token}`).toString('base64')}`;
+    }
+    // This handler cannot handle 401
+    canHandleAuthentication() {
+        return false;
+    }
+    handleAuthentication() {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new Error('not implemented');
+        });
+    }
+}
+exports.PersonalAccessTokenCredentialHandler = PersonalAccessTokenCredentialHandler;
+//# sourceMappingURL=auth.js.map

node_modules/@actions/http-client/lib/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":";;;;;;;;;;;;AAIA,MAAa,sBAAsB;IAIjC,YAAY,QAAgB,EAAE,QAAgB;QAC5C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC1B,CAAC;IAED,cAAc,CAAC,OAA4B;QACzC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;YACpB,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAA;SAC1C;QACD,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,MAAM,CAAC,IAAI,CACrD,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CACpC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACxB,CAAC;IAED,iCAAiC;IACjC,uBAAuB;QACrB,OAAO,KAAK,CAAA;IACd,CAAC;IAEK,oBAAoB;;YACxB,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACpC,CAAC;KAAA;CACF;AA1BD,wDA0BC;AAED,MAAa,uBAAuB;IAGlC,YAAY,KAAa;QACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAED,yCAAyC;IACzC,sDAAsD;IACtD,cAAc,CAAC,OAA4B;QACzC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;YACpB,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAA;SAC1C;QACD,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,IAAI,CAAC,KAAK,EAAE,CAAA;IAC3D,CAAC;IAED,iCAAiC;IACjC,uBAAuB;QACrB,OAAO,KAAK,CAAA;IACd,CAAC;IAEK,oBAAoB;;YACxB,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACpC,CAAC;KAAA;CACF;AAxBD,0DAwBC;AAED,MAAa,oCAAoC;IAI/C,YAAY,KAAa;QACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAED,yCAAyC;IACzC,sDAAsD;IACtD,cAAc,CAAC,OAA4B;QACzC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;YACpB,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAA;SAC1C;QACD,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,MAAM,CAAC,IAAI,CACrD,OAAO,IAAI,CAAC,KAAK,EAAE,CACpB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACxB,CAAC;IAED,iCAAiC;IACjC,uBAAuB;QACrB,OAAO,KAAK,CAAA;IACd,CAAC;IAEK,oBAAoB;;YACxB,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACpC,CAAC;KAAA;CACF;AA3BD,oFA2BC"}

node_modules/@actions/http-client/lib/index.d.ts

@@ -0,0 +1,123 @@
+/// <reference types="node" />
+import * as http from 'http';
+import * as ifm from './interfaces';
+export declare enum HttpCodes {
+    OK = 200,
+    MultipleChoices = 300,
+    MovedPermanently = 301,
+    ResourceMoved = 302,
+    SeeOther = 303,
+    NotModified = 304,
+    UseProxy = 305,
+    SwitchProxy = 306,
+    TemporaryRedirect = 307,
+    PermanentRedirect = 308,
+    BadRequest = 400,
+    Unauthorized = 401,
+    PaymentRequired = 402,
+    Forbidden = 403,
+    NotFound = 404,
+    MethodNotAllowed = 405,
+    NotAcceptable = 406,
+    ProxyAuthenticationRequired = 407,
+    RequestTimeout = 408,
+    Conflict = 409,
+    Gone = 410,
+    TooManyRequests = 429,
+    InternalServerError = 500,
+    NotImplemented = 501,
+    BadGateway = 502,
+    ServiceUnavailable = 503,
+    GatewayTimeout = 504
+}
+export declare enum Headers {
+    Accept = "accept",
+    ContentType = "content-type"
+}
+export declare enum MediaTypes {
+    ApplicationJson = "application/json"
+}
+/**
+ * Returns the proxy URL, depending upon the supplied url and proxy environment variables.
+ * @param serverUrl  The server URL where the request will be sent. For example, https://api.github.com
+ */
+export declare function getProxyUrl(serverUrl: string): string;
+export declare class HttpClientError extends Error {
+    constructor(message: string, statusCode: number);
+    statusCode: number;
+    result?: any;
+}
+export declare class HttpClientResponse {
+    constructor(message: http.IncomingMessage);
+    message: http.IncomingMessage;
+    readBody(): Promise<string>;
+}
+export declare function isHttps(requestUrl: string): boolean;
+export declare class HttpClient {
+    userAgent: string | undefined;
+    handlers: ifm.RequestHandler[];
+    requestOptions: ifm.RequestOptions | undefined;
+    private _ignoreSslError;
+    private _socketTimeout;
+    private _allowRedirects;
+    private _allowRedirectDowngrade;
+    private _maxRedirects;
+    private _allowRetries;
+    private _maxRetries;
+    private _agent;
+    private _proxyAgent;
+    private _keepAlive;
+    private _disposed;
+    constructor(userAgent?: string, handlers?: ifm.RequestHandler[], requestOptions?: ifm.RequestOptions);
+    options(requestUrl: string, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    get(requestUrl: string, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    del(requestUrl: string, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    post(requestUrl: string, data: string, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    patch(requestUrl: string, data: string, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    put(requestUrl: string, data: string, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    head(requestUrl: string, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    sendStream(verb: string, requestUrl: string, stream: NodeJS.ReadableStream, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    /**
+     * Gets a typed object from an endpoint
+     * Be aware that not found returns a null.  Other errors (4xx, 5xx) reject the promise
+     */
+    getJson<T>(requestUrl: string, additionalHeaders?: http.OutgoingHttpHeaders): Promise<ifm.TypedResponse<T>>;
+    postJson<T>(requestUrl: string, obj: any, additionalHeaders?: http.OutgoingHttpHeaders): Promise<ifm.TypedResponse<T>>;
+    putJson<T>(requestUrl: string, obj: any, additionalHeaders?: http.OutgoingHttpHeaders): Promise<ifm.TypedResponse<T>>;
+    patchJson<T>(requestUrl: string, obj: any, additionalHeaders?: http.OutgoingHttpHeaders): Promise<ifm.TypedResponse<T>>;
+    /**
+     * Makes a raw http request.
+     * All other methods such as get, post, patch, and request ultimately call this.
+     * Prefer get, del, post and patch
+     */
+    request(verb: string, requestUrl: string, data: string | NodeJS.ReadableStream | null, headers?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    /**
+     * Needs to be called if keepAlive is set to true in request options.
+     */
+    dispose(): void;
+    /**
+     * Raw request.
+     * @param info
+     * @param data
+     */
+    requestRaw(info: ifm.RequestInfo, data: string | NodeJS.ReadableStream | null): Promise<HttpClientResponse>;
+    /**
+     * Raw request with callback.
+     * @param info
+     * @param data
+     * @param onResult
+     */
+    requestRawWithCallback(info: ifm.RequestInfo, data: string | NodeJS.ReadableStream | null, onResult: (err?: Error, res?: HttpClientResponse) => void): void;
+    /**
+     * Gets an http agent. This function is useful when you need an http agent that handles
+     * routing through a proxy server - depending upon the url and proxy environment variables.
+     * @param serverUrl  The server URL where the request will be sent. For example, https://api.github.com
+     */
+    getAgent(serverUrl: string): http.Agent;
+    private _prepareRequest;
+    private _mergeHeaders;
+    private _getExistingOrDefaultHeader;
+    private _getAgent;
+    private _performExponentialBackoff;
+    private _processResponse;
+}

node_modules/@actions/http-client/lib/index.js

@@ -0,0 +1,605 @@
+"use strict";
+/* eslint-disable @typescript-eslint/no-explicit-any */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpClient = exports.isHttps = exports.HttpClientResponse = exports.HttpClientError = exports.getProxyUrl = exports.MediaTypes = exports.Headers = exports.HttpCodes = void 0;
+const http = __importStar(require("http"));
+const https = __importStar(require("https"));
+const pm = __importStar(require("./proxy"));
+const tunnel = __importStar(require("tunnel"));
+var HttpCodes;
+(function (HttpCodes) {
+    HttpCodes[HttpCodes["OK"] = 200] = "OK";
+    HttpCodes[HttpCodes["MultipleChoices"] = 300] = "MultipleChoices";
+    HttpCodes[HttpCodes["MovedPermanently"] = 301] = "MovedPermanently";
+    HttpCodes[HttpCodes["ResourceMoved"] = 302] = "ResourceMoved";
+    HttpCodes[HttpCodes["SeeOther"] = 303] = "SeeOther";
+    HttpCodes[HttpCodes["NotModified"] = 304] = "NotModified";
+    HttpCodes[HttpCodes["UseProxy"] = 305] = "UseProxy";
+    HttpCodes[HttpCodes["SwitchProxy"] = 306] = "SwitchProxy";
+    HttpCodes[HttpCodes["TemporaryRedirect"] = 307] = "TemporaryRedirect";
+    HttpCodes[HttpCodes["PermanentRedirect"] = 308] = "PermanentRedirect";
+    HttpCodes[HttpCodes["BadRequest"] = 400] = "BadRequest";
+    HttpCodes[HttpCodes["Unauthorized"] = 401] = "Unauthorized";
+    HttpCodes[HttpCodes["PaymentRequired"] = 402] = "PaymentRequired";
+    HttpCodes[HttpCodes["Forbidden"] = 403] = "Forbidden";
+    HttpCodes[HttpCodes["NotFound"] = 404] = "NotFound";
+    HttpCodes[HttpCodes["MethodNotAllowed"] = 405] = "MethodNotAllowed";
+    HttpCodes[HttpCodes["NotAcceptable"] = 406] = "NotAcceptable";
+    HttpCodes[HttpCodes["ProxyAuthenticationRequired"] = 407] = "ProxyAuthenticationRequired";
+    HttpCodes[HttpCodes["RequestTimeout"] = 408] = "RequestTimeout";
+    HttpCodes[HttpCodes["Conflict"] = 409] = "Conflict";
+    HttpCodes[HttpCodes["Gone"] = 410] = "Gone";
+    HttpCodes[HttpCodes["TooManyRequests"] = 429] = "TooManyRequests";
+    HttpCodes[HttpCodes["InternalServerError"] = 500] = "InternalServerError";
+    HttpCodes[HttpCodes["NotImplemented"] = 501] = "NotImplemented";
+    HttpCodes[HttpCodes["BadGateway"] = 502] = "BadGateway";
+    HttpCodes[HttpCodes["ServiceUnavailable"] = 503] = "ServiceUnavailable";
+    HttpCodes[HttpCodes["GatewayTimeout"] = 504] = "GatewayTimeout";
+})(HttpCodes = exports.HttpCodes || (exports.HttpCodes = {}));
+var Headers;
+(function (Headers) {
+    Headers["Accept"] = "accept";
+    Headers["ContentType"] = "content-type";
+})(Headers = exports.Headers || (exports.Headers = {}));
+var MediaTypes;
+(function (MediaTypes) {
+    MediaTypes["ApplicationJson"] = "application/json";
+})(MediaTypes = exports.MediaTypes || (exports.MediaTypes = {}));
+/**
+ * Returns the proxy URL, depending upon the supplied url and proxy environment variables.
+ * @param serverUrl  The server URL where the request will be sent. For example, https://api.github.com
+ */
+function getProxyUrl(serverUrl) {
+    const proxyUrl = pm.getProxyUrl(new URL(serverUrl));
+    return proxyUrl ? proxyUrl.href : '';
+}
+exports.getProxyUrl = getProxyUrl;
+const HttpRedirectCodes = [
+    HttpCodes.MovedPermanently,
+    HttpCodes.ResourceMoved,
+    HttpCodes.SeeOther,
+    HttpCodes.TemporaryRedirect,
+    HttpCodes.PermanentRedirect
+];
+const HttpResponseRetryCodes = [
+    HttpCodes.BadGateway,
+    HttpCodes.ServiceUnavailable,
+    HttpCodes.GatewayTimeout
+];
+const RetryableHttpVerbs = ['OPTIONS', 'GET', 'DELETE', 'HEAD'];
+const ExponentialBackoffCeiling = 10;
+const ExponentialBackoffTimeSlice = 5;
+class HttpClientError extends Error {
+    constructor(message, statusCode) {
+        super(message);
+        this.name = 'HttpClientError';
+        this.statusCode = statusCode;
+        Object.setPrototypeOf(this, HttpClientError.prototype);
+    }
+}
+exports.HttpClientError = HttpClientError;
+class HttpClientResponse {
+    constructor(message) {
+        this.message = message;
+    }
+    readBody() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve) => __awaiter(this, void 0, void 0, function* () {
+                let output = Buffer.alloc(0);
+                this.message.on('data', (chunk) => {
+                    output = Buffer.concat([output, chunk]);
+                });
+                this.message.on('end', () => {
+                    resolve(output.toString());
+                });
+            }));
+        });
+    }
+}
+exports.HttpClientResponse = HttpClientResponse;
+function isHttps(requestUrl) {
+    const parsedUrl = new URL(requestUrl);
+    return parsedUrl.protocol === 'https:';
+}
+exports.isHttps = isHttps;
+class HttpClient {
+    constructor(userAgent, handlers, requestOptions) {
+        this._ignoreSslError = false;
+        this._allowRedirects = true;
+        this._allowRedirectDowngrade = false;
+        this._maxRedirects = 50;
+        this._allowRetries = false;
+        this._maxRetries = 1;
+        this._keepAlive = false;
+        this._disposed = false;
+        this.userAgent = userAgent;
+        this.handlers = handlers || [];
+        this.requestOptions = requestOptions;
+        if (requestOptions) {
+            if (requestOptions.ignoreSslError != null) {
+                this._ignoreSslError = requestOptions.ignoreSslError;
+            }
+            this._socketTimeout = requestOptions.socketTimeout;
+            if (requestOptions.allowRedirects != null) {
+                this._allowRedirects = requestOptions.allowRedirects;
+            }
+            if (requestOptions.allowRedirectDowngrade != null) {
+                this._allowRedirectDowngrade = requestOptions.allowRedirectDowngrade;
+            }
+            if (requestOptions.maxRedirects != null) {
+                this._maxRedirects = Math.max(requestOptions.maxRedirects, 0);
+            }
+            if (requestOptions.keepAlive != null) {
+                this._keepAlive = requestOptions.keepAlive;
+            }
+            if (requestOptions.allowRetries != null) {
+                this._allowRetries = requestOptions.allowRetries;
+            }
+            if (requestOptions.maxRetries != null) {
+                this._maxRetries = requestOptions.maxRetries;
+            }
+        }
+    }
+    options(requestUrl, additionalHeaders) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.request('OPTIONS', requestUrl, null, additionalHeaders || {});
+        });
+    }
+    get(requestUrl, additionalHeaders) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.request('GET', requestUrl, null, additionalHeaders || {});
+        });
+    }
+    del(requestUrl, additionalHeaders) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.request('DELETE', requestUrl, null, additionalHeaders || {});
+        });
+    }
+    post(requestUrl, data, additionalHeaders) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.request('POST', requestUrl, data, additionalHeaders || {});
+        });
+    }
+    patch(requestUrl, data, additionalHeaders) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.request('PATCH', requestUrl, data, additionalHeaders || {});
+        });
+    }
+    put(requestUrl, data, additionalHeaders) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.request('PUT', requestUrl, data, additionalHeaders || {});
+        });
+    }
+    head(requestUrl, additionalHeaders) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.request('HEAD', requestUrl, null, additionalHeaders || {});
+        });
+    }
+    sendStream(verb, requestUrl, stream, additionalHeaders) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.request(verb, requestUrl, stream, additionalHeaders);
+        });
+    }
+    /**
+     * Gets a typed object from an endpoint
+     * Be aware that not found returns a null.  Other errors (4xx, 5xx) reject the promise
+     */
+    getJson(requestUrl, additionalHeaders = {}) {
+        return __awaiter(this, void 0, void 0, function* () {
+            additionalHeaders[Headers.Accept] = this._getExistingOrDefaultHeader(additionalHeaders, Headers.Accept, MediaTypes.ApplicationJson);
+            const res = yield this.get(requestUrl, additionalHeaders);
+            return this._processResponse(res, this.requestOptions);
+        });
+    }
+    postJson(requestUrl, obj, additionalHeaders = {}) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const data = JSON.stringify(obj, null, 2);
+            additionalHeaders[Headers.Accept] = this._getExistingOrDefaultHeader(additionalHeaders, Headers.Accept, MediaTypes.ApplicationJson);
+            additionalHeaders[Headers.ContentType] = this._getExistingOrDefaultHeader(additionalHeaders, Headers.ContentType, MediaTypes.ApplicationJson);
+            const res = yield this.post(requestUrl, data, additionalHeaders);
+            return this._processResponse(res, this.requestOptions);
+        });
+    }
+    putJson(requestUrl, obj, additionalHeaders = {}) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const data = JSON.stringify(obj, null, 2);
+            additionalHeaders[Headers.Accept] = this._getExistingOrDefaultHeader(additionalHeaders, Headers.Accept, MediaTypes.ApplicationJson);
+            additionalHeaders[Headers.ContentType] = this._getExistingOrDefaultHeader(additionalHeaders, Headers.ContentType, MediaTypes.ApplicationJson);
+            const res = yield this.put(requestUrl, data, additionalHeaders);
+            return this._processResponse(res, this.requestOptions);
+        });
+    }
+    patchJson(requestUrl, obj, additionalHeaders = {}) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const data = JSON.stringify(obj, null, 2);
+            additionalHeaders[Headers.Accept] = this._getExistingOrDefaultHeader(additionalHeaders, Headers.Accept, MediaTypes.ApplicationJson);
+            additionalHeaders[Headers.ContentType] = this._getExistingOrDefaultHeader(additionalHeaders, Headers.ContentType, MediaTypes.ApplicationJson);
+            const res = yield this.patch(requestUrl, data, additionalHeaders);
+            return this._processResponse(res, this.requestOptions);
+        });
+    }
+    /**
+     * Makes a raw http request.
+     * All other methods such as get, post, patch, and request ultimately call this.
+     * Prefer get, del, post and patch
+     */
+    request(verb, requestUrl, data, headers) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (this._disposed) {
+                throw new Error('Client has already been disposed.');
+            }
+            const parsedUrl = new URL(requestUrl);
+            let info = this._prepareRequest(verb, parsedUrl, headers);
+            // Only perform retries on reads since writes may not be idempotent.
+            const maxTries = this._allowRetries && RetryableHttpVerbs.includes(verb)
+                ? this._maxRetries + 1
+                : 1;
+            let numTries = 0;
+            let response;
+            do {
+                response = yield this.requestRaw(info, data);
+                // Check if it's an authentication challenge
+                if (response &&
+                    response.message &&
+                    response.message.statusCode === HttpCodes.Unauthorized) {
+                    let authenticationHandler;
+                    for (const handler of this.handlers) {
+                        if (handler.canHandleAuthentication(response)) {
+                            authenticationHandler = handler;
+                            break;
+                        }
+                    }
+                    if (authenticationHandler) {
+                        return authenticationHandler.handleAuthentication(this, info, data);
+                    }
+                    else {
+                        // We have received an unauthorized response but have no handlers to handle it.
+                        // Let the response return to the caller.
+                        return response;
+                    }
+                }
+                let redirectsRemaining = this._maxRedirects;
+                while (response.message.statusCode &&
+                    HttpRedirectCodes.includes(response.message.statusCode) &&
+                    this._allowRedirects &&
+                    redirectsRemaining > 0) {
+                    const redirectUrl = response.message.headers['location'];
+                    if (!redirectUrl) {
+                        // if there's no location to redirect to, we won't
+                        break;
+                    }
+                    const parsedRedirectUrl = new URL(redirectUrl);
+                    if (parsedUrl.protocol === 'https:' &&
+                        parsedUrl.protocol !== parsedRedirectUrl.protocol &&
+                        !this._allowRedirectDowngrade) {
+                        throw new Error('Redirect from HTTPS to HTTP protocol. This downgrade is not allowed for security reasons. If you want to allow this behavior, set the allowRedirectDowngrade option to true.');
+                    }
+                    // we need to finish reading the response before reassigning response
+                    // which will leak the open socket.
+                    yield response.readBody();
+                    // strip authorization header if redirected to a different hostname
+                    if (parsedRedirectUrl.hostname !== parsedUrl.hostname) {
+                        for (const header in headers) {
+                            // header names are case insensitive
+                            if (header.toLowerCase() === 'authorization') {
+                                delete headers[header];
+                            }
+                        }
+                    }
+                    // let's make the request with the new redirectUrl
+                    info = this._prepareRequest(verb, parsedRedirectUrl, headers);
+                    response = yield this.requestRaw(info, data);
+                    redirectsRemaining--;
+                }
+                if (!response.message.statusCode ||
+                    !HttpResponseRetryCodes.includes(response.message.statusCode)) {
+                    // If not a retry code, return immediately instead of retrying
+                    return response;
+                }
+                numTries += 1;
+                if (numTries < maxTries) {
+                    yield response.readBody();
+                    yield this._performExponentialBackoff(numTries);
+                }
+            } while (numTries < maxTries);
+            return response;
+        });
+    }
+    /**
+     * Needs to be called if keepAlive is set to true in request options.
+     */
+    dispose() {
+        if (this._agent) {
+            this._agent.destroy();
+        }
+        this._disposed = true;
+    }
+    /**
+     * Raw request.
+     * @param info
+     * @param data
+     */
+    requestRaw(info, data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => {
+                function callbackForResult(err, res) {
+                    if (err) {
+                        reject(err);
+                    }
+                    else if (!res) {
+                        // If `err` is not passed, then `res` must be passed.
+                        reject(new Error('Unknown error'));
+                    }
+                    else {
+                        resolve(res);
+                    }
+                }
+                this.requestRawWithCallback(info, data, callbackForResult);
+            });
+        });
+    }
+    /**
+     * Raw request with callback.
+     * @param info
+     * @param data
+     * @param onResult
+     */
+    requestRawWithCallback(info, data, onResult) {
+        if (typeof data === 'string') {
+            if (!info.options.headers) {
+                info.options.headers = {};
+            }
+            info.options.headers['Content-Length'] = Buffer.byteLength(data, 'utf8');
+        }
+        let callbackCalled = false;
+        function handleResult(err, res) {
+            if (!callbackCalled) {
+                callbackCalled = true;
+                onResult(err, res);
+            }
+        }
+        const req = info.httpModule.request(info.options, (msg) => {
+            const res = new HttpClientResponse(msg);
+            handleResult(undefined, res);
+        });
+        let socket;
+        req.on('socket', sock => {
+            socket = sock;
+        });
+        // If we ever get disconnected, we want the socket to timeout eventually
+        req.setTimeout(this._socketTimeout || 3 * 60000, () => {
+            if (socket) {
+                socket.end();
+            }
+            handleResult(new Error(`Request timeout: ${info.options.path}`));
+        });
+        req.on('error', function (err) {
+            // err has statusCode property
+            // res should have headers
+            handleResult(err);
+        });
+        if (data && typeof data === 'string') {
+            req.write(data, 'utf8');
+        }
+        if (data && typeof data !== 'string') {
+            data.on('close', function () {
+                req.end();
+            });
+            data.pipe(req);
+        }
+        else {
+            req.end();
+        }
+    }
+    /**
+     * Gets an http agent. This function is useful when you need an http agent that handles
+     * routing through a proxy server - depending upon the url and proxy environment variables.
+     * @param serverUrl  The server URL where the request will be sent. For example, https://api.github.com
+     */
+    getAgent(serverUrl) {
+        const parsedUrl = new URL(serverUrl);
+        return this._getAgent(parsedUrl);
+    }
+    _prepareRequest(method, requestUrl, headers) {
+        const info = {};
+        info.parsedUrl = requestUrl;
+        const usingSsl = info.parsedUrl.protocol === 'https:';
+        info.httpModule = usingSsl ? https : http;
+        const defaultPort = usingSsl ? 443 : 80;
+        info.options = {};
+        info.options.host = info.parsedUrl.hostname;
+        info.options.port = info.parsedUrl.port
+            ? parseInt(info.parsedUrl.port)
+            : defaultPort;
+        info.options.path =
+            (info.parsedUrl.pathname || '') + (info.parsedUrl.search || '');
+        info.options.method = method;
+        info.options.headers = this._mergeHeaders(headers);
+        if (this.userAgent != null) {
+            info.options.headers['user-agent'] = this.userAgent;
+        }
+        info.options.agent = this._getAgent(info.parsedUrl);
+        // gives handlers an opportunity to participate
+        if (this.handlers) {
+            for (const handler of this.handlers) {
+                handler.prepareRequest(info.options);
+            }
+        }
+        return info;
+    }
+    _mergeHeaders(headers) {
+        if (this.requestOptions && this.requestOptions.headers) {
+            return Object.assign({}, lowercaseKeys(this.requestOptions.headers), lowercaseKeys(headers || {}));
+        }
+        return lowercaseKeys(headers || {});
+    }
+    _getExistingOrDefaultHeader(additionalHeaders, header, _default) {
+        let clientHeader;
+        if (this.requestOptions && this.requestOptions.headers) {
+            clientHeader = lowercaseKeys(this.requestOptions.headers)[header];
+        }
+        return additionalHeaders[header] || clientHeader || _default;
+    }
+    _getAgent(parsedUrl) {
+        let agent;
+        const proxyUrl = pm.getProxyUrl(parsedUrl);
+        const useProxy = proxyUrl && proxyUrl.hostname;
+        if (this._keepAlive && useProxy) {
+            agent = this._proxyAgent;
+        }
+        if (this._keepAlive && !useProxy) {
+            agent = this._agent;
+        }
+        // if agent is already assigned use that agent.
+        if (agent) {
+            return agent;
+        }
+        const usingSsl = parsedUrl.protocol === 'https:';
+        let maxSockets = 100;
+        if (this.requestOptions) {
+            maxSockets = this.requestOptions.maxSockets || http.globalAgent.maxSockets;
+        }
+        // This is `useProxy` again, but we need to check `proxyURl` directly for TypeScripts's flow analysis.
+        if (proxyUrl && proxyUrl.hostname) {
+            const agentOptions = {
+                maxSockets,
+                keepAlive: this._keepAlive,
+                proxy: Object.assign(Object.assign({}, ((proxyUrl.username || proxyUrl.password) && {
+                    proxyAuth: `${proxyUrl.username}:${proxyUrl.password}`
+                })), { host: proxyUrl.hostname, port: proxyUrl.port })
+            };
+            let tunnelAgent;
+            const overHttps = proxyUrl.protocol === 'https:';
+            if (usingSsl) {
+                tunnelAgent = overHttps ? tunnel.httpsOverHttps : tunnel.httpsOverHttp;
+            }
+            else {
+                tunnelAgent = overHttps ? tunnel.httpOverHttps : tunnel.httpOverHttp;
+            }
+            agent = tunnelAgent(agentOptions);
+            this._proxyAgent = agent;
+        }
+        // if reusing agent across request and tunneling agent isn't assigned create a new agent
+        if (this._keepAlive && !agent) {
+            const options = { keepAlive: this._keepAlive, maxSockets };
+            agent = usingSsl ? new https.Agent(options) : new http.Agent(options);
+            this._agent = agent;
+        }
+        // if not using private agent and tunnel agent isn't setup then use global agent
+        if (!agent) {
+            agent = usingSsl ? https.globalAgent : http.globalAgent;
+        }
+        if (usingSsl && this._ignoreSslError) {
+            // we don't want to set NODE_TLS_REJECT_UNAUTHORIZED=0 since that will affect request for entire process
+            // http.RequestOptions doesn't expose a way to modify RequestOptions.agent.options
+            // we have to cast it to any and change it directly
+            agent.options = Object.assign(agent.options || {}, {
+                rejectUnauthorized: false
+            });
+        }
+        return agent;
+    }
+    _performExponentialBackoff(retryNumber) {
+        return __awaiter(this, void 0, void 0, function* () {
+            retryNumber = Math.min(ExponentialBackoffCeiling, retryNumber);
+            const ms = ExponentialBackoffTimeSlice * Math.pow(2, retryNumber);
+            return new Promise(resolve => setTimeout(() => resolve(), ms));
+        });
+    }
+    _processResponse(res, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => __awaiter(this, void 0, void 0, function* () {
+                const statusCode = res.message.statusCode || 0;
+                const response = {
+                    statusCode,
+                    result: null,
+                    headers: {}
+                };
+                // not found leads to null obj returned
+                if (statusCode === HttpCodes.NotFound) {
+                    resolve(response);
+                }
+                // get the result from the body
+                function dateTimeDeserializer(key, value) {
+                    if (typeof value === 'string') {
+                        const a = new Date(value);
+                        if (!isNaN(a.valueOf())) {
+                            return a;
+                        }
+                    }
+                    return value;
+                }
+                let obj;
+                let contents;
+                try {
+                    contents = yield res.readBody();
+                    if (contents && contents.length > 0) {
+                        if (options && options.deserializeDates) {
+                            obj = JSON.parse(contents, dateTimeDeserializer);
+                        }
+                        else {
+                            obj = JSON.parse(contents);
+                        }
+                        response.result = obj;
+                    }
+                    response.headers = res.message.headers;
+                }
+                catch (err) {
+                    // Invalid resource (contents not json);  leaving result obj null
+                }
+                // note that 3xx redirects are handled by the http layer.
+                if (statusCode > 299) {
+                    let msg;
+                    // if exception/error in body, attempt to get better error
+                    if (obj && obj.message) {
+                        msg = obj.message;
+                    }
+                    else if (contents && contents.length > 0) {
+                        // it may be the case that the exception is in the body message as string
+                        msg = contents;
+                    }
+                    else {
+                        msg = `Failed request: (${statusCode})`;
+                    }
+                    const err = new HttpClientError(msg, statusCode);
+                    err.result = response.result;
+                    reject(err);
+                }
+                else {
+                    resolve(response);
+                }
+            }));
+        });
+    }
+}
+exports.HttpClient = HttpClient;
+const lowercaseKeys = (obj) => Object.keys(obj).reduce((c, k) => ((c[k.toLowerCase()] = obj[k]), c), {});
+//# sourceMappingURL=index.js.map

node_modules/@actions/http-client/lib/interfaces.d.ts

@@ -0,0 +1,44 @@
+/// <reference types="node" />
+import * as http from 'http';
+import * as https from 'https';
+import { HttpClientResponse } from './index';
+export interface HttpClient {
+    options(requestUrl: string, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    get(requestUrl: string, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    del(requestUrl: string, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    post(requestUrl: string, data: string, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    patch(requestUrl: string, data: string, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    put(requestUrl: string, data: string, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    sendStream(verb: string, requestUrl: string, stream: NodeJS.ReadableStream, additionalHeaders?: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    request(verb: string, requestUrl: string, data: string | NodeJS.ReadableStream, headers: http.OutgoingHttpHeaders): Promise<HttpClientResponse>;
+    requestRaw(info: RequestInfo, data: string | NodeJS.ReadableStream): Promise<HttpClientResponse>;
+    requestRawWithCallback(info: RequestInfo, data: string | NodeJS.ReadableStream, onResult: (err?: Error, res?: HttpClientResponse) => void): void;
+}
+export interface RequestHandler {
+    prepareRequest(options: http.RequestOptions): void;
+    canHandleAuthentication(response: HttpClientResponse): boolean;
+    handleAuthentication(httpClient: HttpClient, requestInfo: RequestInfo, data: string | NodeJS.ReadableStream | null): Promise<HttpClientResponse>;
+}
+export interface RequestInfo {
+    options: http.RequestOptions;
+    parsedUrl: URL;
+    httpModule: typeof http | typeof https;
+}
+export interface RequestOptions {
+    headers?: http.OutgoingHttpHeaders;
+    socketTimeout?: number;
+    ignoreSslError?: boolean;
+    allowRedirects?: boolean;
+    allowRedirectDowngrade?: boolean;
+    maxRedirects?: number;
+    maxSockets?: number;
+    keepAlive?: boolean;
+    deserializeDates?: boolean;
+    allowRetries?: boolean;
+    maxRetries?: number;
+}
+export interface TypedResponse<T> {
+    statusCode: number;
+    result: T | null;
+    headers: http.IncomingHttpHeaders;
+}

node_modules/@actions/http-client/lib/interfaces.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=interfaces.js.map

node_modules/@actions/http-client/lib/interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../src/interfaces.ts"],"names":[],"mappings":""}

node_modules/@actions/http-client/lib/proxy.d.ts

@@ -0,0 +1,2 @@
+export declare function getProxyUrl(reqUrl: URL): URL | undefined;
+export declare function checkBypass(reqUrl: URL): boolean;

node_modules/@actions/http-client/lib/proxy.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkBypass = exports.getProxyUrl = void 0;
+function getProxyUrl(reqUrl) {
+    const usingSsl = reqUrl.protocol === 'https:';
+    if (checkBypass(reqUrl)) {
+        return undefined;
+    }
+    const proxyVar = (() => {
+        if (usingSsl) {
+            return process.env['https_proxy'] || process.env['HTTPS_PROXY'];
+        }
+        else {
+            return process.env['http_proxy'] || process.env['HTTP_PROXY'];
+        }
+    })();
+    if (proxyVar) {
+        return new URL(proxyVar);
+    }
+    else {
+        return undefined;
+    }
+}
+exports.getProxyUrl = getProxyUrl;
+function checkBypass(reqUrl) {
+    if (!reqUrl.hostname) {
+        return false;
+    }
+    const reqHost = reqUrl.hostname;
+    if (isLoopbackAddress(reqHost)) {
+        return true;
+    }
+    const noProxy = process.env['no_proxy'] || process.env['NO_PROXY'] || '';
+    if (!noProxy) {
+        return false;
+    }
+    // Determine the request port
+    let reqPort;
+    if (reqUrl.port) {
+        reqPort = Number(reqUrl.port);
+    }
+    else if (reqUrl.protocol === 'http:') {
+        reqPort = 80;
+    }
+    else if (reqUrl.protocol === 'https:') {
+        reqPort = 443;
+    }
+    // Format the request hostname and hostname with port
+    const upperReqHosts = [reqUrl.hostname.toUpperCase()];
+    if (typeof reqPort === 'number') {
+        upperReqHosts.push(`${upperReqHosts[0]}:${reqPort}`);
+    }
+    // Compare request host against noproxy
+    for (const upperNoProxyItem of noProxy
+        .split(',')
+        .map(x => x.trim().toUpperCase())
+        .filter(x => x)) {
+        if (upperNoProxyItem === '*' ||
+            upperReqHosts.some(x => x === upperNoProxyItem ||
+                x.endsWith(`.${upperNoProxyItem}`) ||
+                (upperNoProxyItem.startsWith('.') &&
+                    x.endsWith(`${upperNoProxyItem}`)))) {
+            return true;
+        }
+    }
+    return false;
+}
+exports.checkBypass = checkBypass;
+function isLoopbackAddress(host) {
+    const hostLower = host.toLowerCase();
+    return (hostLower === 'localhost' ||
+        hostLower.startsWith('127.') ||
+        hostLower.startsWith('[::1]') ||
+        hostLower.startsWith('[0:0:0:0:0:0:0:1]'));
+}
+//# sourceMappingURL=proxy.js.map

node_modules/@actions/http-client/lib/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":";;;AAAA,SAAgB,WAAW,CAAC,MAAW;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAA;IAE7C,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE;QACvB,OAAO,SAAS,CAAA;KACjB;IAED,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE;QACrB,IAAI,QAAQ,EAAE;YACZ,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;SAChE;aAAM;YACL,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;SAC9D;IACH,CAAC,CAAC,EAAE,CAAA;IAEJ,IAAI,QAAQ,EAAE;QACZ,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;KACzB;SAAM;QACL,OAAO,SAAS,CAAA;KACjB;AACH,CAAC;AApBD,kCAoBC;AAED,SAAgB,WAAW,CAAC,MAAW;IACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;QACpB,OAAO,KAAK,CAAA;KACb;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAA;IAC/B,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE;QAC9B,OAAO,IAAI,CAAA;KACZ;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;IACxE,IAAI,CAAC,OAAO,EAAE;QACZ,OAAO,KAAK,CAAA;KACb;IAED,6BAA6B;IAC7B,IAAI,OAA2B,CAAA;IAC/B,IAAI,MAAM,CAAC,IAAI,EAAE;QACf,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;KAC9B;SAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE;QACtC,OAAO,GAAG,EAAE,CAAA;KACb;SAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE;QACvC,OAAO,GAAG,GAAG,CAAA;KACd;IAED,qDAAqD;IACrD,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IACrD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE;QAC/B,aAAa,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAA;KACrD;IAED,uCAAuC;IACvC,KAAK,MAAM,gBAAgB,IAAI,OAAO;SACnC,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QACjB,IACE,gBAAgB,KAAK,GAAG;YACxB,aAAa,CAAC,IAAI,CAChB,CAAC,CAAC,EAAE,CACF,CAAC,KAAK,gBAAgB;gBACtB,CAAC,CAAC,QAAQ,CAAC,IAAI,gBAAgB,EAAE,CAAC;gBAClC,CAAC,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC;oBAC/B,CAAC,CAAC,QAAQ,CAAC,GAAG,gBAAgB,EAAE,CAAC,CAAC,CACvC,EACD;YACA,OAAO,IAAI,CAAA;SACZ;KACF;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAnDD,kCAmDC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,CACL,SAAS,KAAK,WAAW;QACzB,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;QAC5B,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;QAC7B,SAAS,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAC1C,CAAA;AACH,CAAC"}

node_modules/@actions/http-client/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@actions/http-client",
+  "version": "2.1.0",
+  "description": "Actions Http Client",
+  "keywords": [
+    "github",
+    "actions",
+    "http"
+  ],
+  "homepage": "https://github.com/actions/toolkit/tree/main/packages/http-client",
+  "license": "MIT",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "directories": {
+    "lib": "lib",
+    "test": "__tests__"
+  },
+  "files": [
+    "lib",
+    "!.DS_Store"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/actions/toolkit.git",
+    "directory": "packages/http-client"
+  },
+  "scripts": {
+    "audit-moderate": "npm install && npm audit --json --audit-level=moderate > audit.json",
+    "test": "echo \"Error: run tests from root\" && exit 1",
+    "build": "tsc",
+    "format": "prettier --write **/*.ts",
+    "format-check": "prettier --check **/*.ts",
+    "tsc": "tsc"
+  },
+  "bugs": {
+    "url": "https://github.com/actions/toolkit/issues"
+  },
+  "devDependencies": {
+    "@types/tunnel": "0.0.3",
+    "proxy": "^1.0.1"
+  },
+  "dependencies": {
+    "tunnel": "^0.0.6"
+  }
+}

node_modules/@octokit/app/LICENSE

@@ -0,0 +1,21 @@
+The MIT License
+
+Copyright (c) 2018 Octokit contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

node_modules/@octokit/app/README.md

@@ -0,0 +1,431 @@
+# app.js
+
+> GitHub App toolset for Node.js
+
+[![@latest](https://img.shields.io/npm/v/@octokit/app.svg)](https://www.npmjs.com/package/@octokit/app)
+[![Build Status](https://github.com/octokit/app.js/workflows/Test/badge.svg)](https://github.com/octokit/app.js/actions?workflow=Test)
+
+<!-- toc -->
+
+- [Usage](#usage)
+- [`App.defaults(options)`](#appdefaultsoptions)
+- [Constructor](#constructor)
+- [API](#api)
+  - [`app.octokit`](#appoctokit)
+  - [`app.log`](#applog)
+  - [`app.getInstallationOctokit`](#appgetinstallationoctokit)
+  - [`app.eachInstallation`](#appeachinstallation)
+  - [`app.eachRepository`](#appeachrepository)
+  - [`app.webhooks`](#appwebhooks)
+  - [`app.oauth`](#appoauth)
+- [Middlewares](#middlewares)
+  - [`createNodeMiddleware(app, options)`](#createnodemiddlewareapp-options)
+- [Contributing](#contributing)
+- [License](#license)
+
+<!-- tocstop -->
+
+## Usage
+
+<table>
+<tbody valign=top align=left>
+<tr><th>
+
+Browsers
+
+</th><td width=100%>
+
+`@octokit/app` is not meant for browser usage.
+
+</td></tr>
+<tr><th>
+
+Node
+
+</th><td>
+
+Install with `npm install @octokit/app`
+
+```js
+const { App, createNodeMiddleware } = require("@octokit/app");
+```
+
+</td></tr>
+</tbody>
+</table>
+
+```js
+const app = new App({
+  appId: 123,
+  privateKey: "-----BEGIN PRIVATE KEY-----\n...",
+  oauth: {
+    clientId: "0123",
+    clientSecret: "0123secret",
+  },
+  webhooks: {
+    secret: "secret",
+  },
+});
+
+const { data } = await app.octokit.request("/app");
+console.log("authenticated as %s", data.name);
+for await (const { installation } of app.eachInstallation.iterator()) {
+  for await (const { octokit, repository } of app.eachRepository.iterator({
+    installationId: installation.id,
+  })) {
+    await octokit.request("POST /repos/{owner}/{repo}/dispatches", {
+      owner: repository.owner.login,
+      repo: repository.name,
+      event_type: "my_event",
+    });
+  }
+}
+
+app.webhooks.on("issues.opened", async ({ octokit, payload }) => {
+  await octokit.request(
+    "POST /repos/{owner}/{repo}/issues/{issue_number}/comments",
+    {
+      owner: payload.repository.owner.login,
+      repo: payload.repository.name,
+      issue_number: payload.issue.number,
+      body: "Hello World!",
+    }
+  );
+});
+
+app.oauth.on("token", async ({ token, octokit }) => {
+  const { data } = await octokit.request("GET /user");
+  console.log(`Token retrieved for ${data.login}`);
+});
+
+require("http").createServer(createNodeMiddleware(app)).listen(3000);
+// can now receive requests at /api/github/*
+```
+
+## `App.defaults(options)`
+
+Create a new `App` with custom defaults for the [constructor options](#constructor-options)
+
+```js
+const MyApp = App.defaults({
+  Octokit: MyOctokit,
+});
+const app = new MyApp({ clientId, clientSecret });
+// app.octokit is now an instance of MyOctokit
+```
+
+## Constructor
+
+<table width="100%">
+  <thead align=left>
+    <tr>
+      <th width=150>
+        name
+      </th>
+      <th width=70>
+        type
+      </th>
+      <th>
+        description
+      </th>
+    </tr>
+  </thead>
+  <tbody align=left valign=top>
+    <tr>
+      <th>
+        <code>appId</code>
+      </th>
+      <th>
+        <code>number</code>
+      </th>
+      <td>
+        <strong>Required</strong>. Find the <strong>App ID</strong> on the app’s about page in settings.
+      </td>
+    </tr>
+    <tr>
+      <th>
+        <code>privateKey</code>
+      </th>
+      <th>
+        <code>string</code>
+      </th>
+      <td>
+        <strong>Required</strong>. Content of the <code>*.pem</code> file you downloaded from the app’s about page. You can generate a new private key if needed.
+      </td>
+    </tr>
+    <tr id="constructor-option-octokit">
+      <th>
+        <code>Octokit</code>
+      </th>
+      <th>
+        <code>Constructor</code>
+      </th>
+      <td>
+
+You can pass in your own Octokit constructor with custom defaults and plugins. Note that `authStrategy` will be always be set to `createAppAuth` from [`@octokit/auth-app`](https://github.com/octokit/auth-app.js).
+
+For usage with enterprise, set `baseUrl` to the hostname + `/api/v3`. Example:
+
+```js
+const { Octokit } = require("@octokit/core");
+new App({
+  appId: 123,
+  privateKey: "-----BEGIN PRIVATE KEY-----\n...",
+  oauth: {
+    clientId: 123,
+    clientSecret: "secret",
+  },
+  webhooks: {
+    secret: "secret",
+  },
+  Octokit: Octokit.defaults({
+    baseUrl: "https://ghe.my-company.com/api/v3",
+  }),
+});
+```
+
+Defaults to [`@octokit/core`](https://github.com/octokit/core.js).
+
+</td></tr>
+    <tr id="constructor-option-log">
+      <th>
+        <code>log</code>
+      </th>
+      <th>
+        <code>object</code>
+      </th>
+      <td>
+        Used for internal logging. Defaults to <a href="https://developer.mozilla.org/en-US/docs/Web/API/console"><code>console</code></a>.
+      </td>
+    </tr>
+    <tr>
+      <th>
+        <code>webhooks.secret</code>
+      </th>
+      <th>
+        <code>string</code>
+      </th>
+      <td>
+        <strong>Required.</strong> Secret as configured in the GitHub App's settings.
+      </td>
+    </tr>
+    <tr>
+      <th>
+        <code>webhooks.transform</code>
+      </th>
+      <th>
+        <code>function</code>
+      </th>
+      <td>
+        Only relevant for `app.webhooks.on`. Transform emitted event before calling handlers. Can be asynchronous. 
+      </td>
+    </tr>
+    <tr>
+      <th>
+        <code>oauth.clientId</code>
+      </th>
+      <th>
+        <code>number</code>
+      </th>
+      <td>
+        Find the OAuth <strong>Client ID</strong> on the app’s about page in settings.
+      </td>
+    </tr>
+    <tr>
+      <th>
+        <code>oauth.clientSecret</code>
+      </th>
+      <th>
+        <code>number</code>
+      </th>
+      <td>
+        Find the OAuth  <strong>Client Secret</strong> on the app’s about page in settings.
+      </td>
+    </tr>
+    <tr>
+      <th>
+        <code>oauth.allowSignup</code>
+      </th>
+      <th>
+        <code>boolean</code>
+      </th>
+      <td>
+        Sets the default value for <code>app.oauth.getAuthorizationUrl(options)</code>.
+      </td>
+    </tr>
+  </tbody>
+</table>
+
+## API
+
+### `app.octokit`
+
+Octokit instance. Uses the [`Octokit` constructor option](#constructor-option-octokit) if passed.
+
+### `app.log`
+
+See https://github.com/octokit/core.js#logging. Customize using the [`log` constructor option](#constructor-option-log).
+
+### `app.getInstallationOctokit`
+
+```js
+const octokit = await app.getInstallationOctokit(123);
+```
+
+### `app.eachInstallation`
+
+```js
+for await (const { octokit, installation } of app.eachInstallation.iterator()) { /* ... */ }
+await app.eachInstallation(({ octokit, installation }) => /* ... */)
+```
+
+### `app.eachRepository`
+
+```js
+for await (const { octokit, repository } of app.eachRepository.iterator()) { /* ... */ }
+await app.eachRepository(({ octokit, repository }) => /* ... */)
+```
+
+Optionally pass installation ID to iterate through all repositories in one installation
+
+```js
+for await (const { octokit, repository } of app.eachRepository.iterator({ installationId })) { /* ... */ }
+await app.eachRepository({ installationId }, ({ octokit, repository }) => /* ... */)
+```
+
+### `app.webhooks`
+
+An [`@octokit/webhooks` instance](https://github.com/octokit/webhooks.js/#readme)
+
+### `app.oauth`
+
+An [`@octokit/oauth-app` instance](https://github.com/octokit/oauth-app.js/#readme)
+
+## Middlewares
+
+A middleware is a method or set of methods to handle requests for common environments.
+
+By default, all middlewares expose the following routes
+
+| Route                            | Route Description                                                                                                                                                                                                                                               |
+| -------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `POST /api/github/webhooks`      | Endpoint to receive GitHub Webhook Event requests                                                                                                                                                                                                               |
+| `GET /api/github/oauth/login`    | Redirects to GitHub's authorization endpoint. Accepts optional `?state` query parameter.                                                                                                                                                                        |
+| `GET /api/github/oauth/callback` | The client's redirect endpoint. This is where the `token` event gets triggered                                                                                                                                                                                  |
+| `POST /api/github/oauth/token`   | Exchange an authorization code for an OAuth Access token. If successful, the `token` event gets triggered.                                                                                                                                                      |
+| `GET /api/github/oauth/token`    | Check if token is valid. Must authenticate using token in `Authorization` header. Uses GitHub's [`POST /applications/{client_id}/token`](https://developer.github.com/v3/apps/oauth_applications/#check-a-token) endpoint                                       |
+| `PATCH /api/github/oauth/token`  | Resets a token (invalidates current one, returns new token). Must authenticate using token in `Authorization` header. Uses GitHub's [`PATCH /applications/{client_id}/token`](https://developer.github.com/v3/apps/oauth_applications/#reset-a-token) endpoint. |
+| `DELETE /api/github/oauth/token` | Invalidates current token, basically the equivalent of a logout. Must authenticate using token in `Authorization` header.                                                                                                                                       |
+| `DELETE /api/github/oauth/grant` | Revokes the user's grant, basically the equivalent of an uninstall. must authenticate using token in `Authorization` header.                                                                                                                                    |
+
+### `createNodeMiddleware(app, options)`
+
+Middleware for Node's built in http server or [`express`](https://expressjs.com/).
+
+```js
+const { App, createNodeMiddleware } = require("@octokit/app");
+const app = new App({
+  appId: 123,
+  privateKey: "-----BEGIN PRIVATE KEY-----\n...",
+  oauth: {
+    clientId: "0123",
+    clientSecret: "0123secret",
+  },
+  webhooks: {
+    secret: "secret",
+  },
+});
+
+const middleware = createNodeMiddleware(app);
+
+require("http").createServer(middleware).listen(3000);
+// can now receive user authorization callbacks at /api/github/*
+```
+
+<table width="100%">
+  <thead align=left>
+    <tr>
+      <th width=150>
+        name
+      </th>
+      <th width=70>
+        type
+      </th>
+      <th>
+        description
+      </th>
+    </tr>
+  </thead>
+  <tbody align=left valign=top>
+    <tr>
+      <th>
+        <code>app</code>
+      </th>
+      <th>
+        <code>App instance</code>
+      </th>
+      <td>
+        <strong>Required</strong>.
+      </td>
+    </tr>
+    <tr>
+      <th>
+        <code>options.pathPrefix</code>
+      </th>
+      <th>
+        <code>string</code>
+      </th>
+      <td>
+
+All exposed paths will be prefixed with the provided prefix. Defaults to `"/api/github"`
+
+</td>
+    </tr>
+    <tr>
+      <td>
+        <code>log</code>
+        <em>
+          object
+        </em>
+      </td>
+      <td>
+
+Used for internal logging. Defaults to [`console`](https://developer.mozilla.org/en-US/docs/Web/API/console) with `debug` and `info` doing nothing.
+
+</td>
+    </tr>
+    <tr>
+      <th>
+        <code>options.onUnhandledRequest</code>
+      </th>
+      <th>
+        <code>function</code>
+      </th>
+      <td>
+
+Defaults to
+
+```js
+function onUnhandledRequest(request, response) {
+  response.writeHead(400, {
+    "content-type": "application/json",
+  });
+  response.end(
+    JSON.stringify({
+      error: error.message,
+    })
+  );
+}
+```
+
+</td></tr>
+  </tbody>
+</table>
+
+## Contributing
+
+See [CONTRIBUTING.md](CONTRIBUTING.md)
+
+## License
+
+[MIT](LICENSE)

node_modules/@octokit/app/dist-node/index.js

@@ -0,0 +1,292 @@
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var core = require('@octokit/core');
+var authApp = require('@octokit/auth-app');
+var oauthApp = require('@octokit/oauth-app');
+var authUnauthenticated = require('@octokit/auth-unauthenticated');
+var webhooks$1 = require('@octokit/webhooks');
+var pluginPaginateRest = require('@octokit/plugin-paginate-rest');
+
+const VERSION = "13.1.2";
+
+function webhooks(appOctokit, options
+// Explict return type for better debugability and performance,
+// see https://github.com/octokit/app.js/pull/201
+) {
+  return new webhooks$1.Webhooks({
+    secret: options.secret,
+    transform: async event => {
+      if (!("installation" in event.payload) || typeof event.payload.installation !== "object") {
+        const octokit = new appOctokit.constructor({
+          authStrategy: authUnauthenticated.createUnauthenticatedAuth,
+          auth: {
+            reason: `"installation" key missing in webhook event payload`
+          }
+        });
+        return {
+          ...event,
+          octokit
+        };
+      }
+      const installationId = event.payload.installation.id;
+      const octokit = await appOctokit.auth({
+        type: "installation",
+        installationId,
+        factory(auth) {
+          return new auth.octokit.constructor({
+            ...auth.octokitOptions,
+            authStrategy: authApp.createAppAuth,
+            ...{
+              auth: {
+                ...auth,
+                installationId
+              }
+            }
+          });
+        }
+      });
+      // set `x-github-delivery` header on all requests sent in response to the current
+      // event. This allows GitHub Support to correlate the request with the event.
+      // This is not documented and not considered public API, the header may change.
+      // Once we document this as best practice on https://docs.github.com/en/rest/guides/best-practices-for-integrators
+      // we will make it official
+      /* istanbul ignore next */
+      octokit.hook.before("request", options => {
+        options.headers["x-github-delivery"] = event.id;
+      });
+      return {
+        ...event,
+        octokit
+      };
+    }
+  });
+}
+
+async function getInstallationOctokit(app, installationId) {
+  return app.octokit.auth({
+    type: "installation",
+    installationId: installationId,
+    factory(auth) {
+      const options = {
+        ...auth.octokitOptions,
+        authStrategy: authApp.createAppAuth,
+        ...{
+          auth: {
+            ...auth,
+            installationId: installationId
+          }
+        }
+      };
+      return new auth.octokit.constructor(options);
+    }
+  });
+}
+
+function eachInstallationFactory(app) {
+  return Object.assign(eachInstallation.bind(null, app), {
+    iterator: eachInstallationIterator.bind(null, app)
+  });
+}
+async function eachInstallation(app, callback) {
+  const i = eachInstallationIterator(app)[Symbol.asyncIterator]();
+  let result = await i.next();
+  while (!result.done) {
+    await callback(result.value);
+    result = await i.next();
+  }
+}
+function eachInstallationIterator(app) {
+  return {
+    async *[Symbol.asyncIterator]() {
+      const iterator = pluginPaginateRest.composePaginateRest.iterator(app.octokit, "GET /app/installations");
+      for await (const {
+        data: installations
+      } of iterator) {
+        for (const installation of installations) {
+          const installationOctokit = await getInstallationOctokit(app, installation.id);
+          yield {
+            octokit: installationOctokit,
+            installation
+          };
+        }
+      }
+    }
+  };
+}
+
+function eachRepositoryFactory(app) {
+  return Object.assign(eachRepository.bind(null, app), {
+    iterator: eachRepositoryIterator.bind(null, app)
+  });
+}
+async function eachRepository(app, queryOrCallback, callback) {
+  const i = eachRepositoryIterator(app, callback ? queryOrCallback : undefined)[Symbol.asyncIterator]();
+  let result = await i.next();
+  while (!result.done) {
+    if (callback) {
+      await callback(result.value);
+    } else {
+      await queryOrCallback(result.value);
+    }
+    result = await i.next();
+  }
+}
+function singleInstallationIterator(app, installationId) {
+  return {
+    async *[Symbol.asyncIterator]() {
+      yield {
+        octokit: await app.getInstallationOctokit(installationId)
+      };
+    }
+  };
+}
+function eachRepositoryIterator(app, query) {
+  return {
+    async *[Symbol.asyncIterator]() {
+      const iterator = query ? singleInstallationIterator(app, query.installationId) : app.eachInstallation.iterator();
+      for await (const {
+        octokit
+      } of iterator) {
+        const repositoriesIterator = pluginPaginateRest.composePaginateRest.iterator(octokit, "GET /installation/repositories");
+        for await (const {
+          data: repositories
+        } of repositoriesIterator) {
+          for (const repository of repositories) {
+            yield {
+              octokit: octokit,
+              repository
+            };
+          }
+        }
+      }
+    }
+  };
+}
+
+function onUnhandledRequestDefault(request, response) {
+  response.writeHead(404, {
+    "content-type": "application/json"
+  });
+  response.end(JSON.stringify({
+    error: `Unknown route: ${request.method} ${request.url}`
+  }));
+}
+
+function noop() {}
+function createNodeMiddleware(app, options = {}) {
+  const log = Object.assign({
+    debug: noop,
+    info: noop,
+    warn: console.warn.bind(console),
+    error: console.error.bind(console)
+  }, options.log);
+  const optionsWithDefaults = {
+    onUnhandledRequest: onUnhandledRequestDefault,
+    pathPrefix: "/api/github",
+    ...options,
+    log
+  };
+  const webhooksMiddleware = webhooks$1.createNodeMiddleware(app.webhooks, {
+    path: optionsWithDefaults.pathPrefix + "/webhooks",
+    log,
+    onUnhandledRequest: optionsWithDefaults.onUnhandledRequest
+  });
+  const oauthMiddleware = oauthApp.createNodeMiddleware(app.oauth, {
+    pathPrefix: optionsWithDefaults.pathPrefix + "/oauth",
+    onUnhandledRequest: optionsWithDefaults.onUnhandledRequest
+  });
+  return middleware.bind(null, optionsWithDefaults, {
+    webhooksMiddleware,
+    oauthMiddleware
+  });
+}
+async function middleware(options, {
+  webhooksMiddleware,
+  oauthMiddleware
+}, request, response, next) {
+  const {
+    pathname
+  } = new URL(request.url, "http://localhost");
+  if (pathname === `${options.pathPrefix}/webhooks`) {
+    return webhooksMiddleware(request, response, next);
+  }
+  if (pathname.startsWith(`${options.pathPrefix}/oauth/`)) {
+    return oauthMiddleware(request, response, next);
+  }
+  const isExpressMiddleware = typeof next === "function";
+  if (isExpressMiddleware) {
+    // @ts-ignore `next` must be a function as we check two lines above
+    return next();
+  }
+  return options.onUnhandledRequest(request, response);
+}
+
+class App {
+  static defaults(defaults) {
+    const AppWithDefaults = class extends this {
+      constructor(...args) {
+        super({
+          ...defaults,
+          ...args[0]
+        });
+      }
+    };
+    return AppWithDefaults;
+  }
+  constructor(options) {
+    const Octokit = options.Octokit || core.Octokit;
+    const authOptions = Object.assign({
+      appId: options.appId,
+      privateKey: options.privateKey
+    }, options.oauth ? {
+      clientId: options.oauth.clientId,
+      clientSecret: options.oauth.clientSecret
+    } : {});
+    this.octokit = new Octokit({
+      authStrategy: authApp.createAppAuth,
+      auth: authOptions,
+      log: options.log
+    });
+    this.log = Object.assign({
+      debug: () => {},
+      info: () => {},
+      warn: console.warn.bind(console),
+      error: console.error.bind(console)
+    }, options.log);
+    // set app.webhooks depending on whether "webhooks" option has been passed
+    if (options.webhooks) {
+      // @ts-expect-error TODO: figure this out
+      this.webhooks = webhooks(this.octokit, options.webhooks);
+    } else {
+      Object.defineProperty(this, "webhooks", {
+        get() {
+          throw new Error("[@octokit/app] webhooks option not set");
+        }
+      });
+    }
+    // set app.oauth depending on whether "oauth" option has been passed
+    if (options.oauth) {
+      this.oauth = new oauthApp.OAuthApp({
+        ...options.oauth,
+        clientType: "github-app",
+        Octokit
+      });
+    } else {
+      Object.defineProperty(this, "oauth", {
+        get() {
+          throw new Error("[@octokit/app] oauth.clientId / oauth.clientSecret options are not set");
+        }
+      });
+    }
+    this.getInstallationOctokit = getInstallationOctokit.bind(null, this);
+    this.eachInstallation = eachInstallationFactory(this);
+    this.eachRepository = eachRepositoryFactory(this);
+  }
+}
+App.VERSION = VERSION;
+
+exports.App = App;
+exports.createNodeMiddleware = createNodeMiddleware;
+//# sourceMappingURL=index.js.map

node_modules/@octokit/app/dist-src/each-installation.js

@@ -0,0 +1,28 @@
+import { composePaginateRest } from "@octokit/plugin-paginate-rest";
+import { getInstallationOctokit } from "./get-installation-octokit";
+export function eachInstallationFactory(app) {
+    return Object.assign(eachInstallation.bind(null, app), {
+        iterator: eachInstallationIterator.bind(null, app),
+    });
+}
+export async function eachInstallation(app, callback) {
+    const i = eachInstallationIterator(app)[Symbol.asyncIterator]();
+    let result = await i.next();
+    while (!result.done) {
+        await callback(result.value);
+        result = await i.next();
+    }
+}
+export function eachInstallationIterator(app) {
+    return {
+        async *[Symbol.asyncIterator]() {
+            const iterator = composePaginateRest.iterator(app.octokit, "GET /app/installations");
+            for await (const { data: installations } of iterator) {
+                for (const installation of installations) {
+                    const installationOctokit = await getInstallationOctokit(app, installation.id);
+                    yield { octokit: installationOctokit, installation };
+                }
+            }
+        },
+    };
+}

node_modules/@octokit/app/dist-src/each-repository.js

@@ -0,0 +1,45 @@
+import { composePaginateRest } from "@octokit/plugin-paginate-rest";
+export function eachRepositoryFactory(app) {
+    return Object.assign(eachRepository.bind(null, app), {
+        iterator: eachRepositoryIterator.bind(null, app),
+    });
+}
+export async function eachRepository(app, queryOrCallback, callback) {
+    const i = eachRepositoryIterator(app, callback ? queryOrCallback : undefined)[Symbol.asyncIterator]();
+    let result = await i.next();
+    while (!result.done) {
+        if (callback) {
+            await callback(result.value);
+        }
+        else {
+            await queryOrCallback(result.value);
+        }
+        result = await i.next();
+    }
+}
+function singleInstallationIterator(app, installationId) {
+    return {
+        async *[Symbol.asyncIterator]() {
+            yield {
+                octokit: await app.getInstallationOctokit(installationId),
+            };
+        },
+    };
+}
+export function eachRepositoryIterator(app, query) {
+    return {
+        async *[Symbol.asyncIterator]() {
+            const iterator = query
+                ? singleInstallationIterator(app, query.installationId)
+                : app.eachInstallation.iterator();
+            for await (const { octokit } of iterator) {
+                const repositoriesIterator = composePaginateRest.iterator(octokit, "GET /installation/repositories");
+                for await (const { data: repositories } of repositoriesIterator) {
+                    for (const repository of repositories) {
+                        yield { octokit: octokit, repository };
+                    }
+                }
+            }
+        },
+    };
+}

node_modules/@octokit/app/dist-src/get-installation-octokit.js

@@ -0,0 +1,15 @@
+import { createAppAuth } from "@octokit/auth-app";
+export async function getInstallationOctokit(app, installationId) {
+    return app.octokit.auth({
+        type: "installation",
+        installationId: installationId,
+        factory(auth) {
+            const options = {
+                ...auth.octokitOptions,
+                authStrategy: createAppAuth,
+                ...{ auth: { ...auth, installationId: installationId } },
+            };
+            return new auth.octokit.constructor(options);
+        },
+    });
+}

node_modules/@octokit/app/dist-src/index.js

@@ -0,0 +1,77 @@
+import { Octokit as OctokitCore } from "@octokit/core";
+import { createAppAuth } from "@octokit/auth-app";
+import { OAuthApp } from "@octokit/oauth-app";
+import { VERSION } from "./version";
+import { webhooks } from "./webhooks";
+import { eachInstallationFactory } from "./each-installation";
+import { eachRepositoryFactory } from "./each-repository";
+import { getInstallationOctokit } from "./get-installation-octokit";
+export class App {
+    static defaults(defaults) {
+        const AppWithDefaults = class extends this {
+            constructor(...args) {
+                super({
+                    ...defaults,
+                    ...args[0],
+                });
+            }
+        };
+        return AppWithDefaults;
+    }
+    constructor(options) {
+        const Octokit = (options.Octokit ||
+            OctokitCore);
+        const authOptions = Object.assign({
+            appId: options.appId,
+            privateKey: options.privateKey,
+        }, options.oauth
+            ? {
+                clientId: options.oauth.clientId,
+                clientSecret: options.oauth.clientSecret,
+            }
+            : {});
+        this.octokit = new Octokit({
+            authStrategy: createAppAuth,
+            auth: authOptions,
+            log: options.log,
+        });
+        this.log = Object.assign({
+            debug: () => { },
+            info: () => { },
+            warn: console.warn.bind(console),
+            error: console.error.bind(console),
+        }, options.log);
+        // set app.webhooks depending on whether "webhooks" option has been passed
+        if (options.webhooks) {
+            // @ts-expect-error TODO: figure this out
+            this.webhooks = webhooks(this.octokit, options.webhooks);
+        }
+        else {
+            Object.defineProperty(this, "webhooks", {
+                get() {
+                    throw new Error("[@octokit/app] webhooks option not set");
+                },
+            });
+        }
+        // set app.oauth depending on whether "oauth" option has been passed
+        if (options.oauth) {
+            this.oauth = new OAuthApp({
+                ...options.oauth,
+                clientType: "github-app",
+                Octokit,
+            });
+        }
+        else {
+            Object.defineProperty(this, "oauth", {
+                get() {
+                    throw new Error("[@octokit/app] oauth.clientId / oauth.clientSecret options are not set");
+                },
+            });
+        }
+        this.getInstallationOctokit = getInstallationOctokit.bind(null, this);
+        this.eachInstallation = eachInstallationFactory(this);
+        this.eachRepository = eachRepositoryFactory(this);
+    }
+}
+App.VERSION = VERSION;
+export { createNodeMiddleware } from "./middleware/node/index";

node_modules/@octokit/app/dist-src/middleware/node/index.js

@@ -0,0 +1,46 @@
+import { createNodeMiddleware as oauthNodeMiddleware } from "@octokit/oauth-app";
+import { createNodeMiddleware as webhooksNodeMiddleware } from "@octokit/webhooks";
+import { onUnhandledRequestDefault } from "./on-unhandled-request-default";
+function noop() { }
+export function createNodeMiddleware(app, options = {}) {
+    const log = Object.assign({
+        debug: noop,
+        info: noop,
+        warn: console.warn.bind(console),
+        error: console.error.bind(console),
+    }, options.log);
+    const optionsWithDefaults = {
+        onUnhandledRequest: onUnhandledRequestDefault,
+        pathPrefix: "/api/github",
+        ...options,
+        log,
+    };
+    const webhooksMiddleware = webhooksNodeMiddleware(app.webhooks, {
+        path: optionsWithDefaults.pathPrefix + "/webhooks",
+        log,
+        onUnhandledRequest: optionsWithDefaults.onUnhandledRequest,
+    });
+    const oauthMiddleware = oauthNodeMiddleware(app.oauth, {
+        pathPrefix: optionsWithDefaults.pathPrefix + "/oauth",
+        onUnhandledRequest: optionsWithDefaults.onUnhandledRequest,
+    });
+    return middleware.bind(null, optionsWithDefaults, {
+        webhooksMiddleware,
+        oauthMiddleware,
+    });
+}
+export async function middleware(options, { webhooksMiddleware, oauthMiddleware }, request, response, next) {
+    const { pathname } = new URL(request.url, "http://localhost");
+    if (pathname === `${options.pathPrefix}/webhooks`) {
+        return webhooksMiddleware(request, response, next);
+    }
+    if (pathname.startsWith(`${options.pathPrefix}/oauth/`)) {
+        return oauthMiddleware(request, response, next);
+    }
+    const isExpressMiddleware = typeof next === "function";
+    if (isExpressMiddleware) {
+        // @ts-ignore `next` must be a function as we check two lines above
+        return next();
+    }
+    return options.onUnhandledRequest(request, response);
+}

node_modules/@octokit/app/dist-src/middleware/node/on-unhandled-request-default.js

@@ -0,0 +1,8 @@
+export function onUnhandledRequestDefault(request, response) {
+    response.writeHead(404, {
+        "content-type": "application/json",
+    });
+    response.end(JSON.stringify({
+        error: `Unknown route: ${request.method} ${request.url}`,
+    }));
+}

node_modules/@octokit/app/dist-src/types.js

@@ -0,0 +1 @@
+export {};

node_modules/@octokit/app/dist-src/version.js

@@ -0,0 +1 @@
+export const VERSION = "13.1.2";

node_modules/@octokit/app/dist-src/webhooks.js

@@ -0,0 +1,56 @@
+import { createAppAuth } from "@octokit/auth-app";
+import { createUnauthenticatedAuth } from "@octokit/auth-unauthenticated";
+import { Webhooks } from "@octokit/webhooks";
+export function webhooks(appOctokit, options
+// Explict return type for better debugability and performance,
+// see https://github.com/octokit/app.js/pull/201
+) {
+    return new Webhooks({
+        secret: options.secret,
+        transform: async (event) => {
+            if (!("installation" in event.payload) ||
+                typeof event.payload.installation !== "object") {
+                const octokit = new appOctokit.constructor({
+                    authStrategy: createUnauthenticatedAuth,
+                    auth: {
+                        reason: `"installation" key missing in webhook event payload`,
+                    },
+                });
+                return {
+                    ...event,
+                    octokit,
+                };
+            }
+            const installationId = event.payload.installation.id;
+            const octokit = (await appOctokit.auth({
+                type: "installation",
+                installationId,
+                factory(auth) {
+                    return new auth.octokit.constructor({
+                        ...auth.octokitOptions,
+                        authStrategy: createAppAuth,
+                        ...{
+                            auth: {
+                                ...auth,
+                                installationId,
+                            },
+                        },
+                    });
+                },
+            }));
+            // set `x-github-delivery` header on all requests sent in response to the current
+            // event. This allows GitHub Support to correlate the request with the event.
+            // This is not documented and not considered public API, the header may change.
+            // Once we document this as best practice on https://docs.github.com/en/rest/guides/best-practices-for-integrators
+            // we will make it official
+            /* istanbul ignore next */
+            octokit.hook.before("request", (options) => {
+                options.headers["x-github-delivery"] = event.id;
+            });
+            return {
+                ...event,
+                octokit,
+            };
+        },
+    });
+}

node_modules/@octokit/app/dist-types/each-installation.d.ts

@@ -0,0 +1,121 @@
+import { Octokit } from "@octokit/core";
+import { App } from "./index";
+import { EachInstallationFunction, EachInstallationInterface } from "./types";
+export declare function eachInstallationFactory(app: App): EachInstallationInterface<Octokit>;
+export declare function eachInstallation(app: App, callback: EachInstallationFunction<Octokit>): Promise<void>;
+export declare function eachInstallationIterator(app: App): {
+    [Symbol.asyncIterator](): AsyncGenerator<{
+        octokit: Octokit;
+        installation: {
+            id: number;
+            account: (Partial<{
+                name?: string | null | undefined;
+                email?: string | null | undefined;
+                login: string;
+                id: number;
+                node_id: string;
+                avatar_url: string;
+                gravatar_id: string | null;
+                url: string;
+                html_url: string;
+                followers_url: string;
+                following_url: string;
+                gists_url: string;
+                starred_url: string;
+                subscriptions_url: string;
+                organizations_url: string;
+                repos_url: string;
+                events_url: string;
+                received_events_url: string;
+                type: string;
+                site_admin: boolean;
+                starred_at?: string | undefined;
+            }> & Partial<{
+                description?: string | null | undefined;
+                html_url: string;
+                website_url?: string | null | undefined;
+                id: number;
+                node_id: string;
+                name: string;
+                slug: string;
+                created_at: string | null;
+                updated_at: string | null;
+                avatar_url: string;
+            }>) | null;
+            repository_selection: "all" | "selected";
+            access_tokens_url: string;
+            repositories_url: string;
+            html_url: string;
+            app_id: number;
+            target_id: number;
+            target_type: string;
+            permissions: {
+                actions?: "read" | "write" | undefined;
+                administration?: "read" | "write" | undefined;
+                checks?: "read" | "write" | undefined;
+                contents?: "read" | "write" | undefined;
+                deployments?: "read" | "write" | undefined;
+                environments?: "read" | "write" | undefined;
+                issues?: "read" | "write" | undefined;
+                metadata?: "read" | "write" | undefined;
+                packages?: "read" | "write" | undefined;
+                pages?: "read" | "write" | undefined;
+                pull_requests?: "read" | "write" | undefined;
+                repository_announcement_banners?: "read" | "write" | undefined;
+                repository_hooks?: "read" | "write" | undefined;
+                repository_projects?: "read" | "write" | "admin" | undefined;
+                secret_scanning_alerts?: "read" | "write" | undefined;
+                secrets?: "read" | "write" | undefined;
+                security_events?: "read" | "write" | undefined;
+                single_file?: "read" | "write" | undefined;
+                statuses?: "read" | "write" | undefined;
+                vulnerability_alerts?: "read" | "write" | undefined;
+                workflows?: "write" | undefined;
+                members?: "read" | "write" | undefined;
+                organization_administration?: "read" | "write" | undefined;
+                organization_custom_roles?: "read" | "write" | undefined;
+                organization_announcement_banners?: "read" | "write" | undefined;
+                organization_hooks?: "read" | "write" | undefined;
+                organization_plan?: "read" | undefined;
+                organization_projects?: "read" | "write" | "admin" | undefined;
+                organization_packages?: "read" | "write" | undefined;
+                organization_secrets?: "read" | "write" | undefined;
+                organization_self_hosted_runners?: "read" | "write" | undefined;
+                organization_user_blocking?: "read" | "write" | undefined;
+                team_discussions?: "read" | "write" | undefined;
+            };
+            events: string[];
+            created_at: string;
+            updated_at: string;
+            single_file_name: string | null;
+            has_multiple_single_files?: boolean | undefined;
+            single_file_paths?: string[] | undefined;
+            app_slug: string;
+            suspended_by: {
+                name?: string | null | undefined;
+                email?: string | null | undefined;
+                login: string;
+                id: number;
+                node_id: string;
+                avatar_url: string;
+                gravatar_id: string | null;
+                url: string;
+                html_url: string;
+                followers_url: string;
+                following_url: string;
+                gists_url: string;
+                starred_url: string;
+                subscriptions_url: string;
+                organizations_url: string;
+                repos_url: string;
+                events_url: string;
+                received_events_url: string;
+                type: string;
+                site_admin: boolean;
+                starred_at?: string | undefined;
+            } | null;
+            suspended_at: string | null;
+            contact_email?: string | null | undefined;
+        };
+    }, void, unknown>;
+};

node_modules/@octokit/app/dist-types/each-repository.d.ts

@@ -0,0 +1,281 @@
+import { Octokit } from "@octokit/core";
+import { App } from "./index";
+import { EachRepositoryFunction, EachRepositoryInterface, EachRepositoryQuery } from "./types";
+export declare function eachRepositoryFactory(app: App): EachRepositoryInterface<Octokit>;
+export declare function eachRepository(app: App, queryOrCallback: EachRepositoryQuery | EachRepositoryFunction<Octokit>, callback?: EachRepositoryFunction<Octokit>): Promise<void>;
+export declare function eachRepositoryIterator(app: App, query?: EachRepositoryQuery): {
+    [Symbol.asyncIterator](): AsyncGenerator<{
+        octokit: Octokit;
+        repository: {
+            id: number;
+            node_id: string;
+            name: string;
+            full_name: string;
+            license: {
+                key: string;
+                name: string;
+                url: string | null;
+                spdx_id: string | null;
+                node_id: string;
+                html_url?: string | undefined;
+            } | null;
+            organization?: {
+                name?: string | null | undefined;
+                email?: string | null | undefined;
+                login: string;
+                id: number;
+                node_id: string;
+                avatar_url: string;
+                gravatar_id: string | null;
+                url: string;
+                html_url: string;
+                followers_url: string;
+                following_url: string;
+                gists_url: string;
+                starred_url: string;
+                subscriptions_url: string;
+                organizations_url: string;
+                repos_url: string;
+                events_url: string;
+                received_events_url: string;
+                type: string;
+                site_admin: boolean;
+                starred_at?: string | undefined;
+            } | null | undefined;
+            forks: number;
+            permissions?: {
+                admin: boolean;
+                pull: boolean;
+                triage?: boolean | undefined;
+                push: boolean;
+                maintain?: boolean | undefined;
+            } | undefined;
+            owner: {
+                name?: string | null | undefined;
+                email?: string | null | undefined;
+                login: string;
+                id: number;
+                node_id: string;
+                avatar_url: string;
+                gravatar_id: string | null;
+                url: string;
+                html_url: string;
+                followers_url: string;
+                following_url: string;
+                gists_url: string;
+                starred_url: string;
+                subscriptions_url: string;
+                organizations_url: string;
+                repos_url: string;
+                events_url: string;
+                received_events_url: string;
+                type: string;
+                site_admin: boolean;
+                starred_at?: string | undefined;
+            };
+            private: boolean;
+            html_url: string;
+            description: string | null;
+            fork: boolean;
+            url: string;
+            archive_url: string;
+            assignees_url: string;
+            blobs_url: string;
+            branches_url: string;
+            collaborators_url: string;
+            comments_url: string;
+            commits_url: string;
+            compare_url: string;
+            contents_url: string;
+            contributors_url: string;
+            deployments_url: string;
+            downloads_url: string;
+            events_url: string;
+            forks_url: string;
+            git_commits_url: string;
+            git_refs_url: string;
+            git_tags_url: string;
+            git_url: string;
+            issue_comment_url: string;
+            issue_events_url: string;
+            issues_url: string;
+            keys_url: string;
+            labels_url: string;
+            languages_url: string;
+            merges_url: string;
+            milestones_url: string;
+            notifications_url: string;
+            pulls_url: string;
+            releases_url: string;
+            ssh_url: string;
+            stargazers_url: string;
+            statuses_url: string;
+            subscribers_url: string;
+            subscription_url: string;
+            tags_url: string;
+            teams_url: string;
+            trees_url: string;
+            clone_url: string;
+            mirror_url: string | null;
+            hooks_url: string;
+            svn_url: string;
+            homepage: string | null;
+            language: string | null;
+            forks_count: number;
+            stargazers_count: number;
+            watchers_count: number;
+            size: number;
+            default_branch: string;
+            open_issues_count: number;
+            is_template?: boolean | undefined;
+            topics?: string[] | undefined;
+            has_issues: boolean;
+            has_projects: boolean;
+            has_wiki: boolean;
+            has_pages: boolean;
+            has_downloads: boolean;
+            has_discussions?: boolean | undefined;
+            archived: boolean;
+            disabled: boolean;
+            visibility?: string | undefined;
+            pushed_at: string | null;
+            created_at: string | null;
+            updated_at: string | null;
+            allow_rebase_merge?: boolean | undefined;
+            template_repository?: {
+                id?: number | undefined;
+                node_id?: string | undefined;
+                name?: string | undefined;
+                full_name?: string | undefined;
+                owner?: {
+                    login?: string | undefined;
+                    id?: number | undefined;
+                    node_id?: string | undefined;
+                    avatar_url?: string | undefined;
+                    gravatar_id?: string | undefined;
+                    url?: string | undefined;
+                    html_url?: string | undefined;
+                    followers_url?: string | undefined;
+                    following_url?: string | undefined;
+                    gists_url?: string | undefined;
+                    starred_url?: string | undefined;
+                    subscriptions_url?: string | undefined;
+                    organizations_url?: string | undefined;
+                    repos_url?: string | undefined;
+                    events_url?: string | undefined;
+                    received_events_url?: string | undefined;
+                    type?: string | undefined;
+                    site_admin?: boolean | undefined;
+                } | undefined;
+                private?: boolean | undefined;
+                html_url?: string | undefined;
+                description?: string | undefined;
+                fork?: boolean | undefined;
+                url?: string | undefined;
+                archive_url?: string | undefined;
+                assignees_url?: string | undefined;
+                blobs_url?: string | undefined;
+                branches_url?: string | undefined;
+                collaborators_url?: string | undefined;
+                comments_url?: string | undefined;
+                commits_url?: string | undefined;
+                compare_url?: string | undefined;
+                contents_url?: string | undefined;
+                contributors_url?: string | undefined;
+                deployments_url?: string | undefined;
+                downloads_url?: string | undefined;
+                events_url?: string | undefined;
+                forks_url?: string | undefined;
+                git_commits_url?: string | undefined;
+                git_refs_url?: string | undefined;
+                git_tags_url?: string | undefined;
+                git_url?: string | undefined;
+                issue_comment_url?: string | undefined;
+                issue_events_url?: string | undefined;
+                issues_url?: string | undefined;
+                keys_url?: string | undefined;
+                labels_url?: string | undefined;
+                languages_url?: string | undefined;
+                merges_url?: string | undefined;
+                milestones_url?: string | undefined;
+                notifications_url?: string | undefined;
+                pulls_url?: string | undefined;
+                releases_url?: string | undefined;
+                ssh_url?: string | undefined;
+                stargazers_url?: string | undefined;
+                statuses_url?: string | undefined;
+                subscribers_url?: string | undefined;
+                subscription_url?: string | undefined;
+                tags_url?: string | undefined;
+                teams_url?: string | undefined;
+                trees_url?: string | undefined;
+                clone_url?: string | undefined;
+                mirror_url?: string | undefined;
+                hooks_url?: string | undefined;
+                svn_url?: string | undefined;
+                homepage?: string | undefined;
+                language?: string | undefined;
+                forks_count?: number | undefined;
+                stargazers_count?: number | undefined;
+                watchers_count?: number | undefined;
+                size?: number | undefined;
+                default_branch?: string | undefined;
+                open_issues_count?: number | undefined;
+                is_template?: boolean | undefined;
+                topics?: string[] | undefined;
+                has_issues?: boolean | undefined;
+                has_projects?: boolean | undefined;
+                has_wiki?: boolean | undefined;
+                has_pages?: boolean | undefined;
+                has_downloads?: boolean | undefined;
+                archived?: boolean | undefined;
+                disabled?: boolean | undefined;
+                visibility?: string | undefined;
+                pushed_at?: string | undefined;
+                created_at?: string | undefined;
+                updated_at?: string | undefined;
+                permissions?: {
+                    admin?: boolean | undefined;
+                    maintain?: boolean | undefined;
+                    push?: boolean | undefined;
+                    triage?: boolean | undefined;
+                    pull?: boolean | undefined;
+                } | undefined;
+                allow_rebase_merge?: boolean | undefined;
+                temp_clone_token?: string | undefined;
+                allow_squash_merge?: boolean | undefined;
+                allow_auto_merge?: boolean | undefined;
+                delete_branch_on_merge?: boolean | undefined;
+                allow_update_branch?: boolean | undefined;
+                use_squash_pr_title_as_default?: boolean | undefined;
+                squash_merge_commit_title?: "PR_TITLE" | "COMMIT_OR_PR_TITLE" | undefined;
+                squash_merge_commit_message?: "PR_BODY" | "COMMIT_MESSAGES" | "BLANK" | undefined;
+                merge_commit_title?: "PR_TITLE" | "MERGE_MESSAGE" | undefined;
+                merge_commit_message?: "PR_TITLE" | "PR_BODY" | "BLANK" | undefined;
+                allow_merge_commit?: boolean | undefined;
+                subscribers_count?: number | undefined;
+                network_count?: number | undefined;
+            } | null | undefined;
+            temp_clone_token?: string | undefined;
+            allow_squash_merge?: boolean | undefined;
+            allow_auto_merge?: boolean | undefined;
+            delete_branch_on_merge?: boolean | undefined;
+            allow_update_branch?: boolean | undefined;
+            use_squash_pr_title_as_default?: boolean | undefined;
+            squash_merge_commit_title?: "PR_TITLE" | "COMMIT_OR_PR_TITLE" | undefined;
+            squash_merge_commit_message?: "PR_BODY" | "COMMIT_MESSAGES" | "BLANK" | undefined;
+            merge_commit_title?: "PR_TITLE" | "MERGE_MESSAGE" | undefined;
+            merge_commit_message?: "PR_TITLE" | "PR_BODY" | "BLANK" | undefined;
+            allow_merge_commit?: boolean | undefined;
+            allow_forking?: boolean | undefined;
+            web_commit_signoff_required?: boolean | undefined;
+            subscribers_count?: number | undefined;
+            network_count?: number | undefined;
+            open_issues: number;
+            watchers: number;
+            master_branch?: string | undefined;
+            starred_at?: string | undefined;
+            anonymous_access_enabled?: boolean | undefined;
+        };
+    }, void, unknown>;
+};

