Skip to content

build(deps): bump semgrep from 1.178.0 to 1.179.0 in /.github #612

build(deps): bump semgrep from 1.178.0 to 1.179.0 in /.github

build(deps): bump semgrep from 1.178.0 to 1.179.0 in /.github #612

Triggered via pull request October 10, 2026 23:54
Status Failure
Total duration 13m 5s
Artifacts –

ci.yml

on: pull_request
what this push touched
7s
what this push touched
import table of the window binary
1m 22s
import table of the window binary
the Chocolatey packages install and leave
2m 21s
the Chocolatey packages install and leave
the installer installs and leaves
1m 49s
the installer installs and leaves
known vulnerabilities
3m 2s
known vulnerabilities
staticcheck
3m 20s
staticcheck
linters
3m 25s
linters
semgrep
52s
semgrep
bill of materials
3m 41s
bill of materials
coverage gate
13m 1s
coverage gate
reference tools actually installed
2m 2s
reference tools actually installed
fuzzing with a time budget
0s
fuzzing with a time budget
Matrix: test
Matrix: race
Fit to window
Zoom out
Zoom in

Annotations

10 errors and 10 notices
known vulnerabilities
parts.ours.Font calls theme.jsonTheme.Font, which eventually calls http2.Transport.RoundTrip
known vulnerabilities
parts.ours.Font calls theme.jsonTheme.Font, which eventually calls http2.Transport.RoundTrip
known vulnerabilities
parts.ours.Font calls theme.jsonTheme.Font, which eventually calls http2.Transport.NewClientConn
known vulnerabilities
parts.ours.Font calls theme.jsonTheme.Font, which eventually calls http2.Transport.NewClientConn
known vulnerabilities
parts.ours.Font calls theme.jsonTheme.Font, which eventually calls http2.Transport.AddConn
known vulnerabilities
parts.ours.Font calls theme.jsonTheme.Font, which eventually calls http2.Transport.AddConn
known vulnerabilities
parts.ours.Font calls theme.jsonTheme.Font, which eventually calls http2.NetHTTPClientConn.RoundTrip
known vulnerabilities
parts.ours.Font calls theme.jsonTheme.Font, which eventually calls http2.NetHTTPClientConn.RoundTrip
known vulnerabilities
parts.ours.Font calls theme.jsonTheme.Font, which eventually calls http2.NetHTTPClientConn.Close
known vulnerabilities
parts.ours.Font calls theme.jsonTheme.Font, which eventually calls http2.NetHTTPClientConn.Close
what this push touched
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
semgrep
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
reference tools actually installed
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
known vulnerabilities
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
staticcheck
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
linters
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
bill of materials
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
test on ubuntu-latest
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
test on macos-latest
Due to capacity constraints, jobs targeting macOS arm64 runners may experience longer queue times.
coverage gate
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"