Add dependabot

2026-06-21 18:59:27 +08:00 · 2024-09-05 17:08:19 -04:00
42 changed files with 2187 additions and 21596 deletions
@@ -16,7 +16,7 @@ jobs:

      steps:
         - name: Checkout repository
-           uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
+           uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 #v4.1.1
           with:
              # We must fetch at least the immediate parents so that if this is
              # a pull request then we can checkout the head.
@@ -24,7 +24,7 @@ jobs:

         # Initializes the CodeQL tools for scanning.
         - name: Initialize CodeQL
-           uses: github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 #v3.28.15
+           uses: github/codeql-action/init@05963f47d870e2cb19a537396c1f668a348c7d8f #v3.24.8
           # Override language selection by uncommenting this and choosing your languages
           # with:
           #   languages: go, javascript, csharp, python, cpp, java
@@ -32,7 +32,7 @@ jobs:
         # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
         # If this step fails, then you should remove it and run the build manually (see below)
         - name: Autobuild
-           uses: github/codeql-action/autobuild@45775bd8235c68ba998cffa5171334d58593da47 #v3.28.15
+           uses: github/codeql-action/autobuild@05963f47d870e2cb19a537396c1f668a348c7d8f #v3.24.8

         # ℹ️ Command-line programs to run using the OS shell.
         # 📚 https://git.io/JvXDl
@@ -46,4 +46,4 @@ jobs:
         #   make release

         - name: Perform CodeQL Analysis
-           uses: github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 #v3.28.15
+           uses: github/codeql-action/analyze@05963f47d870e2cb19a537396c1f668a348c7d8f #v3.24.8
@@ -13,7 +13,7 @@ jobs:

      # Steps represent a sequence of tasks that will be executed as part of the job
      steps:
-         - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0
+         - uses: actions/stale@v3
           name: Setting issue as idle
           with:
              repo-token: ${{ secrets.GITHUB_TOKEN }}
@@ -24,7 +24,7 @@ jobs:
              operations-per-run: 100
              exempt-issue-labels: 'backlog'

-         - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0
+         - uses: actions/stale@v3
           name: Setting PR as idle
           with:
              repo-token: ${{ secrets.GITHUB_TOKEN }}
@@ -10,9 +10,9 @@ jobs:
      runs-on: ubuntu-latest
      steps:
         - name: Checkout Repository
-           uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-         - name: install deps
-           run: npm install
+           uses: actions/checkout@v2

         - name: Enforce Prettier
-           run: npm run format-check
+           uses: actionsx/prettier@v2
+           with:
+              args: --check .
@@ -13,12 +13,12 @@ on:
 jobs:
   run-integration-test:
      name: Run Minikube Integration Tests
-      runs-on: ubuntu-22.04
+      runs-on: ubuntu-latest
      env:
         KUBECONFIG: /home/runner/.kube/config
         NAMESPACE: test-${{ github.run_id }}
      steps:
-         - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+         - uses: actions/checkout@v3

         - name: Install dependencies
           run: |
@@ -31,22 +31,22 @@ jobs:
         - name: Build
           run: ncc build src/run.ts -o lib

-         - uses: Azure/setup-kubectl@3e0aec4d80787158d308d7b364cb1b702e7feb7f # v4.0.0
+         - uses: Azure/setup-kubectl@v3
           name: Install Kubectl

         - id: setup-minikube
           name: Setup Minikube
-           uses: medyagh/setup-minikube@cea33675329b799adccc9526aa5daccc26cd5052 # v0.0.19
+           uses: medyagh/setup-minikube@latest
           with:
-              minikube-version: 1.34.0
-              kubernetes-version: 1.31.0
+              minikube-version: 1.24.0
+              kubernetes-version: 1.22.3
              driver: 'none'
           timeout-minutes: 3

         - name: Create namespace to run tests
           run: kubectl create ns ${{ env.NAMESPACE }}

-         - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # 5.5.0
+         - uses: actions/setup-python@v2
           name: Install Python
           with:
              python-version: '3.x'
@@ -13,12 +13,12 @@ on:
 jobs:
   run-integration-test:
      name: Run Minikube Integration Tests
-      runs-on: ubuntu-22.04
+      runs-on: ubuntu-latest
      env:
         KUBECONFIG: /home/runner/.kube/config
         NAMESPACE: test-${{ github.run_id }}
      steps:
-         - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+         - uses: actions/checkout@v3

         - name: Install dependencies
           run: |
@@ -31,22 +31,22 @@ jobs:
         - name: Build
           run: ncc build src/run.ts -o lib

-         - uses: Azure/setup-kubectl@3e0aec4d80787158d308d7b364cb1b702e7feb7f # v4.0.0
+         - uses: Azure/setup-kubectl@v3
           name: Install Kubectl

         - id: setup-minikube
           name: Setup Minikube
-           uses: medyagh/setup-minikube@cea33675329b799adccc9526aa5daccc26cd5052 # v0.0.19
+           uses: medyagh/setup-minikube@latest
           with:
-              minikube-version: 1.34.0
-              kubernetes-version: 1.31.0
+              minikube-version: 1.31.2
+              kubernetes-version: 1.22.3
              driver: 'none'
           timeout-minutes: 3

         - name: Create namespace to run tests
           run: kubectl create ns ${{ env.NAMESPACE }}

-         - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # 5.5.0
+         - uses: actions/setup-python@v2
           name: Install Python
           with:
              python-version: '3.x'
@@ -13,12 +13,12 @@ on:
 jobs:
   run-integration-test:
      name: Run Minikube Integration Tests
-      runs-on: ubuntu-22.04
+      runs-on: ubuntu-latest
      env:
         KUBECONFIG: /home/runner/.kube/config
         NAMESPACE: test-${{ github.run_id }}
      steps:
-         - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+         - uses: actions/checkout@v3

         - name: Install dependencies
           run: |
@@ -31,22 +31,22 @@ jobs:
         - name: Build
           run: ncc build src/run.ts -o lib

-         - uses: Azure/setup-kubectl@3e0aec4d80787158d308d7b364cb1b702e7feb7f # v4.0.0
+         - uses: Azure/setup-kubectl@v3
           name: Install Kubectl

         - id: setup-minikube
           name: Setup Minikube
-           uses: medyagh/setup-minikube@cea33675329b799adccc9526aa5daccc26cd5052 # v0.0.19
+           uses: medyagh/setup-minikube@latest
           with:
-              minikube-version: 1.34.0
-              kubernetes-version: 1.31.0
+              minikube-version: 1.31.2
+              kubernetes-version: 1.22.3
              driver: 'none'
           timeout-minutes: 3

         - name: Create namespace to run tests
           run: kubectl create ns ${{ env.NAMESPACE }}

-         - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # 5.5.0
+         - uses: actions/setup-python@v2
           name: Install Python
           with:
              python-version: '3.x'
@@ -13,12 +13,12 @@ on:
 jobs:
   run-integration-test:
      name: Run Minikube Integration Tests
-      runs-on: ubuntu-22.04
+      runs-on: ubuntu-latest
      env:
         KUBECONFIG: /home/runner/.kube/config
         NAMESPACE: test-${{ github.run_id }}
      steps:
-         - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+         - uses: actions/checkout@v3

         - name: Install dependencies
           run: |
@@ -31,24 +31,23 @@ jobs:
         - name: Build
           run: ncc build src/run.ts -o lib

-         - uses: Azure/setup-kubectl@3e0aec4d80787158d308d7b364cb1b702e7feb7f # v4.0.0
+         - uses: Azure/setup-kubectl@v3
           name: Install Kubectl

         - id: setup-minikube
           name: Setup Minikube
-           uses: medyagh/setup-minikube@cea33675329b799adccc9526aa5daccc26cd5052 # v0.0.19
+           uses: medyagh/setup-minikube@latest
           with:
-              minikube-version: 1.34.0
-              kubernetes-version: 1.31.0
+              minikube-version: 1.24.0
+              kubernetes-version: 1.22.3
              driver: 'none'
           timeout-minutes: 3

         - name: Install linkerd and add controlplane to cluster
           run: |
-              curl --proto '=https' --tlsv1.2 -sSfL https://run.linkerd.io/install-edge | sh
-              export PATH=$PATH:/home/runner/.linkerd2/bin
+              curl --proto '=https' --tlsv1.2 -sSfL https://run.linkerd.io/install | sh
              curl -sL https://linkerd.github.io/linkerd-smi/install | sh
-              kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.2.0/standard-install.yaml
+              export PATH=$PATH:/home/runner/.linkerd2/bin

              linkerd install --crds | kubectl apply -f -
              linkerd install --set proxyInit.runAsRoot=true | kubectl apply -f -
@@ -57,7 +56,7 @@ jobs:
         - name: Create namespace to run tests
           run: kubectl create ns ${{ env.NAMESPACE }}

