Resolve issue with potential stale editor

Fixes failure with extracting *.tpz
Refactored directory check function
2026-08-29 14:15:21 -07:00 · 2026-08-29 07:33:17 -07:00 · 2026-08-29 06:21:03 -07:00 · 2026-08-28 17:02:28 -07:00 · 2026-08-28 16:21:24 -07:00 · 2026-08-28 14:46:12 -07:00
5 changed files with 298 additions and 85 deletions
@@ -48,7 +48,7 @@ The uploaded artifact is the whole build folder, so companion files such as a `.

 | Input | Required | Default | Description |
 | --- | --- | --- | --- |
-| `godot-version` | Yes | — | The Godot 4 release tag to use, without the leading `v`; for example, `4.7.2-stable`. |
+| `godot-version` | Yes | — | A stable Godot 4 release tag, without the leading `v`; for example, `4.7.2-stable`. Alpha, beta, RC, and dev tags are unsupported. |
 | `host-os` | Yes | — | The machine running the job: `linux`, `macos`, or `windows`. The action checks this before it starts. |
 | `host-arch` | Yes | — | The runner's architecture. Linux supports `x86_32`, `x86_64`, `arm32`, and `arm64`; Windows supports `x86_32`, `x86_64`, and `arm64`; macOS supports `x86_64` and `arm64`. |
 | `export-preset` | Yes | — | The preset name exactly as it appears in `export_presets.cfg`. |
@@ -67,7 +67,8 @@ The uploaded artifact is the whole build folder, so companion files such as a `.
 ## A few helpful notes

 - Your project needs both `project.godot` and `export_presets.cfg`. Preset names with spaces, such as `Windows Desktop`, are fine.
- Downloads are checked against Godot's published `SHA512-SUMS.txt` file before anything is extracted.
+- Editor and template downloads come from the [official Godot stable-release assets](https://github.com/godotengine/godot/releases) and are checked against that release's `SHA512-SUMS.txt` before anything is extracted. If a release does not provide an editor for the requested runner architecture, the action fails before downloading either archive.
+- Linux ARM downloads require Godot 4.2 or newer; Windows ARM64 downloads require Godot 4.3 or newer. macOS uses the universal editor archive on both supported architectures.
 - On Linux, make sure the runner has `curl`, `unzip`, and `sha512sum`. macOS needs `curl`, `unzip`, and `shasum`. Windows uses the archive and hashing tools built into PowerShell.
 - The cache includes the editor and the full export-template package. Gitea keeps that cache on each runner by default; an administrator can configure shared storage if several runners should reuse it.
 - This action installs Godot, not every SDK around it. Android, iOS, console, and other platform-specific presets may still need their own SDKs, credentials, or signing setup on the runner.
@@ -3,7 +3,7 @@ description: Download and cache Godot 4, install export templates, and export a

 inputs:
  godot-version:
-    description: Exact Godot 4 release tag without a leading v (for example, 4.6.1-stable).
+    description: Exact stable Godot 4 release tag without a leading v (for example, 4.6.1-stable). Prerelease tags are unsupported.
    required: true
  host-os:
    description: "Runner operating system: linux, macos, or windows."
@@ -51,7 +51,7 @@ runs:

    - name: Export Godot project on Linux
      id: export-linux
-      if: ${{ runner.os == 'Linux' }}
+      if: ${{ runner.os == 'linux' }}
      shell: bash
      env:
        GODOT_VERSION: "${{ inputs.godot-version }}"
@@ -67,7 +67,7 @@ runs:

    - name: Export Godot project on macOS
      id: export-macos
-      if: ${{ runner.os == 'macOS' }}
+      if: ${{ runner.os == 'macos' }}
      shell: bash
      env:
        GODOT_VERSION: "${{ inputs.godot-version }}"
@@ -83,7 +83,7 @@ runs:

    - name: Export Godot project on Windows
      id: export-windows
-      if: ${{ runner.os == 'Windows' }}
+      if: ${{ runner.os == 'windows' }}
      shell: powershell
      env:
        GODOT_VERSION: "${{ inputs.godot-version }}"
@@ -16,7 +16,7 @@ require_environment() {
 }

 validate_common_inputs() {
-  [[ "$GODOT_VERSION" =~ ^4(\.[0-9]+){1,2}(-[0-9A-Za-z][0-9A-Za-z._-]*)?$ ]] || fail "godot-version must be a Godot 4 release tag such as 4.7.2-stable."
+  [[ "$GODOT_VERSION" =~ ^4(\.[0-9]+){1,2}-stable$ ]] || fail "godot-version must be a stable Godot 4 tag such as 4.7.2-stable. Alpha, beta, RC, and dev tags are not supported."
  [[ "$GODOT_HOST_OS" == "linux" ]] || fail "host-os must be 'linux' when this action runs on Linux."
  [[ "$GODOT_DOTNET" == "true" || "$GODOT_DOTNET" == "false" ]] || fail "dotnet must be 'true' or 'false'."
  [[ "$GODOT_EXPORT_MODE" == "release" || "$GODOT_EXPORT_MODE" == "debug" ]] || fail "export-mode must be 'release' or 'debug'."
@@ -35,16 +35,23 @@ actual_architecture() {
  esac
 }

