Skip to content

fix(hosted): refuse pnpm v5/v6 lock keys fail-closed #549

fix(hosted): refuse pnpm v5/v6 lock keys fail-closed

fix(hosted): refuse pnpm v5/v6 lock keys fail-closed #549

Triggered via pull request August 14, 2026 21:13
Status Failure
Total duration 15m 30s
Artifacts 63

ci.yml

on: pull_request
Matrix: coverage-docker
Matrix: test
Matrix: e2e-docker
Matrix: setup-matrix
Matrix: e2e
coverage-merge
35s
coverage-merge
Fit to window
Zoom out
Zoom in

Annotations

1 error, 25 warnings, and 2 notices
hosted-e2e
Process completed with exit code 101.
dispatch-tests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
hosted-e2e
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020, actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (golang)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (nuget)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (deno)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (gem)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (composer)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (cargo)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (npm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (pypi)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
setup-matrix (maven)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (golang)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (deno)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (pypi)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (npm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (nuget)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (composer)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (cargo)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (maven)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-docker (gem)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
coverage-merge
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e (ubuntu-latest, e2e_safety_pnpm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e (macos-latest, e2e_safety_pnpm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e (windows-latest, e2e_safety_pnpm)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
release-lint
all checks passed for 3.3.0
release-lint
version coherence OK: every stamped site already carries 3.3.0

Artifacts

Produced during runtime
Name Size Digest
SocketDev~socket-patch~09URGA.dockerbuild
34.7 KB
sha256:d7ce5058aa2637088c2cf712c9ba805277749bc1971b5fb625f555003670d744
SocketDev~socket-patch~12FLCW.dockerbuild
34.5 KB
sha256:f90ab9fa081e5d2c64ea1f2bb7dbd54c7c692570efbc5961b551d52db8dc1808
SocketDev~socket-patch~32DO7G.dockerbuild
32.1 KB
sha256:658e924ae2b40bee1b1e04c0dda66cced87dc52f380b7c3a3288cd6b1c45ee21
SocketDev~socket-patch~3I1XJH.dockerbuild
21.4 KB
sha256:bfbf27213263b150d033f87728e396fac333ad0fb621cde9f53781d1ae576e0e
SocketDev~socket-patch~4YO0TN.dockerbuild
24.6 KB
sha256:0efb09957e020d7e21534fcf7f53eaf53934d15d318b3ead5e3bab3ca49a1933
SocketDev~socket-patch~555PRL.dockerbuild
34.2 KB
sha256:26e733314ca882e738a71a002206e6944cdbaff524c2cf98d459e2f1462ad70a
SocketDev~socket-patch~77WEJN.dockerbuild
11.7 KB
sha256:8888a041fbe4c0ce39d5545457a6989aef418c91e8f760a5b0a040e495708c03
SocketDev~socket-patch~8EK17X.dockerbuild
35.1 KB
sha256:84a0ba0b2713da6b6cebce2fa40304b6c7cfd385763b17b2dcea562365564c0d
SocketDev~socket-patch~95NRJS.dockerbuild
31.7 KB
sha256:1a1dc7bd33a87e495a1e4103313f2100cfda6f7d2766e1e4c36e58ceb4d1a641
SocketDev~socket-patch~95Q8DZ.dockerbuild
34.9 KB
sha256:2a85e6c5733c9818bc06961e982a40dc893f4ef55512717c107a56a0bc6eb4da
SocketDev~socket-patch~9HTWZ9.dockerbuild
34.2 KB
sha256:3a6a1997094bfb335265c83897a65c974e9b648df5678a471bf81828634d81ed
SocketDev~socket-patch~9Z7ALH.dockerbuild
18 KB
sha256:5f26fb424a33565aba8948ffc35eb6defa2eb2a46be63ec582330c53939021b4
SocketDev~socket-patch~BRP2YF.dockerbuild
24.4 KB
sha256:0526939a402bb55367ce0ab154082cd98a680143d775b60bd9ab5dee28999059
SocketDev~socket-patch~CNPO76.dockerbuild
34.3 KB
sha256:a5860f64df0303b13e6eb44f2dd296934cc4dd2115ae8c793e9bf9689a2b703c
SocketDev~socket-patch~CY4G1Z.dockerbuild
23.4 KB
sha256:23ceddf9dbe8852a60fef2c3d6b68546cb9d35fb4333b9f7744c3911818f8d3e
SocketDev~socket-patch~DU2RZB.dockerbuild
34.3 KB
sha256:aef008ee03bfa5a53cec39352ccbdc452019b71900c51e57f835b3c26e484648
SocketDev~socket-patch~EK3ADN.dockerbuild
25.3 KB
sha256:0c614a9cf6cf65c85b2a6e0f4fe6329269473f1ab95f1676c1797ac1c41fe6b4
SocketDev~socket-patch~GOK7GZ.dockerbuild
33.4 KB
sha256:855d98e678f53a907b44120640f62ddd24c007c9e11090175d6a036c5b7e9c63
SocketDev~socket-patch~H4J50Q.dockerbuild
24.1 KB
sha256:e2795cb70c2b67f536b1d58fc507851643eab82bd200955ffcc8a4c4f172a991
SocketDev~socket-patch~HEBWII.dockerbuild
34.4 KB
sha256:319178b5c0cbbde7b8257b86c14b51923e88f4eb5a70d5721c4e76573510665f
SocketDev~socket-patch~HSA2TS.dockerbuild
30.2 KB
sha256:654be91fb99220b778ad4607788ae5d8add9d00f308f13a53194d0587c58ba27
SocketDev~socket-patch~I9ET1P.dockerbuild
24.7 KB
sha256:c43992d23fde6dac135714d1981b5f7900bc6ce0e72b9318073e51234f92ecc6
SocketDev~socket-patch~JETOQO.dockerbuild
22.4 KB
sha256:7f5aaf5082799f13adc8f9b7a28ecb20118084e0aca507e30994f7f6aec659cd
SocketDev~socket-patch~JIOF29.dockerbuild
24.1 KB
sha256:cd7275b4a4b8230a409d7d6799fdf8780c297fd4359f5ae6e3fc0aa2cf4af8b8
SocketDev~socket-patch~JLCANW.dockerbuild
35.4 KB
sha256:d116b8b72bd5a3c88799cdf34b87b6ebad010d0a6d146689282b130b6800c2b8
SocketDev~socket-patch~JUW41W.dockerbuild
34.7 KB
sha256:9488eb1368d3d7b36e6a3e69b650d40071d887919406f889c3e2c233505e9293
SocketDev~socket-patch~LHGU4K.dockerbuild
35.4 KB
sha256:b186c7cd4332bd3b06cc3f5655e2489c99b9752f74433f0a122ed53f3df25ee4
SocketDev~socket-patch~N379WV.dockerbuild
33.6 KB
sha256:f459d56d652b395b51c8a0a97667bd5fd930eb033559b1ec5da176a7bf8342e2
SocketDev~socket-patch~NGZS58.dockerbuild
33.6 KB
sha256:ab9cfa61e9d965e8a15e8f5be61c2d0a566bddec150c1d205440b8466fa05d7d
SocketDev~socket-patch~OYYN68.dockerbuild
34.2 KB
sha256:4f6c58075389b0d757c4de0625957e7216940a825a70dfb32d030476480252e0
SocketDev~socket-patch~P4N03S.dockerbuild
21.6 KB
