Skip to content

Fix npm audit vulnerabilities in /js directory #6561

Fix npm audit vulnerabilities in /js directory

Fix npm audit vulnerabilities in /js directory #6561

Re-run triggered November 21, 2025 23:49
Status Cancelled
Total duration 1d 14h 12m 27s
Artifacts 3

linux_minimal_build.yml

on: pull_request
1. Build Full ORT and Generate ORT Files
16m 41s
1. Build Full ORT and Generate ORT Files
2. Build Minimal (Exceptions Disabled)
1d 0h
2. Build Minimal (Exceptions Disabled)
4. Build Minimal (Globally Allowed Types)
0s
4. Build Minimal (Globally Allowed Types)
5. Build Extended Minimal
0s
5. Build Extended Minimal
6a. Build Regular (No Optional Features)
1d 0h
6a. Build Regular (No Optional Features)
6b. Build Minimal (No Optional Features)
0s
6b. Build Minimal (No Optional Features)
6c. Build Extended Minimal (No Optional Features)
0s
6c. Build Extended Minimal (No Optional Features)
3a. Build Minimal (Custom Ops)
8m 9s
3a. Build Minimal (Custom Ops)
3b. Build Minimal (Type Reduction)
8m 4s
3b. Build Minimal (Type Reduction)
7. Build Extended Minimal (Android NNAPI)
9m 2s
7. Build Extended Minimal (Android NNAPI)
Fit to window
Zoom out
Zoom in

Annotations

6 errors and 24 warnings
2. Build Minimal (Exceptions Disabled)
The job has exceeded the maximum execution time while awaiting a runner for 24h0m0s
6a. Build Regular (No Optional Features)
The job has exceeded the maximum execution time while awaiting a runner for 24h0m0s
6b. Build Minimal (No Optional Features)
The job has exceeded the maximum execution time while awaiting a runner for 24h0m0s
4. Build Minimal (Globally Allowed Types)
The job has exceeded the maximum execution time while awaiting a runner for 24h0m0s
6c. Build Extended Minimal (No Optional Features)
The job has exceeded the maximum execution time while awaiting a runner for 24h0m0s
5. Build Extended Minimal
The job has exceeded the maximum execution time while awaiting a runner for 24h0m0s
1. Build Full ORT and Generate ORT Files
Terrapin tool path provided but not found at 'C:/local/Terrapin/TerrapinRetrievalTool.exe'. Attempting direct download for vcpkg.
3a. Build Minimal (Custom Ops)
2025-11-23 04:24:00,958 build [INFO] - /opt/hostedtoolcache/cmake/3.31.6/linux-x86_64/bin/cmake /mnt/vss/_work/onnxruntime/onnxruntime/cmake -Donnxruntime_ENABLE_EXTERNAL_CUSTOM_OP_SCHEMAS=OFF -Donnxruntime_RUN_ONNX_TESTS=OFF -Donnxruntime_GENERATE_TEST_REPORTS=ON -DPython_EXECUTABLE=/usr/bin/python3 -Donnxruntime_USE_VCPKG=ON -Donnxruntime_USE_MIMALLOC=OFF -Donnxruntime_ENABLE_PYTHON=OFF -Donnxruntime_BUILD_CSHARP=OFF -Donnxruntime_BUILD_JAVA=OFF -Donnxruntime_BUILD_NODEJS=OFF -Donnxruntime_BUILD_OBJC=OFF -Donnxruntime_BUILD_SHARED_LIB=ON -Donnxruntime_BUILD_APPLE_FRAMEWORK=OFF -Donnxruntime_USE_DNNL=OFF -Donnxruntime_USE_NNAPI_BUILTIN=OFF -Donnxruntime_USE_VSINPU=OFF -Donnxruntime_USE_RKNPU=OFF -Donnxruntime_ENABLE_MICROSOFT_INTERNAL=OFF -Donnxruntime_USE_VITISAI=OFF -Donnxruntime_USE_TENSORRT=OFF -Donnxruntime_USE_NV=OFF -Donnxruntime_USE_TENSORRT_BUILTIN_PARSER=ON -Donnxruntime_USE_TENSORRT_INTERFACE=OFF -Donnxruntime_USE_CUDA_INTERFACE=OFF -Donnxruntime_USE_NV_INTERFACE=OFF -Donnxruntime_USE_OPENVINO_INTERFACE=OFF -Donnxruntime_USE_VITISAI_INTERFACE=OFF -Donnxruntime_USE_QNN_INTERFACE=OFF -Donnxruntime_USE_MIGRAPHX_INTERFACE=OFF -Donnxruntime_USE_MIGRAPHX=OFF -Donnxruntime_DISABLE_CONTRIB_OPS=OFF -Donnxruntime_DISABLE_ML_OPS=ON -Donnxruntime_DISABLE_RTTI=ON -Donnxruntime_DISABLE_EXCEPTIONS=OFF -Donnxruntime_MINIMAL_BUILD=ON -Donnxruntime_EXTENDED_MINIMAL_BUILD=OFF -Donnxruntime_MINIMAL_BUILD_CUSTOM_OPS=ON -Donnxruntime_REDUCED_OPS_BUILD=ON -Donnxruntime_CLIENT_PACKAGE_BUILD=OFF -Donnxruntime_BUILD_MS_EXPERIMENTAL_OPS=OFF -Donnxruntime_ENABLE_LTO=OFF -Donnxruntime_USE_ACL=OFF -Donnxruntime_USE_ARMNN=OFF -Donnxruntime_ARMNN_RELU_USE_CPU=ON -Donnxruntime_ARMNN_BN_USE_CPU=ON -Donnxruntime_USE_JSEP=OFF -Donnxruntime_USE_WEBGPU=OFF -Donnxruntime_USE_EXTERNAL_DAWN=OFF -Donnxruntime_WGSL_TEMPLATE=static -Donnxruntime_ENABLE_NVTX_PROFILE=OFF -Donnxruntime_ENABLE_TRAINING=OFF -Donnxruntime_ENABLE_TRAINING_OPS=OFF -Donnxruntime_ENABLE_TRAINING_APIS=OFF -Donnxruntime_ENABLE_CPU_FP16_OPS=OFF -Donnxruntime_USE_NCCL=OFF -Donnxruntime_BUILD_BENCHMARKS=OFF -Donnxruntime_GCOV_COVERAGE=OFF -Donnxruntime_ENABLE_MEMORY_PROFILE=OFF -Donnxruntime_ENABLE_CUDA_LINE_NUMBER_INFO=OFF -Donnxruntime_USE_CUDA_NHWC_OPS=OFF -Donnxruntime_BUILD_WEBASSEMBLY_STATIC_LIB=OFF -Donnxruntime_ENABLE_WEBASSEMBLY_EXCEPTION_CATCHING=ON -Donnxruntime_ENABLE_WEBASSEMBLY_API_EXCEPTION_CATCHING=OFF -Donnxruntime_ENABLE_WEBASSEMBLY_EXCEPTION_THROWING=ON -Donnxruntime_WEBASSEMBLY_RUN_TESTS_IN_BROWSER=OFF -Donnxruntime_ENABLE_WEBASSEMBLY_JSPI=OFF -Donnxruntime_ENABLE_WEBASSEMBLY_THREADS=OFF -Donnxruntime_ENABLE_WEBASSEMBLY_DEBUG_INFO=OFF -Donnxruntime_ENABLE_WEBASSEMBLY_PROFILING=OFF -Donnxruntime_ENABLE_LAZY_TENSOR=OFF -Donnxruntime_ENABLE_CUDA_PROFILING=OFF -Donnxruntime_USE_XNNPACK=OFF -Donnxruntime_USE_WEBNN=OFF -Donnxruntime_USE_CANN=OFF -Donnxruntime_DISABLE_FLOAT8_TYPES=OFF -Donnxruntime_DISABLE_FLOAT4_TYPES=OFF -Donnxruntime_DISABLE_SPARSE_TENSORS=OFF -Donnxruntime_DISABLE_OPTIONAL_TYPE=OFF -Donnxruntime_CUDA_MINIMAL=OFF -Donnxruntime_USE_KLEIDIAI=ON -Donnxruntime_USE_SVE=ON -DONNX_MINIMAL_BUILD=ON -DCMAKE_TOOLCHAIN_FILE=/opt/hostedtoolcache/vcpkg/2025.6.13/x64/scripts/buildsystems/vcpkg.cmake -G Ninja -DCMAKE_C_FLAGS=-g -O0 -fstack-clash-protection -fcf-protection -DCMAKE_CXX_FLAGS=-g -O0 -fstack-clash-protection -fcf-protection -DCMAKE_EXE_LINKER_FLAGS_INIT=-Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -DCMAKE_MODULE_LINKER_FLAGS_INIT=-Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -DCMAKE_SHARED_LINKER_FLAGS_INIT=-Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -DVCPKG_INSTALL_OPTIONS=--x-feature=tests;--overlay-triplets=/mnt/vss/_work/_temp/Debug/binskim_minimal;--x-buildtrees-root=/mnt/vss/_work/_temp;--x-asset-sources=x-azurl,https://vcpkg.storage.devpackages.microsoft.io/artifacts/\;x-block-origin -DCMAKE_BUILD_TYPE=Debug
3a. Build Minimal (Custom Ops)
2025-11-23 04:24:00,946 build [INFO] - Generating CMake build tree
3a. Build Minimal (Custom Ops)
2025-11-23 04:24:00,932 build [INFO] - Build started
3a. Build Minimal (Custom Ops)
2025-11-23 04:24:00,928 build [DEBUG] - Command line arguments: --build_dir /mnt/vss/_work/_temp --cmake_generator Ninja --config Debug --skip_submodule_sync --build_shared_lib --use_vcpkg --use_vcpkg_ms_internal_asset_cache --parallel --use_binskim_compliant_compile_flags --minimal_build custom_ops --disable_ml_ops --include_ops_by_config /mnt/vss/_work/_temp/.test_data/required_ops.ort_models.config
3a. Build Minimal (Custom Ops)
[notice] A new release of pip is available: 25.2 -> 25.3 [notice] To update, run: python3 -m pip install --upgrade pip
3a. Build Minimal (Custom Ops)
WARNING: The scripts backend-test-tools, check-model and check-node are installed in '/home/cloudtest/.local/bin' which is not on PATH. Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
3a. Build Minimal (Custom Ops)
WARNING: The scripts dmypy, mypy, mypyc, stubgen and stubtest are installed in '/home/cloudtest/.local/bin' which is not on PATH. Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
3a. Build Minimal (Custom Ops)
WARNING: The scripts py.test and pytest are installed in '/home/cloudtest/.local/bin' which is not on PATH. Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
3a. Build Minimal (Custom Ops)
WARNING: The scripts f2py and numpy-config are installed in '/home/cloudtest/.local/bin' which is not on PATH. Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
3a. Build Minimal (Custom Ops)
WARNING: The script isympy is installed in '/home/cloudtest/.local/bin' which is not on PATH. Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
3a. Build Minimal (Custom Ops)
