Copilot
e51e5fe84f
Check dist / Check dist/ (push) Failing after 0s
CodeQL analysis / CodeQL analysis (push) Failing after 0s
Licensed / Licensed (push) Failing after 1s
Basic validation / Basic validation (push) Failing after 1s
e2e-cache / Test pnpm (Node 26, macos-15-intel) (push) Has been cancelled
e2e-cache / Test pnpm (Node 26, macos-latest) (push) Has been cancelled
e2e-cache / Test pnpm (Node 26, ubuntu-latest) (push) Has been cancelled
proxy / test-proxy (push) Has been cancelled
e2e-cache / Test npm (Node 22, macos-15-intel) (push) Has been cancelled
e2e-cache / Test npm (Node 22, macos-latest) (push) Has been cancelled
e2e-cache / Test npm (Node 22, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test npm (Node 22, windows-latest) (push) Has been cancelled
e2e-cache / Test npm (Node 24, macos-15-intel) (push) Has been cancelled
e2e-cache / Test npm (Node 24, macos-latest) (push) Has been cancelled
e2e-cache / Test npm (Node 24, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test npm (Node 24, windows-latest) (push) Has been cancelled
e2e-cache / Test npm (Node 26, macos-15-intel) (push) Has been cancelled
e2e-cache / Test npm (Node 26, macos-latest) (push) Has been cancelled
e2e-cache / Test npm (Node 26, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test npm (Node 26, windows-latest) (push) Has been cancelled
e2e-cache / Test pnpm (Node 22, macos-15-intel) (push) Has been cancelled
e2e-cache / Test pnpm (Node 22, macos-latest) (push) Has been cancelled
e2e-cache / Test pnpm (Node 22, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test pnpm (Node 22, windows-latest) (push) Has been cancelled
e2e-cache / Test pnpm (Node 24, macos-15-intel) (push) Has been cancelled
e2e-cache / Test pnpm (Node 24, macos-latest) (push) Has been cancelled
e2e-cache / Test pnpm (Node 24, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test pnpm (Node 24, windows-latest) (push) Has been cancelled
e2e-cache / Test pnpm (Node 26, windows-latest) (push) Has been cancelled
e2e-cache / Test yarn 1 (Node 22, macos-15-intel) (push) Has been cancelled
e2e-cache / Test yarn 1 (Node 22, macos-latest) (push) Has been cancelled
e2e-cache / Test yarn 1 (Node 22, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test yarn 1 (Node 22, windows-latest) (push) Has been cancelled
e2e-cache / Test yarn 1 (Node 24, macos-15-intel) (push) Has been cancelled
e2e-cache / Test yarn 1 (Node 24, macos-latest) (push) Has been cancelled
e2e-cache / Test yarn 1 (Node 24, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test yarn 1 (Node 24, windows-latest) (push) Has been cancelled
e2e-cache / Test yarn 1 (Node 26, macos-15-intel) (push) Has been cancelled
e2e-cache / Test yarn 1 (Node 26, macos-latest) (push) Has been cancelled
e2e-cache / Test yarn 1 (Node 26, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test yarn 1 (Node 26, windows-latest) (push) Has been cancelled
e2e-cache / Test yarn 3 (Node 22, macos-15-intel) (push) Has been cancelled
e2e-cache / Test yarn 3 (Node 22, macos-latest) (push) Has been cancelled
e2e-cache / Test yarn 3 (Node 22, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test yarn 3 (Node 22, windows-latest) (push) Has been cancelled
e2e-cache / Test yarn 3 (Node 24, macos-15-intel) (push) Has been cancelled
versions / node-latest-aliases (current, macos-latest) (push) Has been cancelled
versions / node-latest-aliases (current, ubuntu-latest) (push) Has been cancelled
versions / node-latest-aliases (current, windows-latest) (push) Has been cancelled
versions / node-latest-aliases (latest, macos-15-intel) (push) Has been cancelled
versions / node-latest-aliases (latest, macos-latest) (push) Has been cancelled
versions / node-latest-aliases (latest, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test yarn 3 (Node 24, macos-latest) (push) Has been cancelled
e2e-cache / Test yarn 3 (Node 24, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test yarn 3 (Node 24, windows-latest) (push) Has been cancelled
e2e-cache / Test yarn 3 (Node 26, macos-15-intel) (push) Has been cancelled
e2e-cache / Test yarn 3 (Node 26, macos-latest) (push) Has been cancelled
e2e-cache / Test yarn 3 (Node 26, ubuntu-latest) (push) Has been cancelled
proxy / test-bypass-proxy (push) Has been cancelled
versions / local-cache (22, macos-15-intel) (push) Has been cancelled
e2e-cache / Test yarn 3 (Node 26, windows-latest) (push) Has been cancelled
e2e-cache / Test yarn subprojects (22) (push) Has been cancelled
e2e-cache / Test yarn subprojects (24) (push) Has been cancelled
e2e-cache / Test yarn subprojects (26) (push) Has been cancelled
e2e-cache / Test yarn subprojects all locally managed (22) (push) Has been cancelled
e2e-cache / Test yarn subprojects all locally managed (24) (push) Has been cancelled
e2e-cache / Test yarn subprojects all locally managed (26) (push) Has been cancelled
e2e-cache / Test yarn subprojects some locally managed (22) (push) Has been cancelled
e2e-cache / Test yarn subprojects some locally managed (24) (push) Has been cancelled
e2e-cache / Test yarn subprojects some locally managed (26) (push) Has been cancelled
e2e-cache / Test yarn subprojects managed by git (22) (push) Has been cancelled
e2e-cache / Test yarn subprojects managed by git (24) (push) Has been cancelled
e2e-cache / Test yarn subprojects managed by git (26) (push) Has been cancelled
e2e-cache / Test auto cache with top-level packageManager (22, macos-15-intel) (push) Has been cancelled
versions / local-cache (22, macos-latest) (push) Has been cancelled
versions / local-cache (22, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test auto cache with top-level packageManager (22, macos-latest) (push) Has been cancelled
e2e-cache / Test auto cache with top-level packageManager (22, ubuntu-latest) (push) Has been cancelled
versions / local-cache (22, windows-latest) (push) Has been cancelled
versions / local-cache (24, macos-15-intel) (push) Has been cancelled
e2e-cache / Test auto cache with top-level packageManager (22, windows-latest) (push) Has been cancelled
versions / local-cache (24, macos-latest) (push) Has been cancelled
e2e-cache / Test auto cache with top-level packageManager (24, macos-15-intel) (push) Has been cancelled
e2e-cache / Test auto cache with top-level packageManager (24, macos-latest) (push) Has been cancelled
e2e-cache / Test auto cache with top-level packageManager (24, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test auto cache with top-level packageManager (24, windows-latest) (push) Has been cancelled
versions / local-cache (24, ubuntu-latest) (push) Has been cancelled
versions / local-cache (24, windows-latest) (push) Has been cancelled
e2e-cache / Test auto cache with top-level packageManager (26, macos-15-intel) (push) Has been cancelled
versions / local-cache (26, macos-15-intel) (push) Has been cancelled
versions / local-cache (26, macos-latest) (push) Has been cancelled
versions / local-cache (26, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test auto cache with top-level packageManager (26, macos-latest) (push) Has been cancelled
e2e-cache / Test auto cache with devEngines.packageManager (26, macos-15-intel) (push) Has been cancelled
e2e-cache / Test auto cache with devEngines.packageManager (26, macos-latest) (push) Has been cancelled
e2e-cache / Test auto cache with devEngines.packageManager (26, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test auto cache with devEngines.packageManager (26, windows-latest) (push) Has been cancelled
versions / node-latest-aliases (current, macos-15-intel) (push) Has been cancelled
versions / node-latest-aliases (latest, windows-latest) (push) Has been cancelled
versions / node-latest-aliases (node, macos-15-intel) (push) Has been cancelled
versions / node-latest-aliases (node, macos-latest) (push) Has been cancelled
versions / node-latest-aliases (node, ubuntu-latest) (push) Has been cancelled
versions / node-latest-aliases (node, windows-latest) (push) Has been cancelled
versions / local-cache (26, windows-latest) (push) Has been cancelled
versions / lts-syntax (lts/*, macos-15-intel) (push) Has been cancelled
versions / lts-syntax (lts/*, ubuntu-latest) (push) Has been cancelled
versions / rc-syntax (26.0.0-rc.1, macos-15-intel) (push) Has been cancelled
versions / rc-syntax (26.0.0-rc.1, macos-latest) (push) Has been cancelled
versions / rc-syntax (26.0.0-rc.1, ubuntu-latest) (push) Has been cancelled
versions / rc-syntax (26.0.0-rc.1, windows-latest) (push) Has been cancelled
versions / manifest (22.0.0, macos-15-intel) (push) Has been cancelled
versions / manifest (22.0.0, macos-latest) (push) Has been cancelled
versions / manifest (22.0.0, ubuntu-latest) (push) Has been cancelled
versions / manifest (22.0.0, windows-latest) (push) Has been cancelled
versions / check-latest (26, macos-latest) (push) Has been cancelled
versions / check-latest (26, ubuntu-latest) (push) Has been cancelled
versions / check-latest (26, windows-latest) (push) Has been cancelled
versions / version-file (.nvmrc, macos-15-intel) (push) Has been cancelled
versions / version-file (.nvmrc, macos-latest) (push) Has been cancelled
versions / version-file (.nvmrc, ubuntu-latest) (push) Has been cancelled
versions / version-file (.nvmrc, windows-latest) (push) Has been cancelled
versions / version-file (.tool-versions, macos-15-intel) (push) Has been cancelled
versions / lts-syntax (lts/*, windows-latest) (push) Has been cancelled
e2e-cache / Test auto cache with top-level packageManager (26, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test auto cache with top-level packageManager (26, windows-latest) (push) Has been cancelled
versions / lts-syntax (lts/-1, macos-15-intel) (push) Has been cancelled
versions / lts-syntax (lts/-1, ubuntu-latest) (push) Has been cancelled
versions / lts-syntax (lts/-1, windows-latest) (push) Has been cancelled
versions / v8-canary-syntax (26-v8-canary, macos-15-intel) (push) Has been cancelled
versions / v8-canary-syntax (26-v8-canary, macos-latest) (push) Has been cancelled
versions / v8-canary-syntax (26-v8-canary, ubuntu-latest) (push) Has been cancelled
versions / v8-canary-syntax (26-v8-canary, windows-latest) (push) Has been cancelled
versions / v8-canary-syntax (26.0.0-v8-canary, macos-15-intel) (push) Has been cancelled
versions / v8-canary-syntax (26.0.0-v8-canary, macos-latest) (push) Has been cancelled
versions / v8-canary-syntax (26.0.0-v8-canary, ubuntu-latest) (push) Has been cancelled
versions / v8-canary-syntax (26.0.0-v8-canary, windows-latest) (push) Has been cancelled
versions / v8-canary-syntax (26.0.0-v8-canary20251016054584e5cf, macos-15-intel) (push) Has been cancelled
versions / v8-canary-syntax (26.0.0-v8-canary20251016054584e5cf, macos-latest) (push) Has been cancelled
versions / v8-canary-syntax (26.0.0-v8-canary20251016054584e5cf, ubuntu-latest) (push) Has been cancelled
versions / v8-canary-syntax (26.0.0-v8-canary20251016054584e5cf, windows-latest) (push) Has been cancelled
versions / nightly-syntax (24.0.0-nightly, macos-15-intel) (push) Has been cancelled
versions / nightly-syntax (24.0.0-nightly, macos-latest) (push) Has been cancelled
versions / nightly-syntax (24.0.0-nightly, ubuntu-latest) (push) Has been cancelled
versions / nightly-syntax (24.0.0-nightly, windows-latest) (push) Has been cancelled
versions / nightly-syntax (25-nightly, macos-15-intel) (push) Has been cancelled
versions / nightly-syntax (25-nightly, macos-latest) (push) Has been cancelled
versions / nightly-syntax (25-nightly, ubuntu-latest) (push) Has been cancelled
versions / nightly-syntax (25-nightly, windows-latest) (push) Has been cancelled
versions / nightly-syntax (26-nightly, macos-15-intel) (push) Has been cancelled
versions / nightly-syntax (26-nightly, macos-latest) (push) Has been cancelled
versions / nightly-syntax (26-nightly, ubuntu-latest) (push) Has been cancelled
versions / nightly-syntax (26-nightly, windows-latest) (push) Has been cancelled
versions / rc-syntax (22.14.0-rc.1, macos-15-intel) (push) Has been cancelled
versions / rc-syntax (22.14.0-rc.1, macos-latest) (push) Has been cancelled
versions / rc-syntax (22.14.0-rc.1, ubuntu-latest) (push) Has been cancelled
versions / rc-syntax (22.14.0-rc.1, windows-latest) (push) Has been cancelled
versions / rc-syntax (24.0.0-rc.4, macos-15-intel) (push) Has been cancelled
versions / rc-syntax (24.0.0-rc.4, macos-latest) (push) Has been cancelled
e2e-cache / Test auto cache with devEngines.packageManager (22, macos-15-intel) (push) Has been cancelled
versions / rc-syntax (24.0.0-rc.4, ubuntu-latest) (push) Has been cancelled
versions / rc-syntax (24.0.0-rc.4, windows-latest) (push) Has been cancelled
versions / manifest (24.9.0, macos-15-intel) (push) Has been cancelled
versions / manifest (24.9.0, macos-latest) (push) Has been cancelled
versions / manifest (24.9.0, ubuntu-latest) (push) Has been cancelled
versions / manifest (24.9.0, windows-latest) (push) Has been cancelled
versions / manifest (26.5.0, macos-15-intel) (push) Has been cancelled
versions / manifest (26.5.0, macos-latest) (push) Has been cancelled
versions / manifest (26.5.0, ubuntu-latest) (push) Has been cancelled
versions / manifest (26.5.0, windows-latest) (push) Has been cancelled
versions / check-latest (22, macos-15-intel) (push) Has been cancelled
versions / check-latest (22, macos-latest) (push) Has been cancelled
versions / check-latest (22, ubuntu-latest) (push) Has been cancelled
versions / check-latest (22, windows-latest) (push) Has been cancelled
versions / check-latest (24, macos-15-intel) (push) Has been cancelled
versions / check-latest (24, macos-latest) (push) Has been cancelled
versions / check-latest (24, ubuntu-latest) (push) Has been cancelled
versions / check-latest (24, windows-latest) (push) Has been cancelled
versions / check-latest (26, macos-15-intel) (push) Has been cancelled
versions / version-file-volta-extends (ubuntu-latest) (push) Has been cancelled
versions / version-file-volta-extends (windows-latest) (push) Has been cancelled
versions / node-dist (21, macos-15-intel) (push) Has been cancelled
versions / node-dist (21, macos-latest) (push) Has been cancelled
versions / node-dist (21, ubuntu-latest) (push) Has been cancelled
versions / node-dist (21, windows-latest) (push) Has been cancelled
e2e-cache / Test auto cache with devEngines.packageManager (22, macos-latest) (push) Has been cancelled
versions / node-dist (23, macos-15-intel) (push) Has been cancelled
versions / node-dist (23, macos-latest) (push) Has been cancelled
versions / node-dist (23, ubuntu-latest) (push) Has been cancelled
versions / version-file (.tool-versions, macos-latest) (push) Has been cancelled
versions / version-file (.tool-versions, ubuntu-latest) (push) Has been cancelled
versions / version-file (.tool-versions, windows-latest) (push) Has been cancelled
versions / version-file (.tool-versions-node, macos-15-intel) (push) Has been cancelled
versions / version-file (.tool-versions-node, macos-latest) (push) Has been cancelled
versions / version-file (.tool-versions-node, ubuntu-latest) (push) Has been cancelled
versions / version-file (.tool-versions-node, windows-latest) (push) Has been cancelled
versions / version-file (package.json, macos-15-intel) (push) Has been cancelled
