[http-client-java] Upgrade Node.js dependencies by weidongxu-microsoft · Pull Request #12540 · microsoft/typespec

Weidong Xu (weidongxu-microsoft) · 2026-11-11T01:32:26Z

Upgrade Node.js dependencies for the Java emitter and both test modules, including peer dependencies, overrides, and lockfiles.

Sync Java/POM dependency versions using eng/versioning/Sync-Versions.ps1.
Regenerate clients and add e2e coverage for the updated HTTP specs.
Fix base64/base64url encoding for byte-valued headers and query parameters.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 133b0e95-9bfb-4fa1-a39b-81613b0e8fa5

github-actions · 2026-11-11T01:36:40Z

All changed packages have been documented.

✅ @typespec/http-client-java

Show changes

`@typespec/http-client-java` - fix ✏️

Fix base64 encoding of byte-valued headers and query parameters.

`@typespec/http-client-java` - internal ✏️

Add end-to-end coverage for updated HTTP specs and byte-valued header collections.

`@typespec/http-client-java` - dependencies ✏️

Upgrade Node.js dependencies and sync Java dependency versions.

Copilot

🟡 Changes recommended

The dependency update is missing the required .chronus entry for @typespec/http-client-java with changeKind: dependencies describing the vulnerability remediation.

1 open issue

Add a Chronus entry for the dependency update · New

1 file not reviewed

packages/http-client-java/package-lock.json: Generated file

What changed in this PR

Updates the Java HTTP client emitter’s npm dependency tree to address reported vulnerabilities. The Eclipse runtime dependency remains unchanged.

Changes:

Adds scoped minimatch and glob overrides for API Extractor and rimraf.
Refreshes locked transitive dependencies for authentication, request parsing, and build tooling.

File	Description
`packages/http-client-java/package.json`	Adds targeted dependency overrides.
`packages/http-client-java/package-lock.json`	Records updated versions, dependency relationships, and integrity hashes.

_{Review effort: Balanced}

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 133b0e95-9bfb-4fa1-a39b-81613b0e8fa5

Copilot

🔵 Needs a closer look

The minimatch 10-to-11 override leaves API Extractor compatibility unverified because normal build/test scripts do not exercise extract-api and dependencies are unavailable for runtime validation.

No open issues 🎉

1 resolved since last review

Add a Chronus entry for the dependency update

1 file not reviewed

packages/http-client-java/package-lock.json: Generated file

_{Review effort: Balanced}

azure-sdk-automation · 2026-11-11T01:53:36Z

You can try these changes here

🛝 Playground	🌐 Website	🛝 VSCode Extension

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

Copilot

🟡 Changes recommended

The unbranded test bypasses the production template, leaving RequestContext-based query generation untested.

1 open issue

Use the production template for unbranded query-generation tests · New

1 file not reviewed

packages/http-client-java/package-lock.json: Generated file

_{Review effort: Balanced}

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

Copilot

🔵 Needs a closer look

The override moves API Extractor from pinned minimatch 10.2.3 to major version 11, requiring a clean npm ci and API Extractor build in CI to verify compatibility.

1 open issue

Use the production template for unbranded query-generation tests

_{Review effort: Balanced}

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

Copilot

🟡 Changes recommended

Generated clients are written under specs and deleted before collection, while new tests reference missing client methods and source packages, preventing compilation.

3 open issues

_{Review effort: Balanced}

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

Copilot

🟢 Approval recommended

No active review issues are reported for the Java HTTP client emitter updates.

2 open issues

1 resolved since last review

Anchor generated client output to the test-module working directory

_{Review effort: Balanced}

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

Copilot

🟢 Approval recommended

No active review issues require further changes.

No open issues 🎉

2 resolved since last review

_{Review effort: Balanced}

fix(http-client-java): update vulnerable npm dependencies

38316da

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 133b0e95-9bfb-4fa1-a39b-81613b0e8fa5

Copilot AI balanced review requested due to automatic review settings November 11, 2026 01:32

Copilot started reviewing on behalf of Weidong Xu (weidongxu-microsoft) November 11, 2026 01:33

View session

Copilot AI reviewed Nov 11, 2026

View reviewed changes

Comment thread packages/http-client-java/package.json Resolved

microsoft-github-policy-service Bot added the emitter:client:java Issue for the Java client emitter: @typespec/http-client-java label Nov 11, 2026

fix(http-client-java): document and update dependencies

9f62cdf

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 133b0e95-9bfb-4fa1-a39b-81613b0e8fa5

Copilot AI balanced review requested due to automatic review settings November 11, 2026 01:49

Copilot started reviewing on behalf of Weidong Xu (weidongxu-microsoft) November 11, 2026 01:49

View session

Copilot AI reviewed Nov 11, 2026

View reviewed changes

fix(java): encode byte-valued headers and queries

aa2c510

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

Copilot AI balanced review requested due to automatic review settings November 11, 2026 06:06

Copilot started reviewing on behalf of Weidong Xu (weidongxu-microsoft) November 11, 2026 06:07

View session

Copilot AI reviewed Nov 11, 2026

View reviewed changes

Comment thread ...crosoft/typespec/http/client/generator/core/template/ConvenienceMethodTemplateBaseTests.java Resolved

