Upgrade actions dependencies (#13)

Author: jisantuc

CHANGELOG.md

@@ -10,6 +10,8 @@ New features:
 
 Bugfixes:
 
+- GitHub `@actions/*` dependencies upgraded for post-October 2020 compatibility. This affects the functionality of `addPath`, which is [formally deprecated](https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/) to avoid a security vulnerability. (#13 by @jisantuc)
+
 Other improvements:
 
 ## [0.0.0] - 2020-01-01

package.json

@@ -1,18 +1,18 @@
 {
   "private": true,
   "scripts": {
-    "build": "eslint src && spago build --purs-args '--censor-lib --strict'",
+    "build": "eslint src && spago build --purs-args '--censor-lib --strict --censor-codes=UserDefinedWarning'",
     "test": "spago test --no-install"
   },
   "devDependencies": {
     "@vercel/ncc": "^0.24.1",
     "eslint": "^7.6.0"
   },
   "dependencies": {
-    "@actions/cache": "^1.0.2",
-    "@actions/core": "^1.2.5",
+    "@actions/cache": "^1.0.6",
+    "@actions/core": "^1.2.6",
     "@actions/exec": "^1.0.4",
     "@actions/io": "^1.0.2",
-    "@actions/tool-cache": "^1.6.0"
+    "@actions/tool-cache": "^1.6.1"
   }
 }

src/GitHub/Actions/Core.purs

@@ -23,7 +23,6 @@ module GitHub.Actions.Core
   ) where
 
 import Prelude
-
 import Control.Monad.Error.Class (try)
 import Control.Monad.Except.Trans (ExceptT(..))
 import Control.Promise (Promise, fromAff, toAffE)
@@ -32,6 +31,7 @@ import Effect (Effect)
 import Effect.Aff (Aff)
 import Effect.Exception (Error)
 import Effect.Uncurried (EffectFn1, EffectFn2, runEffectFn1, runEffectFn2)
+import Prim.TypeError (class Warn, Text)
 
 -- | Interface for getInput options
 -- | required: Whether the input is required. If required and not present, will throw
@@ -57,7 +57,9 @@ setSecret = runEffectFn1 setSecretImpl
 foreign import addPathImpl :: EffectFn1 String Unit
 
 -- | Prepends input path to the PATH (for this action and future actions)
-addPath :: String -> Effect Unit
+addPath ::
+  Warn (Text "addPath is deprecated due to a security vulnerability and will be removed in the next release.") =>
+  String -> Effect Unit
 addPath = runEffectFn1 addPathImpl
 
 foreign import getInput1Impl :: EffectFn1 String String