From cd1783115488588f5ee972efba7d6aa2d7a274a1 Mon Sep 17 00:00:00 2001
From: Raj-StepSecurity <rajkumar@stepsecurity.io>
Date: Wed, 19 Aug 2026 11:17:57 +0530
Subject: [PATCH] chore: Cherry-picked changes from upstream

---
 README.md                        | 2 +-
 VERSION                          | 2 +-
 scripts/install-from-release.sh  | 4 ++--
 scripts/install-from-snapshot.sh | 5 ++---
 4 files changed, 6 insertions(+), 7 deletions(-)

diff --git a/README.md b/README.md
index b94605d..7f2592e 100644
--- a/README.md
+++ b/README.md
@@ -17,7 +17,7 @@ Install a specific version:
 ```yaml
 - uses: step-security/databricks-setup-cli@v1
   with:
-    version: 1.1.0
+    version: 1.12.1
 ```
 
 Install a snapshot build produced by the `release-snapshot` workflow in `databricks/cli`:
diff --git a/VERSION b/VERSION
index 9084fa2..f8f4f03 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-1.1.0
+1.12.1
diff --git a/scripts/install-from-release.sh b/scripts/install-from-release.sh
index a204c1f..d2f0bd5 100755
--- a/scripts/install-from-release.sh
+++ b/scripts/install-from-release.sh
@@ -100,9 +100,9 @@ main() {
   archive_name="databricks_cli_${cli_version}_${host_os}_${host_arch}.zip"
   archive_url="${GH_RELEASE_HOST}/v${cli_version}/${archive_name}"
 
-  work_dir="${RUNNER_TEMP:?RUNNER_TEMP must be set inside a GitHub Actions step}"
+  work_dir="$(mktemp -d "${RUNNER_TEMP:?RUNNER_TEMP must be set inside a GitHub Actions step}/databricks.XXXXXX")"
   archive_path="$work_dir/$archive_name"
-  extract_dir="$work_dir/databricks-cli"
+  extract_dir="$work_dir/extract"
   mkdir -p "$extract_dir"
 
   printf 'databricks-setup-cli: fetching %s\n' "$archive_url"
diff --git a/scripts/install-from-snapshot.sh b/scripts/install-from-snapshot.sh
index 0623cf1..f4d708a 100755
--- a/scripts/install-from-snapshot.sh
+++ b/scripts/install-from-snapshot.sh
@@ -44,9 +44,8 @@ main() {
   local artifact_name binary_subdir work_dir download_dir run_id binary_dir
   artifact_name="cli_${host_os}_snapshot"
   binary_subdir="cli_${host_os}_${arch_suffix}"
-  work_dir="${RUNNER_TEMP:?RUNNER_TEMP must be set inside a GitHub Actions step}"
-  download_dir="$work_dir/databricks-cli-snapshot"
-  mkdir -p "$download_dir"
+  work_dir="$(mktemp -d "${RUNNER_TEMP:?RUNNER_TEMP must be set inside a GitHub Actions step}/databricks.XXXXXX")"
+  download_dir="$work_dir"
 
   printf 'databricks-setup-cli: resolving latest %s snapshot on %s\n' \
     "$UPSTREAM_REPO" "$target_branch"