31109539978
94%

Ran 06 Aug 2026 02:11PM UTC

Jobs 1

Files 55

Run time 1min

Badge

Embed ▾

Committed 06 Aug 2026 02:10PM UTC coverage: 94.252%. Remained the same

Build # 31109539978

Build Type

push

github

Committed by

web-flow

Commit Message

chore(release): v1.22.4 (#60)

* chore(release): v1.22.4

* fix(deps): update php_codesniffer to 4.0.4 for CVE-2026-67434

GHSA-hmqg-cxww-wqhq, an OS command injection in PHP_CodeSniffer, was published
at 23:53 UTC on 2026-08-05 and affects <3.13.6 and >=4.0.0,<4.0.2. Every plugin
in the suite had 4.0.1 locked, so every one was affected.

The composer audit gate added earlier the same day caught it on the first build
after publication — this commit exists because CI went red, which is the gate
doing exactly the job it was added for.

Only composer.lock moves. The constraint was already ^4.0, which admits 4.0.4,
so composer.json is untouched and the lock stays in sync with it — checked,
since composer validate now gates on that.

Verified per repo after updating: composer audit --locked exits 0, composer
validate exits 0, and phpcs exits 0 — 4.0.4 reports no new findings against the
PSR-12 ruleset, so the fix is a version bump and nothing else.

Coverage Stats

3099 of 3288 relevant lines covered (94.25%)

5.96 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	31109539978.1	06 Aug 2026 02:11PM UTC	55	94.25	GitHub Action Run

bleedingdeacons / tsml-for-unity / 31109539978
94%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 31109539978

bleedingdeacons / tsml-for-unity / 31109539978 94%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 31109539978

bleedingdeacons / tsml-for-unity / 31109539978
94%

README BADGES
x