Convert to ESM.

Context: https://github.com/actions/typescript-action/pull/969

__tests__/cache.test.ts

@@ -24,24 +24,28 @@
  * Forked from https://github.com/actions/setup-java/blob/5b36705a13905facb447b6812d613a06a07e371d/__tests__/cache.test.ts
  */
 
+import { jest } from '@jest/globals'
 import { mkdtempSync } from 'fs'
 import { tmpdir } from 'os'
 import { join } from 'path'
-import { restore, save } from '../src/features/cache'
 import * as fs from 'fs'
 import * as os from 'os'
-import * as core from '@actions/core'
-import * as cache from '@actions/cache'
+import * as cache from '../__fixtures__/cache.js'
+import * as core from '../__fixtures__/core.js'
+
+// Mocks should be declared before the module being tested is imported.
+jest.unstable_mockModule('@actions/core', () => core)
+jest.unstable_mockModule('@actions/cache', () => cache)
+
+// The module being tested should be imported dynamically. This ensures that the
+// mocks are used in place of any actual dependencies.
+const { restore, save } = await import('../src/features/cache.js')
 
 describe('dependency cache', () => {
   const ORIGINAL_RUNNER_OS = process.env['RUNNER_OS']
   const ORIGINAL_GITHUB_WORKSPACE = process.env['GITHUB_WORKSPACE']
   const ORIGINAL_CWD = process.cwd()
   let workspace: string
-  let spyInfo: jest.SpyInstance<void, Parameters<typeof core.info>>
-  let spyWarning: jest.SpyInstance<void, Parameters<typeof core.warning>>
-  let spyDebug: jest.SpyInstance<void, Parameters<typeof core.debug>>
-  let spySaveState: jest.SpyInstance<void, Parameters<typeof core.saveState>>
 
   beforeEach(() => {
     workspace = mkdtempSync(join(tmpdir(), 'setup-graalvm-cache-'))
@@ -65,17 +69,9 @@ describe('dependency cache', () => {
   })
 
   beforeEach(() => {
-    spyInfo = jest.spyOn(core, 'info')
-    spyInfo.mockImplementation(() => null)
-
-    spyWarning = jest.spyOn(core, 'warning')
-    spyWarning.mockImplementation(() => null)
-
-    spyDebug = jest.spyOn(core, 'debug')
-    spyDebug.mockImplementation(() => null)
-
-    spySaveState = jest.spyOn(core, 'saveState')
-    spySaveState.mockImplementation(() => null)
+    core.info.mockImplementation(() => null)
+    core.warning.mockImplementation(() => null)
+    core.debug.mockImplementation(() => null)
   })
 
   afterEach(() => {
@@ -86,13 +82,8 @@ describe('dependency cache', () => {
   })
 
   describe('restore', () => {
-    let spyCacheRestore: jest.SpyInstance<ReturnType<typeof cache.restoreCache>, Parameters<typeof cache.restoreCache>>
-
     beforeEach(() => {
-      spyCacheRestore = jest
-        .spyOn(cache, 'restoreCache')
-        .mockImplementation((_paths: string[], _primaryKey: string) => Promise.resolve(undefined))
-      spyWarning.mockImplementation(() => null)
+      cache.restoreCache.mockImplementation((_paths: string[], _primaryKey: string) => Promise.resolve(undefined))
     })
 
     it('throws error if unsupported package manager specified', () => {
@@ -111,9 +102,9 @@ describe('dependency cache', () => {
         createFile(join(workspace, 'pom.xml'))
 
         await restore('maven')
-        expect(spyCacheRestore).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith('maven cache is not found')
+        expect(cache.restoreCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith('maven cache is not found')
       })
     })
     describe('for gradle', () => {
@@ -128,17 +119,17 @@ describe('dependency cache', () => {
         createFile(join(workspace, 'build.gradle'))
 
         await restore('gradle')
-        expect(spyCacheRestore).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith('gradle cache is not found')
+        expect(cache.restoreCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith('gradle cache is not found')
       })
       it('downloads cache based on build.gradle.kts', async () => {
         createFile(join(workspace, 'build.gradle.kts'))
 
