@github-actions-workflow-ts/cli 2.0.1 → 2.2.0-beta.1

package/dist/commands/build.d.ts

@@ -1,8 +1,14 @@
 import type { Workflow } from '@github-actions-workflow-ts/lib';
 import type { WacConfig } from './types/index.js';
+import { type VersionWarning, type ActionVersionRegistry } from '../validation/index.js';
+/**
+ * Strip internal metadata properties (prefixed with _) from workflow object.
+ * This removes properties like _sourceVersion and _defaultUses that are used
+ * for validation but shouldn't appear in the final YAML.
+ */
+export declare const stripInternalMetadata: (obj: any) => any;
 /**
  * Comment indicating the file should not be modified.
- * @type {string}
  */
 export declare const DEFAULT_HEADER_TEXT: string[];
 /**
@@ -40,6 +46,35 @@ export declare const importWorkflowFile: (filePath: string) => Promise<Record<st
  * @returns {number} - The number of workflows written.
  */
 export declare const writeWorkflowJSONToYamlFiles: (workflowJSON: Record<string, Workflow>, workflowFilePath: string, config: WacConfig) => number;
+/**
+ * Information about an action step including its uses string and source version if available.
+ */
+export interface ActionStepInfo {
+    uses: string;
+    sourceVersion?: string;
+    defaultUses?: string;
+}
+/**
+ * Extract all 'uses' values from a workflow's steps, along with source version info if available.
+ */
+export declare const extractUsesFromWorkflow: (workflow: any) => ActionStepInfo[];
+/**
+ * Build a registry of action source versions from an imported workflow module.
+ * Scans the module for SourceVersion exports that were re-exported from the actions package.
+ * Maps action patterns (e.g., 'actions/checkout@v6') to their source versions (e.g., 'v6.2.0').
+ */
+export declare const buildActionVersionRegistryFromModule: (workflowModule: any) => ActionVersionRegistry;
+/**
+ * Build a registry of action source versions from the actions package.
+ * Maps action patterns (e.g., 'actions/checkout@v6') to their source versions (e.g., 'v6.2.0').
+ */
+export declare const buildActionVersionRegistry: () => Promise<ActionVersionRegistry>;
+/**
+ * Validate action versions in a workflow against known source versions.
+ * Uses source version info embedded in the step by typed action classes,
+ * falling back to a registry lookup if not available.
+ */
+export declare const validateWorkflowVersions: (workflow: any, registry: ActionVersionRegistry) => VersionWarning[];
 /**
  * Creates the .github/workflows directory if it doesn't exist.
  */

package/dist/commands/build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/commands/build.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAA;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAEjD;;;GAGG;AACH,eAAO,MAAM,mBAAmB,UAK/B,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,YAAY,GAAI,GAAG,MAAM,KAAG,MACR,CAAA;AAEjC;;;GAGG;AACH,eAAO,MAAM,SAAS,QAAO,SAAS,GAAG,SAgBxC,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,QAAO,MAAM,EAAE,GAAG,SA0BlD,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,GAC7B,UAAU,MAAM,KACf,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAQlC,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,GACvC,cAAc,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,EACtC,kBAAkB,MAAM,EACxB,QAAQ,SAAS,KAChB,MAoCF,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,QAAO,IAS1C,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,GAChC,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,IAAI,CAsBd,CAAA"}
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/commands/build.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAA;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC3B,MAAM,wBAAwB,CAAA;AAE/B;;;;GAIG;AAEH,eAAO,MAAM,qBAAqB,GAAI,KAAK,GAAG,KAAG,GAkBhD,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB,UAK/B,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,YAAY,GAAI,GAAG,MAAM,KAAG,MACR,CAAA;AAEjC;;;GAGG;AACH,eAAO,MAAM,SAAS,QAAO,SAAS,GAAG,SAgBxC,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,QAAO,MAAM,EAAE,GAAG,SA0BlD,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,GAC7B,UAAU,MAAM,KACf,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAQlC,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,GACvC,cAAc,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,EACtC,kBAAkB,MAAM,EACxB,QAAQ,SAAS,KAChB,MAuCF,CAAA;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,GAElC,UAAU,GAAG,KACZ,cAAc,EAqBhB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,oCAAoC,GAE/C,gBAAgB,GAAG,KAClB,qBA+BF,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,0BAA0B,QAC3B,OAAO,CAAC,qBAAqB,CAgDtC,CAAA;AAEH;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GAEnC,UAAU,GAAG,EACb,UAAU,qBAAqB,KAC9B,cAAc,EA6BhB,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,QAAO,IAS1C,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,GAChC,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,IAAI,CA+Cd,CAAA"}

