build(deps): bump brace-expansion, test-exclude and typescript-eslint in /packages/http-client-python by dependabot[bot] · Pull Request #11322 · microsoft/typespec

dependabot · 2026-07-21T02:21:55Z

Bumps brace-expansion to 5.0.7 and updates ancestor dependencies brace-expansion, test-exclude and typescript-eslint. These dependencies need to be updated together.

Updates brace-expansion from 5.0.5 to 5.0.7

Commits

b735ba6 5.0.7
c7e33ec Merge commit from fork
fa1786a Bump tar from 7.5.11 to 7.5.16 (#116)
c16f1ec fix(package.json): use git+https instead of git+ssh for repository URL (#115)
196bbcc Bump ip-address from 10.1.0 to 10.2.0 (#104)
eb18dd6 Update ci.yml (#107)
a39928d Bump minimatch (#106)
7950ae3 ci: correct test workflow (#105)
46317b5 5.0.6
c0b095b Merge commit from fork
Additional commits viewable in compare view

Updates test-exclude from 7.0.1 to 7.0.2

Release notes

Sourced from test-exclude's releases.

test-exclude: v7.0.2

7.0.2 (2026-02-22)

Bug Fixes

deps: update minimatch to 10 (#70) (744cb01)

Changelog

Sourced from test-exclude's changelog.

7.0.2 (2026-02-22)

Bug Fixes

deps: update minimatch to 10 (#70) (744cb01)

Commits

80dde47 chore(master): release test-exclude 7.0.2 (#71)
744cb01 fix(deps): update minimatch to 10 (#70)
See full diff in compare view

Updates typescript-eslint from 8.55.0 to 8.65.0

Release notes

Sourced from typescript-eslint's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

add warning when TS 7 is detected (#12529)

eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)

eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)

parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)

eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)

eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

Serhii Leniv @Serhii-Leniv

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

support parsing import defer (#12513)

eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)

typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

Evyatar Daud @StyleShit

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.65.0 (2026-07-20)

🚀 Features

add warning when TS 7 is detected (#12529)

❤️ Thank You

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.1 (2026-06-29)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.0 (2026-06-22)

🚀 Features

remove redundant package.json "files" (#12444)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

... (truncated)

Commits

63ba81b chore(release): publish 8.65.0
eaf4576 feat: add warning when TS 7 is detected (#12529)
0d06406 chore: add attw validation to repo (#12437)
c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
414d9ab chore(release): publish 8.64.0
290cf6c chore(release): publish 8.63.0
3ea32f4 chore(release): publish 8.62.1
54e2857 chore(release): publish 8.62.0
81e4c26 feat: remove redundant package.json "files" (#12444)
aaad718 chore(release): publish 8.61.1
Additional commits viewable in compare view

azure-pipelines · 2026-07-21T02:22:17Z

Azure Pipelines: Successfully started running 1 pipeline(s). 1 pipeline(s) were filtered out due to trigger conditions. There may be pipelines that require an authorized user to comment /azp run to run.

pkg-pr-new · 2026-07-21T02:23:33Z

Open in StackBlitz

npm i https://pkg.pr.new/@typespec/http-client-python@11322

commit: efe6865

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) to 5.0.7 and updates ancestor dependencies [brace-expansion](https://github.com/juliangruber/brace-expansion), [test-exclude](https://github.com/istanbuljs/test-exclude) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint). These dependencies need to be updated together. Updates `brace-expansion` from 5.0.5 to 5.0.7 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v5.0.5...v5.0.7) Updates `test-exclude` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/istanbuljs/test-exclude/releases) - [Changelog](https://github.com/istanbuljs/test-exclude/blob/master/CHANGELOG.md) - [Commits](istanbuljs/test-exclude@test-exclude-v7.0.1...test-exclude-v7.0.2) Updates `typescript-eslint` from 8.55.0 to 8.65.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 5.0.7 dependency-type: indirect - dependency-name: test-exclude dependency-version: 7.0.2 dependency-type: indirect - dependency-name: typescript-eslint dependency-version: 8.65.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-21T18:04:52Z

Python emitter diff

Baseline gh:9bd7a5bce3474b7aaaa528c57a279c791863f01c vs this PR.

No changes to generated output.

Rendered diff: inline on the run summary, or the emitter-diff-html artifact.

Informational check (eng/emitter-diff); does not block the PR.

…-python/multi-8e14e314c6

Libba Lawrence (l0lawrence) · 2026-08-05T17:36:18Z

Copilot why is ci failing

Libba Lawrence (l0lawrence) · 2026-08-05T22:28:45Z

Copilot the linux builds are looking for @eslint/js

Copilot

Copilot wasn't able to review any files in this pull request.

