Skip to content

fix: harden unserialize() against PHP object injection #1119

fix: harden unserialize() against PHP object injection

fix: harden unserialize() against PHP object injection #1119

Triggered via pull request July 14, 2026 13:56
Status Success
Total duration 2m 53s
Artifacts

build-dev-artifacts.yml

on: pull_request
Build ZIP and upload to s3
2m 41s
Build ZIP and upload to s3
Comment on PR with links to plugin ZIPs
6s
Comment on PR with links to plugin ZIPs
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
Build ZIP and upload to s3
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build ZIP and upload to s3
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Build ZIP and upload to s3
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: peter-evans/create-or-update-comment@v1, peter-evans/find-comment@v1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/