[CVE][MEDIUM] Upgrade minimatch and override brace-expansion to 2.0.3 to fix CVE-2026-33750 #9280
Annotations
12 warnings
|
Complete job
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, actions/checkout@v3, actions/github-script@v6, actions/setup-go@v5, actions/setup-java@v4, actions/setup-node@v4, actions/setup-python@v5, actions/upload-artifact@v4, pnpm/action-setup@v3, stCarolas/setup-maven@v5. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
FULL → Build:
packages/import-java-classes-component/src/components/ImportJavaClasses/ImportJavaClassesWizardSecondStep.tsx#L69
React Hook useCallback has a missing dependency: 'accessorPrefixesList'. Either include it or remove the dependency array
|
|
FULL → Build:
packages/import-java-classes-component/src/components/ImportJavaClasses/ImportJavaClassesWizardSecondStep.tsx#L53
React Hook useCallback has a missing dependency: 'accessorPrefixesList'. Either include it or remove the dependency array
|
|
FULL → Build:
packages/editor/src/envelope/KeyBindingsHelpOverlay/KeyBindingsHelpOverlay.tsx#L85
React Hook useEffect has a missing dependency: 'envelopeContext.services.keyboardShortcuts'. Either include it or remove the dependency array
|
|
FULL → Build:
packages/editor/src/envelope/KeyBindingsHelpOverlay/KeyBindingsHelpOverlay.tsx#L76
React Hook useEffect has a missing dependency: 'envelopeContext.services.keyboardShortcuts'. Either include it or remove the dependency array
|
|
FULL → Build:
packages/editor/src/envelope/KeyBindingsHelpOverlay/KeyBindingsHelpOverlay.tsx#L66
React Hook useMemo has a complex expression in the dependency array. Extract it to a separate variable so it can be statically checked
|
|
FULL → Build:
packages/editor/src/envelope/KeyBindingsHelpOverlay/KeyBindingsHelpOverlay.tsx#L66
React Hook useMemo has missing dependencies: 'envelopeContext.operatingSystem' and 'envelopeContext.services.keyboardShortcuts'. Either include them or remove the dependency array
|
|
FULL → Build:
packages/envelope/src/embedded/EmbeddedEnvelopeFactory.tsx#L101
React Hook useImperativeHandle has a missing dependency: 'props'. Either include it or remove the dependency array. However, 'props' will change when *any* prop changes, so the preferred fix is to destructure the 'props' object outside of the useImperativeHandle call and refer to those specific props inside useImperativeHandle
|
|
FULL → Build:
packages/envelope/src/embedded/EmbeddedEnvelopeFactory.tsx#L96
React Hook useMemo has a missing dependency: 'props'. Either include it or remove the dependency array. However, 'props' will change when *any* prop changes, so the preferred fix is to destructure the 'props' object outside of the useMemo call and refer to those specific props inside useMemo
|
|
FULL → Build
Neither a .vscodeignore file nor a "files" property in package.json was found. To ensure only necessary files are included in your extension, add a .vscodeignore file or specify the "files" property in package.json. More info: https://aka.ms/vscode-vscodeignore
|
|
FULL → Build
Neither a .vscodeignore file nor a "files" property in package.json was found. To ensure only necessary files are included in your extension, add a .vscodeignore file or specify the "files" property in package.json. More info: https://aka.ms/vscode-vscodeignore
|
|
Setup environment
Restore cache failed: Dependencies file is not found in D:\a\incubator-kie-tools\incubator-kie-tools. Supported file pattern: go.sum
|
Loading