From 7cd643a047280cf1f59c4a09d2066cad7d4a0928 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 3 Sep 2026 18:33:52 +0000 Subject: [PATCH 1/5] Bump mocha from 12.0.0-rc.6 to 12.0.0 Bumps [mocha](https://github.com/mochajs/mocha) from 12.0.0-rc.6 to 12.0.0. - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](https://github.com/mochajs/mocha/compare/v12.0.0-rc.6...v12.0.0) --- updated-dependencies: - dependency-name: mocha dependency-version: 12.0.0 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index bc066d4ef..f657ba05d 100644 --- a/package-lock.json +++ b/package-lock.json @@ -8254,9 +8254,9 @@ "optional": true }, "node_modules/mocha": { - "version": "12.0.0-rc.6", - "resolved": "https://registry.npmjs.org/mocha/-/mocha-12.0.0-rc.6.tgz", - "integrity": "sha512-JfQk/OfLIU+Ajm76oTYM5YZn7gHWUZZF9+V9FQhveAv4mnB5I0Qwmtqx6O8uWGwmK+rPaqCBPlXS5+mcmgYbKg==", + "version": "12.0.0", + "resolved": "https://registry.npmjs.org/mocha/-/mocha-12.0.0.tgz", + "integrity": "sha512-NYNh5IFt6WYqm9bi4601m7vix8MZdXC0DwS4gY6WhXO2RgJWhivhISVmq1oklCif18OSI9l+vx5Mdm5oh1XGiQ==", "dev": true, "license": "MIT", "dependencies": { From 8d8d0b9b93c1ea3ac9c4ad5f58a7706f6463b3d4 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 3 Sep 2026 18:41:35 +0000 Subject: [PATCH 2/5] Test Mocha 12 CLI compatibility Co-authored-by: jainakanksha-msft <181211853+jainakanksha-msft@users.noreply.github.com> --- ChangeLog.md | 1 + tests/common/fixtures/mochaOptions.fixture.js | 7 +++++++ tests/common/mochaTypes.test.ts | 20 +++++++++++++++++++ 3 files changed, 28 insertions(+) create mode 100644 tests/common/fixtures/mochaOptions.fixture.js diff --git a/ChangeLog.md b/ChangeLog.md index e61434b27..40004a4ca 100644 --- a/ChangeLog.md +++ b/ChangeLog.md @@ -6,6 +6,7 @@ General: +- Updated lockfile-resolved `mocha` from 12.0.0-rc.6 to 12.0.0 for stable CLI argument parsing; added regression coverage for quoted grep patterns and negative timeout values. - Updated lockfile-resolved `axios` from 1.19.0 to 1.20.0 for hardened runtime option handling; no application code changes required. - Updated lockfile-resolved `lint-staged` from 17.3.0 to 17.4.1 to pick up `picomatch` 4.0.7 and `tinyexec` 1.3.0; moved `.lintstagedrc` flat-format coverage into `tests/packageScripts.test.ts`. - Bumped `morgan` from `^1.11.0` to `^1.12.0` (lockfile resolved to 1.12.0) to remediate CVE-2026-15603 (log forging via Unicode line separators in access log tokens); no Azurite source code changes were required. diff --git a/tests/common/fixtures/mochaOptions.fixture.js b/tests/common/fixtures/mochaOptions.fixture.js new file mode 100644 index 000000000..d81efb625 --- /dev/null +++ b/tests/common/fixtures/mochaOptions.fixture.js @@ -0,0 +1,7 @@ +describe("Mocha options fixture", function () { + it("quoted target", function () {}); + + it("unselected failure", function () { + throw new Error("The quoted grep option did not filter this test"); + }); +}); diff --git a/tests/common/mochaTypes.test.ts b/tests/common/mochaTypes.test.ts index c9342097c..b6a338a0a 100644 --- a/tests/common/mochaTypes.test.ts +++ b/tests/common/mochaTypes.test.ts @@ -1,8 +1,28 @@ import { strict as assert } from "assert"; +import { execFileSync } from "child_process"; describe("Mocha type compatibility @loki", function () { it("supports typed Mocha context @loki", function (this: Mocha.Context) { this.timeout(1000); assert.ok(this.test); }); + + it("parses quoted and negative MOCHA_OPTIONS values @loki", function () { + const output = execFileSync( + process.execPath, + [ + require.resolve("mocha/bin/mocha.js"), + require.resolve("./fixtures/mochaOptions.fixture.js") + ], + { + encoding: "utf8", + env: { + ...process.env, + MOCHA_OPTIONS: '--grep "quoted target" --timeout -1' + } + } + ); + + assert.match(output, /1 passing/); + }); }); From 0503192fd832590c458f3bc02495b0b40b10553d Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 4 Sep 2026 10:46:20 +0000 Subject: [PATCH 3/5] Remove dependency-only Mocha test Co-authored-by: jainakanksha-msft <181211853+jainakanksha-msft@users.noreply.github.com> --- ChangeLog.md | 2 +- tests/common/fixtures/mochaOptions.fixture.js | 7 ------- tests/common/mochaTypes.test.ts | 20 ------------------- 3 files changed, 1 insertion(+), 28 deletions(-) delete mode 100644 tests/common/fixtures/mochaOptions.fixture.js diff --git a/ChangeLog.md b/ChangeLog.md index 40004a4ca..81108b881 100644 --- a/ChangeLog.md +++ b/ChangeLog.md @@ -6,7 +6,7 @@ General: -- Updated lockfile-resolved `mocha` from 