package/dist/commands/build.js

@@ -4,9 +4,32 @@ import * as path from 'path';
 import * as jsYaml from 'js-yaml';
 import fg from 'fast-glob';
 import { pathToFileURL } from 'url';
+import { validateActionVersion, logVersionWarnings, getActionPattern, } from '../validation/index.js';
+/**
+ * Strip internal metadata properties (prefixed with _) from workflow object.
+ * This removes properties like _sourceVersion and _defaultUses that are used
+ * for validation but shouldn't appear in the final YAML.
+ */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+export const stripInternalMetadata = (obj) => {
+    if (obj === null || typeof obj !== 'object') {
+        return obj;
+    }
+    if (Array.isArray(obj)) {
+        return obj.map(stripInternalMetadata);
+    }
+    const result = {};
+    for (const key in obj) {
+        // Skip properties starting with underscore
+        if (key.startsWith('_')) {
+            continue;
+        }
+        result[key] = stripInternalMetadata(obj[key]);
+    }
+    return result;
+};
 /**
  * Comment indicating the file should not be modified.
- * @type {string}
  */
 export const DEFAULT_HEADER_TEXT = [
     '# ------------DO-NOT-MODIFY-THIS-FILE------------',
@@ -84,7 +107,9 @@ export const writeWorkflowJSONToYamlFiles = (workflowJSON, workflowFilePath, con
         if (!workflow || !workflow.workflow || !workflow.filename) {
             continue;
         }
-        const workflowYaml = jsYaml.dump(workflow.workflow, {
+        // Strip internal metadata properties before YAML serialization
+        const cleanedWorkflow = stripInternalMetadata(workflow.workflow);
+        const workflowYaml = jsYaml.dump(cleanedWorkflow, {
             noRefs: !config.refs,
             ...(config.dumpOptions || {}),
         });
@@ -98,6 +123,142 @@ export const writeWorkflowJSONToYamlFiles = (workflowJSON, workflowFilePath, con
     }
     return workflowCount;
 };
+/**
+ * Extract all 'uses' values from a workflow's steps, along with source version info if available.
+ */
+export const extractUsesFromWorkflow = (
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+workflow) => {
+    const actions = [];
+    if (!workflow?.jobs)
+        return actions;
+    for (const jobName in workflow.jobs) {
+        const job = workflow.jobs[jobName];
+        if (!job?.steps || !Array.isArray(job.steps))
+            continue;
+        for (const step of job.steps) {
+            if (step?.uses && typeof step.uses === 'string') {
+                actions.push({
+                    uses: step.uses,
+                    sourceVersion: step._sourceVersion,
+                    defaultUses: step._defaultUses,
+                });
+            }
+        }
+    }
+    return actions;
+};
+/**
+ * Build a registry of action source versions from an imported workflow module.
+ * Scans the module for SourceVersion exports that were re-exported from the actions package.
+ * Maps action patterns (e.g., 'actions/checkout@v6') to their source versions (e.g., 'v6.2.0').
+ */
+export const buildActionVersionRegistryFromModule = (
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+workflowModule) => {
+    const registry = new Map();
+    // The workflow module may have imported action classes from @github-actions-workflow-ts/actions
+    // We need to find any SourceVersion constants that were imported alongside them
+    // This is tricky because we don't have direct access to the actions package exports
+    // Instead, scan for any exported values that look like SourceVersion constants
+    for (const key in workflowModule) {
+        if (key.endsWith('SourceVersion')) {
+            const value = workflowModule[key];
+            if (typeof value === 'string') {
+                const className = key.replace('SourceVersion', '');
+                const actionClass = workflowModule[className];
+                if (typeof actionClass === 'function') {
+                    try {
+                        const instance = new actionClass();
+                        if (instance.step?.uses) {
+                            registry.set(instance.step.uses, value);
+                        }
+                    }
+                    catch {
+                        // Skip if constructor fails
+                    }
+                }
+            }
+        }
+    }
+    return registry;
+};
+/**
+ * Build a registry of action source versions from the actions package.
+ * Maps action patterns (e.g., 'actions/checkout@v6') to their source versions (e.g., 'v6.2.0').
+ */
+export const buildActionVersionRegistry = async () => {
+    const registry = new Map();
+    try {
+        // Try to import the actions package dynamically
+        // Using a variable to prevent static analysis from failing the build
+        const packageName = '@github-actions-workflow-ts/actions';
+        const actionsModule = (await import(packageName));
+        // Look for exports ending in 'SourceVersion' and their corresponding action metadata
+        for (const key in actionsModule) {
+            if (key.endsWith('SourceVersion')) {
+                const value = actionsModule[key];
+                if (typeof value === 'string') {
+                    // The key format is like 'ActionsCheckoutV6SourceVersion'
+                    // We need to map this to 'actions/checkout@v6'
+                    const className = key.replace('SourceVersion', '');
+                    // Try to find the corresponding class and get its default uses value
+                    const actionClass = actionsModule[className];
+                    if (typeof actionClass === 'function' &&
+                        'prototype' in actionClass) {
+                        try {
+                            // Create a temporary instance to get the default uses value
+                            const instance = new actionClass();
+                            if (instance.step?.uses) {
+                                // Extract the action pattern (e.g., 'actions/checkout@v6')
+                                registry.set(instance.step.uses, value);
+                            }
+                        }
+                        catch {
+                            // Constructor might require arguments, skip this action
+                        }
+                    }
+                }
+            }
+        }
+    }
+    catch {
+        // Package not installed or not available, skip version validation
+    }
+    return registry;
+};
+/**
+ * Validate action versions in a workflow against known source versions.
+ * Uses source version info embedded in the step by typed action classes,
+ * falling back to a registry lookup if not available.
+ */
+export const validateWorkflowVersions = (
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+workflow, registry) => {
+    const warnings = [];
+    const actionSteps = extractUsesFromWorkflow(workflow);
+    for (const actionStep of actionSteps) {
+        // Prefer embedded source version from typed action class
+        let sourceVersion = actionStep.sourceVersion;
+        const defaultUses = actionStep.defaultUses;
+        // Fall back to registry lookup if no embedded version
+        if (!sourceVersion && registry.size > 0) {
+            const pattern = getActionPattern(actionStep.uses);
+            sourceVersion = registry.get(pattern);
+        }
+        // Also try matching against defaultUses if available
+        if (!sourceVersion && defaultUses && registry.size > 0) {
+            sourceVersion = registry.get(defaultUses);
+        }
+        if (sourceVersion) {
+            const warning = validateActionVersion(actionStep.uses, sourceVersion);
+            if (warning) {
+                warnings.push(warning);
+            }
+        }
+    }
+    return warnings;
+};
 /**
  * Creates the .github/workflows directory if it doesn't exist.
  */
@@ -118,14 +279,34 @@ export const generateWorkflowFiles = async (argv) => {
     const config = getConfig() || {};
     const workflowFilePaths = getWorkflowFilePaths() || [];
     let workflowCount = 0;
+    const allWarnings = [];
+    // Build version registry for validation (if warnings are enabled)
+    const versionWarningsEnabled = config.actionsPackageOutdatedVersionWarnings !== false;
+    const registry = versionWarningsEnabled
+        ? await buildActionVersionRegistry()
+        : new Map();
     createWorkflowDirectory();
     for (const filePath of workflowFilePaths) {
         const workflows = await importWorkflowFile(filePath);
+        // Validate versions if enabled
+        if (versionWarningsEnabled) {
+            for (const workflowName in workflows) {
+                const workflow = workflows[workflowName];
+                if (workflow?.workflow) {
+                    const warnings = validateWorkflowVersions(workflow.workflow, registry);
+                    allWarnings.push(...warnings);
+                }
+            }
+        }
         workflowCount += writeWorkflowJSONToYamlFiles(workflows, relativePath(filePath), {
             ...argv,
             ...config,
         });
     }
     console.log(`[github-actions-workflow-ts] Successfully generated ${workflowCount} workflow file(s)`);
+    // Log version warnings at the end
+    if (versionWarningsEnabled) {
+        logVersionWarnings(allWarnings);
+    }
 };
 //# sourceMappingURL=build.js.map

package/dist/commands/build.js.map

@@ -1 +1 @@
-{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/commands/build.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,KAAK,MAAM,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,MAAM,WAAW,CAAA;AAC1B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAA;AAInC;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,mDAAmD;IACnD,wEAAwE;IACxE,sCAAsC;IACtC,mDAAmD;CACpD,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAS,EAAU,EAAE,CAChD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAA;AAEjC;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,GAA0B,EAAE;IACnD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAA;IAElE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CACT,wGAAwG,CACzG,CAAA;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CACT,4EAA4E,CAC7E,CAAA;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAA;AAC7D,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAyB,EAAE;IAC7D,MAAM,kBAAkB,GAAG,EAAE,CAAC,IAAI,CAChC,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,cAAc,EACvD;QACE,SAAS,EAAE,IAAI;QACf,GAAG,EAAE,IAAI;KACV,CACF,CAAA;IAED,IAAI,CAAC,kBAAkB,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;QACtD,OAAO,CAAC,GAAG,CACT,gHAAgH,CACjH,CAAA;QAED,OAAM;IACR,CAAC;IAED,MAAM,gBAAgB,GAAG,kBAAkB;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oCAAoC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;SACvE,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,OAAO,CAAC,GAAG,CACT,mEAAmE,gBAAgB,EAAE,CACtF,CAAA;IAED,OAAO,kBAAkB,CAAA;AAC3B,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,QAAgB,EACmB,EAAE;IACrC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC,IAAI,CAAA;IAEhD,gEAAgE;IAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAA;IAEpC,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,YAAsC,EACtC,gBAAwB,EACxB,MAAiB,EACT,EAAE;IACV,IAAI,aAAa,GAAW,CAAC,CAAA;IAE7B,KAAK,MAAM,YAAY,IAAI,YAAY,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAA;QAE3C,mEAAmE;QACnE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC1D,SAAQ;QACV,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE;YAClD,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI;YACpB,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;SAC9B,CAAC,CAAA;QAEF,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAChC,SAAS,EACT,WAAW,EACX,GAAG,QAAQ,CAAC,QAAQ,MAAM,CAC3B,CAAA;QAED,OAAO,CAAC,GAAG,CACT,2CAA2C,YAAY,CAAC,gBAAgB,CAAC,GAAG,CAC7E,CAAA;QAED,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,mBAAmB,CAAC;aAC1D,IAAI,CAAC,IAAI,CAAC;aACV,OAAO,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAA;QAElD,EAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QAEzE,aAAa,EAAE,CAAA;IACjB,CAAC;IAED,OAAO,aAAa,CAAA;AACtB,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAS,EAAE;IAChD,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;IAEpE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CACT,kFAAkF,CACnF,CAAA;QACD,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACjD,CAAC;AACH,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,IAA6B,EACd,EAAE;IACjB,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,CAAA;IAChC,MAAM,iBAAiB,GAAG,oBAAoB,EAAE,IAAI,EAAE,CAAA;IACtD,IAAI,aAAa,GAAG,CAAC,CAAA;IAErB,uBAAuB,EAAE,CAAA;IAEzB,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACpD,aAAa,IAAI,4BAA4B,CAC3C,SAAS,EACT,YAAY,CAAC,QAAQ,CAAC,EACtB;YACE,GAAG,IAAI;YACP,GAAG,MAAM;SACG,CACf,CAAA;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CACT,uDAAuD,aAAa,mBAAmB,CACxF,CAAA;AACH,CAAC,CAAA"}
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/commands/build.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,KAAK,MAAM,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,MAAM,WAAW,CAAA;AAC1B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAA;AAGnC,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,GAGjB,MAAM,wBAAwB,CAAA;AAE/B;;;;GAIG;AACH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAQ,EAAO,EAAE;IACrD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;IACvC,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,2CAA2C;QAC3C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,mDAAmD;IACnD,wEAAwE;IACxE,sCAAsC;IACtC,mDAAmD;CACpD,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAS,EAAU,EAAE,CAChD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAA;AAEjC;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,GAA0B,EAAE;IACnD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAA;IAElE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CACT,wGAAwG,CACzG,CAAA;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CACT,4EAA4E,CAC7E,CAAA;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAA;AAC7D,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAyB,EAAE;IAC7D,MAAM,kBAAkB,GAAG,EAAE,CAAC,IAAI,CAChC,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,cAAc,EACvD;QACE,SAAS,EAAE,IAAI;QACf,GAAG,EAAE,IAAI;KACV,CACF,CAAA;IAED,IAAI,CAAC,kBAAkB,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;QACtD,OAAO,CAAC,GAAG,CACT,gHAAgH,CACjH,CAAA;QAED,OAAM;IACR,CAAC;IAED,MAAM,gBAAgB,GAAG,kBAAkB;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oCAAoC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;SACvE,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,OAAO,CAAC,GAAG,CACT,mEAAmE,gBAAgB,EAAE,CACtF,CAAA;IAED,OAAO,kBAAkB,CAAA;AAC3B,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,QAAgB,EACmB,EAAE;IACrC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC,IAAI,CAAA;IAEhD,gEAAgE;IAChE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAA;IAEpC,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,YAAsC,EACtC,gBAAwB,EACxB,MAAiB,EACT,EAAE;IACV,IAAI,aAAa,GAAW,CAAC,CAAA;IAE7B,KAAK,MAAM,YAAY,IAAI,YAAY,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAA;QAE3C,mEAAmE;QACnE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC1D,SAAQ;QACV,CAAC;QAED,+DAA+D;QAC/D,MAAM,eAAe,GAAG,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAEhE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE;YAChD,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI;YACpB,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;SAC9B,CAAC,CAAA;QAEF,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAChC,SAAS,EACT,WAAW,EACX,GAAG,QAAQ,CAAC,QAAQ,MAAM,CAC3B,CAAA;QAED,OAAO,CAAC,GAAG,CACT,2CAA2C,YAAY,CAAC,gBAAgB,CAAC,GAAG,CAC7E,CAAA;QAED,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,mBAAmB,CAAC;aAC1D,IAAI,CAAC,IAAI,CAAC;aACV,OAAO,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAA;QAElD,EAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QAEzE,aAAa,EAAE,CAAA;IACjB,CAAC;IAED,OAAO,aAAa,CAAA;AACtB,CAAC,CAAA;AAWD;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;AACrC,8DAA8D;AAC9D,QAAa,EACK,EAAE;IACpB,MAAM,OAAO,GAAqB,EAAE,CAAA;IAEpC,IAAI,CAAC,QAAQ,EAAE,IAAI;QAAE,OAAO,OAAO,CAAA;IAEnC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAClC,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAQ;QAEtD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,IAAI,EAAE,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAChD,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,aAAa,EAAE,IAAI,CAAC,cAAc;oBAClC,WAAW,EAAE,IAAI,CAAC,YAAY;iBAC/B,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG;AAClD,8DAA8D;AAC9D,cAAmB,EACI,EAAE;IACzB,MAAM,QAAQ,GAA0B,IAAI,GAAG,EAAE,CAAA;IAEjD,gGAAgG;IAChG,gFAAgF;IAChF,oFAAoF;IAEpF,+EAA+E;IAC/E,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;YACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAA;gBAClD,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;gBAC7C,IAAI,OAAO,WAAW,KAAK,UAAU,EAAE,CAAC;oBACtC,IAAI,CAAC;wBACH,MAAM,QAAQ,GAAG,IAAK,WAEpB,EAAE,CAAA;wBACJ,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;4BACxB,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;wBACzC,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,4BAA4B;oBAC9B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GACrC,KAAK,IAAoC,EAAE;IACzC,MAAM,QAAQ,GAA0B,IAAI,GAAG,EAAE,CAAA;IAEjD,IAAI,CAAC;QACH,gDAAgD;QAChD,qEAAqE;QACrE,MAAM,WAAW,GAAG,qCAAqC,CAAA;QACzD,MAAM,aAAa,GAAG,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAG/C,CAAA;QAED,qFAAqF;QACrF,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;gBAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC9B,0DAA0D;oBAC1D,+CAA+C;oBAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAA;oBAElD,qEAAqE;oBACrE,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;oBAC5C,IACE,OAAO,WAAW,KAAK,UAAU;wBACjC,WAAW,IAAI,WAAW,EAC1B,CAAC;wBACD,IAAI,CAAC;4BACH,4DAA4D;4BAC5D,MAAM,QAAQ,GAAG,IAAK,WAEpB,EAAE,CAAA;4BACJ,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;gCACxB,2DAA2D;gCAC3D,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;4BACzC,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC;4BACP,wDAAwD;wBAC1D,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAA;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;AACtC,8DAA8D;AAC9D,QAAa,EACb,QAA+B,EACb,EAAE;IACpB,MAAM,QAAQ,GAAqB,EAAE,CAAA;IACrC,MAAM,WAAW,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAA;IAErD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,yDAAyD;QACzD,IAAI,aAAa,GAAG,UAAU,CAAC,aAAa,CAAA;QAC5C,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,CAAA;QAE1C,sDAAsD;QACtD,IAAI,CAAC,aAAa,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;YACjD,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACvC,CAAC;QAED,qDAAqD;QACrD,IAAI,CAAC,aAAa,IAAI,WAAW,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACvD,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAC3C,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;YACrE,IAAI,OAAO,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAS,EAAE;IAChD,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;IAEpE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CACT,kFAAkF,CACnF,CAAA;QACD,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACjD,CAAC;AACH,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,IAA6B,EACd,EAAE;IACjB,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,CAAA;IAChC,MAAM,iBAAiB,GAAG,oBAAoB,EAAE,IAAI,EAAE,CAAA;IACtD,IAAI,aAAa,GAAG,CAAC,CAAA;IACrB,MAAM,WAAW,GAAqB,EAAE,CAAA;IAExC,kEAAkE;IAClE,MAAM,sBAAsB,GAC1B,MAAM,CAAC,qCAAqC,KAAK,KAAK,CAAA;IACxD,MAAM,QAAQ,GAAG,sBAAsB;QACrC,CAAC,CAAC,MAAM,0BAA0B,EAAE;QACpC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAA;IAEb,uBAAuB,EAAE,CAAA;IAEzB,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QAEpD,+BAA+B;QAC/B,IAAI,sBAAsB,EAAE,CAAC;YAC3B,KAAK,MAAM,YAAY,IAAI,SAAS,EAAE,CAAC;gBACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,YAAY,CAAC,CAAA;gBACxC,IAAI,QAAQ,EAAE,QAAQ,EAAE,CAAC;oBACvB,MAAM,QAAQ,GAAG,wBAAwB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;oBACtE,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAA;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;QAED,aAAa,IAAI,4BAA4B,CAC3C,SAAS,EACT,YAAY,CAAC,QAAQ,CAAC,EACtB;YACE,GAAG,IAAI;YACP,GAAG,MAAM;SACG,CACf,CAAA;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CACT,uDAAuD,aAAa,mBAAmB,CACxF,CAAA;IAED,kCAAkC;IAClC,IAAI,sBAAsB,EAAE,CAAC;QAC3B,kBAAkB,CAAC,WAAW,CAAC,CAAA;IACjC,CAAC;AACH,CAAC,CAAA"}

package/dist/commands/types/build.d.ts

@@ -2,5 +2,13 @@ export type WacConfig = {
     refs?: boolean;
     headerText?: string[];
     dumpOptions?: Record<string, unknown>;
+    /**
+     * Enable/disable version mismatch warnings for actions package.
+     * When true (default), warns when:
+     * - A pinned version is older than the version types were generated from
+     * - A non-semver ref (commit SHA, branch) is used
+     * Set to false to suppress these warnings.
+     */
+    actionsPackageOutdatedVersionWarnings?: boolean;
 };
 //# sourceMappingURL=build.d.ts.map

package/dist/commands/types/build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../src/commands/types/build.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACtC,CAAA"}
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../src/commands/types/build.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACrC;;;;;;OAMG;IACH,qCAAqC,CAAC,EAAE,OAAO,CAAA;CAChD,CAAA"}

package/dist/validation/index.d.ts

@@ -0,0 +1,2 @@
+export * from './version-warning.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/validation/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAA"}

package/dist/validation/index.js

@@ -0,0 +1,2 @@
+export * from './version-warning.js';
+//# sourceMappingURL=index.js.map

package/dist/validation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/validation/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAA"}

package/dist/validation/version-warning.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Parse a semver-like version string into its components.
+ * Returns null if the version doesn't match semver patterns.
+ */
+export declare function parseVersion(version: string): {
+    major: number;
+    minor: number;
+    patch: number;
+} | null;
+/**
+ * Compare two semver versions.
+ * Returns: positive if a > b, negative if a < b, 0 if equal
+ */
+export declare function compareSemver(a: {
+    major: number;
+    minor: number;
+    patch: number;
+}, b: {
+    major: number;
+    minor: number;
+    patch: number;
+}): number;
+/**
+ * Extract the version part from a uses string.
+ * e.g., "actions/checkout@v6.0.1" -> "v6.0.1"
+ *       "actions/checkout@abc123" -> "abc123"
+ */
+export declare function extractVersionFromUses(uses: string): string | null;
+/**
+ * Check if a version string looks like a semver (vX, vX.Y, or vX.Y.Z).
+ */
+export declare function isSemverLike(version: string): boolean;
+/**
+ * Result of version validation.
+ */
+export interface VersionWarning {
+    uses: string;
+    usedVersion: string;
+    sourceVersion: string;
+    message: string;
+    type: 'older-version' | 'non-semver-ref';
+}
+/**
+ * Check if a version string is a major-only version (e.g., "v4" not "v4.1.0").
+ */
+export declare function isMajorOnly(version: string): boolean;
+/**
+ * Validate a uses string against a source version.
+ * Returns a warning object if there's a potential issue, null otherwise.
+ */
+export declare function validateActionVersion(uses: string, sourceVersion: string): VersionWarning | null;
+/**
+ * Log version warnings to console.
+ */
+export declare function logVersionWarnings(warnings: VersionWarning[]): void;
+/**
+ * Known action source versions registry.
+ * Maps action patterns to their source versions.
+ * This is populated by importing from @github-actions-workflow-ts/actions.
+ */
+export type ActionVersionRegistry = Map<string, string>;
+/**
+ * Create an action pattern from owner/repo for lookup.
+ * e.g., "actions/checkout@v6" -> "actions/checkout@v6"
+ */
+export declare function getActionPattern(uses: string): string;
+//# sourceMappingURL=version-warning.d.ts.map

package/dist/validation/version-warning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-warning.d.ts","sourceRoot":"","sources":["../../src/validation/version-warning.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,GACd;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAUxD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAClD,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjD,MAAM,CAIR;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGlE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,eAAe,GAAG,gBAAgB,CAAA;CACzC;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAGpD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,GACpB,cAAc,GAAG,IAAI,CAoDvB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,IAAI,CAYnE;AAED;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAEvD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAerD"}

package/dist/validation/version-warning.js

@@ -0,0 +1,132 @@
+/* eslint-disable no-console */
+/**
+ * Parse a semver-like version string into its components.
+ * Returns null if the version doesn't match semver patterns.
+ */
+export function parseVersion(version) {
+    // Match patterns like v1, v1.0, v1.0.0, 1, 1.0, 1.0.0
+    const match = version.match(/^v?(\d+)(?:\.(\d+))?(?:\.(\d+))?$/);
+    if (!match)
+        return null;
+    return {
+        major: parseInt(match[1], 10),
+        minor: match[2] !== undefined ? parseInt(match[2], 10) : 0,
+        patch: match[3] !== undefined ? parseInt(match[3], 10) : 0,
+    };
+}
+/**
+ * Compare two semver versions.
+ * Returns: positive if a > b, negative if a < b, 0 if equal
+ */
+export function compareSemver(a, b) {
+    if (a.major !== b.major)
+        return a.major - b.major;
+    if (a.minor !== b.minor)
+        return a.minor - b.minor;
+    return a.patch - b.patch;
+}
+/**
+ * Extract the version part from a uses string.
+ * e.g., "actions/checkout@v6.0.1" -> "v6.0.1"
+ *       "actions/checkout@abc123" -> "abc123"
+ */
+export function extractVersionFromUses(uses) {
+    const match = uses.match(/@(.+)$/);
+    return match ? match[1] : null;
+}
+/**
+ * Check if a version string looks like a semver (vX, vX.Y, or vX.Y.Z).
+ */
+export function isSemverLike(version) {
+    return parseVersion(version) !== null;
+}
+/**
+ * Check if a version string is a major-only version (e.g., "v4" not "v4.1.0").
+ */
+export function isMajorOnly(version) {
+    // Match patterns like v1 or 1 (without minor/patch)
+    return /^v?\d+$/.test(version);
+}
+/**
+ * Validate a uses string against a source version.
+ * Returns a warning object if there's a potential issue, null otherwise.
+ */
+export function validateActionVersion(uses, sourceVersion) {
+    const usedVersion = extractVersionFromUses(uses);
+    if (!usedVersion)
+        return null;
+    // Check if used version is semver-like
+    const usedParsed = parseVersion(usedVersion);
+    if (!usedParsed) {
+        // Non-semver ref (commit SHA, branch name, etc.)
+        return {
+            uses,
+            usedVersion,
+            sourceVersion,
+            message: `Using non-semver ref "${usedVersion}". Types were generated from ${sourceVersion} and may not match.`,
+            type: 'non-semver-ref',
+        };
+    }
+    // Compare with source version
+    const sourceParsed = parseVersion(sourceVersion);
+    if (!sourceParsed)
+        return null;
+    // If using major-only version (e.g., @v4), it resolves to latest, so no warning needed
+    // as long as it's the same major version
+    if (isMajorOnly(usedVersion) && usedParsed.major === sourceParsed.major) {
+        return null;
+    }
+    // Only compare if same major version
+    if (usedParsed.major !== sourceParsed.major) {
+        // Different major version - types were generated for a different major
+        return {
+            uses,
+            usedVersion,
+            sourceVersion,
+            message: `Using ${usedVersion} but types were generated from ${sourceVersion} (different major version). Types may not match.`,
+            type: 'older-version',
+        };
+    }
+    // Check if used version is older than source
+    if (compareSemver(usedParsed, sourceParsed) < 0) {
+        return {
+            uses,
+            usedVersion,
+            sourceVersion,
+            message: `Pinned to ${usedVersion} which is older than ${sourceVersion} (types source). Some inputs/outputs may not exist in ${usedVersion}.`,
+            type: 'older-version',
+        };
+    }
+    return null;
+}
+/**
+ * Log version warnings to console.
+ */
+export function logVersionWarnings(warnings) {
+    if (warnings.length === 0)
+        return;
+    console.log('\n[github-actions-workflow-ts] ⚠️  Version warnings detected:');
+    for (const warning of warnings) {
+        console.log(`  • ${warning.uses}: ${warning.message}`);
+    }
+    console.log('  To suppress these warnings, set "actionsPackageOutdatedVersionWarnings": false in wac.config.json\n');
+}
+/**
+ * Create an action pattern from owner/repo for lookup.
+ * e.g., "actions/checkout@v6" -> "actions/checkout@v6"
+ */
+export function getActionPattern(uses) {
+    // Extract owner/repo@version pattern
+    const match = uses.match(/^([^@]+)@(.+)$/);
+    if (!match)
+        return uses;
+    const [, actionPath, version] = match;
+    const versionParsed = parseVersion(version);
+    if (versionParsed) {
+        // For semver, match against major version pattern
+        return `${actionPath}@v${versionParsed.major}`;
+    }
+    // For non-semver, return as-is (won't match registry)
+    return uses;
+}
+//# sourceMappingURL=version-warning.js.map

package/dist/validation/version-warning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-warning.js","sourceRoot":"","sources":["../../src/validation/version-warning.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAE/B;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe;IAEf,sDAAsD;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAA;IAChE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAEvB,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7B,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KAC3D,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,CAAkD,EAClD,CAAkD;IAElD,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAA;IACjD,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAA;IACjD,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAA;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAClC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,YAAY,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;AACvC,CAAC;AAaD;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,oDAAoD;IACpD,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,aAAqB;IAErB,MAAM,WAAW,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;IAChD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAA;IAE7B,uCAAuC;IACvC,MAAM,UAAU,GAAG,YAAY,CAAC,WAAW,CAAC,CAAA;IAE5C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,iDAAiD;QACjD,OAAO;YACL,IAAI;YACJ,WAAW;YACX,aAAa;YACb,OAAO,EAAE,yBAAyB,WAAW,gCAAgC,aAAa,qBAAqB;YAC/G,IAAI,EAAE,gBAAgB;SACvB,CAAA;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,YAAY,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;IAChD,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAA;IAE9B,uFAAuF;IACvF,yCAAyC;IACzC,IAAI,WAAW,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK,EAAE,CAAC;QACxE,OAAO,IAAI,CAAA;IACb,CAAC;IAED,qCAAqC;IACrC,IAAI,UAAU,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK,EAAE,CAAC;QAC5C,uEAAuE;QACvE,OAAO;YACL,IAAI;YACJ,WAAW;YACX,aAAa;YACb,OAAO,EAAE,SAAS,WAAW,kCAAkC,aAAa,kDAAkD;YAC9H,IAAI,EAAE,eAAe;SACtB,CAAA;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,aAAa,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO;YACL,IAAI;YACJ,WAAW;YACX,aAAa;YACb,OAAO,EAAE,aAAa,WAAW,wBAAwB,aAAa,yDAAyD,WAAW,GAAG;YAC7I,IAAI,EAAE,eAAe;SACtB,CAAA;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAA0B;IAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAEjC,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAA;IAE5E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IACxD,CAAC;IAED,OAAO,CAAC,GAAG,CACT,uGAAuG,CACxG,CAAA;AACH,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,qCAAqC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAEvB,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,KAAK,CAAA;IACrC,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IAE3C,IAAI,aAAa,EAAE,CAAC;QAClB,kDAAkD;QAClD,OAAO,GAAG,UAAU,KAAK,aAAa,CAAC,KAAK,EAAE,CAAA;IAChD,CAAC;IAED,sDAAsD;IACtD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@github-actions-workflow-ts/cli",
-  "version": "2.0.1",
+  "version": "2.2.0-beta.1",
   "description": "CLI to generate GitHub Actions YAML from TypeScript workflow files",
   "author": "Emmanuel N Kyeyune",
   "license": "MIT",
@@ -34,7 +34,7 @@
     "js-yaml": "^4.1.0",
     "tsx": "^4.19.3",
     "yargs": "^17.7.2",
-    "@github-actions-workflow-ts/lib": "2.0.1"
+    "@github-actions-workflow-ts/lib": "2.1.0"
   },
   "devDependencies": {
     "@jest/globals": "^29.7.0",