From a465253b89a197b39e9570f1b11e65128f020519 Mon Sep 17 00:00:00 2001
From: eifinger-bot <bot.stillhammer@gmail.com>
Date: Thu, 14 May 2026 18:53:01 +0000
Subject: [PATCH] fix: add timeout to fetch to prevent silent hangs

Add AbortSignal.timeout(30s) to fetch requests to ensure they fail
fast instead of hanging indefinitely when network issues occur.
This fixes issues where the action would hang and eventually get
killed by GitHub Actions without a clear error message.
---
 dist/setup/index.cjs                  | 14 ++++++++++----
 dist/update-known-checksums/index.cjs | 14 ++++++++++----
 src/utils/fetch.ts                    | 13 +++++++++++--
 3 files changed, 31 insertions(+), 10 deletions(-)

diff --git a/dist/setup/index.cjs b/dist/setup/index.cjs
index 1a6bd06..16b28cc 100644
--- a/dist/setup/index.cjs
+++ b/dist/setup/index.cjs
@@ -95790,10 +95790,16 @@ function getProxyAgent() {
   }
   return void 0;
 }
-var fetch = async (url2, opts) => await (0, import_undici2.fetch)(url2, {
-  dispatcher: getProxyAgent(),
-  ...opts
-});
+var fetch = async (url2, opts) => {
+  const timeoutSignal = AbortSignal.timeout(5e3);
+  const existingSignal = opts.signal;
+  const mergedSignal = existingSignal ? AbortSignal.any([timeoutSignal, existingSignal]) : timeoutSignal;
+  return await (0, import_undici2.fetch)(url2, {
+    dispatcher: getProxyAgent(),
+    ...opts,
+    signal: mergedSignal
+  });
+};
 
 // src/download/variant-selection.ts
 function selectDefaultVariant(entries, duplicateEntryDescription) {
diff --git a/dist/update-known-checksums/index.cjs b/dist/update-known-checksums/index.cjs
index 549ef41..9fe0e0c 100644
--- a/dist/update-known-checksums/index.cjs
+++ b/dist/update-known-checksums/index.cjs
@@ -49749,10 +49749,16 @@ function getProxyAgent() {
   }
   return void 0;
 }
-var fetch = async (url, opts) => await (0, import_undici2.fetch)(url, {
-  dispatcher: getProxyAgent(),
-  ...opts
-});
+var fetch = async (url, opts) => {
+  const timeoutSignal = AbortSignal.timeout(5e3);
+  const existingSignal = opts.signal;
+  const mergedSignal = existingSignal ? AbortSignal.any([timeoutSignal, existingSignal]) : timeoutSignal;
+  return await (0, import_undici2.fetch)(url, {
+    dispatcher: getProxyAgent(),
+    ...opts,
+    signal: mergedSignal
+  });
+};
 
 // src/download/manifest.ts
 var cachedManifestData = /* @__PURE__ */ new Map();
diff --git a/src/utils/fetch.ts b/src/utils/fetch.ts
index 0830dfd..71167be 100644
--- a/src/utils/fetch.ts
+++ b/src/utils/fetch.ts
@@ -14,8 +14,17 @@ export function getProxyAgent() {
   return undefined;
 }
 
-export const fetch = async (url: string, opts: RequestInit) =>
-  await undiciFetch(url, {
+export const fetch = async (url: string, opts: RequestInit) => {
+  // Merge timeout signal with any existing signal from opts
+  const timeoutSignal = AbortSignal.timeout(5_000);
+  const existingSignal = opts.signal;
+  const mergedSignal = existingSignal
+    ? AbortSignal.any([timeoutSignal, existingSignal])
+    : timeoutSignal;
+
+  return await undiciFetch(url, {
     dispatcher: getProxyAgent(),
     ...opts,
+    signal: mergedSignal,
   });
+};