[multi-team P4] Scope the sandboxed-agent denylist to the window's team #13318
ci.yml
on: pull_request
Compute workflow parameters
15s
Matrix: check-release-compilation
Matrix: lints
Matrix: tests
Database Migration (Diesel)
Miscellaneous checks
1m 47s
Formatting + Clippy (wasm)
3m 6s
Verify compilation with eval features
3m 8s
Run Linux remote-server integration tests
Check CI results
4s
Annotations
19 errors, 24 warnings, and 10 notices
|
Formatting + Clippy (Linux)
Process completed with exit code 101.
|
|
Formatting + Clippy (MacOS)
Process completed with exit code 101.
|
|
Formatting + Clippy (Windows)
Process completed with exit code 101.
|
|
Run Windows tests
Process completed with exit code 1.
|
|
Run MacOS tests
The process '/Users/runner/.cargo/bin/cargo' failed with exit code 101
|
|
Run MacOS tests
The process '/Users/runner/.cargo/bin/cargo' failed with exit code 101
|
|
Run MacOS tests
The process '/Users/runner/.cargo/bin/cargo' failed with exit code 101
|
|
Run MacOS tests
The process '/Users/runner/.cargo/bin/cargo' failed with exit code 101
|
|
Run MacOS tests
The process '/Users/runner/.cargo/bin/cargo' failed with exit code 101
|
|
Run MacOS tests
The process '/Users/runner/.cargo/bin/cargo' failed with exit code 101
|
|
Run MacOS tests
Process completed with exit code 101.
|
|
Run Linux tests
The process '/usr/bin/xvfb-run' failed with exit code 101
|
|
Run Linux tests
The process '/usr/bin/xvfb-run' failed with exit code 101
|
|
Run Linux tests
The process '/usr/bin/xvfb-run' failed with exit code 101
|
|
Run Linux tests
The process '/usr/bin/xvfb-run' failed with exit code 101
|
|
Run Linux tests
The process '/usr/bin/xvfb-run' failed with exit code 101
|
|
Run Linux tests
Process completed with exit code 101.
|
|
Check CI results
Process completed with exit code 1.
|
|
Check CI results
Required job tests failed or was skipped (status: failure)
|
|
Miscellaneous checks
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Verify compilation with release flags (MacOS)
The following taps are not trusted:
azure/bicep
hashicorp/tap
wix/brew
Homebrew is currently ignoring formulae, casks and commands from these taps because tap trust is required.
Prefer trusting only the specific formulae, casks or commands you need.
Trust installed formulae from these taps with:
brew trust --formula azure/bicep/bicep
brew trust --formula hashicorp/tap/packer
brew trust --formula wix/brew/applesimutils
Trust other specific casks and commands with:
brew trust --cask <user>/<tap>/<cask>
brew trust --command <user>/<tap>/<command>
Whole-tap trust is broader and includes all current and future formulae,
casks and commands from the listed taps. Trust whole taps with:
brew trust azure/bicep hashicorp/tap wix/brew
Untap them with:
brew untap azure/bicep hashicorp/tap wix/brew
For more information, see:
https://docs.brew.sh/Tap-Trust
|
|
Formatting + Clippy (MacOS)
The following taps are not trusted:
azure/bicep
hashicorp/tap
wix/brew
Homebrew is currently ignoring formulae, casks and commands from these taps because tap trust is required.
Prefer trusting only the specific formulae, casks or commands you need.
Trust installed formulae from these taps with:
brew trust --formula azure/bicep/bicep
brew trust --formula hashicorp/tap/packer
brew trust --formula wix/brew/applesimutils
Trust other specific casks and commands with:
brew trust --cask <user>/<tap>/<cask>
brew trust --command <user>/<tap>/<command>
Whole-tap trust is broader and includes all current and future formulae,
casks and commands from the listed taps. Trust whole taps with:
brew trust azure/bicep hashicorp/tap wix/brew
Untap them with:
brew untap azure/bicep hashicorp/tap wix/brew
For more information, see:
https://docs.brew.sh/Tap-Trust
|
|
Run Windows tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
Run MacOS tests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: coactions/setup-xvfb@b6b4fcfb9f5a895edadc3bc76318fae0ac17c8b3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Run MacOS tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
Run MacOS tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
Run MacOS tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
Run MacOS tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
Run MacOS tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
Run MacOS tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
Run MacOS tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
Run MacOS tests
The following taps are not trusted:
azure/bicep
hashicorp/tap
wix-incubator/brew
Homebrew is currently ignoring formulae, casks and commands from these taps because tap trust is required.
Prefer trusting only the specific formulae, casks or commands you need.
