Skip to content

Use overrides to update serialize-javascript in anycode/server - #163

Merged
Raymond Zhao (rzhao271) merged 2 commits into
mainfrom
copilot/bump-serialize-javascript-v7-0-3
May 14, 2026
Merged

Use overrides to update serialize-javascript in anycode/server#163
Raymond Zhao (rzhao271) merged 2 commits into
mainfrom
copilot/bump-serialize-javascript-v7-0-3

Conversation

Copilot AI commented May 14, 2026

Copy link
Copy Markdown
Contributor

Summary

  • add a serialize-javascript override in anycode/server/package.json starting at ^7.0.3
  • run npm audit fix to refresh anycode/server/package-lock.json
  • resolve the audited transitive vulnerabilities, with serialize-javascript landing on 7.0.5
  • update .github/workflows/ci.yml to use Node 22

Validation

  • cd /home/runner/work/vscode-anycode/vscode-anycode/anycode/server && npm test
  • cd /home/runner/work/vscode-anycode/vscode-anycode/anycode/server && npm audit --json
  • cd /home/runner/work/vscode-anycode/vscode-anycode/anycode/server && npm ls serialize-javascript brace-expansion diff

Notes

  • CI now uses Node 22 in .github/workflows/ci.yml, which is compatible with the resolved serialize-javascript@7.0.5 engine requirement.

Agent-Logs-Url: https://github.com/microsoft/vscode-anycode/sessions/e4cf7c55-5dc2-4c1c-834f-03674043dca9

Co-authored-by: rzhao271 <7199958+rzhao271@users.noreply.github.com>
@rzhao271

Copy link
Copy Markdown
Contributor

Copilot Update workflows and pipelines to use Node 22, not 20.

Agent-Logs-Url: https://github.com/microsoft/vscode-anycode/sessions/f46aa627-5c5e-4e17-8cfd-fae61638d1b1

Co-authored-by: rzhao271 <7199958+rzhao271@users.noreply.github.com>

Copilot AI commented May 14, 2026

Copy link
Copy Markdown
Contributor Author

Copilot Update workflows and pipelines to use Node 22, not 20.

Addressed in 910acf0 by updating the GitHub Actions CI workflow to use Node 22. I also re-checked the repo’s workflow/pipeline YAML files and this was the only explicit Node 20 pin in-tree.

@rzhao271 Raymond Zhao (rzhao271) added this to the 1.121.0 milestone May 14, 2026
@rzhao271
Raymond Zhao (rzhao271) marked this pull request as ready for review May 14, 2026 17:00
@rzhao271
Raymond Zhao (rzhao271) enabled auto-merge (squash) May 14, 2026 17:00
@rzhao271
Raymond Zhao (rzhao271) merged commit c748441 into main May 14, 2026
3 checks passed
@rzhao271
Raymond Zhao (rzhao271) deleted the copilot/bump-serialize-javascript-v7-0-3 branch May 14, 2026 17:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants