fix: resolve picomatch security vulnerabilities #1420
codeql.yaml
on: pull_request
Static analysis with CodeQL
1m 15s
Annotations
1 error and 2 warnings
|
Static analysis with CodeQL
CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/
|
|
Static analysis with CodeQL
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v3, github/codeql-action/analyze@v2, github/codeql-action/init@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Static analysis with CodeQL
Cache not found for keys: codeql-trap-1-2.24.3-javascript-288db9eeeb0db6235180842fcbb6ca1f70e6811e, codeql-trap-1-2.24.3-javascript-
|