From edc4037b1bba5ee6e4ac10aabc29e3b7c334f134 Mon Sep 17 00:00:00 2001
From: eifinger-bot <bot.stillhammer@gmail.com>
Date: Thu, 14 May 2026 18:53:01 +0000
Subject: [PATCH] fix: add timeout to fetch to prevent silent hangs

Add AbortSignal.timeout(30s) to fetch requests to ensure they fail
fast instead of hanging indefinitely when network issues occur.
This fixes issues where the action would hang and eventually get
killed by GitHub Actions without a clear error message.
---
 dist/setup/index.cjs                  | 14 ++++++++++----
 dist/update-known-checksums/index.cjs | 14 ++++++++++----
 src/utils/fetch.ts                    | 13 +++++++++++--
 3 files changed, 31 insertions(+), 10 deletions(-)

diff --git a/dist/setup/index.cjs b/dist/setup/index.cjs
index 1a6bd06..e461ee2 100644
--- a/dist/setup/index.cjs
+++ b/dist/setup/index.cjs
@@ -95790,10 +95790,16 @@ function getProxyAgent() {
   }
   return void 0;
 }
-var fetch = async (url2, opts) => await (0, import_undici2.fetch)(url2, {
-  dispatcher: getProxyAgent(),
-  ...opts
-});
+var fetch = async (url2, opts) => {
+  const timeoutSignal = AbortSignal.timeout(3e4);
+  const existingSignal = opts.signal;
+  const mergedSignal = existingSignal ? AbortSignal.any([timeoutSignal, existingSignal]) : timeoutSignal;
+  return await (0, import_undici2.fetch)(url2, {
+    dispatcher: getProxyAgent(),
+    ...opts,
+    signal: mergedSignal
+  });
+};
 
 // src/download/variant-selection.ts
 function selectDefaultVariant(entries, duplicateEntryDescription) {
diff --git a/dist/update-known-checksums/index.cjs b/dist/update-known-checksums/index.cjs
index 549ef41..f11a1d7 100644
--- a/dist/update-known-checksums/index.cjs
+++ b/dist/update-known-checksums/index.cjs
@@ -49749,10 +49749,16 @@ function getProxyAgent() {
   }
   return void 0;
 }
-var fetch = async (url, opts) => await (0, import_undici2.fetch)(url, {
-  dispatcher: getProxyAgent(),
-  ...opts
-});
+var fetch = async (url, opts) => {
+  const timeoutSignal = AbortSignal.timeout(3e4);
+  const existingSignal = opts.signal;
+  const mergedSignal = existingSignal ? AbortSignal.any([timeoutSignal, existingSignal]) : timeoutSignal;
+  return await (0, import_undici2.fetch)(url, {
+    dispatcher: getProxyAgent(),
+    ...opts,
+    signal: mergedSignal
+  });
+};
 
 // src/download/manifest.ts
 var cachedManifestData = /* @__PURE__ */ new Map();
diff --git a/src/utils/fetch.ts b/src/utils/fetch.ts
index 0830dfd..b24c69b 100644
--- a/src/utils/fetch.ts
+++ b/src/utils/fetch.ts
@@ -14,8 +14,17 @@ export function getProxyAgent() {
   return undefined;
 }
 
-export const fetch = async (url: string, opts: RequestInit) =>
-  await undiciFetch(url, {
+export const fetch = async (url: string, opts: RequestInit) => {
+  // Merge timeout signal with any existing signal from opts
+  const timeoutSignal = AbortSignal.timeout(30_000);
+  const existingSignal = opts.signal;
+  const mergedSignal = existingSignal
+    ? AbortSignal.any([timeoutSignal, existingSignal])
+    : timeoutSignal;
+
+  return await undiciFetch(url, {
     dispatcher: getProxyAgent(),
     ...opts,
+    signal: mergedSignal,
   });
+};