Trust installed formulae from these taps with:
brew trust --formula azure/bicep/bicep
brew trust --formula hashicorp/tap/packer
Trust other specific casks and commands with:
brew trust --cask <user>/<tap>/<cask>
brew trust --command <user>/<tap>/<command>
Whole-tap trust is broader and includes all current and future formulae,
casks and commands from the listed taps. Trust whole taps with:
brew trust azure/bicep hashicorp/tap wix-incubator/brew
Untap them with:
brew untap azure/bicep hashicorp/tap wix-incubator/brew
For more information, see:
https://docs.brew.sh/Tap-Trust
|
|
Run MacOS tests
The following taps are not trusted:
azure/bicep
hashicorp/tap
wix-incubator/brew
Homebrew is currently ignoring formulae, casks and commands from these taps because tap trust is required.
Prefer trusting only the specific formulae, casks or commands you need.
Trust installed formulae from these taps with:
brew trust --formula azure/bicep/bicep
brew trust --formula hashicorp/tap/packer
Trust other specific casks and commands with:
brew trust --cask <user>/<tap>/<cask>
brew trust --command <user>/<tap>/<command>
Whole-tap trust is broader and includes all current and future formulae,
casks and commands from the listed taps. Trust whole taps with:
brew trust azure/bicep hashicorp/tap wix-incubator/brew
Untap them with:
brew untap azure/bicep hashicorp/tap wix-incubator/brew
For more information, see:
https://docs.brew.sh/Tap-Trust
|
|
Run MacOS tests
The following taps are not trusted:
azure/bicep
hashicorp/tap
wix-incubator/brew
Homebrew is currently ignoring formulae, casks and commands from these taps because tap trust is required.
Prefer trusting only the specific formulae, casks or commands you need.
Trust installed formulae from these taps with:
brew trust --formula azure/bicep/bicep
brew trust --formula hashicorp/tap/packer
Trust other specific casks and commands with:
brew trust --cask <user>/<tap>/<cask>
brew trust --command <user>/<tap>/<command>
Whole-tap trust is broader and includes all current and future formulae,
casks and commands from the listed taps. Trust whole taps with:
brew trust azure/bicep hashicorp/tap wix-incubator/brew
Untap them with:
brew untap azure/bicep hashicorp/tap wix-incubator/brew
For more information, see:
https://docs.brew.sh/Tap-Trust
|
|
Run MacOS tests
The following taps are not trusted:
azure/bicep
hashicorp/tap
wix/brew
Homebrew is currently ignoring formulae, casks and commands from these taps because tap trust is required.
Prefer trusting only the specific formulae, casks or commands you need.
Trust installed formulae from these taps with:
brew trust --formula azure/bicep/bicep
brew trust --formula hashicorp/tap/packer
brew trust --formula wix/brew/applesimutils
Trust other specific casks and commands with:
brew trust --cask <user>/<tap>/<cask>
brew trust --command <user>/<tap>/<command>
Whole-tap trust is broader and includes all current and future formulae,
casks and commands from the listed taps. Trust whole taps with:
brew trust azure/bicep hashicorp/tap wix/brew
Untap them with:
brew untap azure/bicep hashicorp/tap wix/brew
For more information, see:
https://docs.brew.sh/Tap-Trust
|
|
Run Linux tests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: coactions/setup-xvfb@b6b4fcfb9f5a895edadc3bc76318fae0ac17c8b3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Run Linux tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
Run Linux tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
Run Linux tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
Run Linux tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
Run Linux tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
Run Linux tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
Run Linux tests
Unexpected input(s) 'tags', valid inputs are ['junit-paths', 'org-slug', 'token', 'public-repo-id', 'repo-head-branch', 'run', 'repo-root', 'cli-version', 'xcresult-path', 'bazel-bep-path', 'use-bazel-target-for-codeowners', 'quarantine', 'allow-missing-junit-files', 'hide-banner', 'variant', 'test-collection-id', 'verbose', 'use-uncloned-repo', 'previous-step-outcome', 'github-token', 'pr-title', 'gh-repo-url', 'gh-repo-head-sha', 'gh-repo-head-branch', 'gh-repo-head-commit-epoch', 'gh-repo-head-author-name', 'gh-action-ref', 'show-failure-messages', 'dry-run', 'use-cache']
|
|
|
|
|
|
MacOS Tests - Zsh Version
zsh 5.9 (arm64-apple-darwin25.0)
|
|
MacOS Tests - Fish Version
fish, version 4.8.1
|
|
MacOS Tests - Default Bash Version
GNU bash, version 3.2.57(1)-release (arm64-apple-darwin25)
|
|
MacOS Tests - Latest Bash Version
GNU bash, version 5.3.15(1)-release (aarch64-apple-darwin25.4.0)
|
|
|
|
Linux Tests - Zsh Version
zsh 5.9 (x86_64-ubuntu-linux-gnu)
|
|
Linux Tests - Fish Version
fish, version 3.7.0
|
|
Linux Tests - Default Bash Version
GNU bash, version 5.2.21(1)-release (x86_64-pc-linux-gnu)
|