Skip to content

Bump browserslist and js-yaml lockfile versions - #5216

Merged
Timothee Guerin (timotheeguerin) merged 1 commit into
mainfrom
copilot/update-browserslist-js-yaml
Sep 30, 2026
Merged

Timothee Guerin (timotheeguerin) merged 1 commit into
mainfrom
copilot/update-browserslist-js-yaml

Conversation

Copilot AI commented Sep 30, 2026

Copy link
Copy Markdown
Contributor

Updates vulnerable transitive dependencies while limiting changes to pnpm-lock.yaml.

  • Dependency updates
    • Bump browserslist from 4.28.2 to 4.28.7.
    • Bump js-yaml from 4.3.0 to 4.3.2.
    • Retain js-yaml 3.x at 3.15.2.
  • Lockfile consistency
    • Refresh browserslist transitive dependency versions and integrity hashes.
    • Preserve the existing public npm registry resolution format.

Co-authored-by: chidozieononiwu <31145988+chidozieononiwu@users.noreply.github.com>
@azure-pipelines

Copy link
Copy Markdown

You may test this build by running autorest --reset and then either:


Add the following CLI flags
Pacakge Flag Description
@autorest/core --version:https://tinyurl.com/24yups2h For changes to autorest core.
@autorest/modelerfour --use:https://tinyurl.com/2d6o8q2s For changes to modelerfour.

Or with all

autorest --version:https://tinyurl.com/24yups2h --use:https://tinyurl.com/2d6o8q2s

or use the following in your autorest configuration:
# For changes to autorest core
version: "https://tinyurl.com/24yups2h"

# For changes to modelerfour
use-extension:
  "@autorest/modelerfour": "https://tinyurl.com/2d6o8q2s"

If this build is good for you, give this comment a thumbs up. (👍) And you should run `autorest --reset` again once you're finished testing to remove it.

@timotheeguerin
Timothee Guerin (timotheeguerin) merged commit 3cab3e1 into main Sep 30, 2026
11 checks passed
@timotheeguerin
Timothee Guerin (timotheeguerin) deleted the copilot/update-browserslist-js-yaml branch September 30, 2026 02:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants