Skip to content
Build & Release

Build - chore(deps): update js-yaml to 3.15.2 GHSA-2883-xcg3-v3hh (high): maxTotalMergeKeys did not bound CPU use for empty merge sources. Dev-only transitive dependency via ts-jest -> babel-plugin-istanbul -> @istanbuljs/load-nyc-config; installable now that the age gate is 12 days. #340

Sign in to view logs

Build - chore(deps): update js-yaml to 3.15.2 GHSA-2883-xcg3-v3hh (high): maxTotalMergeKeys did not bound CPU use for empty merge sources. Dev-only transitive dependency via ts-jest -> babel-plugin-istanbul -> @istanbuljs/load-nyc-config; installable now that the age gate is 12 days.

Build - chore(deps): update js-yaml to 3.15.2 GHSA-2883-xcg3-v3hh (high): maxTotalMergeKeys did not bound CPU use for empty merge sources. Dev-only transitive dependency via ts-jest -> babel-plugin-istanbul -> @istanbuljs/load-nyc-config; installable now that the age gate is 12 days. #340

Triggered via push September 9, 2026 01:33
@mceachenmceachen
pushed b407d91
main
Status Success
Total duration 21m 18s
Artifacts 11

build.yml

on: push
Matrix: prebuild-linux-glibc
prebuild-mac-x64
3m 11s
prebuild-mac-x64
prebuild-mac-arm64
1m 8s
prebuild-mac-arm64
prebuild-win-x64
2m 49s
prebuild-win-x64
prebuild-win-arm64
4m 55s
prebuild-win-arm64
Matrix: prebuild-linux-musl
lint
3m 33s
lint
Matrix: test-ubuntu
Matrix: test-api-compatibility
Matrix: test-mac-win
Pack the release tarball
23s
Pack the release tarball
Matrix: test-alpine
Matrix: verify-package
Verify packed package on Alpine
22s
Verify packed package on Alpine
Create signed release commit and tag
0s
Create signed release commit and tag
Start tag-bound publishing
0s
Start tag-bound publishing
Fit to window
Zoom out
Zoom in

Annotations

3 warnings and 4 notices
lint: src/sql-tag-store.ts#L192
Generic Object Injection Sink
lint: src/sql-tag-store.ts#L45
Generic Object Injection Sink
lint: src/sql-tag-store.ts#L21
Variable Assigned to Object Injection Sink
prebuild-win-arm64
"The windows-11-arm label will migrate to use Visual Studio 2026 by default beginning September 21, 2026. For more information see https://github.com/actions/runner-images/issues/14602"
test-mac-win (windows-11-arm, 24)
"The windows-11-arm label will migrate to use Visual Studio 2026 by default beginning September 21, 2026. For more information see https://github.com/actions/runner-images/issues/14602"
test-mac-win (windows-11-arm, 26)
"The windows-11-arm label will migrate to use Visual Studio 2026 by default beginning September 21, 2026. For more information see https://github.com/actions/runner-images/issues/14602"
test-mac-win (windows-11-arm, 22)
"The windows-11-arm label will migrate to use Visual Studio 2026 by default beginning September 21, 2026. For more information see https://github.com/actions/runner-images/issues/14602"

Artifacts

Produced during runtime
Name Size Digest
npm-package
12.4 MB
sha256:4e0595f5f5b76beff60391c9a59ab2271c88f86dcc860985f8159fc477cfce16
prebuild-darwin-arm64
1.09 MB
sha256:16d5988834bc762063fd660ac756430e5a284907a635b1557e3c52026ee1d25d
prebuild-darwin-x64
1.18 MB
sha256:5698e8cfcd65f2a8722d14287ca46050a5d00f8408254d41524d75c94df31e9a
prebuild-linux-arm64-glibc
1.21 MB
sha256:5aee881373c27603e4a8b75981983e2a5457ba82f125b7e972445711bedb766e
prebuild-linux-arm64-musl
1.38 MB
sha256:b66a895fb568b80f4a0bb2c6a5b39efb598ea5bd12118e924582d2532723ce70
prebuild-linux-x64-glibc
1.24 MB
sha256:474bafc985ee67d7d10c3ead1fd57310251a23f094e81de249745ae877045c9d
prebuild-linux-x64-musl
1.38 MB
sha256:1c25fd6b2acac722e29d5c5932956c2bc497cb3233ed4d3cebb99e67a4b321a2
prebuild-win32-arm64
1.04 MB
sha256:24df8a9c6e8c46fc06a7ea7a7b93e8595b057320501dc15427928a843665cfcb
prebuild-win32-x64
1.16 MB
sha256:7c30c22f2a2d717f465f0f6815a741fab4c9758014539d3459958f691cba2204
test-extension-linux-arm64-musl
5.07 KB
sha256:c915e0e2bbe6bbb07914eb4d2deeca93dbdbfbb97cf6f7ab05ddd9f292b67373
test-extension-linux-x64-musl
3.7 KB
sha256:b7e8dcbffd93c48590a79a0ce934847d029ee72da0fde7fbeb1bf51f984e8563