Skip to content

Security and robustness fixes from NIF audit #476

Security and robustness fixes from NIF audit

Security and robustness fixes from NIF audit #476

Triggered via pull request May 30, 2026 09:41
@benoitcbenoitc
synchronize #67
security-fixes
Status Success
Total duration 4m 57s
Artifacts

ci.yml

on: pull_request
Free-threaded Python 3.13t
3m 0s
Free-threaded Python 3.13t
Lint
50s
Lint
Documentation
22s
Documentation
Matrix: test-asan
Matrix: test-freebsd
Matrix: test
Fit to window
Zoom out
Zoom in

Annotations

104 warnings
Documentation
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Documentation: c_src/py_event_loop.c#L2424
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
Documentation: c_src/py_event_loop.c#L2422
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
Documentation: c_src/py_event_loop.c#L95
‘EVENT_LOOP_CAPSULE_NAME’ defined but not used [-Wunused-variable]
Documentation: c_src/py_event_loop.c#L98
‘EVENT_LOOP_ATTR_NAME’ defined but not used [-Wunused-variable]
Documentation: c_src/py_reactor_buffer.c#L271
‘ReactorBuffer_as_sequence’ defined but not used [-Wunused-variable]
Documentation: c_src/py_subinterp_thread.c#L194
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
Documentation: c_src/py_subinterp_thread.c#L162
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
Lint
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Lint: c_src/py_event_loop.c#L2424
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
Lint: c_src/py_event_loop.c#L2422
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
Lint: c_src/py_event_loop.c#L95
‘EVENT_LOOP_CAPSULE_NAME’ defined but not used [-Wunused-variable]
Lint: c_src/py_event_loop.c#L98
‘EVENT_LOOP_ATTR_NAME’ defined but not used [-Wunused-variable]
Lint: c_src/py_reactor_buffer.c#L271
‘ReactorBuffer_as_sequence’ defined but not used [-Wunused-variable]
Lint: c_src/py_subinterp_thread.c#L194
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
Lint: c_src/py_subinterp_thread.c#L162
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
OTP 28 / Python 3.13 / ubuntu-24.04
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
OTP 28 / Python 3.13 / ubuntu-24.04: c_src/py_event_loop.c#L2424
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
OTP 28 / Python 3.13 / ubuntu-24.04: c_src/py_event_loop.c#L2422
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
OTP 28 / Python 3.13 / ubuntu-24.04: c_src/py_event_loop.c#L95
‘EVENT_LOOP_CAPSULE_NAME’ defined but not used [-Wunused-variable]
OTP 28 / Python 3.13 / ubuntu-24.04: c_src/py_event_loop.c#L98
‘EVENT_LOOP_ATTR_NAME’ defined but not used [-Wunused-variable]
OTP 28 / Python 3.13 / ubuntu-24.04: c_src/py_reactor_buffer.c#L271
‘ReactorBuffer_as_sequence’ defined but not used [-Wunused-variable]
OTP 28 / Python 3.13 / ubuntu-24.04: c_src/py_subinterp_thread.c#L194
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
OTP 28 / Python 3.13 / ubuntu-24.04: c_src/py_subinterp_thread.c#L162
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
OTP 29 / Python 3.12 / ubuntu-24.04
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
OTP 29 / Python 3.12 / ubuntu-24.04: c_src/py_event_loop.c#L2424
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
OTP 29 / Python 3.12 / ubuntu-24.04: c_src/py_event_loop.c#L2422
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
OTP 29 / Python 3.12 / ubuntu-24.04: c_src/py_event_loop.c#L95
‘EVENT_LOOP_CAPSULE_NAME’ defined but not used [-Wunused-variable]
OTP 29 / Python 3.12 / ubuntu-24.04: c_src/py_event_loop.c#L98
‘EVENT_LOOP_ATTR_NAME’ defined but not used [-Wunused-variable]
OTP 29 / Python 3.12 / ubuntu-24.04: c_src/py_reactor_buffer.c#L271
‘ReactorBuffer_as_sequence’ defined but not used [-Wunused-variable]
OTP 29 / Python 3.12 / ubuntu-24.04: c_src/py_subinterp_thread.c#L194
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
OTP 29 / Python 3.12 / ubuntu-24.04: c_src/py_subinterp_thread.c#L162
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
OTP 29 / Python 3.13 / ubuntu-24.04
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
OTP 29 / Python 3.13 / ubuntu-24.04: c_src/py_event_loop.c#L2424
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
OTP 29 / Python 3.13 / ubuntu-24.04: c_src/py_event_loop.c#L2422
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
OTP 29 / Python 3.13 / ubuntu-24.04: c_src/py_event_loop.c#L95
‘EVENT_LOOP_CAPSULE_NAME’ defined but not used [-Wunused-variable]
OTP 29 / Python 3.13 / ubuntu-24.04: c_src/py_event_loop.c#L98
‘EVENT_LOOP_ATTR_NAME’ defined but not used [-Wunused-variable]
OTP 29 / Python 3.13 / ubuntu-24.04: c_src/py_reactor_buffer.c#L271
‘ReactorBuffer_as_sequence’ defined but not used [-Wunused-variable]
OTP 29 / Python 3.13 / ubuntu-24.04: c_src/py_subinterp_thread.c#L194
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
OTP 29 / Python 3.13 / ubuntu-24.04: c_src/py_subinterp_thread.c#L162
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
OTP 28 / Python 3.12 / ubuntu-24.04
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
OTP 28 / Python 3.12 / ubuntu-24.04: c_src/py_event_loop.c#L2424
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
OTP 28 / Python 3.12 / ubuntu-24.04: c_src/py_event_loop.c#L2422
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
OTP 28 / Python 3.12 / ubuntu-24.04: c_src/py_event_loop.c#L95
‘EVENT_LOOP_CAPSULE_NAME’ defined but not used [-Wunused-variable]
OTP 28 / Python 3.12 / ubuntu-24.04: c_src/py_event_loop.c#L98
‘EVENT_LOOP_ATTR_NAME’ defined but not used [-Wunused-variable]
OTP 28 / Python 3.12 / ubuntu-24.04: c_src/py_reactor_buffer.c#L271
‘ReactorBuffer_as_sequence’ defined but not used [-Wunused-variable]
OTP 28 / Python 3.12 / ubuntu-24.04: c_src/py_subinterp_thread.c#L194
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
OTP 28 / Python 3.12 / ubuntu-24.04: c_src/py_subinterp_thread.c#L162
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
ASan / Python 3.13
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
ASan / Python 3.13: c_src/py_event_loop.c#L2424
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
ASan / Python 3.13: c_src/py_event_loop.c#L2422
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
ASan / Python 3.13: c_src/py_event_loop.c#L1283
‘__builtin_strncpy’ output may be truncated copying 63 bytes from a string of length 63 [-Wstringop-truncation]
ASan / Python 3.13: c_src/py_event_loop.c#L95
‘EVENT_LOOP_CAPSULE_NAME’ defined but not used [-Wunused-variable]
ASan / Python 3.13: c_src/py_event_loop.c#L98
‘EVENT_LOOP_ATTR_NAME’ defined but not used [-Wunused-variable]
ASan / Python 3.13: c_src/py_reactor_buffer.c#L271
‘ReactorBuffer_as_sequence’ defined but not used [-Wunused-variable]
ASan / Python 3.13: c_src/py_subinterp_thread.c#L194
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
ASan / Python 3.13: c_src/py_subinterp_thread.c#L162
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
OTP 28 / Python 3.14 / ubuntu-24.04
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
OTP 28 / Python 3.14 / ubuntu-24.04: c_src/py_event_loop.c#L2424
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
OTP 28 / Python 3.14 / ubuntu-24.04: c_src/py_event_loop.c#L2422
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
OTP 28 / Python 3.14 / ubuntu-24.04: c_src/py_event_loop.c#L95
‘EVENT_LOOP_CAPSULE_NAME’ defined but not used [-Wunused-variable]
OTP 28 / Python 3.14 / ubuntu-24.04: c_src/py_event_loop.c#L98
‘EVENT_LOOP_ATTR_NAME’ defined but not used [-Wunused-variable]
OTP 28 / Python 3.14 / ubuntu-24.04: c_src/py_reactor_buffer.c#L271
‘ReactorBuffer_as_sequence’ defined but not used [-Wunused-variable]
OTP 28 / Python 3.14 / ubuntu-24.04: c_src/py_subinterp_thread.c#L194
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
OTP 28 / Python 3.14 / ubuntu-24.04: c_src/py_subinterp_thread.c#L162
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
OTP 29 / Python 3.14 / ubuntu-24.04
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
OTP 29 / Python 3.14 / ubuntu-24.04: c_src/py_event_loop.c#L2424
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
OTP 29 / Python 3.14 / ubuntu-24.04: c_src/py_event_loop.c#L2422
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
OTP 29 / Python 3.14 / ubuntu-24.04: c_src/py_event_loop.c#L95
‘EVENT_LOOP_CAPSULE_NAME’ defined but not used [-Wunused-variable]
OTP 29 / Python 3.14 / ubuntu-24.04: c_src/py_event_loop.c#L98
‘EVENT_LOOP_ATTR_NAME’ defined but not used [-Wunused-variable]
OTP 29 / Python 3.14 / ubuntu-24.04: c_src/py_reactor_buffer.c#L271
‘ReactorBuffer_as_sequence’ defined but not used [-Wunused-variable]
OTP 29 / Python 3.14 / ubuntu-24.04: c_src/py_subinterp_thread.c#L194
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
OTP 29 / Python 3.14 / ubuntu-24.04: c_src/py_subinterp_thread.c#L162
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
ASan / Python 3.12
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
ASan / Python 3.12: c_src/py_event_loop.c#L2424
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
ASan / Python 3.12: c_src/py_event_loop.c#L2422
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
ASan / Python 3.12: c_src/py_event_loop.c#L1283
‘__builtin_strncpy’ output may be truncated copying 63 bytes from a string of length 63 [-Wstringop-truncation]
ASan / Python 3.12: c_src/py_event_loop.c#L95
‘EVENT_LOOP_CAPSULE_NAME’ defined but not used [-Wunused-variable]
ASan / Python 3.12: c_src/py_event_loop.c#L98
‘EVENT_LOOP_ATTR_NAME’ defined but not used [-Wunused-variable]
ASan / Python 3.12: c_src/py_reactor_buffer.c#L271
‘ReactorBuffer_as_sequence’ defined but not used [-Wunused-variable]
ASan / Python 3.12: c_src/py_subinterp_thread.c#L194
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
ASan / Python 3.12: c_src/py_subinterp_thread.c#L162
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
OTP 29 / Python 3.12 / macos-15
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Free-threaded Python 3.13t
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Free-threaded Python 3.13t: c_src/py_event_loop.c#L2424
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
Free-threaded Python 3.13t: c_src/py_event_loop.c#L2422
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
Free-threaded Python 3.13t: c_src/py_event_loop.c#L95
‘EVENT_LOOP_CAPSULE_NAME’ defined but not used [-Wunused-variable]
Free-threaded Python 3.13t: c_src/py_event_loop.c#L98
‘EVENT_LOOP_ATTR_NAME’ defined but not used [-Wunused-variable]
Free-threaded Python 3.13t: c_src/py_reactor_buffer.c#L271
‘ReactorBuffer_as_sequence’ defined but not used [-Wunused-variable]
Free-threaded Python 3.13t: c_src/py_subinterp_thread.c#L194
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
Free-threaded Python 3.13t: c_src/py_subinterp_thread.c#L162
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
ASan / Python 3.14
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
ASan / Python 3.14: c_src/py_event_loop.c#L2424
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
ASan / Python 3.14: c_src/py_event_loop.c#L2422
‘__builtin_strncpy’ output may be truncated copying 127 bytes from a string of length 127 [-Wstringop-truncation]
ASan / Python 3.14: c_src/py_event_loop.c#L1283
‘__builtin_strncpy’ output may be truncated copying 63 bytes from a string of length 63 [-Wstringop-truncation]
ASan / Python 3.14: c_src/py_event_loop.c#L95
‘EVENT_LOOP_CAPSULE_NAME’ defined but not used [-Wunused-variable]
ASan / Python 3.14: c_src/py_event_loop.c#L98
‘EVENT_LOOP_ATTR_NAME’ defined but not used [-Wunused-variable]
ASan / Python 3.14: c_src/py_reactor_buffer.c#L271
‘ReactorBuffer_as_sequence’ defined but not used [-Wunused-variable]
ASan / Python 3.14: c_src/py_subinterp_thread.c#L194
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
ASan / Python 3.14: c_src/py_subinterp_thread.c#L162
ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
OTP 29 / Python 3.13 / macos-15
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
OTP 29 / Python 3.14 / macos-15
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-python@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
FreeBSD 14 / Python 3.13
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
FreeBSD 14 / Python 3.12
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/