31109548745
96%

Ran 06 Aug 2026 02:11PM UTC

Jobs 1

Files 8

Run time 1min

Badge

Embed ▾

Committed 06 Aug 2026 02:11PM UTC coverage: 94.079%. Remained the same

Build # 31109548745

Build Type

push

github

Committed by

web-flow

Commit Message

chore(release): v1.22.4 (#51)

* chore(release): v1.22.4

* fix(deps): update php_codesniffer to 4.0.4 for CVE-2026-67434

GHSA-hmqg-cxww-wqhq, an OS command injection in PHP_CodeSniffer, was published
at 23:53 UTC on 2026-08-05 and affects <3.13.6 and >=4.0.0,<4.0.2. Every plugin
in the suite had 4.0.1 locked, so every one was affected.

The composer audit gate added earlier the same day caught it on the first build
after publication — this commit exists because CI went red, which is the gate
doing exactly the job it was added for.

Only composer.lock moves. The constraint was already ^4.0, which admits 4.0.4,
so composer.json is untouched and the lock stays in sync with it — checked,
since composer validate now gates on that.

Verified per repo after updating: composer audit --locked exits 0, composer
validate exits 0, and phpcs exits 0 — 4.0.4 reports no new findings against the
PSR-12 ruleset, so the fix is a version bump and nothing else.

Coverage Stats

143 of 152 relevant lines covered (94.08%)

3.09 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	31109548745.1	06 Aug 2026 02:11PM UTC	8	94.08	GitHub Action Run

bleedingdeacons / unity / 31109548745
96%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 31109548745

bleedingdeacons / unity / 31109548745 96%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 31109548745

bleedingdeacons / unity / 31109548745
96%

README BADGES
x