supabase / cli / 29968454813
65%
develop: 65%

LAST BUILD BRANCH: gh-readonly-queue/develop/pr-5941-ff6796082ebe931bc83fa7a5f12309613406b09e
DEFAULT BRANCH: develop
Ran
Jobs 1
Files 230
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 65.289%. Remained the same
29968454813

push

github

web-flow 
chore(ci): bump the actions-major group with 3 updates (#5934)

Bumps the actions-major group with 3 updates:
[jdx/mise-action](https://github.com/jdx/mise-action),
[github/codeql-action/init](https://github.com/github/codeql-action) and
[github/codeql-action/analyze](https://github.com/github/codeql-action).

Updates `jdx/mise-action` from 4.2.0 to 4.2.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jdx/mise-action/releases">jdx/mise-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.2.1: Signed checksums and PATH export fix</h2>
<p>A small patch release with two user-facing fixes: mise downloads are
now verified against minisign-signed release checksums by default, and
the <code>env</code> input no longer leaks the runner's
<code>PATH</code> into subsequent steps.</p>
<h2>Fixed</h2>
<h3>Verify mise downloads with signed checksums (<a
href="https://redirect.github.com/jdx/mise-action/pull/548">#548</a>) by
<a href="https://github.com/jdx"><code>@​jdx</code></a></h3>
<p>The action now embeds mise's minisign public key and verifies
<code>SHASUMS256.txt.minisig</code> before trusting any release
checksums, then checks the downloaded mise binary's SHA256 against the
verified list. This applies to both GitHub release archives (verified
before extraction) and the default <code>mise.jdx.dev</code> CDN path
(verified against the signed checksum for the matching release asset).
If a CDN download fails verification, the action warns and falls back to
the signed GitHub release asset instead of installing an unverified
binary.</p>
<ul>
<li>The existing <code>sha256</code> input still works as an explicit
override.</li>
<li>Pinned mise versions older than <code>2024.12.24</code> (which
predate minisign checksums) get a warning and skip signed verification
rather than failing.</li>
<li>Because tar installs now extract from a verified file on disk, the
previous streaming <code>download | tar</code> fast path is replaced... (continued)

11250 of 17231 relevant lines covered (65.29%)

10.51 hits per line

Jobs
ID Job ID Ran Files Coverage
1 29968454813.1 230
65.29
 GitHub Action Run
Source Files on build 29968454813