-         - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # 5.5.0
+         - uses: actions/setup-python@v2
           name: Install Python
           with:
              python-version: '3.x'
@@ -13,12 +13,12 @@ on:
 jobs:
   run-integration-test:
      name: Run Minikube Integration Tests
-      runs-on: ubuntu-22.04
+      runs-on: ubuntu-latest
      env:
         KUBECONFIG: /home/runner/.kube/config
         NAMESPACE: test-${{ github.run_id }}
      steps:
-         - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+         - uses: actions/checkout@v3

         - name: Install dependencies
           run: |
@@ -31,22 +31,22 @@ jobs:
         - name: Build
           run: ncc build src/run.ts -o lib

-         - uses: Azure/setup-kubectl@3e0aec4d80787158d308d7b364cb1b702e7feb7f # v4.0.0
+         - uses: Azure/setup-kubectl@v3
           name: Install Kubectl

         - id: setup-minikube
           name: Setup Minikube
-           uses: medyagh/setup-minikube@cea33675329b799adccc9526aa5daccc26cd5052 # v0.0.19
+           uses: medyagh/setup-minikube@latest
           with:
-              minikube-version: 1.34.0
-              kubernetes-version: 1.31.0
+              minikube-version: 1.24.0
+              kubernetes-version: 1.22.3
              driver: 'none'
           timeout-minutes: 3

         - name: Create namespace to run tests
           run: kubectl create ns ${{ env.NAMESPACE }}

-         - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # 5.5.0
+         - uses: actions/setup-python@v2
           name: Install Python
           with:
              python-version: '3.x'
@@ -13,12 +13,12 @@ on:
 jobs:
   run-integration-test:
      name: Run Minikube Integration Tests
-      runs-on: ubuntu-22.04
+      runs-on: ubuntu-latest
      env:
         KUBECONFIG: /home/runner/.kube/config
         NAMESPACE: test-${{ github.run_id }}
      steps:
-         - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+         - uses: actions/checkout@v3

         - name: Install dependencies
           run: |
@@ -31,21 +31,23 @@ jobs:
         - name: Build
           run: ncc build src/run.ts -o lib

-         - uses: Azure/setup-kubectl@3e0aec4d80787158d308d7b364cb1b702e7feb7f # v4.0.0
+         - uses: Azure/setup-kubectl@v3
           name: Install Kubectl

         - id: setup-minikube
           name: Setup Minikube
-           uses: medyagh/setup-minikube@cea33675329b799adccc9526aa5daccc26cd5052 # v0.0.19
+           uses: medyagh/setup-minikube@latest
           with:
-              minikube-version: 1.34.0
-              kubernetes-version: 1.31.0
+              minikube-version: 1.24.0
+              kubernetes-version: 1.22.3
              driver: 'none'
           timeout-minutes: 3
-              curl --proto '=https' --tlsv1.2 -sSfL https://run.linkerd.io/install-edge | sh
-              export PATH=$PATH:/home/runner/.linkerd2/bin
+
+         - name: Install linkerd and add controlplane to cluster
+           run: |
+              curl --proto '=https' --tlsv1.2 -sSfL https://run.linkerd.io/install | sh
              curl -sL https://linkerd.github.io/linkerd-smi/install | sh
-              kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.2.0/standard-install.yaml
+              export PATH=$PATH:/home/runner/.linkerd2/bin

              linkerd install --crds | kubectl apply -f -
              linkerd install --set proxyInit.runAsRoot=true | kubectl apply -f -
@@ -54,7 +56,7 @@ jobs:
         - name: Create namespace to run tests
           run: kubectl create ns ${{ env.NAMESPACE }}

-         - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # 5.5.0
+         - uses: actions/setup-python@v2
           name: Install Python
           with:
              python-version: '3.x'
@@ -11,7 +11,7 @@ on:
 jobs:
   run-integration-test:
      name: Run Minikube Integration Tests
-      runs-on: ubuntu-22.04
+      runs-on: ubuntu-latest
      env:
         KUBECONFIG: /home/runner/.kube/config
         NAMESPACE: test-${{ github.run_id }}
@@ -19,7 +19,7 @@ jobs:
         contents: read
         id-token: write
      steps:
-         - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+         - uses: actions/checkout@v3

         - name: Install dependencies
           run: |
@@ -30,13 +30,13 @@ jobs:
         - name: Build
           run: ncc build src/run.ts -o lib
         - name: Azure login
-           uses: azure/login@v2.3.0
+           uses: azure/login@v1.4.3
           with:
              client-id: ${{ secrets.AZURE_CLIENT_ID }}
              tenant-id: ${{ secrets.AZURE_TENANT_ID }}
              subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

-         - uses: Azure/setup-kubectl@3e0aec4d80787158d308d7b364cb1b702e7feb7f # v4.0.0
+         - uses: Azure/setup-kubectl@v3
           name: Install Kubectl

         - name: Create private AKS cluster and set context
@@ -51,7 +51,7 @@ jobs:
           run: |
              az aks command invoke --resource-group ${{ env.NAMESPACE }} --name ${{ env.NAMESPACE }} --command "kubectl create ns ${{ env.NAMESPACE }}"

-         - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # 5.5.0
+         - uses: actions/setup-python@v2
           name: Install Python
           with:
              python-version: '3.x'
@@ -13,12 +13,12 @@ on:
 jobs:
   run-integration-test:
      name: Run Minikube Integration Tests
-      runs-on: ubuntu-22.04
+      runs-on: ubuntu-latest
      env:
         KUBECONFIG: /home/runner/.kube/config
         NAMESPACE: test-${{ github.run_id }}
      steps:
-         - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+         - uses: actions/checkout@v3

         - name: Install dependencies
           run: |
@@ -31,22 +31,22 @@ jobs:
         - name: Build
           run: ncc build src/run.ts -o lib

-         - uses: Azure/setup-kubectl@3e0aec4d80787158d308d7b364cb1b702e7feb7f # v4.0.0
+         - uses: Azure/setup-kubectl@v3
           name: Install Kubectl

         - id: setup-minikube
           name: Setup Minikube
-           uses: medyagh/setup-minikube@cea33675329b799adccc9526aa5daccc26cd5052 # v0.0.19
+           uses: medyagh/setup-minikube@latest
           with:
-              minikube-version: 1.34.0
-              kubernetes-version: 1.31.0
+              minikube-version: 1.24.0
+              kubernetes-version: 1.22.3
              driver: 'none'
           timeout-minutes: 3

         - name: Create namespace to run tests
           run: kubectl create ns ${{ env.NAMESPACE }}

-         - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # 5.5.0
+         - uses: actions/setup-python@v2
           name: Install Python
           with:
              python-version: '3.x'
@@ -14,7 +14,7 @@ jobs:
      name: Run Unit Tests
      runs-on: ubuntu-latest
      steps:
-         - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+         - uses: actions/checkout@v3
         - run: |
              npm install
              npm test
@@ -2,5 +2,6 @@ node_modules

 .DS_Store
 .idea
+lib/

 coverage/
@@ -1,46 +1,28 @@
 # Changelog

-## [5.0.3] - 2025-04-16
-
-### Added
-
- #398 case-insensitive resource type
-
-## [5.0.2] - 2025-04-15
-
-### Added
-
- #396 Update new resource-type input for action
-
-## [5.0.1] - 2024-03-12
-
-### Added
-
- #356 Add fleet support
-
 ## [5.0.0] - 2024-03-12

 ### Changed

- #309 Updated to Node20 and upgraded release workflows to @v1 tag
- #306 update release workflow to use new prefix, remove deprecated release
- #303 fix: ensure imageNames are not empty strings
- #299 bump release workflow sha
- #298 bump minikube to fix runner deps
- #297 update release workflow
+-  #309 Updated to Node20 and upgraded release workflows to @v1 tag
+-  #306 update release workflow to use new prefix, remove deprecated release
+-  #303 fix: ensure imageNames are not empty strings
+-  #299 bump release workflow sha
+-  #298 bump minikube to fix runner deps
+-  #297 update release workflow

 ### Added

- #304 add v prefix for version tagging
- #302 adding ncc to build
- #301 adding release workflow artifact fix
+-  #304 add v prefix for version tagging
+-  #302 adding ncc to build
+-  #301 adding release workflow artifact fix

 ## [4.10.0] - 2023-10-30

 ### Added

- #287 Make annotating resources optional
- #283 Fix “Service” route-method of the Blue-Green strategy with some manifest files
- #281 bump codeql to node 16
- #279 upgrade codeql
- #276 Fixes multiple namespaces bug
+-  #287 Make annotating resources optional
+-  #283 Fix “Service” route-method of the Blue-Green strategy with some manifest files
+-  #281 bump codeql to node 16
+-  #279 upgrade codeql
+-  #276 Fixes multiple namespaces bug
@@ -4,6 +4,6 @@ This project has adopted the [Microsoft Open Source Code of Conduct](https://ope

 Resources:

- [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/)
- [Microsoft Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/)
- Contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with questions or concerns
+-  [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/)
+-  [Microsoft Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/)
+-  Contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with questions or concerns
@@ -17,22 +17,22 @@ permissions:

 Following are the key capabilities of this action:

- **Artifact substitution**: Takes a list of container images which can be specified along with their tags or digests. They are substituted into the non-templatized version of manifest files before applying to the cluster to ensure that the right version of the image is pulled by the cluster nodes.
+-  **Artifact substitution**: Takes a list of container images which can be specified along with their tags or digests. They are substituted into the non-templatized version of manifest files before applying to the cluster to ensure that the right version of the image is pulled by the cluster nodes.

- **Object stability checks**: Rollout status is checked for the Kubernetes objects deployed. This is done to incorporate stability checks while computing the action status as success/failure.
+-  **Object stability checks**: Rollout status is checked for the Kubernetes objects deployed. This is done to incorporate stability checks while computing the action status as success/failure.

- **Secret handling**: The secret names specified as inputs in the action are used to augment the input manifest files with imagePullSecrets values before deploying to the cluster. Also, checkout the [Azure/k8s-create-secret](https://github.com/Azure/k8s-create-secret) action for creation of generic or docker-registry secrets in the cluster.
+-  **Secret handling**: The secret names specified as inputs in the action are used to augment the input manifest files with imagePullSecrets values before deploying to the cluster. Also, checkout the [Azure/k8s-create-secret](https://github.com/Azure/k8s-create-secret) action for creation of generic or docker-registry secrets in the cluster.

- **Deployment strategy** Supports both canary and blue-green deployment strategies
+-  **Deployment strategy** Supports both canary and blue-green deployment strategies

-   - **Canary strategy**: Workloads suffixed with '-baseline' and '-canary' are created. There are two methods of traffic splitting supported:
-      - **Service Mesh Interface**: Service Mesh Interface abstraction allows for plug-and-play configuration with service mesh providers such as [Linkerd](https://linkerd.io/) and [Istio](https://istio.io/). Meanwhile, this action takes away the hard work of mapping SMI's TrafficSplit objects to the stable, baseline and canary services during the lifecycle of the deployment strategy. Service mesh based canary deployments using this action are more accurate as service mesh providers enable granular percentage traffic split (via service registry and sidecar containers injected into pods alongside application containers).
-      - **Only Kubernetes (no service mesh)**: In the absence of service mesh, while it may not be possible to achieve exact percentage split at the request level, it is still possible to perform canary deployments by deploying -baseline and -canary workload variants next to the stable variant. The service routes requests to pods of all three workload variants as the selector-label constraints are met (KubernetesManifest will honor these when creating -baseline and -canary variants). This achieves the intended effect of routing only a portion of total requests to the canary.
-   - **Blue-Green strategy**: Choosing blue-green strategy with this action leads to creation of workloads suffixed with '-green'. An identified service is one that is supplied as part of the input manifest(s) and targets a workload in the supplied manifest(s). There are three route-methods supported in the action:
+   -  **Canary strategy**: Workloads suffixed with '-baseline' and '-canary' are created. There are two methods of traffic splitting supported:
+      -  **Service Mesh Interface**: Service Mesh Interface abstraction allows for plug-and-play configuration with service mesh providers such as [Linkerd](https://linkerd.io/) and [Istio](https://istio.io/). Meanwhile, this action takes away the hard work of mapping SMI's TrafficSplit objects to the stable, baseline and canary services during the lifecycle of the deployment strategy. Service mesh based canary deployments using this action are more accurate as service mesh providers enable granular percentage traffic split (via service registry and sidecar containers injected into pods alongside application containers).
+      -  **Only Kubernetes (no service mesh)**: In the absence of service mesh, while it may not be possible to achieve exact percentage split at the request level, it is still possible to perform canary deployments by deploying -baseline and -canary workload variants next to the stable variant. The service routes requests to pods of all three workload variants as the selector-label constraints are met (KubernetesManifest will honor these when creating -baseline and -canary variants). This achieves the intended effect of routing only a portion of total requests to the canary.
+   -  **Blue-Green strategy**: Choosing blue-green strategy with this action leads to creation of workloads suffixed with '-green'. An identified service is one that is supplied as part of the input manifest(s) and targets a workload in the supplied manifest(s). There are three route-methods supported in the action:

-      - **Service route-method**: Identified services are configured to target the green deployments.
-      - **Ingress route-method**: Along with deployments, new services are created with '-green' suffix (for identified services), and the ingresses are in turn updated to target the new services.
-      - **SMI route-method**: A new [TrafficSplit](https://github.com/servicemeshinterface/smi-spec/blob/master/apis/traffic-split/v1alpha3/traffic-split.md) object is created for each identified service. The TrafficSplit object is updated to target the new deployments. This works only if SMI is set up in the cluster.
+      -  **Service route-method**: Identified services are configured to target the green deployments.
+      -  **Ingress route-method**: Along with deployments, new services are created with '-green' suffix (for identified services), and the ingresses are in turn updated to target the new services.
+      -  **SMI route-method**: A new [TrafficSplit](https://github.com/servicemeshinterface/smi-spec/blob/master/apis/traffic-split/v1alpha3/traffic-split.md) object is created for each identified service. The TrafficSplit object is updated to target the new deployments. This works only if SMI is set up in the cluster.

      Traffic is routed to the new workloads only after the time provided as `version-switch-buffer` input has passed. The `promote` action creates workloads and services with new configurations but without any suffix. `reject` routes traffic back to the old workloads and deletes the '-green' workloads.

@@ -125,10 +125,6 @@ Following are the key capabilities of this action:
    <td>skip-tls-verify</br></br>(Optional)</td>
    <td>Acceptable values: true/false</br>Default value: false</br>True if the insecure-skip-tls-verify option should be used</td>
  </tr>
-  <tr>
-    <td>resource-type (Optional)</td>
-    <td>Acceptable values: `Microsoft.ContainerService/managedClusters` (default), 'Microsoft.ContainerService/fleets'</td>
-  </tr>
 </table>

 ## Usage Examples
@@ -466,9 +462,9 @@ jobs:

 ## Traceability Fields Support

- Environment variable `HELM_CHART_PATHS` is a list of helmchart files expected by k8s-deploy - it will be populated automatically if you are using k8s-bake to generate the manifests.
- Use script to build image and add dockerfile-path label to it. The value expected is the link to the dockerfile: https://github.com/${{github.repo}}/blob/${{github.sha}}/Dockerfile. If your dockerfile is in the same repo and branch where the workflow is run, it can be a relative path and it will be converted to a link for traceability.
- Run docker login action for each image registry - in case image build and image deploy are two distinct jobs in the same or separate workflows.
+-  Environment variable `HELM_CHART_PATHS` is a list of helmchart files expected by k8s-deploy - it will be populated automatically if you are using k8s-bake to generate the manifests.
+-  Use script to build image and add dockerfile-path label to it. The value expected is the link to the dockerfile: https://github.com/${{github.repo}}/blob/${{github.sha}}/Dockerfile. If your dockerfile is in the same repo and branch where the workflow is run, it can be a relative path and it will be converted to a link for traceability.
+-  Run docker login action for each image registry - in case image build and image deploy are two distinct jobs in the same or separate workflows.

