@v2 now points to this release; existing workflows keep working unchanged.

What's new

• Every runner: Linux, Windows and macOS on x64 and arm64, plus x86 and ARMv7 on self-hosted runners.
• Verified download: the CLI must match the release's checksums.txt before it runs. Self-hosted runners keep it in their tool cache.
• version input: pin the CLI, for example version: 3.1.0 (3.1.0 or later). The default stays latest, now found without the GitHub API, so the API rate limit no longer applies.
• Key handling: the key is masked and passed to the CLI through SQUARECLOUD_API_KEY. It is no longer on the command line or saved on the runner, and later steps of the job can run squarecloud too.

Fixes

• workdir is applied. Up to 2.1.2 it was ignored and commands ran in the repository root.

Other changes

• Runs on Node 24, with updated dependencies.
• The action is tested on every GitHub-hosted runner.
• New README with a quick start, examples and notes for running the CLI in a workflow.

CLI 3.1 leaves lockfiles out of uploads; add !package-lock.json (or your lockfile) to squarecloud.ignore to keep sending it.