You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Root cause: the dependency advisory gate (first command of the nightly static step) blocked on nightly commit 1a72d08. Two registry advisories were published the same morning: GHSA-mrwp-f3q8-3g9p (follow-redirects 1.16.0–1.16.1, high) and GHSA-g3hv-75wg-m249 (minimatch < 11.0.1, medium). The test shards and the native partitions all passed.
Fixed by pm-irviv0 in #1638 (merged as 3ff44fb). It adds pnpm-workspace.yaml overrides that resolve follow-redirects 1.16.2 and minimatch 11.0.3. The GitHub dependency graph already reports those versions. CI / Gates (static) passed on main 9585ea6 (job), and that job runs the same advisory gate. Recurrence stays with pm-2zjs0g.
Activity
github-actions commentedon Oct 31, 2026
Recurrence tracked by pm-2zjs0g.
unbraind commentedon Oct 31, 2026
Root cause: the dependency advisory gate (first command of the nightly static step) blocked on nightly commit 1a72d08. Two registry advisories were published the same morning: GHSA-mrwp-f3q8-3g9p (follow-redirects 1.16.0–1.16.1, high) and GHSA-g3hv-75wg-m249 (minimatch < 11.0.1, medium). The test shards and the native partitions all passed.
Fixed by pm-irviv0 in #1638 (merged as 3ff44fb). It adds
pnpm-workspace.yamloverrides that resolve follow-redirects 1.16.2 and minimatch 11.0.3. The GitHub dependency graph already reports those versions.CI / Gates (static)passed on main 9585ea6 (job), and that job runs the same advisory gate. Recurrence stays with pm-2zjs0g.