fix: imported fixes 06-11-26

[dionisio-bot]

Backport of #40889

[changeset-bot]

🦋 Changeset detected

Latest commit: fb1f28b

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages

Name	Type
@rocket.chat/meteor	Patch
@rocket.chat/core-typings	Patch
@rocket.chat/rest-typings	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[codecov]

Codecov Report

❌ Patch coverage is 88.11189% with 34 lines in your changes missing coverage. Please review.
⚠️ Please upload report for BASE (release-8.4.4@45fd571). Learn more about missing BASE report.

Additional details and impacted files

@@               Coverage Diff                @@
##             release-8.4.4   #40892   +/-   ##
================================================
  Coverage                 ?   69.96%           
================================================
  Files                    ?     3309           
  Lines                    ?   120933           
  Branches                 ?    21636           
================================================
  Hits                     ?    84606           
  Misses                   ?    33017           
  Partials                 ?     3310           

Flag	Coverage Δ
e2e	59.61% <ø> (?)
e2e-api	46.25% <5.55%> (?)
unit	70.73% <89.64%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[dionisio-bot]

Looks like this PR is not ready to merge, because of the following issues:

• This PR is missing the 'stat: QA assured' label
• This PR is missing the required milestone or project

Please fix the issues and try again

If you have any trouble, please check the PR guidelines

[rc-layne]

Warning

These are security findings reported by the security scanners configured in Layne. Findings may contain false positives - review them and fix what makes sense.

Layne found 1 high issue in this PR.

View 1 finding(s)

Severity	Scanner	File	Rule	Description
🟠 High	semgrep	apps/meteor/app/apple/lib/handleIdentityToken.ts:42	app.config.semgrep.rules.rocketchat.ssrf-validation-bypass-without-justification	SSRF validation is disabled. Ensure the URL is not user-controlled or is restricted to a known-safe allowlist.

[julio-rocketchat]

/layne exception-approve LAYNE-2ddd92cdd5a7448f reason: hardcoded url

[rc-layne]

✅ Exception recorded for LAYNE-2ddd92cdd5a7448f by @julio-rocketchat: "hardcoded url". Re-running scan...