Bump eslint, globals, js-yaml, and typescript-eslint patch versions - #7116
Conversation
…ersions Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
There was a problem hiding this comment.
Pull request overview
Updates runtime and linting dependencies to newer non-major releases.
Changes:
- Bumps ESLint, globals, js-yaml, and TypeScript ESLint packages.
- Regenerates locked versions, URLs, and integrity hashes.
Show a summary per file
| File | Description |
|---|---|
| package.json | Updates dependency constraints. |
| package-lock.json | Locks updated packages and transitive dependencies. |
Review details
Tip
Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
- Files reviewed: 1/2 changed files
- Comments generated: 1
- Review effort level: Balanced
| "eslint-plugin-security": "^3.0.1", | ||
| "glob": "^13.0.6", | ||
| "globals": "^17.8.0", | ||
| "globals": "^17.9.0", |
|
@copilot address review feedback |
Updated the PR description to accurately reflect that |
|
✅ Copilot review passed with no inline comments. @copilot Add the |
✅ Coverage Check PassedOverall Coverage
📁 Per-file Coverage Changes (1 files)
Coverage comparison generated by |
|
🔌 Smoke Services — All services reachable! ✅
|
|
Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.
|
|
📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤
|
|
✅ Smoke Copilot BYOK completed. Copilot BYOK mode operational. 🔓
|
|
❌ Contribution Check failed. Please review the logs for details.
|
|
📡 Smoke OTel Tracing completed. All tracing scenarios validated. ✅
|
|
❌ Smoke Copilot BYOK AOAI (Entra) reports failed. AOAI BYOK (Entra) mode investigation needed...
|
|
🛡️ Smoke Copilot Network Isolation confirmed the egress allowlist is enforced. ✅ Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
To allow these domains, add them to the network:
allowed:
- defaults
- "example.com"See Network Configuration for more information.
|
|
📰 VERDICT: Smoke Docker Sbx has concluded. All systems operational. This is a developing story. 🎤
|
|
✅ Smoke Gemini completed. All facets verified. 💎
|
|
🚀 Security Guard has started processing this pull request |
|
❌ Smoke Copilot BYOK AOAI (api-key) reports failed. AOAI BYOK (api-key) mode investigation needed...
|
|
✅ Smoke Claude passed
|
|
✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟 Warning Firewall blocked 5 domainsThe following domains were blocked by the firewall during workflow execution:
To allow these domains, add them to the network:
allowed:
- defaults
- "msfeed12.pkgs.visualstudio.com"
- "msfeed17.pkgs.visualstudio.com"
- "msfeed2.pkgs.visualstudio.com"
- "msfeed25.pkgs.visualstudio.com"
- "registry.npmjs.org"See Network Configuration for more information.
|
|
Smoke Test Results
Overall: PASS
|
|
EGRESS_RESULT allow=pass deny=pass ✅ Allowed domain (github.com) reachable: Overall: PASS — network isolation egress enforcement working as expected. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
To allow these domains, add them to the network:
allowed:
- defaults
- "example.com"See Network Configuration for more information.
|
github-actions
Bot
added
the
smoke-copilot-network-isolation
Smoke Test: Copilot BYOK (Direct) Mode
Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY) via api-proxy → api.githubcopilot.com Overall: PASS cc
|
Smoke Test: Claude Engine Validation
Overall result: PASS
|
Smoke Test: GitHub Actions Services Connectivity
Overall: FAIL —
|
Smoke Test Results - Gemini
Overall status: FAIL
|
Smoke Test: API Proxy OpenTelemetry Tracing — Results
Overall: All scenarios passed / expected. No issues found.
|
Chroot Version Comparison Results
Overall: FAILED — Node.js version mismatch between host and chroot environments (v24.18.0 vs v22.23.2). Since not all tests passed, the
|
Smoke Test: Docker Sbx Validation — PASS ✅
Recent PRs: #7115 Upgrade gh-aw to v0.86.1 pre-release and recompile workflows; #7096 Add SBX rollout failure monitor Overall: PASS
|
🏗️ Build Test Suite Results
Overall: 8/8 ecosystems passed — ✅ PASS All 18 projects across Bun, C++, Deno, .NET, Go, Java, Node.js, and Rust built/installed and tested successfully through the AWF firewall proxy. Java required a writable local Maven repo override (
|
|
PR titles:
Results:
Warning Firewall blocked 5 domainsThe following domains were blocked by the firewall during workflow execution:
To allow these domains, add them to the network:
allowed:
- defaults
- "msfeed12.pkgs.visualstudio.com"
- "msfeed17.pkgs.visualstudio.com"
- "msfeed2.pkgs.visualstudio.com"
- "msfeed25.pkgs.visualstudio.com"
- "registry.npmjs.org"See Network Configuration for more information.
|
Automated dependency monitoring flagged six safe patch-level updates with no breaking changes and zero
npm auditfindings before/after.Dependency updates (
package.json,package-lock.json)eslint: 10.8.0 → 10.8.1globals: 17.8.0 → 17.9.0js-yaml: 5.2.2 → 5.2.3@typescript-eslint/eslint-plugin: 8.65.0 → 8.66.0@typescript-eslint/parser: 8.65.0 → 8.66.0typescript-eslint: 8.65.0 → 8.66.0Larger available upgrades (
chalk@6,commander@15,execa@10,typescript@7,@babel/core@8) are major version bumps and are intentionally out of scope here — worth tracking separately for manual review.Note: CI should confirm build/lint/test pass with the updated lockfile, as local verification was constrained by registry network flakiness in the dev sandbox.