update CHANGELOG.md

improve logging
mention commit SHA in docs for base parameter
2025-12-26 00:48:20 +00:00 · 2020-10-16 12:27:18 +02:00 · 2020-10-16 12:24:39 +02:00 · 2020-10-16 11:49:15 +02:00 · 2020-10-16 11:44:38 +02:00
17 changed files with 1704 additions and 3340 deletions
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1,7 +1,6 @@
 name: "Build"
 on:
  push:
-    paths-ignore: [ '*.md' ]
    branches:
      - master

--- a/.github/workflows/pull-request-verification.yml
+++ b/.github/workflows/pull-request-verification.yml
@@ -1,10 +1,9 @@
 name: "Pull Request Verification"
 on:
  pull_request:
-    paths-ignore: [ '*.md' ]
    branches:
      - master
-      - '**'
+      - develop

 jobs:
  build:
@@ -30,9 +29,6 @@ jobs:
    - name: filter-test
      if: steps.filter.outputs.any != 'true' || steps.filter.outputs.error == 'true'
      run: exit 1
-    - name: changes-test
-      if: contains(fromJSON(steps.filter.outputs.changes), 'error') || !contains(fromJSON(steps.filter.outputs.changes), 'any')
-      run: exit 1

  test-external:
    runs-on: ubuntu-latest
@@ -75,26 +71,6 @@ jobs:
      if: steps.filter.outputs.any != 'true' || steps.filter.outputs.error == 'true'
      run: exit 1

-  test-local-changes:
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v2
-    - run: echo "NEW FILE" > local
-    - run: git add local
-    - uses: ./
-      id: filter
-      with:
-        base: HEAD
-        filters: |
-          local:
-            - local
-    - name: filter-test
-      if: steps.filter.outputs.local != 'true'
-      run: exit 1
-    - name: count-test
-      if: steps.filter.outputs.local_count != 1
-      run: exit 1
-
  test-change-type:
    runs-on: ubuntu-latest
    steps:
@@ -126,12 +102,15 @@ jobs:
    - name: Print 'deleted_files'
      run: echo ${{steps.filter.outputs.deleted_files}}
    - name: filter-test
+      # only single quotes are supported in GH action literal
+      # single quote needs to be escaped with single quote
+      # '''add.txt''' resolves to string 'add.txt'
      if: |
        steps.filter.outputs.added != 'true'
        || steps.filter.outputs.deleted != 'true'
        || steps.filter.outputs.modified != 'true'
        || steps.filter.outputs.any != 'true'
-        || steps.filter.outputs.added_files != 'add.txt'
-        || steps.filter.outputs.modified_files != 'LICENSE'
-        || steps.filter.outputs.deleted_files != 'README.md'
+        || steps.filter.outputs.added_files != '''add.txt'''
+        || steps.filter.outputs.modified_files != '''LICENSE'''
+        || steps.filter.outputs.deleted_files != '''README.md'''
      run: exit 1
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,49 +1,5 @@
 # Changelog

-## v2.10.2
- [Fix getLocalRef() returns wrong ref](https://github.com/dorny/paths-filter/pull/91)
-
-## v2.10.1
- [Improve robustness of change detection](https://github.com/dorny/paths-filter/pull/85)
-
-## v2.10.0
- [Add ref input parameter](https://github.com/dorny/paths-filter/pull/82)
- [Fix change detection in PR when pullRequest.changed_files is incorrect](https://github.com/dorny/paths-filter/pull/83)
-
-## v2.9.3
- [Fix change detection when base is a tag](https://github.com/dorny/paths-filter/pull/78)
-
-## v2.9.2
- [Fix fetching git history](https://github.com/dorny/paths-filter/pull/75)
-
-## v2.9.1
- [Fix fetching git history + fallback to unshallow repo](https://github.com/dorny/paths-filter/pull/74)
-
-## v2.9.0
- [Add list-files: csv format](https://github.com/dorny/paths-filter/pull/68)
-
-## v2.8.0
- [Add count output variable](https://github.com/dorny/paths-filter/pull/65)
- [Fix log grouping of changes](https://github.com/dorny/paths-filter/pull/61)
-
-## v2.7.0
- [Add "changes" output variable to support matrix job configuration](https://github.com/dorny/paths-filter/pull/59)
- [Improved listing of matching files with `list-files: shell` and `list-files: escape` options](https://github.com/dorny/paths-filter/pull/58)
-
-## v2.6.0
- [Support local changes](https://github.com/dorny/paths-filter/pull/53)
-
-## v2.5.3
- [Fixed mapping of removed/deleted change status from github API](https://github.com/dorny/paths-filter/pull/51)
- [Fixed retrieval of all changes via Github API when there are 100+ changes](https://github.com/dorny/paths-filter/pull/50)
-
-## v2.5.2
- [Add support for multiple patterns when using file status](https://github.com/dorny/paths-filter/pull/48)
- [Use picomatch directly instead of micromatch wrapper](https://github.com/dorny/paths-filter/pull/49)
-
-## v2.5.1
- [Improved path matching with micromatch](https://github.com/dorny/paths-filter/pull/46)
-
 ## v2.5.0
 - [Support workflows triggered by any event](https://github.com/dorny/paths-filter/pull/44)

--- a/README.md
+++ b/README.md
@@ -1,15 +1,11 @@
 # Paths Changes Filter

-[Github Action](https://github.com/features/actions) that enables conditional execution of workflow steps and jobs, based on the files modified by pull request, on a feature
-branch, or by the recently pushed commits.
+This [Github Action](https://github.com/features/actions) enables conditional execution of workflow steps and jobs,
+based on the files modified by pull request, feature branch or in pushed commits.

-Run slow tasks like integration tests or deployments only for changed components. It saves time and resources, especially in monorepo setups.
+It saves time and resources especially in monorepo setups, where you can run slow tasks (e.g. integration tests or deployments) only for changed components.
 Github workflows built-in [path filters](https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions#onpushpull_requestpaths)
-don't allow this because they don't work on a level of individual jobs or steps.
-
-**Real world usage examples:**
- [sentry.io](https://sentry.io/) - [backend-test-py3.6.yml](https://github.com/getsentry/sentry/blob/ca0e43dc5602a9ab2e06d3f6397cc48fb5a78541/.github/workflows/backend-test-py3.6.yml#L32)
- [GoogleChrome/web.dev](https://web.dev/) - [lint-and-test-workflow.yml](https://github.com/GoogleChrome/web.dev/blob/e1f0c28964e99ce6a996c1e3fd3ee1985a7a04f6/.github/workflows/lint-and-test-workflow.yml#L33)
+doesn't allow this because they doesn't work on a level of individual jobs or steps.


 ## Supported workflows:
@@ -17,28 +13,24 @@ don't allow this because they don't work on a level of individual jobs or steps.
  - Workflow triggered by **[pull_request](https://docs.github.com/en/actions/reference/events-that-trigger-workflows#pull_request)**
    or **[pull_request_target](https://docs.github.com/en/actions/reference/events-that-trigger-workflows#pull_request_target)** event
  - Changes are detected against the pull request base branch
-  - Uses Github REST API to fetch a list of modified files
+  - Uses Github REST API to fetch list of modified files
 - **Feature branches:**
  - Workflow triggered by **[push](https://docs.github.com/en/actions/reference/events-that-trigger-workflows#push)**
  or any other **[event](https://docs.github.com/en/free-pro-team@latest/actions/reference/events-that-trigger-workflows)**
  - The `base` input parameter must not be the same as the branch that triggered the workflow
-  - Changes are detected against the merge-base with the configured base branch or the default branch
+  - Changes are detected against the merge-base with configured base branch or default branch
  - Uses git commands to detect changes - repository must be already [checked out](https://github.com/actions/checkout)
- **Master, Release, or other long-lived branches:**
+- **Master, Release or other long-lived branches:**
  - Workflow triggered by **[push](https://docs.github.com/en/actions/reference/events-that-trigger-workflows#push)** event
-  when `base` input parameter is the same as the branch that triggered the workflow:
+  when `base` input parameter is same as the branch that triggered the workflow:
    - Changes are detected against the most recent commit on the same branch before the push
  - Workflow triggered by any other **[event](https://docs.github.com/en/free-pro-team@latest/actions/reference/events-that-trigger-workflows)**
  when `base` input parameter is commit SHA:
    - Changes are detected against the provided `base` commit
  - Workflow triggered by any other **[event](https://docs.github.com/en/free-pro-team@latest/actions/reference/events-that-trigger-workflows)**
-  when `base` input parameter is the same as the branch that triggered the workflow:
-    - Changes are detected from the last commit
+  when `base` input parameter is same as the branch that triggered the workflow:
+    - Changes are detected from last commit
  - Uses git commands to detect changes - repository must be already [checked out](https://github.com/actions/checkout)
- **Local changes**
-  - Workflow triggered by any event when `base` input parameter is set to `HEAD`
-  - Changes are detected against the current HEAD
-  - Untracked files are ignored

 ## Example
 ```yaml
@@ -56,23 +48,27 @@ don't allow this because they don't work on a level of individual jobs or steps.
 For more scenarios see [examples](#examples) section.

 ## Notes:
- Paths expressions are evaluated using [picomatch](https://github.com/micromatch/picomatch) library.
-  Documentation for path expression format can be found on the project GitHub page.
- Picomatch [dot](https://github.com/micromatch/picomatch#options) option is set to true.
-  Globbing will also match paths where file or folder name starts with a dot.
- It's recommended to quote your path expressions with `'` or `"`. Otherwise, you will get an error if it starts with `*`.
+- Paths expressions are evaluated using [minimatch](https://github.com/isaacs/minimatch) library.
+  Documentation for path expression format can be found on project github page.
+- Minimatch [dot](https://www.npmjs.com/package/minimatch#dot) option is set to true.
+  Globbing will match also paths where file or folder name starts with a dot.
+- It's recommended to quote your path expressions with `'` or `"`. Otherwise you will get an error if it starts with `*`.
 - Local execution with [act](https://github.com/nektos/act) works only with alternative runner image. Default runner doesn't have `git` binary.
  - Use: `act -P ubuntu-latest=nektos/act-environments-ubuntu:18.04`


 # What's New
- Add `ref` input parameter
- Add `list-files: csv` format
- Configure matrix job to run for each folder with changes using `changes` output
- Improved listing of matching files with `list-files: shell` and `list-files: escape` options
- Paths expressions are now evaluated using [picomatch](https://github.com/micromatch/picomatch) library
+- Support workflows triggered by any event
+- Fixed compatibility with older (<2.23) versions of git
+- Support for tag pushes and tags as a base reference
+- Fixes for various edge cases when event payload is incomplete
+  - Supports local execution with [act](https://github.com/nektos/act)
+- Fixed behavior of feature branch workflow:
+  - Detects only changes introduced by feature branch. Later modifications on base branch are ignored.
+- Filter by type of file change:
+  - Optionally consider if file was added, modified or deleted

-For more information, see [CHANGELOG](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
+For more information see [CHANGELOG](https://github.com/actions/checkout/blob/main/CHANGELOG.md)

 # Usage

@@ -80,81 +76,70 @@ For more information, see [CHANGELOG](https://github.com/dorny/paths-filter/blob
 - uses: dorny/paths-filter@v2
  with:
    # Defines filters applied to detected changed files.
-    # Each filter has a name and a list of rules.
+    # Each filter has a name and list of rules.
    # Rule is a glob expression - paths of all changed
    # files are matched against it.
    # Rule can optionally specify if the file
-    # should be added, modified, or deleted.
-    # For each filter, there will be a corresponding output variable to
+    # should be added, modified or deleted.
+    # For each filter there will be corresponding output variable to
    # indicate if there's a changed file matching any of the rules.
-    # Optionally, there can be a second output variable
+    # Optionally there can be a second output variable
    # set to list of all files matching the filter.
-    # Filters can be provided inline as a string (containing valid YAML document),
-    # or as a relative path to a file (e.g.: .github/filters.yaml).
+    # Filters can be provided inline as a string (containing valid YAML document)
+    # or as a relative path to separate file (e.g.: .github/filters.yaml).
+    # Multiline string is evaluated as embedded filter definition,
+    # single line string is evaluated as relative path to separate file.
    # Filters syntax is documented by example - see examples section.
    filters: ''

-    # Branch, tag, or commit SHA against which the changes will be detected.
-    # If it references the same branch it was pushed to,
+    # Branch, tag or commit SHA against which the changes will be detected.
+    # If it references same branch it was pushed to,
    # changes are detected against the most recent commit before the push.
-    # Otherwise, it uses git merge-base to find the best common ancestor between
+    # Otherwise it uses git merge-base to find best common ancestor between
    # current branch (HEAD) and base.
    # When merge-base is found, it's used for change detection - only changes
-    # introduced by the current branch are considered.
+    # introduced by current branch are considered.
    # All files are considered as added if there is no common ancestor with
    # base branch or no previous commit.
    # This option is ignored if action is triggered by pull_request event.
    # Default: repository default branch (e.g. master)
    base: ''

-    # Git reference (e.g. branch name) from which the changes will be detected.
-    # Useful when workflow can be triggered only on the default branch (e.g. repository_dispatch event)
-    # but you want to get changes on a different branch.
-    # This option is ignored if action is triggered by pull_request event.
-    # default: ${{ github.ref }}
-    ref:
-
-    # How many commits are initially fetched from the base branch.
+    # How many commits are initially fetched from base branch.
    # If needed, each subsequent fetch doubles the
    # previously requested number of commits until the merge-base
-    # is found, or there are no more commits in the history.
+    # is found or there are no more commits in the history.
    # This option takes effect only when changes are detected
    # using git against base branch (feature branch workflow).
-    # Default: 100
+    # Default: 20
    initial-fetch-depth: ''

    # Enables listing of files matching the filter:
    #   'none'  - Disables listing of matching files (default).
-    #   'csv'   - Coma separated list of filenames.
-    #             If needed, it uses double quotes to wrap filename with unsafe characters.
-    #   'json'  - File paths are formatted as JSON array.
-    #   'shell' - Space delimited list usable as command-line argument list in Linux shell.
-    #             If needed, it uses single or double quotes to wrap filename with unsafe characters.
-    #   'escape'- Space delimited list usable as command-line argument list in Linux shell.
-    #             Backslash escapes every potentially unsafe character.
+    #   'json'  - Matching files paths are formatted as JSON array.
+    #   'shell' - Matching files paths are escaped and space-delimited.
+    #             Output is usable as command line argument list in linux shell.
    # Default: none
    list-files: ''

    # Relative path under $GITHUB_WORKSPACE where the repository was checked out.
    working-directory: ''

-    # Personal access token used to fetch a list of changed files
+    # Personal access token used to fetch list of changed files
    # from Github REST API.
-    # It's only used if action is triggered by a pull request event.
+    # It's used only if action is triggered by pull request event.
    # Github token from workflow context is used as default value.
-    # If an empty string is provided, the action falls back to detect
+    # If empty string is provided, action falls back to detect
    # changes using git commands.
    # Default: ${{ github.token }}
    token: ''
 ```

 ## Outputs
- For each filter, it sets output variable named by the filter to the text:
+- For each filter it sets output variable named by the filter to the text:
   - `'true'` - if **any** of changed files matches any of filter rules
   - `'false'` - if **none** of changed files matches any of filter rules
- For each filter, it sets an output variable with the name `${FILTER_NAME}_count` to the count of matching files.
- If enabled, for each filter it sets an output variable with the name `${FILTER_NAME}_files`. It will contain a list of all files matching the filter.
- `changes` - JSON array with names of all filters matching any of the changed files.
+- If enabled, for each filter it sets output variable with name `${FILTER_NAME}_files`. It will contain list of all files matching the filter.

 # Examples

@@ -238,41 +223,6 @@ jobs:
 ```
 </details>

-<details>
-<summary>Use change detection to configure matrix job</summary>
-
-```yaml
-jobs:
-  # JOB to run change detection
-  changes:
-    runs-on: ubuntu-latest
-    outputs:
-      # Expose matched filters as job 'packages' output variable
-      packages: ${{ steps.filter.outputs.changes }}
-    steps:
-    # For pull requests it's not necessary to checkout the code
-    - uses: dorny/paths-filter@v2
-      id: filter
-      with:
-        filters: |
-          package1: src/package1
-          package2: src/package2
-
-  # JOB to build and test each of modified packages
-  build:
-    needs: changes
-    strategy:
-      matrix:
-        # Parse JSON array containing names of all filters matching any of changed files
-        # e.g. ['package1', 'package2'] if both package folders contains changes
-        package: ${{ fromJSON(needs.changes.outputs.packages) }}
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v2
-      - ...
-```
-</details>
-
 ## Change detection workflows

 <details>
@@ -281,7 +231,7 @@ jobs:
 ```yaml
 on:
  pull_request:
-    branches: # PRs to the following branches will trigger the workflow
+    branches: # PRs to following branches will trigger the workflow
      - master
      - develop
 jobs:
@@ -324,33 +274,6 @@ jobs:
 <details>
  <summary><b>Long lived branches:</b> Detect changes against the most recent commit on the same branch before the push</summary>

-```yaml
-on:
-  push:
-    branches: # Push to the following branches will trigger the workflow
-      - master
-      - develop
-      - release/**
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v2
-    - uses: dorny/paths-filter@v2
-      id: filter
-      with:
-        # Use context to get the branch where commits were pushed.
-        # If there is only one long-lived branch (e.g. master),
-        # you can specify it directly.
-        # If it's not configured, the repository default branch is used.
-        base: ${{ github.ref }}
-        filters: ... # Configure your filters
-```
-</details>
-
-<details>
-  <summary><b>Local changes:</b> Detect staged and unstaged local changes</summary>
-
 ```yaml
 on:
  push:
@@ -363,16 +286,14 @@ jobs:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v2
-
-      # Some action that modifies files tracked by git (e.g. code linter)
-    - uses: johndoe/some-action@v1
-
-      # Filter to detect which files were modified
-      # Changes could be, for example, automatically committed
    - uses: dorny/paths-filter@v2
      id: filter
      with:
-        base: HEAD
+        # Use context to get branch where commits were pushed.
+        # If there is only one long lived branch (e.g. master),
+        # you can specify it directly.
+        # If it's not configured, the repository default branch is used.
+        base: ${{ github.ref }}
        filters: ... # Configure your filters
 ```
 </details>
@@ -419,20 +340,15 @@ jobs:
      id: filter
      with:
        # Changed file can be 'added', 'modified', or 'deleted'.
-        # By default, the type of change is not considered.
-        # Optionally, it's possible to specify it using nested
-        # dictionary, where the type of change composes the key.
-        # Multiple change types can be specified using `|` as the delimiter.
+        # By default the type of change is not considered.
+        # Optionally it's possible to specify it using nested
+        # dictionary, where type(s) of change composes the key.
+        # Multiple change types can be specified using `|` as delimiter.
        filters: |
-          shared: &shared
-            - common/**
-            - config/**
          addedOrModified:
            - added|modified: '**'
          allChanges:
            - added|deleted|modified: '**'
-          addedOrModifiedAnchors:
-            - added|modified: *shared
 ```
 </details>

@@ -449,7 +365,7 @@ jobs:
    # Enable listing of files matching each filter.
    # Paths to files will be available in `${FILTER_NAME}_files` output variable.
    # Paths will be escaped and space-delimited.
-    # Output is usable as command-line argument list in Linux shell
+    # Output is usable as command line argument list in linux shell
    list-files: shell

    # In this example changed files will be checked by linter.
@@ -476,7 +392,7 @@ jobs:
    # Paths will be formatted as JSON array
    list-files: json

-    # In this example all changed files are passed to the following action to do
+    # In this example all changed files are passed to following action to do
    # some custom processing.
    filters: |
      changed:
@@ -484,12 +400,10 @@ jobs:
 - name: Lint Markdown
  uses: johndoe/some-action@v1
  with:
-    files: ${{ steps.filter.outputs.changed_files }}
+    files: ${{ steps.filter.changed_files }}
 ```
 </details>

-# See also
- [test-reporter](https://github.com/dorny/test-reporter) - Displays test results from popular testing frameworks directly in GitHub

 # License

--- a/tests/csv-escape.test.ts
+++ b/tests/csv-escape.test.ts
@@ -1,23 +0,0 @@
-import {csvEscape} from '../src/list-format/csv-escape'
-
-describe('csvEscape() backslash escapes every character except subset of definitely safe characters', () => {
-  test('simple filename should not be modified', () => {
-    expect(csvEscape('file.txt')).toBe('file.txt')
-  })
-
-  test('directory separator should be preserved and not escaped', () => {
-    expect(csvEscape('path/to/file.txt')).toBe('path/to/file.txt')
-  })
-
-  test('filename with spaces should be quoted', () => {
-    expect(csvEscape('file with space')).toBe('"file with space"')
-  })
-
-  test('filename with "," should be quoted', () => {
-    expect(csvEscape('file, with coma')).toBe('"file, with coma"')
-  })
-
-  test('Double quote should be escaped by another double quote', () => {
-    expect(csvEscape('file " with double quote')).toBe('"file "" with double quote"')
-  })
-})
--- a/tests/filter.test.ts
+++ b/tests/filter.test.ts
@@ -98,25 +98,6 @@ describe('matching tests', () => {
    expect(match.dot).toEqual(files)
  })

-  test('matches all except tsx and less files (negate a group with or-ed parts)', () => {
-    const yaml = `
-    backend:
-      - '!(**/*.tsx|**/*.less)'
-    `
-    const filter = new Filter(yaml)
-    const tsxFiles = modified(['src/ui.tsx'])
-    const lessFiles = modified(['src/ui.less'])
-    const pyFiles = modified(['src/server.py'])
-
-    const tsxMatch = filter.match(tsxFiles)
-    const lessMatch = filter.match(lessFiles)
-    const pyMatch = filter.match(pyFiles)
-
-    expect(tsxMatch.backend).toEqual([])
-    expect(lessMatch.backend).toEqual([])
-    expect(pyMatch.backend).toEqual(pyFiles)
-  })
-
  test('matches path based on rules included using YAML anchor', () => {
    const yaml = `
    shared: &shared
@@ -165,20 +146,6 @@ describe('matching specific change status', () => {
    const match = filter.match(files)
    expect(match.addOrModify).toEqual(files)
  })
-
-  test('matches when using an anchor', () => {
-    const yaml = `
-    shared: &shared
-      - common/**/*
-      - config/**/*
-    src:
-      - modified: *shared
-    `
-    let filter = new Filter(yaml)
-    const files = modified(['config/file.js', 'common/anotherFile.js'])
-    const match = filter.match(files)
-    expect(match.src).toEqual(files)
-  })
 })

 function modified(paths: string[]): File[] {
--- a/tests/shell-escape.test.ts
+++ b/tests/shell-escape.test.ts
@@ -1,57 +1,16 @@
-import {backslashEscape, shellEscape} from '../src/list-format/shell-escape'
+import shellEscape from '../src/shell-escape'

-describe('escape() backslash escapes every character except subset of definitely safe characters', () => {
-  test('simple filename should not be modified', () => {
-    expect(backslashEscape('file.txt')).toBe('file.txt')
-  })
-
-  test('directory separator should be preserved and not escaped', () => {
-    expect(backslashEscape('path/to/file.txt')).toBe('path/to/file.txt')
-  })
-
-  test('spaces should be escaped with backslash', () => {
-    expect(backslashEscape('file with space')).toBe('file\\ with\\ space')
-  })
-
-  test('quotes should be escaped with backslash', () => {
-    expect(backslashEscape('file\'with quote"')).toBe('file\\\'with\\ quote\\"')
-  })
-
-  test('$variables should be escaped', () => {
-    expect(backslashEscape('$var')).toBe('\\$var')
-  })
+test('simple path escaped', () => {
+  expect(shellEscape('file')).toBe("'file'")
 })

-describe('shellEscape() returns human readable filenames with as few escaping applied as possible', () => {
-  test('simple filename should not be modified', () => {
-    expect(shellEscape('file.txt')).toBe('file.txt')
-  })
-
-  test('directory separator should be preserved and not escaped', () => {
-    expect(shellEscape('path/to/file.txt')).toBe('path/to/file.txt')
-  })
-
-  test('filename with spaces should be quoted', () => {
-    expect(shellEscape('file with space')).toBe("'file with space'")
-  })
-
-  test('filename with spaces should be quoted', () => {
-    expect(shellEscape('file with space')).toBe("'file with space'")
-  })
-
-  test('filename with $ should be quoted', () => {
-    expect(shellEscape('$var')).toBe("'$var'")
-  })
-
-  test('filename with " should be quoted', () => {
-    expect(shellEscape('file"name')).toBe("'file\"name'")
-  })
-
-  test('filename with single quote should be wrapped in double quotes', () => {
-    expect(shellEscape("file'with quote")).toBe('"file\'with quote"')
-  })
-
-  test('filename with single quote and special characters is split and quoted/escaped as needed', () => {
-    expect(shellEscape("file'with $quote")).toBe("file\\''with $quote'")
-  })
+test('path with space is wrapped with single quotes', () => {
+  expect(shellEscape('file with space')).toBe("'file with space'")
+})
+
+test('path with quote is divided into quoted segments and escaped quote', () => {
+  expect(shellEscape("file'with quote")).toBe("'file'\\''with quote'")
+})
+test('path with leading quote does not have double quotes at beginning', () => {
+  expect(shellEscape("'file-leading-quote")).toBe("\\''file-leading-quote'")
 })
--- a/action.yml
+++ b/action.yml
@@ -9,11 +9,6 @@ inputs:
  working-directory:
    description: 'Relative path under $GITHUB_WORKSPACE where the repository was checked out.'
    required: false
-  ref:
-    description: |
-      Git reference (e.g. branch name) from which the changes will be detected.
-      This option is ignored if action is triggered by pull_request event.
-    required: false
  base:
    description: |
      Git reference (e.g. branch name) against which the changes will be detected. Defaults to repository default branch (e.g. master).
@@ -27,13 +22,8 @@ inputs:
    description: |
      Enables listing of files matching the filter:
        'none'  - Disables listing of matching files (default).
-        'csv'   - Coma separated list of filenames.
-                  If needed it uses double quotes to wrap filename with unsafe characters.
-        'json'  - Serialized as JSON array.
-        'shell' - Space delimited list usable as command line argument list in linux shell.
-                  If needed it uses single or double quotes to wrap filename with unsafe characters.
-        'escape'- Space delimited list usable as command line argument list in linux shell.
-                  Backslash escapes every potentially unsafe character.
+        'json'  - Matching files paths are serialized as JSON array.
+        'shell' - Matching files paths are escaped and space-delimited. Output is usable as command line argument list in linux shell.
    required: true
    default: none
  initial-fetch-depth:
@@ -43,10 +33,7 @@ inputs:
      until the merge-base is found or there are no more commits in the history.
      This option takes effect only when changes are detected using git against different base branch.
    required: false
-    default: '100'
-outputs:
-  changes:
-    description: JSON array with names of all filters matching any of changed files
+    default: '10'
 runs:
  using: 'node12'
  main: 'dist/index.js'
--- a/dist/index.js
+++ b/dist/index.js
--- a/package-lock.json
+++ b/package-lock.json
@@ -3808,12 +3808,6 @@
      "integrity": "sha512-f5j5b/Gf71L+dbqxIpQ4Z2WlmI/mPJ0fOkGGmFgtb6sAu97EPczzbS3/tJKxmcYDj55OX6ssqwDAWOHIYDRDGA==",
      "dev": true
    },
-    "@types/picomatch": {
-      "version": "2.2.1",
-      "resolved": "https://registry.npmjs.org/@types/picomatch/-/picomatch-2.2.1.tgz",
-      "integrity": "sha512-26/tQcDmJXYHiaWAAIjnTVL5nwrT+IVaqFZIbBImAuKk/r/j1r/1hmZ7uaOzG6IknqP3QHcNNQ6QO8Vp28lUoA==",
-      "dev": true
-    },
    "@types/prettier": {
      "version": "2.0.1",
      "resolved": "https://registry.npmjs.org/@types/prettier/-/prettier-2.0.1.tgz",
@@ -4044,111 +4038,6 @@
      "requires": {
        "micromatch": "^3.1.4",
        "normalize-path": "^2.1.1"
-      },
-      "dependencies": {
-        "braces": {
-          "version": "2.3.2",
-          "resolved": "https://registry.npmjs.org/braces/-/braces-2.3.2.tgz",
-          "integrity": "sha512-aNdbnj9P8PjdXU4ybaWLK2IF3jc/EoDYbC7AazW6to3TRsfXxscC9UXOB5iDiEQrkyIbWp2SLQda4+QAa7nc3w==",
-          "dev": true,
-          "requires": {
-            "arr-flatten": "^1.1.0",
-            "array-unique": "^0.3.2",
-            "extend-shallow": "^2.0.1",
-            "fill-range": "^4.0.0",
-            "isobject": "^3.0.1",
-            "repeat-element": "^1.1.2",
-            "snapdragon": "^0.8.1",
-            "snapdragon-node": "^2.0.1",
-            "split-string": "^3.0.2",
-            "to-regex": "^3.0.1"
-          },
-          "dependencies": {
-            "extend-shallow": {
-              "version": "2.0.1",
-              "resolved": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz",
-              "integrity": "sha1-Ua99YUrZqfYQ6huvu5idaxxWiQ8=",
-              "dev": true,
-              "requires": {
-                "is-extendable": "^0.1.0"
-              }
-            }
-          }
-        },
-        "fill-range": {
-          "version": "4.0.0",
-          "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-4.0.0.tgz",
-          "integrity": "sha1-1USBHUKPmOsGpj3EAtJAPDKMOPc=",
-          "dev": true,
-          "requires": {
-            "extend-shallow": "^2.0.1",
-            "is-number": "^3.0.0",
-            "repeat-string": "^1.6.1",
-            "to-regex-range": "^2.1.0"
-          },
-          "dependencies": {
-            "extend-shallow": {
-              "version": "2.0.1",
-              "resolved": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz",
-              "integrity": "sha1-Ua99YUrZqfYQ6huvu5idaxxWiQ8=",
-              "dev": true,
-              "requires": {
-                "is-extendable": "^0.1.0"
-              }
-            }
-          }
-        },
-        "is-number": {
-          "version": "3.0.0",
-          "resolved": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz",
-          "integrity": "sha1-JP1iAaR4LPUFYcgQJ2r8fRLXEZU=",
-          "dev": true,
-          "requires": {
-            "kind-of": "^3.0.2"
-          },
-          "dependencies": {
-            "kind-of": {
-              "version": "3.2.2",
-              "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz",
-              "integrity": "sha1-MeohpzS6ubuw8yRm2JOupR5KPGQ=",
-              "dev": true,
-              "requires": {
-                "is-buffer": "^1.1.5"
-              }
-            }
-          }
-        },
-        "micromatch": {
-          "version": "3.1.10",
-          "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.10.tgz",
-          "integrity": "sha512-MWikgl9n9M3w+bpsY3He8L+w9eF9338xRl8IAO5viDizwSzziFEyUzo2xrrloB64ADbTf8uA8vRqqttDTOmccg==",
-          "dev": true,
-          "requires": {
-            "arr-diff": "^4.0.0",
-            "array-unique": "^0.3.2",
-            "braces": "^2.3.1",
-            "define-property": "^2.0.2",
-            "extend-shallow": "^3.0.2",
-            "extglob": "^2.0.4",
-            "fragment-cache": "^0.2.1",
-            "kind-of": "^6.0.2",
-            "nanomatch": "^1.2.9",
-            "object.pick": "^1.3.0",
-            "regex-not": "^1.0.0",
-            "snapdragon": "^0.8.1",
-            "to-regex": "^3.0.2"
-          }
-        },
-        "to-regex-range": {
-          "version": "2.1.1",
-          "resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-2.1.1.tgz",
-          "integrity": "sha1-fIDBe53+vlmeJzZ+DU3VWQFB2zg=",
-          "dev": true,
-          "requires": {
-            "is-number": "^3.0.0",
-            "repeat-string": "^1.6.1"
-          }
-        }
      }
    },
    "argparse": {
@@ -4889,8 +4778,7 @@
    "balanced-match": {
      "version": "1.0.0",
      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz",
-      "integrity": "sha1-ibTRmasr7kneFk6gK4nORi1xt2c=",
-      "dev": true
+      "integrity": "sha1-ibTRmasr7kneFk6gK4nORi1xt2c="
    },
    "base": {
      "version": "0.11.2",
@@ -4965,12 +4853,40 @@
      "version": "1.1.11",
      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
      "integrity": "sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==",
-      "dev": true,
      "requires": {
        "balanced-match": "^1.0.0",
        "concat-map": "0.0.1"
      }
    },
+    "braces": {
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/braces/-/braces-2.3.2.tgz",
+      "integrity": "sha512-aNdbnj9P8PjdXU4ybaWLK2IF3jc/EoDYbC7AazW6to3TRsfXxscC9UXOB5iDiEQrkyIbWp2SLQda4+QAa7nc3w==",
+      "dev": true,
+      "requires": {
+        "arr-flatten": "^1.1.0",
+        "array-unique": "^0.3.2",
+        "extend-shallow": "^2.0.1",
+        "fill-range": "^4.0.0",
+        "isobject": "^3.0.1",
+        "repeat-element": "^1.1.2",
+        "snapdragon": "^0.8.1",
+        "snapdragon-node": "^2.0.1",
+        "split-string": "^3.0.2",
+        "to-regex": "^3.0.1"
+      },
+      "dependencies": {
+        "extend-shallow": {
+          "version": "2.0.1",
+          "resolved": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz",
+          "integrity": "sha1-Ua99YUrZqfYQ6huvu5idaxxWiQ8=",
+          "dev": true,
+          "requires": {
+            "is-extendable": "^0.1.0"
+          }
+        }
+      }
+    },
    "browser-process-hrtime": {
      "version": "1.0.0",
      "resolved": "https://registry.npmjs.org/browser-process-hrtime/-/browser-process-hrtime-1.0.0.tgz",
@@ -5229,8 +5145,7 @@
    "concat-map": {
      "version": "0.0.1",
      "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
-      "integrity": "sha1-2Klr13/Wjfd5OnMDajug1UBdR3s=",
-      "dev": true
+      "integrity": "sha1-2Klr13/Wjfd5OnMDajug1UBdR3s="
    },
    "contains-path": {
      "version": "0.1.0",
@@ -6569,6 +6484,29 @@
        "flat-cache": "^2.0.1"
      }
    },
+    "fill-range": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-4.0.0.tgz",
