feat(notices): redaction contract and retention policy — close out #99 acceptance item 7 #1512
Triggered via pull request
September 3, 2026 23:31
ScriptedAlchemy
Status
Failure
Total duration
22m 46s
Artifacts
–
ci.yml
on: pull_request
Detect changed paths
7s
Packed release matrix (Node 22.19)
Dependency review
9s
Examples check (Node 22.19)
5m 10s
Release gates (Node 22.19)
4m 11s
Host install proofs (Node 22.19)
3m 9s
RSC runtime micro-eval (Node 22.19)
48s
Matrix: verify
Annotations
2 errors
|
Release gates (Node 22.19)
Process completed with exit code 1.
|
|
packages/agent-bundle/tests/release-audit.test.ts > audits an externally installed production tarball and generates its CycloneDX SBOM:
packages/agent-bundle/tests/release-audit.test.ts#L1
Command failed%3A /home/runner/setup-pnpm/store/v11/links/@/node/22.19.0/128a8c9f4c37c2c4d8e08b22faecdf4b34a4fc1c3f69d6573d1a4e5ffe8f3832/node_modules/node/bin/node scripts/audit-packed-release.mjs
node%3Ainternal/errors%3A983
const err = new Error(message);
^
Error%3A Command failed%3A npm audit --omit=dev --json
npm notice This endpoint is being retired. Use the bulk advisory endpoint instead. See the following docs for more info%3A https%3A//api-docs.npmjs.com/#tag/Audit
npm warn audit 400 Bad Request - POST https%3A//registry.npmjs.org/-/npm/v1/security/audits/quick - Bad Request
npm error audit endpoint returned an error
npm error A complete log of this run can be found in%3A /tmp/ab-rstest-d05c68f60567d0a2/cache/npm/_logs/2026-09-03T23_40_11_134Z-debug-0.log
at genericNodeError (node%3Ainternal/errors%3A983%3A15)
at wrappedFn (node%3Ainternal/errors%3A537%3A14)
at ChildProcess.exithandler (node%3Achild_process%3A417%3A12)
at ChildProcess.emit (node%3Aevents%3A519%3A28)
at maybeClose (node%3Ainternal/child_process%3A1101%3A16)
at ChildProcess._handle.onexit (node%3Ainternal/child_process%3A304%3A5) {
code%3A 1%2C
killed%3A false%2C
signal%3A null%2C
cmd%3A 'npm audit --omit=dev --json'%2C
stdout%3A '{\n' +
' "message"%3A "400 Bad Request - POST https%3A//registry.npmjs.org/-/npm/v1/security/audits/quick - Bad Request"%2C\n' +
' "method"%3A "POST"%2C\n' +
' "uri"%3A "https%3A//registry.npmjs.org/-/npm/v1/security/audits/quick"%2C\n' +
' "headers"%3A {\n' +
' "date"%3A [\n' +
' "Thu%2C 03 Sep 2026 23%3A40%3A59 GMT"\n' +
' ]%2C\n' +
' "transfer-encoding"%3A [\n' +
' "chunked"\n' +
' ]%2C\n' +
' "connection"%3A [\n' +
' "keep-alive"\n' +
' ]%2C\n' +
' "cf-ray"%3A [\n' +
' "a3589923d97d6b8d-LAX"\n' +
' ]%2C\n' +
' "cf-cache-status"%3A [\n' +
' "DYNAMIC"\n' +
' ]%2C\n' +
' "server"%3A [\n' +
' "cloudflare"\n' +
' ]%2C\n' +
' "npm-notice"%3A [\n' +
' "This endpoint is being retired. Use the bulk advisory endpoint instead. See the following docs for more info%3A https%3A//api-docs.npmjs.com/#tag/Audit"\n' +
' ]%2C\n' +
' "set-cookie"%3A [\n' +
' "__cf_bm=TGxt9Tmnkgc95h.Jj215jynYCDOwYtYzd0CENxoT8TY-1788478812.781618-1.0.1.1-jK3av8dBomiKFkg_krTd8N8cVUgHndSU7FDsY2yLbaJrAkNNcpUrCRcm5QlwMNJLKmczF4gdNbSqitI7XiwvUL6hLg0NKqSof3dGmlMEpKOM8LiuaFfO0do0bmeyxFS5; HttpOnly; SameSite=None; Secure; Path=/; Domain=npmjs.org; Expires=Fri%2C 04 Sep 2026 00%3A10%3A59 GMT"\n' +
' ]%2C\n' +
' "x-fetch-attempts"%3A [\n' +
' "1"\n' +
' ]\n' +
' }%2C\n' +
' "statusCode"%3A 400%2C\n' +
' "body"%3A {\n' +
' "statusCode"%3A 400%2C\n' +
' "error"%3A "Bad Request"%2C\n' +
' "message"%3A "Invalid package tree%2C run npm install to rebuild your package-lock.json"\n' +
' }%2C\n' +
' "error"%3A {\n' +
' "summary"%3A ""%2C\n' +
' "detail"%3A ""\n' +
' }\n' +
'}\n'%2C
stderr%3A 'npm notice This endpoint is being retired. Use the bulk advisory endpoint instead. See the following docs for more info%3A https%3A//api-docs.npmjs.com/#tag/Audit\n' +
'npm warn audit 400 Bad Request - POST https%3A//registry.npmjs.org/-/npm/v1/security/audits/quick - Bad Request\n' +
'npm error audit endpoint returned an error\n' +
'npm error A complete log of thi
|