Skip to content

fix(plugin-security): an organization administrator's assignment removal is judged on the stored row, and its refusal names only values the caller can read #58014

fix(plugin-security): an organization administrator's assignment removal is judged on the stored row, and its refusal names only values the caller can read

fix(plugin-security): an organization administrator's assignment removal is judged on the stored row, and its refusal names only values the caller can read #58014

Triggered via pull request November 5, 2026 03:59
Status Success
Total duration 20m 50s
Artifacts 2

ci.yml

on: pull_request
Build UI Deps
0s
Build UI Deps
Plan Test Core shards
1m 20s
Plan Test Core shards
Matrix: dogfood
Dogfood Verify CLI
0s
Dogfood Verify CLI
Temporal Conformance (live PG + MySQL)
0s
Temporal Conformance (live PG + MySQL)
Build Core
5m 13s
Build Core
Build Docs
0s
Build Docs
Live E2E UI
4m 23s
Live E2E UI
UI Published Artifacts
0s
UI Published Artifacts
Matrix: test-ui
Type Check UI
0s
Type Check UI
Lint UI
0s
Lint UI
Build & E2E UI
0s
Build & E2E UI
Matrix: test
Dogfood Regression Gate
28s
Dogfood Regression Gate
Fit to window
Zoom out
Zoom in

Annotations

3 warnings and 24 notices
Suite-duration ceiling
@objectstack/plugin-approvals: 313.75s, over its 290.60s ceiling. Slowest file: src/request-child-read-gate.integration.test.ts 8.08s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/organizations: 161.51s, over its 137.91s ceiling. Slowest file: src/object-extension-managed-target.wall.test.ts 11.75s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/cloud-connection: 222.40s, over its 163.89s ceiling. Slowest file: src/marketplace-install-local-seed-lookup.test.ts 3.06s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
filter
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Dogfood Regression Gate
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Plan Test Core shards
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Live E2E UI
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Build Core)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Build Core
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (8/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (8/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (7/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (7/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (6/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (6/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (2/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (2/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (5/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (5/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (3/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (3/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (4/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (4/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (1/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (1/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Artifacts

Produced during runtime
Name Size Digest
build-output
18 MB
sha256:280eda6ad8223e7c5ab37179b1378d3e963155263082fa50455a3d8faa641dd5
test-core-timing-table
86.5 KB
sha256:c3cfd7fa186607499d064d00d5ba89c66c51aa7f70d82ebfd6a52d5f38a98336