versions / version-file (package.json, macos-latest) (push) Has been cancelled
versions / version-file (package.json, ubuntu-latest) (push) Has been cancelled
versions / version-file (package.json, windows-latest) (push) Has been cancelled
versions / version-file-dev-engines (macos-latest) (push) Has been cancelled
versions / version-file-dev-engines (ubuntu-latest) (push) Has been cancelled
versions / version-file-dev-engines (windows-latest) (push) Has been cancelled
versions / version-file-volta (macos-15-intel) (push) Has been cancelled
versions / version-file-volta (macos-latest) (push) Has been cancelled
versions / version-file-volta (ubuntu-latest) (push) Has been cancelled
versions / version-file-volta (windows-latest) (push) Has been cancelled
versions / version-file-volta-extends (macos-15-intel) (push) Has been cancelled
versions / version-file-volta-extends (macos-latest) (push) Has been cancelled
versions / node-dist (23, windows-latest) (push) Has been cancelled
versions / old-versions (macos-15-intel) (push) Has been cancelled
versions / old-versions (ubuntu-latest) (push) Has been cancelled
versions / old-versions (windows-latest) (push) Has been cancelled
versions / arch (push) Has been cancelled
e2e-cache / Test auto cache with devEngines.packageManager (22, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test auto cache with devEngines.packageManager (22, windows-latest) (push) Has been cancelled
e2e-cache / Test auto cache with devEngines.packageManager (24, macos-15-intel) (push) Has been cancelled
e2e-cache / Test auto cache with devEngines.packageManager (24, macos-latest) (push) Has been cancelled
e2e-cache / Test auto cache with devEngines.packageManager (24, ubuntu-latest) (push) Has been cancelled
e2e-cache / Test auto cache with devEngines.packageManager (24, windows-latest) (push) Has been cancelled
* Initial plan * fix: update brace-expansion to address GHSA-3jxr-9vmj-r5cp and rebuild dist - brace-expansion 1.1.13 → 1.1.16 (GHSA-3jxr-9vmj-r5cp patched floor: 1.1.16) - brace-expansion 2.1.1 → 2.1.2 (GHSA-3jxr-9vmj-r5cp patched floor: 2.1.2) - brace-expansion 5.0.6 → 5.0.8 (GHSA-3jxr-9vmj-r5cp patched floor: 5.0.7; also fixes GHSA-mh99-v99m-4gvg) - Regenerated package-lock.json - Rebuilt dist/setup/index.js and dist/cache-save/index.js with patched dependency Closes #1596 * fix: eliminate remaining brace-expansion vulnerabilities and update license cache ## Basic validation CI fix Add `overrides` in package.json to eliminate all brace-expansion 1.x and 2.x from the dependency tree, resolving GHSA-mh99-v99m-4gvg for all packages: - `"@actions/glob": "$@actions/glob"` - forces @actions/cache to use the root @actions/glob@0.7.0 (minimatch@10.x → brace-expansion@5.0.8) instead of its bundled @actions/glob@0.6.1 (minimatch@3.x → brace-expansion@1.x) - `"glob": {"minimatch": "^10.2.5"}` - forces glob@10.x to use minimatch@10.x → brace-expansion@5.0.8 instead of minimatch@9.x → brace-expansion@2.x - `"test-exclude": "^7.0.2"` - upgrades test-exclude to a version that natively uses minimatch@10.x (instead of @3.x), removing brace-expansion@1.x from the jest coverage instrumentation path `npm audit --audit-level=high` now reports 0 vulnerabilities. ## Licensed CI fix Update .licenses/npm/ cache to match the new dependency tree: - Add: brace-expansion-5.0.8.dep.yml - Add: minimatch-10.2.6.dep.yml - Remove stale: brace-expansion-1.1.13.dep.yml (already done in prev commit) - Remove stale: brace-expansion-5.0.6.dep.yml (already done in prev commit) - Remove stale: minimatch-3.1.5.dep.yml - Remove stale: @actions/glob-0.6.1.dep.yml - Remove stale: concat-map.dep.yml - Remove stale: balanced-match-1.0.2.dep.yml Rebuild dist artifacts to include updated brace-expansion. * fix: replace brace-expansion workarounds with single override --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>