+release_asset_checksum() {
+  local asset="$1"
+  local sum_file="$2"
+  local expected
+
+  expected="$(awk -v asset="$asset" '$2 == asset || $2 == "*" asset { print $1; exit }' "$sum_file")"
+  [[ -n "$expected" ]] || fail "Godot $GODOT_VERSION does not publish required $EDITION asset '$asset' for Linux/$GODOT_HOST_ARCH at $BASE_URL. Choose a supported stable release and architecture."
+  printf '%s\n' "$expected"
+}
+
 download_and_verify() {
  local asset="$1"
  local destination="$2"
-  local sum_file="$3"
-  local expected
+  local expected="$3"
  local actual

  curl --fail --location --retry 3 --silent --show-error "$BASE_URL/$asset" --output "$destination"
-  expected="$(awk -v asset="$asset" '$2 == asset || $2 == "*" asset { print $1; exit }' "$sum_file")"
-  [[ -n "$expected" ]] || fail "Release checksum manifest does not contain $asset."
  actual="$(sha512sum "$destination" | awk '{ print $1 }')"
  [[ "$actual" == "$expected" ]] || fail "SHA-512 verification failed for $asset."
 }
@@ -53,18 +60,39 @@ find_editor() {
  find "$EDITOR_DIR" -maxdepth 3 -type f -name 'Godot*' -print -quit
 }

+install_export_templates() {
+  local staging_directory="$1"
+  local staged_templates="$staging_directory/templates"
+  local staged_version="$staged_templates/version.txt"
+  local actual_template_version
+
+  [[ -f "$staged_version" ]] || fail "The export-template archive '$TEMPLATES_ASSET' did not contain templates/version.txt."
+  actual_template_version="$(tr -d '\r\n' < "$staged_version")"
+  [[ "$actual_template_version" == "$TEMPLATE_VERSION" ]] || fail "The export-template archive '$TEMPLATES_ASSET' reports template version '$actual_template_version', expected '$TEMPLATE_VERSION'."
+  mkdir -p "$TEMPLATE_DIR"
+  cp -R "$staged_templates/." "$TEMPLATE_DIR/"
+  rm -rf "$staging_directory"
+  [[ -f "$TEMPLATE_DIR/version.txt" ]] || fail "The export-template archive '$TEMPLATES_ASSET' could not be installed to '$TEMPLATE_DIR'."
+}
+
 install_godot() {
  local sum_file="$CACHE_DIR/SHA512-SUMS.txt"
  local editor_archive="$CACHE_DIR/$EDITOR_ASSET"
  local templates_archive="$CACHE_DIR/$TEMPLATES_ASSET"
+  local templates_staging_directory="$CACHE_DIR/templates-staging"
+  local editor_checksum
+  local templates_checksum

  rm -rf "$CACHE_DIR"
-  mkdir -p "$EDITOR_DIR" "$TEMPLATE_DIR"
+  mkdir -p "$EDITOR_DIR"
  curl --fail --location --retry 3 --silent --show-error "$BASE_URL/SHA512-SUMS.txt" --output "$sum_file"
-  download_and_verify "$EDITOR_ASSET" "$editor_archive" "$sum_file"
-  download_and_verify "$TEMPLATES_ASSET" "$templates_archive" "$sum_file"
+  editor_checksum="$(release_asset_checksum "$EDITOR_ASSET" "$sum_file")"
+  templates_checksum="$(release_asset_checksum "$TEMPLATES_ASSET" "$sum_file")"
+  download_and_verify "$EDITOR_ASSET" "$editor_archive" "$editor_checksum"
+  download_and_verify "$TEMPLATES_ASSET" "$templates_archive" "$templates_checksum"
  unzip -q "$editor_archive" -d "$EDITOR_DIR"
-  unzip -q "$templates_archive" -d "$TEMPLATE_DIR"
+  unzip -q "$templates_archive" -d "$templates_staging_directory"
+  install_export_templates "$templates_staging_directory"
  EDITOR_EXECUTABLE="$(find_editor)"
  [[ -n "$EDITOR_EXECUTABLE" ]] || fail "The Godot editor archive did not contain an executable."
  [[ -f "$TEMPLATE_DIR/version.txt" ]] || fail "The export-template archive did not contain version.txt."
@@ -107,14 +135,15 @@ if [[ "$GODOT_DOTNET" == "true" ]]; then
  EDITION=dotnet
  EDITOR_ASSET="Godot_v${GODOT_VERSION}_mono_linux_${GODOT_HOST_ARCH}.zip"
  TEMPLATES_ASSET="Godot_v${GODOT_VERSION}_mono_export_templates.tpz"
+  TEMPLATE_VERSION="${GODOT_VERSION//-/.}.mono"
 else
  EDITION=standard
  EDITOR_ASSET="Godot_v${GODOT_VERSION}_linux.${GODOT_HOST_ARCH}.zip"
  TEMPLATES_ASSET="Godot_v${GODOT_VERSION}_export_templates.tpz"
+  TEMPLATE_VERSION="${GODOT_VERSION//-/.}"
 fi