12.0.0-rc.6 to 12.0.0 for stable CLI argument parsing; added regression coverage for quoted grep patterns and negative timeout values. +- Updated lockfile-resolved `mocha` from 12.0.0-rc.6 to 12.0.0 for stable CLI argument parsing; no Azurite code changes were required. - Updated lockfile-resolved `axios` from 1.19.0 to 1.20.0 for hardened runtime option handling; no application code changes required. - Updated lockfile-resolved `lint-staged` from 17.3.0 to 17.4.1 to pick up `picomatch` 4.0.7 and `tinyexec` 1.3.0; moved `.lintstagedrc` flat-format coverage into `tests/packageScripts.test.ts`. - Bumped `morgan` from `^1.11.0` to `^1.12.0` (lockfile resolved to 1.12.0) to remediate CVE-2026-15603 (log forging via Unicode line separators in access log tokens); no Azurite source code changes were required. diff --git a/tests/common/fixtures/mochaOptions.fixture.js b/tests/common/fixtures/mochaOptions.fixture.js deleted file mode 100644 index d81efb625..000000000 --- a/tests/common/fixtures/mochaOptions.fixture.js +++ /dev/null @@ -1,7 +0,0 @@ -describe("Mocha options fixture", function () { - it("quoted target", function () {}); - - it("unselected failure", function () { - throw new Error("The quoted grep option did not filter this test"); - }); -}); diff --git a/tests/common/mochaTypes.test.ts b/tests/common/mochaTypes.test.ts index b6a338a0a..c9342097c 100644 --- a/tests/common/mochaTypes.test.ts +++ b/tests/common/mochaTypes.test.ts @@ -1,28 +1,8 @@ import { strict as assert } from "assert"; -import { execFileSync } from "child_process"; describe("Mocha type compatibility @loki", function () { it("supports typed Mocha context @loki", function (this: Mocha.Context) { this.timeout(1000); assert.ok(this.test); }); - - it("parses quoted and negative MOCHA_OPTIONS values @loki", function () { - const output = execFileSync( - process.execPath, - [ - require.resolve("mocha/bin/mocha.js"), - require.resolve("./fixtures/mochaOptions.fixture.js") - ], - { - encoding: "utf8", - env: { - ...process.env, - MOCHA_OPTIONS: '--grep "quoted target" --timeout -1' - } - } - ); - - assert.match(output, /1 passing/); - }); }); From 79b915332f6cab15dbcee1059d5adcf49d8ef2aa Mon Sep 17 00:00:00 2001 From: Akanksha Jain Date: Fri, 4 Sep 2026 16:19:46 +0530 Subject: [PATCH 4/5] Update ChangeLog.md --- ChangeLog.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ChangeLog.md b/ChangeLog.md index 81108b881..42379356a 100644 --- a/ChangeLog.md +++ b/ChangeLog.md @@ -6,7 +6,7 @@ General: -- Updated lockfile-resolved `mocha` from 12.0.0-rc.6 to 12.0.0 for stable CLI argument parsing; no Azurite code changes were required. +- Updated lockfile-resolved `mocha` from 12.0.0-rc.6 to 12.0.0 for stable CLI argument parsing. - Updated lockfile-resolved `axios` from 1.19.0 to 1.20.0 for hardened runtime option handling; no application code changes required. - Updated lockfile-resolved `lint-staged` from 17.3.0 to 17.4.1 to pick up `picomatch` 4.0.7 and `tinyexec` 1.3.0; moved `.lintstagedrc` flat-format coverage into `tests/packageScripts.test.ts`. - Bumped `morgan` from `^1.11.0` to `^1.12.0` (lockfile resolved to 1.12.0) to remediate CVE-2026-15603 (log forging via Unicode line separators in access log tokens); no Azurite source code changes were required. From fd5fe4fffcf7cf163c4f7591ae4946cc38ace96f Mon Sep 17 00:00:00 2001 From: Akanksha Jain Date: Fri, 4 Sep 2026 16:23:30 +0530 Subject: [PATCH 5/5] Update dependencies for improved stability and fixes Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- ChangeLog.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ChangeLog.md b/ChangeLog.md index 4aa8c5ea5..f47b04e96 100644 --- a/ChangeLog.md +++ b/ChangeLog.md @@ -6,7 +6,7 @@ General: -- Updated lockfile-resolved `mocha` from 12.0.0-rc.6 to 12.0.0 for stable CLI argument parsing. +- Updated lockfile-resolved `mocha` from 12.0.0-rc.6 to 12.0.0 to pick up CLI argument parsing fixes (negative numbers and quoted strings). - Updated the lockfile-resolved `@types/node` dev dependency from 26.2.0 to 26.4.0 for current Node.js API declarations; no application code changes were required, and filesystem extent coverage now validates sliced Buffer views. - Updated lockfile-resolved `axios` from 1.19.0 to 1.20.0 for hardened runtime option handling; no application code changes required. - Updated lockfile-resolved `lint-staged` from 17.3.0 to 17.4.1 to pick up `picomatch` 4.0.7 and `tinyexec` 1.3.0; moved `.lintstagedrc` flat-format coverage into `tests/packageScripts.test.ts`.