Terrapin tool path provided but not found at 'C:/local/Terrapin/TerrapinRetrievalTool.exe'. Attempting direct download for vcpkg.
3b. Build Minimal (Type Reduction)
2025-11-23 13:05:08,746 build [INFO] - /opt/hostedtoolcache/cmake/3.31.6/linux-x86_64/bin/cmake /mnt/vss/_work/onnxruntime/onnxruntime/cmake -Donnxruntime_ENABLE_EXTERNAL_CUSTOM_OP_SCHEMAS=OFF -Donnxruntime_RUN_ONNX_TESTS=OFF -Donnxruntime_GENERATE_TEST_REPORTS=ON -DPython_EXECUTABLE=/usr/bin/python3 -Donnxruntime_USE_VCPKG=ON -Donnxruntime_USE_MIMALLOC=OFF -Donnxruntime_ENABLE_PYTHON=OFF -Donnxruntime_BUILD_CSHARP=OFF -Donnxruntime_BUILD_JAVA=OFF -Donnxruntime_BUILD_NODEJS=OFF -Donnxruntime_BUILD_OBJC=OFF -Donnxruntime_BUILD_SHARED_LIB=ON -Donnxruntime_BUILD_APPLE_FRAMEWORK=OFF -Donnxruntime_USE_DNNL=OFF -Donnxruntime_USE_NNAPI_BUILTIN=OFF -Donnxruntime_USE_VSINPU=OFF -Donnxruntime_USE_RKNPU=OFF -Donnxruntime_ENABLE_MICROSOFT_INTERNAL=OFF -Donnxruntime_USE_VITISAI=OFF -Donnxruntime_USE_TENSORRT=OFF -Donnxruntime_USE_NV=OFF -Donnxruntime_USE_TENSORRT_BUILTIN_PARSER=ON -Donnxruntime_USE_TENSORRT_INTERFACE=OFF -Donnxruntime_USE_CUDA_INTERFACE=OFF -Donnxruntime_USE_NV_INTERFACE=OFF -Donnxruntime_USE_OPENVINO_INTERFACE=OFF -Donnxruntime_USE_VITISAI_INTERFACE=OFF -Donnxruntime_USE_QNN_INTERFACE=OFF -Donnxruntime_USE_MIGRAPHX_INTERFACE=OFF -Donnxruntime_USE_MIGRAPHX=OFF -Donnxruntime_DISABLE_CONTRIB_OPS=OFF -Donnxruntime_DISABLE_ML_OPS=ON -Donnxruntime_DISABLE_RTTI=ON -Donnxruntime_DISABLE_EXCEPTIONS=OFF -Donnxruntime_MINIMAL_BUILD=ON -Donnxruntime_EXTENDED_MINIMAL_BUILD=OFF -Donnxruntime_MINIMAL_BUILD_CUSTOM_OPS=OFF -Donnxruntime_REDUCED_OPS_BUILD=ON -Donnxruntime_CLIENT_PACKAGE_BUILD=OFF -Donnxruntime_BUILD_MS_EXPERIMENTAL_OPS=OFF -Donnxruntime_ENABLE_LTO=OFF -Donnxruntime_USE_ACL=OFF -Donnxruntime_USE_ARMNN=OFF -Donnxruntime_ARMNN_RELU_USE_CPU=ON -Donnxruntime_ARMNN_BN_USE_CPU=ON -Donnxruntime_USE_JSEP=OFF -Donnxruntime_USE_WEBGPU=OFF -Donnxruntime_USE_EXTERNAL_DAWN=OFF -Donnxruntime_WGSL_TEMPLATE=static -Donnxruntime_ENABLE_NVTX_PROFILE=OFF -Donnxruntime_ENABLE_TRAINING=OFF -Donnxruntime_ENABLE_TRAINING_OPS=OFF -Donnxruntime_ENABLE_TRAINING_APIS=OFF -Donnxruntime_ENABLE_CPU_FP16_OPS=OFF -Donnxruntime_USE_NCCL=OFF -Donnxruntime_BUILD_BENCHMARKS=OFF -Donnxruntime_GCOV_COVERAGE=OFF -Donnxruntime_ENABLE_MEMORY_PROFILE=OFF -Donnxruntime_ENABLE_CUDA_LINE_NUMBER_INFO=OFF -Donnxruntime_USE_CUDA_NHWC_OPS=OFF -Donnxruntime_BUILD_WEBASSEMBLY_STATIC_LIB=OFF -Donnxruntime_ENABLE_WEBASSEMBLY_EXCEPTION_CATCHING=ON -Donnxruntime_ENABLE_WEBASSEMBLY_API_EXCEPTION_CATCHING=OFF -Donnxruntime_ENABLE_WEBASSEMBLY_EXCEPTION_THROWING=ON -Donnxruntime_WEBASSEMBLY_RUN_TESTS_IN_BROWSER=OFF -Donnxruntime_ENABLE_WEBASSEMBLY_JSPI=OFF -Donnxruntime_ENABLE_WEBASSEMBLY_THREADS=OFF -Donnxruntime_ENABLE_WEBASSEMBLY_DEBUG_INFO=OFF -Donnxruntime_ENABLE_WEBASSEMBLY_PROFILING=OFF -Donnxruntime_ENABLE_LAZY_TENSOR=OFF -Donnxruntime_ENABLE_CUDA_PROFILING=OFF -Donnxruntime_USE_XNNPACK=OFF -Donnxruntime_USE_WEBNN=OFF -Donnxruntime_USE_CANN=OFF -Donnxruntime_DISABLE_FLOAT8_TYPES=OFF -Donnxruntime_DISABLE_FLOAT4_TYPES=OFF -Donnxruntime_DISABLE_SPARSE_TENSORS=OFF -Donnxruntime_DISABLE_OPTIONAL_TYPE=OFF -Donnxruntime_CUDA_MINIMAL=OFF -Donnxruntime_USE_KLEIDIAI=ON -Donnxruntime_USE_SVE=ON -DONNX_MINIMAL_BUILD=ON -DCMAKE_TOOLCHAIN_FILE=/opt/hostedtoolcache/vcpkg/2025.6.13/x64/scripts/buildsystems/vcpkg.cmake -G Ninja -DCMAKE_C_FLAGS=-g -O0 -fstack-clash-protection -fcf-protection -DCMAKE_CXX_FLAGS=-g -O0 -fstack-clash-protection -fcf-protection -DCMAKE_EXE_LINKER_FLAGS_INIT=-Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -DCMAKE_MODULE_LINKER_FLAGS_INIT=-Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -DCMAKE_SHARED_LINKER_FLAGS_INIT=-Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -DVCPKG_INSTALL_OPTIONS=--x-feature=tests;--overlay-triplets=/mnt/vss/_work/_temp/Debug/binskim_minimal;--x-buildtrees-root=/mnt/vss/_work/_temp;--x-asset-sources=x-azurl,https://vcpkg.storage.devpackages.microsoft.io/artifacts/\;x-block-origin -DCMAKE_BUILD_TYPE=Debug
3b. Build Minimal (Type Reduction)
2025-11-23 13:05:08,734 build [INFO] - Generating CMake build tree
3b. Build Minimal (Type Reduction)
2025-11-23 13:05:08,720 build [INFO] - Build started
3b. Build Minimal (Type Reduction)
2025-11-23 13:05:08,716 build [DEBUG] - Command line arguments: --build_dir /mnt/vss/_work/_temp --cmake_generator Ninja --config Debug --skip_submodule_sync --build_shared_lib --use_vcpkg --use_vcpkg_ms_internal_asset_cache --parallel --use_binskim_compliant_compile_flags --minimal_build --disable_ml_ops --include_ops_by_config /mnt/vss/_work/_temp/.test_data/required_ops_and_types.ort_models.config
3b. Build Minimal (Type Reduction)
[notice] A new release of pip is available: 25.2 -> 25.3 [notice] To update, run: python3 -m pip install --upgrade pip
3b. Build Minimal (Type Reduction)
WARNING: The scripts backend-test-tools, check-model and check-node are installed in '/home/cloudtest/.local/bin' which is not on PATH. Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
3b. Build Minimal (Type Reduction)
WARNING: The scripts dmypy, mypy, mypyc, stubgen and stubtest are installed in '/home/cloudtest/.local/bin' which is not on PATH. Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
3b. Build Minimal (Type Reduction)
WARNING: The scripts py.test and pytest are installed in '/home/cloudtest/.local/bin' which is not on PATH. Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
3b. Build Minimal (Type Reduction)
WARNING: The scripts f2py and numpy-config are installed in '/home/cloudtest/.local/bin' which is not on PATH. Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
3b. Build Minimal (Type Reduction)
WARNING: The script isympy is installed in '/home/cloudtest/.local/bin' which is not on PATH. Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
3b. Build Minimal (Type Reduction)
Terrapin tool path provided but not found at 'C:/local/Terrapin/TerrapinRetrievalTool.exe'. Attempting direct download for vcpkg.
7. Build Extended Minimal (Android NNAPI)
stderr: WARNING! Your credentials are stored unencrypted in '/home/cloudtest/.docker/config.json'. Configure a credential helper to remove this warning. See https://docs.docker.com/go/credential-store/

Artifacts

Produced during runtime
Name Size Digest
3ax64_Linux_binary_size_report Expired
218 Bytes
sha256:02f8fc614990efb3f0e05373c39c95612fa60a42caa51c0cd9782aeaa4eac2d0
3bx64_Linux_binary_size_report Expired
218 Bytes
sha256:637cffe38cfa1394ce12833ca62111008cd6258de4b263066995a304758e8434
test_data Expired
1.91 KB
sha256:e8f8b821f8d4da5fcd7748e1e4667f44b60aef8057b66710c35281ff1fbd00c4