Merge pull request #79 from yokawasa/no-longer-default-latest

Tool version no longer defaults to latest but a specific version

Author: yokawasa

README.md

@@ -12,23 +12,23 @@ A GitHub Action that setup Kubernetes tools (kubectl, kustomize, helm, kubeconfo
 |`fail-fast`|`false`|`true`| the action immediately fails when it fails to download (ie. due to a bad version) |
 |`arch-type`|`false`|`""`| Optional. The processor architecture type of the tool binary to setup. The action will auto-detect the architecture (`amd64` or `arm64`) and use it as appropriate at runtime. Specify the architecture type (`amd64` or `arm64`) only if you need to force it.|
 |`setup-tools`|`false`|`""`|List of tool name to setup. By default, the action download and setup all supported Kubernetes tools. By specifying `setup-tools` you can choose which tools the action setup. Supported separator is `return` in multi-line string. Supported tools are `kubectl`, `kustomize`, `helm`, `helmv3`,  `kubeval`, `conftest`, `yq`, `rancher`, `tilt`, `skaffold`, `kube-score`|
-|`kubectl`|`false`|`latest`| kubectl version or `latest`. kubectl versions can be found [here](https://github.com/kubernetes/kubernetes/releases)|
-|`kustomize`|`false`|`latest`| kustomize version or `latest`. kustomize versions can be found [here](https://github.com/kubernetes-sigs/kustomize/releases)|
-|`helm`|`false`|`latest`| helm version or `latest`. helm versions can be found [here](https://github.com/helm/helm/releases)|
-|`kubeval`|`false`|`latest`| kubeval version (must be **0.16.1+**) or `latest`. kubeval versions can be found [here](https://github.com/instrumenta/kubeval/releases).<br> NOTE: this parameter is deprecating as `kubeval` is no longer maintained. A good replacement is [kubeconform](https://github.com/yannh/kubeconform). See also [this](https://github.com/instrumenta/kubeval) for more details.|
-|`kubeconform`|`false`|`latest`| kubeconform version or `latest`. kubeconform versions can be found [here](https://github.com/yannh/kubeconform/releases)|
-|`conftest`|`false`|`latest`| conftest version or `latest`. conftest versions can be found [here](https://github.com/open-policy-agent/conftest/releases)|
-|`yq`|`false`|`latest`| yq version or `latest`. yq versions can be found [here](https://github.com/mikefarah/yq/releases/)|
-|`rancher`|`false`|`latest`| Rancher CLI version or `latest`. Rancher CLI versions can be found [here](https://github.com/rancher/cli/releases)|
-|`tilt`|`false`|`latest`| Tilt version or `latest`. Tilt versions can be found [here](https://github.com/tilt-dev/tilt/releases)|
-|`skaffold`|`false`|`latest`| Skaffold version or `latest`. Skaffold versions can be found [here](https://github.com/GoogleContainerTools/skaffold/releases)|
-|`kube-score`|`false`|`latest`| kube-score version or `latest`. kube-score versions can be found [here](https://github.com/zegl/kube-score/releases)|
+|`kubectl`|`false`|`1.34.1`| kubectl version or `latest`. kubectl versions can be found [here](https://github.com/kubernetes/kubernetes/releases)|
+|`kustomize`|`false`|`5.7.1`| kustomize version or `latest`. kustomize versions can be found [here](https://github.com/kubernetes-sigs/kustomize/releases)|
+|`helm`|`false`|`3.19.0`| helm version or `latest`. helm versions can be found [here](https://github.com/helm/helm/releases)|
+|`kubeval`|`false`|`0.16.1`| kubeval version (must be **0.16.1+**) or `latest`. kubeval versions can be found [here](https://github.com/instrumenta/kubeval/releases).<br> NOTE: this parameter is deprecating as `kubeval` is no longer maintained. A good replacement is [kubeconform](https://github.com/yannh/kubeconform). See also [this](https://github.com/instrumenta/kubeval) for more details.|
+|`kubeconform`|`false`|`0.7.0`| kubeconform version or `latest`. kubeconform versions can be found [here](https://github.com/yannh/kubeconform/releases)|
+|`conftest`|`false`|`0.62.0`| conftest version or `latest`. conftest versions can be found [here](https://github.com/open-policy-agent/conftest/releases)|
+|`yq`|`false`|`4.47.2`| yq version or `latest`. yq versions can be found [here](https://github.com/mikefarah/yq/releases/)|
+|`rancher`|`false`|`2.12.1`| Rancher CLI version or `latest`. Rancher CLI versions can be found [here](https://github.com/rancher/cli/releases)|
+|`tilt`|`false`|`0.35.1`| Tilt version or `latest`. Tilt versions can be found [here](https://github.com/tilt-dev/tilt/releases)|
+|`skaffold`|`false`|`2.16.1`| Skaffold version or `latest`. Skaffold versions can be found [here](https://github.com/GoogleContainerTools/skaffold/releases)|
+|`kube-score`|`false`|`1.20.0`| kube-score version or `latest`. kube-score versions can be found [here](https://github.com/zegl/kube-score/releases)|
 
