docs(readme): fix broken link

Signed-off-by: Evgeniy Frolov <evgeniy.frolov@flant.com>

.eslintrc.json

@@ -1,6 +1,6 @@
 {
-  "plugins": ["@typescript-eslint"],
-  "extends": ["plugin:github/es6"],
+  "plugins": ["@typescript-eslint", "github"],
+  "extends": ["eslint:recommended", "plugin:@typescript-eslint/recommended","plugin:github/recommended"],
   "parser": "@typescript-eslint/parser",
   "parserOptions": {
     "ecmaVersion": 9,
@@ -13,43 +13,10 @@
     "eslint-comments/no-use": "off",
     "import/no-namespace": "off",
     "no-unused-vars": "off",
-    "@typescript-eslint/no-unused-vars": "error",
-    "@typescript-eslint/no-require-imports": "error",
-    "@typescript-eslint/array-type": "error",
-    "@typescript-eslint/await-thenable": "error",
-    "@typescript-eslint/ban-ts-ignore": "error",
     "camelcase": "off",
-    "@typescript-eslint/camelcase": "error",
-    "@typescript-eslint/class-name-casing": "error",
-    "@typescript-eslint/explicit-function-return-type": ["error", {"allowExpressions": true}],
-    "@typescript-eslint/func-call-spacing": ["error", "never"],
-    "@typescript-eslint/generic-type-naming": ["error", "^[A-Z][A-Za-z]*$"],
-    "@typescript-eslint/no-array-constructor": "error",
-    "@typescript-eslint/no-empty-interface": "error",
-    "@typescript-eslint/no-explicit-any": "error",
-    "@typescript-eslint/no-extraneous-class": "error",
-    "@typescript-eslint/no-for-in-array": "error",
-    "@typescript-eslint/no-inferrable-types": "error",
-    "@typescript-eslint/no-misused-new": "error",
-    "@typescript-eslint/no-namespace": "error",
-    "@typescript-eslint/no-non-null-assertion": "warn",
-    "@typescript-eslint/no-object-literal-type-assertion": "error",
-    "@typescript-eslint/no-unnecessary-qualifier": "error",
-    "@typescript-eslint/no-unnecessary-type-assertion": "error",
-    "@typescript-eslint/no-useless-constructor": "error",
-    "@typescript-eslint/no-var-requires": "error",
-    "@typescript-eslint/prefer-for-of": "warn",
-    "@typescript-eslint/prefer-function-type": "warn",
-    "@typescript-eslint/prefer-includes": "error",
-    "@typescript-eslint/prefer-interface": "error",
-    "@typescript-eslint/prefer-string-starts-ends-with": "error",
-    "@typescript-eslint/promise-function-async": "error",
-    "@typescript-eslint/require-array-sort-compare": "error",
-    "@typescript-eslint/restrict-plus-operands": "error",
     "semi": "off",
-    "@typescript-eslint/semi": ["error", "never"],
-    "@typescript-eslint/type-annotation-spacing": "error",
-    "@typescript-eslint/unbound-method": "error"
+    "i18n-text/no-en": "off",
+    "sort-imports": "off"
   },
   "env": {
     "node": true,

.github/workflows/test.yaml

@@ -0,0 +1,43 @@
+name: Test
+on:
+  push:
+
+jobs:
+  channel:
+    name: By channel
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macOS-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Install
+        uses: ./install
+
+      - run: werf version
+
+  version:
+    name: By version
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macOS-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Install
+        uses: ./install
+        with:
+          version: v2.31.1
+
+      - run: werf version

README.md

@@ -1,85 +1,13 @@
 <p align="center">
-  <img src="https://github.com/werf/werf/raw/master/docs/images/werf-logo.svg?sanitize=true" style="max-height:100%;" height="175">
+  <img src="https://werf.io/assets/images/werf-logo.svg?sanitize=true" style="max-height:100%;" height="175">
 </p>
 ___
 
-This action set allows you to organize CI/CD with GitHub Actions and [werf](https://github.com/werf/werf). The set consists of several independent and complex actions:
+This action allows you to organize CI/CD with GitHub Actions and [werf](https://github.com/werf/werf).
 
-- [werf/actions/converge](https://github.com/werf/actions/tree/master/converge)
-- [werf/actions/build-and-publish](https://github.com/werf/actions/tree/master/build-and-publish)
-- [werf/actions/build](https://github.com/werf/actions/tree/master/build)
-- [werf/actions/publish](https://github.com/werf/actions/tree/master/build)
-- [werf/actions/deploy](https://github.com/werf/actions/tree/master/deploy)
-- [werf/actions/dismiss](https://github.com/werf/actions/tree/master/dismiss)
-- [werf/actions/run](https://github.com/werf/actions/tree/master/run)
-- [werf/actions/cleanup](https://github.com/werf/actions/tree/master/cleanup)
+**Ready-to-use GitHub Actions Workflows** for different CI/CD workflows are available [here](https://werf.io/getting_started/?usage=ci&ci=githubActions&runnerType=hostRunner&os=linux&buildBackend=buildah&projectType=simplified&sharedCICD=no&repoType=application).
 
-Each action combines all the necessary steps in itself and logic may be divided into environment setup and launching the corresponding command. 
-
-**Ready-to-use GitHub Actions Workflows** for different CI/CD workflows are available [here](https://werf.io/documentation/advanced/ci_cd/github_actions.html#complete-set-of-configurations-for-ready-made-workflows).
-
-> Also, there is another action — [werf/actions/install](https://github.com/werf/actions/tree/master/install). With this action a user can just install werf and use binary within job steps for own purposes
-
-## Environment setup in details
-
-### werf binary setup
-
-By default, all actions setup actual werf version for [1.1 alpha channel](https://werf.io/releases.html) (more details about channels, werf release cycle and compatibility promise [here](https://github.com/werf/werf#backward-compatibility-promise)). 
-Using the `channel` input the user can switch the release channel.
-
-> This is recommended approach to be up-to-date and to use actual werf version without changing configurations
-  
-```yaml
-- uses: werf/actions/converge@v1.1
-  with:
-    channel: alpha
-```
-  
-Withal, it is not necessary to work within release channels, and the user might specify certain werf version with `version` input.
-
-```yaml
-- uses: werf/actions/converge@v1.1
-  with:
-    version: v1.1.23
-```
-
-### kubeconfig setup (*optional*)
-
-The _kubeconfig_ may be used for deployment, cleanup, distributed locks and caches. Thus, the configuration should be added before step with the action or passed as base64 encoded data with `kube-config-base64-data` input:
-
-* Prepare _kubeconfig_ (e.g. `cat ~/.kube/config | base64`) and save in GitHub Project Secrets (e.g. with name `KUBE_CONFIG_BASE64_DATA`).
- 
-* Pass secret with `kube-config-base64-data` input:
- 
-  ```yaml
-  - uses: werf/actions/build-and-publish@v1.1
-    with:
-      kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-  ```
-
-### werf ci-env
-
-This command performs _docker login_ using `github-token`, sets up predefined variables based on GitHub Workflow context.  
- 
-**Note** that `github-token` is optional in this action, and the input is there in case you need to use a non-default token.
-
-By default, action will use the token provided to your workflow.
-
-## Working with werf options
-
-Any werf option can be defined with environment variables:
-
-```yaml
-- uses: werf/actions/build-and-publish@v1.1
-  env:
-    WERF_LOG_VERBOSE: "on"
-    WERF_TAG_CUSTOM_TAG1: tag1
-    WERF_TAG_CUSTOM_TAG2: tag2
-```
-
-## Examples
-
-### converge
+## How to use
 
 ```yaml
 converge:
@@ -88,147 +16,130 @@ converge:
   steps:
 
     - name: Checkout code
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0
-
-    - name: Converge
-      uses: werf/actions/converge@v1.1
-      with:
-        env: production
-        kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-```
-
-### build, publish and deploy
-
-```yaml
-build-and-publish:
-  name: Build and Publish
-  runs-on: ubuntu-latest
-  steps:
-
-    - name: Checkout code
-      uses: actions/checkout@v2
-      with:
-        fetch-depth: 0
-
-    - name: Build and Publish
-      uses: werf/actions/build-and-publish@v1.1
-      with:
-        kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-
-deploy:
-  name: Deploy
-  needs: build-and-publish
-  runs-on: ubuntu-latest
-  steps:
-
-    - name: Checkout code
-      uses: actions/checkout@v2
-      with:
-        fetch-depth: 0
-
-    - name: Deploy
-      uses: werf/actions/deploy@v1.1
-      with:
-        env: production
-        kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-```
-
-### dismiss
-
-```yaml
-dismiss: 
-  name: Dismiss
-  runs-on: ubuntu-latest
-  steps:
-  
-    - name: Checkout code
-      uses: actions/checkout@v2
-
-    - name: Dismiss
-      uses: werf/actions/dismiss@v1.1
-      with:
-        kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-        env: production
-```
-
-### run 
-
-```yaml
-run: 
-  name: Run
-  runs-on: ubuntu-latest
-  steps:
-  
-    - name: Checkout code
-      uses: actions/checkout@v2
-      with:
-        fetch-depth: 0
-
-    - name: Run
-      uses: werf/actions/run@v1.1
-      with:
-        image: backend
-        args: rails server
-        kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-      env:
-        WERF_DOCKER_OPTIONS: "-d -p 3000:3000"
-```
-
-### cleanup
-
-```yaml
-cleanup: 
-  name: Cleanup
-  runs-on: ubuntu-latest
-  steps:
-  
-    - name: Checkout code
-      uses: actions/checkout@v2
-
-    - name: Fetch all history for all tags and branches
-      run: git fetch --prune --unshallow
-
-    - name: Cleanup
-      uses: werf/actions/cleanup@v1.1
-      with:
-        kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-```
-
-### install
-
-```yaml
-werf:
-  name: werf 
-  runs-on: ubuntu-latest
-  steps:
-  
-    - name: Checkout code  
-      uses: actions/checkout@v2
-
-    - name: Install werf CLI  
-      uses: werf/actions/install@v1.1
     
-    # for deploy and distributed locks
-    - name: Create kube config
+    - name: Install werf
+      uses: werf/actions/install@v2
+      
+    - name: Run script
       run: |
-        KUBECONFIG=$(mktemp -d)/config
-        base64 -d <(printf "%s" $KUBE_CONFIG_BASE64_DATA) > $KUBECONFIG
-        echo KUBECONFIG=$KUBECONFIG >> $GITHUB_ENV
+        . $(werf ci-env github --as-file) 
+        werf converge
       env:
-        KUBE_CONFIG_BASE64_DATA: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-  
-    - name: Run werf commands
-      run: |
-        source $(werf ci-env github --as-file)
-        werf build-and-publish
-        werf deploy
-      env:
-        GITHUB_TOKEN: ${{ github.token }}
+        WERF_KUBECONFIG_BASE64: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
         WERF_ENV: production
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 ```
 
-# License
+## Versioning
+
+When using action, select the version corresponding to the required `MAJOR` version of werf.
+
+By default, the action installs actual werf version within alpha channel (more details about channels, werf release cycle and compatibility promise [here](https://werf.io/installation.html#all-changes-in-werf-go-through-all-stability-channels)). 
+Using the `channel` input the user can switch the release channel.
+
+> This is recommended approach to be up-to-date and to use actual werf version without changing configurations.
+  
+```yaml
+- uses: werf/actions/install@v2
+  with:
+    channel: alpha
+```
+  
+Withal, it is not necessary to work within release channels, and the user might specify certain werf version with `version` input.
+
+```yaml
+- uses: werf/actions/install@v2
+  with:
+    version: v2.1.0
+```
+
+## FAQ
+
+### werf always rebuilds images on new commit
+
+Make sure to use `fetch-depth: 0` setting in the checkout action, like follows:
+
+```yaml
+- name: Checkout code
+  uses: actions/checkout@v4
+  with:
+    fetch-depth: 0
+```
+
+By default, fetch-depth set to `1` which disables git history when checking out code. werf cache selection algorithm uses git history to determine whether some image bound to some commit could be used as a cache when building current commit (current commit should be descendant to the cache commit).
+
+Setting `fetch-depth` to `0` enables full fetch of git history, and it is a **recommended** approach. It is also possible to limit fetch history with some decent number of commits, which would enable images caching limited to that number of commits, but this would have a negative impact on cache reproducibility.
+
+### Working with container registry
+
+If there is a need to perform authorization using custom credentials or in an external container registry, then you have to use a ready-made action tailored to your container registry (or just run `werf cr login`).
+
+```yaml
+converge:
+  name: Converge
+  runs-on: ubuntu-latest
+  steps:
+
+    - name: Checkout code
+      uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+    
+    - name: Install werf
+      uses: werf/actions/install@v2
+    
+    - name: cr login
+      run: werf cr login -u ${{ secrets.REGISTRY_USER }} -p ${{ secrets.REGISTRY_TOKEN }} registry.example.com
+    
+    - name: converge
+      run: werf converge
+      env:
+        WERF_KUBECONFIG_BASE64: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
+        WERF_ENV: production
+        WERF_REPO: registry.example.com/repo
+```
+
+> Environment variables **`WERF_REPO`** and **`GITHUB_TOKEN`** for converge should only be used if building images is required otherwise they can be omitted 
+
+In the simplest case, if an [integrated GitHub Packages-like container registry](https://help.github.com/en/packages/using-github-packages-with-your-projects-ecosystem/configuring-docker-for-use-with-github-packages) is used, then the authorization is performed automatically when the `werf ci-env` command is invoked. This command is run with several required arguments such as GitHub environment variables, the [`GITHUB_TOKEN` secret](https://help.github.com/en/actions/configuring-and-managing-workflows/authenticating-with-the-github_token#about-the-github_token-secret) (you have to explicitly declare it).
+
+### Building multi-platform images
+
+To build multi-platform images or customize the build environment, you can use [docker/setup-buildx-action@v3](https://github.com/docker/setup-buildx-action).
+
+```yaml
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Install werf
+        uses: werf/actions/install@v2
+
+      - name: cr login
+        run: werf cr login -u ${{ secrets.REGISTRY_USER }} -p ${{ secrets.REGISTRY_TOKEN }} registry.example.com
+
+      - name: converge
+        run: |
+          . $(werf ci-env github --as-file)
+          werf converge
+        env:
+          WERF_KUBECONFIG_BASE64: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
+          WERF_ENV: production
+```
+
+> No additional configuration is required, and QEMU is automatically used for cross-platform builds.
+
+## License
 
 Apache License 2.0, see [LICENSE](LICENSE)

action.yml

@@ -7,7 +7,7 @@ branding:
 inputs:
   channel:
     description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-    default: 'alpha'
+    default: 'stable'
     required: false
   version:
     description: 'The certain version'
@@ -23,5 +23,5 @@ inputs:
     description: 'Base64 encoded kubeconfig data used for deployment, cleanup and distributed locks'
     required: false
 runs:
-  using: 'node12'
+  using: 'node20'
   main: 'converge/index.js'

build-and-publish/README.md

@@ -1,101 +0,0 @@
-<p align="center">
-  <img src="https://github.com/werf/werf/raw/master/docs/images/werf-logo.svg?sanitize=true" style="max-height:100%;" height="175">
-</p>
-___
-
-The action combines all the necessary steps in itself and logic may be divided into environment setup and launching `werf build-and-publish`.
-
-## Action in Details
-
-### werf binary setup
- 
-By default, all actions setup actual werf version for [1.1 alpha channel](https://werf.io/releases.html) (more details about channels, werf release cycle and compatibility promise [here](https://github.com/werf/werf#backward-compatibility-promise)). 
-Using the `channel` input the user can switch the release channel.
-
-> This is recommended approach to be up-to-date and to use actual werf version without changing configurations
-  
-```yaml
-- uses: werf/actions/build-and-publish@v1.1
-  with:
-    channel: alpha
-```
-  
-Withal, it is not necessary to work within release channels, and the user might specify certain werf version with `version` input.
-
-```yaml
-- uses: werf/actions/build-and-publish@v1.1
-  with:
-    version: v1.1.23
-```
-
-### kubeconfig setup (*optional*)
-
-The _kubeconfig_ may be used for deployment, cleanup, distributed locks and caches. Thus, the configuration should be added before step with the action or passed as base64 encoded data with `kube-config-base64-data` input:  
-
-* Prepare _kubeconfig_ (e.g. `cat ~/.kube/config | base64`) and save in GitHub Project Secrets (e.g. with name `KUBE_CONFIG_BASE64_DATA`).
- 
-* Pass secret with `kube-config-base64-data` input:
- 
-  ```yaml
-  - uses: werf/actions/build-and-publish@v1.1
-    with:
-      kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-  ```
-
-### werf ci-env
-
-This command performs _docker login_ using `github-token`, sets up predefined variables based on GitHub Workflow context.  
- 
-**Note** that `github-token` is optional in this action, and the input is there in case you need to use a non-default token.
-
-By default, action will use the token provided to your workflow.
-
-## Working with werf options
-
-Any werf option can be defined with environment variables:
-
-```yaml
-- uses: werf/actions/build-and-publish@v1.1
-  env:
-    WERF_LOG_VERBOSE: "on"
-    WERF_TAG_CUSTOM_TAG1: tag1
-    WERF_TAG_CUSTOM_TAG2: tag2
-```
-
-## Inputs
-
-```yaml
-channel:
-  description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-  default: 'alpha'
-  required: false
-version:
-  description: 'The certain version'
-  required: false
-github-token:
-  description: 'The GitHub token used to login and to interact with Docker Github Packages'
-  default: ${{ github.token }}
-  required: false
-kube-config-base64-data:
-  description: 'Base64 encoded kubeconfig data used for deployment, cleanup and distributed locks'
-  required: false
-```
-
-## Example
-
-```yaml
-build-and-publish: 
-  name: Build and Publish
-  runs-on: ubuntu-latest
-  steps:
-  
-    - name: Checkout code
-      uses: actions/checkout@v2
-      with:
-        fetch-depth: 0
-
-    - name: Build and Publish  
-      uses: werf/actions/build-and-publish@v1.1
-      with:
-        kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-```

build-and-publish/action.yml

@@ -1,24 +0,0 @@
-name: werf build-and-publish
-author: 'Flant'
-description: 'Prepare the environment and perform image building and publishing with werf'
-branding:
-  color: blue
-  icon: anchor
-inputs:
-  channel:
-    description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-    default: 'alpha'
-    required: false
-  version:
-    description: 'The certain version'
-    required: false
-  github-token:
-    description: 'The GitHub token used to login and to interact with Docker Github Packages'
-    default: ${{ github.token }}
-    required: false
-  kube-config-base64-data:
-    description: 'Base64 encoded kubeconfig data used for deployment, cleanup and distributed locks'
-    required: false
-runs:
-  using: 'node12'
-  main: 'index.js'

build/README.md

@@ -5,69 +5,12 @@ ___
 
 The action combines all the necessary steps in itself and logic may be divided into environment setup and launching `werf build`.
 
-## Action in Details
-
-### werf binary setup
- 
-By default, all actions setup actual werf version for [1.1 alpha channel](https://werf.io/releases.html) (more details about channels, werf release cycle and compatibility promise [here](https://github.com/werf/werf#backward-compatibility-promise)). 
-Using the `channel` input the user can switch the release channel.
-
-> This is recommended approach to be up-to-date and to use actual werf version without changing configurations
-  
-```yaml
-- uses: werf/actions/build@v1.1
-  with:
-    channel: alpha
-```
-  
-Withal, it is not necessary to work within release channels, and the user might specify certain werf version with `version` input.
-
-```yaml
-- uses: werf/actions/build@v1.1
-  with:
-    version: v1.1.23
-```
-
-### kubeconfig setup (*optional*)
-
-The _kubeconfig_ may be used for deployment, cleanup, distributed locks and caches. Thus, the configuration should be added before step with the action or passed as base64 encoded data with `kube-config-base64-data` input:  
-
-* Prepare _kubeconfig_ (e.g. `cat ~/.kube/config | base64`) and save in GitHub Project Secrets (e.g. with name `KUBE_CONFIG_BASE64_DATA`).
- 
-* Pass secret with `kube-config-base64-data` input:
- 
-  ```yaml
-  - uses: werf/actions/build@v1.1
-    with:
-      kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-  ```
-
-### werf ci-env
-
-This command performs _docker login_ using `github-token`, sets up predefined variables based on GitHub Workflow context.  
- 
-**Note** that `github-token` is optional in this action, and the input is there in case you need to use a non-default token.
-
-By default, action will use the token provided to your workflow.
-
-## Working with werf options
-
-Any werf option can be defined with environment variables:
-
-```yaml
-- uses: werf/actions/build@v1.1
-  env:
-    WERF_LOG_VERBOSE: "on"
-    WERF_TAG_CUSTOM_TAG1: tag1
-    WERF_TAG_CUSTOM_TAG2: tag2
-```
-
 ## Inputs
 
 ```yaml
 channel:
   description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-  default: 'alpha'
+  default: 'stable'
   required: false
 version:
   description: 'The certain version'
@@ -90,12 +33,12 @@ build:
   steps:
   
     - name: Checkout code
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0
 
     - name: Build
-      uses: werf/actions/build@v1.1
+      uses: werf/actions/build@v2
       with:
         kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
 ```

build/action.yml

@@ -7,7 +7,7 @@ branding:
 inputs:
   channel:
     description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-    default: 'alpha'
+    default: 'stable'
     required: false
   version:
     description: 'The certain version'
@@ -20,5 +20,5 @@ inputs:
     description: 'Base64 encoded kubeconfig data used for deployment, cleanup and distributed locks'
     required: false
 runs:
-  using: 'node12'
+  using: 'node20'
   main: 'index.js'

cleanup/README.md

@@ -5,67 +5,12 @@ ___
 
 The action combines all the necessary steps in itself and logic may be divided into environment setup and launching `werf cleanup`.
 
-## Action in Details
-
-### werf binary setup
- 
-By default, all actions setup actual werf version for [1.1 alpha channel](https://werf.io/releases.html) (more details about channels, werf release cycle and compatibility promise [here](https://github.com/werf/werf#backward-compatibility-promise)). 
-Using the `channel` input the user can switch the release channel.
-
-> This is recommended approach to be up-to-date and to use actual werf version without changing configurations
-  
-```yaml
-- uses: werf/actions/cleanup@v1.1
-  with:
-    channel: alpha
-```
-  
-Withal, it is not necessary to work within release channels, and the user might specify certain werf version with `version` input.
-
-```yaml
-- uses: werf/actions/cleanup@v1.1
-  with:
-    version: v1.1.23
-```
-
-### kubeconfig setup (*optional*)
-
-The _kubeconfig_ may be used for deployment, cleanup, distributed locks and caches. Thus, the configuration should be added before step with the action or passed as base64 encoded data with `kube-config-base64-data` input:  
-
-* Prepare _kubeconfig_ (e.g. `cat ~/.kube/config | base64`) and save in GitHub Project Secrets (e.g. with name `KUBE_CONFIG_BASE64_DATA`).
- 
-* Pass secret with `kube-config-base64-data` input:
- 
-  ```yaml
-  - uses: werf/actions/cleanup@v1.1
-    with:
-      kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-  ```
-
-### werf ci-env
-
-This command performs _docker login_ using `github-token`, sets up predefined variables based on GitHub Workflow context.  
- 
-**Note** that `github-token` is optional in this action, and the input is there in case you need to use a non-default token.
-
-By default, action will use the token provided to your workflow.
-
-## Working with werf options
-
-Any werf option can be defined with environment variables:
-
-```yaml
-- uses: werf/actions/cleanup@v1.1
-  env:
-    WERF_LOG_VERBOSE: "on"
-```
-
 ## Inputs
 
 ```yaml
 channel:
   description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-  default: 'alpha'
+  default: 'stable'
   required: false
 version:
   description: 'The certain version'
@@ -88,13 +33,15 @@ cleanup:
   steps:
   
     - name: Checkout code
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
 
     - name: Fetch all history for all tags and branches
       run: git fetch --prune --unshallow
 
     - name: Cleanup
-      uses: werf/actions/cleanup@v1.1
+      uses: werf/actions/cleanup@v2
       with:
         kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
+      env:
+        WERF_REPO_GITHUB_TOKEN: ${{ secrets.WERF_CLEANUP_PAM }}
 ```

cleanup/action.yml

@@ -7,7 +7,7 @@ branding:
 inputs:
   channel:
     description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-    default: 'alpha'
+    default: 'stable'
     required: false
   version:
     description: 'The certain version'
@@ -20,5 +20,5 @@ inputs:
     description: 'Base64 encoded kubeconfig data used for deployment, cleanup and distributed locks'
     required: false
 runs:
-  using: 'node12'
+  using: 'node20'
   main: 'index.js'

converge/README.md

@@ -5,69 +5,12 @@ ___
 
 The action combines all the necessary steps in itself and logic may be divided into environment setup and launching `werf converge`.
 
-## Action in Details
-
-### werf binary setup
- 
-By default, all actions setup actual werf version for [1.1 alpha channel](https://werf.io/releases.html) (more details about channels, werf release cycle and compatibility promise [here](https://github.com/werf/werf#backward-compatibility-promise)). 
-Using the `channel` input the user can switch the release channel.
-
-> This is recommended approach to be up-to-date and to use actual werf version without changing configurations
-  
-```yaml
-- uses: werf/actions/converge@v1.1
-  with:
-    channel: alpha
-```
-  
-Withal, it is not necessary to work within release channels, and the user might specify certain werf version with `version` input.
-
-```yaml
-- uses: werf/actions/converge@v1.1
-  with:
-    version: v1.1.23
-```
-
-### kubeconfig setup (*optional*)
-
-The _kubeconfig_ may be used for deployment, cleanup, distributed locks and caches. Thus, the configuration should be added before step with the action or passed as base64 encoded data with `kube-config-base64-data` input:  
-
-* Prepare _kubeconfig_ (e.g. `cat ~/.kube/config | base64`) and save in GitHub Project Secrets (e.g. with name `KUBE_CONFIG_BASE64_DATA`).
- 
-* Pass secret with `kube-config-base64-data` input:
- 
-  ```yaml
-  - uses: werf/actions/converge@v1.1
-    with:
-      kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-  ```
-
-### werf ci-env
-
-This command performs _docker login_ using `github-token`, sets up predefined variables based on GitHub Workflow context.  
- 
-**Note** that `github-token` is optional in this action, and the input is there in case you need to use a non-default token.
-
-By default, action will use the token provided to your workflow.
-
-## Working with werf options
-
-Any werf option can be defined with environment variables:
-
-```yaml
-- uses: werf/actions/converge@v1.1
-  with:
-    env: production
-  env:
-    WERF_LOG_VERBOSE: "on"
-```
-
 ## Inputs
 
 ```yaml
 channel:
   description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-  default: 'alpha'
+  default: 'stable'
   required: false
 version:
   description: 'The certain version'
@@ -93,12 +36,12 @@ converge:
   steps:
   
     - name: Checkout code
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0
 
     - name: Converge
-      uses: werf/actions/converge@v1.1
+      uses: werf/actions/converge@v2
       with:
         kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
         env: production

converge/action.yml

@@ -7,14 +7,14 @@ branding:
 inputs:
   channel:
     description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-    default: 'alpha'
+    default: 'stable'
     required: false
   version:
     description: 'The certain version'
     required: false
-  env:
+  env: # TODO: Remove this deprecated werf option, which is not required anymore (use WERF_ENV variable instead)
     description: 'Specific deployment environment'
-    required: true
+    required: false
   github-token:
     description: 'The GitHub token used to login and to interact with Docker Github Packages'
     default: ${{ github.token }}
@@ -23,5 +23,5 @@ inputs:
     description: 'Base64 encoded kubeconfig data used for deployment, cleanup and distributed locks'
     required: false
 runs:
-  using: 'node12'
+  using: 'node20'
   main: 'index.js'

deploy/README.md

@@ -1,105 +0,0 @@
-<p align="center">
-  <img src="https://github.com/werf/werf/raw/master/docs/images/werf-logo.svg?sanitize=true" style="max-height:100%;" height="175">
-</p>
-___
-
-The action combines all the necessary steps in itself and logic may be divided into environment setup and launching `werf deploy`.
-
-## Action in Details
-
-### werf binary setup
- 
-By default, all actions setup actual werf version for [1.1 alpha channel](https://werf.io/releases.html) (more details about channels, werf release cycle and compatibility promise [here](https://github.com/werf/werf#backward-compatibility-promise)). 
-Using the `channel` input the user can switch the release channel.
-
-> This is recommended approach to be up-to-date and to use actual werf version without changing configurations
-  
-```yaml
-- uses: werf/actions/deploy@v1.1
-  with:
-    channel: alpha
-```
-  
-Withal, it is not necessary to work within release channels, and the user might specify certain werf version with `version` input.
-
-```yaml
-- uses: werf/actions/deploy@v1.1
-  with:
-    version: v1.1.23
-```
-
-### kubeconfig setup (*optional*)
-
-The _kubeconfig_ may be used for deployment, cleanup, distributed locks and caches. Thus, the configuration should be added before step with the action or passed as base64 encoded data with `kube-config-base64-data` input:  
-
-* Prepare _kubeconfig_ (e.g. `cat ~/.kube/config | base64`) and save in GitHub Project Secrets (e.g. with name `KUBE_CONFIG_BASE64_DATA`).
- 
-* Pass secret with `kube-config-base64-data` input:
- 
-  ```yaml
-  - uses: werf/actions/deploy@v1.1
-    with:
-      kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-  ```
-
-### werf ci-env
-
-This command performs _docker login_ using `github-token`, sets up predefined variables based on GitHub Workflow context.  
- 
-**Note** that `github-token` is optional in this action, and the input is there in case you need to use a non-default token.
-
-By default, action will use the token provided to your workflow.
-
-## Working with werf options
-
-Any werf option can be defined with environment variables:
-
-```yaml
-- uses: werf/actions/deploy@v1.1
-  with:
-    env: production
-  env:
-    WERF_LOG_VERBOSE: "on"
-```
-
-## Inputs
-
-```yaml
-channel:
-  description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-  default: 'alpha'
-  required: false
-version:
-  description: 'The certain version'
-  required: false
-env:
-  description: 'Specific deployment environment'
-  required: true
-github-token:
-  description: 'The GitHub token used to login and to interact with Docker Github Packages'
-  default: ${{ github.token }}
-  required: false
-kube-config-base64-data:
-  description: 'Base64 encoded kubeconfig data used for deployment, cleanup and distributed locks'
-  required: false
-```
-
-## Example
-
-```yaml
-deploy: 
-  name: Deploy
-  runs-on: ubuntu-latest
-  steps:
-  
-    - name: Checkout code
-      uses: actions/checkout@v2
-      with:
-        fetch-depth: 0
-
-    - name: Deploy
-      uses: werf/actions/deploy@v1.1
-      with:
-        kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-        env: production
-```

deploy/action.yml

@@ -1,27 +0,0 @@
-name: werf build-and-publish
-author: 'Flant'
-description: 'Prepare the environment and perform deployment with werf'
-branding:
-  color: blue
-  icon: anchor
-inputs:
-  channel:
-    description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-    default: 'alpha'
-    required: false
-  version:
-    description: 'The certain version'
-    required: false
-  env:
-    description: 'Specific deployment environment'
-    required: true
-  github-token:
-    description: 'The GitHub token used to login and to interact with Docker Github Packages'
-    default: ${{ github.token }}
-    required: false
-  kube-config-base64-data:
-    description: 'Base64 encoded kubeconfig data used for deployment, cleanup and distributed locks'
-    required: false
-runs:
-  using: 'node12'
-  main: 'index.js'

dismiss/README.md

@@ -5,69 +5,12 @@ ___
 
 The action combines all the necessary steps in itself and logic may be divided into environment setup and launching `werf dismiss`.
 
-## Action in Details
-
-### werf binary setup
- 
-By default, all actions setup actual werf version for [1.1 alpha channel](https://werf.io/releases.html) (more details about channels, werf release cycle and compatibility promise [here](https://github.com/werf/werf#backward-compatibility-promise)). 
-Using the `channel` input the user can switch the release channel.
-
-> This is recommended approach to be up-to-date and to use actual werf version without changing configurations
-  
-```yaml
-- uses: werf/actions/converge@v1.1
-  with:
-    channel: alpha
-```
-  
-Withal, it is not necessary to work within release channels, and the user might specify certain werf version with `version` input.
-
-```yaml
-- uses: werf/actions/converge@v1.1
-  with:
-    version: v1.1.23
-```
-
-### kubeconfig setup (*optional*)
-
-The _kubeconfig_ may be used for deployment, cleanup, distributed locks and caches. Thus, the configuration should be added before step with the action or passed as base64 encoded data with `kube-config-base64-data` input:  
-
-* Prepare _kubeconfig_ (e.g. `cat ~/.kube/config | base64`) and save in GitHub Project Secrets (e.g. with name `KUBE_CONFIG_BASE64_DATA`).
- 
-* Pass secret with `kube-config-base64-data` input:
- 
-  ```yaml
-  - uses: werf/actions/converge@v1.1
-    with:
-      kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-  ```
-
-### werf ci-env
-
-This command performs _docker login_ using `github-token`, sets up predefined variables based on GitHub Workflow context.  
- 
-**Note** that `github-token` is optional in this action, and the input is there in case you need to use a non-default token.
-
-By default, action will use the token provided to your workflow.
-
-## Working with werf options
-
-Any werf option can be defined with environment variables:
-
-```yaml
-- uses: werf/actions/converge@v1.1
-  with:
-    env: production
-  env:
-    WERF_LOG_VERBOSE: "on"
-```
-
 ## Inputs
 
 ```yaml
 channel:
   description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-  default: 'alpha'
+  default: 'stable'
   required: false
 version:
   description: 'The certain version'
@@ -93,10 +36,10 @@ dismiss:
   steps:
   
     - name: Checkout code
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
 
     - name: Dismiss
-      uses: werf/actions/dismiss@v1.1
+      uses: werf/actions/dismiss@v2
       with:
         kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
         env: production

dismiss/action.yml

@@ -7,14 +7,14 @@ branding:
 inputs:
   channel:
     description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-    default: 'alpha'
+    default: 'stable'
     required: false
   version:
     description: 'The certain version'
     required: false
-  env:
+  env: # TODO: Remove this deprecated werf option, which is not required anymore (use WERF_ENV variable instead)
     description: 'Specific deployment environment'
-    required: true
+    required: false
   github-token:
     description: 'The GitHub token used to login and to interact with Docker Github Packages'
     default: ${{ github.token }}
@@ -23,5 +23,5 @@ inputs:
     description: 'Base64 encoded kubeconfig data used for deployment, cleanup and distributed locks'
     required: false
 runs:
-  using: 'node12'
+  using: 'node20'
   main: 'index.js'

install/README.md

@@ -3,13 +3,13 @@
 </p>
 ___
  
-By default, all actions setup actual werf version for [1.1 alpha channel](https://werf.io/releases.html) (more details about channels, werf release cycle and compatibility promise [here](https://github.com/werf/werf#backward-compatibility-promise)). 
+By default, all actions setup actual werf version for 1.2 alpha channel (more details about channels, werf release cycle and compatibility promise [here](https://werf.io/installation.html#all-changes-in-werf-go-through-all-stability-channels)). 
 Using the `channel` input the user can switch the release channel.
 
