Skip to content

feat: comprehensive security hardening for Nova #1327

feat: comprehensive security hardening for Nova

feat: comprehensive security hardening for Nova #1327

Triggered via pull request March 24, 2026 19:58
Status Failure
Total duration 2m 12s
Artifacts

erlang.yml

on: pull_request
Matrix: build
Matrix: dialyzer
Matrix: xref
Matrix: eunit
Matrix: nova_request_app / run_nra / run-nra
Fit to window
Zoom out
Zoom in

Annotations

3 errors and 30 warnings
Xref Erlang/OTP 28.0 / rebar3 3.25.0
Process completed with exit code 1.
Xref Erlang/OTP 26.1 / rebar3 3.25.0
Process completed with exit code 1.
Xref Erlang/OTP 27.1 / rebar3 3.25.0
Process completed with exit code 1.
Erlang/OTP 28.0 / rebar3 3.25.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, erlef/setup-beam@v1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Xref Erlang/OTP 28.0 / rebar3 3.25.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, erlef/setup-beam@v1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Xref Erlang/OTP 26.1 / rebar3 3.25.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, erlef/setup-beam@v1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Erlang/OTP 26.1 / rebar3 3.25.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, erlef/setup-beam@v1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Xref Erlang/OTP 27.1 / rebar3 3.25.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, erlef/setup-beam@v1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Erlang/OTP 27.1 / rebar3 3.25.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, erlef/setup-beam@v1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
EUnit Erlang/OTP 28.0 / rebar3 3.25.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, erlef/setup-beam@v1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
EUnit Erlang/OTP 28.0 / rebar3 3.25.0: _build/test/lib/proper/src/proper.erl#L2478
slave:stop/1 is deprecated and will be removed in OTP 29; use the 'peer' module instead
EUnit Erlang/OTP 28.0 / rebar3 3.25.0: _build/test/lib/proper/src/proper.erl#L2406
slave:start_link/2 is deprecated and will be removed in OTP 29; use the 'peer' module instead
EUnit Erlang/OTP 27.1 / rebar3 3.25.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, erlef/setup-beam@v1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
EUnit Erlang/OTP 27.1 / rebar3 3.25.0: _build/test/lib/proper/src/proper.erl#L2478
slave:stop/1 is deprecated and will be removed in OTP 29; use the 'peer' module instead
EUnit Erlang/OTP 27.1 / rebar3 3.25.0: _build/test/lib/proper/src/proper.erl#L2406
slave:start_link/2 is deprecated and will be removed in OTP 29; use the 'peer' module instead
EUnit Erlang/OTP 26.1 / rebar3 3.25.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, erlef/setup-beam@v1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
EUnit Erlang/OTP 26.1 / rebar3 3.25.0: _build/test/lib/proper/src/proper.erl#L2478
slave:stop/1 is deprecated and will be removed in OTP 27; use the 'peer' module instead
EUnit Erlang/OTP 26.1 / rebar3 3.25.0: _build/test/lib/proper/src/proper.erl#L2406
slave:start_link/2 is deprecated and will be removed in OTP 27; use the 'peer' module instead
nova_request_app / run_nra / Erlang/OTP 28.3 / rebar3 3.26.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: erlef/setup-beam@v1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
nova_request_app / run_nra / Erlang/OTP 27.3 / rebar3 3.26.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: erlef/setup-beam@v1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dialyzer Erlang/OTP 26.1 / rebar3 3.25.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, erlef/setup-beam@v1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dialyzer Erlang/OTP 27.1 / rebar3 3.25.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, erlef/setup-beam@v1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dialyzer Erlang/OTP 28.0 / rebar3 3.25.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, erlef/setup-beam@v1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dialyzer Erlang/OTP 28.0 / rebar3 3.25.0
missing specification for function from_ucs4be/1
Dialyzer Erlang/OTP 28.0 / rebar3 3.25.0
missing specification for function to_ucs4be/1
Dialyzer Erlang/OTP 28.0 / rebar3 3.25.0
missing specification for function is_visible_ascii/1
Dialyzer Erlang/OTP 28.0 / rebar3 3.25.0
missing specification for function is_visible_latin1/1
Dialyzer Erlang/OTP 28.0 / rebar3 3.25.0
missing specification for function is_iso646_basic/1
Dialyzer Erlang/OTP 28.0 / rebar3 3.25.0
missing specification for function is_ascii/1
Dialyzer Erlang/OTP 28.0 / rebar3 3.25.0
missing specification for function is_latin1/1
Dialyzer Erlang/OTP 28.0 / rebar3 3.25.0
missing specification for function is_bmpchar/1
Dialyzer Erlang/OTP 28.0 / rebar3 3.25.0
missing specification for function is_unicode/1
Dialyzer Erlang/OTP 28.0 / rebar3 3.25.0
missing specification for function is_iso10646/1