Skip to content

bump http-client-java Node.js deps#10317

Merged
weidongxu-microsoft merged 10 commits intomainfrom
copilot/update-nodejs-dependencies-again
Apr 9, 2026
Merged

bump http-client-java Node.js deps#10317
weidongxu-microsoft merged 10 commits intomainfrom
copilot/update-nodejs-dependencies-again

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 9, 2026

Updates Node.js dependencies for http-client-java to latest and patches two vite security vulnerabilities (arbitrary file read via dev server WebSocket and server.fs.deny bypass via query strings) present across the monorepo.

http-client-java dependency updates

  • @azure-tools/typespec-client-generator-core: 0.67.00.67.1
  • @microsoft/api-extractor: ^7.58.1^7.58.2
  • @microsoft/api-extractor-model: ^7.33.5^7.33.6
  • Updated overrides in both test package.json files and regenerated package-lock.json

Copilot AI and others added 3 commits April 9, 2026 00:53
Agent-Logs-Url: https://github.com/microsoft/typespec/sessions/88f79d2f-1882-40c8-91ca-62ee713d84f1

Co-authored-by: weidongxu-microsoft <53292327+weidongxu-microsoft@users.noreply.github.com>
Agent-Logs-Url: https://github.com/microsoft/typespec/sessions/88f79d2f-1882-40c8-91ca-62ee713d84f1

Co-authored-by: weidongxu-microsoft <53292327+weidongxu-microsoft@users.noreply.github.com>
…m workspace

Agent-Logs-Url: https://github.com/microsoft/typespec/sessions/88f79d2f-1882-40c8-91ca-62ee713d84f1

Co-authored-by: weidongxu-microsoft <53292327+weidongxu-microsoft@users.noreply.github.com>
@microsoft-github-policy-service microsoft-github-policy-service bot added emitter:client:csharp Issue for the C# client emitter: @typespec/http-client-csharp emitter:client:java Issue for the Java client emitter: @typespec/http-client-java emitter:client:python Issue for the Python client emitter: @typespec/http-client-python labels Apr 9, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 9, 2026

All changed packages have been documented.

  • @typespec/http-client-java
Show changes

@typespec/http-client-java - dependencies ✏️

Update @azure-tools/typespec-client-generator-core to 0.67.1 and other dev dependencies to latest

@weidongxu-microsoft weidongxu-microsoft changed the title fix: patch vite CVE + bump http-client-java Node.js deps bump http-client-java Node.js deps Apr 9, 2026
@azure-sdk
Copy link
Copy Markdown
Collaborator

You can try these changes here

🛝 Playground 🌐 Website 🛝 VSCode Extension

@weidongxu-microsoft weidongxu-microsoft force-pushed the copilot/update-nodejs-dependencies-again branch from cb0d99f to e704fce Compare April 9, 2026 02:27
@weidongxu-microsoft weidongxu-microsoft added this pull request to the merge queue Apr 9, 2026
Merged via the queue into main with commit 334950f Apr 9, 2026
30 checks passed
@weidongxu-microsoft weidongxu-microsoft deleted the copilot/update-nodejs-dependencies-again branch April 9, 2026 05:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

emitter:client:csharp Issue for the C# client emitter: @typespec/http-client-csharp emitter:client:java Issue for the Java client emitter: @typespec/http-client-java emitter:client:python Issue for the Python client emitter: @typespec/http-client-python

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants