Skip to content

Conversation

@jakebailey
Copy link
Member

Another day another npm audit

Copilot AI review requested due to automatic review settings December 9, 2025 18:11
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates various dependencies across the codebase as part of routine security maintenance (npm audit). The updates include npm packages, Go modules, and development tooling, all properly reflected in lockfiles and license notices.

Key Changes

  • Updated multiple npm packages including execa, esbuild, various @azure/msal-* packages, @textlint/* packages, and related dependencies
  • Upgraded js-yaml from v3 to v4 (major version update with breaking changes handled correctly)
  • Updated Go dependencies (golang.org/x/* packages) across main and tools modules
  • Updated development tooling versions (dprint, golangci-lint)

Reviewed changes

Copilot reviewed 7 out of 10 changed files in this pull request and generated no comments.

Show a summary per file
File Description
package.json Updated execa from ^9.6.0 to ^9.6.1
package-lock.json Updated all npm dependencies and transitive dependencies with new integrity hashes
_extension/package.json Updated devDependencies: @types/vscode, @vscode/vsce, and esbuild to match lockfile
go.mod Updated golang.org/x packages (mod, sync, sys, term, text, tools) and gofumpt
go.sum Updated checksums for all Go module updates
_tools/go.mod Updated golang.org/x packages for tooling
_tools/go.sum Updated checksums for tooling Go modules
NOTICE.txt Updated license notices to reflect new versions of golang.org/x packages
.dprint.jsonc Updated typescript plugin from 0.95.12 to 0.95.13
.custom-gcl.yml Updated golangci-lint version from v2.7.0 to v2.7.2

@jakebailey jakebailey enabled auto-merge December 9, 2025 18:21
@jakebailey jakebailey added this pull request to the merge queue Dec 9, 2025
Merged via the queue into main with commit dab8a33 Dec 9, 2025
28 checks passed
@jakebailey jakebailey deleted the jabaile/update-deps-2025-12-09 branch December 9, 2025 18:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants