Fix Bun patch compatibility and annotations

.github/actions/upload-artifact/action.yml

@@ -0,0 +1,87 @@
+name: Upload artifact with retries
+description: Retry artifact service failures without hiding an exhausted upload failure
+inputs:
+  name:
+    description: Artifact name, unique to this job within the workflow run
+    required: true
+  path:
+    description: Files or globs to upload
+    required: true
+  if-no-files-found:
+    description: Behavior when no files match (warn, error, or ignore)
+    default: warn
+  retention-days:
+    description: Retention in days (0 uses the repository default)
+    default: '0'
+  include-hidden-files:
+    description: Include hidden files in the artifact
+    default: 'false'
+outputs:
+  artifact-id:
+    description: ID of the uploaded artifact
+    value: ${{ steps.first.outputs.artifact-id || steps.second.outputs.artifact-id || steps.third.outputs.artifact-id }}
+  artifact-url:
+    description: URL of the uploaded artifact
+    value: ${{ steps.first.outputs.artifact-url || steps.second.outputs.artifact-url || steps.third.outputs.artifact-url }}
+  artifact-digest:
+    description: SHA-256 digest of the uploaded artifact
+    value: ${{ steps.first.outputs.artifact-digest || steps.second.outputs.artifact-digest || steps.third.outputs.artifact-digest }}
+runs:
+  using: composite
+  steps:
+    # The artifact client does not retry the service's intermittent
+    # "FinalizeArtifact ... (403) Forbidden: Error from intermediary".
+    # An unfinished upload reserves its name but is invisible to the list /
+    # delete APIs, so overwrite cannot recover it. Retry with a fresh name,
+    # including run_attempt so rerunning a failed job cannot reuse a poisoned
+    # retry name either. Consumers use a name pattern and merge-multiple to
+    # accept any successful attempt without duplicating identical files.
+    - name: Upload (attempt 1)
+      id: first
+      if: ${{ !cancelled() }}
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+      continue-on-error: true
+      with:
+        name: ${{ inputs.name }}
+        path: ${{ inputs.path }}
+        if-no-files-found: ${{ inputs.if-no-files-found }}
+        retention-days: ${{ inputs.retention-days }}
+        include-hidden-files: ${{ inputs.include-hidden-files }}
+        overwrite: true
+
+    - name: Wait before retrying
+      if: ${{ !cancelled() && steps.first.outcome == 'failure' }}
+      shell: bash
+      run: sleep 5
+
+    - name: Upload (attempt 2)
+      id: second
+      if: ${{ !cancelled() && steps.first.outcome == 'failure' }}
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+      continue-on-error: true
+      with:
+        name: ${{ inputs.name }}-retry-${{ github.run_attempt }}-2
+        path: ${{ inputs.path }}
+        if-no-files-found: ${{ inputs.if-no-files-found }}
+        retention-days: ${{ inputs.retention-days }}
+        include-hidden-files: ${{ inputs.include-hidden-files }}
+        overwrite: true
+
+    - name: Wait before the final attempt
+      if: ${{ !cancelled() && steps.second.outcome == 'failure' }}
+      shell: bash
+      run: sleep 15
+
+    # Do not continue-on-error here: downstream consumers need the artifact,
+    # and missing files or persistent service/auth failures must fail the job.
+    - name: Upload (attempt 3)
+      id: third
+      if: ${{ !cancelled() && steps.second.outcome == 'failure' }}
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+      with:
+        name: ${{ inputs.name }}-retry-${{ github.run_attempt }}-3
+        path: ${{ inputs.path }}
+        if-no-files-found: ${{ inputs.if-no-files-found }}
+        retention-days: ${{ inputs.retention-days }}
+        include-hidden-files: ${{ inputs.include-hidden-files }}
+        overwrite: true