fix: automated dependency fixes (3 fixed)

Fixed all 3 breaking changes. The core issue was that @actions/tool-cache@4.0.0, @actions/core@3.0.0, and @actions/exec@3.0.0 are now pure ESM packages with no CommonJS exports, causing the ncc bundler to fail with 'Package path . is not exported' errors. The fix required: (1) Upgrading @actions/core and @actions/exec to satisfy peer dependencies, (2) Converting the project to ESM by adding 'type': 'module' to package.json and updating tsconfig.json to use NodeNext module resolution, (3) Adding explicit .js file extensions to relative imports as required by ESM. The build now completes successfully, outputting an ESM bundle.

Generated by fossabot

Author: fossabot

dist/index.js

@@ -0,0 +1,3 @@
+{
+  "type": "module"
+}

dist/index.js.map

@@ -1,6 +1,7 @@
 {
   "name": "fossa-action",
   "description": "Find license compliance and security issues in your applications with FOSSA",
+  "type": "module",
   "main": "src/index.js",
   "scripts": {
     "lint": "eslint .",
@@ -10,8 +11,8 @@
     "node": ">= 20.16.0"
   },
   "dependencies": {
-    "@actions/core": "^2.0.2",
-    "@actions/exec": "^2.0.0",
+    "@actions/core": "^3.0.0",
+    "@actions/exec": "^3.0.0",
     "@actions/tool-cache": "^4.0.0"
   },
   "devDependencies": {

dist/package.json

@@ -2,7 +2,7 @@ import { addPath, debug } from '@actions/core';
 import { exec } from '@actions/exec';
 import { find, downloadTool, cacheDir, cacheFile, findAllVersions } from '@actions/tool-cache';
 import * as fs from 'node:fs';
-import { PINNED_CLI_VERSION } from './config';
+import { PINNED_CLI_VERSION } from './config.js';
 
 const CACHE_NAME = 'fossa';
 

dist/sourcemap-register.cjs

@@ -14,8 +14,8 @@ import {
   DEBUG,
   REPORT_FORMAT,
   WORKING_DIRECTORY,
-} from './config';
-import { fetchFossaCli } from './download-cli';
+} from './config.js';
+import { fetchFossaCli } from './download-cli.js';
 
 // Github doesn't always collect exit codes correctly, so we check output
 const failedRegex = /(A fatal error occurred|Test failed\. Number of issues found)/;

package.json

@@ -2,7 +2,7 @@
   "compilerOptions": {
     /* Basic Options */
     "target": "es2021" /* Specify ECMAScript target version: 'ES3' (default), 'ES5', 'ES2015', 'ES2016', 'ES2017', or 'ESNEXT'. */,
-    "module": "commonjs" /* Specify module code generation: 'none', commonjs', 'amd', 'system', 'umd', 'es2015', or 'ESNext'. */,
+    "module": "NodeNext" /* Specify module code generation: 'none', commonjs', 'amd', 'system', 'umd', 'es2015', or 'ESNext'. */,
     "lib": [
       "es2021"
     ],
@@ -31,7 +31,7 @@
     // "noImplicitReturns": true,             /* Report error when not all code paths in function return a value. */
     // "noFallthroughCasesInSwitch": true,    /* Report errors for fallthrough cases in switch statement. */
     /* Module Resolution Options */
-    "moduleResolution": "node" /* Specify module resolution strategy: 'node' (Node.js) or 'classic' (TypeScript pre-1.6). */,
+    "moduleResolution": "NodeNext" /* Specify module resolution strategy: 'node' (Node.js) or 'classic' (TypeScript pre-1.6). */,
     "resolveJsonModule": true,
     // "baseUrl": "./",                       /* Base directory to resolve non-absolute module names. */
     // "paths": {},                           /* A series of entries which re-map imports to lookup locations relative to the 'baseUrl'. */

src/download-cli.ts

@@ -2,14 +2,6 @@
 # yarn lockfile v1
 
 
-"@actions/core@^2.0.2":
-  version "2.0.3"
-  resolved "https://registry.yarnpkg.com/@actions/core/-/core-2.0.3.tgz#b05e8cf407ab393e5d10282357a74e1ee2315eee"
-  integrity sha512-Od9Thc3T1mQJYddvVPM4QGiLUewdh+3txmDYHHxoNdkqysR1MbCT+rFOtNUxYAz+7+6RIsqipVahY2GJqGPyxA==
-  dependencies:
-    "@actions/exec" "^2.0.0"
-    "@actions/http-client" "^3.0.2"
-
 "@actions/core@^3.0.0":
   version "3.0.0"
   resolved "https://registry.yarnpkg.com/@actions/core/-/core-3.0.0.tgz#89cb07c119e9b46a649ad5f355e77de9b3108cf8"
@@ -18,28 +10,13 @@
     "@actions/exec" "^3.0.0"
     "@actions/http-client" "^4.0.0"
 
-"@actions/exec@^2.0.0":
-  version "2.0.0"
-  resolved "https://registry.yarnpkg.com/@actions/exec/-/exec-2.0.0.tgz#35e829723389f80e362ec2cc415697ec74362ad8"
-  integrity sha512-k8ngrX2voJ/RIN6r9xB82NVqKpnMRtxDoiO+g3olkIUpQNqjArXrCQceduQZCQj3P3xm32pChRLqRrtXTlqhIw==
-  dependencies:
-    "@actions/io" "^2.0.0"
-
 "@actions/exec@^3.0.0":
   version "3.0.0"
   resolved "https://registry.yarnpkg.com/@actions/exec/-/exec-3.0.0.tgz#8c3464d20f0aa4068707757021d7e3c01a7ee203"
   integrity sha512-6xH/puSoNBXb72VPlZVm7vQ+svQpFyA96qdDBvhB8eNZOE8LtPf9L4oAsfzK/crCL8YZ+19fKYVnM63Sl+Xzlw==
   dependencies:
     "@actions/io" "^3.0.2"
 
-"@actions/http-client@^3.0.2":
-  version "3.0.2"
-  resolved "https://registry.yarnpkg.com/@actions/http-client/-/http-client-3.0.2.tgz#3db9c83af9d29d51ac8c30b45bc17f7014beb1b2"
-  integrity sha512-JP38FYYpyqvUsz+Igqlc/JG6YO9PaKuvqjM3iGvaLqFnJ7TFmcLyy2IDrY0bI0qCQug8E9K+elv5ZNfw62ZJzA==
-  dependencies:
-    tunnel "^0.0.6"
-    undici "^6.23.0"
-
 "@actions/http-client@^4.0.0":
   version "4.0.0"
   resolved "https://registry.yarnpkg.com/@actions/http-client/-/http-client-4.0.0.tgz#f9754133c22802466482bf96321d42f2dba1fc82"
@@ -48,11 +25,6 @@
     tunnel "^0.0.6"
     undici "^6.23.0"
 
-"@actions/io@^2.0.0":
-  version "2.0.0"
-  resolved "https://registry.yarnpkg.com/@actions/io/-/io-2.0.0.tgz#3ad1271ba3cd515324f2215e8d4c1c0c3864d65b"
-  integrity sha512-Jv33IN09XLO+0HS79aaODsvIRyduiF7NY/F6LYeK5oeUmrsz7aFdRphQjFoESF4jS7lMauDOttKALcpapVDIAg==
-
 "@actions/io@^3.0.0", "@actions/io@^3.0.2":
   version "3.0.2"
   resolved "https://registry.yarnpkg.com/@actions/io/-/io-3.0.2.tgz#6f89b27a159d109836d983efa283997c23b92284"