         await restore('gradle')
-        expect(spyCacheRestore).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith('gradle cache is not found')
+        expect(cache.restoreCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith('gradle cache is not found')
       })
     })
     it('downloads cache based on buildSrc/Versions.kt', async () => {
@@ -146,9 +137,9 @@ describe('dependency cache', () => {
       createFile(join(workspace, 'buildSrc', 'Versions.kt'))
 
       await restore('gradle')
-      expect(spyCacheRestore).toHaveBeenCalled()
-      expect(spyWarning).not.toHaveBeenCalled()
-      expect(spyInfo).toHaveBeenCalledWith('gradle cache is not found')
+      expect(cache.restoreCache).toHaveBeenCalled()
+      expect(core.warning).not.toHaveBeenCalled()
+      expect(core.info).toHaveBeenCalledWith('gradle cache is not found')
     })
     describe('for sbt', () => {
       it('throws error if no build.sbt found', async () => {
@@ -162,20 +153,16 @@ describe('dependency cache', () => {
         createFile(join(workspace, 'build.sbt'))
 
         await restore('sbt')
-        expect(spyCacheRestore).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith('sbt cache is not found')
+        expect(cache.restoreCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith('sbt cache is not found')
       })
     })
   })
   describe('save', () => {
-    let spyCacheSave: jest.SpyInstance<ReturnType<typeof cache.saveCache>, Parameters<typeof cache.saveCache>>
-
     beforeEach(() => {
-      spyCacheSave = jest
-        .spyOn(cache, 'saveCache')
-        .mockImplementation((_paths: string[], _key: string) => Promise.resolve(0))
-      spyWarning.mockImplementation(() => null)
+      cache.saveCache.mockImplementation((_paths: string[], _key: string) => Promise.resolve(0))
+      core.warning.mockImplementation(() => null)
     })
 
     it('throws error if unsupported package manager specified', () => {
@@ -183,18 +170,18 @@ describe('dependency cache', () => {
     })
 
     it('save with -1 cacheId , should not fail workflow', async () => {
-      spyCacheSave.mockImplementation(() => Promise.resolve(-1))
+      cache.saveCache.mockImplementation(() => Promise.resolve(-1))
       createStateForMissingBuildFile()
 
       await save('maven')
-      expect(spyCacheSave).toHaveBeenCalled()
-      expect(spyWarning).not.toHaveBeenCalled()
-      expect(spyInfo).toHaveBeenCalled()
-      expect(spyInfo).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
+      expect(cache.saveCache).toHaveBeenCalled()
+      expect(core.warning).not.toHaveBeenCalled()
+      expect(core.info).toHaveBeenCalled()
+      expect(core.info).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
     })
 
     it('saves with error from toolkit, should fail workflow', async () => {
-      spyCacheSave.mockImplementation(() => Promise.reject(new cache.ValidationError('Validation failed')))
+      cache.saveCache.mockImplementation(() => Promise.reject(new cache.ValidationError('Validation failed')))
       createStateForMissingBuildFile()
 
       expect.assertions(1)
@@ -205,24 +192,24 @@ describe('dependency cache', () => {
       it('uploads cache even if no pom.xml found', async () => {
         createStateForMissingBuildFile()
         await save('maven')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
       })
       it('does not upload cache if no restore run before', async () => {
         createFile(join(workspace, 'pom.xml'))
 
         await save('maven')
-        expect(spyCacheSave).not.toHaveBeenCalled()
-        expect(spyWarning).toHaveBeenCalledWith('Error retrieving key from state.')
+        expect(cache.saveCache).not.toHaveBeenCalled()
+        expect(core.warning).toHaveBeenCalledWith('Error retrieving key from state.')
       })
       it('uploads cache', async () => {
         createFile(join(workspace, 'pom.xml'))
         createStateForSuccessfulRestore()
 
         await save('maven')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
       })
     })
     describe('for gradle', () => {
@@ -230,33 +217,33 @@ describe('dependency cache', () => {
         createStateForMissingBuildFile()
 
         await save('gradle')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
       })
       it('does not upload cache if no restore run before', async () => {
         createFile(join(workspace, 'build.gradle'))
 
         await save('gradle')
-        expect(spyCacheSave).not.toHaveBeenCalled()
-        expect(spyWarning).toHaveBeenCalledWith('Error retrieving key from state.')
+        expect(cache.saveCache).not.toHaveBeenCalled()
+        expect(core.warning).toHaveBeenCalledWith('Error retrieving key from state.')
       })
       it('uploads cache based on build.gradle', async () => {
         createFile(join(workspace, 'build.gradle'))
         createStateForSuccessfulRestore()
 
