CCI report: 31f11586-476f-4338-a1f4-2fb5b8182510

Request message

{
  "request": "trigger",
  "version": 1,
  "event_type": "patch",
  "repository": {
    "id": "rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5",
    "name": "heartwood",
    "description": "Radicle Heartwood Protocol & Stack",
    "private": false,
    "default_branch": "master",
    "delegates": [
      "did:key:z6MksFqXN3Yhqk8pTJdUGLwATkRfQvwZXPqR2qMEhbS9wzpT",
      "did:key:z6MktaNvN1KVFMkSRAiN4qK5yvX1zuEEaseeX5sffhzPZRZW",
      "did:key:z6MkireRatUThvd3qzfKht1S44wpm4FEWSSa4PRMTSQZ3voM",
      "did:key:z6MkgFq6z5fkF2hioLLSNu1zP2qEL1aHXHZzGH1FLFGAnBGz",
      "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz"
    ]
  },
  "action": "Created",
  "patch": {
    "id": "93c85f293b3826bb3bb201731084d2cd93fcf938",
    "author": {
      "id": "did:key:z6MkireRatUThvd3qzfKht1S44wpm4FEWSSa4PRMTSQZ3voM",
      "alias": "fintohaps"
    },
    "title": "gix: CVE-2025-31130",
    "state": {
      "status": "open",
      "conflicts": []
    },
    "before": "0b3424857ec1c5b57d6778f2bf6f379685e7f073",
    "after": "b7a7f55e78f190218370de7538340bfe358d7430",
    "commits": [
      "b7a7f55e78f190218370de7538340bfe358d7430"
    ],
    "target": "0b3424857ec1c5b57d6778f2bf6f379685e7f073",
    "labels": [],
    "assignees": [],
    "revisions": [
      {
        "id": "93c85f293b3826bb3bb201731084d2cd93fcf938",
        "author": {
          "id": "did:key:z6MkireRatUThvd3qzfKht1S44wpm4FEWSSa4PRMTSQZ3voM",
          "alias": "fintohaps"
        },
        "description": "Update the `gix` family of crates to avoid the vulnerability reported in\n[CVE-2025-31130].\n\nSince `gix-hash` is used in two places, its version definition was moved to the\ntop-level `Cargo.toml`. `cargo` warned that `default-features` not being defined\nin the top-level could result in a future error, so that was carried along with\nit. This did not affect the build of `radicle-fetch`.\n\n[CVE-2025-31130]: https://www.cve.org/CVERecord?id=CVE-2025-31130",
        "base": "0b3424857ec1c5b57d6778f2bf6f379685e7f073",
        "oid": "b7a7f55e78f190218370de7538340bfe358d7430",
        "timestamp": 1760524627
      }
    ]
  }
}

Send response

{
  "response": "triggered",
  "run_id": {
    "id": "31f11586-476f-4338-a1f4-2fb5b8182510"
  },
  "info_url": "https://cci.rad.levitte.org//31f11586-476f-4338-a1f4-2fb5b8182510.html"
}

Checkout the source (in /opt/radcis/ci.rad.levitte.org/cci/state/31f11586-476f-4338-a1f4-2fb5b8182510/w)

Started at: 2025-10-15 12:37:12.213030+02:00

Commands:

Read the repo configuration (.radicle/native.yaml in /opt/radcis/ci.rad.levitte.org/cci/state/31f11586-476f-4338-a1f4-2fb5b8182510/w)

shell: 'export RUSTDOCFLAGS=''-D warnings''


  cargo --version

  rustc --version


  cargo fmt --check

  cargo clippy --all-targets --workspace -- --deny warnings

  cargo build --all-targets --workspace

  cargo doc --workspace --no-deps

  cargo test --workspace --no-fail-fast

  '

Run the script

Commands:

Send result

{
  "response": "finished",
  "result": "failure"
}