sha256:9d5121f1ab689c03494c68fe65a36cc723b1acf0c3dbdd84070384eeaba85440
SocketDev~socket-patch~QF398D.dockerbuild
17.8 KB
sha256:19b636f6844f44387f9186bf41f68916cc46c3aea54a062dcad68019a9d572ec
SocketDev~socket-patch~QPBTJF.dockerbuild
18.5 KB
sha256:f0ace68cb8811a6fd6cd371e1a810e640020d94f181208c2e395ca7f87a32210
SocketDev~socket-patch~RH5SI9.dockerbuild
20.3 KB
sha256:f08fe8d78d9f09d8d6c182eece664b396c9f4e9dd9ebbd32607db479398f4ac1
SocketDev~socket-patch~S48WH8.dockerbuild
20.7 KB
sha256:1deecc6ac3f4c695d00a7f847c8a443640cae289f023377197a0f1f00d728ac6
SocketDev~socket-patch~SG6KFN.dockerbuild
35.4 KB
sha256:11fa87d20b974799a805e9d15c8baf35d8ae7579078eac9fb1f58160b2c84329
SocketDev~socket-patch~SNXM71.dockerbuild
34.1 KB
sha256:cb15bb35bb7c0d22aeac28de4c8fe65ca29af4a01c52e58dc2c4bbc225c8747e
SocketDev~socket-patch~TF1YAM.dockerbuild
35.4 KB
sha256:56affff653f204ebfb44130d08d80007c6b7af2cd8a9de14b69a325b42862330
SocketDev~socket-patch~TR2MMB.dockerbuild
33.8 KB
sha256:01fae7cd495a28c24bcf9b9dec9b6f1976b1bef4a5648965c777e6005a3336a1
SocketDev~socket-patch~TVCHJD.dockerbuild
18 KB
sha256:5f908a83c43f9baa964cbb94be46e0e0956826dc42ab53e86dd9f446c0c79f7e
SocketDev~socket-patch~UI2PIF.dockerbuild
18.2 KB
sha256:ace2f922676ef2ecff16741835ae00e3359a9bb9a845bde3ae03ba3aed9ab9bc
SocketDev~socket-patch~UK044H.dockerbuild
34.5 KB
sha256:da3c5bba3efbd54597a94af0257d4b33b4c4aae793afa703930746cf7992616d
SocketDev~socket-patch~UKSX7I.dockerbuild
33.6 KB
sha256:409632048aa2311953f008ee2a8598141df1ef12346c820cc45fd1b5ac2b82f3
SocketDev~socket-patch~VNQ05G.dockerbuild
17.7 KB
sha256:b078eca2e33673f6d3319cb578e3ef1a2f6434623526c3180c5931842c433410
SocketDev~socket-patch~VR8TKX.dockerbuild
21.7 KB
sha256:fefa211c67a83a115a9c277cb8d0892b19284bc35caa5facdfe79d89f31d8c3c
SocketDev~socket-patch~VTUBXP.dockerbuild
34.8 KB
sha256:45230f4cba713fd3326a78e6828dc589da3c28c8efc153afc144d4b3046e2df7
SocketDev~socket-patch~VXFB9T.dockerbuild
23.9 KB
sha256:006ff06cf24153264fa2dcfa84a02a8324377d22303843583364635d91e423ff
SocketDev~socket-patch~VYL6KW.dockerbuild
33.6 KB
sha256:9c7e26663f9aedbdf360372c24c2bce672866762c988c9ef188c8b2091e6114f
SocketDev~socket-patch~WENTHQ.dockerbuild
35.8 KB
sha256:97e59106314443fe5407c9242a1b00a00b5358f061aba8e240e29d9d2105c67c
SocketDev~socket-patch~X97JKG.dockerbuild
24.4 KB
sha256:4431e74093e04a1d89e922649d1b6271943a0da26e722bd5c5097a9c0a586a23
SocketDev~socket-patch~XULUJP.dockerbuild
10.7 KB
sha256:61353a511db667f6abd2d5903b6de938e94dec54621394987f182dcf28e89681
SocketDev~socket-patch~YN06WH.dockerbuild
34.5 KB
sha256:1e14eee6cf61e1ad3eba0eb674de7a2aa43749262783e6ac183bcdcef4514fdf
SocketDev~socket-patch~YX9NN4.dockerbuild
35.2 KB
sha256:4caa549ab561e0f9a9b3c37be8a2d4daef1485733ee03f09faa125c24d631169
SocketDev~socket-patch~Z2WQQ8.dockerbuild
10.9 KB
sha256:410a3e4fd24d769068bf690f5415bde6bcdfc5134fd95c24615f68835d127ae5
setup-matrix-cargo
940 Bytes
sha256:d2c04bfd071a7b229222562cc211f053d2fd4fd53e7944fae09d3127941d27f6
setup-matrix-composer
920 Bytes
sha256:2e509659713d80ea98bdeb6e962d2428243eb4456586b338fc480189137bd7e1
setup-matrix-deno
907 Bytes
sha256:dd8c4feaaf2d91b6750f11f849a10d8166d2f8ff31cbf071d758af7345fda52d
setup-matrix-gem
932 Bytes
sha256:52c4454f933f3f890bc8aee3702fd41e88674cc0bf107615ef8e977299a64288
setup-matrix-golang
925 Bytes
sha256:f8d3704cff69082d3cdc41cec857dae28a0b605346ea66d9eed6727570a177ea
setup-matrix-maven
937 Bytes
sha256:40dbf731311b212d1f9cfcd226e0fcffe2439ad78f031b17658452e40a7d755f
setup-matrix-npm
1.73 KB
sha256:54f7c5c88fe8ec8406b1ee0e2391452793a11d735310191383283a683e19ada0
setup-matrix-nuget
931 Bytes
sha256:629bc9a4d37d92a68450af421d91454bb7d11b6be5abc0001b0f76edece4cb17
setup-matrix-pypi
1.89 KB
sha256:af7ae2af57bfb8293fe818df6121173af7423e59bb8508a80b8ec532c8f874cc