Skip to content

fix(security): Prevent GitHub script injection in update-tox workflow… #13198

fix(security): Prevent GitHub script injection in update-tox workflow…

fix(security): Prevent GitHub script injection in update-tox workflow… #13198

Triggered via push April 29, 2026 12:47
Status Failure
Total duration 10m 9s
Artifacts 20
Matrix: Common
All Common tests passed
3s
All Common tests passed
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 10 warnings
Common (3.6, ubuntu-22.04)
Process completed with exit code 1.
All Common tests passed
Process completed with exit code 1.
Common (3.7, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Common (3.6, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Common (3.11, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Common (3.8, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Common (3.10, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Common (3.9, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Common (3.12, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Common (3.13, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Common (3.14, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Common (3.14t, ubuntu-22.04)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getsentry/codecov-action@fda17cfc37e16a0cc23f61685813390bfee7daf3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
codecov-coverage-results-master-test-common
107 KB
sha256:5842f09fb08c07b61aadd79d082721141474736389f7f31ed30e0a80902f7aaa
codecov-coverage-results-master-test-common
107 KB
sha256:5ef91a2a070a5f7b531d24c40adc5dd23ec429d39aebd355f3a0a2af36e5ba2e
codecov-coverage-results-master-test-common
107 KB
sha256:af9bdcbc48e19b48776a0f1aad608a36caa6cacdfc897ba437803e10008898be
codecov-coverage-results-master-test-common
107 KB
sha256:cb4152b39dc84f8f5410cec63c3edcea5b6d6b2b0197ce18dfe2e5573112c915
codecov-coverage-results-master-test-common
107 KB
sha256:39a4d095cf5ff27377e9e72f0777da538631e363a78abac7e04858f70005b2d8
codecov-coverage-results-master-test-common
107 KB
sha256:ef6e15b1c9add23a71c4aa1ef59f59657c666d3b620e2c46c3caf7776044c85a
codecov-coverage-results-master-test-common
107 KB
sha256:5d5fe63de2b4ca8cf9365f30ea6e75812122625a3d0d131567f1d5b54559a5f2
codecov-coverage-results-master-test-common
107 KB
sha256:b590efd2eff6fb94dcbd28a7866283b19a9e29a4942b9faf7408c6afd5409c7f
codecov-coverage-results-master-test-common
107 KB
sha256:5d715f2e00a6d60bfaff624c4923a3582867c8232a7737a679afa6e31ee3402d
codecov-coverage-results-master-test-common
107 KB
sha256:0f60401fd5c2ddd317d7a0bfdfaf2c54f2bdfa601f76bc523fb0defee6de869a
codecov-test-results-master-test-common
242 Bytes
sha256:f2c4e505b9cb57de9800867e2e0a8321f0809cf83629274369b36f88b1743f64
codecov-test-results-master-test-common
243 Bytes
sha256:e84ce361ab8fd46686dd5d36e93ffc025d62791c00a639c2e42b275fe311a2c6
codecov-test-results-master-test-common
244 Bytes
sha256:706c563da9a66542d369704c60f854dabba25a47ba5f5c0d4b4f797eb0f76532
codecov-test-results-master-test-common
244 Bytes
sha256:e0991f0aad9ccf213c266abe23a2bf11a940baa8ef46d4d2456b61c340c3fe6c
codecov-test-results-master-test-common
241 Bytes
sha256:3b09a85a8765d736536ab9a59479936d2b733ae44b11712ddb1e48beacc795c8
codecov-test-results-master-test-common
243 Bytes
sha256:39e73a2aea1d5d13415c00f8b44695f362c1fcbcac51d6e90219abbc7bd4c756
codecov-test-results-master-test-common
246 Bytes
sha256:4e04af1b50c7ea1d1f57dca633221c87490254b901aec047374a766e4402ac22
codecov-test-results-master-test-common
553 Bytes
sha256:04ab009784bbf44642c22b79d6eddaaf19fc0616f98d56e242ee60dcde89c375
codecov-test-results-master-test-common
245 Bytes
sha256:de6fa83876cf50d534e6fa5e3c4925600cb465ce4c5538d9395650c8c8a63e72
codecov-test-results-master-test-common
245 Bytes
sha256:8b4835e540a266ce4934feeedcdcdd848f6328526529c9c10f31f6337280099b