-BASE_URL="https://github.com/godotengine/godot-builds/releases/download/$GODOT_VERSION"
-TEMPLATE_VERSION="${GODOT_VERSION//-/.}"
+BASE_URL="https://github.com/godotengine/godot/releases/download/$GODOT_VERSION"
 CACHE_DIR="$GODOT_ACTION_ROOT/cache/$GODOT_VERSION/$EDITION/linux-$GODOT_HOST_ARCH"
 EDITOR_DIR="$CACHE_DIR/editor"
 USER_DATA_DIR="$CACHE_DIR/user-data"
@@ -16,7 +16,7 @@ require_environment() {
 }

 validate_common_inputs() {
-  [[ "$GODOT_VERSION" =~ ^4(\.[0-9]+){1,2}(-[0-9A-Za-z][0-9A-Za-z._-]*)?$ ]] || fail "godot-version must be a Godot 4 release tag such as 4.7.2-stable."
+  [[ "$GODOT_VERSION" =~ ^4(\.[0-9]+){1,2}-stable$ ]] || fail "godot-version must be a stable Godot 4 tag such as 4.7.2-stable. Alpha, beta, RC, and dev tags are not supported."
  [[ "$GODOT_HOST_OS" == "macos" ]] || fail "host-os must be 'macos' when this action runs on macOS."
  [[ "$GODOT_DOTNET" == "true" || "$GODOT_DOTNET" == "false" ]] || fail "dotnet must be 'true' or 'false'."
  [[ "$GODOT_EXPORT_MODE" == "release" || "$GODOT_EXPORT_MODE" == "debug" ]] || fail "export-mode must be 'release' or 'debug'."
@@ -33,16 +33,23 @@ actual_architecture() {
  esac
 }

+release_asset_checksum() {
+  local asset="$1"
+  local sum_file="$2"
+  local expected
+
+  expected="$(awk -v asset="$asset" '$2 == asset || $2 == "*" asset { print $1; exit }' "$sum_file")"
+  [[ -n "$expected" ]] || fail "Godot $GODOT_VERSION does not publish required $EDITION asset '$asset' for macOS/$GODOT_HOST_ARCH at $BASE_URL. Choose a supported stable release and architecture."
+  printf '%s\n' "$expected"
+}
+
 download_and_verify() {
  local asset="$1"
  local destination="$2"
-  local sum_file="$3"
-  local expected
+  local expected="$3"
  local actual

  curl --fail --location --retry 3 --silent --show-error "$BASE_URL/$asset" --output "$destination"
-  expected="$(awk -v asset="$asset" '$2 == asset || $2 == "*" asset { print $1; exit }' "$sum_file")"
-  [[ -n "$expected" ]] || fail "Release checksum manifest does not contain $asset."
  actual="$(shasum -a 512 "$destination" | awk '{ print $1 }')"
  [[ "$actual" == "$expected" ]] || fail "SHA-512 verification failed for $asset."
 }
@@ -51,18 +58,39 @@ find_editor() {
  find "$EDITOR_DIR" -type f -path '*.app/Contents/MacOS/*' -name 'Godot*' -print -quit
 }

+install_export_templates() {
+  local staging_directory="$1"
+  local staged_templates="$staging_directory/templates"
+  local staged_version="$staged_templates/version.txt"
+  local actual_template_version
+
+  [[ -f "$staged_version" ]] || fail "The export-template archive '$TEMPLATES_ASSET' did not contain templates/version.txt."
+  actual_template_version="$(tr -d '\r\n' < "$staged_version")"
+  [[ "$actual_template_version" == "$TEMPLATE_VERSION" ]] || fail "The export-template archive '$TEMPLATES_ASSET' reports template version '$actual_template_version', expected '$TEMPLATE_VERSION'."
+  mkdir -p "$TEMPLATE_DIR"
+  cp -R "$staged_templates/." "$TEMPLATE_DIR/"
+  rm -rf "$staging_directory"
+  [[ -f "$TEMPLATE_DIR/version.txt" ]] || fail "The export-template archive '$TEMPLATES_ASSET' could not be installed to '$TEMPLATE_DIR'."
+}
+
 install_godot() {
  local sum_file="$CACHE_DIR/SHA512-SUMS.txt"
  local editor_archive="$CACHE_DIR/$EDITOR_ASSET"
  local templates_archive="$CACHE_DIR/$TEMPLATES_ASSET"
+  local templates_staging_directory="$CACHE_DIR/templates-staging"
+  local editor_checksum
+  local templates_checksum