         await save('gradle')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
       })
       it('uploads cache based on build.gradle.kts', async () => {
         createFile(join(workspace, 'build.gradle.kts'))
         createStateForSuccessfulRestore()
 
         await save('gradle')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
       })
       it('uploads cache based on buildSrc/Versions.kt', async () => {
         createDirectory(join(workspace, 'buildSrc'))
@@ -264,47 +251,47 @@ describe('dependency cache', () => {
         createStateForSuccessfulRestore()
 
         await save('gradle')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
       })
     })
     describe('for sbt', () => {
       it('uploads cache even if no build.sbt found', async () => {
         createStateForMissingBuildFile()
         await save('sbt')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
       })
       it('does not upload cache if no restore run before', async () => {
         createFile(join(workspace, 'build.sbt'))
 
         await save('sbt')
-        expect(spyCacheSave).not.toHaveBeenCalled()
-        expect(spyWarning).toHaveBeenCalledWith('Error retrieving key from state.')
+        expect(cache.saveCache).not.toHaveBeenCalled()
+        expect(core.warning).toHaveBeenCalledWith('Error retrieving key from state.')
       })
       it('uploads cache', async () => {
         createFile(join(workspace, 'build.sbt'))
         createStateForSuccessfulRestore()
 
         await save('sbt')
-        expect(spyCacheSave).toHaveBeenCalled()
-        expect(spyWarning).not.toHaveBeenCalled()
-        expect(spyInfo).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
+        expect(cache.saveCache).toHaveBeenCalled()
+        expect(core.warning).not.toHaveBeenCalled()
+        expect(core.info).toHaveBeenCalledWith(expect.stringMatching(/^Cache saved with the key:.*/))
       })
     })
   })
 })
 
 function resetState() {
-  jest.spyOn(core, 'getState').mockReset()
+  core.getState.mockReset()
 }
 
 /**
  * Create states to emulate a restore process without build file.
  */
 function createStateForMissingBuildFile() {
-  jest.spyOn(core, 'getState').mockImplementation((name) => {
+  core.getState.mockImplementation((name) => {
     switch (name) {
       case 'cache-primary-key':
         return 'setup-graalvm-cache-'
@@ -318,7 +305,7 @@ function createStateForMissingBuildFile() {
  * Create states to emulate a successful restore process.
  */
 function createStateForSuccessfulRestore() {
-  jest.spyOn(core, 'getState').mockImplementation((name) => {
+  core.getState.mockImplementation((name) => {
     switch (name) {
       case 'cache-primary-key':
         return 'setup-graalvm-cache-primary-key'

__tests__/cleanup.test.ts

@@ -24,21 +24,23 @@
  * Forked from https://github.com/actions/setup-java/blob/5b36705a13905facb447b6812d613a06a07e371d/__tests__/cleanup-java.test.ts
  */
 
-import { run as cleanup } from '../src/cleanup'
-import * as core from '@actions/core'
-import * as cache from '@actions/cache'
+import { jest } from '@jest/globals'
+import * as cache from '../__fixtures__/cache.js'
+import * as core from '../__fixtures__/core.js'
+
+// Mocks should be declared before the module being tested is imported.
+jest.unstable_mockModule('@actions/core', () => core)
+jest.unstable_mockModule('@actions/cache', () => cache)
+
+// The module being tested should be imported dynamically. This ensures that the
+// mocks are used in place of any actual dependencies.
+const { run } = await import('../src/cleanup.js')
 
 describe('cleanup', () => {
-  let spyWarning: jest.SpyInstance<void, Parameters<typeof core.warning>>
-  let spyInfo: jest.SpyInstance<void, Parameters<typeof core.info>>
-  let spyCacheSave: jest.SpyInstance<ReturnType<typeof cache.saveCache>, Parameters<typeof cache.saveCache>>
-
   beforeEach(() => {
-    spyWarning = jest.spyOn(core, 'warning')
-    spyWarning.mockImplementation(() => null)
-    spyInfo = jest.spyOn(core, 'info')
-    spyInfo.mockImplementation(() => null)
-    spyCacheSave = jest.spyOn(cache, 'saveCache')
+    core.info.mockImplementation(() => null)
+    core.warning.mockImplementation(() => null)
+    core.debug.mockImplementation(() => null)
     createStateForSuccessfulRestore()
   })
   afterEach(() => {
@@ -46,38 +48,40 @@ describe('cleanup', () => {
   })
 