+      "integrity": "sha1-1USBHUKPmOsGpj3EAtJAPDKMOPc=",
+      "dev": true,
+      "requires": {
+        "extend-shallow": "^2.0.1",
+        "is-number": "^3.0.0",
+        "repeat-string": "^1.6.1",
+        "to-regex-range": "^2.1.0"
+      },
+      "dependencies": {
+        "extend-shallow": {
+          "version": "2.0.1",
+          "resolved": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz",
+          "integrity": "sha1-Ua99YUrZqfYQ6huvu5idaxxWiQ8=",
+          "dev": true,
+          "requires": {
+            "is-extendable": "^0.1.0"
+          }
+        }
+      }
+    },
    "find-up": {
      "version": "2.1.0",
      "resolved": "https://registry.npmjs.org/find-up/-/find-up-2.1.0.tgz",
@@ -6830,26 +6768,6 @@
        "kind-of": "^4.0.0"
      },
      "dependencies": {
-        "is-number": {
-          "version": "3.0.0",
-          "resolved": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz",
-          "integrity": "sha1-JP1iAaR4LPUFYcgQJ2r8fRLXEZU=",
-          "dev": true,
-          "requires": {
-            "kind-of": "^3.0.2"
-          },
-          "dependencies": {
-            "kind-of": {
-              "version": "3.2.2",
-              "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz",
-              "integrity": "sha1-MeohpzS6ubuw8yRm2JOupR5KPGQ=",
-              "dev": true,
-              "requires": {
-                "is-buffer": "^1.1.5"
-              }
-            }
-          }
-        },
        "kind-of": {
          "version": "4.0.0",
          "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz",
@@ -7203,6 +7121,26 @@
        "is-extglob": "^2.1.1"
      }
    },
+    "is-number": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz",
+      "integrity": "sha1-JP1iAaR4LPUFYcgQJ2r8fRLXEZU=",
+      "dev": true,
+      "requires": {
+        "kind-of": "^3.0.2"
+      },
+      "dependencies": {
+        "kind-of": {
+          "version": "3.2.2",
+          "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz",
+          "integrity": "sha1-MeohpzS6ubuw8yRm2JOupR5KPGQ=",
+          "dev": true,
+          "requires": {
+            "is-buffer": "^1.1.5"
+          }
+        }
+      }
+    },
    "is-plain-object": {
      "version": "2.0.4",
      "resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz",
@@ -12387,9 +12325,9 @@
      }
    },
    "kind-of": {
-      "version": "6.0.3",
-      "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz",
-      "integrity": "sha512-dcS1ul+9tmeD95T+x28/ehLgd9mENa3LsvDTtzm3vyBEO7RPptvAD+t44WVXaUjTBRcrpFeFlC8WCruUR456hw==",
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.2.tgz",
+      "integrity": "sha512-s5kLOcnH0XqDO+FvuaLX8DDjZ18CGFk7VygH40QoKPUQhW4e2rvM0rwUq0t8IQDOwYSeLK01U90OjzBTme2QqA==",
      "dev": true
    },
    "kleur": {
@@ -12540,6 +12478,27 @@
      "integrity": "sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==",
      "dev": true
    },
+    "micromatch": {
+      "version": "3.1.10",
+      "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.10.tgz",
+      "integrity": "sha512-MWikgl9n9M3w+bpsY3He8L+w9eF9338xRl8IAO5viDizwSzziFEyUzo2xrrloB64ADbTf8uA8vRqqttDTOmccg==",
+      "dev": true,
+      "requires": {
+        "arr-diff": "^4.0.0",
+        "array-unique": "^0.3.2",
+        "braces": "^2.3.1",
+        "define-property": "^2.0.2",
+        "extend-shallow": "^3.0.2",
+        "extglob": "^2.0.4",
+        "fragment-cache": "^0.2.1",
+        "kind-of": "^6.0.2",
+        "nanomatch": "^1.2.9",
+        "object.pick": "^1.3.0",
+        "regex-not": "^1.0.0",
+        "snapdragon": "^0.8.1",
+        "to-regex": "^3.0.2"
+      }
+    },
    "mime-db": {
      "version": "1.44.0",
      "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.44.0.tgz",
@@ -12565,7 +12524,6 @@
      "version": "3.0.4",
      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz",
      "integrity": "sha512-yJHVQEhyqPLUTgt9B83PXu6W3rx4MvvHvSUvToogpwoGDOUQ+yDrR0HRot+yOCdCO7u4hX3pWft6kWBBcqh0UA==",
-      "dev": true,
      "requires": {
        "brace-expansion": "^1.1.7"
      }
@@ -13019,7 +12977,8 @@
    "picomatch": {
      "version": "2.2.2",
      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.2.2.tgz",
-      "integrity": "sha512-q0M/9eZHzmr0AulXyPwNfZjtwZ/RBZlbN3K3CErVrk50T2ASYI7Bye0EvekFY3IP1Nt2DHu0re+V2ZHIpMkuWg=="
+      "integrity": "sha512-q0M/9eZHzmr0AulXyPwNfZjtwZ/RBZlbN3K3CErVrk50T2ASYI7Bye0EvekFY3IP1Nt2DHu0re+V2ZHIpMkuWg==",
+      "dev": true
    },
    "pify": {
      "version": "2.3.0",
@@ -13547,114 +13506,11 @@
        "walker": "~1.0.5"
      },
      "dependencies": {
-        "braces": {
-          "version": "2.3.2",
-          "resolved": "https://registry.npmjs.org/braces/-/braces-2.3.2.tgz",
-          "integrity": "sha512-aNdbnj9P8PjdXU4ybaWLK2IF3jc/EoDYbC7AazW6to3TRsfXxscC9UXOB5iDiEQrkyIbWp2SLQda4+QAa7nc3w==",
-          "dev": true,
-          "requires": {
-            "arr-flatten": "^1.1.0",
-            "array-unique": "^0.3.2",
-            "extend-shallow": "^2.0.1",
-            "fill-range": "^4.0.0",
-            "isobject": "^3.0.1",
-            "repeat-element": "^1.1.2",
-            "snapdragon": "^0.8.1",
-            "snapdragon-node": "^2.0.1",
-            "split-string": "^3.0.2",
-            "to-regex": "^3.0.1"
-          },
-          "dependencies": {
-            "extend-shallow": {
-              "version": "2.0.1",
-              "resolved": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz",
-              "integrity": "sha1-Ua99YUrZqfYQ6huvu5idaxxWiQ8=",
-              "dev": true,
-              "requires": {
-                "is-extendable": "^0.1.0"
-              }
-            }
-          }
-        },
-        "fill-range": {
-          "version": "4.0.0",
-          "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-4.0.0.tgz",
-          "integrity": "sha1-1USBHUKPmOsGpj3EAtJAPDKMOPc=",
-          "dev": true,
-          "requires": {
-            "extend-shallow": "^2.0.1",
-            "is-number": "^3.0.0",
-            "repeat-string": "^1.6.1",
-            "to-regex-range": "^2.1.0"
-          },
-          "dependencies": {
-            "extend-shallow": {
-              "version": "2.0.1",
-              "resolved": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz",
-              "integrity": "sha1-Ua99YUrZqfYQ6huvu5idaxxWiQ8=",
-              "dev": true,
-              "requires": {
-                "is-extendable": "^0.1.0"
-              }
-            }
-          }
-        },
-        "is-number": {
-          "version": "3.0.0",
-          "resolved": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz",
-          "integrity": "sha1-JP1iAaR4LPUFYcgQJ2r8fRLXEZU=",
-          "dev": true,
-          "requires": {
-            "kind-of": "^3.0.2"
-          },
-          "dependencies": {
-            "kind-of": {
-              "version": "3.2.2",
-              "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz",
-              "integrity": "sha1-MeohpzS6ubuw8yRm2JOupR5KPGQ=",
-              "dev": true,
-              "requires": {
-                "is-buffer": "^1.1.5"
-              }
-            }
-          }
-        },
-        "micromatch": {
-          "version": "3.1.10",
-          "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.10.tgz",
-          "integrity": "sha512-MWikgl9n9M3w+bpsY3He8L+w9eF9338xRl8IAO5viDizwSzziFEyUzo2xrrloB64ADbTf8uA8vRqqttDTOmccg==",
-          "dev": true,
-          "requires": {
-            "arr-diff": "^4.0.0",
-            "array-unique": "^0.3.2",
-            "braces": "^2.3.1",
-            "define-property": "^2.0.2",
-            "extend-shallow": "^3.0.2",
-            "extglob": "^2.0.4",
-            "fragment-cache": "^0.2.1",
-            "kind-of": "^6.0.2",
-            "nanomatch": "^1.2.9",
-            "object.pick": "^1.3.0",
-            "regex-not": "^1.0.0",
-            "snapdragon": "^0.8.1",
-            "to-regex": "^3.0.2"
-          }
-        },
        "minimist": {
          "version": "1.2.0",
          "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz",
          "integrity": "sha1-o1AIsg9BOD7sH7kU9M1d95omQoQ=",
          "dev": true
-        },
-        "to-regex-range": {
-          "version": "2.1.1",
-          "resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-2.1.1.tgz",
-          "integrity": "sha1-fIDBe53+vlmeJzZ+DU3VWQFB2zg=",
-          "dev": true,
-          "requires": {
-            "is-number": "^3.0.0",
-            "repeat-string": "^1.6.1"
-          }
        }
      }
    },
@@ -13889,12 +13745,12 @@
      "dev": true
    },
    "source-map-resolve": {
-      "version": "0.5.3",
-      "resolved": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.5.3.tgz",
-      "integrity": "sha512-Htz+RnsXWk5+P2slx5Jh3Q66vhQj1Cllm0zvnaY98+NFx+Dv2CF/f5O/t8x+KaNdrdIAsruNzoh/KpialbqAnw==",
+      "version": "0.5.2",
+      "resolved": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.5.2.tgz",
+      "integrity": "sha512-MjqsvNwyz1s0k81Goz/9vRBe9SZdB09Bdw+/zYyO+3CuPk6fouTaxscHkgtE8jKvf01kVfl8riHzERQ/kefaSA==",
      "dev": true,
      "requires": {
-        "atob": "^2.1.2",
+        "atob": "^2.1.1",
        "decode-uri-component": "^0.2.0",
        "resolve-url": "^0.2.1",
        "source-map-url": "^0.4.0",
@@ -14358,6 +14214,16 @@
        "safe-regex": "^1.1.0"
      }
    },
+    "to-regex-range": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-2.1.1.tgz",
+      "integrity": "sha1-fIDBe53+vlmeJzZ+DU3VWQFB2zg=",
+      "dev": true,
+      "requires": {
+        "is-number": "^3.0.0",
+        "repeat-string": "^1.6.1"
+      }
+    },
    "tough-cookie": {
      "version": "3.0.1",
      "resolved": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-3.0.1.tgz",
--- a/package.json
+++ b/package.json
@@ -29,14 +29,13 @@
    "@actions/exec": "^1.0.4",
    "@actions/github": "^2.2.0",
    "@octokit/webhooks": "^7.6.2",
-    "picomatch": "^2.2.2"
+    "minimatch": "^3.0.4"
  },
  "devDependencies": {
    "@types/jest": "^25.2.3",
    "@types/js-yaml": "^3.12.4",
    "@types/minimatch": "^3.0.3",
    "@types/node": "^14.0.5",
-    "@types/picomatch": "^2.2.1",
    "@typescript-eslint/parser": "^3.3.0",
    "@zeit/ncc": "^0.22.3",
    "eslint": "^7.3.0",
--- a/src/filter.ts
+++ b/src/filter.ts
@@ -1,5 +1,5 @@
 import * as jsyaml from 'js-yaml'
-import picomatch from 'picomatch'
+import * as minimatch from 'minimatch'
 import {File, ChangeStatus} from './file'