  rm -rf "$CACHE_DIR"
-  mkdir -p "$EDITOR_DIR" "$TEMPLATE_DIR"
+  mkdir -p "$EDITOR_DIR"
  curl --fail --location --retry 3 --silent --show-error "$BASE_URL/SHA512-SUMS.txt" --output "$sum_file"
-  download_and_verify "$EDITOR_ASSET" "$editor_archive" "$sum_file"
-  download_and_verify "$TEMPLATES_ASSET" "$templates_archive" "$sum_file"
+  editor_checksum="$(release_asset_checksum "$EDITOR_ASSET" "$sum_file")"
+  templates_checksum="$(release_asset_checksum "$TEMPLATES_ASSET" "$sum_file")"
+  download_and_verify "$EDITOR_ASSET" "$editor_archive" "$editor_checksum"
+  download_and_verify "$TEMPLATES_ASSET" "$templates_archive" "$templates_checksum"
  unzip -q "$editor_archive" -d "$EDITOR_DIR"
-  unzip -q "$templates_archive" -d "$TEMPLATE_DIR"
+  unzip -q "$templates_archive" -d "$templates_staging_directory"
+  install_export_templates "$templates_staging_directory"
  EDITOR_EXECUTABLE="$(find_editor)"
  [[ -n "$EDITOR_EXECUTABLE" ]] || fail "The Godot editor archive did not contain a macOS app executable."
  [[ -f "$TEMPLATE_DIR/version.txt" ]] || fail "The export-template archive did not contain version.txt."
@@ -105,14 +133,15 @@ if [[ "$GODOT_DOTNET" == "true" ]]; then
  EDITION=dotnet
  EDITOR_ASSET="Godot_v${GODOT_VERSION}_mono_macos.universal.zip"
  TEMPLATES_ASSET="Godot_v${GODOT_VERSION}_mono_export_templates.tpz"
+  TEMPLATE_VERSION="${GODOT_VERSION//-/.}.mono"
 else
  EDITION=standard
  EDITOR_ASSET="Godot_v${GODOT_VERSION}_macos.universal.zip"
  TEMPLATES_ASSET="Godot_v${GODOT_VERSION}_export_templates.tpz"
+  TEMPLATE_VERSION="${GODOT_VERSION//-/.}"
 fi

-BASE_URL="https://github.com/godotengine/godot-builds/releases/download/$GODOT_VERSION"
-TEMPLATE_VERSION="${GODOT_VERSION//-/.}"
+BASE_URL="https://github.com/godotengine/godot/releases/download/$GODOT_VERSION"
 CACHE_DIR="$GODOT_ACTION_ROOT/cache/$GODOT_VERSION/$EDITION/macos-$GODOT_HOST_ARCH"
 EDITOR_DIR="$CACHE_DIR/editor"
 USER_HOME="$CACHE_DIR/home"
@@ -17,11 +17,28 @@ function Require-Environment([string]$Name) {
    return $value
 }

+function Test-PathIsWithinDirectory([string]$ParentDirectory, [string]$CandidateDirectory) {
+    $parentPath = [IO.Path]::GetFullPath($ParentDirectory)
+    $candidatePath = [IO.Path]::GetFullPath($CandidateDirectory)
+    $separator = [IO.Path]::DirectorySeparatorChar.ToString()
+
+    if ($candidatePath.Equals($parentPath, [StringComparison]::OrdinalIgnoreCase)) {
+        return $true
+    }
+
+    if (-not $parentPath.EndsWith($separator)) {
+        $parentPath += $separator
+    }
+
+    return $candidatePath.StartsWith($parentPath, [StringComparison]::OrdinalIgnoreCase)
+}
+
 function Get-ActualArchitecture {
    $architecture = $env:PROCESSOR_ARCHITEW6432
    if ([string]::IsNullOrWhiteSpace($architecture)) {
        $architecture = $env:PROCESSOR_ARCHITECTURE
    }
+
    switch ($architecture.ToUpperInvariant()) {
        'AMD64' { return 'x86_64' }
        'X86' { return 'x86_32' }
@@ -31,32 +48,159 @@ function Get-ActualArchitecture {
 }

 function Get-Checksum([string]$ManifestPath, [string]$Asset) {
-    $line = Get-Content -LiteralPath $ManifestPath | Where-Object {
-        $_ -match '^([0-9A-Fa-f]{128})\s+\*?(.+)$' -and $Matches[2] -eq $Asset
-    } | Select-Object -First 1
-    if (-not $line) {
-        Fail "Release checksum manifest does not contain $Asset."
+    foreach ($line in Get-Content -LiteralPath $ManifestPath) {
+        if ($line -match '^([0-9A-Fa-f]{128})\s+\*?(.+)$' -and $Matches[2] -eq $Asset) {
+            return $Matches[1].ToLowerInvariant()
        }
-    return ($line -split '\s+')[0].ToLowerInvariant()
+    }
+
+    Fail "Godot $GodotVersion does not publish required $edition asset '$Asset' for Windows/$HostArch at $script:BaseUrl. Choose a supported stable release and architecture."
 }

-function Download-AndVerify([string]$Asset, [string]$Destination, [string]$ManifestPath) {
-    Invoke-WebRequest -Uri "$script:BaseUrl/$Asset" -OutFile $Destination
-    $expected = Get-Checksum $ManifestPath $Asset
-    $actual = (Get-FileHash -LiteralPath $Destination -Algorithm SHA512).Hash.ToLowerInvariant()
-    if ($actual -ne $expected) {
+function Download-AndVerify([string]$Asset, [string]$Destination, [string]$ExpectedChecksum) {
+    Invoke-WebRequest -UseBasicParsing -Uri "$script:BaseUrl/$Asset" -OutFile $Destination
+    $actualChecksum = (Get-FileHash -LiteralPath $Destination -Algorithm SHA512).Hash.ToLowerInvariant()
+    if ($actualChecksum -ne $ExpectedChecksum) {
        Fail "SHA-512 verification failed for $Asset."
    }
 }

-function Find-Editor([string]$Directory) {
-    $console = Get-ChildItem -LiteralPath $Directory -Recurse -File -Filter 'Godot*console.exe' -ErrorAction SilentlyContinue | Select-Object -First 1
-    if ($console) { return $console.FullName }
-    $editor = Get-ChildItem -LiteralPath $Directory -Recurse -File -Filter 'Godot*.exe' -ErrorAction SilentlyContinue | Select-Object -First 1
-    if ($editor) { return $editor.FullName }
+function Get-CachePaths([string]$Root) {
+    $editorDirectory = Join-Path $Root 'editor'
+    $userHome = Join-Path $Root 'home'
+    $templateDirectory = Join-Path $userHome "AppData\Roaming\Godot\export_templates\$templateVersion"
+
+    return [PSCustomObject]@{
+        Root = $Root
+        EditorDirectory = $editorDirectory
+        UserHome = $userHome
+        TemplateDirectory = $templateDirectory
+        Marker = Join-Path $Root '.complete'
+    }
+}
+
+function Get-EditorExecutable([string]$EditorDirectory) {
+    $matches = @(Get-ChildItem -LiteralPath $EditorDirectory -Recurse -File -ErrorAction SilentlyContinue |
+        Where-Object { $_.Name -eq $expectedEditorFileName })
+
+    if ($matches.Count -eq 1) {
+        return $matches[0].FullName
+    }
+
    return $null
 }

+function Get-PeMachine([string]$Path) {
+    try {
+        $bytes = [IO.File]::ReadAllBytes($Path)
+    } catch {
+        return $null
+    }
+
+    if ($bytes.Length -lt 64 -or $bytes[0] -ne 0x4d -or $bytes[1] -ne 0x5a) {
+        return $null
+    }
+
+    $peOffset = [BitConverter]::ToInt32($bytes, 0x3c)
+    if ($peOffset -lt 0 -or $peOffset -gt ($bytes.Length - 6)) {
+        return $null
+    }
+
+    if ($bytes[$peOffset] -ne 0x50 -or $bytes[$peOffset + 1] -ne 0x45 -or $bytes[$peOffset + 2] -ne 0 -or $bytes[$peOffset + 3] -ne 0) {
+        return $null
+    }
+
+    return [BitConverter]::ToUInt16($bytes, $peOffset + 4)
+}
+
+function Test-ExpectedEditor([string]$EditorDirectory) {
+    $editorExecutable = Get-EditorExecutable $EditorDirectory
+    if (-not $editorExecutable) {
+        return $false
+    }
+
+    return (Get-PeMachine $editorExecutable) -eq $expectedPeMachine
+}
+
+function Assert-ExpectedEditor([string]$EditorDirectory) {
+    $editorExecutable = Get-EditorExecutable $EditorDirectory
+    if (-not $editorExecutable) {
+        Fail "The Godot editor archive did not contain the expected console executable '$expectedEditorFileName'."
+    }
+
+    $machine = Get-PeMachine $editorExecutable
+    if ($machine -ne $expectedPeMachine) {
+        Fail "The expected Godot console executable '$expectedEditorFileName' is not a valid $HostArch Windows executable."
+    }
+
+    return $editorExecutable
+}
+
+function Test-ValidCache($Paths) {
+    if (-not (Test-Path -LiteralPath $Paths.Marker -PathType Leaf)) {
+        return $false
+    }
+
+    $installedVersion = Join-Path $Paths.TemplateDirectory 'version.txt'
+    if (-not (Test-Path -LiteralPath $installedVersion -PathType Leaf)) {
+        return $false
+    }
+
+    if ((Get-Content -LiteralPath $installedVersion -Raw).Trim() -ne $templateVersion) {
+        return $false
+    }
+
+    return Test-ExpectedEditor $Paths.EditorDirectory
+}
+
+function Install-ExportTemplates($Paths, [string]$StagingDirectory, [string]$TemplateAsset) {
+    $stagedTemplates = Join-Path $StagingDirectory 'templates'
+    $stagedVersion = Join-Path $stagedTemplates 'version.txt'
+    if (-not (Test-Path -LiteralPath $stagedVersion -PathType Leaf)) {
+        Fail "The export-template archive '$TemplateAsset' did not contain templates/version.txt."
+    }
+
+    $actualVersion = (Get-Content -LiteralPath $stagedVersion -Raw).Trim()
+    if ($actualVersion -ne $templateVersion) {
+        Fail "The export-template archive '$TemplateAsset' reports template version '$actualVersion', expected '$templateVersion'."
+    }
+
+    New-Item -ItemType Directory -Force -Path $Paths.TemplateDirectory | Out-Null
+    Get-ChildItem -LiteralPath $stagedTemplates -Force | Copy-Item -Destination $Paths.TemplateDirectory -Recurse -Force
+
+    if (-not (Test-Path -LiteralPath (Join-Path $Paths.TemplateDirectory 'version.txt') -PathType Leaf)) {
+        Fail "The export-template archive '$TemplateAsset' could not be installed to '$($Paths.TemplateDirectory)'."
+    }
+}
+
+function Install-Cache($Paths) {
+    New-Item -ItemType Directory -Force -Path $Paths.EditorDirectory | Out-Null
+
+    $manifestPath = Join-Path $Paths.Root 'SHA512-SUMS.txt'
+    $editorArchive = Join-Path $Paths.Root $editorAsset
+    $templatesArchive = Join-Path $Paths.Root $templatesAsset
+    $templatesZipArchive = Join-Path $Paths.Root 'export-templates.zip'
+    $templatesStagingDirectory = Join-Path $Paths.Root 'templates-staging'
+
+    Invoke-WebRequest -UseBasicParsing -Uri "$script:BaseUrl/SHA512-SUMS.txt" -OutFile $manifestPath
+    $editorChecksum = Get-Checksum $manifestPath $editorAsset
+    $templatesChecksum = Get-Checksum $manifestPath $templatesAsset
+    Download-AndVerify $editorAsset $editorArchive $editorChecksum
+    Download-AndVerify $templatesAsset $templatesArchive $templatesChecksum
+
+    Expand-Archive -LiteralPath $editorArchive -DestinationPath $Paths.EditorDirectory -Force
+    Assert-ExpectedEditor $Paths.EditorDirectory | Out-Null
+
+    # Expand-Archive only recognizes .zip files. The verified .tpz payload is a ZIP archive.
+    Move-Item -LiteralPath $templatesArchive -Destination $templatesZipArchive
+    Expand-Archive -LiteralPath $templatesZipArchive -DestinationPath $templatesStagingDirectory -Force
+    Install-ExportTemplates $Paths $templatesStagingDirectory $templatesAsset
+    Remove-Item -LiteralPath $templatesStagingDirectory -Recurse -Force
+
+    @("release=$GodotVersion", "editor=$editorAsset", "templates=$templatesAsset") |
+        Set-Content -LiteralPath $Paths.Marker -NoNewline
+}
+
 $GodotVersion = Require-Environment 'GODOT_VERSION'
 $HostOs = Require-Environment 'GODOT_HOST_OS'
 $HostArch = Require-Environment 'GODOT_HOST_ARCH'
@@ -69,20 +213,21 @@ $ActionRoot = Require-Environment 'GODOT_ACTION_ROOT'
 $Workspace = Require-Environment 'GITHUB_WORKSPACE'
 $GithubOutput = Require-Environment 'GITHUB_OUTPUT'

-if ($GodotVersion -notmatch '^4(\.[0-9]+){1,2}(-[0-9A-Za-z][0-9A-Za-z._-]*)?$') { Fail 'godot-version must be a Godot 4 release tag such as 4.7.2-stable.' }
+if ($GodotVersion -notmatch '^4(\.[0-9]+){1,2}-stable$') { Fail 'godot-version must be a stable Godot 4 tag such as 4.7.2-stable. Alpha, beta, RC, and dev tags are not supported.' }
 if ($HostOs -ne 'windows') { Fail "host-os must be 'windows' when this action runs on Windows." }
 if ($Dotnet -notin @('true', 'false')) { Fail "dotnet must be 'true' or 'false'." }
 if ($ExportMode -notin @('release', 'debug')) { Fail "export-mode must be 'release' or 'debug'." }
 if ([string]::IsNullOrWhiteSpace($ExportPreset)) { Fail 'export-preset must not be empty.' }
 if ([string]::IsNullOrWhiteSpace($ExportFileName) -or $ExportFileName -in @('.', '..') -or $ExportFileName.IndexOfAny([IO.Path]::GetInvalidFileNameChars()) -ge 0 -or $ExportFileName.Contains('/') -or $ExportFileName.Contains('\')) { Fail 'export-file-name must be a filename without path separators.' }
 if ($HostArch -notin @('x86_32', 'x86_64', 'arm64')) { Fail "Unsupported Windows host-arch '$HostArch'." }
-if ($HostArch -ne (Get-ActualArchitecture)) { Fail "host-arch '$HostArch' does not match this Windows runner ($(Get-ActualArchitecture))." }
+
+$actualArchitecture = Get-ActualArchitecture
+if ($HostArch -ne $actualArchitecture) { Fail "host-arch '$HostArch' does not match this Windows runner ($actualArchitecture)." }