node_modules/@octokit/app/dist-types/get-installation-octokit.d.ts

@@ -0,0 +1,3 @@
+import { Octokit } from "@octokit/core";
+import { App } from "./index";
+export declare function getInstallationOctokit(app: App, installationId: number): Promise<Octokit>;

node_modules/@octokit/app/dist-types/index.d.ts

@@ -0,0 +1,52 @@
+import { Octokit as OctokitCore } from "@octokit/core";
+import { OAuthApp } from "@octokit/oauth-app";
+import { Webhooks } from "@octokit/webhooks";
+import { Options, ConstructorOptions, EachInstallationInterface, EachRepositoryInterface, GetInstallationOctokitInterface } from "./types";
+type Constructor<T> = new (...args: any[]) => T;
+type OctokitType<TOptions extends Options> = TOptions["Octokit"] extends typeof OctokitCore ? InstanceType<TOptions["Octokit"]> : OctokitCore;
+type OctokitClassType<TOptions extends Options> = TOptions["Octokit"] extends typeof OctokitCore ? TOptions["Octokit"] : typeof OctokitCore;
+export declare class App<TOptions extends Options = Options> {
+    static VERSION: string;
+    static defaults<TDefaults extends Options, S extends Constructor<App<TDefaults>>>(this: S, defaults: Partial<TDefaults>): {
+        new (...args: any[]): {
+            octokit: OctokitType<TDefaults>;
+            webhooks: Webhooks<{
+                octokit: OctokitType<TDefaults>;
+            }>;
+            oauth: OAuthApp<{
+                clientType: "github-app";
+                Octokit: OctokitClassType<TDefaults>;
+            }>;
+            getInstallationOctokit: GetInstallationOctokitInterface<OctokitType<TDefaults>>;
+            eachInstallation: EachInstallationInterface<OctokitType<TDefaults>>;
+            eachRepository: EachRepositoryInterface<OctokitType<TDefaults>>;
+            log: {
+                [key: string]: unknown;
+                debug: (message: string, additionalInfo?: object | undefined) => void;
+                info: (message: string, additionalInfo?: object | undefined) => void;
+                warn: (message: string, additionalInfo?: object | undefined) => void;
+                error: (message: string, additionalInfo?: object | undefined) => void;
+            };
+        };
+    } & S;
+    octokit: OctokitType<TOptions>;
+    webhooks: Webhooks<{
+        octokit: OctokitType<TOptions>;
+    }>;
+    oauth: OAuthApp<{
+        clientType: "github-app";
+        Octokit: OctokitClassType<TOptions>;
+    }>;
+    getInstallationOctokit: GetInstallationOctokitInterface<OctokitType<TOptions>>;
+    eachInstallation: EachInstallationInterface<OctokitType<TOptions>>;
+    eachRepository: EachRepositoryInterface<OctokitType<TOptions>>;
+    log: {
+        debug: (message: string, additionalInfo?: object) => void;
+        info: (message: string, additionalInfo?: object) => void;
+        warn: (message: string, additionalInfo?: object) => void;
+        error: (message: string, additionalInfo?: object) => void;
+        [key: string]: unknown;
+    };
+    constructor(options: ConstructorOptions<TOptions>);
+}
+export { createNodeMiddleware } from "./middleware/node/index";

node_modules/@octokit/app/dist-types/middleware/node/index.d.ts

@@ -0,0 +1,12 @@
+type IncomingMessage = any;
+type ServerResponse = any;
+import { App } from "../../index";
+import { Options } from "../../types";
+export type MiddlewareOptions = {
+    pathPrefix?: string;
+    log?: Options["log"];
+    onUnhandledRequest?: (request: IncomingMessage, response: ServerResponse) => void;
+};
+export declare function createNodeMiddleware(app: App, options?: MiddlewareOptions): (request: any, response: any, next?: Function | undefined) => Promise<any>;
+export declare function middleware(options: Required<MiddlewareOptions>, { webhooksMiddleware, oauthMiddleware }: any, request: IncomingMessage, response: ServerResponse, next?: Function): Promise<any>;
+export {};

node_modules/@octokit/app/dist-types/middleware/node/on-unhandled-request-default.d.ts

@@ -0,0 +1,4 @@
+type IncomingMessage = any;
+type ServerResponse = any;
+export declare function onUnhandledRequestDefault(request: IncomingMessage, response: ServerResponse): void;
+export {};

node_modules/@octokit/app/dist-types/types.d.ts

@@ -0,0 +1,51 @@
+import { Octokit } from "@octokit/core";
+import { Endpoints } from "@octokit/types";
+export type Options = {
+    appId?: number | string;
+    privateKey?: string;
+    webhooks?: {
+        secret: string;
+    };
+    oauth?: {
+        clientId: string;
+        clientSecret: string;
+        allowSignup?: boolean;
+    };
+    Octokit?: typeof Octokit;
+    log?: {
+        debug: (...data: any[]) => void;
+        info: (...data: any[]) => void;
+        warn: (...data: any[]) => void;
+        error: (...data: any[]) => void;
+    };
+};
+export type ConstructorOptions<TOptions extends Options> = TOptions & {
+    appId: number | string;
+    privateKey: string;
+};
+export type InstallationFunctionOptions<O> = {
+    octokit: O;
+    installation: Endpoints["GET /app/installations"]["response"]["data"][0];
+};
+export type EachInstallationFunction<O> = (options: InstallationFunctionOptions<O>) => unknown | Promise<unknown>;
+export interface EachInstallationInterface<O> {
+    (callback: EachInstallationFunction<O>): Promise<void>;
+    iterator: () => AsyncIterable<InstallationFunctionOptions<O>>;
+}
+type EachRepositoryFunctionOptions<O> = {
+    octokit: O;
+    repository: Endpoints["GET /installation/repositories"]["response"]["data"]["repositories"][0];
+};
+export type EachRepositoryFunction<O> = (options: EachRepositoryFunctionOptions<O>) => unknown | Promise<unknown>;
+export type EachRepositoryQuery = {
+    installationId: number;
+};
+export interface EachRepositoryInterface<O> {
+    (callback: EachRepositoryFunction<O>): Promise<void>;
+    (query: EachRepositoryQuery, callback: EachRepositoryFunction<O>): Promise<void>;
+    iterator: (query?: EachRepositoryQuery) => AsyncIterable<EachRepositoryFunctionOptions<O>>;
+}
+export interface GetInstallationOctokitInterface<O> {
+    (installationId: number): Promise<O>;
+}
+export {};

node_modules/@octokit/app/dist-types/version.d.ts

@@ -0,0 +1 @@
+export declare const VERSION = "13.1.2";

node_modules/@octokit/app/dist-types/webhooks.d.ts

@@ -0,0 +1,6 @@
+import { Octokit } from "@octokit/core";
+import { Webhooks, EmitterWebhookEvent } from "@octokit/webhooks";
+import { Options } from "./types";
+export declare function webhooks(appOctokit: Octokit, options: Required<Options>["webhooks"]): Webhooks<EmitterWebhookEvent & {
+    octokit: Octokit;
+}>;

node_modules/@octokit/app/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@octokit/app",
+  "description": "GitHub Apps toolset for Node.js",
+  "version": "13.1.2",
+  "license": "MIT",
+  "files": [
+    "dist-*/",
+    "bin/"
+  ],
+  "source": "dist-src/index.js",
+  "types": "dist-types/index.d.ts",
+  "main": "dist-node/index.js",
+  "pika": true,
+  "sideEffects": false,
+  "repository": "github:octokit/app.js",
+  "dependencies": {
+    "@octokit/auth-app": "^4.0.8",
+    "@octokit/auth-unauthenticated": "^3.0.0",
+    "@octokit/core": "^4.0.0",
+    "@octokit/oauth-app": "^4.0.7",
+    "@octokit/plugin-paginate-rest": "^6.0.0",
+    "@octokit/types": "^9.0.0",
+    "@octokit/webhooks": "^10.0.0"
+  },
+  "devDependencies": {
+    "@pika/pack": "^0.3.7",
+    "@pika/plugin-build-node": "^0.9.1",
+    "@pika/plugin-ts-standard-pkg": "^0.9.1",
+    "@types/jest": "^29.0.0",
+    "@types/node": "^18.0.0",
+    "@types/node-fetch": "^2.5.8",
+    "express": "^4.17.1",
+    "fetch-mock": "^9.10.7",
+    "jest": "^29.0.0",
+    "mockdate": "^3.0.2",
+    "node-fetch": "^2.6.7",
+    "prettier": "2.8.3",
+    "semantic-release-plugin-update-version-in-files": "^1.0.0",
+    "ts-jest": "^29.0.0",
+    "typescript": "^4.0.5"
+  },
+  "engines": {
+    "node": ">= 14"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

node_modules/@octokit/auth-app/LICENSE

@@ -0,0 +1,21 @@
+The MIT License
+
+Copyright (c) 2019 Octokit contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

node_modules/@octokit/auth-app/dist-node/index.js

@@ -0,0 +1,418 @@
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+function _interopDefault (ex) { return (ex && (typeof ex === 'object') && 'default' in ex) ? ex['default'] : ex; }
+
+var universalUserAgent = require('universal-user-agent');
+var request = require('@octokit/request');
+var authOauthApp = require('@octokit/auth-oauth-app');
+var deprecation = require('deprecation');
+var universalGithubAppJwt = require('universal-github-app-jwt');
+var LRU = _interopDefault(require('lru-cache'));
+var authOauthUser = require('@octokit/auth-oauth-user');
+
+async function getAppAuthentication({
+  appId,
+  privateKey,
+  timeDifference
+}) {
+  try {
+    const appAuthentication = await universalGithubAppJwt.githubAppJwt({
+      id: +appId,
+      privateKey,
+      now: timeDifference && Math.floor(Date.now() / 1000) + timeDifference
+    });
+    return {
+      type: "app",
+      token: appAuthentication.token,
+      appId: appAuthentication.appId,
+      expiresAt: new Date(appAuthentication.expiration * 1000).toISOString()
+    };
+  } catch (error) {
+    if (privateKey === "-----BEGIN RSA PRIVATE KEY-----") {
+      throw new Error("The 'privateKey` option contains only the first line '-----BEGIN RSA PRIVATE KEY-----'. If you are setting it using a `.env` file, make sure it is set on a single line with newlines replaced by '\n'");
+    } else {
+      throw error;
+    }
+  }
+}
+
+// https://github.com/isaacs/node-lru-cache#readme
+function getCache() {
+  return new LRU({
+    // cache max. 15000 tokens, that will use less than 10mb memory
+    max: 15000,
+    // Cache for 1 minute less than GitHub expiry
+    maxAge: 1000 * 60 * 59
+  });
+}
+async function get(cache, options) {
+  const cacheKey = optionsToCacheKey(options);
+  const result = await cache.get(cacheKey);
+  if (!result) {
+    return;
+  }
+  const [token, createdAt, expiresAt, repositorySelection, permissionsString, singleFileName] = result.split("|");
+  const permissions = options.permissions || permissionsString.split(/,/).reduce((permissions, string) => {
+    if (/!$/.test(string)) {
+      permissions[string.slice(0, -1)] = "write";
+    } else {
+      permissions[string] = "read";
+    }
+    return permissions;
+  }, {});
+  return {
+    token,
+    createdAt,
+    expiresAt,
+    permissions,
+    repositoryIds: options.repositoryIds,
+    repositoryNames: options.repositoryNames,
+    singleFileName,
+    repositorySelection: repositorySelection
+  };
+}
+async function set(cache, options, data) {
+  const key = optionsToCacheKey(options);
+  const permissionsString = options.permissions ? "" : Object.keys(data.permissions).map(name => `${name}${data.permissions[name] === "write" ? "!" : ""}`).join(",");
+  const value = [data.token, data.createdAt, data.expiresAt, data.repositorySelection, permissionsString, data.singleFileName].join("|");
+  await cache.set(key, value);
+}
+function optionsToCacheKey({
+  installationId,
+  permissions = {},
+  repositoryIds = [],
+  repositoryNames = []
+}) {
+  const permissionsString = Object.keys(permissions).sort().map(name => permissions[name] === "read" ? name : `${name}!`).join(",");
+  const repositoryIdsString = repositoryIds.sort().join(",");
+  const repositoryNamesString = repositoryNames.join(",");
+  return [installationId, repositoryIdsString, repositoryNamesString, permissionsString].filter(Boolean).join("|");
+}
+
+function toTokenAuthentication({
+  installationId,
+  token,
+  createdAt,
+  expiresAt,
+  repositorySelection,
+  permissions,
+  repositoryIds,
+  repositoryNames,
+  singleFileName
+}) {
+  return Object.assign({
+    type: "token",
+    tokenType: "installation",
+    token,
+    installationId,
+    permissions,
+    createdAt,
+    expiresAt,
+    repositorySelection
+  }, repositoryIds ? {
+    repositoryIds
+  } : null, repositoryNames ? {
+    repositoryNames
+  } : null, singleFileName ? {
+    singleFileName
+  } : null);
+}
+
+async function getInstallationAuthentication(state, options, customRequest) {
+  const installationId = Number(options.installationId || state.installationId);
+  if (!installationId) {
+    throw new Error("[@octokit/auth-app] installationId option is required for installation authentication.");
+  }
+  if (options.factory) {
+    const {
+      type,
+      factory,
+      oauthApp,
+      ...factoryAuthOptions
+    } = {
+      ...state,
+      ...options
+    };
+    // @ts-expect-error if `options.factory` is set, the return type for `auth()` should be `Promise<ReturnType<options.factory>>`
+    return factory(factoryAuthOptions);
+  }
+  const optionsWithInstallationTokenFromState = Object.assign({
+    installationId
+  }, options);
+  if (!options.refresh) {
+    const result = await get(state.cache, optionsWithInstallationTokenFromState);
+    if (result) {
+      const {
+        token,
+        createdAt,
+        expiresAt,
+        permissions,
+        repositoryIds,
+        repositoryNames,
+        singleFileName,
+        repositorySelection
+      } = result;
+      return toTokenAuthentication({
+        installationId,
+        token,
+        createdAt,
+        expiresAt,
+        permissions,
+        repositorySelection,
+        repositoryIds,
+        repositoryNames,
+        singleFileName
+      });
+    }
+  }
+  const appAuthentication = await getAppAuthentication(state);
+  const request = customRequest || state.request;
+  const {
+    data: {
+      token,
+      expires_at: expiresAt,
+      repositories,
+      permissions: permissionsOptional,
+      repository_selection: repositorySelectionOptional,
+      single_file: singleFileName
+    }
+  } = await request("POST /app/installations/{installation_id}/access_tokens", {
+    installation_id: installationId,
+    repository_ids: options.repositoryIds,
+    repositories: options.repositoryNames,
+    permissions: options.permissions,
+    mediaType: {
+      previews: ["machine-man"]
+    },
+    headers: {
+      authorization: `bearer ${appAuthentication.token}`
+    }
+  });
+  /* istanbul ignore next - permissions are optional per OpenAPI spec, but we think that is incorrect */
+  const permissions = permissionsOptional || {};
+  /* istanbul ignore next - repositorySelection are optional per OpenAPI spec, but we think that is incorrect */
+  const repositorySelection = repositorySelectionOptional || "all";
+  const repositoryIds = repositories ? repositories.map(r => r.id) : void 0;
+  const repositoryNames = repositories ? repositories.map(repo => repo.name) : void 0;
+  const createdAt = new Date().toISOString();
+  await set(state.cache, optionsWithInstallationTokenFromState, {
+    token,
+    createdAt,
+    expiresAt,
+    repositorySelection,
+    permissions,
+    repositoryIds,
+    repositoryNames,
+    singleFileName
+  });
+  return toTokenAuthentication({
+    installationId,
+    token,
+    createdAt,
+    expiresAt,
+    repositorySelection,
+    permissions,
+    repositoryIds,
+    repositoryNames,
+    singleFileName
+  });
+}
+
+async function auth(state, authOptions) {
+  switch (authOptions.type) {
+    case "app":
+      return getAppAuthentication(state);
+    // @ts-expect-error "oauth" is not supperted in types
+    case "oauth":
+      state.log.warn(
+      // @ts-expect-error `log.warn()` expects string
+      new deprecation.Deprecation(`[@octokit/auth-app] {type: "oauth"} is deprecated. Use {type: "oauth-app"} instead`));
+    case "oauth-app":
+      return state.oauthApp({
+        type: "oauth-app"
+      });
+    case "installation":
+      return getInstallationAuthentication(state, {
+        ...authOptions,
+        type: "installation"
+      });
+    case "oauth-user":
+      // @ts-expect-error TODO: infer correct auth options type based on type. authOptions should be typed as "WebFlowAuthOptions | OAuthAppDeviceFlowAuthOptions | GitHubAppDeviceFlowAuthOptions"
+      return state.oauthApp(authOptions);
+    default:
+      // @ts-expect-error type is "never" at this point
+      throw new Error(`Invalid auth type: ${authOptions.type}`);
+  }
+}
+
+const PATHS = ["/app", "/app/hook/config", "/app/hook/deliveries", "/app/hook/deliveries/{delivery_id}", "/app/hook/deliveries/{delivery_id}/attempts", "/app/installations", "/app/installations/{installation_id}", "/app/installations/{installation_id}/access_tokens", "/app/installations/{installation_id}/suspended", "/marketplace_listing/accounts/{account_id}", "/marketplace_listing/plan", "/marketplace_listing/plans", "/marketplace_listing/plans/{plan_id}/accounts", "/marketplace_listing/stubbed/accounts/{account_id}", "/marketplace_listing/stubbed/plan", "/marketplace_listing/stubbed/plans", "/marketplace_listing/stubbed/plans/{plan_id}/accounts", "/orgs/{org}/installation", "/repos/{owner}/{repo}/installation", "/users/{username}/installation"];
+// CREDIT: Simon Grondin (https://github.com/SGrondin)
+// https://github.com/octokit/plugin-throttling.js/blob/45c5d7f13b8af448a9dbca468d9c9150a73b3948/lib/route-matcher.js
+function routeMatcher(paths) {
+  // EXAMPLE. For the following paths:
+  /* [
+      "/orgs/{org}/invitations",
+      "/repos/{owner}/{repo}/collaborators/{username}"
+  ] */
+  const regexes = paths.map(p => p.split("/").map(c => c.startsWith("{") ? "(?:.+?)" : c).join("/"));
+  // 'regexes' would contain:
+  /* [
+      '/orgs/(?:.+?)/invitations',
+      '/repos/(?:.+?)/(?:.+?)/collaborators/(?:.+?)'
+  ] */
+  const regex = `^(?:${regexes.map(r => `(?:${r})`).join("|")})[^/]*$`;
+  // 'regex' would contain:
+  /*
+    ^(?:(?:\/orgs\/(?:.+?)\/invitations)|(?:\/repos\/(?:.+?)\/(?:.+?)\/collaborators\/(?:.+?)))[^\/]*$
+       It may look scary, but paste it into https://www.debuggex.com/
+    and it will make a lot more sense!
+  */
+  return new RegExp(regex, "i");
+}
+const REGEX = routeMatcher(PATHS);
+function requiresAppAuth(url) {
+  return !!url && REGEX.test(url);
+}
+
+const FIVE_SECONDS_IN_MS = 5 * 1000;
+function isNotTimeSkewError(error) {
+  return !(error.message.match(/'Expiration time' claim \('exp'\) must be a numeric value representing the future time at which the assertion expires/) || error.message.match(/'Issued at' claim \('iat'\) must be an Integer representing the time that the assertion was issued/));
+}
+async function hook(state, request, route, parameters) {
+  const endpoint = request.endpoint.merge(route, parameters);
+  const url = endpoint.url;
+  // Do not intercept request to retrieve a new token
+  if (/\/login\/oauth\/access_token$/.test(url)) {
+    return request(endpoint);
+  }
+  if (requiresAppAuth(url.replace(request.endpoint.DEFAULTS.baseUrl, ""))) {
+    const {
+      token
+    } = await getAppAuthentication(state);
+    endpoint.headers.authorization = `bearer ${token}`;
+    let response;
+    try {
+      response = await request(endpoint);
+    } catch (error) {
+      // If there's an issue with the expiration, regenerate the token and try again.
+      // Otherwise rethrow the error for upstream handling.
+      if (isNotTimeSkewError(error)) {
+        throw error;
+      }
+      // If the date header is missing, we can't correct the system time skew.
+      // Throw the error to be handled upstream.
+      if (typeof error.response.headers.date === "undefined") {
+        throw error;
+      }
+      const diff = Math.floor((Date.parse(error.response.headers.date) - Date.parse(new Date().toString())) / 1000);
+      state.log.warn(error.message);
+      state.log.warn(`[@octokit/auth-app] GitHub API time and system time are different by ${diff} seconds. Retrying request with the difference accounted for.`);
+      const {
+        token
+      } = await getAppAuthentication({
+        ...state,
+        timeDifference: diff
+      });
+      endpoint.headers.authorization = `bearer ${token}`;
+      return request(endpoint);
+    }
+    return response;
+  }
+  if (authOauthUser.requiresBasicAuth(url)) {
+    const authentication = await state.oauthApp({
+      type: "oauth-app"
+    });
+    endpoint.headers.authorization = authentication.headers.authorization;
+    return request(endpoint);
+  }
+  const {
+    token,
+    createdAt
+  } = await getInstallationAuthentication(state,
+  // @ts-expect-error TBD
+  {}, request);
+  endpoint.headers.authorization = `token ${token}`;
+  return sendRequestWithRetries(state, request, endpoint, createdAt);
+}
+/**
+ * Newly created tokens might not be accessible immediately after creation.
+ * In case of a 401 response, we retry with an exponential delay until more
+ * than five seconds pass since the creation of the token.
+ *
+ * @see https://github.com/octokit/auth-app.js/issues/65
+ */
+async function sendRequestWithRetries(state, request, options, createdAt, retries = 0) {
+  const timeSinceTokenCreationInMs = +new Date() - +new Date(createdAt);
+  try {
+    return await request(options);
+  } catch (error) {
+    if (error.status !== 401) {
+      throw error;
+    }
+    if (timeSinceTokenCreationInMs >= FIVE_SECONDS_IN_MS) {
+      if (retries > 0) {
+        error.message = `After ${retries} retries within ${timeSinceTokenCreationInMs / 1000}s of creating the installation access token, the response remains 401. At this point, the cause may be an authentication problem or a system outage. Please check https://www.githubstatus.com for status information`;
+      }
+      throw error;
+    }
+    ++retries;
+    const awaitTime = retries * 1000;
+    state.log.warn(`[@octokit/auth-app] Retrying after 401 response to account for token replication delay (retry: ${retries}, wait: ${awaitTime / 1000}s)`);
+    await new Promise(resolve => setTimeout(resolve, awaitTime));
+    return sendRequestWithRetries(state, request, options, createdAt, retries);
+  }
+}
+
+const VERSION = "4.0.9";
+
+function createAppAuth(options) {
+  if (!options.appId) {
+    throw new Error("[@octokit/auth-app] appId option is required");
+  }
+  if (!Number.isFinite(+options.appId)) {
+    throw new Error("[@octokit/auth-app] appId option must be a number or numeric string");
+  }
+  if (!options.privateKey) {
+    throw new Error("[@octokit/auth-app] privateKey option is required");
+  }
+  if ("installationId" in options && !options.installationId) {
+    throw new Error("[@octokit/auth-app] installationId is set to a falsy value");
+  }
+  const log = Object.assign({
+    warn: console.warn.bind(console)
+  }, options.log);
+  const request$1 = options.request || request.request.defaults({
+    headers: {
+      "user-agent": `octokit-auth-app.js/${VERSION} ${universalUserAgent.getUserAgent()}`
+    }
+  });
+  const state = Object.assign({
+    request: request$1,
+    cache: getCache()
+  }, options, options.installationId ? {
+    installationId: Number(options.installationId)
+  } : {}, {
+    log,
+    oauthApp: authOauthApp.createOAuthAppAuth({
+      clientType: "github-app",
+      clientId: options.clientId || "",
+      clientSecret: options.clientSecret || "",
+      request: request$1
+    })
+  });
+  // @ts-expect-error not worth the extra code to appease TS
+  return Object.assign(auth.bind(null, state), {
+    hook: hook.bind(null, state)
+  });
+}
+
+Object.defineProperty(exports, 'createOAuthUserAuth', {
+    enumerable: true,
+    get: function () {
+        return authOauthUser.createOAuthUserAuth;
+    }
+});
+exports.createAppAuth = createAppAuth;
+//# sourceMappingURL=index.js.map

node_modules/@octokit/auth-app/dist-src/auth.js

@@ -0,0 +1,28 @@
+import { Deprecation } from "deprecation";
+import { getAppAuthentication } from "./get-app-authentication";
+import { getInstallationAuthentication } from "./get-installation-authentication";
+export async function auth(state, authOptions) {
+    switch (authOptions.type) {
+        case "app":
+            return getAppAuthentication(state);
+        // @ts-expect-error "oauth" is not supperted in types
+        case "oauth":
+            state.log.warn(
+            // @ts-expect-error `log.warn()` expects string
+            new Deprecation(`[@octokit/auth-app] {type: "oauth"} is deprecated. Use {type: "oauth-app"} instead`));
+        case "oauth-app":
+            return state.oauthApp({ type: "oauth-app" });
+        case "installation":
+            authOptions;
+            return getInstallationAuthentication(state, {
+                ...authOptions,
+                type: "installation",
+            });
+        case "oauth-user":
+            // @ts-expect-error TODO: infer correct auth options type based on type. authOptions should be typed as "WebFlowAuthOptions | OAuthAppDeviceFlowAuthOptions | GitHubAppDeviceFlowAuthOptions"
+            return state.oauthApp(authOptions);
+        default:
+            // @ts-expect-error type is "never" at this point
+            throw new Error(`Invalid auth type: ${authOptions.type}`);
+    }
+}

node_modules/@octokit/auth-app/dist-src/cache.js

@@ -0,0 +1,71 @@
+// https://github.com/isaacs/node-lru-cache#readme
+import LRU from "lru-cache";
+export function getCache() {
+    return new LRU({
+        // cache max. 15000 tokens, that will use less than 10mb memory
+        max: 15000,
+        // Cache for 1 minute less than GitHub expiry
+        maxAge: 1000 * 60 * 59,
+    });
+}
+export async function get(cache, options) {
+    const cacheKey = optionsToCacheKey(options);
+    const result = await cache.get(cacheKey);
+    if (!result) {
+        return;
+    }
+    const [token, createdAt, expiresAt, repositorySelection, permissionsString, singleFileName,] = result.split("|");
+    const permissions = options.permissions ||
+        permissionsString.split(/,/).reduce((permissions, string) => {
+            if (/!$/.test(string)) {
+                permissions[string.slice(0, -1)] = "write";
+            }
+            else {
+                permissions[string] = "read";
+            }
+            return permissions;
+        }, {});
+    return {
+        token,
+        createdAt,
+        expiresAt,
+        permissions,
+        repositoryIds: options.repositoryIds,
+        repositoryNames: options.repositoryNames,
+        singleFileName,
+        repositorySelection: repositorySelection,
+    };
+}
+export async function set(cache, options, data) {
+    const key = optionsToCacheKey(options);
+    const permissionsString = options.permissions
+        ? ""
+        : Object.keys(data.permissions)
+            .map((name) => `${name}${data.permissions[name] === "write" ? "!" : ""}`)
+            .join(",");
+    const value = [
+        data.token,
+        data.createdAt,
+        data.expiresAt,
+        data.repositorySelection,
+        permissionsString,
+        data.singleFileName,
+    ].join("|");
+    await cache.set(key, value);
+}
+function optionsToCacheKey({ installationId, permissions = {}, repositoryIds = [], repositoryNames = [], }) {
+    const permissionsString = Object.keys(permissions)
+        .sort()
+        .map((name) => (permissions[name] === "read" ? name : `${name}!`))
+        .join(",");
+    const repositoryIdsString = repositoryIds.sort().join(",");
+    const repositoryNamesString = repositoryNames.join(",");
+    return [
+        installationId,
+        repositoryIdsString,
+        repositoryNamesString,
+        permissionsString,
+    ]
+        .filter(Boolean)
+        .join("|");
+}

node_modules/@octokit/auth-app/dist-src/get-app-authentication.js

@@ -0,0 +1,24 @@
+import { githubAppJwt } from "universal-github-app-jwt";
+export async function getAppAuthentication({ appId, privateKey, timeDifference, }) {
+    try {
+        const appAuthentication = await githubAppJwt({
+            id: +appId,
+            privateKey,
+            now: timeDifference && Math.floor(Date.now() / 1000) + timeDifference,
+        });
+        return {
+            type: "app",
+            token: appAuthentication.token,
+            appId: appAuthentication.appId,
+            expiresAt: new Date(appAuthentication.expiration * 1000).toISOString(),
+        };
+    }
+    catch (error) {
+        if (privateKey === "-----BEGIN RSA PRIVATE KEY-----") {
+            throw new Error("The 'privateKey` option contains only the first line '-----BEGIN RSA PRIVATE KEY-----'. If you are setting it using a `.env` file, make sure it is set on a single line with newlines replaced by '\n'");
+        }
+        else {
+            throw error;
+        }
+    }
+}

node_modules/@octokit/auth-app/dist-src/get-installation-authentication.js

@@ -0,0 +1,81 @@
+import { get, set } from "./cache";
+import { getAppAuthentication } from "./get-app-authentication";
+import { toTokenAuthentication } from "./to-token-authentication";
+export async function getInstallationAuthentication(state, options, customRequest) {
+    const installationId = Number(options.installationId || state.installationId);
+    if (!installationId) {
+        throw new Error("[@octokit/auth-app] installationId option is required for installation authentication.");
+    }
+    if (options.factory) {
+        const { type, factory, oauthApp, ...factoryAuthOptions } = {
+            ...state,
+            ...options,
+        };
+        // @ts-expect-error if `options.factory` is set, the return type for `auth()` should be `Promise<ReturnType<options.factory>>`
+        return factory(factoryAuthOptions);
+    }
+    const optionsWithInstallationTokenFromState = Object.assign({ installationId }, options);
+    if (!options.refresh) {
+        const result = await get(state.cache, optionsWithInstallationTokenFromState);
+        if (result) {
+            const { token, createdAt, expiresAt, permissions, repositoryIds, repositoryNames, singleFileName, repositorySelection, } = result;
+            return toTokenAuthentication({
+                installationId,
+                token,
+                createdAt,
+                expiresAt,
+                permissions,
+                repositorySelection,
+                repositoryIds,
+                repositoryNames,
+                singleFileName,
+            });
+        }
+    }
+    const appAuthentication = await getAppAuthentication(state);
+    const request = customRequest || state.request;
+    const { data: { token, expires_at: expiresAt, repositories, permissions: permissionsOptional, repository_selection: repositorySelectionOptional, single_file: singleFileName, }, } = await request("POST /app/installations/{installation_id}/access_tokens", {
+        installation_id: installationId,
+        repository_ids: options.repositoryIds,
+        repositories: options.repositoryNames,
+        permissions: options.permissions,
+        mediaType: {
+            previews: ["machine-man"],
+        },
+        headers: {
+            authorization: `bearer ${appAuthentication.token}`,
+        },
+    });
+    /* istanbul ignore next - permissions are optional per OpenAPI spec, but we think that is incorrect */
+    const permissions = permissionsOptional || {};
+    /* istanbul ignore next - repositorySelection are optional per OpenAPI spec, but we think that is incorrect */
+    const repositorySelection = repositorySelectionOptional || "all";
+    const repositoryIds = repositories
+        ? repositories.map((r) => r.id)
+        : void 0;
+    const repositoryNames = repositories
+        ? repositories.map((repo) => repo.name)
+        : void 0;
+    const createdAt = new Date().toISOString();
+    await set(state.cache, optionsWithInstallationTokenFromState, {
+        token,
+        createdAt,
+        expiresAt,
+        repositorySelection,
+        permissions,
+        repositoryIds,
+        repositoryNames,
+        singleFileName,
+    });
+    return toTokenAuthentication({
+        installationId,
+        token,
+        createdAt,
+        expiresAt,
+        repositorySelection,
+        permissions,
+        repositoryIds,
+        repositoryNames,
+        singleFileName,
+    });
+}

node_modules/@octokit/auth-app/dist-src/hook.js

@@ -0,0 +1,88 @@
+import { requiresBasicAuth } from "@octokit/auth-oauth-user";
+import { getAppAuthentication } from "./get-app-authentication";
+import { getInstallationAuthentication } from "./get-installation-authentication";
+import { requiresAppAuth } from "./requires-app-auth";
+const FIVE_SECONDS_IN_MS = 5 * 1000;
+function isNotTimeSkewError(error) {
+    return !(error.message.match(/'Expiration time' claim \('exp'\) must be a numeric value representing the future time at which the assertion expires/) ||
+        error.message.match(/'Issued at' claim \('iat'\) must be an Integer representing the time that the assertion was issued/));
+}
+export async function hook(state, request, route, parameters) {
+    const endpoint = request.endpoint.merge(route, parameters);
+    const url = endpoint.url;
+    // Do not intercept request to retrieve a new token
+    if (/\/login\/oauth\/access_token$/.test(url)) {
+        return request(endpoint);
+    }
+    if (requiresAppAuth(url.replace(request.endpoint.DEFAULTS.baseUrl, ""))) {
+        const { token } = await getAppAuthentication(state);
+        endpoint.headers.authorization = `bearer ${token}`;
+        let response;
+        try {
+            response = await request(endpoint);
+        }
+        catch (error) {
+            // If there's an issue with the expiration, regenerate the token and try again.
+            // Otherwise rethrow the error for upstream handling.
+            if (isNotTimeSkewError(error)) {
+                throw error;
+            }
+            // If the date header is missing, we can't correct the system time skew.
+            // Throw the error to be handled upstream.
+            if (typeof error.response.headers.date === "undefined") {
+                throw error;
+            }
+            const diff = Math.floor((Date.parse(error.response.headers.date) -
+                Date.parse(new Date().toString())) /
+                1000);
+            state.log.warn(error.message);
+            state.log.warn(`[@octokit/auth-app] GitHub API time and system time are different by ${diff} seconds. Retrying request with the difference accounted for.`);
+            const { token } = await getAppAuthentication({
+                ...state,
+                timeDifference: diff,
+            });
+            endpoint.headers.authorization = `bearer ${token}`;
+            return request(endpoint);
+        }
+        return response;
+    }
+    if (requiresBasicAuth(url)) {
+        const authentication = await state.oauthApp({ type: "oauth-app" });
+        endpoint.headers.authorization = authentication.headers.authorization;
+        return request(endpoint);
+    }
+    const { token, createdAt } = await getInstallationAuthentication(state, 
+    // @ts-expect-error TBD
+    {}, request);
+    endpoint.headers.authorization = `token ${token}`;
+    return sendRequestWithRetries(state, request, endpoint, createdAt);
+}
+/**
+ * Newly created tokens might not be accessible immediately after creation.
+ * In case of a 401 response, we retry with an exponential delay until more
+ * than five seconds pass since the creation of the token.
+ *
+ * @see https://github.com/octokit/auth-app.js/issues/65
+ */
+async function sendRequestWithRetries(state, request, options, createdAt, retries = 0) {
+    const timeSinceTokenCreationInMs = +new Date() - +new Date(createdAt);
+    try {
+        return await request(options);
+    }
+    catch (error) {
+        if (error.status !== 401) {
+            throw error;
+        }
+        if (timeSinceTokenCreationInMs >= FIVE_SECONDS_IN_MS) {
+            if (retries > 0) {
+                error.message = `After ${retries} retries within ${timeSinceTokenCreationInMs / 1000}s of creating the installation access token, the response remains 401. At this point, the cause may be an authentication problem or a system outage. Please check https://www.githubstatus.com for status information`;
+            }
+            throw error;
+        }
+        ++retries;
+        const awaitTime = retries * 1000;
+        state.log.warn(`[@octokit/auth-app] Retrying after 401 response to account for token replication delay (retry: ${retries}, wait: ${awaitTime / 1000}s)`);
+        await new Promise((resolve) => setTimeout(resolve, awaitTime));
+        return sendRequestWithRetries(state, request, options, createdAt, retries);
+    }
+}

node_modules/@octokit/auth-app/dist-src/index.js

@@ -0,0 +1,49 @@
+import { getUserAgent } from "universal-user-agent";
+import { request as defaultRequest } from "@octokit/request";
+import { createOAuthAppAuth } from "@octokit/auth-oauth-app";
+import { auth } from "./auth";
+import { hook } from "./hook";
+import { getCache } from "./cache";
+import { VERSION } from "./version";
+export { createOAuthUserAuth } from "@octokit/auth-oauth-user";
+export function createAppAuth(options) {
+    if (!options.appId) {
+        throw new Error("[@octokit/auth-app] appId option is required");
+    }
+    if (!Number.isFinite(+options.appId)) {
+        throw new Error("[@octokit/auth-app] appId option must be a number or numeric string");
+    }
+    if (!options.privateKey) {
+        throw new Error("[@octokit/auth-app] privateKey option is required");
+    }
+    if ("installationId" in options && !options.installationId) {
+        throw new Error("[@octokit/auth-app] installationId is set to a falsy value");
+    }
+    const log = Object.assign({
+        warn: console.warn.bind(console),
+    }, options.log);
+    const request = options.request ||
+        defaultRequest.defaults({
+            headers: {
+                "user-agent": `octokit-auth-app.js/${VERSION} ${getUserAgent()}`,
+            },
+        });
+    const state = Object.assign({
+        request,
+        cache: getCache(),
+    }, options, options.installationId
+        ? { installationId: Number(options.installationId) }
+        : {}, {
+        log,
+        oauthApp: createOAuthAppAuth({
+            clientType: "github-app",
+            clientId: options.clientId || "",
+            clientSecret: options.clientSecret || "",
+            request,
+        }),
+    });
+    // @ts-expect-error not worth the extra code to appease TS
+    return Object.assign(auth.bind(null, state), {
+        hook: hook.bind(null, state),
+    });
+}

node_modules/@octokit/auth-app/dist-src/requires-app-auth.js

@@ -0,0 +1,53 @@
+const PATHS = [
+    "/app",
+    "/app/hook/config",
+    "/app/hook/deliveries",
+    "/app/hook/deliveries/{delivery_id}",
+    "/app/hook/deliveries/{delivery_id}/attempts",
+    "/app/installations",
+    "/app/installations/{installation_id}",
+    "/app/installations/{installation_id}/access_tokens",
+    "/app/installations/{installation_id}/suspended",
+    "/marketplace_listing/accounts/{account_id}",
+    "/marketplace_listing/plan",
+    "/marketplace_listing/plans",
+    "/marketplace_listing/plans/{plan_id}/accounts",
+    "/marketplace_listing/stubbed/accounts/{account_id}",
+    "/marketplace_listing/stubbed/plan",
+    "/marketplace_listing/stubbed/plans",
+    "/marketplace_listing/stubbed/plans/{plan_id}/accounts",
+    "/orgs/{org}/installation",
+    "/repos/{owner}/{repo}/installation",
+    "/users/{username}/installation",
+];
+// CREDIT: Simon Grondin (https://github.com/SGrondin)
+// https://github.com/octokit/plugin-throttling.js/blob/45c5d7f13b8af448a9dbca468d9c9150a73b3948/lib/route-matcher.js
+function routeMatcher(paths) {
+    // EXAMPLE. For the following paths:
+    /* [
+        "/orgs/{org}/invitations",
+        "/repos/{owner}/{repo}/collaborators/{username}"
+    ] */
+    const regexes = paths.map((p) => p
+        .split("/")
+        .map((c) => (c.startsWith("{") ? "(?:.+?)" : c))
+        .join("/"));
+    // 'regexes' would contain:
+    /* [
+        '/orgs/(?:.+?)/invitations',
+        '/repos/(?:.+?)/(?:.+?)/collaborators/(?:.+?)'
+    ] */
+    const regex = `^(?:${regexes.map((r) => `(?:${r})`).join("|")})[^/]*$`;
+    // 'regex' would contain:
+    /*
+      ^(?:(?:\/orgs\/(?:.+?)\/invitations)|(?:\/repos\/(?:.+?)\/(?:.+?)\/collaborators\/(?:.+?)))[^\/]*$
+  
+      It may look scary, but paste it into https://www.debuggex.com/
+      and it will make a lot more sense!
+    */
+    return new RegExp(regex, "i");
+}
+const REGEX = routeMatcher(PATHS);
+export function requiresAppAuth(url) {
+    return !!url && REGEX.test(url);
+}

node_modules/@octokit/auth-app/dist-src/to-token-authentication.js

@@ -0,0 +1,12 @@
+export function toTokenAuthentication({ installationId, token, createdAt, expiresAt, repositorySelection, permissions, repositoryIds, repositoryNames, singleFileName, }) {
+    return Object.assign({
+        type: "token",
+        tokenType: "installation",
+        token,
+        installationId,
+        permissions,
+        createdAt,
+        expiresAt,
+        repositorySelection,
+    }, repositoryIds ? { repositoryIds } : null, repositoryNames ? { repositoryNames } : null, singleFileName ? { singleFileName } : null);
+}

node_modules/@octokit/auth-app/dist-src/types.js

@@ -0,0 +1 @@
+export {};

node_modules/@octokit/auth-app/dist-src/version.js

@@ -0,0 +1 @@
+export const VERSION = "4.0.9";

node_modules/@octokit/auth-app/dist-types/auth.d.ts

@@ -0,0 +1,20 @@
+import * as OAuthAppAuth from "@octokit/auth-oauth-app";
+import { State, AppAuthOptions, AppAuthentication, OAuthAppAuthentication, OAuthAppAuthOptions, InstallationAuthOptions, InstallationAccessTokenAuthentication, GitHubAppUserAuthentication, GitHubAppUserAuthenticationWithExpiration, OAuthWebFlowAuthOptions, OAuthDeviceFlowAuthOptions } from "./types";
+/** GitHub App authentication */
+export declare function auth(state: State, authOptions: AppAuthOptions): Promise<AppAuthentication>;
+/** OAuth App authentication */
+export declare function auth(state: State, authOptions: OAuthAppAuthOptions): Promise<OAuthAppAuthentication>;
+/** Installation authentication */
+export declare function auth(state: State, authOptions: InstallationAuthOptions): Promise<InstallationAccessTokenAuthentication>;
+/** User Authentication via OAuth web flow */
+export declare function auth(state: State, authOptions: OAuthWebFlowAuthOptions): Promise<GitHubAppUserAuthentication | GitHubAppUserAuthenticationWithExpiration>;
+/** GitHub App Web flow with `factory` option */
+export declare function auth<T = unknown>(state: State, authOptions: OAuthWebFlowAuthOptions & {
+    factory: OAuthAppAuth.FactoryGitHubWebFlow<T>;
+}): Promise<T>;
+/** User Authentication via OAuth Device flow */
+export declare function auth(state: State, authOptions: OAuthDeviceFlowAuthOptions): Promise<GitHubAppUserAuthentication | GitHubAppUserAuthenticationWithExpiration>;
+/** GitHub App Device flow with `factory` option */
+export declare function auth<T = unknown>(state: State, authOptions: OAuthDeviceFlowAuthOptions & {
+    factory: OAuthAppAuth.FactoryGitHubDeviceFlow<T>;
+}): Promise<T>;

node_modules/@octokit/auth-app/dist-types/cache.d.ts

@@ -0,0 +1,5 @@
+import LRU from "lru-cache";
+import { InstallationAuthOptions, Cache, CacheData, InstallationAccessTokenData } from "./types";
+export declare function getCache(): LRU<number, string>;
+export declare function get(cache: Cache, options: InstallationAuthOptions): Promise<InstallationAccessTokenData | void>;
+export declare function set(cache: Cache, options: InstallationAuthOptions, data: CacheData): Promise<void>;

node_modules/@octokit/auth-app/dist-types/get-app-authentication.d.ts

@@ -0,0 +1,4 @@
+import { AppAuthentication, State } from "./types";
+export declare function getAppAuthentication({ appId, privateKey, timeDifference, }: State & {
+    timeDifference?: number;
+}): Promise<AppAuthentication>;

node_modules/@octokit/auth-app/dist-types/get-installation-authentication.d.ts

@@ -0,0 +1,2 @@
+import { InstallationAuthOptions, InstallationAccessTokenAuthentication, RequestInterface, State } from "./types";
+export declare function getInstallationAuthentication(state: State, options: InstallationAuthOptions, customRequest?: RequestInterface): Promise<InstallationAccessTokenAuthentication>;

node_modules/@octokit/auth-app/dist-types/hook.d.ts

@@ -0,0 +1,2 @@
+import { AnyResponse, EndpointOptions, RequestParameters, RequestInterface, Route, State } from "./types";
+export declare function hook(state: State, request: RequestInterface, route: Route | EndpointOptions, parameters?: RequestParameters): Promise<AnyResponse>;

node_modules/@octokit/auth-app/dist-types/index.d.ts

@@ -0,0 +1,4 @@
+import { AuthInterface, StrategyOptions } from "./types";
+export { createOAuthUserAuth } from "@octokit/auth-oauth-user";
+export { StrategyOptions, AppAuthOptions, OAuthAppAuthOptions, InstallationAuthOptions, OAuthWebFlowAuthOptions, OAuthDeviceFlowAuthOptions, Authentication, AppAuthentication, OAuthAppAuthentication, InstallationAccessTokenAuthentication, GitHubAppUserAuthentication, GitHubAppUserAuthenticationWithExpiration, } from "./types";
+export declare function createAppAuth(options: StrategyOptions): AuthInterface;

node_modules/@octokit/auth-app/dist-types/requires-app-auth.d.ts

@@ -0,0 +1 @@
+export declare function requiresAppAuth(url: string | undefined): Boolean;

node_modules/@octokit/auth-app/dist-types/to-token-authentication.d.ts

@@ -0,0 +1,2 @@
+import { CacheData, InstallationAccessTokenAuthentication, WithInstallationId } from "./types";
+export declare function toTokenAuthentication({ installationId, token, createdAt, expiresAt, repositorySelection, permissions, repositoryIds, repositoryNames, singleFileName, }: CacheData & WithInstallationId): InstallationAccessTokenAuthentication;

node_modules/@octokit/auth-app/dist-types/types.d.ts

@@ -0,0 +1,125 @@
+import * as OctokitTypes from "@octokit/types";
+import LRUCache from "lru-cache";
+import * as OAuthAppAuth from "@octokit/auth-oauth-app";
+type OAuthStrategyOptions = {
+    clientId?: string;
+    clientSecret?: string;
+};
+type CommonStrategyOptions = {
+    appId: number | string;
+    privateKey: string;
+    installationId?: number | string;
+    request?: OctokitTypes.RequestInterface;
+    cache?: Cache;
+    log?: {
+        warn: (message: string, additionalInfo?: object) => any;
+        [key: string]: any;
+    };
+};
+export type StrategyOptions = OAuthStrategyOptions & CommonStrategyOptions & Record<string, unknown>;
+export type AppAuthOptions = {
+    type: "app";
+};
+/**
+Users SHOULD only enter repositoryIds || repositoryNames.
+However, this moduke still passes both to the backend API to
+let the API decide how to handle the logic. We just throw the
+reponse back to the client making the request.
+**/
+export type InstallationAuthOptions = {
+    type: "installation";
+    installationId?: number | string;
+    repositoryIds?: number[];
+    repositoryNames?: string[];
+    permissions?: Permissions;
+    refresh?: boolean;
+    factory?: never;
+    [key: string]: unknown;
+};
+export type InstallationAuthOptionsWithFactory<T> = {
+    type: "installation";
+    installationId?: number | string;
+    repositoryIds?: number[];
+    repositoryNames?: string[];
+    permissions?: Permissions;
+    refresh?: boolean;
+    factory: FactoryInstallation<T>;
+    [key: string]: unknown;
+};
+export type OAuthAppAuthOptions = OAuthAppAuth.AppAuthOptions;
+export type OAuthWebFlowAuthOptions = OAuthAppAuth.WebFlowAuthOptions;
+export type OAuthDeviceFlowAuthOptions = OAuthAppAuth.GitHubAppDeviceFlowAuthOptions;
+export type Authentication = AppAuthentication | OAuthAppAuthentication | InstallationAccessTokenAuthentication | GitHubAppUserAuthentication | GitHubAppUserAuthenticationWithExpiration;
+export type FactoryInstallationOptions = StrategyOptions & Omit<InstallationAuthOptions, "type">;
+export interface FactoryInstallation<T> {
+    (options: FactoryInstallationOptions): T;
+}
+export interface AuthInterface {
+    (options: AppAuthOptions): Promise<AppAuthentication>;
+    (options: OAuthAppAuthOptions): Promise<OAuthAppAuthentication>;
+    (options: InstallationAuthOptions): Promise<InstallationAccessTokenAuthentication>;
+    <T = unknown>(options: InstallationAuthOptionsWithFactory<T>): Promise<T>;
+    (options: OAuthWebFlowAuthOptions): Promise<GitHubAppUserAuthentication | GitHubAppUserAuthenticationWithExpiration>;
+    (options: OAuthDeviceFlowAuthOptions): Promise<GitHubAppUserAuthentication | GitHubAppUserAuthenticationWithExpiration>;
+    <T = unknown>(options: OAuthWebFlowAuthOptions & {
+        factory: OAuthAppAuth.FactoryGitHubWebFlow<T>;
+    }): Promise<T>;
+    <T = unknown>(options: OAuthDeviceFlowAuthOptions & {
+        factory: OAuthAppAuth.FactoryGitHubDeviceFlow<T>;
+    }): Promise<T>;
+    hook(request: RequestInterface, route: Route | EndpointOptions, parameters?: RequestParameters): Promise<OctokitTypes.OctokitResponse<any>>;
+}
+export type AnyResponse = OctokitTypes.OctokitResponse<any>;
+export type EndpointDefaults = OctokitTypes.EndpointDefaults;
+export type EndpointOptions = OctokitTypes.EndpointOptions;
+export type RequestParameters = OctokitTypes.RequestParameters;
+export type Route = OctokitTypes.Route;
+export type RequestInterface = OctokitTypes.RequestInterface;
+export type Cache = LRUCache<string, string> | {
+    get: (key: string) => string;
+    set: (key: string, value: string) => any;
+};
+export type APP_TYPE = "app";
+export type TOKEN_TYPE = "token";
+export type INSTALLATION_TOKEN_TYPE = "installation";
+export type OAUTH_TOKEN_TYPE = "oauth";
+export type REPOSITORY_SELECTION = "all" | "selected";
+export type JWT = string;
+export type ACCESS_TOKEN = string;
+export type UTC_TIMESTAMP = string;
+export type AppAuthentication = {
+    type: APP_TYPE;
+    token: JWT;
+    appId: number;
+    expiresAt: string;
+};
+export type InstallationAccessTokenData = {
+    token: ACCESS_TOKEN;
+    createdAt: UTC_TIMESTAMP;
+    expiresAt: UTC_TIMESTAMP;
+    permissions: Permissions;
+    repositorySelection: REPOSITORY_SELECTION;
+    repositoryIds?: number[];
+    repositoryNames?: string[];
+    singleFileName?: string;
+};
+export type CacheData = InstallationAccessTokenData;
+export type InstallationAccessTokenAuthentication = InstallationAccessTokenData & {
+    type: TOKEN_TYPE;
+    tokenType: INSTALLATION_TOKEN_TYPE;
+    installationId: number;
+};
+export type OAuthAppAuthentication = OAuthAppAuth.AppAuthentication;
+export type GitHubAppUserAuthentication = OAuthAppAuth.GitHubAppUserAuthentication;
+export type GitHubAppUserAuthenticationWithExpiration = OAuthAppAuth.GitHubAppUserAuthenticationWithExpiration;
+export type FactoryOptions = Required<Omit<StrategyOptions, keyof State>> & State;
+export type Permissions = Record<string, string>;
+export type WithInstallationId = {
+    installationId: number;
+};
+export type State = Required<Omit<CommonStrategyOptions, "installationId">> & {
+    installationId?: number;
+} & OAuthStrategyOptions & {
+    oauthApp: OAuthAppAuth.GitHubAuthInterface;
+};
+export {};

node_modules/@octokit/auth-app/dist-types/version.d.ts

@@ -0,0 +1 @@
+export declare const VERSION = "4.0.9";

node_modules/@octokit/auth-app/dist-web/index.js

@@ -0,0 +1,406 @@
+import { getUserAgent } from 'universal-user-agent';
+import { request } from '@octokit/request';
+import { createOAuthAppAuth } from '@octokit/auth-oauth-app';
+import { Deprecation } from 'deprecation';
+import { githubAppJwt } from 'universal-github-app-jwt';
+import LRU from 'lru-cache';
+import { requiresBasicAuth } from '@octokit/auth-oauth-user';
+export { createOAuthUserAuth } from '@octokit/auth-oauth-user';
+
+async function getAppAuthentication({ appId, privateKey, timeDifference, }) {
+    try {
+        const appAuthentication = await githubAppJwt({
+            id: +appId,
+            privateKey,
+            now: timeDifference && Math.floor(Date.now() / 1000) + timeDifference,
+        });
+        return {
+            type: "app",
+            token: appAuthentication.token,
+            appId: appAuthentication.appId,
+            expiresAt: new Date(appAuthentication.expiration * 1000).toISOString(),
+        };
+    }
+    catch (error) {
+        if (privateKey === "-----BEGIN RSA PRIVATE KEY-----") {
+            throw new Error("The 'privateKey` option contains only the first line '-----BEGIN RSA PRIVATE KEY-----'. If you are setting it using a `.env` file, make sure it is set on a single line with newlines replaced by '\n'");
+        }
+        else {
+            throw error;
+        }
+    }
+}
+
+// https://github.com/isaacs/node-lru-cache#readme
+function getCache() {
+    return new LRU({
+        // cache max. 15000 tokens, that will use less than 10mb memory
+        max: 15000,
+        // Cache for 1 minute less than GitHub expiry
+        maxAge: 1000 * 60 * 59,
+    });
+}
+async function get(cache, options) {
+    const cacheKey = optionsToCacheKey(options);
+    const result = await cache.get(cacheKey);
+    if (!result) {
+        return;
+    }
+    const [token, createdAt, expiresAt, repositorySelection, permissionsString, singleFileName,] = result.split("|");
+    const permissions = options.permissions ||
+        permissionsString.split(/,/).reduce((permissions, string) => {
+            if (/!$/.test(string)) {
+                permissions[string.slice(0, -1)] = "write";
+            }
+            else {
+                permissions[string] = "read";
+            }
+            return permissions;
+        }, {});
+    return {
+        token,
+        createdAt,
+        expiresAt,
+        permissions,
+        repositoryIds: options.repositoryIds,
+        repositoryNames: options.repositoryNames,
+        singleFileName,
+        repositorySelection: repositorySelection,
+    };
+}
+async function set(cache, options, data) {
+    const key = optionsToCacheKey(options);
+    const permissionsString = options.permissions
+        ? ""
+        : Object.keys(data.permissions)
+            .map((name) => `${name}${data.permissions[name] === "write" ? "!" : ""}`)
+            .join(",");
+    const value = [
+        data.token,
+        data.createdAt,
+        data.expiresAt,
+        data.repositorySelection,
+        permissionsString,
+        data.singleFileName,
+    ].join("|");
+    await cache.set(key, value);
+}
+function optionsToCacheKey({ installationId, permissions = {}, repositoryIds = [], repositoryNames = [], }) {
+    const permissionsString = Object.keys(permissions)
+        .sort()
+        .map((name) => (permissions[name] === "read" ? name : `${name}!`))
+        .join(",");
+    const repositoryIdsString = repositoryIds.sort().join(",");
+    const repositoryNamesString = repositoryNames.join(",");
+    return [
+        installationId,
+        repositoryIdsString,
+        repositoryNamesString,
+        permissionsString,
+    ]
+        .filter(Boolean)
+        .join("|");
+}
+
+function toTokenAuthentication({ installationId, token, createdAt, expiresAt, repositorySelection, permissions, repositoryIds, repositoryNames, singleFileName, }) {
+    return Object.assign({
+        type: "token",
+        tokenType: "installation",
+        token,
+        installationId,
+        permissions,
+        createdAt,
+        expiresAt,
+        repositorySelection,
+    }, repositoryIds ? { repositoryIds } : null, repositoryNames ? { repositoryNames } : null, singleFileName ? { singleFileName } : null);
+}
+
+async function getInstallationAuthentication(state, options, customRequest) {
+    const installationId = Number(options.installationId || state.installationId);
+    if (!installationId) {
+        throw new Error("[@octokit/auth-app] installationId option is required for installation authentication.");
+    }
+    if (options.factory) {
+        const { type, factory, oauthApp, ...factoryAuthOptions } = {
+            ...state,
+            ...options,
+        };
+        // @ts-expect-error if `options.factory` is set, the return type for `auth()` should be `Promise<ReturnType<options.factory>>`
+        return factory(factoryAuthOptions);
+    }
+    const optionsWithInstallationTokenFromState = Object.assign({ installationId }, options);
+    if (!options.refresh) {
+        const result = await get(state.cache, optionsWithInstallationTokenFromState);
+        if (result) {
+            const { token, createdAt, expiresAt, permissions, repositoryIds, repositoryNames, singleFileName, repositorySelection, } = result;
+            return toTokenAuthentication({
+                installationId,
+                token,
+                createdAt,
+                expiresAt,
+                permissions,
+                repositorySelection,
+                repositoryIds,
+                repositoryNames,
+                singleFileName,
+            });
+        }
+    }
+    const appAuthentication = await getAppAuthentication(state);
+    const request = customRequest || state.request;
+    const { data: { token, expires_at: expiresAt, repositories, permissions: permissionsOptional, repository_selection: repositorySelectionOptional, single_file: singleFileName, }, } = await request("POST /app/installations/{installation_id}/access_tokens", {
+        installation_id: installationId,
+        repository_ids: options.repositoryIds,
+        repositories: options.repositoryNames,
+        permissions: options.permissions,
+        mediaType: {
+            previews: ["machine-man"],
+        },
+        headers: {
+            authorization: `bearer ${appAuthentication.token}`,
+        },
+    });
+    /* istanbul ignore next - permissions are optional per OpenAPI spec, but we think that is incorrect */
+    const permissions = permissionsOptional || {};
+    /* istanbul ignore next - repositorySelection are optional per OpenAPI spec, but we think that is incorrect */
+    const repositorySelection = repositorySelectionOptional || "all";
+    const repositoryIds = repositories
+        ? repositories.map((r) => r.id)
+        : void 0;
+    const repositoryNames = repositories
+        ? repositories.map((repo) => repo.name)
+        : void 0;
+    const createdAt = new Date().toISOString();
+    await set(state.cache, optionsWithInstallationTokenFromState, {
+        token,
+        createdAt,
+        expiresAt,
+        repositorySelection,
+        permissions,
+        repositoryIds,
+        repositoryNames,
+        singleFileName,
+    });
+    return toTokenAuthentication({
+        installationId,
+        token,
+        createdAt,
+        expiresAt,
+        repositorySelection,
+        permissions,
+        repositoryIds,
+        repositoryNames,
+        singleFileName,
+    });
+}
+
+async function auth(state, authOptions) {
+    switch (authOptions.type) {
+        case "app":
+            return getAppAuthentication(state);
+        // @ts-expect-error "oauth" is not supperted in types
+        case "oauth":
+            state.log.warn(
+            // @ts-expect-error `log.warn()` expects string
+            new Deprecation(`[@octokit/auth-app] {type: "oauth"} is deprecated. Use {type: "oauth-app"} instead`));
+        case "oauth-app":
+            return state.oauthApp({ type: "oauth-app" });
+        case "installation":
+            return getInstallationAuthentication(state, {
+                ...authOptions,
+                type: "installation",
+            });
+        case "oauth-user":
+            // @ts-expect-error TODO: infer correct auth options type based on type. authOptions should be typed as "WebFlowAuthOptions | OAuthAppDeviceFlowAuthOptions | GitHubAppDeviceFlowAuthOptions"
+            return state.oauthApp(authOptions);
+        default:
+            // @ts-expect-error type is "never" at this point
+            throw new Error(`Invalid auth type: ${authOptions.type}`);
+    }
+}
+
+const PATHS = [
+    "/app",
+    "/app/hook/config",
+    "/app/hook/deliveries",
+    "/app/hook/deliveries/{delivery_id}",
+    "/app/hook/deliveries/{delivery_id}/attempts",
+    "/app/installations",
+    "/app/installations/{installation_id}",
+    "/app/installations/{installation_id}/access_tokens",
+    "/app/installations/{installation_id}/suspended",
+    "/marketplace_listing/accounts/{account_id}",
+    "/marketplace_listing/plan",
+    "/marketplace_listing/plans",
+    "/marketplace_listing/plans/{plan_id}/accounts",
+    "/marketplace_listing/stubbed/accounts/{account_id}",
+    "/marketplace_listing/stubbed/plan",
+    "/marketplace_listing/stubbed/plans",
+    "/marketplace_listing/stubbed/plans/{plan_id}/accounts",
+    "/orgs/{org}/installation",
+    "/repos/{owner}/{repo}/installation",
+    "/users/{username}/installation",
+];
+// CREDIT: Simon Grondin (https://github.com/SGrondin)
+// https://github.com/octokit/plugin-throttling.js/blob/45c5d7f13b8af448a9dbca468d9c9150a73b3948/lib/route-matcher.js
+function routeMatcher(paths) {
+    // EXAMPLE. For the following paths:
+    /* [
+        "/orgs/{org}/invitations",
+        "/repos/{owner}/{repo}/collaborators/{username}"
+    ] */
+    const regexes = paths.map((p) => p
+        .split("/")
+        .map((c) => (c.startsWith("{") ? "(?:.+?)" : c))
+        .join("/"));
+    // 'regexes' would contain:
+    /* [
+        '/orgs/(?:.+?)/invitations',
+        '/repos/(?:.+?)/(?:.+?)/collaborators/(?:.+?)'
+    ] */
+    const regex = `^(?:${regexes.map((r) => `(?:${r})`).join("|")})[^/]*$`;
+    // 'regex' would contain:
+    /*
+      ^(?:(?:\/orgs\/(?:.+?)\/invitations)|(?:\/repos\/(?:.+?)\/(?:.+?)\/collaborators\/(?:.+?)))[^\/]*$
+  
+      It may look scary, but paste it into https://www.debuggex.com/
+      and it will make a lot more sense!
+    */
+    return new RegExp(regex, "i");
+}
+const REGEX = routeMatcher(PATHS);
+function requiresAppAuth(url) {
+    return !!url && REGEX.test(url);
+}
+
+const FIVE_SECONDS_IN_MS = 5 * 1000;
+function isNotTimeSkewError(error) {
+    return !(error.message.match(/'Expiration time' claim \('exp'\) must be a numeric value representing the future time at which the assertion expires/) ||
+        error.message.match(/'Issued at' claim \('iat'\) must be an Integer representing the time that the assertion was issued/));
+}
+async function hook(state, request, route, parameters) {
+    const endpoint = request.endpoint.merge(route, parameters);
+    const url = endpoint.url;
+    // Do not intercept request to retrieve a new token
+    if (/\/login\/oauth\/access_token$/.test(url)) {
+        return request(endpoint);
+    }
+    if (requiresAppAuth(url.replace(request.endpoint.DEFAULTS.baseUrl, ""))) {
+        const { token } = await getAppAuthentication(state);
+        endpoint.headers.authorization = `bearer ${token}`;
+        let response;
+        try {
+            response = await request(endpoint);
+        }
+        catch (error) {
+            // If there's an issue with the expiration, regenerate the token and try again.
+            // Otherwise rethrow the error for upstream handling.
+            if (isNotTimeSkewError(error)) {
+                throw error;
+            }
+            // If the date header is missing, we can't correct the system time skew.
+            // Throw the error to be handled upstream.
+            if (typeof error.response.headers.date === "undefined") {
+                throw error;
+            }
+            const diff = Math.floor((Date.parse(error.response.headers.date) -
+                Date.parse(new Date().toString())) /
+                1000);
+            state.log.warn(error.message);
+            state.log.warn(`[@octokit/auth-app] GitHub API time and system time are different by ${diff} seconds. Retrying request with the difference accounted for.`);
+            const { token } = await getAppAuthentication({
+                ...state,
+                timeDifference: diff,
+            });
+            endpoint.headers.authorization = `bearer ${token}`;
+            return request(endpoint);
+        }
+        return response;
+    }
+    if (requiresBasicAuth(url)) {
+        const authentication = await state.oauthApp({ type: "oauth-app" });
+        endpoint.headers.authorization = authentication.headers.authorization;
+        return request(endpoint);
+    }
+    const { token, createdAt } = await getInstallationAuthentication(state, 
+    // @ts-expect-error TBD
+    {}, request);
+    endpoint.headers.authorization = `token ${token}`;
+    return sendRequestWithRetries(state, request, endpoint, createdAt);
+}
+/**
+ * Newly created tokens might not be accessible immediately after creation.
+ * In case of a 401 response, we retry with an exponential delay until more
+ * than five seconds pass since the creation of the token.
+ *
+ * @see https://github.com/octokit/auth-app.js/issues/65
+ */
+async function sendRequestWithRetries(state, request, options, createdAt, retries = 0) {
+    const timeSinceTokenCreationInMs = +new Date() - +new Date(createdAt);
+    try {
+        return await request(options);
+    }
+    catch (error) {
+        if (error.status !== 401) {
+            throw error;
+        }
+        if (timeSinceTokenCreationInMs >= FIVE_SECONDS_IN_MS) {
+            if (retries > 0) {
+                error.message = `After ${retries} retries within ${timeSinceTokenCreationInMs / 1000}s of creating the installation access token, the response remains 401. At this point, the cause may be an authentication problem or a system outage. Please check https://www.githubstatus.com for status information`;
+            }
+            throw error;
+        }
+        ++retries;
+        const awaitTime = retries * 1000;
+        state.log.warn(`[@octokit/auth-app] Retrying after 401 response to account for token replication delay (retry: ${retries}, wait: ${awaitTime / 1000}s)`);
+        await new Promise((resolve) => setTimeout(resolve, awaitTime));
+        return sendRequestWithRetries(state, request, options, createdAt, retries);
+    }
+}
+
+const VERSION = "4.0.9";
+
+function createAppAuth(options) {
+    if (!options.appId) {
+        throw new Error("[@octokit/auth-app] appId option is required");
+    }
+    if (!Number.isFinite(+options.appId)) {
+        throw new Error("[@octokit/auth-app] appId option must be a number or numeric string");
+    }
+    if (!options.privateKey) {
+        throw new Error("[@octokit/auth-app] privateKey option is required");
+    }
+    if ("installationId" in options && !options.installationId) {
+        throw new Error("[@octokit/auth-app] installationId is set to a falsy value");
+    }
+    const log = Object.assign({
+        warn: console.warn.bind(console),
+    }, options.log);
+    const request$1 = options.request ||
+        request.defaults({
+            headers: {
+                "user-agent": `octokit-auth-app.js/${VERSION} ${getUserAgent()}`,
+            },
+        });
+    const state = Object.assign({
+        request: request$1,
+        cache: getCache(),
+    }, options, options.installationId
+        ? { installationId: Number(options.installationId) }
+        : {}, {
+        log,
+        oauthApp: createOAuthAppAuth({
+            clientType: "github-app",
+            clientId: options.clientId || "",
+            clientSecret: options.clientSecret || "",
+            request: request$1,
+        }),
+    });
+    // @ts-expect-error not worth the extra code to appease TS
+    return Object.assign(auth.bind(null, state), {
+        hook: hook.bind(null, state),
+    });
+}
+
+export { createAppAuth };
+//# sourceMappingURL=index.js.map

node_modules/@octokit/auth-app/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@octokit/auth-app",
+  "description": "GitHub App authentication for JavaScript",
+  "version": "4.0.9",
+  "license": "MIT",
+  "files": [
+    "dist-*/",
+    "bin/"
+  ],
+  "source": "dist-src/index.js",
+  "types": "dist-types/index.d.ts",
+  "main": "dist-node/index.js",
+  "module": "dist-web/index.js",
+  "pika": true,
+  "sideEffects": false,
+  "keywords": [
+    "github",
+    "octokit",
+    "authentication",
+    "api"
+  ],
+  "repository": "github:octokit/auth-app.js",
+  "dependencies": {
+    "@octokit/auth-oauth-app": "^5.0.0",
+    "@octokit/auth-oauth-user": "^2.0.0",
+    "@octokit/request": "^6.0.0",
+    "@octokit/request-error": "^3.0.0",
+    "@octokit/types": "^9.0.0",
+    "@types/lru-cache": "^5.1.0",
+    "deprecation": "^2.3.1",
+    "lru-cache": "^6.0.0",
+    "universal-github-app-jwt": "^1.1.1",
+    "universal-user-agent": "^6.0.0"
+  },
+  "devDependencies": {
+    "@pika/pack": "^0.3.7",
+    "@pika/plugin-build-node": "^0.9.0",
+    "@pika/plugin-build-web": "^0.9.0",
+    "@pika/plugin-ts-standard-pkg": "^0.9.0",
+    "@sinonjs/fake-timers": "^8.0.0",
+    "@types/fetch-mock": "^7.3.1",
+    "@types/jest": "^29.0.0",
+    "@types/node": "^18.11.18",
+    "@types/sinonjs__fake-timers": "^8.0.0",
+    "fetch-mock": "^9.0.0",
+    "jest": "^29.0.0",
+    "prettier": "2.8.3",
+    "semantic-release-plugin-update-version-in-files": "^1.0.0",
+    "ts-jest": "^29.0.0",
+    "typescript": "^4.0.2"
+  },
+  "engines": {
+    "node": ">= 14"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

node_modules/@octokit/auth-oauth-app/LICENSE

@@ -0,0 +1,21 @@
+The MIT License
+
+Copyright (c) 2019 Octokit contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

node_modules/@octokit/auth-oauth-app/dist-node/index.js

@@ -0,0 +1,97 @@
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+function _interopDefault (ex) { return (ex && (typeof ex === 'object') && 'default' in ex) ? ex['default'] : ex; }
+
+var universalUserAgent = require('universal-user-agent');
+var request = require('@octokit/request');
+var btoa = _interopDefault(require('btoa-lite'));
+var authOauthUser = require('@octokit/auth-oauth-user');
+
+async function auth(state, authOptions) {
+  if (authOptions.type === "oauth-app") {
+    return {
+      type: "oauth-app",
+      clientId: state.clientId,
+      clientSecret: state.clientSecret,
+      clientType: state.clientType,
+      headers: {
+        authorization: `basic ${btoa(`${state.clientId}:${state.clientSecret}`)}`
+      }
+    };
+  }
+  if ("factory" in authOptions) {
+    const {
+      type,
+      ...options
+    } = {
+      ...authOptions,
+      ...state
+    };
+    // @ts-expect-error TODO: `option` cannot be never, is this a bug?
+    return authOptions.factory(options);
+  }
+  const common = {
+    clientId: state.clientId,
+    clientSecret: state.clientSecret,
+    request: state.request,
+    ...authOptions
+  };
+  // TS: Look what you made me do
+  const userAuth = state.clientType === "oauth-app" ? await authOauthUser.createOAuthUserAuth({
+    ...common,
+    clientType: state.clientType
+  }) : await authOauthUser.createOAuthUserAuth({
+    ...common,
+    clientType: state.clientType
+  });
+  return userAuth();
+}
+
+async function hook(state, request, route, parameters) {
+  let endpoint = request.endpoint.merge(route, parameters);
+  // Do not intercept OAuth Web/Device flow request
+  if (/\/login\/(oauth\/access_token|device\/code)$/.test(endpoint.url)) {
+    return request(endpoint);
+  }
+  if (state.clientType === "github-app" && !authOauthUser.requiresBasicAuth(endpoint.url)) {
+    throw new Error(`[@octokit/auth-oauth-app] GitHub Apps cannot use their client ID/secret for basic authentication for endpoints other than "/applications/{client_id}/**". "${endpoint.method} ${endpoint.url}" is not supported.`);
+  }
+  const credentials = btoa(`${state.clientId}:${state.clientSecret}`);
+  endpoint.headers.authorization = `basic ${credentials}`;
+  try {
+    return await request(endpoint);
+  } catch (error) {
+    /* istanbul ignore if */
+    if (error.status !== 401) throw error;
+    error.message = `[@octokit/auth-oauth-app] "${endpoint.method} ${endpoint.url}" does not support clientId/clientSecret basic authentication.`;
+    throw error;
+  }
+}
+
+const VERSION = "5.0.5";
+
+function createOAuthAppAuth(options) {
+  const state = Object.assign({
+    request: request.request.defaults({
+      headers: {
+        "user-agent": `octokit-auth-oauth-app.js/${VERSION} ${universalUserAgent.getUserAgent()}`
+      }
+    }),
+    clientType: "oauth-app"
+  }, options);
+  // @ts-expect-error not worth the extra code to appease TS
+  return Object.assign(auth.bind(null, state), {
+    hook: hook.bind(null, state)
+  });
+}
+
+Object.defineProperty(exports, 'createOAuthUserAuth', {
+    enumerable: true,
+    get: function () {
+        return authOauthUser.createOAuthUserAuth;
+    }
+});
+exports.createOAuthAppAuth = createOAuthAppAuth;
+//# sourceMappingURL=index.js.map

node_modules/@octokit/auth-oauth-app/dist-src/auth.js

@@ -0,0 +1,40 @@
+import btoa from "btoa-lite";
+import { createOAuthUserAuth } from "@octokit/auth-oauth-user";
+export async function auth(state, authOptions) {
+    if (authOptions.type === "oauth-app") {
+        return {
+            type: "oauth-app",
+            clientId: state.clientId,
+            clientSecret: state.clientSecret,
+            clientType: state.clientType,
+            headers: {
+                authorization: `basic ${btoa(`${state.clientId}:${state.clientSecret}`)}`,
+            },
+        };
+    }
+    if ("factory" in authOptions) {
+        const { type, ...options } = {
+            ...authOptions,
+            ...state,
+        };
+        // @ts-expect-error TODO: `option` cannot be never, is this a bug?
+        return authOptions.factory(options);
+    }
+    const common = {
+        clientId: state.clientId,
+        clientSecret: state.clientSecret,
+        request: state.request,
+        ...authOptions,
+    };
+    // TS: Look what you made me do
+    const userAuth = state.clientType === "oauth-app"
+        ? await createOAuthUserAuth({
+            ...common,
+            clientType: state.clientType,
+        })
+        : await createOAuthUserAuth({
+            ...common,
+            clientType: state.clientType,
+        });
+    return userAuth();
+}

node_modules/@octokit/auth-oauth-app/dist-src/hook.js

@@ -0,0 +1,24 @@
+import btoa from "btoa-lite";
+import { requiresBasicAuth } from "@octokit/auth-oauth-user";
+export async function hook(state, request, route, parameters) {
+    let endpoint = request.endpoint.merge(route, parameters);
+    // Do not intercept OAuth Web/Device flow request
+    if (/\/login\/(oauth\/access_token|device\/code)$/.test(endpoint.url)) {
+        return request(endpoint);
+    }
+    if (state.clientType === "github-app" && !requiresBasicAuth(endpoint.url)) {
+        throw new Error(`[@octokit/auth-oauth-app] GitHub Apps cannot use their client ID/secret for basic authentication for endpoints other than "/applications/{client_id}/**". "${endpoint.method} ${endpoint.url}" is not supported.`);
+    }
+    const credentials = btoa(`${state.clientId}:${state.clientSecret}`);
+    endpoint.headers.authorization = `basic ${credentials}`;
+    try {
+        return await request(endpoint);
+    }
+    catch (error) {
+        /* istanbul ignore if */
+        if (error.status !== 401)
+            throw error;
+        error.message = `[@octokit/auth-oauth-app] "${endpoint.method} ${endpoint.url}" does not support clientId/clientSecret basic authentication.`;
+        throw error;
+    }
+}

node_modules/@octokit/auth-oauth-app/dist-src/index.js

@@ -0,0 +1,20 @@
+import { getUserAgent } from "universal-user-agent";
+import { request } from "@octokit/request";
+import { auth } from "./auth";
+import { hook } from "./hook";
+import { VERSION } from "./version";
+export { createOAuthUserAuth } from "@octokit/auth-oauth-user";
+export function createOAuthAppAuth(options) {
+    const state = Object.assign({
+        request: request.defaults({
+            headers: {
+                "user-agent": `octokit-auth-oauth-app.js/${VERSION} ${getUserAgent()}`,
+            },
+        }),
+        clientType: "oauth-app",
+    }, options);
+    // @ts-expect-error not worth the extra code to appease TS
+    return Object.assign(auth.bind(null, state), {
+        hook: hook.bind(null, state),
+    });
+}

node_modules/@octokit/auth-oauth-app/dist-src/types.js

@@ -0,0 +1 @@
+export {};

node_modules/@octokit/auth-oauth-app/dist-src/version.js

@@ -0,0 +1 @@
+export const VERSION = "5.0.5";

node_modules/@octokit/auth-oauth-app/dist-types/auth.d.ts

@@ -0,0 +1,18 @@
+import { OAuthAppState, GitHubAppState, AppAuthOptions, WebFlowAuthOptions, OAuthAppDeviceFlowAuthOptions, GitHubAppDeviceFlowAuthOptions, FactoryOAuthAppWebFlow, FactoryOAuthAppDeviceFlow, FactoryGitHubWebFlow, FactoryGitHubDeviceFlow, AppAuthentication, OAuthAppUserAuthentication, GitHubAppUserAuthentication, GitHubAppUserAuthenticationWithExpiration } from "./types";
+export declare function auth(state: OAuthAppState | GitHubAppState, authOptions: AppAuthOptions): Promise<AppAuthentication>;
+export declare function auth(state: OAuthAppState, authOptions: WebFlowAuthOptions): Promise<OAuthAppUserAuthentication>;
+export declare function auth<T = unknown>(state: OAuthAppState, authOptions: WebFlowAuthOptions & {
+    factory: FactoryOAuthAppWebFlow<T>;
+}): Promise<T>;
+export declare function auth(state: OAuthAppState, authOptions: OAuthAppDeviceFlowAuthOptions): Promise<OAuthAppUserAuthentication>;
+export declare function auth<T = unknown>(state: OAuthAppState, authOptions: OAuthAppDeviceFlowAuthOptions & {
+    factory: FactoryOAuthAppDeviceFlow<T>;
+}): Promise<T>;
+export declare function auth(state: GitHubAppState, authOptions: WebFlowAuthOptions): Promise<GitHubAppUserAuthentication | GitHubAppUserAuthenticationWithExpiration>;
+export declare function auth<T = unknown>(state: GitHubAppState, authOptions: WebFlowAuthOptions & {
+    factory: FactoryGitHubWebFlow<T>;
+}): Promise<T>;
+export declare function auth(state: GitHubAppState, authOptions: GitHubAppDeviceFlowAuthOptions): Promise<GitHubAppUserAuthentication | GitHubAppUserAuthenticationWithExpiration>;
+export declare function auth<T = unknown>(state: GitHubAppState, authOptions: GitHubAppDeviceFlowAuthOptions & {
+    factory: FactoryGitHubDeviceFlow<T>;
+}): Promise<T>;