 > This is recommended approach to be up-to-date and to use actual werf version without changing configurations
   
 ```yaml
-- uses: werf/actions/install@v1.1
+- uses: werf/actions/install@v2
   with:
     channel: alpha
 ```
@@ -17,9 +17,9 @@ Using the `channel` input the user can switch the release channel.
 Withal, it is not necessary to work within release channels, and the user might specify certain werf version with `version` input.
 
 ```yaml
-- uses: werf/actions/install@v1.1
+- uses: werf/actions/install@v2
   with:
-    version: v1.1.23
+    version: v2.1.0
 ```
 
 ## Inputs
@@ -27,7 +27,7 @@ Withal, it is not necessary to work within release channels, and the user might
 ```yaml
 channel:
   description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-  default: 'alpha'
+  default: 'stable'
   required: false
 version:
   description: 'The certain version'
@@ -43,12 +43,12 @@ werf:
   steps:
   
     - name: Checkout code  
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
 
     - name: Install werf CLI  
-      uses: werf/actions/install@v1.1
+      uses: werf/actions/install@v2
     
-    # for deploy and distributed locks
+    # For deploy and distributed locks.
     - name: Create kube config
       run: |
         KUBECONFIG=$(mktemp -d)/config
@@ -60,9 +60,9 @@ werf:
     - name: Run werf commands
       run: |
         source $(werf ci-env github --as-file)
-        werf build-and-publish
-        werf deploy
+        werf render
+        werf converge
       env:
-        GITHUB_TOKEN: ${{ github.token }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         WERF_ENV: production
 ```

install/action.yml

@@ -1,13 +1,13 @@
 name: Install werf CLI
 author: 'Flant'
-description: 'Install actual channel werf version, like multiwerf does, or specified one'
+description: 'Install werf CLI'
 branding:
   color: blue
   icon: anchor
 inputs:
   channel:
     description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-    default: 'alpha'
+    default: 'stable'
     required: false
   version:
     description: 'The certain version'
@@ -17,5 +17,5 @@ inputs:
     default: '0'
     required: false
 runs:
-  using: 'node12'
+  using: 'node20'
   main: 'index.js'

pack.sh

@@ -1,3 +1,3 @@
 #!/bin/bash -e
 
-for pkg in build build-and-publish cleanup converge deploy dismiss install publish run; do ncc build src/$pkg.ts -o $pkg; done
+for pkg in build cleanup converge dismiss install run; do ncc build src/$pkg.ts -o $pkg; done

package.json

@@ -1,31 +1,31 @@
 {
   "name": "werf-actions",
-  "version": "1.1.0",
+  "version": "1.2.1",
   "description": "",
   "main": "lib",
   "dependencies": {
-    "@actions/core": "^1.2.6",
-    "@actions/github": "2.x",
-    "@actions/tool-cache": "1.x",
-    "dotenv": "8.2.x",
-    "ncc": "^0.3.6",
-    "semver": "^7.3.2",
+    "@actions/core": "^1.9.1",
+    "@actions/github": "^5.0.0",
+    "@actions/tool-cache": "^1.7.1",
+    "dotenv": "10.0.x",
+    "semver": "^7.5.2",
     "string-argv": "^0.3.1",
-    "superagent": "^3.8.3",
+    "superagent": "^6.1.0",
     "tmp": "^0.2.1",
     "typescript-string-operations": "^1.4.0",
-    "ws": ">=3.3.1"
+    "ws": ">=8.2.3"
   },
   "devDependencies": {
     "@types/node": "^12.19.1",
     "@types/semver": "^7.3.4",
     "@types/superagent": "^4.1.10",
     "@types/tmp": "^0.2.0",
-    "@typescript-eslint/parser": "^2.8.0",
-    "eslint": "^5.x",
-    "eslint-plugin-github": "^2.0.0",
+    "@typescript-eslint/eslint-plugin": "^5.1.0",
+    "@typescript-eslint/parser": "^5.1.0",
+    "eslint": "^7.32.0",
+    "eslint-plugin-github": "^4.3.2",
     "js-yaml": "^3.13.1",
-    "node-fetch": ">=2.6.1",
+    "node-fetch": ">=3.2.10",
     "prettier": "^1.19.1",
     "typescript": "^3.6.4"
   },
@@ -34,7 +34,7 @@
     "format": "prettier --write **/*.ts",
     "format-check": "prettier --check **/*.ts",
     "lint": "eslint src/**/*.ts",
-    "pack": "pack.sh",
+    "pack": "./pack.sh",
     "all": "npm run build && npm run format && npm run lint && npm run pack"
   },
   "repository": {

