feat!: v4 action

Upgrade every dependency to its latest major version and modernize the
entire build, test, and lint toolchain to match. All @actions/* packages
have moved to pure ESM in their v3+ releases, which required replacing
the bundler, test runner, and linter.

BREAKING CHANGE: action now runs on `node24` (was `node20`).

Dependencies (major version bumps):
- @actions/core 1.11.1 → 3.0.0
- @actions/exec 1.1.1 → 3.0.0
- @actions/github 6.0.1 → 9.0.0
- @actions/http-client 3.0.0 → 4.0.0
- @actions/io 2.0.0 → 3.0.2
- @actions/tool-cache 2.0.2 → 4.0.0
- @actions/cache 4.1.0 → 6.0.0
- octokit 3.1.1 → 5.0.5
- @commitlint/cli 19.8.1 → 20.5.0
- @types/node 24.10.0 → 25.5.0
- typescript 6.0.2 (unchanged, already latest)

Bundler: @vercel/ncc → Bun's built-in bundler
- ncc cannot resolve ESM-only exports fields (vercel/ncc#1311)
- `bun build` bundles 216 modules in ~15 ms
- Output is ESM (`"type": "module"` added to package.json)

Test runner: Jest → Bun test
- Bun's runtime handles ESM natively; no custom resolver needed
- Tests use `mock.module()` from `bun:test` for @actions/* ESM mocks
- Removed jest, ts-jest, @jest/globals, @types/jest, jest-sonar-reporter,
  make-coverage-badge, and the custom `.dev/jest-resolver.js`
- Added `bunfig.toml` for test preload and coverage config

Formatter: Prettier → Biome
- `biome format` replaces `prettier --write`
- Config in `biome.json` matches previous style (no semis, single quotes,
  trailing-comma none, 80-col width)

Linter: ESLint → oxlint
- ESLint 10 removed `.eslintrc` support; `eslint-plugin-github` only
  supports ESLint ≤9 with no newer release available
- Removed eslint, eslint-plugin-github, eslint-plugin-jest,
  eslint-plugin-jsonc, eslint-plugin-prettier, prettier-eslint,
  @typescript-eslint/eslint-plugin, @typescript-eslint/parser

Package manager: pnpm → Bun
- All scripts now use `bun run`
- Removed pinned `bun` devDependency (use system bun)

GHA runtime: node20 → node24
- `action.yml` updated to `using: node24`
- Engine field set to `>=24`

CDN URL fixes:
- Download base changed from `dist.elide.zip` to `elide.zip` (apex)
- Platform tags now map `darwin→macos` and `aarch64→arm64` for the CDN
  (`cdnOs()` / `cdnArch()` helpers in releases.ts)
- Supports both Elide 1.0 (new R2 naming) and classic (legacy fallback)

Resilience:
- `postInstall()` now catches prewarm/info failures gracefully with a
  debug message instead of failing the workflow

Docker:
- Added `Dockerfile` (node24-slim + bun) and `.dockerignore`
- `bun run test:docker` builds the image and runs build + tests inside it

Removed unused dependency: `which` (never imported; code uses
`@actions/io`'s `which` instead).

Signed-off-by: Sam Gammon <sam@elide.ventures>

Author: sgammon

.dev/test-env.js

@@ -0,0 +1,10 @@
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+
+if (!process.env.RUNNER_TEMP) {
+  process.env.RUNNER_TOOL_CACHE = path.resolve(__dirname, 'tool-cache')
+  process.env.RUNNER_TEMP = path.resolve(__dirname, 'tmp')
+  process.env.ELIDE_HOME = path.resolve(__dirname, 'target')
+}

.dev/test-env.ts

@@ -0,0 +1,6 @@
+node_modules
+dist
+coverage
+.git
+src/*.js
+src/*.js.map

.dockerignore

@@ -23,46 +23,32 @@ jobs:
         id: checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - name: "Setup: PNPM"
-        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
-        with:
-          version: 9.1.4
-
       - name: "Setup: Node"
         id: setup-node
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
-          node-version: 20
-          cache: pnpm
+          node-version: 24
+
+      - name: "Setup: Bun"
+        uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
+        with:
+          bun-version: latest
 
