Skip to content

fix: eliminate TOCTOU race in EventService.send_message #12302

fix: eliminate TOCTOU race in EventService.send_message

fix: eliminate TOCTOU race in EventService.send_message #12302

Triggered via pull request May 11, 2026 16:04
Status Success
Total duration 28m 42s
Artifacts 15

server.yml

on: pull_request
Matrix: build-and-push-image
Check OpenAPI Schema
33s
Check OpenAPI Schema
Matrix: build-binary-and-test
Matrix: Merge Multi-Arch Manifests
Consolidate Build Information
7s
Consolidate Build Information
Update PR description with agent server image
4s
Update PR description with agent server image
Fit to window
Zoom out
Zoom in

Annotations

6 warnings and 1 notice
build-binary-and-test (ubuntu-latest)
No files were found with the provided path: dist/openhands-server*. No artifacts will be uploaded.
build-binary-and-test (macos-latest)
No files were found with the provided path: dist/openhands-server*. No artifacts will be uploaded.
Build & Push (golang-arm64)
Failed to save: Unable to reserve cache with key setup-uv-2-aarch64-unknown-linux-gnu-ubuntu-24.04-3.13-pruned-d180d1e1290f6a1f6e846269570622f72f01e333ffa41448ed4d69abf88a1116, another job may be creating this cache.
Build & Push (golang-amd64)
Failed to save: Unable to reserve cache with key setup-uv-2-x86_64-unknown-linux-gnu-ubuntu-24.04-3.13-pruned-d180d1e1290f6a1f6e846269570622f72f01e333ffa41448ed4d69abf88a1116, another job may be creating this cache.
Build & Push (python-amd64)
Failed to save: Unable to reserve cache with key setup-uv-2-x86_64-unknown-linux-gnu-ubuntu-24.04-3.13-pruned-d180d1e1290f6a1f6e846269570622f72f01e333ffa41448ed4d69abf88a1116, another job may be creating this cache.
Update PR description with agent server image
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: nefrob/pr-description@v1.2.0. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Update PR description with agent server image
Replacing matched PR body with content

Artifacts

Produced during runtime
Name Size Digest
OpenHands~software-agent-sdk~C0DA0F.dockerbuild
259 KB
sha256:855e4daf51c37aedb6c7183e14d60cddd094b37c67a159048853eab30eb41801
OpenHands~software-agent-sdk~HJBTZS.dockerbuild
274 KB
sha256:8a59d96fac054695b6a1f2eaa8fd16a85ba8597d65100d27d7e37a08ae7a9dbb
OpenHands~software-agent-sdk~L0B464.dockerbuild
289 KB
sha256:50a0a9fd4f1bf199aa6aefde34897279bbed2ecfe5db0b63e2700b2d85fb66b4
OpenHands~software-agent-sdk~MA9XX8.dockerbuild
260 KB
sha256:5c8f35074b2d65f931018dff9cf51c780a47d4af78aec7f37128a34d7e003087
OpenHands~software-agent-sdk~S6KNJ7.dockerbuild
317 KB
sha256:6ea67ba81da5a2ff5051f2293b2984c38e4cf00b8ddc5292e149710c16464f14
OpenHands~software-agent-sdk~TI90HA.dockerbuild
276 KB
sha256:ff260bc26ca3eaee4d1dc37c966d0d4d6264d67c8e51708bf4a771fc384f251f
build-info-golang-amd64 Expired
375 Bytes
sha256:ffb2fb74e2b71caae25ba659fc29e959596b5e86641c541e9796c2da69f52121
build-info-golang-arm64 Expired
375 Bytes
sha256:1ddee6503b96a9f21cfaab37f9798a3c653c841d1333d4422f9570b73927dc80
build-info-java-amd64 Expired
374 Bytes
sha256:edbbd95846ce9921335aab3f00eada88fb64eb1162d72710190fbbcc53d26b92
build-info-java-arm64 Expired
374 Bytes
sha256:da2215831c9eb25d8445f88cf414992403946f488510432dae4a8b819f650f8f
build-info-python-amd64 Expired
395 Bytes
sha256:da9e1d9ea4b92e197f65139608902028cb907d616d4341fbe0b944fcacdc3d56
build-info-python-arm64 Expired
395 Bytes
sha256:cac1275a6950421d38b55709cecc90b4fd828bfdfd8622f753be8a259203df98
manifest-info-golang Expired
305 Bytes
sha256:3c0c5763694f848b9b4f410db9724e923f6c263f51c8450892442dcb9330c993
manifest-info-java Expired
304 Bytes
sha256:c7449946990891762d5ee26b79ba50ec14a4527b3fdfad54932862febc464960
manifest-info-python Expired
323 Bytes
sha256:8959abd9e084f2ec47c560bd116992f6bc2f77d020c7a92d48aa0dbd7c220353