publish/README.md

@@ -1,101 +0,0 @@
-<p align="center">
-  <img src="https://github.com/werf/werf/raw/master/docs/images/werf-logo.svg?sanitize=true" style="max-height:100%;" height="175">
-</p>
-___
-
-The action combines all the necessary steps in itself and logic may be divided into environment setup and launching `werf publish`.
-
-## Action in Details
-
-### werf binary setup
- 
-By default, all actions setup actual werf version for [1.1 alpha channel](https://werf.io/releases.html) (more details about channels, werf release cycle and compatibility promise [here](https://github.com/werf/werf#backward-compatibility-promise)). 
-Using the `channel` input the user can switch the release channel.
-
-> This is recommended approach to be up-to-date and to use actual werf version without changing configurations
-  
-```yaml
-- uses: werf/actions/publish@v1.1
-  with:
-    channel: alpha
-```
-  
-Withal, it is not necessary to work within release channels, and the user might specify certain werf version with `version` input.
-
-```yaml
-- uses: werf/actions/publish@v1.1
-  with:
-    version: v1.1.23
-```
-
-### kubeconfig setup (*optional*)
-
-The _kubeconfig_ may be used for deployment, cleanup, distributed locks and caches. Thus, the configuration should be added before step with the action or passed as base64 encoded data with `kube-config-base64-data` input:  
-
-* Prepare _kubeconfig_ (e.g. `cat ~/.kube/config | base64`) and save in GitHub Project Secrets (e.g. with name `KUBE_CONFIG_BASE64_DATA`).
- 
-* Pass secret with `kube-config-base64-data` input:
- 
-  ```yaml
-  - uses: werf/actions/publish@v1.1
-    with:
-      kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-  ```
-
-### werf ci-env
-
-This command performs _docker login_ using `github-token`, sets up predefined variables based on GitHub Workflow context.  
- 
-**Note** that `github-token` is optional in this action, and the input is there in case you need to use a non-default token.
-
-By default, action will use the token provided to your workflow.
-
-## Working with werf options
-
-Any werf option can be defined with environment variables:
-
-```yaml
-- uses: werf/actions/publish@v1.1
-  env:
-    WERF_LOG_VERBOSE: "on"
-    WERF_TAG_CUSTOM_TAG1: tag1
-    WERF_TAG_CUSTOM_TAG2: tag2
-```
-
-## Inputs
-
-```yaml
-channel:
-  description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-  default: 'alpha'
-  required: false
-version:
-  description: 'The certain version'
-  required: false
-github-token:
-  description: 'The GitHub token used to login and to interact with Docker Github Packages'
-  default: ${{ github.token }}
-  required: false
-kube-config-base64-data:
-  description: 'Base64 encoded kubeconfig data used for deployment, cleanup and distributed locks'
-  required: false
-```
-
-## Example
-
-```yaml
-publish: 
-  name: Publish
-  runs-on: ubuntu-latest
-  steps:
-  
-    - name: Checkout code
-      uses: actions/checkout@v2
-      with:
-        fetch-depth: 0
-
-    - name: Publish
-      uses: werf/actions/publish@v1.1
-      with:
-        kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-```

publish/action.yml

@@ -1,24 +0,0 @@
-name: werf publish
-author: 'Flant'
-description: 'Prepare the environment and perform image publishing with werf'
-branding:
-  color: blue
-  icon: anchor
-inputs:
-  channel:
-    description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-    default: 'alpha'
-    required: false
-  version:
-    description: 'The certain version'
-    required: false
-  github-token:
-    description: 'The GitHub token used to login and to interact with Docker Github Packages'
-    default: ${{ github.token }}
-    required: false
-  kube-config-base64-data:
-    description: 'Base64 encoded kubeconfig data used for deployment, cleanup and distributed locks'
-    required: false
-runs:
-  using: 'node12'
-  main: 'index.js'

run/README.md

@@ -5,70 +5,13 @@ ___
 
 The action combines all the necessary steps in itself and logic may be divided into environment setup and launching `werf run`.
 
-## Action in Details
-
-### werf binary setup
- 
-By default, all actions setup actual werf version for [1.1 alpha channel](https://werf.io/releases.html) (more details about channels, werf release cycle and compatibility promise [here](https://github.com/werf/werf#backward-compatibility-promise)). 
-Using the `channel` input the user can switch the release channel.
-
-> This is recommended approach to be up-to-date and to use actual werf version without changing configurations
-  
-```yaml
-- uses: werf/actions/run@v1.1
-  with:
-    channel: alpha
-```
-  
-Withal, it is not necessary to work within release channels, and the user might specify certain werf version with `version` input.
-
-```yaml
-- uses: werf/actions/run@v1.1
-  with:
-    version: v1.1.23
-```
-
-### kubeconfig setup (*optional*)
-
-The _kubeconfig_ may be used for deployment, cleanup, distributed locks and caches. Thus, the configuration should be added before step with the action or passed as base64 encoded data with `kube-config-base64-data` input:  
-
-* Prepare _kubeconfig_ (e.g. `cat ~/.kube/config | base64`) and save in GitHub Project Secrets (e.g. with name `KUBE_CONFIG_BASE64_DATA`).
- 
-* Pass secret with `kube-config-base64-data` input:
- 
-  ```yaml
-  - uses: werf/actions/run@v1.1
-    with:
-      kube-config-base64-data: ${{ secrets.KUBE_CONFIG_BASE64_DATA }}
-  ```
-
-### werf ci-env
-
-This command performs _docker login_ using `github-token`, sets up predefined variables based on GitHub Workflow context.  
- 
-**Note** that `github-token` is optional in this action, and the input is there in case you need to use a non-default token.
-
-By default, action will use the token provided to your workflow.
-
-## Working with werf options
-
-Any werf option can be defined with environment variables:
-
-```yaml
-- uses: werf/actions/run@v1.1
-  env:
-    WERF_LOG_VERBOSE: "on"
-    WERF_TAG_CUSTOM_TAG1: tag1
-    WERF_TAG_CUSTOM_TAG2: tag2
-```
-
 ## Inputs
 
 ```yaml
 inputs:
   channel:
     description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-    default: 'alpha'
+    default: 'stable'
     required: false
   version:
     description: 'The certain version'
@@ -97,12 +40,12 @@ run:
   steps:
   
     - name: Checkout code
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0
 
     - name: Run
-      uses: werf/actions/run@v1.1
+      uses: werf/actions/run@v2
       with:
         image: backend
         args: rails server

run/action.yml

@@ -7,7 +7,7 @@ branding:
 inputs:
   channel:
     description: 'The one of the following channel: alpha, beta, ea, stable, rock-solid'
-    default: 'alpha'
+    default: 'stable'
     required: false
   version:
     description: 'The certain version'
@@ -26,5 +26,5 @@ inputs:
     description: 'Base64 encoded kubeconfig data used for deployment, cleanup and distributed locks'
     required: false
 runs:
-  using: 'node12'
+  using: 'node20'
   main: 'index.js'

src/build-and-publish.ts

@@ -1,12 +0,0 @@
-import * as core from '@actions/core'
-import {PrepareEnvironAndRunWerfCommand} from './common'
-
-async function run(): Promise<void> {
-  try {
-    await PrepareEnvironAndRunWerfCommand(['build-and-publish'])
-  } catch (error) {
-    core.setFailed(error.message)
-  }
-}
-
-run()

src/common.ts

@@ -7,8 +7,6 @@ import {String} from 'typescript-string-operations'
 import {Manager} from './manager'
 import * as werf from './werf'
 
-const minimalWerfVersion = 'v1.1.17'
-
 export async function PrepareEnvironAndRunWerfCommand(
   args: string[]
 ): Promise<void> {
@@ -47,13 +45,17 @@ export async function SetupKubeConfig(
 export function ProcessGitHubContext(): void {
   if (context.eventName === 'pull_request') {
     if (context.payload.pull_request) {
+      // Do nothing if virtual merge variable is already set
+      if (process.env.WERF_VIRTUAL_MERGE) {
+        return
+      }
+
       const baseSha = context.payload.pull_request.base.sha
       const headSha = context.payload.pull_request.head.sha
 
       process.env.WERF_VIRTUAL_MERGE = '1'
       process.env.WERF_VIRTUAL_MERGE_FROM_COMMIT = headSha
       process.env.WERF_VIRTUAL_MERGE_INTO_COMMIT = baseSha
-
       core.exportVariable('WERF_VIRTUAL_MERGE', '1')
       core.exportVariable('WERF_VIRTUAL_MERGE_FROM_COMMIT', headSha)
       core.exportVariable('WERF_VIRTUAL_MERGE_INTO_COMMIT', baseSha)
@@ -63,27 +65,15 @@ export function ProcessGitHubContext(): void {
 
 export function ValidateWerfVersion(version: string): void {
   const ver = semver.coerce(version)
-  if (ver) {
-    if (ver.major !== werf.MAJOR || ver.minor !== werf.MINOR) {
-      throw new Error(
-        String.Format(
-          'The arbitrary version ({0}) must be within the MAJOR.MINOR ({1})',
-          version.trim(),
-          werf.MAJOR_MINOR_GROUP
-        )
-      )
-    }
-
-    if (semver.gte(ver, minimalWerfVersion)) {
-      return
-    }
+  if (ver && ver.major === werf.MAJOR) {
+    return
   }
 
   throw new Error(
     String.Format(
-      'werf version {0} is not supported (expected version must be equal or greater than {1})',
+      'werf version {0} is not supported: the version must be semver and within the MAJOR ({1})',
       version.trim(),
-      minimalWerfVersion
+      werf.GROUP
     )
   )
 }

src/deploy.ts

@@ -1,13 +0,0 @@
-import * as core from '@actions/core'
-import {PrepareEnvironAndRunWerfCommand} from './common'
-
-async function run(): Promise<void> {
-  try {
-    process.env.WERF_ENV = core.getInput('env')
-    await PrepareEnvironAndRunWerfCommand(['deploy'])
-  } catch (error) {
-    core.setFailed(error.message)
-  }
-}
-
-run()

src/install.ts

@@ -1,8 +1,11 @@
 import * as core from '@actions/core'
 import {Manager} from './manager'
+import {ProcessGitHubContext} from './common'
 
 async function run(): Promise<void> {
   try {
+    ProcessGitHubContext()
+
     const m = new Manager()
     await m.Install()
   } catch (error) {

src/manager.ts

@@ -12,9 +12,9 @@ import * as dotenv from 'dotenv'
 import * as werf from './werf'
 import {ValidateWerfVersion} from './common'
 
-const WERF_API_GET_CHANNEL_VERSION_URL_METHOD =
-  'https://werf.io/api/getChannelVersionURL'
-const WERF_API_GET_VERSION_URL_METHOD = 'https://werf.io/api/getVersionURL'
+const WERF_TUF_SERVER_URL = 'https://tuf.werf.io'
+const CACHE_TOOL_NAME = 'werf'
+const CACHE_TOOL_DIR = 'werf-tools'
 
 export class Manager {
   private readonly channel: string
@@ -32,24 +32,44 @@ export class Manager {
       ValidateWerfVersion(this.version)
     }
 
-    if (process.platform.toString() === 'win32') {
-      this.os = 'windows'
-    } else {
-      this.os = process.platform.toString()
+    const platform = process.platform.toString()
+    switch (platform) {
+      case 'linux':
+      case 'darwin':
+        this.os = platform
+        break
+      case 'win32':
+        this.os = 'windows'
+        break
+      default:
+        throw new Error(String.Format(`The platform ${platform} not supported`))
     }
 
-    this.arch = process.arch
+    const arch = process.arch
+    switch (arch) {
+      case 'x64':
+        this.arch = 'amd64'
+        break
+      case 'arm64':
+        this.arch = 'arm64'
+        break
+      default:
+        throw new Error(String.Format(`The architecture ${arch} not supported`))
+    }
   }
 
   public async Install(): Promise<void> {
     const actualBinaryUrl = await this._getActualBinaryUrl()
 
+    const binaryName = actualBinaryUrl.substring(
+      actualBinaryUrl.lastIndexOf('/') + 1
+    )
     const cachedPath = cache.find(
-      'werf',
+      CACHE_TOOL_NAME,
       Manager._toolVersionCacheID(actualBinaryUrl)
     )
     if (cachedPath) {
-      this.binaryPath = path.join(cachedPath, 'werf')
+      this.binaryPath = path.join(cachedPath, binaryName)
     } else {
       this.binaryPath = await this._downloadAndCache(actualBinaryUrl)
     }
@@ -62,16 +82,13 @@ export class Manager {
     const tmpFile = tmp.fileSync()
     const tmpFilePath = tmpFile.name
     await this.Exec(['ci-env', 'github', '--as-env-file', '-o', tmpFilePath])
-    dotenv.config({path: tmpFilePath})
-
-    fs.readFile(tmpFilePath, null, function(err, contents) {
-      if (err) {
-        console.error(err)
-      } else {
-        console.log(contents.toString())
+    const res = dotenv.config({path: tmpFilePath})
+    if (res.parsed) {
+      for (const [key, value] of Object.entries(res.parsed)) {
+        core.exportVariable(key, value)
       }
-    })
-
+    }
+    console.log(res.parsed)
     tmpFile.removeCallback()
   }
 
@@ -103,35 +120,29 @@ export class Manager {
   }
 
   private async _getActualBinaryUrl(): Promise<string> {
+    if (this.version !== '') {
+      const version = this.version.slice('v'.length)
+      return this._constructReleaseUrl(version)
+    }
+
+    const url = `${WERF_TUF_SERVER_URL}/targets/channels/${werf.GROUP}/${this.channel}`
     try {
-      let url: string
-      let query: {}
-
-      if (this.version !== '') {
-        url = WERF_API_GET_VERSION_URL_METHOD
-        query = {
-          version: this.version,
-          os: this.os,
-          arch: this.arch
-        }
-      } else {
-        url = WERF_API_GET_CHANNEL_VERSION_URL_METHOD
-        query = {
-          group: werf.MAJOR_MINOR_GROUP,
-          channel: this.channel,
-          os: this.os,
-          arch: this.arch
-        }
-      }
-
-      const resp = await request.get(url).query(query)
-
-      return resp.body.data.toString()
+      const resp = await request
+        .get(url)
+        .buffer(true)
+        .parse(request.parse['application/octet-stream'])
+      const version = resp.body.toString().trim()
+      return this._constructReleaseUrl(version)
     } catch (err) {
       if (err.response && err.response.error) {
         let errMessage = err.response.error.message
         if (err.response.text) {
-          errMessage = String.Format('{0}\n{1}', errMessage, err.response.text)
+          errMessage = String.Format(
+            '{0}: {1}\n{2}',
+            url,
+            errMessage,
+            err.response.text
+          )
         }
 
         throw Error(errMessage)
@@ -141,19 +152,32 @@ export class Manager {
     }
   }
 
+  private _constructReleaseUrl(version: string): string {
+    let ext = ''
+    if (this.os === 'windows') {
+      ext = '.exe'
+    }
+
+    return String.Format(
+      '{0}/targets/releases/{1}/{2}-{3}/bin/werf{4}',
+      WERF_TUF_SERVER_URL,
+      version,
+      this.os,
+      this.arch,
+      ext
+    )
+  }
+
   private async _downloadAndCache(binaryUrl: string): Promise<string> {
+    const binaryName = binaryUrl.substring(binaryUrl.lastIndexOf('/') + 1)
     const downloadedBinaryPath = await cache.downloadTool(binaryUrl)
-    const parsedDownloadedBinaryPath = path.parse(downloadedBinaryPath)
-    const cacheDownloadToolDir = parsedDownloadedBinaryPath.dir
-    const tmpWerfVersionBinaryPath = path.join(cacheDownloadToolDir, 'werf.tmp')
-    const werfVersionDir = path.join(
+    const cacheDownloadToolDir = path.dirname(downloadedBinaryPath)
+    const tmpWerfVersionBinaryPath = path.join(
       cacheDownloadToolDir,
-      parsedDownloadedBinaryPath.name
-    )
-    const werfVersionBinaryPath = path.join(
-      werfVersionDir,
-      String.Format('werf{0}', parsedDownloadedBinaryPath.ext)
+      `${binaryName}.tmp`
     )
+    const werfVersionDir = path.join(cacheDownloadToolDir, CACHE_TOOL_DIR)
+    const werfVersionBinaryPath = path.join(werfVersionDir, binaryName)
 
     // werf-x.x.x -> werf.tmp
     // werf.tmp -> werf-x.x.x/werf
@@ -167,7 +191,7 @@ export class Manager {
 
     await cache.cacheDir(
       werfVersionDir,
-      'werf',
+      CACHE_TOOL_NAME,
       Manager._toolVersionCacheID(binaryUrl)
     )
 

src/publish.ts

@@ -1,12 +0,0 @@
-import * as core from '@actions/core'
-import {PrepareEnvironAndRunWerfCommand} from './common'
-
-async function run(): Promise<void> {
-  try {
-    await PrepareEnvironAndRunWerfCommand(['publish'])
-  } catch (error) {
-    core.setFailed(error.message)
-  }
-}
-
-run()

src/werf.ts

@@ -1,3 +1,2 @@
-export const MAJOR_MINOR_GROUP = '1.1'
-export const MAJOR = 1
-export const MINOR = 1
+export const GROUP = '2'
+export const MAJOR = 2