Skip to content

[release/10.0] Update npm dependencies - #69615

Merged
wtgodbe merged 1 commit into
dotnet:release/10.0from
wtgodbe:infrastructure/update-npm-release-10.0-2026-09-30
Oct 1, 2026
Merged

wtgodbe merged 1 commit into
dotnet:release/10.0from
wtgodbe:infrastructure/update-npm-release-10.0-2026-09-30

Conversation

@wtgodbe

@wtgodbe wtgodbe commented Sep 30, 2026

Copy link
Copy Markdown
Member

Changes

  • Update fast-uri from 3.1.4 to 3.1.8.
  • Update both js-yaml lines: 3.15.0 to 3.15.2 and 4.3.0 to 4.3.2.
  • Limit the change to the root package-lock.json, preserving dependency ranges and branch tooling.

All three newly locked package versions were fetched through the dotnet-public-npm AzDO feed configured in .npmrc. The downloaded tarballs were verified against both the lockfile integrity and npmjs upstream integrity.

Validation

  • The dependency-version checks fail on the original lockfile and pass on this update; all three repository lockfiles were checked.
  • Clean npm ci --ignore-scripts --include=optional --no-audit --no-fund succeeded.
  • npm run build --workspaces --if-present succeeded.
  • npm run test --workspaces --if-present -- --runInBand: 429 tests passed.
  • Workspace lint has 68 existing errors and 195 warnings in Web.JS. Reinstalled the original lockfile and confirmed that its full diagnostic set is identical; unrelated lint changes are excluded.

This is an npm-only update. Component Governance needs to scan the updated branch before its alert statuses reflect these versions.

Update fast-uri and js-yaml within existing dependency ranges. Ingest all new package versions into the configured Azure DevOps npm feed.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot AI balanced review requested due to automatic review settings September 30, 2026 23:08

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.

@wtgodbe wtgodbe added the tell-mode Indicates a PR which is being merged during tell-mode label Oct 1, 2026
@wtgodbe
wtgodbe merged commit 72896cd into dotnet:release/10.0 Oct 1, 2026
32 checks passed
@dotnet-policy-service dotnet-policy-service Bot added this to the 10.0.14 milestone Oct 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

tell-mode Indicates a PR which is being merged during tell-mode

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants