Bump typespec-java pinned http-client-java core commit by iscai-msft · Pull Request #26 · iscai-msft/typespec-azure

iscai-msft · 2026-08-31T18:46:22Z

Summary

packages/typespec-java pins the http-client-java sources it consumes from the core (microsoft/typespec) submodule via core-commit.json, independent of whatever commit the submodule itself is checked out to. This meant a fix landed in core was not actually being picked up.

Bumps core-commit.json's sha from 27b39b71bf5c67f560ec6035900ae5621226ac8d to 0bd0c174228cf559ec7d4c9edec904294b59b9bc, which includes microsoft/typespec#11766 "Fix Javadoc corruption from literal */ in parameter description". That fix resolves the Regen & Spector Tests CI failure seen on Azure#5305 (unrelated PR — the failure was a real compile error in generated Java, not flakiness).

Verification

pnpm turbo run --filter "@azure-tools/typespec-java^..." build
pnpm run regenerate (in packages/typespec-java) — all specs regenerate successfully
mvn compile -f emitter-tests/pom.xml — generated Java compiles cleanly (previously failed with ';' expected / <identifier> expected errors in FileClient.java)
pnpm run test:java:e2e — Spector e2e tests pass (BUILD SUCCESS)
pnpm lint passes

Co-authored-by: Copilot App 223556219+Copilot@users.noreply.github.com

## Summary - resolve emitter diff commenter PRs using trusted `workflow_run` head repository and branch data - validate the head SHA, head repository, base repository, and unique match before commenting - avoid the commit-association lookup that returns no open PR for unmerged fork commits ## Validation - `pnpm format` - `pnpm lint` - verified the branch-based lookup resolves Azure#5151 while the commit-based lookup returns no PR Co-authored-by: tadelesh <chenjieshi@microsoft.com> Copilot-Session: 2422fbee-258a-4c23-a618-df16c85c12df

…ultValue validation (Azure#5199) Resolve: Azure#5192 Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…odel definition. (Azure#5197) The appliance owns and reports the entire agent definition, so `modelDeploymentRef` does not belong in `AgentDefinitionAppliance`. It is now Platform-only and remains available on `AgentDefinitionPlatform`. - `AgentDefinitionAppliance` drops the property and its now-unused `HasModelDeploymentRef` template parameter, so the signature becomes `AgentDefinitionAppliance<HasInstructions>`. - `AgentPropertiesAppliance.definition` is `@visibility(Lifecycle.Read)` again. It was only left writable in Azure#5178 so clients could send `modelDeploymentRef`; with the property gone every appliance definition field is service-owned. - Aligns the ARM agent sample api-version with the Agent base type contract version (2024-06-01 -> 2026-04-01). Regenerated reference docs, extern signatures and the sample swagger. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…foundations.tsp (Azure#5195) ## Problem The Integration CI job builds `typespec-azure` against `typespec` main through the `core` submodule. The new `library-linter` `missing-documentation` rule reports two undocumented public properties in `packages/typespec-azure-core/lib/foundations.tsp`: - `LocationOfCreatedResourceResponse.location` - `LocationOfCreatedResourceWithServiceProvidedNameResponse.location` ## Fix Added `@doc` decorators using the existing `{name}` template convention and the `Resource` type parameter. This preserves resource-specific generated descriptions such as `The location of an instance of WidgetPart` while satisfying the linter. The sample fixtures are unchanged. --------- Co-authored-by: iscai-msft <isabellavcai@gmail.com> Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: ee116a23-26c2-4be5-b305-6c2733ad0790

Bumps [core](https://github.com/microsoft/typespec) from `c58de60` to `cf390ec`. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/typespec/commit/cf390ec82733eca286dd1ac20129875cdbcd2645"><code>cf390ec</code></a> [http-client-java] Document protocol response headers (<a href="https://redirect.github.com/microsoft/typespec/issues/11610">#11610</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/825454ae88d4c72768233749267fa14fd0d0f75f"><code>825454a</code></a> Fix system model base provider resolution (<a href="https://redirect.github.com/microsoft/typespec/issues/11585">#11585</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/818715759ee6111c39793fadadaad92923472732"><code>8187157</code></a> fix: fallback to positional match for back compat renames (<a href="https://redirect.github.com/microsoft/typespec/issues/11611">#11611</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/ee233a260156abc465a28a7a9a53e79c3545433f"><code>ee233a2</code></a> Bump fast-uri to 3.1.5 in http-client-csharp to resolve GHSA-7p8r-x3mc-p8w7 (...</li> <li><a href="https://github.com/microsoft/typespec/commit/006b5cbfca9336a6b9bf127cf716fe645a201fa7"><code>006b5cb</code></a> [http-client-csharp] Skip obsolete MRW context restoration (<a href="https://redirect.github.com/microsoft/typespec/issues/11605">#11605</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/49dc195d6491c846dba89ecf3e6dc89e62636291"><code>49dc195</code></a> http-client-java, bump dep part2 (<a href="https://redirect.github.com/microsoft/typespec/issues/11608">#11608</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/f2fc27a2805175863ad335ea25860453030843bd"><code>f2fc27a</code></a> build(deps): bump fast-uri from 3.1.4 to 3.1.5 in /packages/http-client-pytho...</li> <li><a href="https://github.com/microsoft/typespec/commit/d914a19848834644d233fbcc57fdd1f6eb18b28e"><code>d914a19</code></a> Fix unsupported client settings bindings (<a href="https://redirect.github.com/microsoft/typespec/issues/11580">#11580</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/effe3c80491d13d5ddadc8de5b0d2de40b7b18c9"><code>effe3c8</code></a> Add documentation rules to the library linter (<a href="https://redirect.github.com/microsoft/typespec/issues/11543">#11543</a>)</li> <li>See full diff in <a href="https://github.com/microsoft/typespec/compare/c58de60f9fa281a7938fcdb09faa61be8e436c2f...cf390ec82733eca286dd1ac20129875cdbcd2645">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: iscai-msft <43154838+iscai-msft@users.noreply.github.com>

Co-authored-by: iscai-msft <isabellavcai@gmail.com>

This adds support for parameterized next links and paging with a relative next link. Fetchers now call their request handlers instead of FetcherForNextLink. Request handlers now have a nextLink parameter that's used to predicate construction of the first request, what parameters to reinject, and passed to NewRequestForNextLink on subsequent pages (request handlers for non-pageable operations are not affected). Fixes Azure#4994 Fixes Azure#4993

Co-authored-by: iscai-msft <isabellavcai@gmail.com>

## Summary - update generated agentic workflows from gh-aw v0.80.9 to v0.85.4 - configure the documentation update workflow to use GPT-5.6 Sol - refresh generated workflow locks, action pins, and maintenance workflow metadata ## Validation - `gh aw compile` (2 workflows compiled, 0 warnings) - `pnpm format && pnpm lint` --------- Co-authored-by: tadelesh <chenjieshi@microsoft.com> Copilot-Session: e1518b7f-326d-45aa-adb5-c37800d1d280

## Summary - preserve TypeSpec array encoding metadata in the Go code model - generate delimiter-aware JSON serialization and deserialization for string and string-backed enum arrays - support comma, space, pipe, and newline delimiters - add generated-output and Spector coverage for the supported encodings Fixes Azure#4927 ## Testing - generated-output scenario for pointer-element slices - 12 Spector round-trip cases for string, fixed enum, and extensible enum arrays --------- Co-authored-by: Joel Hendrix <jhendrix@microsoft.com>

Pull request created by AI Agent --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: weidongxu-microsoft <53292327+weidongxu-microsoft@users.noreply.github.com>

## Summary - prepare `@azure-tools/typespec-java` for the 0.46.0 release - sync Java generator sources and tests to microsoft/typespec `27b39b71b` - document one feature and three fixes through Chronus - expose the `remove-model` management option schema and add new Spector coverage - fix regeneration from the flattened Java package layout The package remains at 0.45.13. A follow-up PR will apply the 0.46.0 version bump. ## Validation - package build and unit tests - Java client regeneration - Java Spector end-to-end tests - Chronus verification - repository format and lint --------- Copilot-Session: cd6f2e08-d6d3-42ae-affd-bc71e98086f7

## Summary - keep duplicate operation-name validation enabled for C# and report overload collisions as `duplicate-client-name-warning` - share the duplicate client-name diagnostic creation logic between the scoped and post-generation validators - add regression coverage that verifies both C# overload warnings - add the required Chronus change entry for `@azure-tools/typespec-client-generator-core` [Azure#5027](Azure#5027) added a second validation pass over generated client methods. That pass grouped methods by name only, so it reported `duplicate-client-name` errors for valid C# overloads with different parameter lists. The scoped validator already reports C# operation name collisions as `duplicate-client-name-warning`; this change applies the same behavior to the post-generation validator while preserving errors for other emitters. --------- Co-authored-by: tadelesh <chenjieshi@microsoft.com> Copilot-Session: 8735f8bf-549d-457d-91bd-37bf37cf66a4 Copilot-Session: 331f3a26-f6a5-4d20-8b52-065b1ae43ed8

## Summary - bump `@azure-tools/typespec-java` from 0.45.13 to 0.46.0 - generate the 0.46.0 changelog from the Chronus entries merged in Azure#5218 - consume the released change files --------- Copilot-Session: cd6f2e08-d6d3-42ae-affd-bc71e98086f7

Co-authored-by: iscai-msft <isabellavcai@gmail.com>

## Summary - classify `x-ms-meta` and `x-ms-or` headers as metadata maps only when their wire type is a map - generate scalar `x-ms-meta` request and response headers through the normal scalar path - enable the `payload/head` Spector case and assert its `Content-Type`, `x-ms-meta`, and HEAD success response values ## Testing - `vitest run test/unittest/scenario-suites/canonical-headers.test.ts` - `node .scripts/tspcompile.js --filter=headgroup` - `go test -v ./...` against the Spector server Fixes Azure#5180 --------- Co-authored-by: tadelesh <chenjieshi@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Joel Hendrix <jhendrix@microsoft.com> Copilot-Session: 11bf8740-bf29-46ef-a20a-d34d19c42763

wouldnt let me regen lockfile bc of npm issues - had to specifically just update http-client-python to workaround --------- Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

…#5219) ## Summary - preserve `@encode(string)` in cached Go boolean scalar metadata - serialize boolean model properties as JSON strings and deserialize case-insensitive boolean strings - enable the `encode/boolean` Spector case and cover all response casing variants ## Testing - TypeSpec Go emitter build - generated Go client tests against the Spector mock server Fixes Azure#5181 --------- Co-authored-by: tadelesh <chenjieshi@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Joel Hendrix <jhendrix@microsoft.com> Copilot-Session: 132c0c74-a1c1-4708-bc74-c1754886a91a

…rom node_modules (Azure#5225) Caveat is we are removing the typing from requirements Azure#5068 ("Migrate typespec-python scripts from tsx to native node", `3f1e4aeab4a7a6176249e02d3ecc326ea3d81e2f`) switched the setup lifecycle scripts from `tsx` to plain `node` and removed `tsx` from `dependencies`: ```jsonc "install": "node ./eng/scripts/setup/run-python3.ts ./eng/scripts/setup/install.py", "prepare": "node ./eng/scripts/setup/run-python3.ts ./eng/scripts/setup/prepare.py", ``` Node.js **intentionally refuses to type-strip `.ts` files located under `node_modules`**. When the emitter is installed as a dependency (e.g. `tsp-client` SDK generation), its `install` lifecycle script runs `node ./eng/scripts/setup/run-python3.ts` from inside `node_modules` and fails: - Node ≥ 22.18 / 24 (native type-stripping on): `ERR_UNSUPPORTED_NODE_MODULES_TYPE_STRIPPING` - Older Node (< 22.6, or `--no-experimental-strip-types`): `TypeError [ERR_UNKNOWN_FILE_EXTENSION]: Unknown file extension ".ts"` ### Why CI didn't catch it In the monorepo the setup scripts run from the **source tree**, not `node_modules`, where native type-stripping *is* allowed. The failure only surfaces when the package is installed as a dependency — i.e. only for downstream consumers. ## The fix — ship `.js` (no `tsx`) Rather than re-adding `tsx`, convert the only two shipped scripts that run from `node_modules` to plain ESM JavaScript so `node` can execute them directly, on every Node version, with no type-stripping: Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Libba Lawrence <llawrence@microsoft.com> Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

## Summary - make `ClientOptions.APIVersion` override a defaulted API version embedded in an operation path - resolve the generated API-version literal and optional override once in the client constructor - reject an empty resolved path API version before constructing the generated client - derive path-override support from the client parameters already present in the code model, without adding adapter or code-model state - keep existing client-parameter collection, subclient behavior, and query/header API-version policy behavior unchanged - support ARM clients by normalizing nil options before reading `options.APIVersion` - restore the Azure API-version path Spector test that was previously skipped ## Override algorithm 1. For a directly constructable client with a defaulted path API-version parameter, the constructor starts with the generated API-version literal. 2. A non-empty `ClientOptions.APIVersion` replaces that default in the constructor. 3. The constructor rejects an empty resolved value, stores the result on the client, and each request builder uses the stored value directly when substituting the path segment. 4. Query and header API versions continue to use azcore's existing API-version policy behavior. This keeps generated literals as the source of default versions and avoids relying on azcore's path API-version policy, which intentionally does not rewrite URL paths. ## Tests - generated-code scenarios cover regular and ARM clients, including nil ARM options and constructor-time resolution - the default path test runs against the Spector mock server - the override test uses a capture transport that returns HTTP 200 and asserts the outgoing request path, so it can verify an arbitrary API version without requiring mock-server support for that version - regenerated `versionedgroup` retains its existing query API-version policy and its handwritten test remains unchanged - typespec-go unit tests, repository formatting, and lint pass Closes Azure#4940 --------- Co-authored-by: tadelesh <chenjieshi@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Joel Hendrix <jhendrix@microsoft.com> Copilot-Session: a2fed377-7b26-45fc-b3aa-8b6d6df8b46a Copilot-Session: e664c7ba-e7a6-4a53-9251-a461b00b92c5

## Summary - remove the obsolete patch that disables the ARM resource identifier test - re-enable the generated Java emitter test - add an internal TypeSpec Java change entry ## Validation - `pnpm format` - `pnpm lint` - `mvn -f emitter-tests\pom.xml '-Dtest=azure.resourcemanager.commonproperties.CommonPropertiesTests#testArmResourceIdentifiers' test -q` Copilot-Session: 813ff84f-32dc-4283-8093-c212747506fb

add a new function to filter out go scope for union cases, and add other spector test cases

## Summary - Change ARM resource resolution so concrete resource identities are seeded only from registered read/createOrUpdate operations - Replace permissive operation-path resource ID inference with strict ARM resource instance path parsing - Append lifecycle/list/action operations only when they match an already detected resource identity - Add regression coverage for list-only/action-only operations not creating resources and create-only operations still creating resources - Include the `resolveArmResources` design proposal and related linter candidates ## Designed resource detection flow 1. **Collect candidate resource model details** from `listArmResources(program)`. These are registered TypeSpec resource models, not yet concrete ARM resources. - Current implementation largely already does this. 2. **Find identity operations** for each candidate model: `read` and `createOrUpdate`. - **Required change:** previous implementation considered all registered ARM operations equally during resource creation, including `list`, `action`, `update`, `delete`, and `checkExistence`. - **Covered by this PR:** resources are now seeded only from `read` and `createOrUpdate`. 3. **Use identity operation paths as candidate resource instance paths.** The resolver should trust the registered ARM operation kind; HTTP verb/response-shape correctness should be enforced by linters. - **Required change:** previous implementation derived resource identity from every operation path. - **Covered by this PR:** only `read`/`createOrUpdate` paths can establish resource identity. 4. **Parse and validate each candidate path** as an ARM resource instance path. - **Required change:** previous parser synthesized resource IDs from non-instance paths, especially list/action paths, and fabricated providerless resource identities beyond known exceptions. - **Covered by this PR:** `getResourcePathElements` was removed and replaced with strict `parseArmResourceInstancePath`, which requires a literal `/providers/{namespace}` segment except for known providerless exceptions such as tenant, subscription, resource group, and explicit generic resource-id parameter paths. 5. **Group candidates by normalized resource identity**: provider namespace, resource type segments, literal path segments case-insensitively, and variable path segments by position while ignoring variable names. - **Required change:** previous grouping did not consistently compare full normalized instance paths and could merge across paths/scopes when explicit resource names matched. - **Covered by this PR:** resource identity grouping now uses normalized instance-path comparison for identity operations. 6. **Create one concrete `ResolvedResource` per identity group.** `read` + `createOrUpdate` on the same normalized path become one resource; different valid paths become separate resources; `createOrUpdate` alone can create a resource; `list`/`action` alone cannot. - **Required change:** previous `list` and `action` operations could create a `ResolvedResource`. - **Covered by this PR:** added tests for list-only/action-only not creating resources and create-only creating a resource. 7. **Derive stable resource facts from the canonical instance path**: `resourceInstancePath`, `resourceType`, provider namespace, scope, resource name parameter or singleton key, and parent candidate information. - **Required change:** previous implementation derived these facts independently from each operation path; singleton metadata is model/decorator-based rather than path-based. - **Partially covered by this PR:** `resourceInstancePath`/`resourceType` now come from strict identity paths. Path-based singleton cleanup remains future work. 8. **Append remaining operations** only to already-detected resources: lifecycle operations by matching normalized instance path, list operations by detected-resource-ID prefix, and action operations under the detected resource instance path. - **Required change:** previous detection and operation grouping happened in one phase, allowing non-identity operations to define resources. Previous list matching also parsed list paths to reconstruct possible resources. - **Covered by this PR:** non-identity operations are appended only after detected identities exist. List operations now attach only to the closest detected resource whose normalized resource ID has the list request path as a prefix. Non-prefix list mappings are intentionally left as a TODO and do not create resource identities. 9. **Leave unmatched operations for provider/non-resource handling.** They should not invent new resources. - **Required change:** previous registered ARM operations that failed association could be skipped and also excluded from `providerOperations`. - Not covered by this PR. 10. **Resolve parent and scope relationships** after the full resource set is known, using normalized path comparison. Missing parents should be skipped rather than synthesized as empty resources. - **Required change:** previous implementation can synthesize empty parent/scope resources and return `ExternalResource` for ambiguous external scopes. - **TODO:** clarify scope representation. Concrete external scopes can currently be synthesized as `ResolvedResource` entries, while ambiguous/generic external scopes use `"ExternalResource"` as an unresolved-external sentinel. We should decide whether to keep that sentinel, replace it with `undefined` or a structured unresolved scope, and remove the unused `parent`/`scope` fields from the internal `ResolvedResourceOperations` staging type if they remain unused. - Not covered by this PR. ## Validation - `pnpm --filter @azure-tools/typespec-azure-resource-manager exec tsc -p tsconfig.build.json --noEmit` - `pnpm --filter @azure-tools/typespec-azure-resource-manager exec vitest run test/resource-resolution.test.ts --testNamePattern "parseArmResourceInstancePath"` - Diagnostic-tolerant resolver behavior script verified list-only=0, create-only=1, full resource prefix-list/action attachment=1/1, resource group exception, and generic resource-id exception - Full `pnpm --filter @azure-tools/typespec-azure-resource-manager exec vitest run test/resource-resolution.test.ts` is currently blocked by baseline `experimental-feature` warnings from compiler/agent TypeSpec files --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Mark Cowlishaw <1054056+markcowl@users.noreply.github.com> Copilot-Session: 10e564a2-4523-48ae-821e-a1c3e878765f

Go fake-server dispatch treated a client-level API-version path segment as an operation path parameter, which could miscount path captures when operations also had regular path parameters. - **Fake dispatch** - Exclude API-version path parameters from the operation path-parameter count. - Continue matching the API-version segment while only parsing and forwarding operation parameters. - **Regression coverage** - Extend the path API-version scenario to generate fakes for a route containing both API-version and resource ID segments. ```go const regexStr = `/with-path-api-version/(?P<apiVersion>...)/resources/(?P<resourceId>...)` if len(matches) < 2 { return nil, fmt.Errorf("failed to parse path %s", req.URL.Path) } ```  - Fixes Azure#4942 --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: JiaqiZhang-Dev <194873822+JiaqiZhang-Dev@users.noreply.github.com> Co-authored-by: Jiaqi Zhang <jiaqzhang@microsoft.com>

The Go emitter doesn't have proper support for OASIS repeatability headers. They should not be treated like standard headers. Skip ARM test for user-defined error as it's not supported yet. Updated TODO issues not to reference autorest.go. Revert incorrect changes made in Azure#5189

## Summary - format every `text/plain` request-body value through the Go wire-value formatter before passing it to `strings.NewReader` - cover required and optional text bodies whose wire types need conversion to strings - add an extensible-enum regression scenario as a concrete reproduction - add a fix change entry for `@azure-tools/typespec-go` Fixes Azure#5237 ## Validation - Go emitter unit suite: 40 test files, 61 tests passed - `@azure-tools/typespec-go` TypeScript build - repository lint and formatting checks --------- Co-authored-by: tadelesh <chenjieshi@microsoft.com> Co-authored-by: Joel Hendrix <jhendrix@microsoft.com> Copilot-Session: 291c8d49-aec6-40e7-95b7-798e6606bf2e

Bumps [core](https://github.com/microsoft/typespec) from `f30cd35` to `e5ccef6`. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/typespec/commit/e5ccef6102fc9f0812b07aaf0f85d3cb09426ae5"><code>e5ccef6</code></a> Python enable arm operationtemplates tests (<a href="https://redirect.github.com/microsoft/typespec/issues/11697">#11697</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/1a1583554b6b3b9b98155002f10e696d1c1ffa85"><code>1a15835</code></a> Fix remove-model in TypeSpec Java management generation (<a href="https://redirect.github.com/microsoft/typespec/issues/11698">#11698</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/c6b1685b1c412ef6e5f6a3a4b5eaec5e264a6565"><code>c6b1685</code></a> update codeowners (<a href="https://redirect.github.com/microsoft/typespec/issues/11689">#11689</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/f26f61f65487d51cfa1029a0d63b87f4837051c1"><code>f26f61f</code></a> Disable e2e tests (<a href="https://redirect.github.com/microsoft/typespec/issues/11687">#11687</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/2e405625188657d6b42bc979fa1ded8752006cdd"><code>2e40562</code></a> fix: rename libraries variable due to case sensitivity in ps (<a href="https://redirect.github.com/microsoft/typespec/issues/11682">#11682</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/ce3f873710c70dcc0fc512d103a1539ab00159c7"><code>ce3f873</code></a> fix(http-client-csharp): resolve System.ClientModel types as framework types ...</li> <li><a href="https://github.com/microsoft/typespec/commit/d459235a83769e65c6cbbf105589cadb8353fa80"><code>d459235</code></a> Fix IPv4 and IPv6 casing in generated C# parameters (<a href="https://redirect.github.com/microsoft/typespec/issues/11673">#11673</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/d8f1ee2c89826f6a8e3516107374a9a858b0eaad"><code>d8f1ee2</code></a> Add targeted library filtering to RegenPreview (<a href="https://redirect.github.com/microsoft/typespec/issues/11644">#11644</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/b2df9c34deb6cea23bbc60588b0128b8412f7b90"><code>b2df9c3</code></a> Add name filter to can-i-use dashboard (<a href="https://redirect.github.com/microsoft/typespec/issues/11304">#11304</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/db58bcd343e66becc6e23bbb756b0cf1ba52ca4b"><code>db58bcd</code></a> [python] Add mock API tests for ARM service group extension resources (<a href="https://redirect.github.com/microsoft/typespec/issues/11401">#11401</a>)</li> <li>Additional commits viewable in <a href="https://github.com/microsoft/typespec/compare/f30cd352f93997e04c75d48c7ace6947a1d5d07a...e5ccef6102fc9f0812b07aaf0f85d3cb09426ae5">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

The codegen is incorrect and is being improperly worked around.

Alerted by: https://github.com/Azure/typespec-azure/security/dependabot/313 and https://github.com/Azure/typespec-azure/security/dependabot/314

Co-authored-by: iscai-msft <isabellavcai@gmail.com>

Previously, the `[$-;]` range included `/` and caused a path parameter to consume subsequent path segments. This PR also resolves Azure/azure-sdk-for-go#27393.

@clientoption

…Spec model (Azure#5276) Fixes Azure#5256 ## Summary Extends the `@clientOption` decorator so its `value` parameter can reference a TypeSpec model, in addition to the previously supported `string`, `boolean`, and `number` literal values. ```tsp @clientoption("composes", OpenAICreateResponseOptions, "csharp") model FoundryCreateResponseOptions {} ``` ## Changes - `lib/decorators.tsp`: updated `@clientOption`'s `value` parameter type to `unknown | valueof unknown` and added an example/description covering model reference values. - `src/internal-utils.ts`: `getDecoratorArgValue` now routes `Model` kind decorator arguments through `getClientTypeWithDiagnostics` (same path already used for `EnumMember`), so a referenced model is resolved into its `SdkType`, preserving any customizations such as `@alternateType`. - `generated-defs/Azure.ClientGenerator.Core.ts`: regenerated via `pnpm gen-extern-signature`. - Added tests in `test/decorators/client-option.test.ts` covering: - A model reference as the `value`, verified via `getClientOptions`. - That `@alternateType` customizations on the referenced model are preserved when resolving the value. - Added a changeset entry. ## Testing - `pnpm vitest run` in `packages/typespec-client-generator-core` — 1405 passed, 2 skipped. - `pnpm build` and `pnpm lint` pass. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: iscai-msft <isabellavcai@gmail.com> Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Co-authored-by: tadelesh <chenjieshi@microsoft.com> Copilot-Session: 43cc5590-eb34-4c28-bdcd-36f6365474be

## Summary - enable the client operation-group and renamed-operation Spector cases for typespec-ts - replace skipped placeholder tests with generated client usage for all 12 scenarios - regenerate the tracked declaration baselines with current emitter configuration ## Validation - 12 focused Spector integration tests passed - pnpm format - pnpm lint - pnpm change verify Copilot-Session: 7d904e02-8f6f-49d8-93dc-11fc6a458486

## Summary - parse generated fake-server `text/plain` request bodies back into their declared Go wire types - preserve optional zero values such as `false`, `0`, and empty extensible-enum strings by checking request-body presence - reuse the existing transport scalar parser for fake text bodies without changing model, multipart, or header/query/path parsing - cover optional and required extensible enums plus boolean, integer, and date/time scalar bodies Follow-up to Azure#5238. ## Validation - Go emitter unit suite: 42 test files, 69 tests passed - generated enum/scalar/date fake server compiles with `go test -run '^$' ./...` - regenerated media-type fixture compiles with `go test -run '^$' ./...` - `@azure-tools/typespec-go` TypeScript build - repository lint and formatting checks --------- Co-authored-by: tadelesh <chenjieshi@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Joel Hendrix <jhendrix@microsoft.com> Copilot-Session: 291c8d49-aec6-40e7-95b7-798e6606bf2e

Version bump for the go emitter hotfix release from `main`. Bumps `@azure-tools/typespec-go` from 0.17.0 to 0.17.1. ### Bug Fixes - Azure#5272 Parse text request bodies into their declared types in generated fake servers. - Azure#5233 Fix fake server path parameter regex to exclude path delimiters. Generated with Chronus targeting only `@azure-tools/typespec-go`. The `core` submodule is not included in this commit. Co-authored-by: tadelesh <chenjieshi@microsoft.com> Copilot-Session: 522dc121-d667-4d02-8d39-479cf74ab743

Azure#5308) Resolve: Azure#5285 --------- Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: tadelesh <1726438+tadelesh@users.noreply.github.com>

## Summary - add a project skill for implementing typespec-ts Spector integration coverage - document focused client generation, mock-server validation, and tracked declaration regeneration - include current package configuration and test naming templates ## Validation - skill structure validation - pnpm format - pnpm lint Example PR implemented by this skill Azure#5316. --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 7d904e02-8f6f-49d8-93dc-11fc6a458486

Path params regex must include segment delimiter for params that allow unencoded characters (e.g. ARM scopes and resource IDs). Fixes regression introduced in e7943b2.

Publishes a patch release of `@azure-tools/typespec-go` containing the `allowReserved` fake-server path capture fix from Azure#5321. This consumes the pending Go changesets and bumps the package from 0.17.1 to 0.17.2. Co-authored-by: tadelesh <chenjieshi@microsoft.com> Copilot-Session: a571d068-8c8a-46f5-a780-a1bb71485a26

…zure#5081) ## Summary Adds opt-in support to the TypeScript emitter for generating request and response models based on each operation's lifecycle visibility, preventing properties from appearing in model interfaces where they are not applicable. ## Configuration Enable the feature with the `experimental-split-models-by-visibility` emitter option. It is disabled by default. ## Model treatment A TypeSpec model is treated as the source definition for one or more emitted interfaces rather than an interface that is emitted directly. The emitter derives the model shape required by each lifecycle visibility used by the service operations. The `Read` projection is the canonical interface and keeps the original TypeSpec model name, such as `Widget`. Other required projections receive visibility suffixes, such as `WidgetCreate`, `WidgetCreateOrUpdate`, or `WidgetUpdate`. If two visibility views have the same shape, the emitter reuses an existing interface instead of generating an unnecessary variant. ## Implementation The implementation runs before the normal SDK type traversal in five phases: 1. **Collect the model graph** — Resolve each request operation's write visibility and collect reachable `(model, visibility)` nodes, including nested container types, inheritance, discriminated hierarchies, and cycles. 2. **Identify required projections** — Mark models that directly lose properties under a visibility, then propagate that requirement back through referencing models so nested differences are reflected at the request root. 3. **Build projected models** — Create input-only model shells first, then copy visible properties and reconnect projected type, base-model, and discriminator references. Models whose write graph is unchanged continue to reuse the canonical model. 4. **Build the canonical Read view** — Filter response-used source models to `Read` visibility while retaining their original model names. This occurs after write projections are built so write-only properties remain available when creating those projections. 5. **Repoint request types** — Update client method parameters and HTTP body representations to use the applicable projected models, including non-model roots and spread bodies, before the regular emitter queue is built. ## Coverage Adds focused scenario coverage for POST, PUT, PATCH, GET, DELETE, ARM resource templates, nested propagation, name collisions, polymorphism, container types, non-model body roots, spread bodies, cycles, and explicit read-only and write-only properties. This provides an opt-in experimental implementation with production code, generated documentation, and scenario-based regression coverage. --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 742ec718-6a39-4e6d-bf72-74d80f6a2b9e

Bumps [core](https://github.com/microsoft/typespec) from `e5ccef6` to `210f84c`. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/typespec/commit/210f84c0dee6cfb8226ce95700562c9bf0922822"><code>210f84c</code></a> Fix C# date-time naming feedback (<a href="https://redirect.github.com/microsoft/typespec/issues/11751">#11751</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/046fbae6ea3248bb12afa9cb0926c401f7cac170"><code>046fbae</code></a> Fix C# serialization for normalized parameters (<a href="https://redirect.github.com/microsoft/typespec/issues/11750">#11750</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/3e0ad3379c45abe0d65648353f600a6427e4ab1e"><code>3e0ad33</code></a> Bump http-client-csharp TCGC dependency to 0.71.2 (<a href="https://redirect.github.com/microsoft/typespec/issues/11739">#11739</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/5a7973bfac7ac43fe8008c74528f0e2e34c275a5"><code>5a7973b</code></a> feat(http-specs): add SSE protocol Spector scenarios (<a href="https://redirect.github.com/microsoft/typespec/issues/11613">#11613</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/58bf2c4b2dba2524455ab4dde9980bd728bb2926"><code>58bf2c4</code></a> Preserve standalone date and timestamp names during C# normalization (<a href="https://redirect.github.com/microsoft/typespec/issues/11741">#11741</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/ec239a1e5a0dc00a8447818578d6e688392fdbef"><code>ec239a1</code></a> Invalidate the full constructor with the constructor cache (<a href="https://redirect.github.com/microsoft/typespec/issues/11745">#11745</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/a791115b05f626d8fcc88943ebcd38b15a6aa162"><code>a791115</code></a> fix(http-client-python): generate valid Python type annotations in types.py (...</li> <li><a href="https://github.com/microsoft/typespec/commit/48030bac41e40960616337eea790575be4850c24"><code>48030ba</code></a> build(deps): bump brace-expansion and c8 in /packages/http-client-csharp (<a href="https://redirect.github.com/microsoft/typespec/issues/11">#11</a>...</li> <li><a href="https://github.com/microsoft/typespec/commit/a81fc68652be33f6dd5f0c32de6f042e4b3520fc"><code>a81fc68</code></a> Reset the cached full constructor when a type's identity changes (<a href="https://redirect.github.com/microsoft/typespec/issues/11737">#11737</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/3e5e2a234636367bba93845a7bebdc7b7878b1c4"><code>3e5e2a2</code></a> Improve the error message (<a href="https://redirect.github.com/microsoft/typespec/issues/11736">#11736</a>)</li> <li>Additional commits viewable in <a href="https://github.com/microsoft/typespec/compare/e5ccef6102fc9f0812b07aaf0f85d3cb09426ae5...210f84c0dee6cfb8226ce95700562c9bf0922822">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Timothee Guerin <tiguerin@microsoft.com> Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

This adds back the empty path param check for client path params to the request builder method. The reason is that client accessor methods don't return an error, so if a client accessor method contains a path param we can only validate it's not empty during request creation. Fixes regression introduced in 7c0c271.

Fixes Azure#5288 ## Summary - Treat `*/*` from `@typespec/http` as the unconstrained `File` content-type marker, not a concrete request `Content-Type` value. - For generated file upload clients without an explicit content type, expose `Content-Type` as an optional string with client default `application/octet-stream`. - Keep download `Accept: */*` behavior unchanged. - Update the file upload regression test and add a Chronus change entry. ## Validation - `mise exec -- pnpm exec oxlint packages/typespec-client-generator-core/src/http.ts packages/typespec-client-generator-core/test/methods/file.test.ts --deny-warnings` - `mise exec -- pnpm --filter @azure-tools/typespec-client-generator-core test -- methods/file.test.ts` *(blocked locally: this worktree has an unavailable/broken `core` submodule, so package imports from `@typespec/*` and `@azure-tools/typespec-azure-core` could not resolve)* --------- Co-authored-by: iscai-msft <isabellavcai@gmail.com> Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 6a785543-019d-4b0c-9750-5affcfc900ee

## Summary Expand `@azure-tools/typespec-ts` Spector coverage with newly enabled specs, additional scenarios in existing suites, and explicit tracking for unsupported cases. ## Spector coverage ### Newly enabled specs - `authentication/noauth/union` - Requests without authentication - Requests with an OAuth2 token - `payload/json-merge-patch` - Resource creation - `response/status-code-range` - Error responses covered by a status-code range - Exact status-code responses taking precedence over a range - `parameters/body-root` - Nested `@bodyRoot` parameter serialization - `azure/client-generator-core/api-version/client-api-versions` - API versions supplied through `@clientApiVersions` - `azure/resource-manager/management-group` - Get, create/update, update, delete, and list at management-group scope - `azure/resource-manager/service-group` - Get, create/update, update, delete, and list at service-group scope ### Expanded existing specs - `azure/resource-manager/common-properties` - User-defined 400 error deserialization - ARM resource identifier get and create/replace scenarios - `azure/resource-manager/operation-templates` - LRO paging with a request body - GET LRO - POST action paging - Explicitly marked pageable operations - Legacy custom routes - Create/replace with an optional body - `encode/duration` - Float seconds and milliseconds with larger units for query and header parameters - `type/model/inheritance/single-discriminator` - Get and put for a discriminated model with no subtypes - `parameters/query` - Dollar-sign query parameter serialization - `payload/pageable` - String next links - Paging without a continuation token - Requested page sizes - `routes` - Exploded model query expansion ### Tracked unsupported scenarios - Optional omitted bodies still send `Content-Type`: Azure#5293 - Boolean `@encode(string)` values are emitted as JSON booleans: Azure#5296 - Lossy duration integer encodings retain fractional values: Azure#5297 - JSON and XML continuation-token paging stops after the first page: Azure#5298

Publishes a patch release of `@azure-tools/typespec-go` containing the restored empty client path-parameter validation from Azure#5333. This consumes the pending Go changeset and bumps the package from 0.17.2 to 0.17.3. Co-authored-by: tadelesh <chenjieshi@microsoft.com> Copilot-Session: 50981d09-8a0c-46d3-9bbc-94468e91bb2a

## Summary - map `@azure-typespec/http-client-csharp-mgmt` to the `C#` dashboard display name - ensure the Azure Management Plane table uses the same language label as the data-plane C# emitter - allow the display-name grouping from microsoft/typespec#11709 to aggregate both C# emitters into one overview card ## Validation - Verified the combined changes against live coverage data: the management-plane table header displays `C#`, the raw management emitter package name is absent, and the overview contains one aggregated C# card. Co-authored-by: live1206 <live1206@users.noreply.github.com>

Bumps [core](https://github.com/microsoft/typespec) from `210f84c` to `daea7e2`. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/typespec/commit/daea7e29cb73542a8863a34aeef2533d76ec1ec7"><code>daea7e2</code></a> Do Not Generate Dashboard for Manual Regen Preview Pipeline (<a href="https://redirect.github.com/microsoft/typespec/issues/11778">#11778</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/a0b0ee0530bad7e05db28131c7f650c0a75aced9"><code>a0b0ee0</code></a> feat(http-client-python): generate structured JSONL/SSE streaming (<a href="https://redirect.github.com/microsoft/typespec/issues/11594">#11594</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/10b1126bd475d9c32ab859ddd27a911f61ccd69b"><code>10b1126</code></a> Fix: [ms] encoded duration default values were being encoded with the wrong f...</li> <li><a href="https://github.com/microsoft/typespec/commit/806e1ab8d883a7da4e4926ca19af2bb16f53d079"><code>806e1ab</code></a> fix(http-client-python): raise azure-core error types for customized errors c...</li> <li><a href="https://github.com/microsoft/typespec/commit/d8e1467e07a2413e9f63d3f297ddd925f9dae4ed"><code>d8e1467</code></a> Fix Javadoc corruption from literal */ in parameter description (<a href="https://redirect.github.com/microsoft/typespec/issues/11766">#11766</a>)</li> <li>See full diff in <a href="https://github.com/microsoft/typespec/compare/210f84c0dee6cfb8226ce95700562c9bf0922822...daea7e29cb73542a8863a34aeef2533d76ec1ec7">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…oups (Azure#5343) Adds TypeScript emitter integration coverage for model visibility and clients containing multiple operation groups. ## Changes - Enable both Spector scenario groups. - Add typed integration tests and generated declaration baselines. - Configure visibility-specific request model generation. ## Spector test results ### `Type_Model_Visibility` — `type-model-visibility.test.ts` - ✅ Added: `deleteModel` - ✅ Added: `getModel` - ✅ Added: `headModel` - ✅ Added: `patchModel` - ✅ Added: `postModel` - ✅ Added: `putModel` - ✅ Added: `putReadOnlyModel` ### `Client_Structure` — `client-structure-two-group.test.ts` - ✅ Added: `TwoOperationGroup`  - Fixes Azure#5342 --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: JialinHuang803 <139532647+JialinHuang803@users.noreply.github.com>

