Skip to content

feat(security): the external organization role is the EXTERNAL principal — owner-only org-wide default, explicit grants only #49608

feat(security): the external organization role is the EXTERNAL principal — owner-only org-wide default, explicit grants only

feat(security): the external organization role is the EXTERNAL principal — owner-only org-wide default, explicit grants only #49608

Triggered via pull request October 23, 2026 22:46
Status Success
Total duration 38m 3s
Artifacts 2

ci.yml

on: pull_request
Matrix: dogfood
Matrix: test
Dogfood Verify CLI
Dogfood Verify CLI
Temporal Conformance (live PG + MySQL)
Temporal Conformance (live PG + MySQL)
Build Core
8m 26s
Build Core
Build Docs
3m 57s
Build Docs
Console Pin Gate
Console Pin Gate
Test Core
24s
Test Core
Dogfood Regression Gate
10s
Dogfood Regression Gate
Fit to window
Zoom out
Zoom in

Annotations

10 warnings and 11 notices
Suite-duration ceiling
@objectstack/plugin-security: 538.40s, over its 474.43s ceiling. Slowest file: src/delegated-organization-membership.test.ts 28.98s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/plugin-hono-server: 79.65s, over its 78.61s ceiling. Slowest file: src/adapter-tls-listener.test.ts 7.10s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/plugin-auth: 762.17s, over its 600.45s ceiling. Slowest file: src/cloud-managed.test.ts 25.30s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/plugin-audit: 278.17s, over its 185.93s ceiling. Slowest file: src/parent-record-read-leaf.integration.test.ts 31.30s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/plugin-approvals: 317.12s, over its 290.60s ceiling. Slowest file: src/approver-address-readers.test.ts 5.98s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/objectql: 1004.64s, over its 952.27s ceiling. Slowest file: src/environment-overlay-email-locale-restart.test.ts 5.67s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/driver-turso: 304.83s, over its 272.37s ceiling. Slowest file: src/turso-remote-autonumber-concurrency.test.ts 8.69s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/driver-sqlite-wasm: 126.66s, over its 123.14s ceiling. Slowest file: src/sqlite-wasm-driver-autonumber.test.ts 1.25s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/driver-sql: 531.60s, over its 450.76s ceiling. Slowest file: src/adr0120-three-posture-conformance.test.ts 3.08s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/client: 186.00s, over its 179.74s ceiling. Slowest file: src/auth-rotated-session-token.test.ts 10.76s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
filter
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Dogfood Regression Gate
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Build Docs
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Build Core
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core (1/6)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core (6/6)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core (3/6)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core (2/6)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core (5/6)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core (4/6)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Artifacts

Produced during runtime
Name Size Digest
build-output
34.4 MB
sha256:9c0ed7e6c8b69f0d5f5f27cefe66a8628b80bdecc711bf4ef1babd852da06820
test-core-timing-table
114 KB
sha256:02b6a6c7e4ce5f40a8f81f35d05545286c45757a323e542cde9b738f968e0ac2