 // Type definition of object we expect to load from YAML
@@ -8,11 +8,11 @@ interface FilterYaml {
 }
 type FilterItemYaml =
  | string // Filename pattern, e.g. "path/to/*.js"
-  | {[changeTypes: string]: string | string[]} // Change status and filename, e.g. added|modified: "path/to/*.js"
+  | {[changeTypes: string]: string} // Change status and filename, e.g. added|modified: "path/to/*.js"
  | FilterItemYaml[] // Supports referencing another rule via YAML anchor

 // Minimatch options used in all matchers
-const MatchOptions = {
+const MinimatchOptions: minimatch.IOptions = {
  dot: true
 }

@@ -20,7 +20,7 @@ const MatchOptions = {
 // Created as simplified form of data in FilterItemYaml
 interface FilterRuleItem {
  status?: ChangeStatus[] // Required change status of the matched files
-  isMatch: (str: string) => boolean // Matches the filename
+  matcher: minimatch.IMinimatch // Matches the filename
 }

 export interface FilterResults {
@@ -63,7 +63,7 @@ export class Filter {

  private isMatch(file: File, patterns: FilterRuleItem[]): boolean {
    return patterns.some(
-      rule => (rule.status === undefined || rule.status.includes(file.status)) && rule.isMatch(file.filename)
+      rule => (rule.status === undefined || rule.status.includes(file.status)) && rule.matcher.match(file.filename)
    )
  }

@@ -73,14 +73,14 @@ export class Filter {
    }

    if (typeof item === 'string') {
-      return [{status: undefined, isMatch: picomatch(item, MatchOptions)}]
+      return [{status: undefined, matcher: new minimatch.Minimatch(item, MinimatchOptions)}]
    }

    if (typeof item === 'object') {
      return Object.entries(item).map(([key, pattern]) => {
-        if (typeof key !== 'string' || (typeof pattern !== 'string' && !Array.isArray(pattern))) {
+        if (typeof key !== 'string' || typeof pattern !== 'string') {
          this.throwInvalidFormatError(
-            `Expected [key:string]= pattern:string | string[], but [${key}:${typeof key}]= ${pattern}:${typeof pattern} found`
+            `Expected [key:string]= pattern:string, but [${key}:${typeof key}]= ${pattern}:${typeof pattern} found`
          )
        }
        return {
@@ -89,7 +89,7 @@ export class Filter {
            .map(x => x.trim())
            .filter(x => x.length > 0)
            .map(x => x.toLowerCase()) as ChangeStatus[],
-          isMatch: picomatch(pattern, MatchOptions)
+          matcher: new minimatch.Minimatch(pattern, MinimatchOptions)
        }
      })
    }
--- a/src/git.ts
+++ b/src/git.ts
@@ -3,7 +3,6 @@ import * as core from '@actions/core'
 import {File, ChangeStatus} from './file'

 export const NULL_SHA = '0000000000000000000000000000000000000000'
-export const HEAD = 'HEAD'

 export async function getChangesInLastCommit(): Promise<File[]> {
  core.startGroup(`Change detection in last commit`)
@@ -18,16 +17,20 @@ export async function getChangesInLastCommit(): Promise<File[]> {
  return parseGitDiffOutput(output)
 }

-export async function getChanges(base: string, head: string): Promise<File[]> {
-  const baseRef = await ensureRefAvailable(base)
-  const headRef = await ensureRefAvailable(head)
+export async function getChanges(ref: string): Promise<File[]> {
+  if (!(await hasCommit(ref))) {
+    // Fetch single commit
+    core.startGroup(`Fetching ${ref} from origin`)
+    await exec('git', ['fetch', '--depth=1', '--no-tags', 'origin', ref])
+    core.endGroup()
+  }

  // Get differences between ref and HEAD
-  core.startGroup(`Change detection ${base}..${head}`)
+  core.startGroup(`Change detection ${ref}..HEAD`)
  let output = ''
  try {
    // Two dots '..' change detection - directly compares two versions
-    output = (await exec('git', ['diff', '--no-renames', '--name-status', '-z', `${baseRef}..${headRef}`])).stdout
+    output = (await exec('git', ['diff', '--no-renames', '--name-status', '-z', `${ref}..HEAD`])).stdout
  } finally {
    fixStdOutNullTermination()
    core.endGroup()
@@ -36,93 +39,50 @@ export async function getChanges(base: string, head: string): Promise<File[]> {
  return parseGitDiffOutput(output)
 }

-export async function getChangesOnHead(): Promise<File[]> {
-  // Get current changes - both staged and unstaged
-  core.startGroup(`Change detection on HEAD`)
-  let output = ''
-  try {
-    output = (await exec('git', ['diff', '--no-renames', '--name-status', '-z', 'HEAD'])).stdout
-  } finally {
-    fixStdOutNullTermination()
-    core.endGroup()
+export async function getChangesSinceMergeBase(ref: string, initialFetchDepth: number): Promise<File[]> {
+  if (!(await hasCommit(ref))) {
+    // Fetch and add base branch
+    core.startGroup(`Fetching ${ref}`)
+    try {
+      await exec('git', ['fetch', `--depth=${initialFetchDepth}`, '--no-tags', 'origin', `${ref}:${ref}`])
+    } finally {
+      core.endGroup()
+    }
  }

-  return parseGitDiffOutput(output)
-}
-
-export async function getChangesSinceMergeBase(base: string, head: string, initialFetchDepth: number): Promise<File[]> {
-  let baseRef: string | undefined
-  let headRef: string | undefined
  async function hasMergeBase(): Promise<boolean> {
-    if (baseRef === undefined || headRef === undefined) {
-      return false
-    }
-    return (await exec('git', ['merge-base', baseRef, headRef], {ignoreReturnCode: true})).code === 0
+    return (await exec('git', ['merge-base', ref, 'HEAD'], {ignoreReturnCode: true})).code === 0
  }

-  let noMergeBase = false
-  core.startGroup(`Searching for merge-base ${base}...${head}`)
-  try {
-    baseRef = await getLocalRef(base)
-    headRef = await getLocalRef(head)
-    if (!(await hasMergeBase())) {
-      await exec('git', ['fetch', '--no-tags', `--depth=${initialFetchDepth}`, 'origin', base, head])
-      if (baseRef === undefined || headRef === undefined) {
-        baseRef = baseRef ?? (await getLocalRef(base))
-        headRef = headRef ?? (await getLocalRef(head))
-        if (baseRef === undefined || headRef === undefined) {
-          await exec('git', ['fetch', '--tags', '--depth=1', 'origin', base, head], {
-            ignoreReturnCode: true // returns exit code 1 if tags on remote were updated - we can safely ignore it
-          })
-          baseRef = baseRef ?? (await getLocalRef(base))
-          headRef = headRef ?? (await getLocalRef(head))
-          if (baseRef === undefined) {
-            throw new Error(
-              `Could not determine what is ${base} - fetch works but it's not a branch, tag or commit SHA`
-            )
-          }
-          if (headRef === undefined) {
-            throw new Error(
-              `Could not determine what is ${head} - fetch works but it's not a branch, tag or commit SHA`
-            )
-          }
-        }
+  async function countCommits(): Promise<number> {
+    return (await getNumberOfCommits('HEAD')) + (await getNumberOfCommits(ref))
+  }
+
+  core.startGroup(`Searching for merge-base with ${ref}`)
+  // Fetch more commits until merge-base is found
+  if (!(await hasMergeBase())) {
+    let deepen = initialFetchDepth
+    let lastCommitsCount = await countCommits()
+    do {
+      await exec('git', ['fetch', `--deepen=${deepen}`, '--no-tags'])
+      const count = await countCommits()
+      if (count <= lastCommitsCount) {
+        core.info('No merge base found - all files will be listed as added')
+        core.endGroup()
+        return await listAllFilesAsAdded()
      }
-
-      let depth = initialFetchDepth
-      let lastCommitCount = await getCommitCount()
-      while (!(await hasMergeBase())) {
-        depth = Math.min(depth * 2, Number.MAX_SAFE_INTEGER)
-        await exec('git', ['fetch', `--deepen=${depth}`, 'origin', base, head])
-        const commitCount = await getCommitCount()
-        if (commitCount === lastCommitCount) {
-          core.info('No more commits were fetched')
-          core.info('Last attempt will be to fetch full history')
-          await exec('git', ['fetch'])
-          if (!(await hasMergeBase())) {
-            noMergeBase = true
-          }
-          break
-        }
-        lastCommitCount = commitCount
-      }
-    }
-  } finally {
-    core.endGroup()
+      lastCommitsCount = count
+      deepen = Math.min(deepen * 2, Number.MAX_SAFE_INTEGER)
+    } while (!(await hasMergeBase()))
  }
+  core.endGroup()

-  // Three dots '...' change detection - finds merge-base and compares against it
-  let diffArg = `${baseRef}...${headRef}`
-  if (noMergeBase) {
-    core.warning('No merge base found - change detection will use direct <commit>..<commit> comparison')
-    diffArg = `${baseRef}..${headRef}`
-  }
-
-  // Get changes introduced on ref compared to base
-  core.startGroup(`Change detection ${diffArg}`)
+  // Get changes introduced on HEAD compared to ref
+  core.startGroup(`Change detection ${ref}...HEAD`)
  let output = ''
  try {
-    output = (await exec('git', ['diff', '--no-renames', '--name-status', '-z', diffArg])).stdout
+    // Three dots '...' change detection - finds merge-base and compares against it
+    output = (await exec('git', ['diff', '--no-renames', '--name-status', '-z', `${ref}...HEAD`])).stdout
  } finally {
    fixStdOutNullTermination()
    core.endGroup()
@@ -163,7 +123,7 @@ export async function listAllFilesAsAdded(): Promise<File[]> {
 }

 export async function getCurrentRef(): Promise<string> {
-  core.startGroup(`Get current git ref`)
+  core.startGroup(`Determining current ref`)
  try {
    const branch = (await exec('git', ['branch', '--show-current'])).stdout.trim()
    if (branch) {
@@ -175,7 +135,7 @@ export async function getCurrentRef(): Promise<string> {
      return describe.stdout.trim()
    }

