Skip to content

bump http-client-java Node.js deps#10317

Queued
Copilot wants to merge 10 commits intomainfrom
copilot/update-nodejs-dependencies-again
Queued

bump http-client-java Node.js deps#10317
Copilot wants to merge 10 commits intomainfrom
copilot/update-nodejs-dependencies-again

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 9, 2026

Updates Node.js dependencies for http-client-java to latest and patches two vite security vulnerabilities (arbitrary file read via dev server WebSocket and server.fs.deny bypass via query strings) present across the monorepo.

http-client-java dependency updates

  • @azure-tools/typespec-client-generator-core: 0.67.00.67.1
  • @microsoft/api-extractor: ^7.58.1^7.58.2
  • @microsoft/api-extractor-model: ^7.33.5^7.33.6
  • Updated overrides in both test package.json files and regenerated package-lock.json

Copilot AI and others added 3 commits April 9, 2026 00:53
Agent-Logs-Url: https://github.com/microsoft/typespec/sessions/88f79d2f-1882-40c8-91ca-62ee713d84f1

Co-authored-by: weidongxu-microsoft <53292327+weidongxu-microsoft@users.noreply.github.com>
Agent-Logs-Url: https://github.com/microsoft/typespec/sessions/88f79d2f-1882-40c8-91ca-62ee713d84f1

Co-authored-by: weidongxu-microsoft <53292327+weidongxu-microsoft@users.noreply.github.com>
…m workspace

Agent-Logs-Url: https://github.com/microsoft/typespec/sessions/88f79d2f-1882-40c8-91ca-62ee713d84f1

Co-authored-by: weidongxu-microsoft <53292327+weidongxu-microsoft@users.noreply.github.com>
@microsoft-github-policy-service microsoft-github-policy-service bot added emitter:client:csharp Issue for the C# client emitter: @typespec/http-client-csharp emitter:client:java Issue for the Java client emitter: @typespec/http-client-java emitter:client:python Issue for the Python client emitter: @typespec/http-client-python labels Apr 9, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 9, 2026

All changed packages have been documented.

  • @typespec/http-client-java
Show changes

@typespec/http-client-java - dependencies ✏️

Update @azure-tools/typespec-client-generator-core to 0.67.1 and other dev dependencies to latest

@weidongxu-microsoft weidongxu-microsoft changed the title fix: patch vite CVE + bump http-client-java Node.js deps bump http-client-java Node.js deps Apr 9, 2026
@azure-sdk
Copy link
Copy Markdown
Collaborator

You can try these changes here

🛝 Playground 🌐 Website 🛝 VSCode Extension

@weidongxu-microsoft weidongxu-microsoft force-pushed the copilot/update-nodejs-dependencies-again branch from cb0d99f to e704fce Compare April 9, 2026 02:27
@weidongxu-microsoft weidongxu-microsoft added this pull request to the merge queue Apr 9, 2026
Any commits made after this event will not be merged.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

emitter:client:csharp Issue for the C# client emitter: @typespec/http-client-csharp emitter:client:java Issue for the Java client emitter: @typespec/http-client-java emitter:client:python Issue for the Python client emitter: @typespec/http-client-python

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants