Skip to content

chore: Update Component versions and remove vulnerable dependency usage#2700

Merged
MSNev merged 1 commit intomainfrom
MSNev/UpdateComponents
Feb 9, 2026
Merged

chore: Update Component versions and remove vulnerable dependency usage#2700
MSNev merged 1 commit intomainfrom
MSNev/UpdateComponents

Conversation

@MSNev
Copy link
Collaborator

@MSNev MSNev commented Feb 9, 2026

No description provided.

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates build/tooling dependencies across the monorepo (notably Rush/Grunt and several @nevware21/* packages) and removes usage of vulnerable/deprecated dependencies (e.g., request). It also refreshes the generated Rush install-run scripts and lockfiles to align with the upgraded toolchain.

Changes:

  • Bump Rush (5.153.15.167.0) and update generated common/scripts/install-run*.js.
  • Upgrade Grunt toolchain versions repo-wide (grunt, grunt-cli, grunt-contrib-connect, @nevware21/grunt-*-ts, @nevware21/ts-*).
  • Remove request/node-fetch from the size image generator tool and adjust it to use https for gzip-size measurement.

Reviewed changes

Copilot reviewed 36 out of 37 changed files in this pull request and generated 12 comments.

Show a summary per file
File Description
tools/status-tools/package.json Bumps grunt to align with updated build tooling.
tools/sizeImageGenerator/size-image-generator.js Replaces request usage; adds logging; uses https for raw gzip size.
tools/sizeImageGenerator/package.json Removes request/node-fetch dependencies; updates grunt.
tools/shims/package.json Updates Grunt toolchain packages and @nevware21/ts-utils range.
tools/rollup-plugin-uglify3-js/package.json Updates Grunt toolchain packages.
tools/rollup-es5/package.json Updates Grunt toolchain packages.
tools/release-tools/package.json Bumps grunt to align with updated build tooling.
tools/chrome-debug-extension/package.json Updates Grunt toolchain and @nevware21/ts-* package ranges.
tools/applicationinsights-web-snippet/package.json Updates Grunt toolchain packages.
shared/AppInsightsCore/package.json Updates Grunt toolchain and @nevware21/ts-* dependency ranges.
shared/AppInsightsCommon/package.json Updates Grunt toolchain and @nevware21/ts-utils dependency range.
shared/1ds-core-js/package.json Updates Grunt toolchain and @nevware21/ts-* dependency ranges.
rush.json Updates rushVersion to match the upgraded Rush toolchain.
package.json Updates Rush/Grunt toolchain, removes request, updates overrides (e.g., form-data).
extensions/applicationinsights-properties-js/package.json Updates Grunt toolchain and @nevware21/ts-utils dependency range.
extensions/applicationinsights-perfmarkmeasure-js/package.json Updates Grunt toolchain and @nevware21/ts-utils dependency range.
extensions/applicationinsights-osplugin-js/package.json Updates Grunt toolchain and @nevware21/ts-* dependency ranges.
extensions/applicationinsights-dependencies-js/package.json Updates Grunt toolchain and @nevware21/ts-* dependency ranges.
extensions/applicationinsights-debugplugin-js/package.json Updates Grunt toolchain and @nevware21/ts-utils dependency range.
extensions/applicationinsights-clickanalytics-js/package.json Updates Grunt toolchain and @nevware21/ts-utils dependency range.
extensions/applicationinsights-cfgsync-js/package.json Updates Grunt toolchain and @nevware21/ts-* dependency ranges.
extensions/applicationinsights-analytics-js/package.json Updates Grunt toolchain and @nevware21/ts-utils dependency range.
examples/shared-worker/package.json Updates Grunt toolchain and @nevware21/ts-utils dependency range.
examples/dependency/package.json Updates Grunt toolchain and @nevware21/ts-utils dependency range.
examples/cfgSync/package.json Updates Grunt toolchain and @nevware21/ts-utils dependency range.
examples/AISKU/package.json Updates Grunt toolchain and @nevware21/ts-utils dependency range.
common/scripts/install-run.js Updated generated install-run script from Rush upgrade (node: imports, npmrc filtering, Windows spawning changes).
common/scripts/install-run-rush.js Updated generated install-run-rush script from Rush upgrade (node: imports, module check).
common/config/rush/npm-shrinkwrap.json Refreshes lockfile content to reflect upgraded toolchain/dependency graph.
common/config/rush/common-versions.json Updates preferred version pin/range for form-data.
common/Tests/Framework/package.json Updates Grunt toolchain and @nevware21/ts-* dependency ranges.
channels/tee-channel-js/package.json Updates Grunt toolchain and @nevware21/ts-* dependency ranges.
channels/offline-channel-js/package.json Updates Grunt toolchain and @nevware21/ts-* dependency ranges.
channels/applicationinsights-channel-js/package.json Updates Grunt toolchain and @nevware21/ts-* dependency ranges.
channels/1ds-post-js/package.json Updates Grunt toolchain and @nevware21/ts-* dependency ranges.
AISKULight/package.json Updates Grunt toolchain and @nevware21/ts-* dependency ranges.
AISKU/package.json Updates Grunt toolchain and @nevware21/ts-* dependency ranges.
Files not reviewed (1)
  • common/config/rush/npm-shrinkwrap.json: Language not supported

@MSNev MSNev enabled auto-merge (squash) February 9, 2026 23:35
@MSNev MSNev merged commit 6185620 into main Feb 9, 2026
14 of 15 checks passed
@MSNev MSNev deleted the MSNev/UpdateComponents branch February 9, 2026 23:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants