Skip to content

tmpdir: prevent symlink attacks and TOCTOU races (CVE-2025-71176) #8884

tmpdir: prevent symlink attacks and TOCTOU races (CVE-2025-71176)

tmpdir: prevent symlink attacks and TOCTOU races (CVE-2025-71176) #8884

Triggered via pull request March 25, 2026 01:48
Status Cancelled
Total duration 2m 47s
Artifacts 3

test.yml

on: pull_request
Matrix: build
Fit to window
Zoom out
Zoom in

Annotations

43 errors and 7 warnings
build (macos-py310)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (windows-py314)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (windows-py314)
The operation was canceled.
build (windows-py310-pluggy)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (windows-py310-pluggy)
The operation was canceled.
build (windows-py310-unittest-asynctest)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (windows-py310-unittest-asynctest)
The operation was canceled.
build (windows-py310-unittest-twisted25)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (windows-py310-unittest-twisted25)
The operation was canceled.
build (windows-py310-xdist)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (windows-py310-xdist)
The operation was canceled.
build (windows-py312)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (windows-py312)
The operation was canceled.
build (windows-py311)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (windows-py311)
The operation was canceled.
build (windows-py310-unittest-twisted24)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (windows-py310-unittest-twisted24)
The operation was canceled.
build (windows-py313)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (windows-py313)
The operation was canceled.
build (ubuntu-py312)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (ubuntu-py312)
The operation was canceled.
build (ubuntu-py313-pexpect)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (ubuntu-py313-pexpect)
The operation was canceled.
build (ubuntu-py310-xdist)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (ubuntu-py310-xdist)
The operation was canceled.
build (ubuntu-py311)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (ubuntu-py311)
The operation was canceled.
build (ubuntu-py310-lsof-numpy-pexpect)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (ubuntu-py310-lsof-numpy-pexpect)
The operation was canceled.
build (ubuntu-py310-pluggy)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (ubuntu-py310-pluggy)
The operation was canceled.
build (ubuntu-pypy3-xdist)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (ubuntu-pypy3-xdist)
The operation was canceled.
build (macos-py314)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (macos-py314)
The operation was canceled.
build (macos-py313)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (macos-py313)
The operation was canceled.
build (macos-py312)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (macos-py312)
The operation was canceled.
build (ubuntu-py314)
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
build (ubuntu-py314)
The operation was canceled.
test
Canceling since a higher priority waiting request for test-refs/pull/14279/merge exists
check
Process completed with exit code 1.
package
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build (doctesting)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build (ubuntu-py310-unittest-asynctest)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build (ubuntu-py310-freeze)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build (ubuntu-py310-unittest-twisted25)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build (plugins)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build (ubuntu-py310-unittest-twisted24)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
Package Metadata Expired
2.83 KB
sha256:c5e2a5a49c4452834f66dc84ef7df2d5ee703bd45e87e1c1bd9843e2fdf9a61a
Packages Expired
1.88 MB
sha256:82cd53183cd576b8c6685f68440e1fdbdfe9621729247d39979cc08fdd84b599
PyPI README Expired
2.12 KB
sha256:2a0738985535c9557a2d5aaef33ff37d4e714e3f1630ea73a6664c166896115b