-    return (await exec('git', ['rev-parse', HEAD])).stdout.trim()
+    return (await exec('git', ['rev-parse', 'HEAD'])).stdout.trim()
  } finally {
    core.endGroup()
  }
@@ -198,61 +158,20 @@ export function isGitSha(ref: string): boolean {
 }

 async function hasCommit(ref: string): Promise<boolean> {
-  return (await exec('git', ['cat-file', '-e', `${ref}^{commit}`], {ignoreReturnCode: true})).code === 0
-}
-
-async function getCommitCount(): Promise<number> {
-  const output = (await exec('git', ['rev-list', '--count', '--all'])).stdout
-  const count = parseInt(output)
-  return isNaN(count) ? 0 : count
-}
-
-async function getLocalRef(shortName: string): Promise<string | undefined> {
-  if (isGitSha(shortName)) {
-    return (await hasCommit(shortName)) ? shortName : undefined
-  }
-
-  const output = (await exec('git', ['show-ref', shortName], {ignoreReturnCode: true})).stdout
-  const refs = output
-    .split(/\r?\n/g)
-    .map(l => l.match(/refs\/(?:(?:heads)|(?:tags)|(?:remotes\/origin))\/(.*)$/))
-    .filter(match => match !== null && match[1] === shortName)
-    .map(match => match?.[0] ?? '') // match can't be null here but compiler doesn't understand that
-
-  if (refs.length === 0) {
-    return undefined
-  }
-
-  const remoteRef = refs.find(ref => ref.startsWith('refs/remotes/origin/'))
-  if (remoteRef) {
-    return remoteRef
-  }
-
-  return refs[0]
-}
-
-async function ensureRefAvailable(name: string): Promise<string> {
-  core.startGroup(`Ensuring ${name} is fetched from origin`)
+  core.startGroup(`Checking if commit for ${ref} is locally available`)
  try {
-    let ref = await getLocalRef(name)
-    if (ref === undefined) {
-      await exec('git', ['fetch', '--depth=1', '--no-tags', 'origin', name])
-      ref = await getLocalRef(name)
-      if (ref === undefined) {
-        await exec('git', ['fetch', '--depth=1', '--tags', 'origin', name])
-        ref = await getLocalRef(name)
-        if (ref === undefined) {
-          throw new Error(`Could not determine what is ${name} - fetch works but it's not a branch, tag or commit SHA`)
-        }
-      }
-    }
-
-    return ref
+    return (await exec('git', ['cat-file', '-e', `${ref}^{commit}`], {ignoreReturnCode: true})).code === 0
  } finally {
    core.endGroup()
  }
 }

+async function getNumberOfCommits(ref: string): Promise<number> {
+  const output = (await exec('git', ['rev-list', `--count`, ref])).stdout
+  const count = parseInt(output)
+  return isNaN(count) ? 0 : count
+}
+
 function fixStdOutNullTermination(): void {
  // Previous command uses NULL as delimiters and output is printed to stdout.
  // We have to make sure next thing written to stdout will start on new line.
--- a/src/list-format/csv-escape.ts
+++ b/src/list-format/csv-escape.ts
@@ -1,16 +0,0 @@
-// Returns filename escaped for CSV
-// Wraps file name into "..." only when it contains some potentially unsafe character
-export function csvEscape(value: string): string {
-  if (value === '') return value
-
-  // Only safe characters
-  if (/^[a-zA-Z0-9._+:@%/-]+$/m.test(value)) {
-    return value
-  }
-
-  // https://tools.ietf.org/html/rfc4180
-  // If double-quotes are used to enclose fields, then a double-quote
-  // appearing inside a field must be escaped by preceding it with
-  // another double quote
-  return `"${value.replace(/"/g, '""')}"`
-}
--- a/src/list-format/shell-escape.ts
+++ b/src/list-format/shell-escape.ts
@@ -1,28 +0,0 @@
-// Backslash escape every character except small subset of definitely safe characters
-export function backslashEscape(value: string): string {
-  return value.replace(/([^a-zA-Z0-9,._+:@%/-])/gm, '\\$1')
-}
-
-// Returns filename escaped for usage as shell argument.
-// Applies "human readable" approach with as few escaping applied as possible
-export function shellEscape(value: string): string {
-  if (value === '') return value
-
-  // Only safe characters
-  if (/^[a-zA-Z0-9,._+:@%/-]+$/m.test(value)) {
-    return value
-  }
-
-  if (value.includes("'")) {
-    // Only safe characters, single quotes and white-spaces
-    if (/^[a-zA-Z0-9,._+:@%/'\s-]+$/m.test(value)) {
-      return `"${value}"`
-    }
-
-    // Split by single quote and apply escaping recursively
-    return value.split("'").map(shellEscape).join("\\'")
-  }
-
-  // Contains some unsafe characters but no single quote
-  return `'${value}'`
-}
--- a/src/main.ts
+++ b/src/main.ts
@@ -6,10 +6,9 @@ import {Webhooks} from '@octokit/webhooks'
 import {Filter, FilterResults} from './filter'
 import {File, ChangeStatus} from './file'
 import * as git from './git'
-import {backslashEscape, shellEscape} from './list-format/shell-escape'
-import {csvEscape} from './list-format/csv-escape'
+import shellEscape from './shell-escape'

-type ExportFormat = 'none' | 'csv' | 'json' | 'shell' | 'escape'
+type ExportFormat = 'none' | 'json' | 'shell'

 async function run(): Promise<void> {
  try {
@@ -19,7 +18,6 @@ async function run(): Promise<void> {
    }

    const token = core.getInput('token', {required: false})
-    const ref = core.getInput('ref', {required: false})
    const base = core.getInput('base', {required: false})
    const filtersInput = core.getInput('filters', {required: true})
    const filtersYaml = isPathInput(filtersInput) ? getConfigFileContent(filtersInput) : filtersInput
@@ -32,8 +30,7 @@ async function run(): Promise<void> {
    }

    const filter = new Filter(filtersYaml)
-    const files = await getChangedFiles(token, base, ref, initialFetchDepth)
-    core.info(`Detected ${files.length} changed files`)
+    const files = await getChangedFiles(token, base, initialFetchDepth)
    const results = filter.match(files)
    exportResults(results, listFiles)
  } catch (error) {
@@ -42,7 +39,7 @@ async function run(): Promise<void> {
 }

 function isPathInput(text: string): boolean {
-  return !(text.includes('\n') || text.includes(':'))
+  return !text.includes('\n')
 }

 function getConfigFileContent(configPath: string): string {
@@ -57,175 +54,119 @@ function getConfigFileContent(configPath: string): string {
  return fs.readFileSync(configPath, {encoding: 'utf8'})
 }

-async function getChangedFiles(token: string, base: string, ref: string, initialFetchDepth: number): Promise<File[]> {
-  // if base is 'HEAD' only local uncommitted changes will be detected
-  // This is the simplest case as we don't need to fetch more commits or evaluate current/before refs
-  if (base === git.HEAD) {
-    if (ref) {
-      core.warning(`'ref' input parameter is ignored when 'base' is set to HEAD`)
-    }
-    return await git.getChangesOnHead()
-  }
-
-  const prEvents = ['pull_request', 'pull_request_review', 'pull_request_review_comment', 'pull_request_target']
-  if (prEvents.includes(github.context.eventName)) {
-    if (ref) {
-      core.warning(`'ref' input parameter is ignored when 'base' is set to HEAD`)
-    }
-    if (base) {
-      core.warning(`'base' input parameter is ignored when action is triggered by pull request event`)
-    }
+async function getChangedFiles(token: string, base: string, initialFetchDepth: number): Promise<File[]> {
+  if (github.context.eventName === 'pull_request' || github.context.eventName === 'pull_request_target') {
    const pr = github.context.payload.pull_request as Webhooks.WebhookPayloadPullRequestPullRequest
    if (token) {
      return await getChangedFilesFromApi(token, pr)
    }
-    if (github.context.eventName === 'pull_request_target') {
-      // pull_request_target is executed in context of base branch and GITHUB_SHA points to last commit in base branch
-      // Therefor it's not possible to look at changes in last commit
-      // At the same time we don't want to fetch any code from forked repository
-      throw new Error(`'token' input parameter is required if action is triggered by 'pull_request_target' event`)
-    }
    core.info('Github token is not available - changes will be detected from PRs merge commit')
    return await git.getChangesInLastCommit()
  } else {
-    return getChangedFilesFromGit(base, ref, initialFetchDepth)
+    return getChangedFilesFromGit(base, initialFetchDepth)
  }
 }

-async function getChangedFilesFromGit(base: string, head: string, initialFetchDepth: number): Promise<File[]> {
-  const defaultBranch = github.context.payload.repository?.default_branch
+async function getChangedFilesFromGit(base: string, initialFetchDepth: number): Promise<File[]> {
+  const defaultRef = github.context.payload.repository?.default_branch

  const beforeSha =
    github.context.eventName === 'push' ? (github.context.payload as Webhooks.WebhookPayloadPush).before : null

-  const currentRef = await git.getCurrentRef()
+  const pushRef =
+    git.getShortName(github.context.ref) ||
+    (core.warning(`'ref' field is missing in PUSH event payload - using current branch, tag or commit SHA`),
+    await git.getCurrentRef())

-  head = git.getShortName(head || github.context.ref || currentRef)
-  base = git.getShortName(base || defaultBranch)
-
-  if (!head) {
-    throw new Error(
-      "This action requires 'head' input to be configured, 'ref' to be set in the event payload or branch/tag checked out in current git repository"
-    )
-  }
-
-  if (!base) {
+  const baseRef = git.getShortName(base) || defaultRef
+  if (!baseRef) {
    throw new Error(
      "This action requires 'base' input to be configured or 'repository.default_branch' to be set in the event payload"
    )
  }

-  const isBaseSha = git.isGitSha(base)
-  const isBaseSameAsHead = base === head
+  const isBaseRefSha = git.isGitSha(baseRef)
+  const isBaseSameAsPush = baseRef === pushRef

-  // If base is commit SHA we will do comparison against the referenced commit
-  // Or if base references same branch it was pushed to, we will do comparison against the previously pushed commit
-  if (isBaseSha || isBaseSameAsHead) {
-    const baseSha = isBaseSha ? base : beforeSha
-    if (!baseSha) {
-      core.warning(`'before' field is missing in event payload - changes will be detected from last commit`)
-      if (head !== currentRef) {
-        core.warning(`Ref ${head} is not checked out - results might be incorrect!`)
-      }
+  // If base is commit SHA will do comparison against the referenced commit
+  // Or If base references same branch it was pushed to, we will do comparison against the previously pushed commit
+  if (isBaseRefSha || isBaseSameAsPush) {
+    if (!isBaseRefSha && !beforeSha) {
+      core.warning(`'before' field is missing in PUSH event payload - changes will be detected from last commit`)
      return await git.getChangesInLastCommit()
    }

+    const baseSha = isBaseRefSha ? baseRef : beforeSha
    // If there is no previously pushed commit,
    // we will do comparison against the default branch or return all as added
    if (baseSha === git.NULL_SHA) {
-      if (defaultBranch && base !== defaultBranch) {
-        core.info(
-          `First push of a branch detected - changes will be detected against the default branch ${defaultBranch}`
-        )
-        return await git.getChangesSinceMergeBase(defaultBranch, head, initialFetchDepth)
+      if (defaultRef && baseRef !== defaultRef) {
+        core.info(`First push of a branch detected - changes will be detected against the default branch ${defaultRef}`)
+        return await git.getChangesSinceMergeBase(defaultRef, initialFetchDepth)
      } else {
        core.info('Initial push detected - all files will be listed as added')
-        if (head !== currentRef) {
-          core.warning(`Ref ${head} is not checked out - results might be incorrect!`)
-        }
        return await git.listAllFilesAsAdded()
      }
    }

-    core.info(`Changes will be detected between ${baseSha} and ${head}`)
-    return await git.getChanges(baseSha, head)
+    core.info(`Changes will be detected against commit (${baseSha})`)
+    return await git.getChanges(baseSha)
  }

-  core.info(`Changes will be detected between ${base} and ${head}`)
-  return await git.getChangesSinceMergeBase(base, head, initialFetchDepth)
+  // Changes introduced by current branch against the base branch
+  core.info(`Changes will be detected against the branch ${baseRef}`)
+  return await git.getChangesSinceMergeBase(baseRef, initialFetchDepth)
 }

 // Uses github REST api to get list of files changed in PR
 async function getChangedFilesFromApi(
  token: string,
-  prNumber: Webhooks.WebhookPayloadPullRequestPullRequest
+  pullRequest: Webhooks.WebhookPayloadPullRequestPullRequest
 ): Promise<File[]> {
-  core.startGroup(`Fetching list of changed files for PR#${prNumber.number} from Github API`)
-  try {
-    const client = new github.GitHub(token)
-    const per_page = 100
-    const files: File[] = []
-
-    for (let page = 1; ; page++) {
-      core.info(`Invoking listFiles(pull_number: ${prNumber.number}, page: ${page}, per_page: ${per_page})`)
-      const response = await client.pulls.listFiles({
-        owner: github.context.repo.owner,
-        repo: github.context.repo.repo,
-        pull_number: prNumber.number,
-        per_page,
-        page
-      })
-
-      if (response.status !== 200) {
-        throw new Error(`Fetching list of changed files from GitHub API failed with error code ${response.status}`)
-      }
-
-      core.info(`Received ${response.data.length} items`)
-      if (response.data.length === 0) {
-        core.info('All changed files has been fetched from GitHub API')
-        break
-      }
-
-      for (const row of response.data) {
-        core.info(`[${row.status}] ${row.filename}`)
-        // There's no obvious use-case for detection of renames
-        // Therefore we treat it as if rename detection in git diff was turned off.
-        // Rename is replaced by delete of original filename and add of new filename
-        if (row.status === ChangeStatus.Renamed) {
-          files.push({
-            filename: row.filename,
-            status: ChangeStatus.Added
-          })
-          files.push({
-            // 'previous_filename' for some unknown reason isn't in the type definition or documentation
-            filename: (<any>row).previous_filename as string,
-            status: ChangeStatus.Deleted
-          })
-        } else {
-          // Github status and git status variants are same except for deleted files
-          const status = row.status === 'removed' ? ChangeStatus.Deleted : (row.status as ChangeStatus)
-          files.push({
-            filename: row.filename,
-            status
-          })
-        }
+  core.info(`Fetching list of changed files for PR#${pullRequest.number} from Github API`)
+  const client = new github.GitHub(token)
+  const pageSize = 100
+  const files: File[] = []
+  for (let page = 0; page * pageSize < pullRequest.changed_files; page++) {
+    const response = await client.pulls.listFiles({
+      owner: github.context.repo.owner,
+      repo: github.context.repo.repo,
+      pull_number: pullRequest.number,
+      page,
+      per_page: pageSize
+    })
+    for (const row of response.data) {
+      // There's no obvious use-case for detection of renames
+      // Therefore we treat it as if rename detection in git diff was turned off.
+      // Rename is replaced by delete of original filename and add of new filename
+      if (row.status === ChangeStatus.Renamed) {
+        files.push({
+          filename: row.filename,
+          status: ChangeStatus.Added
+        })
+        files.push({
+          // 'previous_filename' for some unknown reason isn't in the type definition or documentation
+          filename: (<any>row).previous_filename as string,
+          status: ChangeStatus.Deleted
+        })
+      } else {
+        files.push({
+          filename: row.filename,
+          status: row.status as ChangeStatus
+        })
      }
    }
-
-    return files
-  } finally {
-    core.endGroup()
  }
+
+  return files
 }

 function exportResults(results: FilterResults, format: ExportFormat): void {
  core.info('Results:')
-  const changes = []
  for (const [key, files] of Object.entries(results)) {
    const value = files.length > 0
    core.startGroup(`Filter ${key} = ${value}`)
    if (files.length > 0) {
-      changes.push(key)
      core.info('Matching files:')
      for (const file of files) {
        core.info(`${file.filename} [${file.status}]`)
@@ -235,32 +176,19 @@ function exportResults(results: FilterResults, format: ExportFormat): void {
    }

    core.setOutput(key, value)
-    core.setOutput(`${key}_count`, files.length)
    if (format !== 'none') {
      const filesValue = serializeExport(files, format)
      core.setOutput(`${key}_files`, filesValue)
    }
-    core.endGroup()
-  }
-
-  if (results['changes'] === undefined) {
-    const changesJson = JSON.stringify(changes)
-    core.info(`Changes output set to ${changesJson}`)
-    core.setOutput('changes', changesJson)
-  } else {
-    core.info('Cannot set changes output variable - name already used by filter output')
  }
+  core.endGroup()
 }

 function serializeExport(files: File[], format: ExportFormat): string {
  const fileNames = files.map(file => file.filename)
  switch (format) {
-    case 'csv':
-      return fileNames.map(csvEscape).join(',')
    case 'json':
      return JSON.stringify(fileNames)
-    case 'escape':
-      return fileNames.map(backslashEscape).join(' ')
    case 'shell':
      return fileNames.map(shellEscape).join(' ')
    default:
@@ -269,7 +197,7 @@ function serializeExport(files: File[], format: ExportFormat): string {
 }

 function isExportFormat(value: string): value is ExportFormat {
-  return ['none', 'csv', 'shell', 'json', 'escape'].includes(value)
+  return value === 'none' || value === 'shell' || value === 'json'
 }

 run()
--- a/src/shell-escape.ts
+++ b/src/shell-escape.ts
@@ -0,0 +1,7 @@
+// Credits to https://github.com/xxorax/node-shell-escape
+
+export default function shellEscape(value: string): string {
+  return `'${value.replace(/'/g, "'\\''")}'`
+    .replace(/^(?:'')+/g, '') // unduplicate single-quote at the beginning
+    .replace(/\\'''/g, "\\'") // remove non-escaped single-quote if there are enclosed between 2 escaped
+}
Author	SHA1	Message	Date
Michal Dorner	189a1963db	update CHANGELOG.md	2020-10-16 12:27:18 +02:00
Michal Dorner	77a8129fcb	improve logging	2020-10-16 12:24:39 +02:00
Michal Dorner	9379d51f46	mention commit SHA in docs for base parameter	2020-10-16 11:49:15 +02:00
Michal Dorner	beaf26afca	Allow change detection on all event types	2020-10-16 11:44:38 +02:00