@actions/glob: extend hashFiles options

[priyagupta108]

This pull request extends @actions/glob hashFiles to support safer and more flexible hashing by adding options for allowed roots, an opt-in to include files outside those roots (allowFilesOutsideWorkspace), and exclude patterns (exclude).

Closes #1035

[Copilot]

Pull request overview

Extends @actions/glob’s hashFiles to allow hashing files outside the workspace in a safer, more configurable way (root allowlist + opt-in outside-root inclusion + exclude patterns), addressing the limitations described in #1035.

Changes:

• Add HashFileOptions fields: roots, allowFilesOutsideWorkspace, and exclude.
• Update internal-hash-files to enforce root allowlisting using realpaths (symlink-safe) and support exclude filtering + outside-root warnings.
• Add test coverage and README documentation for the new options.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
packages/glob/src/internal-hash-files.ts	Implements root allowlist checks, exclude pattern matching, and outside-root behavior/warnings.
packages/glob/src/internal-hash-file-options.ts	Adds new public hashFiles options to the HashFileOptions interface.
packages/glob/src/glob.ts	Wires the new options through to the internal hasher.
packages/glob/tests/hash-files.test.ts	Adds tests for roots filtering, opt-in outside-root hashing, and exclude patterns.
packages/glob/README.md	Documents hashFiles behavior and the newly added options.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.