Skip to content

Conversation

Copy link
Contributor

Copilot AI commented Nov 18, 2025

Dependabot PR to update webpack test dependency from 5.73.0 to 5.94.0, addressing security vulnerabilities in the older version.

Changes

  • Merged main branch to resolve conflicts from intervening commits
  • Updated webpack version in build-tests/webpack-local-version-test/package.json to ~5.94.0
  • Regenerated lockfiles via rush update to reflect webpack dependency updates
  • Generated changelogs for @microsoft/rush and @rushstack/heft-webpack5-plugin to document the dependency update

The webpack version bump brings in API changes from webpack 5.73.0→5.94.0, including updates to peer dependencies like acorn, es-module-lexer, watchpack, and @webassemblyjs packages.


✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

L-Qun and others added 30 commits October 11, 2025 14:41
* rush change

* fix: enable prerelease version matching in bridge-package command
* Use the no-duplicate-imports rule.

* fixup! Use the no-duplicate-imports rule.

* fixup! Use the no-duplicate-imports rule.

* Fix duplicate import issues.

* Use the import/no-duplicates rule.

* Manual fixes.
…scope (#5410)

* docs(eslint-plugin): document the @rushstack/typedef-var rule

* chore(changefile): add changefile for typedef-var documentation

* docs: remove for...of and for...in exception from typedef-var rule documentation
* Fork npm-check

* rush update

* Update test scripts in package json

* rush update

* Fix test file

* Add and update readmes

* Update readme, update config

* Update readme

---------

Co-authored-by: cmalonzo <cmalonzo@users.noreply.github.com>
…#5418)

* Move files around in repo-toolbox.

* Don't bump allowed alternative dependencies.

* Include @rushstack/set-webpack-public-path-plugin@^4.1.16 in common-versions.json.
… `@rushstack/pair-react-dom-render-unmount` rules. (#5419)

* Include the @rushstack/import-requires-chunk-name rule.

* Include the @rushstack/pair-react-dom-render-unmount rule.

* fixup! Include the @rushstack/pair-react-dom-render-unmount rule.

* Include missing documentation.

* Rush change.

* Sort README entries.
…5421)

* Add new credential-cache package

* Add test command

* Factor out CredentialCache

* Fix routing

* Fix API

* Update readme

* Update readme

* rush update

* Forward rush-user folder name

* Remove old credentials schema

* Restore caching in getHomeFolder

* Remove reexport of areDeepEqual

* Update API md

* Centralize polyfill

---------

Co-authored-by: David Michon <dmichon-msft@users.noreply.github.com>
…port in ESLint >=9.37.0. (#5422)

* Fix an issue where suppressed rule violations still show up in the report in ESLint >=9.37.0.

* Fix an issue where the ESLint process will crash when running in the ESLint VSCode extension in ESLint >=9.37.0.
rushbot and others added 9 commits November 12, 2025 01:12
* [eslint-bulk] Report bulk suppressions as suppressions

* [heft-lint] Include suppressed results

* Enable sarif log for local rigs, add test

* Fix lint cache

* Fix typo in TSLint

---------

Co-authored-by: David Michon <dmichon-msft@users.noreply.github.com>
…che invalidation (#5433)

* Initial plan

* Add parameter ignoring feature to rush-lib

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Add tests for parameter ignoring feature

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Refactor to eliminate code duplication in parameter collection

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Improve documentation and add clarifying comments

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Address PR feedback: use ignoredParameterValues and improve filtering

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Address final PR feedback: improve logging and test coverage

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Centralize parameter creation helper and share with BaseScriptAction

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Ensure all parameter types are tested for filtering

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Refactor parameter helpers into cli/parsing directory

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Use CommandLineParser to parse parameter values in test

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Use executeWithoutErrorHandlingAsync instead of executeAsync

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Add rush change file for project-level parameter ignoring feature

Co-authored-by: iclanton <5010588+iclanton@users.noreply.github.com>

* Adjust formatting of change file

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>
Co-authored-by: iclanton <5010588+iclanton@users.noreply.github.com>
Co-authored-by: David Michon <dmichon@microsoft.com>
…json (#5448)

* Initial plan

* Add validation for parameterNamesToIgnore in rush-project.json

Co-authored-by: iclanton <5010588+iclanton@users.noreply.github.com>

* Remove unused test repository

* Address PR feedback: combine error messages and add malformed parameter test

Co-authored-by: iclanton <5010588+iclanton@users.noreply.github.com>

* Add changelog entry for rush-lib

Co-authored-by: iclanton <5010588+iclanton@users.noreply.github.com>

* Add tests for parameter validation with valid parameters

Co-authored-by: iclanton <5010588+iclanton@users.noreply.github.com>

* Update libraries/rush-lib/src/api/test/RushProjectConfiguration.test.ts

Co-authored-by: David Michon <dmichon@microsoft.com>

* Update common/changes/@microsoft/rush-lib/copilot-validate-parameter-names-to-ignore_2025-11-13-23-26.json

* Fix changelog entry to use @microsoft/rush package name

Co-authored-by: iclanton <5010588+iclanton@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: iclanton <5010588+iclanton@users.noreply.github.com>
Co-authored-by: Ian Clanton-Thuon <iclanton@users.noreply.github.com>
Co-authored-by: David Michon <dmichon@microsoft.com>
…outing (#5451)

* Initial plan

* Add PathProjectSelectorParser implementation with path: scheme

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Address code review feedback and add comprehensive unit tests for selector parsers

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Add tests for VersionPolicyProjectSelectorParser and SubspaceSelectorParser

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Refactor tests into separate files and improve PathProjectSelectorParser testability

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Add change file for PathProjectSelectorParser feature

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Update common/changes/@microsoft/rush/copilot-add-path-project-selector-parser_2025-11-17-22-30.json

* Address code review feedback: make workingDirectory required and add comprehensive tests

Co-authored-by: iclanton <5010588+iclanton@users.noreply.github.com>

* Fix Windows path separator issue by normalizing to forward slashes for LookupByPath

Co-authored-by: iclanton <5010588+iclanton@users.noreply.github.com>

* Use consistent cwd from RushCommandLineParser for path resolution

Co-authored-by: iclanton <5010588+iclanton@users.noreply.github.com>

* Auto-route relative and absolute POSIX paths to path: selector

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Use Path.convertToSlashes helper instead of manual path separator conversion

Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>

* Rush change.

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: dmichon-msft <26827560+dmichon-msft@users.noreply.github.com>
Co-authored-by: David Michon <dmichon@microsoft.com>
Co-authored-by: iclanton <5010588+iclanton@users.noreply.github.com>
Co-authored-by: Ian Clanton-Thuon <iclanton@users.noreply.github.com>
Copilot AI and others added 2 commits November 19, 2025 00:00
Co-authored-by: iclanton <5010588+iclanton@users.noreply.github.com>
Copilot AI changed the title [WIP] Update webpack from 5.73.0 to 5.94.0 Bump webpack from 5.73.0 to 5.94.0 in /build-tests/webpack-local-version-test Nov 19, 2025
Copilot AI requested a review from iclanton November 19, 2025 00:03
@iclanton iclanton marked this pull request as ready for review November 19, 2025 00:46
@iclanton iclanton merged commit 875777c into dependabot/npm_and_yarn/build-tests/webpack-local-version-test/webpack-5.94.0 Nov 19, 2025
1 check passed
@iclanton iclanton deleted the copilot/sub-pr-5413 branch November 19, 2025 00:47
@github-project-automation github-project-automation bot moved this from Needs triage to Closed in Bug Triage Nov 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Closed

Development

Successfully merging this pull request may close these issues.

7 participants