Merge branch 'dev/saurabh/syncmain' into dev/saurabh/syncmain-v2

Author: saurabh500

.config/1espt/PipelineAutobaseliningConfig.yml

@@ -0,0 +1,21 @@
+## DO NOT MODIFY THIS FILE MANUALLY. This is part of auto-baselining from 1ES Pipeline Templates. Go to [https://aka.ms/1espt-autobaselining] for more details.
+
+pipelines:
+  2236:
+    retail:
+      source:
+        credscan:
+          lastModifiedDate: 2026-02-26
+        policheck:
+          lastModifiedDate: 2026-02-26
+        eslint:
+          lastModifiedDate: 2026-02-26
+        psscriptanalyzer:
+          lastModifiedDate: 2026-02-26
+        armory:
+          lastModifiedDate: 2026-02-26
+      binary:
+        credscan:
+          lastModifiedDate: 2026-02-26
+        binskim:
+          lastModifiedDate: 2026-02-26

.config/guardian/.gdnbaselines

@@ -0,0 +1,30 @@
+{
+  "properties": {
+    "helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/baselines"
+  },
+  "version": "1.0.0",
+  "baselines": {
+    "default": {
+      "name": "default",
+      "createdDate": "2026-02-26 00:52:39Z",
+      "lastUpdatedDate": "2026-02-26 00:52:39Z"
+    }
+  },
+  "results": {
+    "bd1ce7227025d22a25d3d98df0aef3b236e0aa4987f80c43874a2afc3e3713a0": {
+      "signature": "bd1ce7227025d22a25d3d98df0aef3b236e0aa4987f80c43874a2afc3e3713a0",
+      "alternativeSignatures": [],
+      "target": "mssql-py-core/tests/mssql_python/test_bulkcopy_access_token.py",
+      "line": 443,
+      "uriBaseId": "file:///D:/a/_work/1/s/",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "credscan",
+      "ruleId": "CSCAN-GENERAL0030",
+      "createdDate": "2026-02-26 00:52:39Z",
+      "expirationDate": "2026-08-15 00:54:08Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2026-02-26 00:54:08Z"
+    }
+  }
+}

.devcontainer/post-create.sh

@@ -16,14 +16,15 @@ fnm use 20
 corepack enable
 
 # Setup Python virtual environment for mssql-py-core development
+WORKSPACE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 echo "Setting up Python virtual environment..."
-python3 -m venv /workspaces/mssql-tds/myvenv
-source /workspaces/mssql-tds/myvenv/bin/activate
+python3 -m venv "$WORKSPACE_DIR/myvenv"
+source "$WORKSPACE_DIR/myvenv/bin/activate"
 
 # Install maturin (build tool) and dev dependencies from pyproject.toml
 pip install --upgrade pip
 pip install maturin
-pip install -e "/workspaces/mssql-tds/mssql-py-core[dev]"
+pip install -e "$WORKSPACE_DIR/mssql-py-core[dev]"
 
-echo "Python venv ready at /workspaces/mssql-tds/myvenv"
-echo "Run 'source /workspaces/mssql-tds/myvenv/bin/activate' to activate"
+echo "Python venv ready at $WORKSPACE_DIR/myvenv"
+echo "Run 'source $WORKSPACE_DIR/myvenv/bin/activate' to activate"

.github/prompts/plan-documentMssqlTdsPublicApi.prompt.md

@@ -39,3 +39,12 @@ cd mssql-tds
 cargo nextest archive --archive-file tdslib-nextest.tar.zst
 mv tdslib-nextest.tar.zst /workspace/
 cd ..
+
+# Verify fuzz targets compile (PR builds only)
+if [ "$IS_PR_BUILD" = "true" ]; then
+  echo '==> Installing nightly toolchain for fuzz build check...'
+  rustup toolchain install nightly --profile minimal
+  echo '==> Checking fuzz targets compile...'
+  RUSTFLAGS="--cfg fuzzing" cargo +nightly check --manifest-path mssql-tds/fuzz/Cargo.toml
+  echo '==> Fuzz build check passed.'
+fi

.pipeline/scripts/containerized-build.sh

@@ -338,6 +338,11 @@ stages:
           osType: Linux
           fuzzDurationSeconds: 300
           fuzzTarget: fuzz_connection_provider_context
+      - template: templates/fuzz-template.yml
+        parameters:
+          osType: Linux
+          fuzzDurationSeconds: 300
+          fuzzTarget: fuzz_bulk_copy
 
 - stage: Build_mssql_python
   dependsOn: []

.pipeline/validation-pipeline.yml

@@ -0,0 +1,18 @@
+#!/bin/bash
+set -e
+
+# Build all fuzz targets for mssql-tds.
+# Requires: nightly toolchain and cargo-fuzz.
+
+if ! rustup toolchain list | grep -q "nightly"; then
+    echo "Installing nightly toolchain..."
+    rustup toolchain install nightly
+fi
+
+if ! cargo +nightly fuzz --version &> /dev/null 2>&1; then
+    echo "Installing cargo-fuzz..."
+    cargo +nightly install cargo-fuzz
+fi
+
+cd "$(dirname "$0")/../mssql-tds"
+cargo +nightly fuzz build

dev/build-fuzz.sh

@@ -17,23 +17,23 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@js-joda/core": "^5.6.5",
+    "@js-joda/core": "^5.7.0",
     "iconv-lite": "^0.6.3"
   },
   "devDependencies": {
     "@napi-rs/cli": "^2.18.4",
-    "@types/benchmark": "^2",
-    "@types/node": "^24.0.14",
-    "@typescript-eslint/eslint-plugin": "^8.37.0",
-    "@typescript-eslint/parser": "^8.37.0",
-    "ava": "^6.0.1",
+    "@types/benchmark": "^2.1.5",
+    "@types/node": "^24.12.0",
+    "@typescript-eslint/eslint-plugin": "^8.57.0",
+    "@typescript-eslint/parser": "^8.57.0",
+    "ava": "^6.4.1",
     "benchmark": "^2.1.4",
-    "eslint": "^9.31.0",
-    "eslint-config-prettier": "^10.1.5",
-    "eslint-plugin-prettier": "^5.5.1",
-    "prettier": "^3.6.2",
+    "eslint": "^9.39.4",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-prettier": "^5.5.5",
+    "prettier": "^3.8.1",
     "tap-xunit": "^2.4.1",
-    "typescript": "^5.8.3"
+    "typescript": "^5.9.3"
   },
   "ava": {
     "timeout": "3m"
@@ -55,5 +55,8 @@
     "format:check": "prettier --check \"lib/**/*.ts\" \"__test__/**/*.{js,mjs,ts}\"",
     "lint": "eslint . --ext .ts,.js --max-warnings=0"
   },
-  "packageManager": "yarn@4.9.2"
+  "packageManager": "yarn@4.9.2",
+  "resolutions": {
+    "tar": "7.5.11"
+  }
 }