Skip to content

build(deps): bump the npm_and_yarn group across 1 directory with 4 up… #32

build(deps): bump the npm_and_yarn group across 1 directory with 4 up…

build(deps): bump the npm_and_yarn group across 1 directory with 4 up… #32

Triggered via push July 24, 2026 15:05
Status Success
Total duration 19s
Artifacts
Create Release
16s
Create Release
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 1 warning
Create Release
HttpError: Validation Failed: {"resource":"Release","code":"already_exists","field":"tag_name"} at /home/runner/work/_actions/release-drafter/release-drafter/v5/dist/index.js:8462:21 at process.processTicksAndRejections (node:internal/process/task_queues:104:5) at async Job.doExecute (/home/runner/work/_actions/release-drafter/release-drafter/v5/dist/index.js:30793:18) { name: 'AggregateError', event: { id: '30103770100', name: 'push', payload: { after: 'f6aeb2c7f7d1be1efd2dcc17bd458e936309ddf2', base_ref: null, before: '25e589c5b56ffcc3ffc00ac3d63e10146a8d3e2b', commits: [ { author: { email: '49699333+dependabot[bot]@users.noreply.github.com', name: 'dependabot[bot]', username: 'dependabot[bot]' }, committer: { email: 'noreply@github.com', name: 'GitHub', username: 'web-flow' }, distinct: true, id: 'f6aeb2c7f7d1be1efd2dcc17bd458e936309ddf2', message: 'build(deps): bump the npm_and_yarn group across 1 directory with 4 updates (#918)\n' + '\n' + 'Bumps the npm_and_yarn group with 4 updates in the / directory:\n' + '[adm-zip](https://github.com/cthackers/adm-zip),\n' + '[js-yaml](https://github.com/nodeca/js-yaml),\n' + '[@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core)\n' + 'and [websocket-driver](https://github.com/faye/websocket-driver-node).\n' + '\n' + 'Updates `adm-zip` from 0.5.17 to 0.6.0\n' + '<details>\n' + '<summary>Release notes</summary>\n' + '<p><em>Sourced from <a\n' + `href="https://github.com/cthackers/adm-zip/releases">adm-zip's\n` + 'releases</a>.</em></p>\n' + '<blockquote>\n' + '<h2>v0.6.0</h2>\n' + '<p><strong>Full Changelog</strong>: <a\n' + 'href="https://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.0">https://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.0</a></p>\n' + '<p>This release fixes a security vulnerability (CVE-2026-39244),\n' + 'resolves several long-standing bugs, ships built-in TypeScript types,\n' + 'and includes two behavior changes worth reading before you upgrade.</p>\n' + '<ul>\n' + '<li>extractEntryTo(dirEntry, target, maintainEntryPath = false) now\n' + 'preserves subdirectories instead of flattening files into the target\n' + 'folder by basename (which also silently overwrote same-named files). (<a\n' + 'href="https://redirect.github.com/cthackers/adm-zip/issues/306">#306</a>)</li>\n' + "<li>Extraction no longer fails when the modification time can't be set —\n" + 'utimes is now best-effort. (<a\n' + 'href="https://redirect.github.com/cthackers/adm-zip/issues/379">#379</a>)</li>\n' + '<li>Minimum Node.js is now 14 (the code already required it; engines was\n' + 'incorrectly &gt;=12).</li>\n' + '<li>CVE-2026-39244 — a crafted archive declaring a huge uncompressed\n' + 'size could force an unbounded Buffer.alloc and OOM the process;\n' + 'allocation is now bounded by the data actually present. Reported by\n' + 'Daniel Púa (devploit), Anh Hong, and José Antonio Zamudio Amaya. (<a\n' + 'href="https://redirect.github.com/cthackers/adm-zip/issues/568">#568</a>)</li>\n' + '<li>Hardened entry-name lookup against object injection\n' + '(<strong>proto</strong> names). Prototype-less table.</li>\n' + '<li>Data-descriptor regression rejecting valid archives (<a\n' + 'href="https://redirect.github.com/cthackers/adm-zip/issues/548">#548</a>,\n' + '<a\n' + 'href="https://redirect.github.com/cthackers/adm-zip/issues/533">#533</a>,\n' + '<a\n' +
