chore: Cherry-picked changes from upstream

Signed-off-by: Anurag Rajawat <anurag@stepsecurity.io>

Author: anurag-stepsecurity

.github/workflows/e2e.yml

@@ -5,40 +5,28 @@ on:
       - main
   pull_request:
 
-jobs:
-  versions-macOS-15:
-    name: macOS 15
-    runs-on: macos-15
-    strategy:
-      matrix:
-        xcode-version: ['16.0', '16.4', '26.0.1', '26.2', latest, latest-stable]
-      fail-fast: false
-    steps:
-    - name: Harden the runner (Audit all outbound calls)
-      uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
-      with:
-        egress-policy: audit
-
-    - name: Checkout
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+permissions:
+  contents: read
 
-    - uses: ./
-      name: Setup Xcode
-      id: setup-xcode
-      with:
-        xcode-version: ${{ matrix.xcode-version }}
-    - name: Print output variables
-      run: |
-        echo "Version: ${{ steps.setup-xcode.outputs.version }}"
-        echo "Path: ${{ steps.setup-xcode.outputs.path }}"
-
-  versions-macOS-14:
-    name: macOS 14
-    runs-on: macos-14
+jobs:
+  versions:
+    name: ${{ matrix.runner }} / ${{ matrix.xcode-version }}
+    runs-on: ${{ matrix.runner }}
     strategy:
       matrix:
-        # https://github.com/actions/runner-images/blob/main/images/macos/macos-14-Readme.md#xcode
-        xcode-version: ['16.2', '15.2', '15.3', latest, latest-stable]
+        runner: [macos-15, macos-26]
+        xcode-version: [latest, latest-stable]
+        include:
+          # https://github.com/actions/runner-images/blob/main/images/macos/macos-15-Readme.md#xcode
+          - runner: macos-15
+            xcode-version: '16.2'
+          - runner: macos-15
+            xcode-version: '16.4'
+          # https://github.com/actions/runner-images/blob/main/images/macos/macos-26-Readme.md#xcode
+          - runner: macos-26
+            xcode-version: '26.2'
+          - runner: macos-26
+            xcode-version: '26.3'
       fail-fast: false
     steps:
       - name: Harden the runner (Audit all outbound calls)

README.md

@@ -13,7 +13,7 @@ The list of all available versions can be found in [runner-images](https://githu
 **Notes:**
 - `latest-stable` points to the latest stable version of Xcode
 - `latest` *includes* beta releases that GitHub actions has installed
-- SemVer examples: `14`, `14.1`, `14.3.1`, `^14.3.0` (find more examples in [SemVer cheatsheet](https://devhints.io/semver))
+- SemVer examples: `16`, `16.4`, `26.3`, `^16.2.0` (find more examples in [SemVer cheatsheet](https://devhints.io/semver))
 - `-beta` suffix after SemVer will only select among beta releases that GitHub actions has installed
 - If sets a specific version, wraps it to single quotes in YAML like `'12.0'` to pass it as string because GitHub trimmes trailing `.0` from numbers
 
@@ -45,22 +45,22 @@ Set the specific stable version of Xcode:
 ```
 jobs:
   build:
-    runs-on: macos-13
+    runs-on: macos-15
     steps:
     - uses: step-security/setup-xcode@v1
       with:
-        xcode-version: '14.3.1'
+        xcode-version: '16.4'
 ```
 
-Set the specific beta version of Xcode:
+Set a specific Xcode version on `macos-26`:
 ```
 jobs:
   build:
-    runs-on: macos-13
+    runs-on: macos-26
     steps:
     - uses: step-security/setup-xcode@v1
       with:
-        xcode-version: '15.0-beta'
+        xcode-version: '26.3'
 ```
 # License
 The scripts and documentation in this project are released under the [MIT License](LICENSE)

package-lock.json

@@ -30,7 +30,7 @@
   },
   "devDependencies": {
     "@types/jest": "^29.5.5",
-    "@types/node": "^20.6.3",
+    "@types/node": "^24.0.0",
     "@types/plist": "^3.0.2",
     "@types/semver": "^7.5.2",
     "@typescript-eslint/eslint-plugin": "^6.7.2",