From 026aa977445533aa68045802ff308f2b1d5511fb Mon Sep 17 00:00:00 2001 From: Victor Vazquez Date: Fri, 23 Jan 2026 22:54:00 +0000 Subject: [PATCH 1/3] fix security issue with playwright/test 1.49.1 (#6592) --- ext/vscode/package-lock.json | 70 ++---------------------------------- 1 file changed, 3 insertions(+), 67 deletions(-) diff --git a/ext/vscode/package-lock.json b/ext/vscode/package-lock.json index 74f3dfdd325..f16a63bf04d 100644 --- a/ext/vscode/package-lock.json +++ b/ext/vscode/package-lock.json @@ -19,7 +19,6 @@ }, "devDependencies": { "@azure/core-auth": "~1", - "@playwright/test": "~1.49", "@types/chai": "~5", "@types/mocha": "~10", "@types/node": "~20", @@ -925,22 +924,6 @@ "node": ">=14" } }, - "node_modules/@playwright/test": { - "version": "1.49.1", - "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.49.1.tgz", - "integrity": "sha512-Ky+BVzPz8pL6PQxHqNRW1k3mIyv933LML7HktS8uik0bUXNCdPhoS/kLihiO1tMf/egaJb4IutXd7UywvXEW+g==", - "dev": true, - "license": "Apache-2.0", - "dependencies": { - "playwright": "1.49.1" - }, - "bin": { - "playwright": "cli.js" - }, - "engines": { - "node": ">=18" - } - }, "node_modules/@polka/url": { "version": "1.0.0-next.29", "resolved": "https://registry.npmjs.org/@polka/url/-/url-1.0.0-next.29.tgz", @@ -3948,21 +3931,6 @@ "node": ">=14.14" } }, - "node_modules/fsevents": { - "version": "2.3.2", - "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz", - "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==", - "dev": true, - "hasInstallScript": true, - "license": "MIT", - "optional": true, - "os": [ - "darwin" - ], - "engines": { - "node": "^8.16.0 || ^10.6.0 || >=11.0.0" - } - }, "node_modules/function-bind": { "version": "1.1.2", "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz", @@ -6227,38 +6195,6 @@ "node": ">=8" } }, - "node_modules/playwright": { - "version": "1.49.1", - "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.49.1.tgz", - "integrity": "sha512-VYL8zLoNTBxVOrJBbDuRgDWa3i+mfQgDTrL8Ah9QXZ7ax4Dsj0MSq5bYgytRnDVVe+njoKnfsYkH3HzqVj5UZA==", - "dev": true, - "license": "Apache-2.0", - "dependencies": { - "playwright-core": "1.49.1" - }, - "bin": { - "playwright": "cli.js" - }, - "engines": { - "node": ">=18" - }, - "optionalDependencies": { - "fsevents": "2.3.2" - } - }, - "node_modules/playwright-core": { - "version": "1.49.1", - "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.49.1.tgz", - "integrity": "sha512-BzmpVcs4kE2CH15rWfzpjzVGhWERJfmnXmniSyKeRZUs9Ws65m+RGIi7mjJK/euCegfn3i7jvqWeWyHe9y3Vgg==", - "dev": true, - "license": "Apache-2.0", - "bin": { - "playwright-core": "cli.js" - }, - "engines": { - "node": ">=18" - } - }, "node_modules/pluralize": { "version": "8.0.0", "resolved": "https://registry.npmjs.org/pluralize/-/pluralize-8.0.0.tgz", @@ -7787,9 +7723,9 @@ "license": "MIT" }, "node_modules/undici": { - "version": "7.16.