fix: imported fixes 06-11-26

[dionisio-bot]

Backport of #40889

[changeset-bot]

🦋 Changeset detected

Latest commit: 78ef26b

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages

Name	Type
@rocket.chat/meteor	Patch
@rocket.chat/core-typings	Patch
@rocket.chat/rest-typings	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[codecov]

Codecov Report

❌ Patch coverage is 88.11189% with 34 lines in your changes missing coverage. Please review.
✅ Project coverage is 69.97%. Comparing base (d0230e1) to head (78ef26b).
⚠️ Report is 1 commits behind head on release-8.5.1.

Additional details and impacted files

@@                Coverage Diff                @@
##           release-8.5.1   #40891      +/-   ##
=================================================
+ Coverage          69.95%   69.97%   +0.02%     
=================================================
  Files               3328     3330       +2     
  Lines             126813   127158     +345     
  Branches           22143    22155      +12     
=================================================
+ Hits               88706    88983     +277     
- Misses             34805    34864      +59     
- Partials            3302     3311       +9     

Flag	Coverage Δ
e2e	59.27% <ø> (-0.07%)	⬇️
e2e-api	46.11% <5.55%> (-0.03%)	⬇️
unit	70.09% <89.64%> (+0.06%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[rc-layne]

Warning

These are security findings reported by the security scanners configured in Layne. Findings may contain false positives - review them and fix what makes sense.

Layne found 1 high issue in this PR.

View 1 finding(s)

Severity	Scanner	File	Rule	Description
🟠 High	semgrep	apps/meteor/app/apple/lib/handleIdentityToken.ts:42	app.config.semgrep.rules.rocketchat.ssrf-validation-bypass-without-justification	SSRF validation is disabled. Ensure the URL is not user-controlled or is restricted to a known-safe allowlist.

[dionisio-bot]

Looks like this PR is not ready to merge, because of the following issues:

• This PR is missing the 'stat: QA assured' label
• This PR is missing the required milestone or project

Please fix the issues and try again

If you have any trouble, please check the PR guidelines

[julio-rocketchat]

/layne exception-approve LAYNE-2ddd92cdd5a7448f reason: hardcoded url

[rc-layne]

✅ Exception recorded for LAYNE-2ddd92cdd5a7448f by @julio-rocketchat: "hardcoded url". Re-running scan...