Skip to content

fix: harden unserialize() against PHP object injection #1118

fix: harden unserialize() against PHP object injection

fix: harden unserialize() against PHP object injection #1118

Triggered via pull request July 14, 2026 13:47
Status Success
Total duration 3m 1s
Artifacts

build-dev-artifacts.yml

on: pull_request
Build ZIP and upload to s3
2m 48s
Build ZIP and upload to s3
Comment on PR with links to plugin ZIPs
4s
Comment on PR with links to plugin ZIPs
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
Build ZIP and upload to s3
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build ZIP and upload to s3
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Build ZIP and upload to s3
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: peter-evans/create-or-update-comment@v1, peter-evans/find-comment@v1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/