[dependabot]

Bumps mikepenz/action-junit-report from 6.6.0 to 6.6.1.

Release notes

Sourced from mikepenz/action-junit-report's releases.

v6.6.1

🔒 Security fix

Upgrade to v6.6.1 if you process JUnit reports from untrusted sources, including fork pull requests.

This release fixes GHSA-448p-3p5j-c948: test and suite names could inject HTML or Markdown into Job Summaries and PR comments, allowing misleading content, links or images to appear in test reports. The issue affects versions through v6.6.0. Its assessed severity is low; the reported impact is content spoofing, not JavaScript execution.

The fix escapes report-derived text in detailed and flaky summaries, grouped suite headings, and check names and links when group_reports: false. It also handles line breaks that could allow Markdown injection.

Thank you to @​f0909172434 for responsibly reporting this vulnerability.

📦 Dependencies

• Update source-map-js to patched version 1.2.2 (#1632).
• Update mikepenz/release-changelog-builder-action to v6.4.0 (#1631).

Contributors

@​mikepenz, @​renovate-mike[bot], and security reporter @​f0909172434.

Commits

• 6ef3fdc Merge commit from fork
• 1a3bc85 fix: escape report content in HTML summaries
• e7e7568 chore(deps): update mikepenz/release-changelog-builder-action action to v6.4....
• 542684a Merge pull request #1632 from mikepenz/fix/source-map-js-security
• 0831acc fix: update source-map-js to patched 1.2.2
• See full diff in compare view

[github-actions]

:java_duke: JaCoCo coverage report

Overall Project	50.76%	🟢

There is no coverage information present for the Files changed

[github-actions]

	Tests	Passed ✅	Skipped	Failed
Gradle Test Results (all modules & JDKs)	2252 ran	2252 passed	0 skipped	0 failed

Test	Result
No test annotations available

• View Gradle Test Results (all modules & JDKs)

[github-actions]

HTML test reports are available as workflow artifacts (zipped HTML).

• Download: Artifacts for this run