 > [!NOTE]
 > - Supported Environments: `Linux`
 > - From `v0.7.0`, the action supports tool version 'v' prefix. Prior to v0.7.0, the action only accept the tool version without 'v' prefix but from v0.7.0 the action automatically add/remove the prefix as necessary
-> - From `v0.13.0`, all tools use `latest` as the default version. However, using `latest` can make builds non-reproducible, as the installed version may change over time. For stable and repeatable builds, **it is recommended to specify exact versions**
->
+> - From `v0.13.X`, the action supports `latest` as tool version. If a tool input is set to `latest`, the action resolves the latest version at runtime, then downloads and caches that exact version. However, using `latest` can make builds non-reproducible, as the installed version may change over time. For stable and repeatable builds, **it is recommended to specify exact versions**
+
 ### Outputs
 |Parameter|Description|
 |:--:|:--|
@@ -53,17 +53,17 @@ Pinned versions (reproducible):
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
-    - uses: yokawasa/[email protected].0
+    - uses: yokawasa/[email protected].1
       with:
-        kubectl: '1.25'
-        kustomize: '5.0.0'
-        helm: '3.11.1'
-        kubeconform: '0.5.0'
-        conftest: '0.39.0'
-        rancher: '2.7.0'
-        tilt: '0.31.2'
-        skaffold: '2.1.0'
-        kube-score: '1.16.1'
+        kubectl: '1.34.1'
+        kustomize: '5.7.1'
+        helm: '3.19.0'
+        kubeconform: '0.7.0'
+        conftest: '0.62.0'
+        rancher: '2.12.1'
+        tilt: '0.35.2'
+        skaffold: '2.16.1'
+        kube-score: '1.20.0'
     - run: |
         kubectl version --client
         kustomize version
@@ -77,14 +77,14 @@ Pinned versions (reproducible):
         kube-score version
 ```
 
-Default behavior (latest) — no inputs:
+Default versions for the commands will be setup if you don't give any inputs like this:
 
 ```yaml
   test: 
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
-    - uses: yokawasa/[email protected].0
+    - uses: yokawasa/[email protected].1
     - run: |
         kubectl version --client
         kustomize version
@@ -98,20 +98,24 @@ Default behavior (latest) — no inputs:
         kube-score version
 ```
 
-Selecting tools with default latest versions (using `setup-tools`):
+By specifying setup-tools you can choose which tools the action setup. Supported separator is return in multi-line string like this
 