 ## Contributing

@@ -14,13 +14,13 @@ You should receive a response within 24 hours. If for some reason you do not, pl

 Please include the requested information listed below (as much as you can provide) to help us better understand the nature and scope of the possible issue:

- Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
- Full paths of source file(s) related to the manifestation of the issue
- The location of the affected source code (tag/branch/commit or direct URL)
- Any special configuration required to reproduce the issue
- Step-by-step instructions to reproduce the issue
- Proof-of-concept or exploit code (if possible)
- Impact of the issue, including how an attacker might exploit the issue
+-  Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
+-  Full paths of source file(s) related to the manifestation of the issue
+-  The location of the affected source code (tag/branch/commit or direct URL)
+-  Any special configuration required to reproduce the issue
+-  Step-by-step instructions to reproduce the issue
+-  Proof-of-concept or exploit code (if possible)
+-  Impact of the issue, including how an attacker might exploit the issue

 This information will help us triage your report more quickly.

@@ -80,10 +80,6 @@ inputs:
   skip-tls-verify:
      description: True if the insecure-skip-tls-verify option should be used. Input should be 'true' or 'false'.
      default: false
-   resource-type:
-      description: Either Microsoft.ContainerService/managedClusters or Microsoft.ContainerService/fleets'.
-      required: false
-      default: 'Microsoft.ContainerService/managedClusters'

 branding:
   color: 'green'
@@ -1,6 +0,0 @@
-module.exports = {
-   presets: [
-      ['@babel/preset-env', {targets: {node: 'current'}}],
-      '@babel/preset-typescript'
-   ]
-}
@@ -1,20 +1,11 @@
 module.exports = {
+   clearMocks: true,
   moduleFileExtensions: ['js', 'ts'],
   testEnvironment: 'node',
   testMatch: ['**/*.test.ts'],
   transform: {
-      '\\.[jt]sx?$': 'babel-jest'
+      '^.+\\.ts$': 'ts-jest'
   },
-   transformIgnorePatterns: [
-      'node_modules/(?!' +
-         [
-            '@octokit',
-            'universal-user-agent',
-            'before-after-hook',
-            'minimist'
-         ].join('|') +
-         ')'
-   ],
   verbose: true,
   testTimeout: 9000
 }
@@ -12,27 +12,24 @@
      "format-check": "prettier --check ."
   },
   "dependencies": {
-      "@actions/core": "^1.11.1",
+      "@actions/core": "^1.10.0",
      "@actions/exec": "^1.0.0",
-      "@actions/io": "^1.1.3",
-      "@actions/tool-cache": "2.0.2",
-      "@babel/preset-env": "^7.26.9",
-      "@babel/preset-typescript": "^7.27.0",
-      "@octokit/core": "^6.1.4",
-      "@octokit/plugin-retry": "^7.2.0",
-      "@types/minipass": "^3.3.5",
-      "js-yaml": "4.1.0",
+      "@actions/io": "^1.0.0",
+      "@actions/tool-cache": "1.1.2",
+      "@octokit/core": "^3.5.1",
+      "@octokit/plugin-retry": "^3.0.9",
+      "@types/minipass": "^3.1.2",
+      "js-yaml": "3.13.1",
      "minimist": "^1.2.8"
   },
   "devDependencies": {
-      "@types/jest": "^29.5.14",
-      "@types/js-yaml": "^4.0.9",
-      "@types/minimist": "^1.2.5",
-      "@types/node": "^22.14.0",
-      "@vercel/ncc": "^0.38.3",
+      "@types/jest": "^26.0.0",
+      "@types/js-yaml": "^3.12.7",
+      "@types/node": "^12.20.41",
+      "@vercel/ncc": "^0.36.1",
      "jest": "^29.7.0",
-      "prettier": "^3.5.3",
-      "ts-jest": "^29.3.1",
-      "typescript": "5.8.3"
+      "prettier": "^2.8.8",
+      "ts-jest": "^29.2.3",
+      "typescript": "5.5.4"
   }
 }
@@ -13,15 +13,11 @@ import {
 } from '../strategyHelpers/deploymentHelper'
 import {DeploymentStrategy} from '../types/deploymentStrategy'
 import {parseTrafficSplitMethod} from '../types/trafficSplitMethod'
-import {ClusterType} from '../inputUtils'
-export const ResourceTypeManagedCluster =
-   'Microsoft.ContainerService/managedClusters'
-export const ResourceTypeFleet = 'Microsoft.ContainerService/fleets'
+
 export async function deploy(
   kubectl: Kubectl,
   manifestFilePaths: string[],
-   deploymentStrategy: DeploymentStrategy,
-   resourceType: ClusterType
+   deploymentStrategy: DeploymentStrategy
 ) {
   // update manifests
   const inputManifestFiles: string[] = updateManifestFiles(manifestFilePaths)
@@ -49,8 +45,7 @@ export async function deploy(
         KubernetesConstants.DiscoveryAndLoadBalancerResource.SERVICE
      ])
   )
-
-   await checkManifestStability(kubectl, resourceTypes, resourceType)
+   await checkManifestStability(kubectl, resourceTypes)
   core.endGroup()

   // print ingresses
@@ -38,20 +38,18 @@ import {
   TrafficSplitMethod
 } from '../types/trafficSplitMethod'
 import {parseRouteStrategy, RouteStrategy} from '../types/routeStrategy'
-import {ClusterType} from '../inputUtils'

 export async function promote(
   kubectl: Kubectl,
   manifests: string[],
-   deploymentStrategy: DeploymentStrategy,
-   resourceType: ClusterType
+   deploymentStrategy: DeploymentStrategy
 ) {
   switch (deploymentStrategy) {
      case DeploymentStrategy.CANARY:
         await promoteCanary(kubectl, manifests)
         break
      case DeploymentStrategy.BLUE_GREEN:
-         await promoteBlueGreen(kubectl, manifests, resourceType)
+         await promoteBlueGreen(kubectl, manifests)
         break
      default:
         throw Error('Invalid promote deployment strategy')
@@ -141,11 +139,7 @@ async function promoteCanary(kubectl: Kubectl, manifests: string[]) {
   core.endGroup()
 }

-async function promoteBlueGreen(
-   kubectl: Kubectl,
-   manifests: string[],
-   resourceType: ClusterType
-) {
+async function promoteBlueGreen(kubectl: Kubectl, manifests: string[]) {
   // update container images and pull secrets
   const inputManifestFiles: string[] = updateManifestFiles(manifests)
   const manifestObjects: BlueGreenManifests =
@@ -179,11 +173,7 @@ async function promoteBlueGreen(
         models.DiscoveryAndLoadBalancerResource.SERVICE
      ])
   )
-   await KubernetesManifestUtility.checkManifestStability(
-      kubectl,
-      resources,
-      resourceType
-   )
+   await KubernetesManifestUtility.checkManifestStability(kubectl, resources)
   core.endGroup()

   core.startGroup(
@@ -1,34 +0,0 @@
-import {parseResourceTypeInput} from './inputUtils'
-import {
-   ClusterType,
-   ResourceTypeFleet,
-   ResourceTypeManagedCluster
-} from './actions/deploy'
-
-describe('InputUtils', () => {
-   describe('parseResourceTypeInput', () => {
-      it('should extract fleet exact match resource type', () => {
-         expect(
-            parseResourceTypeInput('Microsoft.ContainerService/fleets')
-         ).toEqual(ResourceTypeFleet)
-      })
-      it('should match fleet case-insensitively', () => {
-         expect(
-            parseResourceTypeInput('Microsoft.containerservice/fleets')
-         ).toEqual(ResourceTypeFleet)
-      })
-      it('should match managed cluster case-insensitively', () => {
-         expect(
-            parseResourceTypeInput('Microsoft.containerservice/MAnaGedClusterS')
-         ).toEqual(ResourceTypeManagedCluster)
-      })
-      it('should error on unexpected values', () => {
-         expect(() => {
-            parseResourceTypeInput('icrosoft.ContainerService/ManagedCluster')
-         }).toThrow()
-         expect(() => {
-            parseResourceTypeInput('wrong-value')
-         }).toThrow()
-      })
-   })
-})
@@ -1,6 +1,5 @@
 import * as core from '@actions/core'
 import {parseAnnotations} from './types/annotations'
-import {ResourceTypeFleet, ResourceTypeManagedCluster} from './actions/deploy'

 export const inputAnnotations = parseAnnotations(
   core.getInput('annotations', {required: false})
@@ -15,18 +14,3 @@ export function getBufferTime(): number {

   return inputBufferTime
 }
-
-export function parseResourceTypeInput(rawInput: string): ClusterType {
-   switch (rawInput.toLowerCase()) {
-      case ResourceTypeFleet.toLowerCase():
-         return ResourceTypeFleet
-      case ResourceTypeManagedCluster.toLowerCase():
-         return ResourceTypeManagedCluster
-   }
-   throw new Error(
-      `Invalid resource type: ${rawInput}. Supported resource types are: ${ResourceTypeManagedCluster} (default), ${ResourceTypeFleet}`
-   )
-}
-export type ClusterType =
-   | typeof ResourceTypeManagedCluster
-   | typeof ResourceTypeFleet
@@ -1,18 +1,12 @@
 import * as core from '@actions/core'
 import {getKubectlPath, Kubectl} from './types/kubectl'
-import {
-   deploy,
-   ResourceTypeFleet,
-   ResourceTypeManagedCluster
-} from './actions/deploy'
-import {ClusterType} from './inputUtils'
+import {deploy} from './actions/deploy'
 import {promote} from './actions/promote'
 import {reject} from './actions/reject'
 import {Action, parseAction} from './types/action'
 import {parseDeploymentStrategy} from './types/deploymentStrategy'
 import {getFilesFromDirectoriesAndURLs} from './utilities/fileUtils'
 import {PrivateKubectl} from './types/privatekubectl'
-import {parseResourceTypeInput} from './inputUtils'

 export async function run() {
   // verify kubeconfig is set
@@ -32,8 +26,9 @@ export async function run() {
      .map((manifest) => manifest.trim()) // remove surrounding whitespace
      .filter((manifest) => manifest.length > 0) // remove any blanks

-   const fullManifestFilePaths =
-      await getFilesFromDirectoriesAndURLs(manifestFilePaths)
+   const fullManifestFilePaths = await getFilesFromDirectoriesAndURLs(
+      manifestFilePaths
+   )
   const kubectlPath = await getKubectlPath()
   const namespace = core.getInput('namespace') || 'default'
   const isPrivateCluster =
@@ -42,16 +37,6 @@ export async function run() {
   const resourceName = core.getInput('name') || ''
   const skipTlsVerify = core.getBooleanInput('skip-tls-verify')

-   let resourceType: ClusterType
-   try {
-      // included in the trycatch to allow raw input to go out of scope after parsing
-      const resourceTypeInput = core.getInput('resource-type')
-      resourceType = parseResourceTypeInput(resourceTypeInput)
-   } catch (e) {
-      core.setFailed(e)
-      return
-   }
-
   const kubectl = isPrivateCluster
      ? new PrivateKubectl(
           kubectlPath,
@@ -65,11 +50,11 @@ export async function run() {
   // run action
   switch (action) {
      case Action.DEPLOY: {
-         await deploy(kubectl, fullManifestFilePaths, strategy, resourceType)
+         await deploy(kubectl, fullManifestFilePaths, strategy)
         break
      }
      case Action.PROMOTE: {
-         await promote(kubectl, fullManifestFilePaths, strategy, resourceType)
+         await promote(kubectl, fullManifestFilePaths, strategy)
         break
      }
      case Action.REJECT: {
@@ -77,26 +77,22 @@ export function getManifestObjects(filePaths: string[]): BlueGreenManifests {
   // Manifest objects per type. All resources should be parsed and
   // organized before we can check if services are “routed” or not.
   filePaths.forEach((filePath: string) => {
-      try {
-         const fileContents = fs.readFileSync(filePath).toString()
-         yaml.loadAll(fileContents, (inputObject: any) => {
-            if (!!inputObject) {
-               const kind = inputObject.kind
-               if (isDeploymentEntity(kind)) {
-                  deploymentEntityList.push(inputObject)
-               } else if (isServiceEntity(kind)) {
-                  serviceEntityList.push(inputObject)
-               } else if (isIngressEntity(kind)) {
-                  ingressEntityList.push(inputObject)
-               } else {
-                  otherEntitiesList.push(inputObject)
-               }
+      const fileContents = fs.readFileSync(filePath).toString()
+      yaml.safeLoadAll(fileContents, (inputObject) => {
+         if (!!inputObject) {
+            const kind = inputObject.kind
+
+            if (isDeploymentEntity(kind)) {
+               deploymentEntityList.push(inputObject)
+            } else if (isServiceEntity(kind)) {
+               serviceEntityList.push(inputObject)
+            } else if (isIngressEntity(kind)) {
+               ingressEntityList.push(inputObject)
+            } else {
+               otherEntitiesList.push(inputObject)
            }
-         })
-      } catch (error) {
-         core.error(`Error processing file ${filePath}: ${error.message}`)
-         throw error
-      }
+         }
+      })
   })

   serviceEntityList.forEach((inputObject: any) => {
@@ -77,8 +77,9 @@ export async function createTrafficSplitObject(
 ): Promise<TrafficSplitObject> {
   // cache traffic split api version
   if (!trafficSplitAPIVersion)
-      trafficSplitAPIVersion =
-         await kubectlUtils.getTrafficSplitAPIVersion(kubectl)
+      trafficSplitAPIVersion = await kubectlUtils.getTrafficSplitAPIVersion(
+         kubectl
+      )

   // retrieve annotations for TS object
   const annotations = inputAnnotations
@@ -211,31 +211,25 @@ async function cleanUpCanary(
   const deletedFiles: string[] = []

   for (const filePath of files) {
-      try {
-         const fileContents = fs.readFileSync(filePath).toString()
+      const fileContents = fs.readFileSync(filePath).toString()

-         const parsedYaml: any[] = yaml.loadAll(fileContents)
-         for (const inputObject of parsedYaml) {
-            const name = inputObject.metadata.name
-            const kind = inputObject.kind
-            const namespace: string | undefined =
-               inputObject?.metadata?.namespace
+      const parsedYaml = yaml.safeLoadAll(fileContents)
+      for (const inputObject of parsedYaml) {
+         const name = inputObject.metadata.name
+         const kind = inputObject.kind
+         const namespace: string | undefined = inputObject?.metadata?.namespace

-            if (
-               isDeploymentEntity(kind) ||
-               (includeServices && isServiceEntity(kind))
-            ) {
-               deletedFiles.push(filePath)
-               const canaryObjectName = getCanaryResourceName(name)
-               const baselineObjectName = getBaselineResourceName(name)
+         if (
+            isDeploymentEntity(kind) ||
+            (includeServices && isServiceEntity(kind))
+         ) {
+            deletedFiles.push(filePath)
+            const canaryObjectName = getCanaryResourceName(name)
+            const baselineObjectName = getBaselineResourceName(name)

-               await deleteObject(kind, canaryObjectName, namespace)
-               await deleteObject(kind, baselineObjectName, namespace)
-            }
+            await deleteObject(kind, canaryObjectName, namespace)
+            await deleteObject(kind, baselineObjectName, namespace)
         }
-      } catch (error) {
-         core.error(`Failed to process file ${filePath}: ${error.message}`)
-         throw error
      }
   }

@@ -8,7 +8,6 @@ import * as canaryDeploymentHelper from './canaryHelper'
 import {isDeploymentEntity} from '../../types/kubernetesTypes'
 import {getReplicaCount} from '../../utilities/manifestUpdateUtils'
 import {DeployResult} from '../../types/deployResult'
-import {K8sObject} from '../../types/k8sObject'

 export async function deployPodCanary(
   filePaths: string[],
@@ -22,73 +21,50 @@ export async function deployPodCanary(
      throw Error('Percentage must be between 0 and 100')

   for (const filePath of filePaths) {
-      try {
-         const fileContents = fs.readFileSync(filePath, 'utf8')
-         const parsedYaml = yaml.loadAll(fileContents)
-         for (const inputObject of parsedYaml) {
-            if (
-               inputObject &&
-               typeof inputObject === 'object' &&
-               'metadata' in inputObject &&
-               'kind' in inputObject &&
-               'spec' in inputObject &&
-               typeof inputObject.metadata === 'object' &&
-               'name' in inputObject.metadata &&
-               typeof inputObject.metadata.name === 'string' &&
-               typeof inputObject.kind === 'string'
-            ) {
-               const obj = inputObject as K8sObject
-               const name = obj.metadata.name
-               const kind = obj.kind
+      const fileContents = fs.readFileSync(filePath).toString()
+      const parsedYaml = yaml.safeLoadAll(fileContents)
+      for (const inputObject of parsedYaml) {
+         const name = inputObject.metadata.name
+         const kind = inputObject.kind

