Skip to content

fix: harden unserialize() against PHP object injection #1120

fix: harden unserialize() against PHP object injection

fix: harden unserialize() against PHP object injection #1120

Triggered via pull request July 14, 2026 14:10
Status Success
Total duration 3m 5s
Artifacts

build-dev-artifacts.yml

on: pull_request
Build ZIP and upload to s3
2m 47s
Build ZIP and upload to s3
Comment on PR with links to plugin ZIPs
7s
Comment on PR with links to plugin ZIPs
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
Build ZIP and upload to s3
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build ZIP and upload to s3
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Build ZIP and upload to s3
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: peter-evans/create-or-update-comment@v1, peter-evans/find-comment@v1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Comment on PR with links to plugin ZIPs
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/