Skip to content
ci

fix: Unauthenticated deletion of installation records via operator injection in device token deduplication (GHSA-cc6h-c8m4-hgrx) #11626

Sign in to view logs

fix: Unauthenticated deletion of installation records via operator injection in device token deduplication (GHSA-cc6h-c8m4-hgrx)

fix: Unauthenticated deletion of installation records via operator injection in device token deduplication (GHSA-cc6h-c8m4-hgrx) #11626

Re-run triggered September 9, 2026 12:01
@mtrezzamtrezza
#10658
mtrezza:fix/GHSA-cc6h-c8m4-hgrx-v8
Status Success
Total duration 7m 54s
Artifacts –

ci.yml

on: pull_request
Node Engine Check
30s
Node Engine Check
Lint
43s
Lint
Check Definitions
29s
Check Definitions
Circular Dependencies
32s
Circular Dependencies
Docker Build
4m 52s
Docker Build
NPM Lock File Version
21s
NPM Lock File Version
Check Types
31s
Check Types
Matrix: Code Analysis
Matrix: check-mongo
Matrix: check-postgres
Fit to window
Zoom out
Zoom in

Annotations

1 warning
MongoDB 6, ReplicaSet
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/checkout@v4, actions/setup-node@v4, codecov/codecov-action@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/