 $workspaceDirectory = [IO.Path]::GetFullPath($Workspace)
 if ([IO.Path]::IsPathRooted($ProjectPath)) { Fail 'project-path must be relative to the checked-out workspace.' }
 $ProjectDirectory = [IO.Path]::GetFullPath((Join-Path $workspaceDirectory $ProjectPath))
-$projectRelativePath = [IO.Path]::GetRelativePath($workspaceDirectory, $ProjectDirectory)
-if ($projectRelativePath -eq '..' -or $projectRelativePath.StartsWith("..$([IO.Path]::DirectorySeparatorChar)") -or [IO.Path]::IsPathRooted($projectRelativePath)) { Fail 'project-path must remain inside the checked-out workspace.' }
+if (-not (Test-PathIsWithinDirectory $workspaceDirectory $ProjectDirectory)) { Fail 'project-path must remain inside the checked-out workspace.' }
 if (-not (Test-Path -LiteralPath (Join-Path $ProjectDirectory 'project.godot') -PathType Leaf)) { Fail "No project.godot was found in project-path '$ProjectPath'." }
 $PresetFile = Join-Path $ProjectDirectory 'export_presets.cfg'
 if (-not (Test-Path -LiteralPath $PresetFile -PathType Leaf)) { Fail "No export_presets.cfg was found in project-path '$ProjectPath'." }
@@ -90,62 +235,71 @@ if (-not (Select-String -LiteralPath $PresetFile -SimpleMatch "name=`"$ExportPre

 if ($Dotnet -eq 'true') {
    $edition = 'dotnet'
-    $editorAsset = switch ($HostArch) {
-        'x86_32' { "Godot_v${GodotVersion}_mono_win32.zip" }
-        'x86_64' { "Godot_v${GodotVersion}_mono_win64.zip" }
-        'arm64' { "Godot_v${GodotVersion}_mono_windows_arm64.zip" }
+    $editorBaseName = switch ($HostArch) {
+        'x86_32' { "Godot_v${GodotVersion}_mono_win32" }
+        'x86_64' { "Godot_v${GodotVersion}_mono_win64" }
+        'arm64' { "Godot_v${GodotVersion}_mono_windows_arm64" }
    }
+    $editorAsset = "$editorBaseName.zip"
    $templatesAsset = "Godot_v${GodotVersion}_mono_export_templates.tpz"
+    $templateVersion = ($GodotVersion -replace '-', '.') + '.mono'
 } else {
    $edition = 'standard'
-    $editorAsset = switch ($HostArch) {
-        'x86_32' { "Godot_v${GodotVersion}_win32.exe.zip" }
-        'x86_64' { "Godot_v${GodotVersion}_win64.exe.zip" }
-        'arm64' { "Godot_v${GodotVersion}_windows_arm64.exe.zip" }
+    $editorBaseName = switch ($HostArch) {
+        'x86_32' { "Godot_v${GodotVersion}_win32" }
+        'x86_64' { "Godot_v${GodotVersion}_win64" }
+        'arm64' { "Godot_v${GodotVersion}_windows_arm64" }
    }
+    $editorAsset = "$editorBaseName.exe.zip"
    $templatesAsset = "Godot_v${GodotVersion}_export_templates.tpz"
+    $templateVersion = $GodotVersion -replace '-', '.'
 }

-$script:BaseUrl = "https://github.com/godotengine/godot-builds/releases/download/$GodotVersion"
-$templateVersion = $GodotVersion -replace '-', '.'
+$expectedEditorFileName = "${editorBaseName}_console.exe"
+$expectedPeMachine = switch ($HostArch) {
+    'x86_32' { [uint16]0x014c }
+    'x86_64' { [uint16]0x8664 }
+    'arm64' { [uint16]0xaa64 }
+}
+
+$script:BaseUrl = "https://github.com/godotengine/godot/releases/download/$GodotVersion"
 $cacheDirectory = Join-Path $ActionRoot "cache\$GodotVersion\$edition\windows-$HostArch"
-$editorDirectory = Join-Path $cacheDirectory 'editor'
-$userHome = Join-Path $cacheDirectory 'home'
-$templateDirectory = Join-Path $userHome "AppData\Roaming\Godot\export_templates\$templateVersion"
-$marker = Join-Path $cacheDirectory '.complete'
+$cachePaths = Get-CachePaths $cacheDirectory

-$editorExecutable = $null
-if ((Test-Path -LiteralPath $marker -PathType Leaf) -and (Test-Path -LiteralPath (Join-Path $templateDirectory 'version.txt') -PathType Leaf)) {
-    $editorExecutable = Find-Editor $editorDirectory
-}
+if (-not (Test-ValidCache $cachePaths)) {
+    $cacheParent = Split-Path -Parent $cacheDirectory
+    $stagingDirectory = Join-Path $cacheParent ((Split-Path -Leaf $cacheDirectory) + ".staging-$PID")
+    if (Test-Path -LiteralPath $stagingDirectory) { Remove-Item -LiteralPath $stagingDirectory -Recurse -Force }
+    New-Item -ItemType Directory -Force -Path $cacheParent | Out-Null

-if (-not $editorExecutable) {
+    try {
+        $stagingPaths = Get-CachePaths $stagingDirectory
+        Install-Cache $stagingPaths
+        if (-not (Test-ValidCache $stagingPaths)) { Fail 'Godot cache installation did not pass validation.' }
        if (Test-Path -LiteralPath $cacheDirectory) { Remove-Item -LiteralPath $cacheDirectory -Recurse -Force }
-    New-Item -ItemType Directory -Force -Path $editorDirectory, $templateDirectory | Out-Null
-    $manifestPath = Join-Path $cacheDirectory 'SHA512-SUMS.txt'
-    $editorArchive = Join-Path $cacheDirectory $editorAsset
-    $templatesArchive = Join-Path $cacheDirectory $templatesAsset
-    Invoke-WebRequest -Uri "$script:BaseUrl/SHA512-SUMS.txt" -OutFile $manifestPath
-    Download-AndVerify $editorAsset $editorArchive $manifestPath
-    Download-AndVerify $templatesAsset $templatesArchive $manifestPath
-    Expand-Archive -LiteralPath $editorArchive -DestinationPath $editorDirectory -Force
-    Expand-Archive -LiteralPath $templatesArchive -DestinationPath $templateDirectory -Force
-    $editorExecutable = Find-Editor $editorDirectory
-    if (-not $editorExecutable) { Fail 'The Godot editor archive did not contain an executable.' }
-    if (-not (Test-Path -LiteralPath (Join-Path $templateDirectory 'version.txt') -PathType Leaf)) { Fail 'The export-template archive did not contain version.txt.' }
-    @("release=$GodotVersion", "editor=$editorAsset", "templates=$templatesAsset") | Set-Content -LiteralPath $marker -NoNewline
+        Move-Item -LiteralPath $stagingDirectory -Destination $cacheDirectory
+    } finally {
+        if (Test-Path -LiteralPath $stagingDirectory) { Remove-Item -LiteralPath $stagingDirectory -Recurse -Force }
+    }
 }

+$editorExecutable = Assert-ExpectedEditor $cachePaths.EditorDirectory
 $safePreset = ($ExportPreset -replace '[^A-Za-z0-9_.-]', '_').Trim('_')
 if ([string]::IsNullOrWhiteSpace($safePreset)) { $safePreset = 'export' }
 $buildDirectory = Join-Path $ActionRoot "builds\$safePreset-$ExportMode-$PID"
 $outputFile = Join-Path $buildDirectory $ExportFileName
 New-Item -ItemType Directory -Force -Path $buildDirectory | Out-Null

-$env:USERPROFILE = $userHome
-$env:APPDATA = Join-Path $userHome 'AppData\Roaming'
-$env:LOCALAPPDATA = Join-Path $userHome 'AppData\Local'
-& $editorExecutable --headless --path $ProjectDirectory "--export-$ExportMode" $ExportPreset $outputFile
+$env:USERPROFILE = $cachePaths.UserHome
+$env:APPDATA = Join-Path $cachePaths.UserHome 'AppData\Roaming'
+$env:LOCALAPPDATA = Join-Path $cachePaths.UserHome 'AppData\Local'
+
+try {
+    & $editorExecutable --headless --path $ProjectDirectory "--export-$ExportMode" $ExportPreset $outputFile
+} catch {
+    Fail "Godot could not start '$editorExecutable': $($_.Exception.Message)"
+}
+
 if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
 if (-not (Test-Path -LiteralPath $outputFile)) { Fail "Godot completed without creating the expected output '$ExportFileName'." }
Author	SHA1	Message	Date
omgitsalexl	ef2f78ff91	Resolve issue with potential stale editor	2026-08-29 14:15:21 -07:00
omgitsalexl	159e12c79a	Fixes failure with extracting *.tpz	2026-08-29 07:33:17 -07:00
omgitsalexl	dae0123a17	Refactored directory check function	2026-08-29 06:21:03 -07:00
omgitsalexl	391127c5b9	Places build templates in correct location	2026-08-28 17:02:28 -07:00
omgitsalexl	ffba9651c4	Pulls from `godot` repo not `godot-builds` repo	2026-08-28 16:21:24 -07:00
omgitsalexl	100a5cebd8	Resolved error with string casing	2026-08-28 14:46:12 -07:00