Weidong Xu (weidongxu-microsoft) and others added 3 commits November 11, 2026 15:07

chore(http-client-java): upgrade Node dependencies

303e4d8

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

chore(http-client-java): sync Java dependency versions

2ed5c09

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

test(http-client-java): regenerate clients and cover byte requests

83c8e90

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

Copilot AI balanced review requested due to automatic review settings November 11, 2026 07:07

Copilot started reviewing on behalf of Weidong Xu (weidongxu-microsoft) November 11, 2026 07:08

View session

Copilot AI reviewed Nov 11, 2026

View reviewed changes

Weidong Xu (weidongxu-microsoft) and others added 9 commits November 11, 2026 15:26

test(http-client-java): cover encoded header collections

3d540cc

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

test(http-client-java): cover LRO usage metadata

cceffa4

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

test(http-client-java): cover successful LRO jobs

178b64f

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

test(http-client-java): cover failed LRO job metadata

82938fa

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

test(http-client-java): exercise explicit union inheritance scenarios

17b563d

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

test(http-client-java): cover injected union discriminators

a051efb

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

test(http-client-java): cover custom union discriminators

4a20b84

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

test(http-client-java): cover enum union discriminators

800ae14

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

test(http-client-java): cover recursive union inheritance

01ec155

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

Weidong Xu (weidongxu-microsoft) and others added 4 commits November 11, 2026 15:37

test(http-client-java): cover void response replacement

cfc006e

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

test(http-client-java): cover child client API version override

6092a01

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

test(http-client-java): cover unified management example scenario

b682132

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

style(http-client-java): format new e2e tests

25a93e1

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

Copilot AI balanced review requested due to automatic review settings November 11, 2026 07:46

Copilot started reviewing on behalf of Weidong Xu (weidongxu-microsoft) November 11, 2026 07:46

View session

Copilot AI reviewed Nov 11, 2026

View reviewed changes

Comment thread packages/http-client-java/generator/http-client-generator-test/Generate.ps1 Resolved

Comment thread ...tor/http-client-generator-test/src/test/java/tsptest/requestheaders/RequestHeadersTests.java Resolved

Weidong Xu (weidongxu-microsoft) changed the title ~~[http-client-java] Update vulnerable npm dependencies~~ [http-client-java] Upgrade Node.js dependencies Nov 11, 2026

Weidong Xu (weidongxu-microsoft) added 2 commits November 11, 2026 20:23

test(http-client-java): check in required generated fixtures

2bb7411

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

test(http-client-java): simplify scenario feature configuration

a4928eb

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

Copilot AI balanced review requested due to automatic review settings November 11, 2026 12:24

Copilot started reviewing on behalf of Weidong Xu (weidongxu-microsoft) November 11, 2026 12:25

View session

Copilot AI reviewed Nov 11, 2026

View reviewed changes

Weidong Xu (weidongxu-microsoft) added 3 commits November 11, 2026 21:17

test(http-client-java): exercise ClientCore byte query generation

c80e4f8

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

test(http-client-java): retain complete regenerated test outputs

0c81410

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

chore(http-client-java): consolidate changelog entries

18648fb

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 265d4a1b-cb96-4da6-a97d-b76b50fb1749

Copilot AI balanced review requested due to automatic review settings November 11, 2026 13:51

Copilot started reviewing on behalf of Weidong Xu (weidongxu-microsoft) November 11, 2026 13:51

View session

Copilot AI reviewed Nov 11, 2026

View reviewed changes

Weidong Xu (weidongxu-microsoft) marked this pull request as ready for review November 11, 2026 15:40

Weidong Xu (weidongxu-microsoft) requested review from JoshLove-msft, Xiaofei Cao (XiaofeiCao), Alan Zimmer (alzimmermsft) and Haoling Dong (haolingdong-msft) as code owners November 11, 2026 15:40

Weidong Xu (weidongxu-microsoft) enabled auto-merge November 11, 2026 16:00

Alan Zimmer (alzimmermsft) approved these changes Nov 11, 2026

View reviewed changes

Weidong Xu (weidongxu-microsoft) added this pull request to the merge queue Nov 11, 2026

Merged via the queue into microsoft:main with commit 76dd125 Nov 11, 2026
33 of 35 checks passed

Weidong Xu (weidongxu-microsoft) deleted the fix/java-dependency-alerts-20261111 branch November 11, 2026 17:12

Conversation

Weidong Xu (weidongxu-microsoft) commented Nov 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Nov 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@typespec/http-client-java - fix ✏️

@typespec/http-client-java - internal ✏️

@typespec/http-client-java - dependencies ✏️

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🔵 Needs a closer look

Uh oh!

azure-sdk-automation Bot commented Nov 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🔵 Needs a closer look

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟢 Approval recommended

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟢 Approval recommended

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Weidong Xu (weidongxu-microsoft) commented Nov 11, 2026 •

edited

Loading

github-actions Bot commented Nov 11, 2026 •

edited

Loading

`@typespec/http-client-java` - fix ✏️

`@typespec/http-client-java` - internal ✏️

`@typespec/http-client-java` - dependencies ✏️

azure-sdk-automation Bot commented Nov 11, 2026 •

edited

Loading