Files not reviewed (1)

packages/http-client-python/package-lock.json: Generated file

Libba Lawrence (l0lawrence) · 2026-08-05T22:43:42Z

Copilot I think we need to add @eslint/js as a dependency

Co-authored-by: l0lawrence <100643745+l0lawrence@users.noreply.github.com>

Copilot · 2026-08-05T22:46:02Z

Copilot I think we need to add @eslint/js as a dependency

Added @eslint/js (^10.0.1) as an explicit devDependency in packages/http-client-python/package.json and regenerated the lockfile so it's present there too. eslint v10 no longer pulls it in transitively, which is why the Linux CI lint job failed resolving it from eng/scripts/ci/config/eslint-ci.config.mjs. Verified npx eslint -c eng/scripts/ci/config/eslint-ci.config.mjs emitter/src passes after a clean npm ci.

…-python/multi-8e14e314c6

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: d9d0e1a1-ea80-4398-87be-49658388a53d

microsoft-github-policy-service · 2026-08-26T15:19:57Z

Hi @Dependabot (@dependabot)[bot]. Your PR has had no update for 14 days and it is marked as a stale PR. If it is not updated within 14 additional days, the PR will automatically be closed. If you want to refresh the PR, please remove the stale label.

…-python/multi-8e14e314c6

Copilot

🟡 Changes recommended

The PR metadata doesn’t match the actual changes (typescript-eslint removal/oxlint adoption) and the lockfile introduces ms-feed-*.pkgs.visualstudio.com resolved URLs that may break installs outside that feed.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Review details

Files not reviewed (1)

packages/http-client-python/package-lock.json: Generated file

Files reviewed: 4/5 changed files
Comments generated: 2
Review effort level: Lite

…rn/packages/http-client-python/multi-8e14e314c6 # Conflicts: # packages/http-client-python/eng/scripts/ci/config/eslint-ci.config.mjs # packages/http-client-python/package-lock.json

Copilot

🟡 Changes recommended

The PR description/title doesn’t match the actual changes (tooling migration + extra dependency bumps) and the dependency changes for a standalone package should include an appropriate .chronus/changes/* entry.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Review details

Suppressed comments (2)

packages/http-client-python/package.json:105

PR description/title focus on brace-expansion/test-exclude/typescript-eslint, but this change also bumps direct dependencies js-yaml and tsx; please update the PR description (or split) so reviewers/release notes accurately reflect the additional dependency updates.

  "dependencies": {
    "js-yaml": "^4.3.1",
    "marked": "^15.0.6",
    "pyodide": "0.26.2",
    "semver": "~7.6.2",
    "tsx": "^4.23.13"
  },

packages/http-client-python/package.json:133

PR description says typescript-eslint is being bumped, but typescript-eslint is removed from devDependencies and oxlint is added instead; please clarify whether this PR is intended to migrate linting tooling or just bump typescript-eslint.

    "@types/node": "~25.0.2",
    "@types/semver": "7.5.8",
    "c8": "^10.1.3",
    "oxlint": "^1.69.0",
    "picocolors": "~1.1.1",
    "rimraf": "~6.1.2",
    "typescript": "~5.9.2",
    "vitest": "^4.0.15",

Files reviewed: 5/6 changed files
Comments generated: 4
Review effort level: Lite

dependabot Bot added dependencies labels Jul 21, 2026

dependabot Bot requested a review from iscai-msft as a code owner July 21, 2026 02:21

dependabot Bot added the dependencies label Jul 21, 2026

dependabot Bot requested review from Laurent Mazuel (lmazuel), Yuchao Yan (msyyc), Chenjie Shi (tadelesh) and Timothee Guerin (timotheeguerin) as code owners July 21, 2026 02:21

dependabot Bot added the javascript label Jul 21, 2026

dependabot Bot requested review from ChenxiJiang333, catalinaperalta, Kashif Khan (kashifkhan) and Libba Lawrence (l0lawrence) as code owners July 21, 2026 02:21

microsoft-github-policy-service Bot added the emitter:client:python Issue for the Python client emitter: @typespec/http-client-python label Jul 21, 2026

github-actions Bot removed dependencies labels Jul 21, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/http-client-python/multi-8e14e314c6 branch from f1fa7a5 to f6f9c52 Compare July 21, 2026 17:48

Merge branch 'main' into dependabot/npm_and_yarn/packages/http-client…

0f58339

…-python/multi-8e14e314c6

Libba Lawrence (l0lawrence) requested review from Mark Cowlishaw (markcowl) and Jeff Fisher (xirzec) as code owners August 5, 2026 15:50

Copilot started work on behalf of Libba Lawrence (l0lawrence) August 5, 2026 17:37 View session

Copilot finished work on behalf of Libba Lawrence (l0lawrence) August 5, 2026 17:37

Copilot started work on behalf of Libba Lawrence (l0lawrence) August 5, 2026 22:29 View session

Copilot finished work on behalf of Libba Lawrence (l0lawrence) August 5, 2026 22:30

Copilot AI reviewed Aug 5, 2026

View reviewed changes

Comment thread packages/http-client-python/package-lock.json Outdated

Comment thread packages/http-client-python/package-lock.json Outdated

Copilot started work on behalf of Libba Lawrence (l0lawrence) August 5, 2026 22:44 View session

build(deps): add @eslint/js devDependency for http-client-python CI lint

7a4c7b6

Co-authored-by: l0lawrence <100643745+l0lawrence@users.noreply.github.com>

Copilot finished work on behalf of Libba Lawrence (l0lawrence) August 5, 2026 22:46

Merge branch 'main' into dependabot/npm_and_yarn/packages/http-client…

3f20bff

…-python/multi-8e14e314c6

Timothee Guerin (timotheeguerin) reviewed Aug 7, 2026

View reviewed changes

Comment thread packages/http-client-python/package.json Outdated

Libba Lawrence (l0lawrence) and others added 2 commits August 10, 2026 12:56

build(http-client-python): migrate lint to oxlint

cdbd468

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: d9d0e1a1-ea80-4398-87be-49658388a53d

fix(http-client-python): install oxlint for standalone ci

6484c8f

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: d9d0e1a1-ea80-4398-87be-49658388a53d

Libba Lawrence (l0lawrence) reviewed Aug 11, 2026

View reviewed changes

Comment thread packages/http-client-python/eng/scripts/ci/config/oxlint.json

microsoft-github-policy-service Bot added the stale Mark a PR that hasn't been recently updated and will be closed. label Aug 26, 2026

Merge branch 'main' into dependabot/npm_and_yarn/packages/http-client…

a015241

…-python/multi-8e14e314c6

Copilot AI review requested due to automatic review settings September 7, 2026 05:10

Copilot started reviewing on behalf of Yuchao Yan (msyyc) September 7, 2026 05:11 View session

Copilot AI reviewed Sep 7, 2026

View reviewed changes

Comment thread packages/http-client-python/package-lock.json

Comment thread packages/http-client-python/package.json

Yuchao Yan (msyyc) added 2 commits September 7, 2026 16:27

Fix remaining Python emitter Dependabot vulnerabilities

8b17df5

Merge remote-tracking branch 'origin/main' into dependabot/npm_and_ya…

efe6865

…rn/packages/http-client-python/multi-8e14e314c6 # Conflicts: # packages/http-client-python/eng/scripts/ci/config/eslint-ci.config.mjs # packages/http-client-python/package-lock.json

Copilot AI review requested due to automatic review settings September 7, 2026 08:37

Copilot started reviewing on behalf of Yuchao Yan (msyyc) September 7, 2026 08:38 View session

Yuchao Yan (msyyc) approved these changes Sep 7, 2026

View reviewed changes

Yuchao Yan (msyyc) requested a review from Timothee Guerin (timotheeguerin) September 7, 2026 08:40

Copilot AI reviewed Sep 7, 2026

View reviewed changes

Comment thread packages/http-client-python/eng/scripts/ci/lint.ts

Comment thread packages/http-client-python/generator/setup.py

Comment thread packages/http-client-python/package-lock.json

Comment thread packages/http-client-python/package.json

ChenxiJiang333 approved these changes Sep 7, 2026

View reviewed changes

Yuchao Yan (msyyc) enabled auto-merge September 7, 2026 09:00

Yuchao Yan (msyyc) added this pull request to the merge queue Sep 7, 2026

Merged via the queue into main with commit 7abc933 Sep 7, 2026
31 checks passed

Yuchao Yan (msyyc) deleted the dependabot/npm_and_yarn/packages/http-client-python/multi-8e14e314c6 branch September 7, 2026 09:54

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

test-exclude: v7.0.2

7.0.2 (2026-02-22)

Bug Fixes

7.0.2 (2026-02-22)

Bug Fixes

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

🩹 Fixes

❤️ Thank You

8.65.0 (2026-07-20)

🚀 Features

❤️ Thank You

8.64.0 (2026-07-13)

8.63.0 (2026-07-06)

8.62.1 (2026-06-29)

8.62.0 (2026-06-22)

🚀 Features

❤️ Thank You

Uh oh!

azure-pipelines Bot commented Jul 21, 2026

Uh oh!

pkg-pr-new Bot commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Python emitter diff

Uh oh!

Libba Lawrence (l0lawrence) commented Aug 5, 2026

Uh oh!

Libba Lawrence (l0lawrence) commented Aug 5, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Libba Lawrence (l0lawrence) commented Aug 5, 2026

Uh oh!

Copilot AI commented Aug 5, 2026

Uh oh!

Uh oh!

Uh oh!

microsoft-github-policy-service Bot commented Aug 26, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Files not reviewed (1)

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Suppressed comments (2)

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

dependabot Bot commented on behalf of github Jul 21, 2026 •

edited

Loading

pkg-pr-new Bot commented Jul 21, 2026 •

edited

Loading

github-actions Bot commented Jul 21, 2026 •

edited

Loading