build(deps): bump the npm_and_yarn group across 1 directory with 4 up… #32
Annotations
2 errors and 1 warning
|
Create Release
HttpError: Validation Failed: {"resource":"Release","code":"already_exists","field":"tag_name"}
at /home/runner/work/_actions/release-drafter/release-drafter/v5/dist/index.js:8462:21
at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
at async Job.doExecute (/home/runner/work/_actions/release-drafter/release-drafter/v5/dist/index.js:30793:18)
{
name: 'AggregateError',
event: {
id: '30103770100',
name: 'push',
payload: {
after: 'f6aeb2c7f7d1be1efd2dcc17bd458e936309ddf2',
base_ref: null,
before: '25e589c5b56ffcc3ffc00ac3d63e10146a8d3e2b',
commits: [
{
author: {
email: '49699333+dependabot[bot]@users.noreply.github.com',
name: 'dependabot[bot]',
username: 'dependabot[bot]'
},
committer: {
email: 'noreply@github.com',
name: 'GitHub',
username: 'web-flow'
},
distinct: true,
id: 'f6aeb2c7f7d1be1efd2dcc17bd458e936309ddf2',
message: 'build(deps): bump the npm_and_yarn group across 1 directory with 4 updates (#918)\n' +
'\n' +
'Bumps the npm_and_yarn group with 4 updates in the / directory:\n' +
'[adm-zip](https://github.com/cthackers/adm-zip),\n' +
'[js-yaml](https://github.com/nodeca/js-yaml),\n' +
'[@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core)\n' +
'and [websocket-driver](https://github.com/faye/websocket-driver-node).\n' +
'\n' +
'Updates `adm-zip` from 0.5.17 to 0.6.0\n' +
'<details>\n' +
'<summary>Release notes</summary>\n' +
'<p><em>Sourced from <a\n' +
`href="https://github.com/cthackers/adm-zip/releases">adm-zip's\n` +
'releases</a>.</em></p>\n' +
'<blockquote>\n' +
'<h2>v0.6.0</h2>\n' +
'<p><strong>Full Changelog</strong>: <a\n' +
'href="https://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.0">https://github.com/cthackers/adm-zip/compare/v0.5.18...v0.6.0</a></p>\n' +
'<p>This release fixes a security vulnerability (CVE-2026-39244),\n' +
'resolves several long-standing bugs, ships built-in TypeScript types,\n' +
'and includes two behavior changes worth reading before you upgrade.</p>\n' +
'<ul>\n' +
'<li>extractEntryTo(dirEntry, target, maintainEntryPath = false) now\n' +
'preserves subdirectories instead of flattening files into the target\n' +
'folder by basename (which also silently overwrote same-named files). (<a\n' +
'href="https://redirect.github.com/cthackers/adm-zip/issues/306">#306</a>)</li>\n' +
"<li>Extraction no longer fails when the modification time can't be set —\n" +
'utimes is now best-effort. (<a\n' +
'href="https://redirect.github.com/cthackers/adm-zip/issues/379">#379</a>)</li>\n' +
'<li>Minimum Node.js is now 14 (the code already required it; engines was\n' +
'incorrectly >=12).</li>\n' +
'<li>CVE-2026-39244 — a crafted archive declaring a huge uncompressed\n' +
'size could force an unbounded Buffer.alloc and OOM the process;\n' +
'allocation is now bounded by the data actually present. Reported by\n' +
'Daniel Púa (devploit), Anh Hong, and José Antonio Zamudio Amaya. (<a\n' +
'href="https://redirect.github.com/cthackers/adm-zip/issues/568">#568</a>)</li>\n' +
'<li>Hardened entry-name lookup against object injection\n' +
'(<strong>proto</strong> names). Prototype-less table.</li>\n' +
'<li>Data-descriptor regression rejecting valid archives (<a\n' +
'href="https://redirect.github.com/cthackers/adm-zip/issues/548">#548</a>,\n' +
'<a\n' +
'href="https://redirect.github.com/cthackers/adm-zip/issues/533">#533</a>,\n' +
'<a\n' +
|
|
Create Release
Validation Failed: {"resource":"Release","code":"already_exists","field":"tag_name"}
{
name: 'HttpError',
id: '30103770100',
status: 422,
response: {
url: 'https://api.github.com/repos/codefresh-io/cli/releases',
status: 422,
headers: {
'access-control-allow-origin': '*',
'access-control-expose-headers': 'ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset, Warning',
connection: 'close',
'content-length': '209',
'content-security-policy': "default-src 'none'",
'content-type': 'application/json; charset=utf-8',
date: 'Fri, 24 Jul 2026 15:05:23 GMT',
'referrer-policy': 'origin-when-cross-origin, strict-origin-when-cross-origin',
server: 'github.com',
'strict-transport-security': 'max-age=31536000; includeSubdomains; preload',
vary: 'Accept-Encoding, Accept, X-Requested-With',
'x-accepted-github-permissions': 'contents=write; contents=write,workflows=write',
'x-content-type-options': 'nosniff',
'x-frame-options': 'deny',
'x-github-api-version-selected': '2022-11-28',
'x-github-media-type': 'github.v3; format=json',
'x-github-request-id': 'FC31:124195:7D8EF6:1BC294E:6A637F32',
'x-ratelimit-limit': '15000',
'x-ratelimit-remaining': '14988',
'x-ratelimit-reset': '1784909116',
'x-ratelimit-resource': 'core',
'x-ratelimit-used': '12',
'x-xss-protection': '0'
},
data: {
message: 'Validation Failed',
errors: [
{
resource: 'Release',
code: 'already_exists',
field: 'tag_name'
}
],
documentation_url: 'https://docs.github.com/rest/releases/releases#create-a-release',
status: '422'
}
},
request: {
method: 'POST',
url: 'https://api.github.com/repos/codefresh-io/cli/releases',
headers: {
accept: 'application/vnd.github.v3+json',
'user-agent': 'probot/12.2.5 octokit-core.js/3.5.1 Node.js/24',
authorization: 'bearer [REDACTED]',
'content-type': 'application/json; charset=utf-8'
},
body: '{"target_commitish":"refs/heads/master","name":"v1.2.3","tag_name":"v1.2.3","body":"## Changes\\n\\n- build(deps): bump the npm\\\\_and\\\\_yarn group across 1 directory with 4 updates @dependabot (#918)\\n","draft":false,"prerelease":false,"make_latest":"true"}',
request: {}
},
event: {
id: '30103770100',
name: 'push',
payload: {
after: 'f6aeb2c7f7d1be1efd2dcc17bd458e936309ddf2',
base_ref: null,
before: '25e589c5b56ffcc3ffc00ac3d63e10146a8d3e2b',
commits: [
{
author: {
email: '49699333+dependabot[bot]@users.noreply.github.com',
name: 'dependabot[bot]',
username: 'dependabot[bot]'
},
committer: {
email: 'noreply@github.com',
name: 'GitHub',
username: 'web-flow'
},
distinct: true,
id: 'f6aeb2c7f7d1be1efd2dcc17bd458e936309ddf2',
message: 'build(deps): bump the npm_and_yarn group across 1 directory with 4 updates (#918)\n' +
'\n' +
'Bumps the npm_and_yarn group with 4 updates in the / directory:\n' +
'[adm-zip](https://github.com/cthackers/adm-zip),\n' +
'[js-yaml](https://github.com/nodeca/js-yaml),\n' +
'[@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core)\n' +
'and [websocket-driver](https://github.com/faye/websocket-driver-node).\n' +
'\n' +
'Updates `adm-zip` from 0.5.17 to 0.6.0\n' +
'<details>\n' +
'<summary>Release notes</summary>\n' +
'<p><em>Sourced from <a\n' +
`href="https://github.com/cthackers/adm-zip/releases">adm-zip's\n` +
'releases</a>.</em></p>\n' +
|
|
Create Release
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v3, release-drafter/release-drafter@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|