Skip to content

feat(spec)!: a URL is judged as a URL parser cleans it — surrounding whitespace trimmed, tab and newline characters removed — with one userinfo grammar at both doors; a credential query parameter is refused in any string of a connector entry #57388

feat(spec)!: a URL is judged as a URL parser cleans it — surrounding whitespace trimmed, tab and newline characters removed — with one userinfo grammar at both doors; a credential query parameter is refused in any string of a connector entry

feat(spec)!: a URL is judged as a URL parser cleans it — surrounding whitespace trimmed, tab and newline characters removed — with one userinfo grammar at both doors; a credential query parameter is refused in any string of a connector entry #57388

Triggered via pull request November 3, 2026 10:21
Status Success
Total duration 22m 11s
Artifacts 2

ci.yml

on: pull_request
Build UI Deps
5m 3s
Build UI Deps
Plan Test Core shards
1m 36s
Plan Test Core shards
Matrix: dogfood
Dogfood Verify CLI
0s
Dogfood Verify CLI
Temporal Conformance (live PG + MySQL)
0s
Temporal Conformance (live PG + MySQL)
Build Core
12m 47s
Build Core
Build Docs
0s
Build Docs
Live E2E UI
6m 2s
Live E2E UI
UI Published Artifacts
0s
UI Published Artifacts
Matrix: test-ui
Matrix: test
Dogfood Regression Gate
10s
Dogfood Regression Gate
Fit to window
Zoom out
Zoom in

Annotations

12 warnings and 47 notices
Test Core shard timing drift
Test Core (7/8): 2215.8s measured vs 1547.1s predicted across 11 package(s) = 1.43x (warning past 1.3x, DRIFT past 1.5x). Heaviest overshoot: @objectstack/plugin-auth, predicted 450.1s, measured 690.1s. scripts/test-shard-timings.json is drifting from the runtime; refresh it before it reaches the drift bound (see scripts/measure-test-shard-timings.mjs). Not a failure: this step stays green on every event.
Test Core shard timing drift
Test Core (2/8): 2325.8s measured vs 1546.9s predicted across 10 package(s) = 1.50x (warning past 1.3x, DRIFT past 1.5x), past the drift bound. Heaviest overshoot: @objectstack/spec, predicted 1008.8s, measured 1531.6s. Report only, on every event (this is a `pull_request` run): a shard's wall measures the run's load as much as the dataset, so this is a reading, not a failure. Refresh scripts/test-shard-timings.json (see scripts/measure-test-shard-timings.mjs).
Suite-duration ceiling
@objectstack/service-messaging: 178.94s, over its 166.91s ceiling. Slowest file: src/plugin-enqueue-wakes-dispatcher.test.ts 3.42s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/plugin-security: 560.53s, over its 474.43s ceiling. Slowest file: src/explain-enforce-parity.test.ts 21.25s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/plugin-auth: 690.13s, over its 600.45s ceiling. Slowest file: src/invitation-delivery-outcome.test.ts 34.61s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/plugin-audit: 270.88s, over its 185.93s ceiling. Slowest file: src/parent-record-read-leaf.integration.test.ts 28.53s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/platform-objects: 140.03s, over its 135.03s ceiling. Slowest file: src/managed-api-method-affordance-sweep.test.ts 4.93s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/organizations: 150.69s, over its 137.91s ceiling. Slowest file: src/storage-upload-organization-change.wall.test.ts 9.09s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/http-conformance: 159.36s, over its 149.61s ceiling. Slowest file: src/hono-declared-envelope.conformance.test.ts 10.38s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/core: 181.56s, over its 151.42s ceiling. Slowest file: src/security/auth-gate.test.ts 7.53s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/cloud-connection: 229.33s, over its 163.89s ceiling. Slowest file: src/marketplace-install-local-state-machine-exempt.test.ts 4.73s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/client: 216.82s, over its 179.74s ceiling. Slowest file: src/auth-rotated-session-token.test.ts 10.57s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
filter
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Dogfood Regression Gate
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Plan Test Core shards
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Build UI Deps)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Build UI Deps
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Live E2E UI
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
🎭 Playwright Run Summary
1 skipped 83 passed (1.9m)
Build & E2E UI
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (6/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (6/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Build Core)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Build Core
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (8/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (9/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (5/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (5/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (16/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (3/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (3/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (8/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (8/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (15/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Shard headroom
longest Test (shard 4/8): 10m37s = 212% of the 5-minute cap, -6m-37s of headroom; total 75m45s over 8 shard(s); at the 2-minute target per shard that is 38 shard(s) (the matrix has 8)
Shard headroom
Test (shard N/16): NOT MEASURED -- the jobs API could not be read (GITHUB_REPOSITORY is not set). This is a reading, not a gate; nothing failed because of it.
Test UI (12/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (11/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (1/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (14/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (1/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (1/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (7/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (7/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (13/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (7/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (5/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (10/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (4/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Type Check UI
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (2/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (2/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (6/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (2/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI (3/16)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (4/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (4/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Artifacts

Produced during runtime
Name Size Digest
build-output
18.1 MB
sha256:83296426834a8ba3b6cb29bfa51ed3a88ad647c5554f3d15a054de85dd08b061
test-core-timing-table
130 KB
sha256:f54de5144bfe190398c62310fae881b79eeba973a7f7c3e0c84603dc7b4d9208