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-7.16.0.tgz", - "integrity": "sha512-QEg3HPMll0o3t2ourKwOeUAZ159Kn9mx5pnzHRQO8+Wixmh88YdZRiIwat0iNzNNXn0yoEtXJqFpyW7eM8BV7g==", + "version": "7.19.0", + "resolved": "https://registry.npmjs.org/undici/-/undici-7.19.0.tgz", + "integrity": "sha512-Heho1hJD81YChi+uS2RkSjcVO+EQLmLSyUlHyp7Y/wFbxQaGb4WXVKD073JytrjXJVkSZVzoE2MCSOKugFGtOQ==", "dev": true, "license": "MIT", "engines": { From a4b10f0ea1bcac6d16e78c8a43a6c87f08620c55 Mon Sep 17 00:00:00 2001 From: Victor Vazquez Date: Wed, 25 Feb 2026 20:18:10 +0000 Subject: [PATCH 2/3] allow live mode on demand --- eng/pipelines/release-cli.yml | 10 ++++++++++ eng/pipelines/templates/jobs/build-cli.yml | 5 ++++- eng/pipelines/templates/stages/build-and-test.yml | 4 ++++ 3 files changed, 18 insertions(+), 1 deletion(-) diff --git a/eng/pipelines/release-cli.yml b/eng/pipelines/release-cli.yml index 44719734758..1f8e0f898cd 100644 --- a/eng/pipelines/release-cli.yml +++ b/eng/pipelines/release-cli.yml @@ -1,3 +1,12 @@ +parameters: + - name: AzureRecordMode + displayName: Azure Record Mode + type: string + default: playback + values: + - playback + - live + # Continuous deployment trigger trigger: branches: @@ -33,6 +42,7 @@ extends: stages: - template: /eng/pipelines/templates/stages/build-and-test.yml parameters: + AzureRecordMode: ${{ parameters.AzureRecordMode }} BuildMatrix: Windows: Pool: $(WINDOWSPOOL) diff --git a/eng/pipelines/templates/jobs/build-cli.yml b/eng/pipelines/templates/jobs/build-cli.yml index 4c9c0eb8eee..b6c732e47ba 100644 --- a/eng/pipelines/templates/jobs/build-cli.yml +++ b/eng/pipelines/templates/jobs/build-cli.yml @@ -16,6 +16,9 @@ parameters: - name: UploadArtifact type: boolean default: true + - name: AzureRecordMode + type: string + default: playback - name: ghCopilotClientId type: string - name: ghCopilotIntegrationId @@ -148,7 +151,7 @@ jobs: AZD_TEST_TENANT_ID: $(AzureSubscriptionTenantId) AZD_TEST_AZURE_SUBSCRIPTION_ID: $(SubscriptionId) AZD_TEST_AZURE_LOCATION: eastus2 - AZURE_RECORD_MODE: playback # Always run in 'playback' mode during CI builds + AZURE_RECORD_MODE: ${{ parameters.AzureRecordMode }} # AZD Live Test: Terraform authentication via `az` ARM_USE_CLI: true # Code Coverage: Generate junit report to publish results diff --git a/eng/pipelines/templates/stages/build-and-test.yml b/eng/pipelines/templates/stages/build-and-test.yml index 6e01fc7fd0a..e9d435830b4 100644 --- a/eng/pipelines/templates/stages/build-and-test.yml +++ b/eng/pipelines/templates/stages/build-and-test.yml @@ -1,4 +1,7 @@ parameters: + - name: AzureRecordMode + type: string + default: playback - name: BuildMatrix type: object - name: CrossBuildMatrix @@ -79,6 +82,7 @@ stages: OS: ${{ build.value.OS }} UploadArtifact: ${{ build.value.UploadArtifact}} Variables: ${{ build.value.Variables }} + AzureRecordMode: ${{ parameters.AzureRecordMode }} ghCopilotClientId: ${{ build.value.GhCopilotClientId }} ghCopilotIntegrationId: ${{ build.value.GhCopilotIntegrationId }} From 47e8c46b2c4bb9359377eec4d68e31795a5c1cf5 Mon Sep 17 00:00:00 2001 From: Victor Vazquez Date: Wed, 25 Feb 2026 13:37:16 -0800 Subject: [PATCH 3/3] Update eng/pipelines/release-cli.yml Co-authored-by: Daniel Jurek --- eng/pipelines/release-cli.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/eng/pipelines/release-cli.yml b/eng/pipelines/release-cli.yml index 1f8e0f898cd..19241b82856 100644 --- a/eng/pipelines/release-cli.yml +++ b/eng/pipelines/release-cli.yml @@ -42,7 +42,10 @@ extends: stages: - template: /eng/pipelines/templates/stages/build-and-test.yml parameters: - AzureRecordMode: ${{ parameters.AzureRecordMode }} + ${{ if eq(variables['Build.Reason'], 'Schedule') }}: + AzureRecordMode: live + ${{ else }}: + AzureRecordMode: ${{ parameters.AzureRecordMode }} BuildMatrix: Windows: Pool: $(WINDOWSPOOL)