## Summary - scope classic operation-group declarations and references to their owning client - use each generated service context directly instead of invalid `Client.<context>` qualification - trim the model namespace prefix shared by all services while preserving service-specific folders - enable the `service/multiple-services` Spector case and add modular coverage for client and model hierarchy ## Validation - `pnpm format` - `pnpm lint` - `pnpm -C packages/typespec-ts run build` - `pnpm -C packages/typespec-ts run unit-test` (666 passed) - `pnpm -C packages/typespec-ts run test-next` (254 passed) - regenerated `service/multiple-services` successfully - `service-multiple-services.test.ts` (4 passed) - existing `service-multi-service.test.ts` (2 passed) --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Bumps [core](https://github.com/microsoft/typespec) from `daea7e2` to `2976f18`. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/typespec/commit/2976f180e6f3f51f89b5a4eb02817da58fa7f945"><code>2976f18</code></a> Report operation parameters as <code>op::parameters</code> in type names (<a href="https://redirect.github.com/microsoft/typespec/issues/11551">#11551</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/22ea5afcedc1b38d13a325af7322feca5307313c"><code>22ea5af</code></a> Support subpath exports in tspd gen-extern-signature (<a href="https://redirect.github.com/microsoft/typespec/issues/11561">#11561</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/bed13e3e055de447517a38d8aba3309206bdf4bc"><code>bed13e3</code></a> Make the C# TypeExpression handle every type kind (<a href="https://redirect.github.com/microsoft/typespec/issues/11596">#11596</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/0efba519e6d077f40d27576ff0b6b927df88457e"><code>0efba51</code></a> Support registry mirrors in tsp install (<a href="https://redirect.github.com/microsoft/typespec/issues/11776">#11776</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/57f06f3dbc80e95ff4f528e8ad049488ae258ac5"><code>57f06f3</code></a> feat(compiler): add experimental $provideTypeInfo provider and program.getTyp...</li> <li><a href="https://github.com/microsoft/typespec/commit/e0f67bdf3c5a0875dfa98b475648af37caac71a6"><code>e0f67bd</code></a> Prevent spec provided names from escaping the emitter output dir (<a href="https://redirect.github.com/microsoft/typespec/issues/11777">#11777</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/ddb3519c8e1bba87b21fa0649f4ef8df9d9b8e52"><code>ddb3519</code></a> Use Alloy for C# keywords and System.Text.Json symbols (<a href="https://redirect.github.com/microsoft/typespec/issues/11599">#11599</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/3fd3099bb105c812cb0c8d1f436dcf9c49b0a007"><code>3fd3099</code></a> Dispatch declaration overrides in Experimental_ComponentOverrides (<a href="https://redirect.github.com/microsoft/typespec/issues/11597">#11597</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/5cea376ef0953833760b8e11013ef8018ed2b134"><code>5cea376</code></a> Fix C# server model filenames (<a href="https://redirect.github.com/microsoft/typespec/issues/11591">#11591</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/61fffeeb46ed8bdc765a3a0e8c73d8acf938037d"><code>61fffee</code></a> Source playground examples from samples (<a href="https://redirect.github.com/microsoft/typespec/issues/11499">#11499</a>)</li> <li>Additional commits viewable in <a href="https://github.com/microsoft/typespec/compare/daea7e29cb73542a8863a34aeef2533d76ec1ec7...2976f180e6f3f51f89b5a4eb02817da58fa7f945">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Co-authored-by: Timothee Guerin <tiguerin@microsoft.com>

…Azure#5243) Bumps the actions group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions) | `0.86.2` | `0.87.9` | | [actions/github-script](https://github.com/actions/github-script) | `7` | `9` | | [github/gh-aw-actions/setup-cli](https://github.com/github/gh-aw-actions) | `0.86.2` | `0.87.9` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [actions/setup-dotnet](https://github.com/actions/setup-dotnet) | `5` | `6` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.37.4` | `4.37.9` | | [github/gh-aw](https://github.com/github/gh-aw) | `0.83.4` | `0.87.7` | | [jdx/mise-action](https://github.com/jdx/mise-action) | `4.2.4` | `4.3.0` | Updates `github/gh-aw-actions/setup` from 0.86.2 to 0.87.9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/gh-aw-actions/releases">github/gh-aw-actions/setup's releases</a>.</em></p> <blockquote> <h2>v0.87.9</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.9</code>.</p> <h2>v0.87.8</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.8</code>.</p> <h2>v0.87.7</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.7</code>.</p> <h2>v0.87.6</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.6</code>.</p> <h2>v0.87.5</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.5</code>.</p> <h2>v0.87.4</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.4</code>.</p> <h2>v0.87.2</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.2</code>.</p> <h2>v0.87.1</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.1</code>.</p> <h2>v0.87.0</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.0</code>.</p> <h2>v0.86.3</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.86.3</code>.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/gh-aw-actions/commit/49dc896ccb7d6d975514cfe232bcbd68cc12e2c1"><code>49dc896</code></a> chore: sync actions from gh-aw@v0.87.9 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/220">#220</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/1aa033c7bf25ac9428fe521065b90c30a7070c4e"><code>1aa033c</code></a> chore: sync actions from gh-aw@v0.87.6 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/219">#219</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/2a78d04403fdc6907d0f05327cffac9dbad5312d"><code>2a78d04</code></a> chore: sync actions from gh-aw@v0.87.5 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/218">#218</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/ea4b911d44a5336c74325a122a5fd9110b45ff06"><code>ea4b911</code></a> chore: sync actions from gh-aw@v0.87.4 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/217">#217</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/b304200a0ef4b3998673bfc7945acb08ab8c88b7"><code>b304200</code></a> chore: sync actions from gh-aw@v0.87.2 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/216">#216</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/423b3dc04bbf1b1797194a4a75aa5cf5d0d4f5b3"><code>423b3dc</code></a> chore: sync actions from gh-aw@v0.87.1 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/215">#215</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/b77e0d501fd2d2243d1f72722617e80d513f674e"><code>b77e0d5</code></a> chore: sync actions from gh-aw@v0.87.0 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/214">#214</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/30aadb1626371455f145991c6385924babda2d04"><code>30aadb1</code></a> chore: sync actions from gh-aw@v0.86.3 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/213">#213</a>)</li> <li>See full diff in <a href="https://github.com/github/gh-aw-actions/compare/6aab9e5b5c91c615506061f09bedd81a23babe3c...49dc896ccb7d6d975514cfe232bcbd68cc12e2c1">compare view</a></li> </ul> </details> <br /> Updates `actions/github-script` from 7 to 9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/github-script/releases">actions/github-script's releases</a>.</em></p> <blockquote> <h2>v9.0.0</h2> <p><strong>New features:</strong></p> <ul> <li><strong><code>getOctokit</code> factory function</strong> — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See <a href="https://github.com/actions/github-script#creating-additional-clients-with-getoctokit">Creating additional clients with <code>getOctokit</code></a> for details and examples.</li> <li><strong>Orchestration ID in user-agent</strong> — The <code>ACTIONS_ORCHESTRATION_ID</code> environment variable is automatically appended to the user-agent string for request tracing.</li> </ul> <p><strong>Breaking changes:</strong></p> <ul> <li><strong><code>require('@actions/github')</code> no longer works in scripts.</strong> The upgrade to <code>@actions/github</code> v9 (ESM-only) means <code>require('@actions/github')</code> will fail at runtime. If you previously used patterns like <code>const { getOctokit } = require('@actions/github')</code> to create secondary clients, use the new injected <code>getOctokit</code> function instead — it's available directly in the script context with no imports needed.</li> <li><code>getOctokit</code> is now an injected function parameter. Scripts that declare <code>const getOctokit = ...</code> or <code>let getOctokit = ...</code> will get a <code>SyntaxError</code> because JavaScript does not allow <code>const</code>/<code>let</code> redeclaration of function parameters. Use the injected <code>getOctokit</code> directly, or use <code>var getOctokit = ...</code> if you need to redeclare it.</li> <li>If your script accesses other <code>@actions/github</code> internals beyond the standard <code>github</code>/<code>octokit</code> client, you may need to update those references for v9 compatibility.</li> </ul> <h2>What's Changed</h2> <ul> <li>Add ACTIONS_ORCHESTRATION_ID to user-agent string by <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/695">actions/github-script#695</a></li> <li>ci: use deployment: false for integration test environments by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/712">actions/github-script#712</a></li> <li>feat!: add getOctokit to script context, upgrade <code>@actions/github</code> v9, <code>@octokit/core</code> v7, and related packages by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/700">actions/github-script#700</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Copilot"><code>@Copilot</code></a> made their first contribution in <a href="https://redirect.github.com/actions/github-script/pull/695">actions/github-script#695</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/github-script/compare/v8.0.0...v9.0.0">https://github.com/actions/github-script/compare/v8.0.0...v9.0.0</a></p> <h2>v8.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update Node.js version support to 24.x by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/637">actions/github-script#637</a></li> <li>README for updating actions/github-script from v7 to v8 by <a href="https://github.com/sneha-krip"><code>@sneha-krip</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/653">actions/github-script#653</a></li> </ul> <h2>⚠️ Minimum Compatible Runner Version</h2> <p><strong>v2.327.1</strong><br /> <a href="https://github.com/actions/runner/releases/tag/v2.327.1">Release Notes</a></p> <p>Make sure your runner is updated to this version or newer to use this release.</p> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> made their first contribution in <a href="https://redirect.github.com/actions/github-script/pull/637">actions/github-script#637</a></li> <li><a href="https://github.com/sneha-krip"><code>@sneha-krip</code></a> made their first contribution in <a href="https://redirect.github.com/actions/github-script/pull/653">actions/github-script#653</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/github-script/compare/v7.1.0...v8.0.0">https://github.com/actions/github-script/compare/v7.1.0...v8.0.0</a></p> <h2>v7.1.0</h2> <h2>What's Changed</h2> <ul> <li>Upgrade husky to v9 by <a href="https://github.com/benelan"><code>@benelan</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/482">actions/github-script#482</a></li> <li>Add workflow file for publishing releases to immutable action package by <a href="https://github.com/Jcambass"><code>@Jcambass</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/485">actions/github-script#485</a></li> <li>Upgrade IA Publish by <a href="https://github.com/Jcambass"><code>@Jcambass</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/486">actions/github-script#486</a></li> <li>Fix workflow status badges by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/497">actions/github-script#497</a></li> <li>Update usage of <code>actions/upload-artifact</code> by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/512">actions/github-script#512</a></li> <li>Clear up package name confusion by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/514">actions/github-script#514</a></li> <li>Update dependencies with <code>npm audit fix</code> by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/515">actions/github-script#515</a></li> <li>Specify that the used script is JavaScript by <a href="https://github.com/timotk"><code>@timotk</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/478">actions/github-script#478</a></li> <li>chore: Add Dependabot for NPM and Actions by <a href="https://github.com/nschonni"><code>@nschonni</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/472">actions/github-script#472</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/github-script/commit/3a2844b7e9c422d3c10d287c895573f7108da1b3"><code>3a2844b</code></a> Merge pull request <a href="https://redirect.github.com/actions/github-script/issues/700">#700</a> from actions/salmanmkc/expose-getoctokit + prepare re...</li> <li><a href="https://github.com/actions/github-script/commit/ca10bbdd1a7739de09e99a200c7a59f5d73a4079"><code>ca10bbd</code></a> fix: use <code>@octokit/core/</code>types import for v7 compatibility</li> <li><a href="https://github.com/actions/github-script/commit/86e48e20ac85c970ed1f96e718fd068173948b7b"><code>86e48e2</code></a> merge: incorporate main branch changes</li> <li><a href="https://github.com/actions/github-script/commit/c1084728b5b935ec4ddc1e4cee877b01797b3ff9"><code>c108472</code></a> chore: rebuild dist for v9 upgrade and getOctokit factory</li> <li><a href="https://github.com/actions/github-script/commit/afff112e4f8b57c718168af75b89ce00bc8d091d"><code>afff112</code></a> Merge pull request <a href="https://redirect.github.com/actions/github-script/issues/712">#712</a> from actions/salmanmkc/deployment-false + fix user-ag...</li> <li><a href="https://github.com/actions/github-script/commit/ff8117e5b78c415f814f39ad6998f424fee7b817"><code>ff8117e</code></a> ci: fix user-agent test to handle orchestration ID</li> <li><a href="https://github.com/actions/github-script/commit/81c6b7876079abe10ff715951c9fc7b3e1ab389d"><code>81c6b78</code></a> ci: use deployment: false to suppress deployment noise from integration tests</li> <li><a href="https://github.com/actions/github-script/commit/3953caf8858d318f37b6cc53a9f5708859b5a7b7"><code>3953caf</code></a> docs: update README examples from <a href="https://github.com/v8"><code>@v8</code></a> to <a href="https://github.com/v9"><code>@v9</code></a>, add getOctokit docs and v9 brea...</li> <li><a href="https://github.com/actions/github-script/commit/c17d55b90dcdb3d554d0027a6c180a7adc2daf78"><code>c17d55b</code></a> ci: add getOctokit integration test job</li> <li><a href="https://github.com/actions/github-script/commit/a047196d9a02fe92098771cafbb98c2f1814e408"><code>a047196</code></a> test: add getOctokit integration tests via callAsyncFunction</li> <li>Additional commits viewable in <a href="https://github.com/actions/github-script/compare/v7...v9">compare view</a></li> </ul> </details> <br /> Updates `github/gh-aw-actions/setup-cli` from 0.86.2 to 0.87.9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/gh-aw-actions/releases">github/gh-aw-actions/setup-cli's releases</a>.</em></p> <blockquote> <h2>v0.87.9</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.9</code>.</p> <h2>v0.87.8</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.8</code>.</p> <h2>v0.87.7</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.7</code>.</p> <h2>v0.87.6</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.6</code>.</p> <h2>v0.87.5</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.5</code>.</p> <h2>v0.87.4</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.4</code>.</p> <h2>v0.87.2</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.2</code>.</p> <h2>v0.87.1</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.1</code>.</p> <h2>v0.87.0</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.87.0</code>.</p> <h2>v0.86.3</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.86.3</code>.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/gh-aw-actions/commit/49dc896ccb7d6d975514cfe232bcbd68cc12e2c1"><code>49dc896</code></a> chore: sync actions from gh-aw@v0.87.9 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/220">#220</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/1aa033c7bf25ac9428fe521065b90c30a7070c4e"><code>1aa033c</code></a> chore: sync actions from gh-aw@v0.87.6 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/219">#219</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/2a78d04403fdc6907d0f05327cffac9dbad5312d"><code>2a78d04</code></a> chore: sync actions from gh-aw@v0.87.5 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/218">#218</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/ea4b911d44a5336c74325a122a5fd9110b45ff06"><code>ea4b911</code></a> chore: sync actions from gh-aw@v0.87.4 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/217">#217</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/b304200a0ef4b3998673bfc7945acb08ab8c88b7"><code>b304200</code></a> chore: sync actions from gh-aw@v0.87.2 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/216">#216</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/423b3dc04bbf1b1797194a4a75aa5cf5d0d4f5b3"><code>423b3dc</code></a> chore: sync actions from gh-aw@v0.87.1 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/215">#215</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/b77e0d501fd2d2243d1f72722617e80d513f674e"><code>b77e0d5</code></a> chore: sync actions from gh-aw@v0.87.0 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/214">#214</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/30aadb1626371455f145991c6385924babda2d04"><code>30aadb1</code></a> chore: sync actions from gh-aw@v0.86.3 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/213">#213</a>)</li> <li>See full diff in <a href="https://github.com/github/gh-aw-actions/compare/6aab9e5b5c91c615506061f09bedd81a23babe3c...49dc896ccb7d6d975514cfe232bcbd68cc12e2c1">compare view</a></li> </ul> </details> <br /> Updates `actions/download-artifact` from 4 to 8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/download-artifact/releases">actions/download-artifact's releases</a>.</em></p> <blockquote> <h2>v8.0.0</h2> <h2>v8 - What's new</h2> <blockquote> <p>[!IMPORTANT] actions/download-artifact@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.</p> </blockquote> <blockquote> <p>[!IMPORTANT] Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).</p> </blockquote> <h3>Direct downloads</h3> <p>To support direct uploads in <code>actions/upload-artifact</code>, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the <code>Content-Type</code> header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new <code>skip-decompress</code> parameter to <code>true</code>.</p> <h3>Enforced checks (breaking)</h3> <p>A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the <code>digest-mismatch</code> parameter. To be secure by default, we are now defaulting the behavior to <code>error</code> which will fail the workflow run.</p> <h3>ESM</h3> <p>To support new versions of the @actions/* packages, we've upgraded the package to ESM.</p> <h2>What's Changed</h2> <ul> <li>Don't attempt to un-zip non-zipped downloads by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/460">actions/download-artifact#460</a></li> <li>Add a setting to specify what to do on hash mismatch and default it to <code>error</code> by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/461">actions/download-artifact#461</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/download-artifact/compare/v7...v8.0.0">https://github.com/actions/download-artifact/compare/v7...v8.0.0</a></p> <h2>v7.0.0</h2> <h2>v7 - What's new</h2> <blockquote> <p>[!IMPORTANT] actions/download-artifact@v7 now runs on Node.js 24 (<code>runs.using: node24</code>) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.</p> </blockquote> <h3>Node.js 24</h3> <p>This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.</p> <h2>What's Changed</h2> <ul> <li>Update GHES guidance to include reference to Node 20 version by <a href="https://github.com/patrikpolyak"><code>@patrikpolyak</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/440">actions/download-artifact#440</a></li> <li>Download Artifact Node24 support by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/415">actions/download-artifact#415</a></li> <li>fix: update <code>@actions/artifact</code> to fix Node.js 24 punycode deprecation by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/451">actions/download-artifact#451</a></li> <li>prepare release v7.0.0 for Node.js 24 support by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/452">actions/download-artifact#452</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/patrikpolyak"><code>@patrikpolyak</code></a> made their first contribution in <a href="https://redirect.github.com/actions/download-artifact/pull/440">actions/download-artifact#440</a></li> <li><a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> made their first contribution in <a href="https://redirect.github.com/actions/download-artifact/pull/415">actions/download-artifact#415</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0">https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0</a></p> <h2>v6.0.0</h2>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/download-artifact/commit/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c"><code>3e5f45b</code></a> Add regression tests for CJK characters (<a href="https://redirect.github.com/actions/download-artifact/issues/471">#471</a>)</li> <li><a href="https://github.com/actions/download-artifact/commit/e6d03f67377d4412c7aa56a8e2e4988e6ec479dd"><code>e6d03f6</code></a> Add a regression test for artifact name + content-type mismatches (<a href="https://redirect.github.com/actions/download-artifact/issues/472">#472</a>)</li> <li><a href="https://github.com/actions/download-artifact/commit/70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3"><code>70fc10c</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/461">#461</a> from actions/danwkennedy/digest-mismatch-behavior</li> <li><a href="https://github.com/actions/download-artifact/commit/f258da9a506b755b84a09a531814700b86ccfc62"><code>f258da9</code></a> Add change docs</li> <li><a href="https://github.com/actions/download-artifact/commit/ccc058e5fbb0bb2352213eaec3491e117cbc4a5c"><code>ccc058e</code></a> Fix linting issues</li> <li><a href="https://github.com/actions/download-artifact/commit/bd7976ba57ecea96e6f3df575eb922d11a12a9fd"><code>bd7976b</code></a> Add a setting to specify what to do on hash mismatch and default it to <code>error</code></li> <li><a href="https://github.com/actions/download-artifact/commit/ac21fcf45e0aaee541c0f7030558bdad38d77d6c"><code>ac21fcf</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/460">#460</a> from actions/danwkennedy/download-no-unzip</li> <li><a href="https://github.com/actions/download-artifact/commit/15999bff51058bc7c19b50ebbba518eaef7c26c0"><code>15999bf</code></a> Add note about package bumps</li> <li><a href="https://github.com/actions/download-artifact/commit/974686ed5098c7f9c9289ec946b9058e496a2561"><code>974686e</code></a> Bump the version to <code>v8</code> and add release notes</li> <li><a href="https://github.com/actions/download-artifact/commit/fbe48b1d2756394be4cd4358ed3bc1343b330e75"><code>fbe48b1</code></a> Update test names to make it clearer what they do</li> <li>Additional commits viewable in <a href="https://github.com/actions/download-artifact/compare/v4...v8">compare view</a></li> </ul> </details> <br /> Updates `actions/upload-artifact` from 4 to 7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>v7 What's new</h2> <h3>Direct Uploads</h3> <p>Adds support for uploading single files directly (unzipped). Callers can set the new <code>archive</code> parameter to <code>false</code> to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The <code>name</code> parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.</p> <h3>ESM</h3> <p>To support new versions of the <code>@actions/*</code> packages, we've upgraded the package to ESM.</p> <h2>What's Changed</h2> <ul> <li>Add proxy integration test by <a href="https://github.com/Link"><code>@Link</code></a>- in <a href="https://redirect.github.com/actions/upload-artifact/pull/754">actions/upload-artifact#754</a></li> <li>Upgrade the module to ESM and bump dependencies by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/762">actions/upload-artifact#762</a></li> <li>Support direct file uploads by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/764">actions/upload-artifact#764</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Link"><code>@Link</code></a>- made their first contribution in <a href="https://redirect.github.com/actions/upload-artifact/pull/754">actions/upload-artifact#754</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v6...v7.0.0">https://github.com/actions/upload-artifact/compare/v6...v7.0.0</a></p> <h2>v6.0.0</h2> <h2>v6 - What's new</h2> <blockquote> <p>[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (<code>runs.using: node24</code>) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.</p> </blockquote> <h3>Node.js 24</h3> <p>This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.</p> <h2>What's Changed</h2> <ul> <li>Upload Artifact Node 24 support by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/719">actions/upload-artifact#719</a></li> <li>fix: update <code>@actions/artifact</code> for Node.js 24 punycode deprecation by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/744">actions/upload-artifact#744</a></li> <li>prepare release v6.0.0 for Node.js 24 support by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/745">actions/upload-artifact#745</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0">https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0</a></p> <h2>v5.0.0</h2> <h2>What's Changed</h2> <p><strong>BREAKING CHANGE:</strong> this update supports Node <code>v24.x</code>. This is not a breaking change per-se but we're treating it as such.</p> <ul> <li>Update README.md by <a href="https://github.com/GhadimiR"><code>@GhadimiR</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/681">actions/upload-artifact#681</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/712">actions/upload-artifact#712</a></li> <li>Readme: spell out the first use of GHES by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/727">actions/upload-artifact#727</a></li> <li>Update GHES guidance to include reference to Node 20 version by <a href="https://github.com/patrikpolyak"><code>@patrikpolyak</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/725">actions/upload-artifact#725</a></li> <li>Bump <code>@actions/artifact</code> to <code>v4.0.0</code></li> <li>Prepare <code>v5.0.0</code> by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/734">actions/upload-artifact#734</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/upload-artifact/commit/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"><code>043fb46</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/797">#797</a> from actions/yacaovsnc/update-dependency</li> <li><a href="https://github.com/actions/upload-artifact/commit/634250c1388765ea7ed0f053e636f1f399000b94"><code>634250c</code></a> Include changes in typespec/ts-http-runtime 0.3.5</li> <li><a href="https://github.com/actions/upload-artifact/commit/e454baaac2be505c9450e11b8f3215c6fc023ce8"><code>e454baa</code></a> Readme: bump all the example versions to v7 (<a href="https://redirect.github.com/actions/upload-artifact/issues/796">#796</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/74fad66b98a6d799dc004d3353ccd0e6f6b2530e"><code>74fad66</code></a> Update the readme with direct upload details (<a href="https://redirect.github.com/actions/upload-artifact/issues/795">#795</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f"><code>bbbca2d</code></a> Support direct file uploads (<a href="https://redirect.github.com/actions/upload-artifact/issues/764">#764</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/589182c5a4cec8920b8c1bce3e2fab1c97a02296"><code>589182c</code></a> Upgrade the module to ESM and bump dependencies (<a href="https://redirect.github.com/actions/upload-artifact/issues/762">#762</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/47309c993abb98030a35d55ef7ff34b7fa1074b5"><code>47309c9</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/754">#754</a> from actions/Link-/add-proxy-integration-tests</li> <li><a href="https://github.com/actions/upload-artifact/commit/02a8460834e70dab0ce194c64360c59dc1475ef0"><code>02a8460</code></a> Add proxy integration test</li> <li><a href="https://github.com/actions/upload-artifact/commit/b7c566a772e6b6bfb58ed0dc250532a479d7789f"><code>b7c566a</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/745">#745</a> from actions/upload-artifact-v6-release</li> <li><a href="https://github.com/actions/upload-artifact/commit/e516bc8500aaf3d07d591fcd4ae6ab5f9c391d5b"><code>e516bc8</code></a> docs: correct description of Node.js 24 support in README</li> <li>Additional commits viewable in <a href="https://github.com/actions/upload-artifact/compare/v4...v7">compare view</a></li> </ul> </details> <br /> Updates `actions/setup-dotnet` from 5 to 6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-dotnet/releases">actions/setup-dotnet's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <h2>What's Changed</h2> <ul> <li>Migrate to ESM and upgrade dependencies by <a href="https://github.com/priyagupta108"><code>@priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/752">actions/setup-dotnet#752</a></li> <li>Bump actions/checkout from 6.0.3 to 7.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-dotnet/pull/751">actions/setup-dotnet#751</a></li> <li>chore(deps): bump <code>@actions/cache</code> to 6.2.0 by <a href="https://github.com/philip-gai"><code>@philip-gai</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/756">actions/setup-dotnet#756</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/philip-gai"><code>@philip-gai</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-dotnet/pull/756">actions/setup-dotnet#756</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-dotnet/compare/v5...v6.0.0">https://github.com/actions/setup-dotnet/compare/v5...v6.0.0</a></p> <h2>v5.4.0</h2> <h2>What's Changed</h2> <h3>Enhancements</h3> <ul> <li>Pin actions to commit SHAs in workflows by <a href="https://github.com/priya-kinthali"><code>@priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/744">actions/setup-dotnet#744</a></li> <li>Expand the CSC problem matcher to light up more errors on GitHub. by <a href="https://github.com/StephenCleary"><code>@StephenCleary</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/717">actions/setup-dotnet#717</a></li> <li>Improve global.json SDK version validation for rollForward by <a href="https://github.com/priyagupta108"><code>@priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/742">actions/setup-dotnet#742</a></li> </ul> <blockquote> <p>The action now validates the <code>sdk.version</code> field in <code>global.json</code> when <code>rollForward</code> is specified. The version must be a fully-qualified SDK version (e.g., <code>8.0.100</code>, <code>10.0.100</code>). Wildcard versions (e.g., <code>10.0.*</code>) and runtime-style versions (e.g., <code>8.0.0</code>) will now fail. See the <a href="https://learn.microsoft.com/en-us/dotnet/core/tools/global-json#version">.NET SDK version specification</a> for details.</p> </blockquote> <h3>Documentation</h3> <ul> <li>Docs(action): Explicitly mark all optional inputs with required: false by <a href="https://github.com/kranthipoturaju"><code>@kranthipoturaju</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/737">actions/setup-dotnet#737</a></li> </ul> <h3>Bug Fixes</h3> <ul> <li>Fix global.json creation command by <a href="https://github.com/michal2612"><code>@michal2612</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/694">actions/setup-dotnet#694</a></li> </ul> <h3>Dependency Updates</h3> <ul> <li>Upgrade <code>@actions/cache</code> to 5.1.0, log cache write denied by <a href="https://github.com/jasongin"><code>@jasongin</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/746">actions/setup-dotnet#746</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jasongin"><code>@jasongin</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-dotnet/pull/746">actions/setup-dotnet#746</a></li> <li><a href="https://github.com/michal2612"><code>@michal2612</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-dotnet/pull/694">actions/setup-dotnet#694</a></li> <li><a href="https://github.com/kranthipoturaju"><code>@kranthipoturaju</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-dotnet/pull/737">actions/setup-dotnet#737</a></li> <li><a href="https://github.com/StephenCleary"><code>@StephenCleary</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-dotnet/pull/717">actions/setup-dotnet#717</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-dotnet/compare/v5.3.0...v5.4.0">https://github.com/actions/setup-dotnet/compare/v5.3.0...v5.4.0</a></p> <h2>v5.3.0</h2> <h2>What's Changed</h2> <h3>Enhancements</h3> <ul> <li>Add dotnet-version: latest support with dotnet-channel input by <a href="https://github.com/mahabaleshwars"><code>@mahabaleshwars</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/730">actions/setup-dotnet#730</a></li> <li>Support global.json's rollForward latest* variants by <a href="https://github.com/js6pak"><code>@js6pak</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/538">actions/setup-dotnet#538</a></li> <li>Improve version resolution by <a href="https://github.com/akoeplinger"><code>@akoeplinger</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/560">actions/setup-dotnet#560</a></li> </ul> <h3>Dependency Updates</h3>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-dotnet/commit/a98b56852c35b8e3190ac28c8c2271da59106c68"><code>a98b568</code></a> chore(deps): bump <code>@actions/cache</code> to 6.2.0 (<a href="https://redirect.github.com/actions/setup-dotnet/issues/756">#756</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/afb2931642fd907238eb71bce2da0dcc910b3553"><code>afb2931</code></a> Bump actions/checkout from 6.0.3 to 7.0.0 (<a href="https://redirect.github.com/actions/setup-dotnet/issues/751">#751</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/6df8cefd1440cf9313e76b8fdb8aaf90cfa745a3"><code>6df8cef</code></a> Migrate to ESM and upgrade dependencies (<a href="https://redirect.github.com/actions/setup-dotnet/issues/752">#752</a>)</li> <li>See full diff in <a href="https://github.com/actions/setup-dotnet/compare/v5...v6">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action` from 4.37.4 to 4.37.9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v4.37.9</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>v4.37.8</h2> <p>No user facing changes.</p> <h2>v4.37.7</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>v4.37.6</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <h2>v4.37.5</h2> <ul> <li>Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the <code>init</code> Action instead of falling back to downloading the bundle before extracting it. <a href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <h2>4.37.5 - 03 Aug 2026</h2> <ul> <li>Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the <code>init</code> Action instead of falling back to downloading the bundle before extracting it. <a href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/cdf488f595d80d6e07e03d4674febd5ab45fa938"><code>cdf488f</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4107">#4107</a> from github/update-v4.37.9-920ba7cd1</li> <li><a href="https://github.com/github/codeql-action/commit/7243f38558d187dde99730d224bb47aa26a95306"><code>7243f38</code></a> Update changelog for v4.37.9</li> <li><a href="https://github.com/github/codeql-action/commit/920ba7cd1596037e042122c00381eb16b397d68e"><code>920ba7c</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4106">#4106</a> from github/update-bundle/codeql-bundle-v2.26.4</li> <li><a href="https://github.com/github/codeql-action/commit/ecfa6e16817b8f490bc9a59baa391baf4fa3e3c2"><code>ecfa6e1</code></a> Add changelog note</li> <li><a href="https://github.com/github/codeql-action/commit/adcdf4a70d247343cf9c29e0f7a6658b51c3a2b1"><code>adcdf4a</code></a> Update default bundle to codeql-bundle-v2.26.4</li> <li><a href="https://github.com/github/codeql-action/commit/486fec2a3ea2626afcd8c7e9208b4f515078dd7e"><code>486fec2</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4099">#4099</a> from github/update-supported-enterprise-server-versions</li> <li><a href="https://github.com/github/codeql-action/commit/134624c67b20869c2aaa36dafa726375b78a5d76"><code>134624c</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4101">#4101</a> from github/dependabot/npm_and_yarn/npm-minor-457d82...</li> <li><a href="https://github.com/github/codeql-action/commit/ff43db8f982a368288f117354fb8d046e937124c"><code>ff43db8</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4103">#4103</a> from github/mergeback/v4.37.8-to-main-db488dde</li> <li><a href="https://github.com/github/codeql-action/commit/4605e03a74cf891614c4d76f82384a16c1c11816"><code>4605e03</code></a> Rebuild</li> <li><a href="https://github.com/github/codeql-action/commit/099c869cad6bf3b88657154d4ae47ffed27e632d"><code>099c869</code></a> Update changelog and version after v4.37.8</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/v4.37.4...v4.37.9">compare view</a></li> </ul> </details> <br /> Updates `github/gh-aw` from 0.83.4 to 0.87.7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/gh-aw/releases">github/gh-aw's releases</a>.</em></p> <blockquote> <h2>v0.87.5</h2> <h2>🌟 Release Highlights</h2> <p>This release delivers <strong>226 merged pull requests</strong> focused on hardening the compiler, expanding safe-output tooling, and strengthening the automated linting and grading systems that keep gh-aw's self-maintaining workflows healthy.</p> <h3>✨ What's New</h3> <ul> <li><strong><code>gh aw models</code></strong> adds a catalog command for pricing, alias resolution, and observed automation models (<a href="https://redirect.github.com/github/gh-aw/issues/55148">#55148</a>).</li> <li><strong>Experimental schema-aware <code>gh aw edit</code></strong> enables structured, validated editing of workflow frontmatter (<a href="https://redirect.github.com/github/gh-aw/issues/55475">#55475</a>).</li> <li><strong>PR steering</strong> is now available for compatible <code>create-pull-request</code> workflows, replacing the legacy pre-create flow (<a href="https://redirect.github.com/github/gh-aw/issues/55171">#55171</a>, <a href="https://redirect.github.com/github/gh-aw/issues/55249">#55249</a>, <a href="https://redirect.github.com/github/gh-aw/issues/55285">#55285</a>, <a href="https://redirect.github.com/github/gh-aw/issues/55250">#55250</a>).</li> <li><strong><code>daily-storify</code></strong> workflow adds episode-based daily narrative analysis (<a href="https://redirect.github.com/github/gh-aw/issues/55248">#55248</a>), and a new <strong>daily harness experiment proposer</strong> automates experiment ideation (<a href="https://redirect.github.com/github/gh-aw/issues/55120">#55120</a>).</li> <li>Generated footers now render the <strong>agentic engine</strong> used and improved spacing/consistency (<a href="https://redirect.github.com/github/gh-aw/issues/55192">#55192</a>, <a href="https://redirect.github.com/github/gh-aw/issues/55372">#55372</a>).</li> <li>Added <strong>secret-scanning-alerts</strong> permission scope and <strong>attestations</strong>/<strong>models</strong> permission documentation (<a href="https://redirect.github.com/github/gh-aw/issues/54904">#54904</a>, <a href="https://redirect.github.com/github/gh-aw/issues/54856">#54856</a>).</li> <li>New <strong>drive-backed workflow memory</strong> support for persistent state across runs (<a href="https://redirect.github.com/github/gh-aw/issues/54662">#54662</a>, <a href="https://redirect.github.com/github/gh-aw/issues/54892">#54892</a>).</li> </ul> <h3>🐛 Bug Fixes & Improvements</h3> <ul> <li>Fixed Codex credential check crashes and 401 errors by disabling WebSocket transport (<a href="https://redirect.github.com/github/gh-aw/issues/55106">#55106</a>, <a href="https://redirect.github.com/github/gh-aw/issues/55089">#55089</a>).</li> <li>Hardened Cloud Hypervisor sandboxing: fixed Copilot SDK crashes and cache-memory write failures (<a href="https://redirect.github.com/github/gh-aw/issues/55495">#55495</a>, <a href="https://redirect.github.com/github/gh-aw/issues/55427">#55427</a>).</li> <li>Corrected conclusion job permission derivation and skip-dominated workflow health metrics (<a href="https://redirect.github.com/github/gh-aw/issues/55529">#55529</a>, <a href="https://redirect.github.com/github/gh-aw/issues/54729">#54729</a>).</li> <li>Fixed <code>github-discussion-query</code> payload scaling to avoid jq argument growth (<a href="https://redirect.github.com/github/gh-aw/issues/55560">#55560</a>).</li> <li>Improved MCP CLI wrapper script permissions (0o700 instead of 0o755) for tighter security (<a href="https://redirect.github.com/github/gh-aw/issues/55587">#55587</a>).</li> <li>Numerous CodeQL and static-analysis findings addressed, including allocation-size guards and actionlint fixes (<a href="https://redirect.github.com/github/gh-aw/issues/55480">#55480</a>, <a href="https://redirect.github.com/github/gh-aw/issues/55011">#55011</a>).</li> </ul> <h3>🔧 Internal & Quality</h3> <ul> <li>Continued rollout of <strong>custom linters</strong> (eslint-factory rules, Go analyzers) catching duplicate scene IDs, unsafe string fallbacks, path-join misuse, and more across the codebase.</li> <li>Large-scale <strong>test parallelization</strong> effort (<code>t.Parallel()</code>) applied across dozens of Go test files to speed up CI.</li> <li>Ongoing refactors split oversized files (<code>awf_config.go</code>, <code>progress.go</code>, safe-output handler registries) into focused modules for maintainability.</li> <li>Migrated dozens of internal agentic workflows to sandboxed/codex engine runtimes for improved isolation.</li> </ul> <h3>📚 Documentation</h3> <ul> <li>Unbloated and refreshed docs for custom agents, GitHub tools reference, glossary, and frontmatter conventions.</li> <li>Clarified quick-start install instructions and cache-memory retention semantics.</li> </ul> <p>No community-labeled issues were closed in this release window.</p> <blockquote> <p>Generated by <a href="https://github.com/github/gh-aw/actions/runs/32810225851">🚀 Release</a> · copilot · auto · 28.1 AIC · ⊞ 11.8K</p> </blockquote>  <hr /> <h2>What's Changed</h2> <ul> <li>[test-parallel] Add t.Parallel() to TestExtractGitHubToolsets by <a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/54723">github/gh-aw#54723</a></li> <li>Fix skip-dominated workflow health metrics by <a href="https://github.com/pelikhan"><code>@pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/54729">github/gh-aw#54729</a></li> <li>Normalize mixed-type workflow run IDs by <a href="https://github.com/pelikhan"><code>@pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/54731">github/gh-aw#54731</a></li> <li>Add accessible name to docs home logo link by <a href="https://github.com/pelikhan"><code>@pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/54748">github/gh-aw#54748</a></li> <li>Fix sync exec timeout detection for defaulted option spreads by <a href="https://github.com/pelikhan"><code>@pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/54749">github/gh-aw#54749</a></li> <li>lenstringzero: report the actual expression in diagnostic messages by <a href="https://github.com/pelikhan"><code>@pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/54721">github/gh-aw#54721</a></li> <li>Make error-message lint advisory by <a href="https://github.com/pelikhan"><code>@pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/54800">github/gh-aw#54800</a></li> <li>Rename panic-in-library-code internals for intent-driven discoverability by <a href="https://github.com/pelikhan"><code>@pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/54795">github/gh-aw#54795</a></li> <li>Fix impacted test selection under shallow (fetch-depth 1) checkouts by <a href="https://github.com/pelikhan"><code>@pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/54793">github/gh-aw#54793</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/gh-aw/commit/d7426cced84ccaedbcd1fa17aaf421d87513d74c"><code>d7426cc</code></a> Merge branch 'main' of <a href="https://github.com/github/gh-aw">https://github.com/github/gh-aw</a></li> <li><a href="https://github.com/github/gh-aw/commit/800a37a0113111ebe0936b543ef463557761d93a"><code>800a37a</code></a> update gallery</li> <li><a href="https://github.com/github/gh-aw/commit/3360378e7e2a1e131519f6a0ea270444913b7f4b"><code>3360378</code></a> update gallery</li> <li><a href="https://github.com/github/gh-aw/commit/37f5904075e44f03ae93bc058c0afb4a22379c37"><code>37f5904</code></a> Add daily grader audit workflow (<a href="https://redirect.github.com/github/gh-aw/issues/56359">#56359</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/d78321a528cdce6dccb2e4706d75f9a465fa035e"><code>d78321a</code></a> Fix user-rate-limit alias schema and event fallback (<a href="https://redirect.github.com/github/gh-aw/issues/56328">#56328</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/51e341516c88dd4f5c2241958ac8d3229ff80149"><code>51e3415</code></a> Clarify prerelease upgrade guidance (<a href="https://redirect.github.com/github/gh-aw/issues/56351">#56351</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/9807018fc12bd1e8ba920fe8c9423a6941901193"><code>9807018</code></a> Include grader evaluator scripts in workflow packages (<a href="https://redirect.github.com/github/gh-aw/issues/56268">#56268</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/fcf78d2c218925b1f7a72825a3a8490beaa1d1f1"><code>fcf78d2</code></a> Always configure OTLP from enterprise default variables and secrets (<a href="https://redirect.github.com/github/gh-aw/issues/56353">#56353</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/569a4d6dcf31b1a00e201f334591207dafec843c"><code>569a4d6</code></a> update docs</li> <li><a href="https://github.com/github/gh-aw/commit/1f0ec3a5e12484630807971ba4f89648d14ff747"><code>1f0ec3a</code></a> update docs</li> <li>Additional commits viewable in <a href="https://github.com/github/gh-aw/compare/v0.83.4...v0.87.7">compare view</a></li> </ul> </details> <br /> Updates `jdx/mise-action` from 4.2.4 to 4.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jdx/mise-action/releases">jdx/mise-action's releases</a>.</em></p> <blockquote> <h2>v4.3.0: Install age-filtered mise releases</h2> <p>A small release that adds an opt-in way to hold back from installing brand-new mise releases.</p> <h2>Added</h2> <h3><code>minimum_release_age</code> input (<a href="https://redirect.github.com/jdx/mise-action/pull/604">#604</a> by <a href="https://github.com/jdx"><code>@jdx</code></a>)</h3> <p>When <code>version</code> is omitted, you can now set <code>minimum_release_age</code> to install the newest <strong>stable, non-draft</strong> mise release that is older than a given cutoff — a simple way to avoid picking up a mise release the moment it ships (closes <a href="https://redirect.github.com/jdx/mise-action/issues/603">#603</a>).</p> <pre lang="yaml"><code>- uses: jdx/mise-action@v4 with: minimum_release_age: 7d </code></pre> <p>It accepts relative durations (<code>24h</code>, <code>7d</code>, <code>6mo</code>, <code>1y</code>) as well as absolute ISO dates and timestamps. Age-filtered versions are resolved from the GitHub Releases API (the CDN only serves the latest binary) and downloaded by their exact version. If mise is already present on disk, an age-filtered run updates it to the resolved version rather than keeping the existing binary. An explicit <code>version</code> always takes precedence over <code>minimum_release_age</code>, and invalid dates fail fast.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/jdx/mise-action/compare/v4.2.5...v4.3.0">https://github.com/jdx/mise-action/compare/v4.2.5...v4.3.0</a></p> <h2>v4.2.5: Resilient mise downloads with automatic retries</h2> <p>A small patch release that makes setup more resilient to transient network failures when downloading mise.</p> <h2>Fixed</h2> <h3>Retry mise downloads after transient failures (<a href="https://redirect.github.com/jdx/mise-action/pull/597">#597</a> by <a href="https://github.com/jdx"><code>@jdx</code></a>)</h3> <p>The download helpers previously made a single <code>curl</code> or <code>wget</code> attempt, so a transient GitHub release-asset HTTP or TLS failure would abort setup before mise or any user command could run (see <a href="https://redirect.github.com/jdx/mise-action/issues/596">#596</a>).</p> <p>Downloads now run through a retry wrapper that makes up to five attempts with a 2s pause between failures, logging a warning on each retry. This applies consistently to binary, checksum, signature, and version fetches. Checksum and minisign verification still run only after a successful download — never inside the retry loop — so integrity guarantees are unchanged.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/jdx/mise-action/compare/v4.2.4...v4.2.5">https://github.com/jdx/mise-action/compare/v4.2.4...v4.2.5</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jdx/mise-action/blob/main/CHANGELOG.md">jdx/mise-action's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <hr /> <h2><a href="https://github.com/jdx/mise-action/compare/v4.2.5..v4.3.0">4.3.0</a> - 2026-08-24</h2> <h3>🚀 Features</h3> <ul> <li>add minimum release age for mise (<a href="https://redirect.github.com/jdx/mise-action/issues/604">#604</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/604">#604</a></li> </ul> <hr /> <h2><a href="https://github.com/jdx/mise-action/compare/v4.2.4..v4.2.5">4.2.5</a> - 2026-08-13</h2> <h3>🐛 Bug Fixes</h3> <ul> <li>retry mise downloads after transient failures (<a href="https://redirect.github.com/jdx/mise-action/issues/597">#597</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/597">#597</a></li> </ul> <hr /> <h2><a href="https://github.com/jdx/mise-action/compare/v4.2.3..v4.2.4">4.2.4</a> - 2026-08-01</h2> <h3>🐛 Bug Fixes</h3> <ul> <li>locking support detection with force-colored output (<a href="https://redirect.github.com/jdx/mise-action/issues/580">#580</a>) by <a href="https://github.com/scop"><code>@scop</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/580">#580</a></li> </ul> <hr /> <h2><a href="https://github.com/jdx/mise-action/compare/v4.2.2..v4.2.3">4.2.3</a> - 2026-07-24</h2> <h3>🐛 Bug Fixes</h3> <ul> <li>export mise path entries to subsequent steps (<a href="https://redirect.github.com/jdx/mise-action/issues/575">#575</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/575">#575</a></li> </ul> <hr /> <h2><a href="https://github.com/jdx/mise-action/compare/v4.2.1..v4.2.2">4.2.2</a> - 2026-07-24</h2> <h3>🐛 Bug Fixes</h3> <ul> <li><strong>(release-plz)</strong> exit when git-cliff produces no version bump (<a href="https://redirect.github.com/jdx/mise-action/issues/566">#566</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/566">#566</a></li> <li>ensure <code>tar</code> supports Zstd (<a href="https://redirect.github.com/jdx/mise-action/issues/569">#569</a>) by <a href="https://github.com/JackMyers001"><code>@JackMyers001</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/569">#569</a></li> </ul> <h3>📚 Documentation</h3> <ul> <li>update default value of <code>cache_key_prefix</code> (<a href="https://redirect.github.com/jdx/mise-action/issues/570">#570</a>) by <a href="https://github.com/muzimuzhi"><code>@muzimuzhi</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/570">#570</a></li> </ul> <h3>New Contributors</h3> <ul> <li><a href="https://github.com/muzimuzhi"><code>@muzimuzhi</code></a> made their first contribution in <a href="https://redirect.github.com/jdx/mise-action/pull/570">#570</a></li> <li><a href="https://github.com/JackMyers001"><code>@JackMyers001</code></a> made their first contribution in <a href="https://redirect.github.com/jdx/mise-action/pull/569">#569</a></li> </ul> <hr /> <h2><a href="https://github.com/jdx/mise-action/compare/v4.2.0..v4.2.1">4.2.1</a> - 2026-07-16</h2>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jdx/mise-action/commit/c2a87611a18de5b3828c5652fe268e992400cb5c"><code>c2a8761</code></a> chore: release v4.3.0 (<a href="https://redirect.github.com/jdx/mise-action/issues/605">#605</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/bfedd878951adf8de070696318bd4b9c2f106ee9"><code>bfedd87</code></a> feat: add minimum release age for mise (<a href="https://redirect.github.com/jdx/mise-action/issues/604">#604</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/d62ef600908822fe6a098b9e8116b46930205c52"><code>d62ef60</code></a> chore(deps): update jdx/renovate-config digest to 75abd12 (<a href="https://redirect.github.com/jdx/mise-action/issues/601">#601</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/42937cef355ec70769b6851bc9b566a06a60471a"><code>42937ce</code></a> chore(deps): lock file maintenance (<a href="https://redirect.github.com/jdx/mise-action/issues/599">#599</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518"><code>3c2e0cf</code></a> chore: release v4.2.5 (<a href="https://redirect.github.com/jdx/mise-action/issues/598">#598</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/9dda3952d607125725deac9ec10a5f0e245d266b"><code>9dda395</code></a> fix: retry mise downloads after transient failures (<a href="https://redirect.github.com/jdx/mise-action/issues/597">#597</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/9d2b3112374f613543eb1ba717ada58f1b83bbec"><code>9d2b311</code></a> chore(deps): update github/codeql-action action to v4.37.6 (<a href="https://redirect.github.com/jdx/mise-action/issues/593">#593</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/4213fbba8c81548f6aa95cc448267135e0f9bf81"><code>4213fbb</code></a> chore(deps): update jdx/mise-action action to v4.2.4 (<a href="https://redirect.github.com/jdx/mise-action/issues/594">#594</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/672dbd2c977768efa8a09c7b5aa0c325334016ef"><code>672dbd2</code></a> chore(deps): update zizmorcore/zizmor-action action to v0.6.2 (<a href="https://redirect.github.com/jdx/mise-action/issues/595">#595</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/5159765e490c25a07dea3e55ecc7b1fb6e4fea9b"><code>5159765</code></a> chore(deps): lock file maintenance (<a href="https://redirect.github.com/jdx/mise-action/issues/592">#592</a>)</li> <li>Additional commits viewable in <a href="https://github.com/jdx/mise-action/compare/7e36c90d9ab29c415a2384db3006f3ec8a8cc654...c2a87611a18de5b3828c5652fe268e992400cb5c">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [core](https://github.com/microsoft/typespec) from `2976f18` to `0bd0c17`. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/typespec/commit/0bd0c174228cf559ec7d4c9edec904294b59b9bc"><code>0bd0c17</code></a> fix(compiler): fix stack overflow when checking assignability of recursive ty...</li> <li><a href="https://github.com/microsoft/typespec/commit/075a4c3d85096702d499b363aa14cadd0837b531"><code>075a4c3</code></a> build(deps): bump the actions group across 1 directory with 5 updates (<a href="https://redirect.github.com/microsoft/typespec/issues/11789">#11789</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/5b9cd21d291531c93047152d8d85f040996c7c0b"><code>5b9cd21</code></a> [http-client-java] Continue after constant response headers (<a href="https://redirect.github.com/microsoft/typespec/issues/11793">#11793</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/27299b9d0f2ef7269a549fcd71cd4e254bbbf3a8"><code>27299b9</code></a> [http-client-csharp] Preserve shipped date-time property names (<a href="https://redirect.github.com/microsoft/typespec/issues/11773">#11773</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/f6897a643b70c2a0e81bd05fae6da2bcdbe97ba8"><code>f6897a6</code></a> Pin GitHub Actions to full-length commit SHAs (<a href="https://redirect.github.com/microsoft/typespec/issues/11786">#11786</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/eea10160efecdde01e2987f58e29c7d994646e7b"><code>eea1016</code></a> Remove build artifacts from several packages (<a href="https://redirect.github.com/microsoft/typespec/issues/11590">#11590</a>)</li> <li><a href="https://github.com/microsoft/typespec/commit/c64a8909b3a7f973b0cf9873eea3a65e202a1dd7"><code>c64a890</code></a> Honor exact C# names over back-compat naming (<a href="https://redirect.github.com/microsoft/typespec/issues/11663">#11663</a>)</li> <li>See full diff in <a href="https://github.com/microsoft/typespec/compare/2976f180e6f3f51f89b5a4eb02817da58fa7f945...0bd0c174228cf559ec7d4c9edec904294b59b9bc">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Update core-commit.json to a newer core (microsoft/typespec) commit that includes the fix for Javadoc corruption from literal */ in parameter descriptions (microsoft/typespec#11766), which was causing Java compile failures in the Regen & Spector Tests CI job. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: b371c61c-78d6-403f-a7bd-7a607faf82b5

iscai-msft · 2026-08-31T18:46:40Z

Recreating against Azure/typespec-azure (upstream) instead.

github-actions · 2026-08-31T18:49:14Z

❌ There is undocummented changes. Run chronus add to add a changeset or click here.

The following packages have changes but are not documented.

❌@azure-tools/typespec-autorest
❌@azure-tools/typespec-azure-core
❌@azure-tools/typespec-azure-portal-core
❌@azure-tools/typespec-azure-rulesets
❌@azure-tools/typespec-go
❌@azure-tools/typespec-metadata

The following packages have already been documented:

✅ @azure-tools/azure-http-specs
✅ @azure-tools/typespec-azure-resource-manager
✅ @azure-tools/typespec-client-generator-core
✅ @azure-tools/typespec-java
✅ @azure-tools/typespec-python
✅ @azure-tools/typespec-ts

Show changes

`@azure-tools/typespec-ts` - internal ✏️

Add Spector coverage for JSON merge patch payloads, status code ranges, authentication unions, nested body roots, client API versions, ARM management and service group scopes, and remaining duration, query, route, inheritance, pageable, common property, operation template, and resource scenarios.

`@azure-tools/typespec-client-generator-core` - feature ✏️

@clientOption's value can now reference a TypeSpec model, in addition to string, boolean, and number literal values. The referenced model (including customizations such as @alternateType) is preserved and resolved so scoped emitters can access it via getClientOptions.

`@azure-tools/typespec-java` - dependencies ✏️

Bump the pinned http-client-java core commit in core-commit.json to pick up the fix for Javadoc corruption from literal */ in parameter descriptions.

`@azure-tools/typespec-ts` - internal ✏️

Add Spector coverage for model visibility and two operation groups

`@azure-tools/azure-http-specs` - internal ✏️

Change override impl.

`@azure-tools/typespec-java` - internal ✏️

Re-enable the ARM resource identifier emitter test.

`@azure-tools/typespec-ts` - internal ✏️

Enable Spector coverage for client operation groups and renamed operations.

`@azure-tools/azure-http-specs` - fix ✏️

Add the missing nextLink decorator to the ARM operation template paging scenario.

`@azure-tools/typespec-azure-resource-manager` - fix ✏️

Fix resolveArmResources resource identity detection to seed resources from strict ARM resource instance paths instead of inferring resource IDs from list or action operation paths.

`@azure-tools/typespec-client-generator-core` - fix ✏️

Use an optional string with an application/octet-stream client default for file uploads without an explicit content type.

`@azure-tools/typespec-ts` - fix ✏️

Fix generated operation groups and model namespace paths when a package contains multiple services.

`@azure-tools/azure-http-specs` - internal ✏️

Enable the parameterized next link paging scenario for the Go emitter.

`@azure-tools/typespec-python` - internal ✏️

Update Black to 26.3.1 to avoid security risk

`@azure-tools/azure-http-specs` - internal ✏️

Scope @convenientAPI and @protocolAPI decorators to "java" or "csharp" to comply with the new decorator-requires-scope validation.

`@azure-tools/typespec-java` - internal ✏️

Scope @convenientAPI and @protocolAPI decorators to "java" or "csharp" to comply with the new decorator-requires-scope validation.

`@azure-tools/typespec-python` - fix ✏️

Ship the install/prepare setup scripts as native ESM .js instead of raw .ts so the emitter runs correctly when installed as a dependency. Node.js refuses to type-strip .ts files under node_modules (ERR_UNSUPPORTED_NODE_MODULES_TYPE_STRIPPING), which broke consumers of 0.63.4+.

`@azure-tools/typespec-python` - internal ✏️

Skip the streaming/sse Spector spec until the duplicate Info model name across namespaces is resolved.

`@azure-tools/typespec-python` - internal ✏️

Synchronize Python emitter dependencies, regeneration helpers, and ARM mock API tests with upstream TypeSpec changes.

`@azure-tools/typespec-ts` - feature ✏️

Add an experimental option to generate visibility-specific request models that exclude lifecycle-invisible properties while preserving HTTP metadata properties in the client model.

github-actions · 2026-08-31T18:56:11Z

📦 Package size report

5 packages changed size, +16.79 KB (+0.1%) packed overall.

Package	Packed (base → head)	Δ Packed	Unpacked (base → head)	Δ Unpacked
`@azure-tools/typespec-go`	251.13 KB → 260.21 KB	+9.08 KB (+3.6%) 🔴	1.28 MB → 1.33 MB	+52.29 KB (+4.0%) 🔴
`@azure-tools/typespec-ts`	531.89 KB → 536.71 KB	+4.82 KB (+0.9%) 🔴	2.56 MB → 2.58 MB	+20.24 KB (+0.8%) 🔴
`@azure-tools/typespec-python`	46.22 KB → 42.22 KB	-4.00 KB (-8.7%) 🟢	180.83 KB → 164.91 KB	-15.92 KB (-8.8%) 🟢
`@azure-tools/typespec-client-generator-core`	226.81 KB → 229.48 KB	+2.66 KB (+1.2%) 🔴	1.22 MB → 1.23 MB	+8.92 KB (+0.7%) 🔴
`@azure-tools/typespec-azure-resource-manager`	171.29 KB → 171.92 KB	+649 B (+0.4%)	1.04 MB → 1.04 MB	+7.63 KB (+0.7%) 🔴

8 package(s) with no notable change

Package	Packed (base → head)	Δ Packed	Unpacked (base → head)	Δ Unpacked
`@azure-tools/typespec-java`	13.51 MB → 13.51 MB	+3.10 KB (+0.0%)	15.03 MB → 15.03 MB	+4.85 KB (+0.0%)
`@azure-tools/azure-http-specs`	146.21 KB → 146.71 KB	+510 B (+0.3%)	1.16 MB → 1.16 MB	+1.60 KB (+0.1%)
`@azure-tools/typespec-azure-core`	130.23 KB → 130.22 KB	-6 B (-0.0%)	706.74 KB → 706.76 KB	+18 B (+0.0%)
`@azure-tools/typespec-azure-portal-core`	42.40 KB → 42.40 KB	-2 B (-0.0%)	192.87 KB → 192.91 KB	+43 B (+0.0%)
`@azure-tools/typespec-azure-rulesets`	5.16 KB → 5.16 KB	+1 B (+0.0%)	32.09 KB → 32.09 KB	—
`@azure-tools/typespec-autorest`	80.93 KB → 80.93 KB	—	395.06 KB → 395.06 KB	—
`@azure-tools/typespec-autorest-canonical`	7.42 KB → 7.42 KB	—	26.00 KB → 26.00 KB	—
`@azure-tools/typespec-metadata`	15.91 KB → 15.91 KB	—	62.26 KB → 62.26 KB	—

_{Packed = gzipped .tgz published to npm. Unpacked = total extracted size. 🆕 added, 🗑️ removed. Packages from the core/ submodule are not included.
🔴 grew · 🟢 shrank — only changes of at least 512 B and 0.5% are marked.}

tadelesh and others added 30 commits August 11, 2026 02:28

release notes (Azure#5206)

8081963

Co-authored-by: iscai-msft <isabellavcai@gmail.com>

[publish] 0.71.0 release (Azure#5207)

be6d303

Co-authored-by: iscai-msft <isabellavcai@gmail.com>

Correcting the nextLink property decorator (Azure#5214)

a2ce1da

Pull request created by AI Agent --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: weidongxu-microsoft <53292327+weidongxu-microsoft@users.noreply.github.com>

[tcgc] publish csharp changes (Azure#5222)

24b63f4

Co-authored-by: iscai-msft <isabellavcai@gmail.com>

bump dep for typespec-python (Azure#5224)

37a1e83

wouldnt let me regen lockfile bc of npm issues - had to specifically just update http-client-python to workaround --------- Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

[python] publish new version (Azure#5227)

82a945b

Co-authored-by: Libba Lawrence <llawrence@microsoft.com> Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

add spector test cases except union cases (Azure#5189)

00871cd

add a new function to filter out go scope for union cases, and add other spector test cases

Remove azure/core/traits tests (Azure#5246)

24257ba

The codegen is incorrect and is being improperly worked around.

Update Black to 26.3.1 to avoid security risk (Azure#5240)

a5e2329

Alerted by: https://github.com/Azure/typespec-azure/security/dependabot/313 and https://github.com/Azure/typespec-azure/security/dependabot/314

iscai-msft and others added 25 commits August 20, 2026 20:09

bump for release (Azure#5277)

1462c9e

Co-authored-by: iscai-msft <isabellavcai@gmail.com>

Fix fake server path param regex to exclude path delimiters (Azure#5233)

e7943b2

Previously, the `[$-;]` range included `/` and caused a path parameter to consume subsequent path segments. This PR also resolves Azure/azure-sdk-for-go#27393.

Add some missing Spector tests (Azure#5289)

9bc163a

Regex captures path delimiters when required (Azure#5321)

e378cb8

Path params regex must include segment delimiter for params that allow unencoded characters (e.g. ARM scopes and resource IDs). Fixes regression introduced in e7943b2.

iscai-msft closed this Aug 31, 2026

iscai-msft deleted the iscai-msft-regenerate-typespec-java-6ac branch September 8, 2026 15:52

Navigation Menu

Repository navigation

Bump typespec-java pinned http-client-java core commit - #26

Bump typespec-java pinned http-client-java core commit#26
iscai-msft wants to merge 67 commits into
mainfrom
iscai-msft-regenerate-typespec-java-6ac

iscai-msft commented Aug 31, 2026

Uh oh!

iscai-msft commented Aug 31, 2026

Uh oh!

github-actions Bot commented Aug 31, 2026

`@azure-tools/typespec-ts` - internal ✏️

`@azure-tools/typespec-client-generator-core` - feature ✏️

`@azure-tools/typespec-java` - dependencies ✏️

`@azure-tools/typespec-ts` - internal ✏️

`@azure-tools/azure-http-specs` - internal ✏️

`@azure-tools/typespec-java` - internal ✏️

`@azure-tools/typespec-ts` - internal ✏️

`@azure-tools/azure-http-specs` - fix ✏️

`@azure-tools/typespec-azure-resource-manager` - fix ✏️

`@azure-tools/typespec-client-generator-core` - fix ✏️

`@azure-tools/typespec-ts` - fix ✏️

`@azure-tools/azure-http-specs` - internal ✏️

`@azure-tools/typespec-python` - internal ✏️

`@azure-tools/azure-http-specs` - internal ✏️

`@azure-tools/typespec-java` - internal ✏️

`@azure-tools/typespec-python` - fix ✏️

`@azure-tools/typespec-python` - internal ✏️

`@azure-tools/typespec-python` - internal ✏️

`@azure-tools/typespec-ts` - feature ✏️

Uh oh!

github-actions Bot commented Aug 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

16 participants

Conversation

iscai-msft commented Aug 31, 2026

Summary

Verification

Uh oh!

iscai-msft commented Aug 31, 2026

Uh oh!

github-actions Bot commented Aug 31, 2026

@azure-tools/typespec-ts - internal ✏️

@azure-tools/typespec-client-generator-core - feature ✏️

@azure-tools/typespec-java - dependencies ✏️

@azure-tools/typespec-ts - internal ✏️

@azure-tools/azure-http-specs - internal ✏️

@azure-tools/typespec-java - internal ✏️

@azure-tools/typespec-ts - internal ✏️

@azure-tools/azure-http-specs - fix ✏️

@azure-tools/typespec-azure-resource-manager - fix ✏️

@azure-tools/typespec-client-generator-core - fix ✏️

@azure-tools/typespec-ts - fix ✏️

@azure-tools/azure-http-specs - internal ✏️

@azure-tools/typespec-python - internal ✏️

@azure-tools/azure-http-specs - internal ✏️

@azure-tools/typespec-java - internal ✏️

@azure-tools/typespec-python - fix ✏️

@azure-tools/typespec-python - internal ✏️

@azure-tools/typespec-python - internal ✏️

@azure-tools/typespec-ts - feature ✏️

Uh oh!

github-actions Bot commented Aug 31, 2026

📦 Package size report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

16 participants

`@azure-tools/typespec-ts` - internal ✏️

`@azure-tools/typespec-client-generator-core` - feature ✏️

`@azure-tools/typespec-java` - dependencies ✏️

`@azure-tools/typespec-ts` - internal ✏️

`@azure-tools/azure-http-specs` - internal ✏️

`@azure-tools/typespec-java` - internal ✏️

`@azure-tools/typespec-ts` - internal ✏️

`@azure-tools/azure-http-specs` - fix ✏️

`@azure-tools/typespec-azure-resource-manager` - fix ✏️

`@azure-tools/typespec-client-generator-core` - fix ✏️

`@azure-tools/typespec-ts` - fix ✏️

`@azure-tools/azure-http-specs` - internal ✏️

`@azure-tools/typespec-python` - internal ✏️

`@azure-tools/azure-http-specs` - internal ✏️

`@azure-tools/typespec-java` - internal ✏️

`@azure-tools/typespec-python` - fix ✏️

`@azure-tools/typespec-python` - internal ✏️

`@azure-tools/typespec-python` - internal ✏️

`@azure-tools/typespec-ts` - feature ✏️