Skip to content
Release Sourcebot (Development)

chore: upgrade shell-quote to ^1.8.4 to address CVE-2026-9277 (#1299) #484

Sign in to view logs

chore: upgrade shell-quote to ^1.8.4 to address CVE-2026-9277 (#1299)

chore: upgrade shell-quote to ^1.8.4 to address CVE-2026-9277 (#1299) #484

Triggered via push June 10, 2026 23:52
@jsourcebotjsourcebot
pushed b4c4bf7
main
Status Success
Total duration 13m 10s
Artifacts 4

release-dev.yml

on: push
Matrix: build / build
publish-to-registry  /  merge
23s
publish-to-registry / merge
Fit to window
Zoom out
Zoom in

Annotations

3 warnings
build / build (linux/arm64)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/upload-artifact@v4, docker/login-action@v3, docker/metadata-action@v5, docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build / build (linux/amd64)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/upload-artifact@v4, docker/login-action@v3, docker/metadata-action@v5, docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
publish-to-registry / merge
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4, docker/login-action@v3, docker/metadata-action@v5, docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
digests-linux-amd64 Expired
244 Bytes
sha256:ccff07367d3c73887235e3f530e237766d30c2d14c40781956323588339c4b63
digests-linux-arm64 Expired
244 Bytes
sha256:ec54c763b324d0e11ed6e9dc0769440d09ec6236eb7c925a2e12d5ad0e763b48
sourcebot-dev~sourcebot~JDDP2A.dockerbuild
178 KB
sha256:2955c40b0e742a8bdf3ef62ada01c10b6c29081fa775107981c85a53320fe62a
sourcebot-dev~sourcebot~NX8QAI.dockerbuild
172 KB
sha256:f312f7613fb8a0fb693e2850114d3336feb48a1f66482890b922f144c1c4401c