[docs] Note undici security patch in VS Code extension (aspire#17868)#1205
Draft
aspire-repo-bot[bot] wants to merge 1 commit into
Draft
[docs] Note undici security patch in VS Code extension (aspire#17868)#1205aspire-repo-bot[bot] wants to merge 1 commit into
aspire-repo-bot[bot] wants to merge 1 commit into
Conversation
Document the undici dependency bump from 7.21.0 to 7.27.0 in the VS Code extension's What's New page, addressing three security advisories: GHSA-cxjh-pqwp-8mfp, GHSA-f269-vfmq-vjvj, GHSA-9f74-3xc5-r7g4. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
aspire-repo-bot
Bot
added
the
docs-from-code
Contributor
Author
Frontend HTML artifact readyThe latest frontend build uploaded the This comment updates automatically when a new frontend build artifact is uploaded. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Documents changes from microsoft/aspire#17868
Authored by
@IEvangelist.Targeting
release/13.4— the latest release branch onmicrosoft/aspire.dev— becauserelease/13.5(from the source PR milestone13.5) does not exist there.Why this PR is needed
Aspire PR #17868 bumped the
undicinpm dependency in the VS Code extension from7.21.0to7.27.0to address three security advisories (GHSA-cxjh-pqwp-8mfp, GHSA-f269-vfmq-vjvj, GHSA-9f74-3xc5-r7g4). Thepr_body_has_security_markersignal fired because the PR body explicitly references these GHSA advisories.Changes
Added a "Security patch: undici dependency updated" subsection under the VS Code extension section of the Aspire 13.4 What's New page, listing the three advisories that were patched.
Files modified
src/frontend/src/content/docs/whats-new/aspire-13-4.mdx— updated (added security patch note under VS Code extension section)