Skip to content

fix(security)!: under a wall a catalog-carrying package is the platform operator's — install-local and the /packages delete refuse tenants (ADR-0131 D3) #44862

fix(security)!: under a wall a catalog-carrying package is the platform operator's — install-local and the /packages delete refuse tenants (ADR-0131 D3)

fix(security)!: under a wall a catalog-carrying package is the platform operator's — install-local and the /packages delete refuse tenants (ADR-0131 D3) #44862

Triggered via pull request October 12, 2026 07:49
Status Success
Total duration 23m 29s
Artifacts 24

ci.yml

on: pull_request
Matrix: dogfood
Matrix: test
Dogfood Verify CLI
5m 32s
Dogfood Verify CLI
Temporal Conformance (live PG + MySQL)
10m 26s
Temporal Conformance (live PG + MySQL)
Build Core
7m 28s
Build Core
Build Docs
3m 42s
Build Docs
Console Pin Gate
10m 16s
Console Pin Gate
Test Core
24s
Test Core
Dogfood Regression Gate
20s
Dogfood Regression Gate
Fit to window
Zoom out
Zoom in

Annotations

3 warnings and 17 notices
Test Core shard timing drift
Test Core (6/6): 2955.4s measured vs 1871.1s predicted across 14 package(s) = 1.58x (warning past 1.3x, red past 1.5x), past the red bound. Heaviest overshoot: @objectstack/runtime, predicted 528.6s, measured 877.6s. Report only on a `pull_request` run: this step exit-grades on `schedule` runs alone, the profile scripts/test-shard-timings.json was measured on, so a drift that is real reds the next hourly run on main.
Suite-duration ceiling
@objectstack/service-analytics: 479.49s, over its 440.54s ceiling. Slowest file: src/__tests__/text-match-sqlite-nul.test.ts 2.17s. Report only on a `pull_request` run: this gate exit-grades on `schedule` runs alone, the profile its ceilings were measured on, so a slowdown that is real reds the next hourly run on main.
Suite-duration ceiling
@objectstack/plugin-approvals: 298.70s, over its 290.60s ceiling. Slowest file: src/request-child-read-gate.integration.test.ts 8.03s. Report only on a `pull_request` run: this gate exit-grades on `schedule` runs alone, the profile its ceilings were measured on, so a slowdown that is real reds the next hourly run on main.
filter
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Build Docs
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Dogfood Verify CLI
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Build Core
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Dogfood Regression Gate (2/3)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Console Pin Gate
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Temporal Conformance (live PG + MySQL)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Dogfood Regression Gate (1/3)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Dogfood Regression Gate (3/3)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Dogfood Regression Gate
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core (1/6)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core (5/6)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core (3/6)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core (4/6)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core (2/6)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core (6/6)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Artifacts

Produced during runtime
Name Size Digest
build-output
31.8 MB
sha256:207797baad547ecdb826aee6e5ea700281a6e83905d469b521c320dcc73795b3
shard-attest-dogfood-1-of-3
321 Bytes
sha256:cbe0b9c85b3cebdd4b82c2ccbcd9a610e3492245af3d47ef054a9d58eb95adb7
shard-attest-dogfood-2-of-3
323 Bytes
sha256:38177f120a86c0073495fa6f6db7ef20fe8de190e29ad6b5ed40d68e1586bf50
shard-attest-dogfood-3-of-3
320 Bytes
sha256:c898e182f54c01bd8348fe4e667153c6e124c8eb25d52baa3027d273af7cb6e1
shard-attest-dogfood-verify-1-of-1
341 Bytes
sha256:acd116c487a115dfc1bf24494c2525514c873a846d1db5026fb078b03a1f455b
shard-attest-test-1-of-6
312 Bytes
sha256:17498076a3d201f4a9d9f828ffe242f2b130c4024b662b55baae91eb35a42c55
shard-attest-test-2-of-6
312 Bytes
sha256:93e5e2d5ca9cb96ce46ce26a13529ca98ff886b27a74e8b0dfbb0dcc9ee4e98e
shard-attest-test-3-of-6
312 Bytes
sha256:a86c82480594a4065c5ebe6638924e0c6e7abf0447e19b67128ad55ab04d9e2d
shard-attest-test-4-of-6
313 Bytes
sha256:8153e551b436c57e0f16373cee47231cf0648b6fb45eb89fb0551a9ff1418909
shard-attest-test-5-of-6
311 Bytes
sha256:f5a42bd53e1fdc106ecb91d10c75a7a212cefaef0aba47e102df30bdcf6a411f
shard-attest-test-6-of-6
310 Bytes
sha256:a3000693c07401818c40941aa410f7baea429c0251c610235316f167c897a971
test-core-run-summary-1-of-6
778 KB
sha256:7e06ca3b1903009a84f66ecfb67fed2a099f40b3723f1a19245f37d029005961
test-core-run-summary-2-of-6
1.08 MB
sha256:e55407fdb110b6f9aaed610a7142fa26684fba94968297bc87da80410f8c02bd
test-core-run-summary-3-of-6
602 KB
sha256:a828b18aa1fa1c91f299b57323a212c33739fa385ce7c871cf892873e2739a8d
test-core-run-summary-4-of-6
694 KB
sha256:9e80c8f1c081cb4d25c5829c0327dfd6c0359d8055f8a5e39a3a996cbe8509f3
test-core-run-summary-5-of-6
929 KB
sha256:c339d1596885150758ab70326ebbfafc73e43f8b31f13aed9f1b7febcd8e05b9
test-core-run-summary-6-of-6
657 KB
sha256:9756d32b0b77bdfe755cd019b95616b0ca6ed7da0aef9fe1d4d6da9c4e571fdd
test-core-timing-table
94.2 KB
sha256:4449c5c77a32bef2238b85a2b9e40c9930b2bbe9cca58d7b006f18faaf20e2ed
test-core-timings-1-of-6
14.9 KB
sha256:b30b91b99cba8ce287ba7db8b61c60343fd8659249947b66698c82b6bc4f34f7
test-core-timings-2-of-6
11.8 KB
sha256:6623c1340c2fa9e1c26270d870a310cca30194a5979a316ea688c15a660df622
test-core-timings-3-of-6
11.5 KB
sha256:b8c45923a36b8322452720e68eb67871bc1bae0d4d88698b127fb83425297200
test-core-timings-4-of-6
13.6 KB
sha256:b7c2266eb0bacac5ca5c58ed9774b3d06678f97bca8caaa23bfb1edc2d1cb98a
test-core-timings-5-of-6
16.4 KB
sha256:c497f9a5cb3a4f83a72264eb1b77bd6b93adce9c50fe08ed63dd12fde4328eb9
test-core-timings-6-of-6
20 KB
sha256:3845ff4d7ac9c35a713c4d3f341986f631d3bc1fdd4c35a94ae54a223e326afb