From d135513cfb89ee8611f7b3e2ab5dcfa2652f8699 Mon Sep 17 00:00:00 2001 From: Dima Grossman Date: Sat, 30 May 2026 14:13:18 +0300 Subject: [PATCH 1/2] fix(root): bind TesterArmy deploy jobs to GitHub environment secrets fixes NV-7904 (#11363) Co-authored-by: Cursor Agent --- .github/workflows/deploy.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index a05cc801f4a..b555372aa43 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -603,6 +603,7 @@ jobs: name: TesterArmy Staging Regression needs: [deploy, prepare-matrix] runs-on: ubuntu-latest + environment: ${{ fromJson(needs.prepare-matrix.outputs.env_matrix).environment[0] }} if: | always() && needs.deploy.result == 'success' && @@ -646,6 +647,7 @@ jobs: name: TesterArmy Production Regression needs: [deploy, prepare-matrix] runs-on: ubuntu-latest + environment: ${{ fromJson(needs.prepare-matrix.outputs.env_matrix).environment[0] }} if: | always() && needs.deploy.result == 'success' && From c54fc3d3a041f1673906070d9c48618c9562462b Mon Sep 17 00:00:00 2001 From: "cursor[bot]" <206951365+cursor[bot]@users.noreply.github.com> Date: Sat, 30 May 2026 14:56:44 +0300 Subject: [PATCH 2/2] fix(root): resolve high tmp vulnerability fixes NV-7913 (#11362) Co-authored-by: Cursor Agent Co-authored-by: Dima Grossman --- pnpm-lock.yaml | 18 +++++++++--------- pnpm-workspace.yaml | 2 +- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index af02232a21d..8d3e38204b9 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -103,7 +103,7 @@ overrides: ip@<1.1.9: ^1.1.9 socks@>=2.0.0 <2.7.2: ^2.8.7 cookie@<0.7.0: ^0.7.0 - tmp@<=0.2.3: ^0.2.4 + tmp@<0.2.6: 0.2.6 socket.io-parser@>=4.0.0 <4.2.6: ^4.2.6 cross-spawn@<6.0.6: ^6.0.6 path-to-regexp@>=0.2.0 <1.9.0: ^1.9.0 @@ -26269,8 +26269,8 @@ packages: resolution: {integrity: sha512-ELrFxuqsDdHUwoh0XxDbxuLD3Wnz49Z57IFvTtvWy1hJdcMZjXLIuonjilCiWHlT2GbE4Wlv1wKVTzDFnXH1aw==} hasBin: true - tmp@0.2.5: - resolution: {integrity: sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow==} + tmp@0.2.6: + resolution: {integrity: sha512-5sJPdPjfI5Kx+qbrDesxkglRBxW//g7hCsqspEjwkewGvBMGIKMOTKzLt1hFVJzyadba3lDUN20O9qhvbQUSTA==} engines: {node: '>=14.14'} tmpl@1.0.5: @@ -35437,7 +35437,7 @@ snapshots: minimatch: 9.0.9 nx: 20.1.2(@swc-node/register@1.10.10(@swc/core@1.7.26(@swc/helpers@0.5.15))(@swc/types@0.1.12)(typescript@5.6.2))(@swc/core@1.7.26(@swc/helpers@0.5.15)) semver: 7.6.3 - tmp: 0.2.5 + tmp: 0.2.6 tslib: 2.8.1 yargs-parser: 21.1.1 @@ -35449,7 +35449,7 @@ snapshots: minimatch: 9.0.9 nx: 21.3.11(@swc-node/register@1.10.10(@swc/core@1.7.26(@swc/helpers@0.5.15))(@swc/types@0.1.12)(typescript@5.6.2))(@swc/core@1.7.26(@swc/helpers@0.5.15)) semver: 7.7.4 - tmp: 0.2.5 + tmp: 0.2.6 tslib: 2.8.1 yargs-parser: 21.1.1 @@ -48161,7 +48161,7 @@ snapshots: dependencies: chardet: 0.7.0 iconv-lite: 0.4.24 - tmp: 0.2.5 + tmp: 0.2.6 extract-css@3.0.2: dependencies: @@ -53716,7 +53716,7 @@ snapshots: semver: 7.6.3 string-width: 4.2.3 tar-stream: 2.2.0 - tmp: 0.2.5 + tmp: 0.2.6 tsconfig-paths: 4.2.0 tslib: 2.8.1 yargs: 17.7.2 @@ -53767,7 +53767,7 @@ snapshots: semver: 7.6.3 string-width: 4.2.3 tar-stream: 2.2.0 - tmp: 0.2.5 + tmp: 0.2.6 tree-kill: 1.2.2 tsconfig-paths: 4.2.0 tslib: 2.8.1 @@ -57873,7 +57873,7 @@ snapshots: dependencies: tldts-core: 7.0.30 - tmp@0.2.5: {} + tmp@0.2.6: {} tmpl@1.0.5: {} diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 10ffa102f6f..f75e3cde07e 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -126,7 +126,7 @@ overrides: ip@<1.1.9: ^1.1.9 socks@>=2.0.0 <2.7.2: ^2.8.7 cookie@<0.7.0: ^0.7.0 - tmp@<=0.2.3: ^0.2.4 + tmp@<0.2.6: 0.2.6 socket.io-parser@>=4.0.0 <4.2.6: ^4.2.6 cross-spawn@<6.0.6: ^6.0.6 path-to-regexp@>=0.2.0 <1.9.0: ^1.9.0