Skip to content

fix: remove localhost agents-api bypass, use CMA for all agent calls [INTEG-3825] #10903

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ryunsong-contentful wants to merge 11 commits into
base: master
Choose a base branch
from

chore(google-docs): add debug logging to startAgentRun, getWorkflowRu…

f3bccc1
Select commit
Loading
Failed to load commit list.
Open

fix: remove localhost agents-api bypass, use CMA for all agent calls [INTEG-3825] #10903

chore(google-docs): add debug logging to startAgentRun, getWorkflowRu…
f3bccc1
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Optional Checks succeeded Apr 22, 2026 in 0s

StepSecurity Optional Checks

Finished StepSecurity Optional Checks

  • PyPI Compromised Packages Check - Checks for compromised PyPI package versions in the PR
  • PyPI Package Cooldown Check - Fails if any PyPI package version in the PR was released within the configured cooldown period
  • Pwn Request Vulnerabilities Check - Checks for Pwn Request vulnerabilities in the PR via risky triggers
  • Script Injection Check - Checks for script injection vulnerabilities in the PR
  • NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases

Details

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

⏲️ History

Previous invocation results of same check:

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

⏲️ History

Previous invocation results of same check:

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

⏲️ History

Previous invocation results of same check:

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

⏲️ History

Previous invocation results of same check:

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

⏲️ History

Previous invocation results of same check:

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

⏲️ History

Previous invocation results of same check:

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
axios 1.13.1 1.15.1 apps/google-docs/package-lock.json 2026-04-19T17:07:36Z
qs 6.14.0 6.15.1 apps/google-docs/package-lock.json 2026-04-08T19:37:55Z
contentful-sdk-core 9.2.1 9.4.5 apps/google-docs/package-lock.json 2026-03-17T20:18:11Z
proxy-from-env 1.1.0 2.1.0 apps/google-docs/package-lock.json 2026-03-14T18:32:47Z
form-data 4.0.4 4.0.5 apps/google-docs/package-lock.json 2025-11-17T04:16:07Z
✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

</
View more details on StepSecurity Actions Security