From d994f7e47258a3667f29ac7bc276c9dd5e323a8e Mon Sep 17 00:00:00 2001
From: Mike Harder <mharder@microsoft.com>
Date: Wed, 1 Apr 2026 17:46:24 +0000
Subject: [PATCH 1/4] [ci.yml] Add actionlint, upload tarball

---
 .github/matchers/actionlint.json | 17 +++++++++++++++++
 .github/workflows/ci.yml         | 26 ++++++++++++++++++++++++--
 2 files changed, 41 insertions(+), 2 deletions(-)
 create mode 100644 .github/matchers/actionlint.json

diff --git a/.github/matchers/actionlint.json b/.github/matchers/actionlint.json
new file mode 100644
index 0000000..4613e16
--- /dev/null
+++ b/.github/matchers/actionlint.json
@@ -0,0 +1,17 @@
+{
+  "problemMatcher": [
+    {
+      "owner": "actionlint",
+      "pattern": [
+        {
+          "regexp": "^(?:\\x1b\\[\\d+m)?(.+?)(?:\\x1b\\[\\d+m)*:(?:\\x1b\\[\\d+m)*(\\d+)(?:\\x1b\\[\\d+m)*:(?:\\x1b\\[\\d+m)*(\\d+)(?:\\x1b\\[\\d+m)*: (?:\\x1b\\[\\d+m)*(.+?)(?:\\x1b\\[\\d+m)* \\[(.+?)\\]$",
+          "file": 1,
+          "line": 2,
+          "column": 3,
+          "message": 4,
+          "code": 5
+        }
+      ]
+    }
+  ]
+}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 512916d..8b51ba6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,11 +30,33 @@ jobs:
       - name: npm ci
         run: npm ci
 
+      - name: test
+        run: npm test
+
       - name: lint
         run: npm run lint
 
       - name: prettier
         run: npm run prettier
 
-      - name: test
-        run: npm test
+      - if: runner.os == 'Linux'
+        name: Pack
+        run: npm pack
+
+      - if: runner.os == 'Linux'
+        name: Upload tarball
+        uses: actions/upload-artifact@v7
+        with:
+          path: "azure-oad-*.tgz"
+          archive: false
+
+      # Content copied from https://raw.githubusercontent.com/rhysd/actionlint/2ab3a12c7848f6c15faca9a92612ef4261d0e370/.github/actionlint-matcher.json
+      - if: runner.os == 'Linux'
+        name: Add ActionLint Problem Matcher
+        run: echo "::add-matcher::.github/matchers/actionlint.json"
+
+      - if: runner.os == 'Linux'
+        name: Lint workflows
+        uses: docker://rhysd/actionlint:1.7.11
+        with:
+          args: -color -verbose

From dd1dd35d7a971fd88d0da795f18d212e8f223edb Mon Sep 17 00:00:00 2001
From: Mike Harder <mharder@microsoft.com>
Date: Wed, 1 Apr 2026 18:01:52 +0000
Subject: [PATCH 2/4] add coverage to .prettierignore

---
 .prettierignore | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.prettierignore b/.prettierignore
index b2f3f00..7c7171f 100644
--- a/.prettierignore
+++ b/.prettierignore
@@ -3,3 +3,4 @@
 *.jsonc
 .prettierrc
 azure-pipelines.yml
+coverage/

From c465662a00ef0d3f5acd8cf7575bde4c242248c0 Mon Sep 17 00:00:00 2001
From: Mike Harder <mharder@microsoft.com>
Date: Wed, 1 Apr 2026 18:11:05 +0000
Subject: [PATCH 3/4] ignore coverage folder in eslint

---
 eslint.config.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eslint.config.js b/eslint.config.js
index d6fc6e4..833a438 100644
--- a/eslint.config.js
+++ b/eslint.config.js
@@ -27,7 +27,7 @@ module.exports = tseslint.config(
   },
   {
     // Based on https://eslint.org/docs/latest/use/configure/configuration-files#globally-ignoring-files-with-ignores
-    ignores: ["**/dist", "eslint.config.js"]
+    ignores: ["**/dist", "eslint.config.js", "coverage/**"]
   },
   {
     rules: {

From 7237aa5eda54c25de21ff8fcf8d2c8438e467c11 Mon Sep 17 00:00:00 2001
From: Mike Harder <mharder@microsoft.com>
Date: Wed, 1 Apr 2026 18:23:06 +0000
Subject: [PATCH 4/4] simplify matrix

---
 .github/workflows/ci.yml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8b51ba6..632effc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,11 +10,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        include:
-          - os: ubuntu-latest
-            target-folder: drop-linux
-          - os: windows-latest
-            target-folder: drop
+        os: [ubuntu-latest, windows-latest]
 
     steps:
       - uses: actions/checkout@v6