-               if (!onlyDeployStable && isDeploymentEntity(kind)) {
-                  core.debug('Calculating replica count for canary')
-                  const canaryReplicaCount = calculateReplicaCountForCanary(
-                     obj,
-                     percentage
+         if (!onlyDeployStable && isDeploymentEntity(kind)) {
+            core.debug('Calculating replica count for canary')
+            const canaryReplicaCount = calculateReplicaCountForCanary(
+               inputObject,
+               percentage
+            )
+            core.debug('Replica count is ' + canaryReplicaCount)
+
+            const newCanaryObject = canaryDeploymentHelper.getNewCanaryResource(
+               inputObject,
+               canaryReplicaCount
+            )
+            newObjectsList.push(newCanaryObject)
+
+            // if there's already a stable object, deploy baseline as well
+            const stableObject = await canaryDeploymentHelper.fetchResource(
+               kubectl,
+               kind,
+               name
+            )
+            if (stableObject) {
+               core.debug(
+                  `Stable object found for ${kind} ${name}. Creating baseline objects`
+               )
+               const newBaselineObject =
+                  canaryDeploymentHelper.getNewBaselineResource(
+                     stableObject,
+                     canaryReplicaCount
                  )
-                  core.debug('Replica count is ' + canaryReplicaCount)
-
-                  const newCanaryObject =
-                     canaryDeploymentHelper.getNewCanaryResource(
-                        obj,
-                        canaryReplicaCount
-                     )
-                  newObjectsList.push(newCanaryObject)
-
-                  // if there's already a stable object, deploy baseline as well
-                  const stableObject =
-                     await canaryDeploymentHelper.fetchResource(
-                        kubectl,
-                        kind,
-                        name
-                     )
-                  if (stableObject) {
-                     core.debug(
-                        `Stable object found for ${kind} ${name}. Creating baseline objects`
-                     )
-                     const newBaselineObject =
-                        canaryDeploymentHelper.getNewBaselineResource(
-                           stableObject,
-                           canaryReplicaCount
-                        )
-                     core.debug(
-                        'New baseline object: ' +
-                           JSON.stringify(newBaselineObject)
-                     )
-                     newObjectsList.push(newBaselineObject)
-                  }
-               } else {
-                  // deploy non deployment entity or regular deployments for promote as they are
-                  newObjectsList.push(obj)
-               }
+               core.debug(
+                  'New baseline object: ' + JSON.stringify(newBaselineObject)
+               )
+               newObjectsList.push(newBaselineObject)
            }
+         } else {
+            // deploy non deployment entity or regular deployments for promote as they are
+            newObjectsList.push(inputObject)
         }
-      } catch (error) {
-         core.error(
-            `Failed to parse YAML file at ${filePath}: ${error.message}`
-         )
-         throw error
      }
   }

@@ -11,7 +11,6 @@ import {isDeploymentEntity, isServiceEntity} from '../../types/kubernetesTypes'
 import {checkForErrors} from '../../utilities/kubectlUtils'
 import {inputAnnotations} from '../../inputUtils'
 import {DeployResult} from '../../types/deployResult'
-import {K8sObject} from '../../types/k8sObject'

 const TRAFFIC_SPLIT_OBJECT_NAME_SUFFIX = '-workflow-rollout'
 const TRAFFIC_SPLIT_OBJECT = 'TrafficSplit'
@@ -37,68 +36,60 @@ export async function deploySMICanary(

   const newObjectsList = []
   for await (const filePath of filePaths) {
-      try {
-         const fileContents = fs.readFileSync(filePath).toString()
-         const inputObjects: K8sObject[] = yaml.loadAll(
-            fileContents
-         ) as K8sObject[]
-         for (const inputObject of inputObjects) {
-            const name = inputObject.metadata.name
-            const kind = inputObject.kind
+      const fileContents = fs.readFileSync(filePath).toString()
+      const inputObjects = yaml.safeLoadAll(fileContents)
+      for (const inputObject of inputObjects) {
+         const name = inputObject.metadata.name
+         const kind = inputObject.kind

-            if (!onlyDeployStable && isDeploymentEntity(kind)) {
-               if (calculateReplicas) {
-                  // calculate for each object
-                  const percentage = parseInt(
-                     core.getInput('percentage', {required: true})
-                  )
-                  canaryReplicaCount =
-                     podCanaryHelper.calculateReplicaCountForCanary(
-                        inputObject,
-                        percentage
-                     )
-                  core.debug(`calculated replica count ${canaryReplicaCount}`)
-               }
-
-               core.debug('Creating canary object')
-               const newCanaryObject =
-                  canaryDeploymentHelper.getNewCanaryResource(
+         if (!onlyDeployStable && isDeploymentEntity(kind)) {
+            if (calculateReplicas) {
+               // calculate for each object
+               const percentage = parseInt(
+                  core.getInput('percentage', {required: true})
+               )
+               canaryReplicaCount =
+                  podCanaryHelper.calculateReplicaCountForCanary(
                     inputObject,
+                     percentage
+                  )
+               core.debug(`calculated replica count ${canaryReplicaCount}`)
+            }
+
+            core.debug('Creating canary object')
+            const newCanaryObject = canaryDeploymentHelper.getNewCanaryResource(
+               inputObject,
+               canaryReplicaCount
+            )
+            newObjectsList.push(newCanaryObject)
+
+            const stableObject = await canaryDeploymentHelper.fetchResource(
+               kubectl,
+               kind,
+               canaryDeploymentHelper.getStableResourceName(name)
+            )
+            if (stableObject) {
+               core.debug(
+                  `Stable object found for ${kind} ${name}. Creating baseline objects`
+               )
+               const newBaselineObject =
+                  canaryDeploymentHelper.getBaselineDeploymentFromStableDeployment(
+                     stableObject,
                     canaryReplicaCount
                  )
-               newObjectsList.push(newCanaryObject)
-
-               const stableObject = await canaryDeploymentHelper.fetchResource(
-                  kubectl,
-                  kind,
-                  canaryDeploymentHelper.getStableResourceName(name)
-               )
-               if (stableObject) {
-                  core.debug(
-                     `Stable object found for ${kind} ${name}. Creating baseline objects`
-                  )
-                  const newBaselineObject =
-                     canaryDeploymentHelper.getBaselineDeploymentFromStableDeployment(
-                        stableObject,
-                        canaryReplicaCount
-                     )
-                  newObjectsList.push(newBaselineObject)
-               }
-            } else if (isDeploymentEntity(kind)) {
-               core.debug(
-                  `creating stable deployment with ${inputObject.spec.replicas} replicas`
-               )
-               const stableDeployment =
-                  canaryDeploymentHelper.getStableResource(inputObject)
-               newObjectsList.push(stableDeployment)
-            } else {
-               // Update non deployment entity or stable deployment as it is
-               newObjectsList.push(inputObject)
+               newObjectsList.push(newBaselineObject)
            }
+         } else if (isDeploymentEntity(kind)) {
+            core.debug(
+               `creating stable deployment with ${inputObject.spec.replicas} replicas`
+            )
+            const stableDeployment =
+               canaryDeploymentHelper.getStableResource(inputObject)
+            newObjectsList.push(stableDeployment)
+         } else {
+            // Update non deployment entity or stable deployment as it is
+            newObjectsList.push(inputObject)
         }
-      } catch (error) {
-         core.error(`Failed to process file at ${filePath}: ${error.message}`)
-         throw error
      }
   }
   core.debug(
@@ -120,90 +111,81 @@ async function createCanaryService(
   const trafficObjectsList: string[] = []

   for (const filePath of filePaths) {
-      try {
-         const fileContents = fs.readFileSync(filePath).toString()
-         const parsedYaml: K8sObject[] = yaml.loadAll(
-            fileContents
-         ) as K8sObject[]
+      const fileContents = fs.readFileSync(filePath).toString()
+      const parsedYaml = yaml.safeLoadAll(fileContents)
+      for (const inputObject of parsedYaml) {
+         const name = inputObject.metadata.name
+         const kind = inputObject.kind

-         for (const inputObject of parsedYaml) {
-            const name = inputObject.metadata.name
-            const kind = inputObject.kind
+         if (isServiceEntity(kind)) {
+            core.debug(`Creating services for ${kind} ${name}`)
+            const newCanaryServiceObject =
+               canaryDeploymentHelper.getNewCanaryResource(inputObject)
+            newObjectsList.push(newCanaryServiceObject)

-            if (isServiceEntity(kind)) {
-               core.debug(`Creating services for ${kind} ${name}`)
-               const newCanaryServiceObject =
-                  canaryDeploymentHelper.getNewCanaryResource(inputObject)
-               newObjectsList.push(newCanaryServiceObject)
+            const newBaselineServiceObject =
+               canaryDeploymentHelper.getNewBaselineResource(inputObject)
+            newObjectsList.push(newBaselineServiceObject)

