Skip to content

chore: Cherry-picked changes from upstream - #44

Closed
github-actions[bot] wants to merge 1 commit into
mainfrom
auto-cherry-pick
Closed

github-actions[bot] wants to merge 1 commit into
mainfrom
auto-cherry-pick

Update default jfrog cli version from 2.91.0 to 2.124.0 and promote v…

199aff2
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Required Checks succeeded Oct 1, 2026 in 0s

StepSecurity Required Checks

Finished StepSecurity Required Checks

  • Maven Package Cooldown Check - Fails if any Maven package version in the PR was released within the configured cooldown period
  • NPM Compromised Packages Check - Checks for compromised npm package versions in the PR
  • NuGet Package Cooldown Check - Fails if any NuGet package version in the PR was released within the configured cooldown period
  • Pwn Request Vulnerabilities Check - Checks for Pwn Request vulnerabilities in the PR via risky triggers
  • NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases
  • NuGet Compromised Packages Check - Checks for compromised NuGet package versions in the PR
  • Script Injection Check - Checks for script injection vulnerabilities in the PR
  • PyPI Compromised Packages Check - Checks for compromised PyPI package versions in the PR
  • Maven Compromised Packages Check - Checks for compromised Maven package versions in the PR
  • PyPI Package Cooldown Check - Fails if any PyPI package version in the PR was released within the configured cooldown period

Details

✅ NuGet Compromised Packages Check

No compromised NuGet package versions found in current PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ Maven Package Cooldown Check

No Maven package upgrades to recent releases found in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Maven Compromised Packages Check

No compromised Maven package versions found in current PR.

✅ NuGet Package Cooldown Check

No NuGet package upgrades to recent releases found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

⏲️ History

Previous invocation results of same check:

Run 110219437316 — success (2026-10-01T04:30:49Z)

✅ Maven Package Cooldown Check

No Maven package upgrades to recent releases found in current PR.

✅ NuGet Package Cooldown Check

No NuGet package upgrades to recent releases found in current PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Maven Compromised Packages Check

No compromised Maven package versions found in current PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

✅ NuGet Compromised Packages Check

No compromised NuGet package versions found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.