Ignore pre-release parts when comparing GHES versions

Author: koesie10

lib/upload-lib.js

@@ -6,7 +6,6 @@ import * as core from "@actions/core";
 import { OctokitResponse } from "@octokit/types";
 import fileUrl from "file-url";
 import * as jsonschema from "jsonschema";
-import * as semver from "semver";
 
 import * as actionsUtil from "./actions-util";
 import { getOptionalInput, getRequiredInput } from "./actions-util";
@@ -30,7 +29,7 @@ import {
   getRequiredEnvParam,
   GitHubVariant,
   GitHubVersion,
-  parseGhesVersion,
+  satisfiesGHESVersion,
   SarifFile,
   SarifRun,
 } from "./util";
@@ -133,7 +132,7 @@ export async function shouldShowCombineSarifFilesDeprecationWarning(
   // Do not show this warning on GHES versions before 3.14.0
   if (
     githubVersion.type === GitHubVariant.GHES &&
-    semver.lt(parseGhesVersion(githubVersion.version), "3.14.0")
+    satisfiesGHESVersion(githubVersion, "<3.14")
   ) {
     return false;
   }
@@ -178,7 +177,7 @@ async function shouldDisableCombineSarifFiles(
 ) {
   if (githubVersion.type === GitHubVariant.GHES) {
     // Never block on GHES versions before 3.18.
-    if (semver.lt(parseGhesVersion(githubVersion.version), "3.18.0-0")) {
+    if (satisfiesGHESVersion(githubVersion, "<3.18")) {
       return false;
     }
   } else {

lib/upload-lib.js.map

@@ -1133,20 +1133,26 @@ export function checkActionVersion(
 }
 
 /**
- * This will parse a GitHub Enterprise Server version string into a SemVer object.
- *
- * GHES versions are usually in a semver-compatible format, so usually this will
- * just call the SemVer constructor. However, for GHES pre-release versions,
- * the version string is in the format "3.18.0.pre1", which is not a valid semver
- * version since the pre-release part of the version should be separated by a
- * hyphen. This function will replace the ".pre" part of the version with "-pre"
- * to make it a valid semver version.
+ * This will check whether the given GitHub version satisfies the given range,
+ * taking into account that a range like >=3.18 will also match the GHES 3.18
+ * pre-release/RC versions.
  */
-export function parseGhesVersion(version: string): semver.SemVer {
-  if (version.includes(".pre")) {
-    version = version.replace(".pre", "-pre");
+export function satisfiesGHESVersion(
+  githubVersion: GitHubVersion,
+  range: string,
+): boolean {
+  if (githubVersion.type !== GitHubVariant.GHES) {
+    return false;
   }
-  return new semver.SemVer(version);
+
+  const semverVersion =
+    semver.coerce(githubVersion.version) ?? new semver.SemVer("0.0.0");
+
+  // We always drop the pre-release part of the version, since anything that
+  // applies to GHES 3.18.0 should also apply to GHES 3.18.0.pre1.
+  semverVersion.prerelease = [];
+
+  return semver.satisfies(semverVersion, range);
 }
 
 /**