-               const newBaselineServiceObject =
-                  canaryDeploymentHelper.getNewBaselineResource(inputObject)
-               newObjectsList.push(newBaselineServiceObject)
+            const stableObject = await canaryDeploymentHelper.fetchResource(
+               kubectl,
+               kind,
+               canaryDeploymentHelper.getStableResourceName(name)
+            )
+            if (!stableObject) {
+               const newStableServiceObject =
+                  canaryDeploymentHelper.getStableResource(inputObject)
+               newObjectsList.push(newStableServiceObject)

-               const stableObject = await canaryDeploymentHelper.fetchResource(
+               core.debug('Creating the traffic object for service: ' + name)
+               const trafficObject = await createTrafficSplitManifestFile(
                  kubectl,
-                  kind,
-                  canaryDeploymentHelper.getStableResourceName(name)
+                  name,
+                  0,
+                  0,
+                  1000
               )
-               if (!stableObject) {
-                  const newStableServiceObject =
-                     canaryDeploymentHelper.getStableResource(inputObject)
-                  newObjectsList.push(newStableServiceObject)

-                  core.debug('Creating the traffic object for service: ' + name)
-                  const trafficObject = await createTrafficSplitManifestFile(
-                     kubectl,
-                     name,
-                     0,
-                     0,
-                     1000
+               trafficObjectsList.push(trafficObject)
+            } else {
+               let updateTrafficObject = true
+               const trafficObject = await canaryDeploymentHelper.fetchResource(
+                  kubectl,
+                  TRAFFIC_SPLIT_OBJECT,
+                  getTrafficSplitResourceName(name)
+               )
+
+               if (trafficObject) {
+                  const trafficJObject = JSON.parse(
+                     JSON.stringify(trafficObject)
                  )
-
-                  trafficObjectsList.push(trafficObject)
-               } else {
-                  let updateTrafficObject = true
-                  const trafficObject =
-                     await canaryDeploymentHelper.fetchResource(
-                        kubectl,
-                        TRAFFIC_SPLIT_OBJECT,
-                        getTrafficSplitResourceName(name)
-                     )
-
-                  if (trafficObject) {
-                     const trafficJObject = JSON.parse(
-                        JSON.stringify(trafficObject)
-                     )
-                     if (trafficJObject?.spec?.backends) {
-                        trafficJObject.spec.backends.forEach((s) => {
-                           if (
-                              s.service ===
-                                 canaryDeploymentHelper.getCanaryResourceName(
-                                    name
-                                 ) &&
-                              s.weight === '1000m'
-                           ) {
-                              core.debug('Update traffic objcet not required')
-                              updateTrafficObject = false
-                           }
-                        })
-                     }
+                  if (trafficJObject?.spec?.backends) {
+                     trafficJObject.spec.backends.forEach((s) => {
+                        if (
+                           s.service ===
+                              canaryDeploymentHelper.getCanaryResourceName(
+                                 name
+                              ) &&
+                           s.weight === '1000m'
+                        ) {
+                           core.debug('Update traffic objcet not required')
+                           updateTrafficObject = false
+                        }
+                     })
                  }
+               }

-                  if (updateTrafficObject) {
-                     core.debug(
-                        'Stable service object present so updating the traffic object for service: ' +
-                           name
-                     )
-                     trafficObjectsList.push(
-                        await updateTrafficSplitObject(kubectl, name)
-                     )
-                  }
+               if (updateTrafficObject) {
+                  core.debug(
+                     'Stable service object present so updating the traffic object for service: ' +
+                        name
+                  )
+                  trafficObjectsList.push(
+                     await updateTrafficSplitObject(kubectl, name)
+                  )
               }
            }
         }
-      } catch (error) {
-         core.error(`Failed to process file at ${filePath}: ${error.message}`)
-         throw error
      }
   }

@@ -242,31 +224,23 @@ async function adjustTraffic(

   const trafficSplitManifests = []
   for (const filePath of manifestFilePaths) {
-      try {
-         const fileContents = fs.readFileSync(filePath).toString()
-         const parsedYaml: K8sObject[] = yaml.loadAll(
-            fileContents
-         ) as K8sObject[]
+      const fileContents = fs.readFileSync(filePath).toString()
+      const parsedYaml = yaml.safeLoadAll(fileContents)
+      for (const inputObject of parsedYaml) {
+         const name = inputObject.metadata.name
+         const kind = inputObject.kind

-         for (const inputObject of parsedYaml) {
-            const name = inputObject.metadata.name
-            const kind = inputObject.kind
-
-            if (isServiceEntity(kind)) {
-               trafficSplitManifests.push(
-                  await createTrafficSplitManifestFile(
-                     kubectl,
-                     name,
-                     stableWeight,
-                     0,
-                     canaryWeight
-                  )
+         if (isServiceEntity(kind)) {
+            trafficSplitManifests.push(
+               await createTrafficSplitManifestFile(
+                  kubectl,
+                  name,
+                  stableWeight,
+                  0,
+                  canaryWeight
               )
-            }
+            )
         }
-      } catch (error) {
-         core.error(`Failed to process file at ${filePath}: ${error.message}`)
-         throw error
      }
   }

@@ -347,8 +321,9 @@ async function getTrafficSplitObject(
 ): Promise<string> {
   // cached version
   if (!trafficSplitAPIVersion) {
-      trafficSplitAPIVersion =
-         await kubectlUtils.getTrafficSplitAPIVersion(kubectl)
+      trafficSplitAPIVersion = await kubectlUtils.getTrafficSplitAPIVersion(
+         kubectl
+      )
   }

   return JSON.stringify({
@@ -35,7 +35,6 @@ import {
 } from '../utilities/githubUtils'
 import {getDeploymentConfig} from '../utilities/dockerUtils'
 import {DeployResult} from '../types/deployResult'
-import {ClusterType} from '../inputUtils'

 export async function deployManifests(
   files: string[],
@@ -111,24 +110,19 @@ function appendStableVersionLabelToResource(files: string[]): string[] {
   const newObjectsList = []

   files.forEach((filePath: string) => {
-      try {
-         const fileContents = fs.readFileSync(filePath).toString()
+      const fileContents = fs.readFileSync(filePath).toString()

-         yaml.loadAll(fileContents, function (inputObject) {
-            const kind = (inputObject as {kind: string}).kind
+      yaml.safeLoadAll(fileContents, function (inputObject) {
+         const {kind} = inputObject

-            if (isDeploymentEntity(kind)) {
-               const updatedObject =
-                  canaryDeploymentHelper.markResourceAsStable(inputObject)
-               newObjectsList.push(updatedObject)
-            } else {
-               manifestFiles.push(filePath)
-            }
-         })
-      } catch (error) {
-         core.error(`Failed to parse file at ${filePath}: ${error.message}`)
-         throw error
-      }
+         if (isDeploymentEntity(kind)) {
+            const updatedObject =
+               canaryDeploymentHelper.markResourceAsStable(inputObject)
+            newObjectsList.push(updatedObject)
+         } else {
+            manifestFiles.push(filePath)
+         }
+      })
   })

   const updatedManifestFiles = fileHelper.writeObjectsToFile(newObjectsList)
@@ -139,14 +133,9 @@ function appendStableVersionLabelToResource(files: string[]): string[] {

 export async function checkManifestStability(
   kubectl: Kubectl,
-   resources: Resource[],
-   resourceType: ClusterType
+   resources: Resource[]
 ): Promise<void> {
-   await KubernetesManifestUtility.checkManifestStability(
-      kubectl,
-      resources,
-      resourceType
-   )
+   await KubernetesManifestUtility.checkManifestStability(kubectl, resources)
 }

 export async function annotateAndLabelResources(
@@ -204,19 +193,14 @@ async function annotateResources(
   )

   if (core.isDebug()) {
-      try {
-         core.debug(`files getting annotated are ${JSON.stringify(files)}`)
-         for (const filePath of files) {
-            core.debug('printing objects getting annotated...')
-            const fileContents = fs.readFileSync(filePath).toString()
-            const inputObjects = yaml.loadAll(fileContents)
-            for (const inputObject of inputObjects) {
-               core.debug(`object: ${JSON.stringify(inputObject)}`)
-            }
+      core.debug(`files getting annotated are ${JSON.stringify(files)}`)
+      for (const filePath of files) {
+         core.debug('printing objects getting annotated...')
+         const fileContents = fs.readFileSync(filePath).toString()
+         const inputObjects = yaml.safeLoadAll(fileContents)
+         for (const inputObject of inputObjects) {
+            core.debug(`object: ${JSON.stringify(inputObject)}`)
         }
-      } catch (error) {
-         core.error(`Failed to load and parse files: ${error.message}`)
-         throw error
      }
   }

