Skip to content

fix(deps): address Semgrep supply chain security findings #8626

fix(deps): address Semgrep supply chain security findings

fix(deps): address Semgrep supply chain security findings #8626

Triggered via pull request April 3, 2026 12:46
Status Success
Total duration 10s
Artifacts

client.yml

on: pull_request
client-detect-changes
6s
client-detect-changes
electrum-integration-detect-changes
5s
electrum-integration-detect-changes
client-build-test-publish
client-build-test-publish
client-scan
client-scan
client-format
client-format
client-vet
client-vet
client-lint
client-lint
client-integration-test
client-integration-test
Fit to window
Zoom out
Zoom in

Annotations

2 warnings
electrum-integration-detect-changes
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, dorny/paths-filter@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
client-detect-changes
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, dorny/paths-filter@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/