Skip to content
Release: Patch (0) from Comment

fix(core): block $VAR and ${VAR} variable expansion bypass (GHSA-wpqr-6v78-jr5g) #68245

Sign in to view logs

fix(core): block $VAR and ${VAR} variable expansion bypass (GHSA-wpqr-6v78-jr5g)

fix(core): block $VAR and ${VAR} variable expansion bypass (GHSA-wpqr-6v78-jr5g) #68245

Triggered via issue July 15, 2026 15:28
@thalha-a9thalha-a9
commented on #28403 1ae8ba6
Status Success
Total duration 9s
Artifacts –

release-patch-0-from-comment.yml

on: issue_comment
slash-command
6s
slash-command
Fit to window
Zoom out
Zoom in

Annotations

1 warning
slash-command
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: peter-evans/slash-command-dispatch@40877f718dce0101edfc7aea2b3800cc192f9ed5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/