@@ -1,5 +1,5 @@
 import * as fileUtils from '../utilities/fileUtils'
-import fs from 'node:fs'
+import * as fs from 'fs'
 import {
   PrivateKubectl,
   extractFileNames,
@@ -1,8 +1,9 @@
 import {Kubectl} from './kubectl'
-import minimist from 'minimist'
+import * as minimist from 'minimist'
 import {ExecOptions, ExecOutput, getExecOutput} from '@actions/exec'
 import * as core from '@actions/core'
-import fs from 'node:fs'
+import * as os from 'os'
+import * as fs from 'fs'
 import * as path from 'path'
 import {getTempDirectory} from '../utilities/fileUtils'

@@ -1,9 +1,8 @@
 import * as fileUtils from './fileUtils'

 import * as yaml from 'js-yaml'
-import fs from 'node:fs'
+import * as fs from 'fs'
 import * as path from 'path'
-import {K8sObject} from '../types/k8sObject'

 const sampleYamlUrl =
   'https://raw.githubusercontent.com/kubernetes/website/main/content/en/examples/controllers/nginx-deployment.yaml'
@@ -11,9 +10,7 @@ describe('File utils', () => {
   test('correctly parses a yaml file from a URL', async () => {
      const tempFile = await fileUtils.writeYamlFromURLToFile(sampleYamlUrl, 0)
      const fileContents = fs.readFileSync(tempFile).toString()
-      const inputObjects: K8sObject[] = yaml.loadAll(
-         fileContents
-      ) as K8sObject[]
+      const inputObjects = yaml.safeLoadAll(fileContents)
      expect(inputObjects).toHaveLength(1)

      for (const obj of inputObjects) {
@@ -1,4 +1,4 @@
-import fs from 'node:fs'
+import * as fs from 'fs'
 import * as https from 'https'
 import * as path from 'path'
 import * as core from '@actions/core'
@@ -183,7 +183,7 @@ function verifyYaml(filepath: string, url: string): Errorable<K8sObject[]> {
   const fileContents = fs.readFileSync(filepath).toString()
   let inputObjects
   try {
-      inputObjects = yaml.loadAll(fileContents)
+      inputObjects = yaml.safeLoadAll(fileContents)
   } catch (e) {
      return {
         succeeded: false,
@@ -1,52 +0,0 @@
-import * as manifestStabilityUtils from './manifestStabilityUtils'
-import {Kubectl} from '../types/kubectl'
-import {ResourceTypeFleet, ResourceTypeManagedCluster} from '../actions/deploy'
-import {ExecOutput} from '@actions/exec'
-import {exitCode, stdout} from 'process'
-
-describe('manifestStabilityUtils', () => {
-   const kc = new Kubectl('')
-   const resources = [
-      {
-         type: 'deployment',
-         name: 'test',
-         namespace: 'default'
-      }
-   ]
-
-   it('should return immediately if the resource type is fleet', async () => {
-      const spy = jest.spyOn(manifestStabilityUtils, 'checkManifestStability')
-      const checkRolloutStatusSpy = jest.spyOn(kc, 'checkRolloutStatus')
-      await manifestStabilityUtils.checkManifestStability(
-         kc,
-         resources,
-         ResourceTypeFleet
-      )
-
-      expect(checkRolloutStatusSpy).not.toHaveBeenCalled()
-      expect(spy).toHaveReturned()
-   })
-
-   it('should run fully if the resource type is managedCluster', async () => {
-      const spy = jest.spyOn(manifestStabilityUtils, 'checkManifestStability')
-      const checkRolloutStatusSpy = jest
-         .spyOn(kc, 'checkRolloutStatus')
-         .mockImplementation(() => {
-            return new Promise<ExecOutput>((resolve, reject) => {
-               resolve({
-                  exitCode: 0,
-                  stderr: '',
-                  stdout: ''
-               })
-            })
-         })
-      await manifestStabilityUtils.checkManifestStability(
-         kc,
-         resources,
-         ResourceTypeManagedCluster
-      )
-
-      expect(checkRolloutStatusSpy).toHaveBeenCalled()
-      expect(spy).toHaveReturned()
-   })
-})
@@ -3,22 +3,14 @@ import * as KubernetesConstants from '../types/kubernetesTypes'
 import {Kubectl, Resource} from '../types/kubectl'
 import {checkForErrors} from './kubectlUtils'
 import {sleep} from './timeUtils'
-import {ResourceTypeFleet} from '../actions/deploy'
-import {ClusterType} from '../inputUtils'

 const IS_SILENT = false
 const POD = 'pod'

 export async function checkManifestStability(
   kubectl: Kubectl,
-   resources: Resource[],
-   resourceType: ClusterType
+   resources: Resource[]
 ): Promise<void> {
-   // Skip if resource type is microsoft.containerservice/fleets
-   if (resourceType === ResourceTypeFleet) {
-      core.info(`Skipping checkManifestStability for ${ResourceTypeFleet}`)
-      return
-   }
   let rolloutStatusHasErrors = false
   for (let i = 0; i < resources.length; i++) {
      const resource = resources[i]
@@ -20,7 +20,6 @@ import {
   setImagePullSecrets
 } from './manifestPullSecretUtils'
 import {Resource} from '../types/kubectl'
-import {K8sObject} from '../types/k8sObject'

 export function updateManifestFiles(manifestFilePaths: string[]) {
   if (manifestFilePaths?.length === 0) {
@@ -275,29 +274,21 @@ export function getResources(

   const resources: Resource[] = []
   filePaths.forEach((filePath: string) => {
-      try {
-         const fileContents = fs.readFileSync(filePath).toString()
-         const inputObjects: K8sObject[] = yaml.loadAll(
-            fileContents
-         ) as K8sObject[]
-         inputObjects.forEach((inputObject) => {
-            const inputObjectKind = inputObject?.kind || ''
-            if (
-               filterResourceTypes.filter(
-                  (type) => inputObjectKind.toLowerCase() === type.toLowerCase()
-               ).length > 0
-            ) {
-               resources.push({
-                  type: inputObject.kind,
-                  name: inputObject.metadata.name,
-                  namespace: inputObject?.metadata?.namespace
-               })
-            }
-         })
-      } catch (error) {
-         core.error(`Failed to process file at ${filePath}: ${error.message}`)
-         throw error
-      }
+      const fileContents = fs.readFileSync(filePath).toString()
+      yaml.safeLoadAll(fileContents, (inputObject) => {
+         const inputObjectKind = inputObject?.kind || ''
+         if (
+            filterResourceTypes.filter(
+               (type) => inputObjectKind.toLowerCase() === type.toLowerCase()
+            ).length > 0
+         ) {
+            resources.push({
+               type: inputObject.kind,
+               name: inputObject.metadata.name,
+               namespace: inputObject?.metadata?.namespace
+            })
+         }
+      })
   })

   return resources
@@ -311,21 +302,16 @@ function updateImagePullSecretsInManifestFiles(

   const newObjectsList = []
   filePaths.forEach((filePath: string) => {
-      try {
-         const fileContents = fs.readFileSync(filePath).toString()
-         yaml.loadAll(fileContents, (inputObject: any) => {
-            if (inputObject?.kind) {
-               const {kind} = inputObject
-               if (isWorkloadEntity(kind)) {
-                  updateImagePullSecrets(inputObject, imagePullSecrets)
-               }
-               newObjectsList.push(inputObject)
+      const fileContents = fs.readFileSync(filePath).toString()
+      yaml.safeLoadAll(fileContents, (inputObject: any) => {
+         if (inputObject?.kind) {
+            const {kind} = inputObject
+            if (isWorkloadEntity(kind)) {
+               updateImagePullSecrets(inputObject, imagePullSecrets)
            }
-         })
-      } catch (error) {
-         core.error(`Failed to process file at ${filePath}: ${error.message}`)
-         throw error
-      }
+            newObjectsList.push(inputObject)
+         }
+      })
   })

   return fileHelper.writeObjectsToFile(newObjectsList)
@@ -1,8 +1,7 @@
 {
   "compilerOptions": {
      "target": "ES6",
-      "module": "commonjs",
-      "esModuleInterop": true
+      "module": "commonjs"
   },
   "exclude": ["node_modules", "test", "src/**/*.test.ts"]
 }