   it('does not fail nor warn even when the save process throws a ReserveCacheError', async () => {
-    spyCacheSave.mockImplementation((_paths: string[], _key: string) =>
+    cache.saveCache.mockImplementation((_paths: string[], _key: string) =>
       Promise.reject(
         new cache.ReserveCacheError('Unable to reserve cache with key, another job may be creating this cache.')
       )
     )
-    jest.spyOn(core, 'getInput').mockImplementation((name: string) => {
+    core.getInput.mockImplementation((name: string) => {
       return name === 'cache' ? 'gradle' : ''
     })
-    await cleanup()
-    expect(spyCacheSave).toHaveBeenCalled()
-    expect(spyWarning).not.toHaveBeenCalled()
+    await run()
+    expect(cache.saveCache).toHaveBeenCalled()
+    expect(core.warning).not.toHaveBeenCalled()
   })
 
   it('does not fail even though the save process throws error', async () => {
-    spyCacheSave.mockImplementation((_paths: string[], _key: string) => Promise.reject(new Error('Unexpected error')))
-    jest.spyOn(core, 'getInput').mockImplementation((name: string) => {
+    cache.saveCache.mockImplementation((_paths: string[], _key: string) =>
+      Promise.reject(new Error('Unexpected error'))
+    )
+    core.getInput.mockImplementation((name: string) => {
       return name === 'cache' ? 'gradle' : ''
     })
-    await cleanup()
-    expect(spyCacheSave).toHaveBeenCalled()
+    await run()
+    expect(cache.saveCache).toHaveBeenCalled()
   })
 })
 
 function resetState() {
-  jest.spyOn(core, 'getState').mockReset()
+  core.getState.mockReset()
 }
 
 /**
  * Create states to emulate a successful restore process.
  */
 function createStateForSuccessfulRestore() {
-  jest.spyOn(core, 'getState').mockImplementation((name) => {
+  core.getState.mockImplementation((name) => {
     switch (name) {
       case 'cache-primary-key':
         return 'setup-java-cache-primary-key'

__tests__/gds.test.ts

@@ -1,10 +1,12 @@
 import * as path from 'path'
 import { downloadGraalVM, downloadGraalVMEELegacy, fetchArtifact, fetchArtifactEE } from '../src/gds'
 import { expect, test } from '@jest/globals'
+import { fileURLToPath } from 'url'
 
 const TEST_USER_AGENT = 'GraalVMGitHubActionTest/1.0.4'
 
-process.env['RUNNER_TEMP'] = path.join(__dirname, 'TEMP')
+const dirname = path.dirname(fileURLToPath(import.meta.url))
+process.env['RUNNER_TEMP'] = path.join(dirname, 'TEMP')
 
 test('fetch artifacts', async () => {
   let artifact = await fetchArtifact(TEST_USER_AGENT, 'isBase:True', '17.0.12')

__tests__/graalvm.test.ts

@@ -4,9 +4,11 @@ import { expect, test } from '@jest/globals'
 import { getTaggedRelease } from '../src/utils'
 import { findGraalVMVersion, findHighestJavaVersion, findLatestEABuildDownloadUrl } from '../src/graalvm'
 import { GRAALVM_GH_USER, GRAALVM_RELEASES_REPO } from '../src/constants'
+import { fileURLToPath } from 'url'
 
-process.env['RUNNER_TOOL_CACHE'] = path.join(__dirname, 'TOOL_CACHE')
-process.env['RUNNER_TEMP'] = path.join(__dirname, 'TEMP')
+const dirname = path.dirname(fileURLToPath(import.meta.url))
+process.env['RUNNER_TOOL_CACHE'] = path.join(dirname, 'TOOL_CACHE')
+process.env['RUNNER_TEMP'] = path.join(dirname, 'TEMP')
 
 test('request invalid version/javaVersion', async () => {
   for (const combination of [

__tests__/liberica.test.ts

@@ -3,9 +3,11 @@ import * as c from '../src/constants'
 import * as path from 'path'
 import * as semver from 'semver'
 import { expect, test } from '@jest/globals'
+import { fileURLToPath } from 'url'
 
