Repository navigation
cloud-connection, plugin-security: a marketplace upgrade that would un-make an access choice is refused until it is confirmed (#24446 U2) #6226
os-stevevalidate-deps.yml
on: pull_request
Validate Package Dependencies
1m 19s
Annotations
8 notices
|
OSV advisory inherited from the merge base
GHSA-rxp7-6hxx-x8q5 (here: ip-address@10.7.2; at the merge base: ip-address@10.7.2) is matched by the merge base's lockfile (303aef069ebd) too, so it is main's to fix and does not fail this pull request; no open issue names it yet; main's daily scheduled scan is the signal that files its finding card.
|
|
OSV advisory inherited from the merge base
GHSA-p3m5-59mp-jv5r (here: next@16.3.8; at the merge base: next@16.3.8) is matched by the merge base's lockfile (303aef069ebd) too, so it is main's to fix and does not fail this pull request; no open issue names it yet; main's daily scheduled scan is the signal that files its finding card.
|
|
OSV advisory inherited from the merge base
GHSA-mrv2-3pqr-j5jr (here: dompurify@3.4.16; at the merge base: dompurify@3.4.16) is matched by the merge base's lockfile (303aef069ebd) too, so it is main's to fix and does not fail this pull request; no open issue names it yet; main's daily scheduled scan is the signal that files its finding card.
|
|
OSV advisory inherited from the merge base
GHSA-cg2g-xh64-v4q7 (here: dompurify@3.4.16; at the merge base: dompurify@3.4.16) is matched by the merge base's lockfile (303aef069ebd) too, so it is main's to fix and does not fail this pull request; no open issue names it yet; main's daily scheduled scan is the signal that files its finding card.
|
|
OSV advisory inherited from the merge base
GHSA-c6gr-qvv4-5v3f (here: dompurify@3.4.16; at the merge base: dompurify@3.4.16) is matched by the merge base's lockfile (303aef069ebd) too, so it is main's to fix and does not fail this pull request; no open issue names it yet; main's daily scheduled scan is the signal that files its finding card.
|
|
OSV advisory inherited from the merge base
GHSA-673q-mjm6-r5xr (here: next@16.3.8; at the merge base: next@16.3.8) is matched by the merge base's lockfile (303aef069ebd) too, so it is main's to fix and does not fail this pull request; no open issue names it yet; main's daily scheduled scan is the signal that files its finding card.
|
|
OSV advisory inherited from the merge base
GHSA-2464-fhr4-w9xw (here: next@16.3.8; at the merge base: next@16.3.8) is matched by the merge base's lockfile (303aef069ebd) too, so it is main's to fix and does not fail this pull request; no open issue names it yet; main's daily scheduled scan is the signal that files its finding card.
|
|
Validate Package Dependencies
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|