       - name: "Setup: Install Dependencies"
         id: install
-        run: pnpm install --frozen-lockfile && pnpm install -g turbo
-  
+        run: bun install --frozen-lockfile
+
       - name: Check Format
-        id: npm-format-check
-        run: pnpm run format:check
+        id: format-check
+        run: bun run format:check
 
-      - name: Test
-        id: npm-ci-test
-        run: pnpm run test
+      - name: Lint
+        id: lint
+        run: bun run lint
 
-      - name: "Test: Sonar"
-        uses: SonarSource/sonarcloud-github-action@13a24e453e2e6262f3bb0c5fa8241031e637a028 # master
-        continue-on-error: true
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
-          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-        with:
-          args: >
-            -Dsonar.organization=elide-dev
-            -Dsonar.projectKey=elide-dev_setup-elide
-            -Dsonar.python.coverage.reportPaths=coverage.xml
-            -Dsonar.sources=src/
-            -Dsonar.tests=__tests__/
-            -Dsonar.verbose=true
-            -Dsonar.javascript.lcov.reportPaths=coverage/lcov.info
-            -Dsonar.testExecutionReportPaths=test-report.xml
+      - name: Test
+        id: test
+        run: bun run test
 
       - name: "Report: Coverage"
         uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
@@ -98,11 +84,3 @@ jobs:
           elide --version
           echo "Path: ${{ steps.test-action.outputs.path }}"
           echo "Version: ${{ steps.test-action.outputs.version }}"
-
-  check-dist:
-    name: "Test: Dist"
-    uses: ./.github/workflows/check-dist.yml
-    secrets: inherit
-    permissions:
-      contents: read
-      statuses: write

.eslintignore

@@ -97,6 +97,10 @@ Thumbs.db
 # Ignore built ts files
 __tests__/runner/*
 
+# Bun build artifacts (output goes to dist/, not src/)
+src/*.js
+src/*.js.map
+
 # IDE files
 .idea
 .vscode

.github/linters/.eslintrc.yaml

@@ -0,0 +1,38 @@
+FROM node:24-slim AS base
+
+# Install Bun from a pinned, checksum-verified release
+ARG BUN_VERSION=1.3.11
+RUN apt-get update && apt-get install -y curl unzip && rm -rf /var/lib/apt/lists/* \
+    && ARCH=$(dpkg --print-architecture) \
+    && if [ "$ARCH" = "amd64" ]; then \
+         BUN_ARCH="x64"; \
+         BUN_SHA256="8611ba935af886f05a6f38740a15160326c15e5d5d07adef966130b4493607ed"; \
+       elif [ "$ARCH" = "arm64" ]; then \
+         BUN_ARCH="aarch64"; \
+         BUN_SHA256="d13944da12a53ecc74bf6a720bd1d04c4555c038dfe422365356a7be47691fdf"; \
+       else echo "Unsupported arch: $ARCH" && exit 1; fi \
+    && curl -fsSL "https://github.com/oven-sh/bun/releases/download/bun-v${BUN_VERSION}/bun-linux-${BUN_ARCH}.zip" \
+         -o /tmp/bun.zip \
+    && echo "${BUN_SHA256}  /tmp/bun.zip" | sha256sum -c - \
+    && unzip -q /tmp/bun.zip -d /tmp/bun-extract \
+    && mv /tmp/bun-extract/bun-linux-${BUN_ARCH}/bun /usr/local/bin/bun \
+    && chmod +x /usr/local/bin/bun \
+    && rm -rf /tmp/bun.zip /tmp/bun-extract
+
+FROM base AS deps
+WORKDIR /app
+
+# Copy package files first for layer caching
+COPY package.json bun.lock ./
+
+# Install dependencies
+RUN bun install --frozen-lockfile
+
+# Full build stage
+FROM base AS build
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+
+# Default: run the build
+CMD ["bun", "run", "build"]