Contrib.social

`CLI test` CI job failing 100% due to `npm audit report`

Open on Drupal.org →
Created on 20 August 2025, 9 days ago

Overview

CLI test (introduced 📌 Publish CLI tool on npm Postponed ) CI job is 100% failing since a few hours due to:

# npm audit report
astro  5.0.0-alpha.0 - 5.13.0
Severity: moderate
Astro allows unauthorized third-party images in _image endpoint - https://github.com/advisories/GHSA-xf8x-j4p2-f749
fix available via `npm audit fix`
node_modules/astro
1 moderate severity vulnerability
To address all issues, run:
  npm audit fix

👆 this should not trigger a failing CI job, but at most a warning. (This particular vulnerability definitely doesn’t affect us — it’s Astro’s image optimization.)

Failure must mean "our code is broken", and an upstream vulnerability that might be relevant does not mean our code is broken.

Proposed resolution

Use

User interface changes

📌 Task
Status

Active

Version

1.0

Component

CLI Tool

Created by

🇧🇪Belgium wim leers Ghent 🇧🇪🇪🇺

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024