Create Release
Validation Failed: {"resource":"Release","code":"already_exists","field":"tag_name"} { name: 'HttpError', id: '30103770100', status: 422, response: { url: 'https://api.github.com/repos/codefresh-io/cli/releases', status: 422, headers: { 'access-control-allow-origin': '*', 'access-control-expose-headers': 'ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset, Warning', connection: 'close', 'content-length': '209', 'content-security-policy': "default-src 'none'", 'content-type': 'application/json; charset=utf-8', date: 'Fri, 24 Jul 2026 15:05:23 GMT', 'referrer-policy': 'origin-when-cross-origin, strict-origin-when-cross-origin', server: 'github.com', 'strict-transport-security': 'max-age=31536000; includeSubdomains; preload', vary: 'Accept-Encoding, Accept, X-Requested-With', 'x-accepted-github-permissions': 'contents=write; contents=write,workflows=write', 'x-content-type-options': 'nosniff', 'x-frame-options': 'deny', 'x-github-api-version-selected': '2022-11-28', 'x-github-media-type': 'github.v3; format=json', 'x-github-request-id': 'FC31:124195:7D8EF6:1BC294E:6A637F32', 'x-ratelimit-limit': '15000', 'x-ratelimit-remaining': '14988', 'x-ratelimit-reset': '1784909116', 'x-ratelimit-resource': 'core', 'x-ratelimit-used': '12', 'x-xss-protection': '0' }, data: { message: 'Validation Failed', errors: [ { resource: 'Release', code: 'already_exists', field: 'tag_name' } ], documentation_url: 'https://docs.github.com/rest/releases/releases#create-a-release', status: '422' } }, request: { method: 'POST', url: 'https://api.github.com/repos/codefresh-io/cli/releases', headers: { accept: 'application/vnd.github.v3+json', 'user-agent': 'probot/12.2.5 octokit-core.js/3.5.1 Node.js/24', authorization: 'bearer [REDACTED]', 'content-type': 'application/json; charset=utf-8' }, body: '{"target_commitish":"refs/heads/master","name":"v1.2.3","tag_name":"v1.2.3","body":"## Changes\\n\\n- build(deps): bump the npm\\\\_and\\\\_yarn group across 1 directory with 4 updates @dependabot (#918)\\n","draft":false,"prerelease":false,"make_latest":"true"}', request: {} }, event: { id: '30103770100', name: 'push', payload: { after: 'f6aeb2c7f7d1be1efd2dcc17bd458e936309ddf2', base_ref: null, before: '25e589c5b56ffcc3ffc00ac3d63e10146a8d3e2b', commits: [ { author: { email: '49699333+dependabot[bot]@users.noreply.github.com', name: 'dependabot[bot]', username: 'dependabot[bot]' }, committer: { email: 'noreply@github.com', name: 'GitHub', username: 'web-flow' }, distinct: true, id: 'f6aeb2c7f7d1be1efd2dcc17bd458e936309ddf2', message: 'build(deps): bump the npm_and_yarn group across 1 directory with 4 updates (#918)\n' + '\n' + 'Bumps the npm_and_yarn group with 4 updates in the / directory:\n' + '[adm-zip](https://github.com/cthackers/adm-zip),\n' + '[js-yaml](https://github.com/nodeca/js-yaml),\n' + '[@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core)\n' + 'and [websocket-driver](https://github.com/faye/websocket-driver-node).\n' + '\n' + 'Updates `adm-zip` from 0.5.17 to 0.6.0\n' + '<details>\n' + '<summary>Release notes</summary>\n' + '<p><em>Sourced from <a\n' + `href="https://github.com/cthackers/adm-zip/releases">adm-zip's\n` + 'releases</a>.</em></p>\n' +
Create Release
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v3, release-drafter/release-drafter@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/