Skip to content
Validate Dependencies

fix(deps): glob 14, follow-redirects 1.16.2 and joi 18.3.1 clear three of the four new OSV advisories #6429

Sign in to view logs

fix(deps): glob 14, follow-redirects 1.16.2 and joi 18.3.1 clear three of the four new OSV advisories

fix(deps): glob 14, follow-redirects 1.16.2 and joi 18.3.1 clear three of the four new OSV advisories #6429

Triggered via pull request October 31, 2026 04:45
@objectstack-fleetobjectstack-fleet[bot]
opened #28324
claude/project-thread-n94g89
Status Success
Total duration 1m 19s
Artifacts –

validate-deps.yml

on: pull_request
Validate Package Dependencies
1m 16s
Validate Package Dependencies
Fit to window
Zoom out
Zoom in

Annotations

2 notices
OSV advisory inherited from the merge base
GHSA-g3hv-75wg-m249 (here: minimatch@10.2.6; at the merge base: minimatch@10.2.6) is matched by the merge base's lockfile (b33946512c9f) too, so it is main's to fix and does not fail this pull request; anchor finding card: #28292.
Validate Package Dependencies
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"