fix(security): address vulnerabilities from security audit#1242
Merged
JinyuXiang-Mimo merged 11 commits intoJun 23, 2026
Merged
Annotations
11 warnings
|
Complete job
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Run oxlint:
packages/opencode/test/actor/cancel-cascade.test.ts#L52
Identifier 'ProviderID' is imported but never used.
|
|
Run oxlint:
packages/opencode/test/actor/cancel-cascade.test.ts#L52
Identifier 'ModelID' is imported but never used.
|
|
Run oxlint:
packages/opencode/src/mcp/index.ts#L17
Identifier 'Installation' is imported but never used.
|
|
Run oxlint:
packages/opencode/test/actor/registry-status.test.ts#L2
Identifier 'Effect' is imported but never used.
|
|
Run oxlint:
packages/opencode/test/skill/compose-review.test.ts#L115
Variable 'allContent' is declared but never used. Unused variables should start with a '_'.
|
|
Run oxlint:
packages/opencode/src/server/routes/instance/session.ts#L27
Identifier 'Provider' is imported but never used.
|
|
Run oxlint:
packages/opencode/test/cli/tui/thread.test.ts#L11
Identifier 'TuiConfig' is imported but never used.
|
|
Run oxlint:
packages/opencode/src/server/routes/instance/index.ts#L31
Identifier 'InstanceMiddleware' is imported but never used.
|
|
Run oxlint:
packages/opencode/src/server/routes/instance/config.ts#L3
Identifier 'z' is imported but never used.
|
|
Run oxlint:
packages/opencode/src/util/ssrf.ts#L114
There is no cause error attached to this new thrown error.
|
background
wait
wait-all
cancel
parallel
Loading