 ```yaml
   test: 
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
-    - uses: yokawasa/[email protected].0
+    - uses: yokawasa/[email protected].1
       with:
         setup-tools: |
           kubectl
           helm
           kustomize
           skaffold
+        kubectl: '1.25'
+        helm: '3.11.1'
+        kustomize: '5.0.0'
+        skaffold: '2.1.0'
     - run: |
         kubectl version --client
         kustomize version
@@ -125,7 +129,7 @@ Architecture is automatically detected on the runner (amd64 or arm64). You can o
   test: 
     steps:
     - uses: actions/checkout@v4
-    - uses: yokawasa/[email protected].0
+    - uses: yokawasa/[email protected].1
       with:
         # arch-type is optional; uncomment to force arm64
         # arch-type: 'arm64'
@@ -134,23 +138,41 @@ Architecture is automatically detected on the runner (amd64 or arm64). You can o
           helm
           kustomize
           skaffold
+        kubectl: '1.25'
+        helm: '3.11.1'
+        kustomize: '5.0.0'
+        skaffold: '2.1.0'
     - run: |
         kubectl version --client
         kustomize version
         helm version
         skaffold version
+```
 
 Explicit latest inputs (optional):
 
 ```yaml
-  steps:
-  - uses: actions/checkout@v4
-  - uses: yokawasa/[email protected]
-    with:
-      kubectl: latest
-      helm: latest
-      kustomize: latest
-      skaffold: latest
+  test: 
+    steps:
+    - uses: actions/checkout@v4
+    - uses: yokawasa/[email protected]
+      with:
+        # arch-type is optional; uncomment to force arm64
+        # arch-type: 'arm64'
+        setup-tools: |
+          kubectl
+          helm
+          kustomize
+          skaffold
+        kubectl: latest
+        helm: latest
+        kustomize: latest
+        skaffold: latest
+    - run: |
+        kubectl version --client
+        kustomize version
+        helm version
+        skaffold version
 ```
 
 Note: Using `latest` makes builds non-reproducible since versions can change over time. Prefer pinning exact versions for stability.

action.yml

@@ -15,47 +15,47 @@ inputs:
     description: 'List of tool name to setup. By default, the action download and setup all supported Kubernetes tools. By specifying "setup-tools" you can choose which tools the action setup. Supported separator is return in multi-line string. Supported tools are "kubectl", "kustomize", "helm", "helmv3", "kubeval", "conftest", "yq", "rancher", "tilt", "skaffold", "kube-score"'
   kubectl:
     required: false
-    default: 'latest'
+    default: '1.34.1'
     description: "kubectl version or 'latest'"
   kustomize:
     required: false
-    default: 'latest'
+    default: '5.7.1'
     description: "kustomize version or 'latest'"
   helm:
     required: false
-    default: 'latest'
+    default: '3.19.0'
     description: "helm version or 'latest'"
   kubeval:
     required: false
-    default: 'latest'
+    default: '0.16.1'
     description: "kubeval version or 'latest'"
   kubeconform:
     required: false
-    default: 'latest'
+    default: '0.7.0'
     description: "kubeconform version or 'latest'"
   conftest:
     required: false
-    default: 'latest'
+    default: '0.62.0'
     description: "conftest version or 'latest'"
   yq:
     required: false
-    default: 'latest'
+    default: '4.47.2'
     description: "yq version or 'latest'"
   rancher:
     required: false
-    default: 'latest'
+    default: '2.12.1'
     description: "rancher cli version or 'latest'"
   tilt:
     required: false
-    default: 'latest'
+    default: '0.35.1'
     description: "tilt version or 'latest'"
   skaffold:
     required: false
-    default: 'latest'
+    default: '2.16.1'
     description: "skaffold version or 'latest'"
   kube-score:
     required: false
-    default: 'latest'
+    default: '1.20.0'
     description: "kube-score version or 'latest'"
 outputs:
   kubectl-path:
@@ -83,4 +83,4 @@ branding:
   color: 'blue'
 runs:
   using: 'node20'
-  main: 'dist/index.js'
+  main: 'dist/index.mjs'