-process.env['RUNNER_TOOL_CACHE'] = path.join(__dirname, 'TOOL_CACHE')
-process.env['RUNNER_TEMP'] = path.join(__dirname, 'TEMP')
+const dirname = path.dirname(fileURLToPath(import.meta.url))
+process.env['RUNNER_TOOL_CACHE'] = path.join(dirname, 'TOOL_CACHE')
+process.env['RUNNER_TEMP'] = path.join(dirname, 'TEMP')
 
 /* eslint jest/expect-expect: ["error", { "assertFunctionNames": ["expect", "expectLatestToBe", "expectURL"] }] */
 

__tests__/mandrel.test.ts

@@ -2,9 +2,11 @@ import * as path from 'path'
 import * as mandrel from '../src/mandrel'
 import { expect, test } from '@jest/globals'
 import { getLatestRelease } from '../src/utils'
+import { fileURLToPath } from 'url'
 
-process.env['RUNNER_TOOL_CACHE'] = path.join(__dirname, 'TOOL_CACHE')
-process.env['RUNNER_TEMP'] = path.join(__dirname, 'TEMP')
+const dirname = path.dirname(fileURLToPath(import.meta.url))
+process.env['RUNNER_TOOL_CACHE'] = path.join(dirname, 'TOOL_CACHE')
+process.env['RUNNER_TEMP'] = path.join(dirname, 'TEMP')
 
 test('request invalid version/javaVersion combination', async () => {
   for (const combination of [

__tests__/msvc.test.ts

@@ -2,9 +2,11 @@ import * as path from 'path'
 import { expect, test } from '@jest/globals'
 import { needsWindowsEnvironmentSetup } from '../src/msvc'
 import { VERSION_DEV, VERSION_LATEST } from '../src/constants'
+import { fileURLToPath } from 'url'
 
-process.env['RUNNER_TOOL_CACHE'] = path.join(__dirname, 'TOOL_CACHE')
-process.env['RUNNER_TEMP'] = path.join(__dirname, 'TEMP')
+const dirname = path.dirname(fileURLToPath(import.meta.url))
+process.env['RUNNER_TOOL_CACHE'] = path.join(dirname, 'TOOL_CACHE')
+process.env['RUNNER_TEMP'] = path.join(dirname, 'TEMP')
 
 test('decide whether Window env must be set up for GraalVM for JDK', async () => {
   for (const javaVersion of ['17', '17.0.8', '17.0', '21', '22', '22-ea', '23-ea', VERSION_DEV]) {

__tests__/sbom.test.ts

@@ -1,52 +1,34 @@
+/* eslint-disable @typescript-eslint/no-explicit-any */
+
 import * as c from '../src/constants'
-import { setUpSBOMSupport, processSBOM } from '../src/features/sbom'
-import * as core from '@actions/core'
-import * as github from '@actions/github'
-import * as glob from '@actions/glob'
 import { join } from 'path'
 import { tmpdir } from 'os'
+import { expect, jest } from '@jest/globals'
 import { mkdtempSync, writeFileSync, rmSync } from 'fs'
+import * as core from '../__fixtures__/core.js'
+import * as glob from '../__fixtures__/glob.js'
+import * as github from '../__fixtures__/github.js'
 
-jest.mock('@actions/glob')
-jest.mock('@actions/github', () => ({
-  getOctokit: jest.fn(() => ({
-    request: jest.fn().mockResolvedValue(undefined)
-  })),
-  context: {
-    repo: {
-      owner: 'test-owner',
-      repo: 'test-repo'
-    },
-    sha: 'test-sha',
-    ref: 'test-ref',
-    workflow: 'test-workflow',
-    job: 'test-job',
-    runId: '12345'
-  }
-}))
+// Mocks should be declared before the module being tested is imported.
+jest.unstable_mockModule('@actions/core', () => core)
+jest.unstable_mockModule('@actions/glob', () => glob)
+jest.unstable_mockModule('@actions/github', () => github)
+
+// The module being tested should be imported dynamically. This ensures that the
+// mocks are used in place of any actual dependencies.
+const { setUpSBOMSupport, processSBOM } = await import('../src/features/sbom.js')
 
 function mockFindSBOM(files: string[]) {
-  const mockCreate = jest.fn().mockResolvedValue({
-    glob: jest.fn().mockResolvedValue(files)
-  })
-  ;(glob.create as jest.Mock).mockImplementation(mockCreate)
+  glob.create.mockImplementation(
+    jest.fn<() => Promise<any>>().mockResolvedValue({
+      glob: jest.fn<() => Promise<string[]>>().mockResolvedValue(files)
+    })
+  )
 }
 
-// Mocks the GitHub dependency submission API return value
-// 'undefined' is treated as a successful request
-function mockGithubAPIReturnValue(returnValue: Error | undefined = undefined) {
-  const mockOctokit = {
-    request:
-      returnValue === undefined ? jest.fn().mockResolvedValue(returnValue) : jest.fn().mockRejectedValue(returnValue)
-  }
-  ;(github.getOctokit as jest.Mock).mockReturnValue(mockOctokit)
-  return mockOctokit
-}
+const request = jest.fn<any>().mockResolvedValue(undefined)
 
 describe('sbom feature', () => {
-  let spyInfo: jest.SpyInstance<void, Parameters<typeof core.info>>
-  let spyWarning: jest.SpyInstance<void, Parameters<typeof core.warning>>
-  let spyExportVariable: jest.SpyInstance<void, Parameters<typeof core.exportVariable>>
   let workspace: string
   let originalEnv: NodeJS.ProcessEnv
   const javaVersion = '24.0.0'
@@ -62,12 +44,11 @@ describe('sbom feature', () => {
     }
 
     workspace = mkdtempSync(join(tmpdir(), 'setup-graalvm-sbom-'))
-    mockGithubAPIReturnValue()
 
-    spyInfo = jest.spyOn(core, 'info').mockImplementation(() => null)
-    spyWarning = jest.spyOn(core, 'warning').mockImplementation(() => null)
-    spyExportVariable = jest.spyOn(core, 'exportVariable').mockImplementation(() => null)
-    jest.spyOn(core, 'getInput').mockImplementation((name: string) => {
+    core.info.mockImplementation(() => null)
+    core.warning.mockImplementation(() => null)
+    core.debug.mockImplementation(() => null)
+    core.getInput.mockImplementation((name: string) => {
       if (name === 'native-image-enable-sbom') {
         return 'true'
       }
@@ -76,14 +57,17 @@ describe('sbom feature', () => {
       }
       return ''
     })
+
+    github.getOctokit.mockImplementation(
+      jest.fn<any>(() => ({
+        request: request
+      }))
+    )
   })
 
   afterEach(() => {
     process.env = originalEnv
     jest.clearAllMocks()
-    spyInfo.mockRestore()
-    spyWarning.mockRestore()
-    spyExportVariable.mockRestore()
     rmSync(workspace, { recursive: true, force: true })
   })
 
@@ -117,35 +101,35 @@ describe('sbom feature', () => {
     it('should set the SBOM option when activated', () => {
       setUpSBOMSupport(javaVersion, distribution)
 
-      expect(spyExportVariable).toHaveBeenCalledWith(
+      expect(core.exportVariable).toHaveBeenCalledWith(
         c.NATIVE_IMAGE_OPTIONS_ENV,
         expect.stringContaining('--enable-sbom=export')
       )
-      expect(spyInfo).toHaveBeenCalledWith('Enabled SBOM generation for Native Image build')
-      expect(spyWarning).not.toHaveBeenCalled()
+      expect(core.info).toHaveBeenCalledWith('Enabled SBOM generation for Native Image build')
+      expect(core.warning).not.toHaveBeenCalled()
     })
 
     it('should not set the SBOM option when not activated', () => {
-      jest.spyOn(core, 'getInput').mockReturnValue('false')
+      core.getInput.mockReturnValue('false')
       setUpSBOMSupport(javaVersion, distribution)
 
-      expect(spyExportVariable).not.toHaveBeenCalled()
-      expect(spyInfo).not.toHaveBeenCalled()
-      expect(spyWarning).not.toHaveBeenCalled()
+      expect(core.exportVariable).not.toHaveBeenCalled()
+      expect(core.info).not.toHaveBeenCalled()
+      expect(core.warning).not.toHaveBeenCalled()
     })
   })
 
   describe('process', () => {
     async function setUpAndProcessSBOM(sbom: object): Promise<void> {
       setUpSBOMSupport(javaVersion, distribution)
-      spyInfo.mockClear()
+      core.info.mockClear()
 
       // Mock 'native-image' invocation by creating the SBOM file
       const sbomPath = join(workspace, 'test.sbom.json')
       writeFileSync(sbomPath, JSON.stringify(sbom, null, 2))
 
       mockFindSBOM([sbomPath])
-      jest.spyOn(core, 'getState').mockReturnValue(javaVersion)
+      core.getState.mockReturnValue(javaVersion)
 
       await processSBOM()
     }
@@ -198,12 +182,12 @@ describe('sbom feature', () => {
     it('should process SBOM and display components', async () => {
       await setUpAndProcessSBOM(sampleSBOM)
 
-      expect(spyInfo).toHaveBeenCalledWith('Found SBOM: ' + join(workspace, 'test.sbom.json'))
-      expect(spyInfo).toHaveBeenCalledWith('=== SBOM Content ===')
-      expect(spyInfo).toHaveBeenCalledWith('- pkg:maven/org.json/json@20241224')
-      expect(spyInfo).toHaveBeenCalledWith('- pkg:maven/com.oracle/main-test-app@1.0-SNAPSHOT')
-      expect(spyInfo).toHaveBeenCalledWith('   depends on: pkg:maven/org.json/json@20241224')
-      expect(spyWarning).not.toHaveBeenCalled()
+      expect(core.info).toHaveBeenCalledWith('Found SBOM: ' + join(workspace, 'test.sbom.json'))
+      expect(core.info).toHaveBeenCalledWith('=== SBOM Content ===')
+      expect(core.info).toHaveBeenCalledWith('- pkg:maven/org.json/json@20241224')
+      expect(core.info).toHaveBeenCalledWith('- pkg:maven/com.oracle/main-test-app@1.0-SNAPSHOT')
+      expect(core.info).toHaveBeenCalledWith('   depends on: pkg:maven/org.json/json@20241224')
+      expect(core.warning).not.toHaveBeenCalled()
     })
 
     it('should handle components without purl', async () => {
@@ -220,14 +204,14 @@ describe('sbom feature', () => {
       }
       await setUpAndProcessSBOM(sbomWithoutPurl)
 
-      expect(spyInfo).toHaveBeenCalledWith('=== SBOM Content ===')
-      expect(spyInfo).toHaveBeenCalledWith('- no-purl-package@1.0.0')
-      expect(spyWarning).not.toHaveBeenCalled()
+      expect(core.info).toHaveBeenCalledWith('=== SBOM Content ===')
+      expect(core.info).toHaveBeenCalledWith('- no-purl-package@1.0.0')
+      expect(core.warning).not.toHaveBeenCalled()
     })
 
     it('should handle missing SBOM file', async () => {
       setUpSBOMSupport(javaVersion, distribution)
-      spyInfo.mockClear()
+      core.info.mockClear()
 
       mockFindSBOM([])
 
@@ -250,10 +234,9 @@ describe('sbom feature', () => {
     })
 
     it('should submit dependencies when processing valid SBOM', async () => {
-      const mockOctokit = mockGithubAPIReturnValue(undefined)
       await setUpAndProcessSBOM(sampleSBOM)
 
-      expect(mockOctokit.request).toHaveBeenCalledWith(
+      expect(request).toHaveBeenCalledWith(
         'POST /repos/{owner}/{repo}/dependency-graph/snapshots',
         expect.objectContaining({
           owner: 'test-owner',
@@ -282,11 +265,15 @@ describe('sbom feature', () => {
           })
         })
       )
-      expect(spyInfo).toHaveBeenCalledWith('Dependency snapshot submitted successfully.')
+      expect(core.info).toHaveBeenCalledWith('Dependency snapshot submitted successfully.')
     })
 
     it('should handle GitHub API submission errors gracefully', async () => {
-      mockGithubAPIReturnValue(new Error('API submission failed'))
+      github.getOctokit.mockImplementation(
+        jest.fn<any>(() => ({
+          request: jest.fn<(a: any, b: any) => Promise<any>>().mockRejectedValue(new Error('API submission failed'))
+        }))
+      )
 
       await expect(setUpAndProcessSBOM(sampleSBOM)).rejects.toBeInstanceOf(Error)
     })