Repository navigation

fix: dependabot package upgrades (critical/high security) - #667

Open

Ayaz-Microsoft wants to merge 79 commits into

dependabotchangesfrom

fix/dependabot-secfix-0730

Commits on May 20, 2026
- Merge pull request #579 from microsoft/dev
  Roopan-Microsoft
  authored
  91ce3ed
Commits on May 25, 2026
- Merge pull request #600 from microsoft/dev
  Roopan-Microsoft
  authored
  8033e01
Commits on Jun 11, 2026
- chore: dev to main merge
  Avijit-Microsoft
  authored
  4113db3
Commits on Jun 16, 2026
Commits on Jun 17, 2026
- chore: upgrade vulnerable packages (Python + NPM)
  Ayaz-Microsoft
  committed
  6c6ad96
- Revert non-Bicep changes from recent infra commits
  Ashwal-Microsoft
  committed
  4fd854e
- Regenerate main.json from main.bicep
  Ashwal-Microsoft
  committed
  03c64a9
- Regenerate main.json using Bicep v0.44.1
  Ashwal-Microsoft
  committed
  6fdac2e
- Merge pull request #628 from microsoft/Ash17-Bicep17-Changes17
  Roopan-Microsoft
  authored
  7f770ae
Commits on Jun 18, 2026
- Merge pull request #629 from microsoft/feature/dependabot-june2026-0617-cp
  Roopan-Microsoft
  authored
  e978828
Commits on Jun 25, 2026
Commits on Jun 26, 2026
- fix: update pydantic-settings to version 2.14.2 in pyproject.toml
  Avijit-Microsoft
  authored
  48c93af
- commit
  Tejasri-Microsoft
  committed
  cdfab8b
- Merge pull request #638 from microsoft/psl-ts-hp-secu
  Prajwal1-Microsoft
  authored
  00f8f86
Commits on Jun 27, 2026
- Merge pull request #639 from microsoft/main
  Avijit-Microsoft
  authored
  3ca0180
Commits on Jun 29, 2026
Commits on Jul 2, 2026
- Create script to build and push image
  chaudhariniraj
  committed
  d4264fd
- revert unnecessary change
  chaudhariniraj
  committed
  e9422c0
- Update the script
  chaudhariniraj
  committed
  e43b016
Commits on Jul 3, 2026
- Revert unnecessary changes from main.parametres.json
  chaudhariniraj
  committed
  318391b
- bicep build changes
  chaudhariniraj
  committed
  9f9ae02
- Update deployment guide
  chaudhariniraj
  committed
  98dac8c
- update scripts
  chaudhariniraj
  committed
  3f69b91
- resolve copilot comment
  chaudhariniraj
  committed
  82a7711
- Update image
  chaudhariniraj
  committed
  60197dc
- Update bicep build version
  chaudhariniraj
  committed
  201fc45
- Merge pull request #648 from chaudhariniraj/psl-add-acr
  Roopan-Microsoft
  authored
  5614b5f
Commits on Jul 6, 2026
- Update acr script to handle WAF deployment
  chaudhariniraj
  committed
  b86fbae
- resolve copilot comment
  chaudhariniraj
  committed
  dc9941e
Commits on Jul 8, 2026
- Update container registry code
  chaudhariniraj
  committed
  113ef2a
- Resolve Copilot comment
  chaudhariniraj
  committed
  88918f8
- Merge pull request #649 from chaudhariniraj/psl-add-acr
  Roopan-Microsoft
  authored
  591debf
Commits on Jul 9, 2026
- Update deployment script and azure.yaml
  chaudhariniraj
  committed
  5e09c5c
- Merge pull request #650 from chaudhariniraj/psl-add-acr
  Roopan-Microsoft
  authored
  deab07d
Commits on Jul 14, 2026
- update azure.yaml file to show github issue URL before provisioning
  NirajC3-Microsoft
  committed
  5cd9f6b
- update azure.yaml to add posix 1
  NirajC3-Microsoft
  committed
  902fddb
- Resolve indentation issue
  NirajC3-Microsoft
  committed
  6b3661e
- Merge pull request #653 from microsoft/main
  Avijit-Microsoft
  authored
  796d3a0
- Merge branch 'dev' into dev
  chaudhariniraj
  authored
  fcac335
Commits on Jul 15, 2026
- Merge pull request #651 from chaudhariniraj/dev
  Roopan-Microsoft
  authored
  ffa3a1c
Commits on Jul 16, 2026
- Update Owners ID for Vinay and Prajwal
  NirajC3-Microsoft
  committed
  6006d74
- Merge pull request #654 from chaudhariniraj/main
  Roopan-Microsoft
  authored
  a9a3957
Commits on Jul 17, 2026
- remove local deployment related files
  Priyanka2-Microsoft
  committed
  e630f44
- Add posix in azure.yaml file
  NirajC3-Microsoft
  committed
  af2fba0
Commits on Jul 19, 2026
- Merge pull request #660 from chaudhariniraj/dev
  Roopan-Microsoft
  authored
  60f352a
Commits on Jul 20, 2026
- Merge pull request #658 from Priyanka2-Microsoft/remove-local-deployment-cp
  Roopan-Microsoft
  authored
  d1aef3b
- Merge pull request #661 from microsoft/dev
  Avijit-Microsoft
  authored
  125bd2d
Commits on Jul 28, 2026
- Upgrade NGINX base image to version 1.28.3-8-azl3.0.20260722 in Dockerfile
  KanchanN-Microsoft
  committed
  b02e8b9
Commits on Jul 30, 2026
- Merge pull request #664 from microsoft/upgrade-dockerimage
  Roopan-Microsoft
  authored
  974ea08
- Merge pull request #665 from microsoft/dev
  Prajwal-Microsoft
  authored
  b4f3d01
- Merge pull request #666 from microsoft/main
  Prajwal-Microsoft
  authored
  c358599
- Merge remote-tracking branch 'origin/dev' into dependabotchanges
  Ayaz-Microsoft
  committed
  9224231
- fix: dependabot critical/high security upgrades
  
  Ayaz-Microsoft
  and
  Copilot
  committed
  d1974fd
Commits on Aug 4, 2026
- fixed dependabot high alerts
  Ayaz-Microsoft
  committed
  02526de
- fix: test pipelines and broken dependencies
  Ayaz-Microsoft
  committed
  5dc8956
- build: merge dependabotchanges dependency updates
  Ayaz-Microsoft
  committed
  3bdc512
- chore: update moduleResolution in tsconfig.json to use 'bundler'
  Ayaz-Microsoft
  committed
  0c5b85a
Commits on Aug 5, 2026
- fix: align Python dependency versions
  Ayaz-Microsoft
  committed
  cb8a6cc
- Merge pull request #676 from microsoft/fix/dependabot-secfix-0730
  Avijit-Microsoft
  authored
  d4cb4c2
Commits on Aug 7, 2026
- fixed recent dependabot vulnerabilities
  Ayaz-Microsoft
  committed
  2589409
- Merge pull request #681 from microsoft/fix/dependabot-secfix-0730
  Roopan-Microsoft
  authored
  5ba91a4
Commits on Aug 11, 2026

Commits

Commits on May 20, 2026

Commits on May 25, 2026

Commits on Jun 11, 2026

Commits on Jun 16, 2026

Commits on Jun 17, 2026

Commits on Jun 18, 2026

Commits on Jun 25, 2026

Commits on Jun 26, 2026

Commits on Jun 27, 2026

Commits on Jun 29, 2026

Commits on Jul 2, 2026

Commits on Jul 3, 2026

Commits on Jul 6, 2026

Commits on Jul 8, 2026

Commits on Jul 9, 2026

Commits on Jul 14, 2026

Commits on Jul 15, 2026

Commits on Jul 16, 2026

Commits on Jul 17, 2026

Commits on Jul 19, 2026

Commits on Jul 20, 2026

Commits on Jul 28, 2026

Commits on Jul 30, 2026

Commits on Aug 4, 2026

Commits on Aug 5, 2026

Commits on Aug 7, 2026

Commits on Aug 11, 2026