Skip to content

chore(security): rolling vulnerability fixes - #16455

Open
teamstoolkitworkflowapp[bot] wants to merge 11 commits into
devfrom
auto-fix-vuln/rolling
Open

chore(security): rolling vulnerability fixes#16455
teamstoolkitworkflowapp[bot] wants to merge 11 commits into
devfrom
auto-fix-vuln/rolling

Conversation

@teamstoolkitworkflowapp

@teamstoolkitworkflowapp teamstoolkitworkflowapp Bot commented Jul 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Vulnerability Scan - 2026-08-10

Scan overview

Target Ecosystem Vulnerabilities found
templates/vsc npm 101
templates/vs nuget 4

Total vulnerabilities: 105

No rolling fix PR change this run.

Verified fixes (0)

None.

Already fixed on rolling branch (0)

None.

No verified automatic fix (105)

File Package Reason
templates/vsc/ts/weather-agent/package.json.tpl @langchain/core npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/ts/weather-agent/package.json.tpl @langchain/langgraph npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/ts/weather-agent/package.json.tpl @langchain/langgraph-checkpoint npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/ts/weather-agent/package.json.tpl @langchain/langgraph-sdk npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/ts/weather-agent/package.json.tpl @langchain/openai npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@0.3.80
npm error node_modules/@langchain/core
npm error peer @langchain/core@">=0.2.36 <0.3.0 >=0.3.40 < 0.4.0" from @langchain/langgraph@0.2.74
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^0.2.66" from the root project
npm error
npm error Could not resolve dependency:
npm error Adar Butel (@LA)
templates/vsc/ts/weather-agent/package.json.tpl langsmith npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/ts/weather-agent/package.json.tpl langsmith npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/ts/weather-agent/package.json.tpl langsmith npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/ts/weather-agent/package.json.tpl langsmith npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/ts/weather-agent/package.json.tpl uuid npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/ts/custom-copilot-rag-custom-api/package.json.tpl adaptive-expressions candidate did not remove the vulnerability
templates/vsc/ts/custom-copilot-rag-custom-api/package.json.tpl fast-xml-parser candidate did not remove the vulnerability
templates/vsc/ts/custom-copilot-rag-custom-api/package.json.tpl uuid candidate did not remove the vulnerability
templates/vsc/ts/message-extension-v2/package.json.tpl @azure/msal-node candidate did not remove the vulnerability
templates/vsc/ts/message-extension-v2/package.json.tpl @microsoft/teams.apps no candidate version
templates/vsc/ts/message-extension-v2/package.json.tpl @microsoft/teams.dev no candidate version
templates/vsc/ts/message-extension-v2/package.json.tpl uuid npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @microsoft/teams.apps@2.0.15
npm error node_modules/@microsoft/teams.apps
npm error @microsoft/teams.apps@"^2.0.15" from the root project
npm error
npm error Could not resolve dependency:
npm error peer @microsoft/teams.apps@"2.0.12" from @microsoft/teams.dev@2.0.12
npm error node_modules/@microsoft/teams.dev
npm error @
templates/vsc/ts/office-addin-excel-cfshortcut/package.json.tpl @microsoft/kiota candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-cfshortcut/package.json.tpl @microsoft/m365agentstoolkit-cli candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-cfshortcut/package.json.tpl @microsoft/teamsfx-core candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-cfshortcut/package.json.tpl adm-zip candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-cfshortcut/package.json.tpl office-addin-debugging candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-cfshortcut/package.json.tpl office-addin-dev-settings candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-cfshortcut/package.json.tpl office-addin-manifest candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-cfshortcut/package.json.tpl office-addin-project candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-cfshortcut/package.json.tpl office-addin-usage-data candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-cfshortcut/package.json.tpl uuid candidate did not remove the vulnerability
templates/vsc/ts/graph-connector/package.json.tpl @azure/ms-rest-js candidate did not remove the vulnerability
templates/vsc/ts/graph-connector/package.json.tpl @opentelemetry/core candidate did not remove the vulnerability
templates/vsc/ts/graph-connector/package.json.tpl @opentelemetry/resources candidate did not remove the vulnerability
templates/vsc/ts/graph-connector/package.json.tpl @opentelemetry/sdk-trace-base candidate did not remove the vulnerability
templates/vsc/ts/graph-connector/package.json.tpl applicationinsights candidate did not remove the vulnerability
templates/vsc/ts/graph-connector/package.json.tpl azurite candidate did not remove the vulnerability
templates/vsc/ts/graph-connector/package.json.tpl brace-expansion candidate did not remove the vulnerability
templates/vsc/ts/graph-connector/package.json.tpl brace-expansion candidate did not remove the vulnerability
templates/vsc/ts/graph-connector/package.json.tpl brace-expansion candidate did not remove the vulnerability
templates/vsc/ts/graph-connector/package.json.tpl sequelize candidate did not remove the vulnerability
templates/vsc/ts/graph-connector/package.json.tpl uuid candidate did not remove the vulnerability
templates/vsc/ts/office-addin-sso-naa/package.json.tpl @microsoft/kiota candidate did not remove the vulnerability
templates/vsc/ts/office-addin-sso-naa/package.json.tpl @microsoft/m365agentstoolkit-cli candidate did not remove the vulnerability
templates/vsc/ts/office-addin-sso-naa/package.json.tpl @microsoft/teamsfx-core candidate did not remove the vulnerability
templates/vsc/ts/office-addin-sso-naa/package.json.tpl adm-zip candidate did not remove the vulnerability
templates/vsc/ts/office-addin-sso-naa/package.json.tpl office-addin-debugging candidate did not remove the vulnerability
templates/vsc/ts/office-addin-sso-naa/package.json.tpl office-addin-dev-settings candidate did not remove the vulnerability
templates/vsc/ts/office-addin-sso-naa/package.json.tpl office-addin-manifest candidate did not remove the vulnerability
templates/vsc/ts/office-addin-sso-naa/package.json.tpl office-addin-project candidate did not remove the vulnerability
templates/vsc/ts/office-addin-sso-naa/package.json.tpl office-addin-usage-data candidate did not remove the vulnerability
templates/vsc/ts/office-addin-sso-naa/package.json.tpl uuid candidate did not remove the vulnerability
templates/vsc/ts/office-addin-outlook-taskpane/package.json.tpl @microsoft/kiota candidate did not remove the vulnerability
templates/vsc/ts/office-addin-outlook-taskpane/package.json.tpl @microsoft/m365agentstoolkit-cli candidate did not remove the vulnerability
templates/vsc/ts/office-addin-outlook-taskpane/package.json.tpl @microsoft/teamsfx-core candidate did not remove the vulnerability
templates/vsc/ts/office-addin-outlook-taskpane/package.json.tpl adm-zip candidate did not remove the vulnerability
templates/vsc/ts/office-addin-outlook-taskpane/package.json.tpl office-addin-debugging candidate did not remove the vulnerability
templates/vsc/ts/office-addin-outlook-taskpane/package.json.tpl office-addin-dev-settings candidate did not remove the vulnerability
templates/vsc/ts/office-addin-outlook-taskpane/package.json.tpl office-addin-manifest candidate did not remove the vulnerability
templates/vsc/ts/office-addin-outlook-taskpane/package.json.tpl office-addin-project candidate did not remove the vulnerability
templates/vsc/ts/office-addin-outlook-taskpane/package.json.tpl office-addin-usage-data candidate did not remove the vulnerability
templates/vsc/ts/office-addin-outlook-taskpane/package.json.tpl uuid candidate did not remove the vulnerability
templates/vsc/ts/teams-collaborator-agent/package.json.tpl @azure/msal-node candidate did not remove the vulnerability
templates/vsc/ts/teams-collaborator-agent/package.json.tpl @microsoft/teams.apps npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @microsoft/teams.api@2.0.12
npm error node_modules/@microsoft/teams.api
npm error @microsoft/teams.api@"2.0.12" from the root project
npm error
npm error Could not resolve dependency:
npm error peer @microsoft/teams.api@"2.0.2" from @microsoft/teams.apps@2.0.2
npm error node_modules/@microsoft/teams.apps
npm error Micro (@micro)
templates/vsc/ts/teams-collaborator-agent/package.json.tpl @microsoft/teams.dev npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @microsoft/teams.api@2.0.12
npm error node_modules/@microsoft/teams.api
npm error @microsoft/teams.api@"2.0.12" from the root project
npm error
npm error Could not resolve dependency:
npm error peer @microsoft/teams.api@"2.0.2" from @microsoft/teams.dev@2.0.2
npm error node_modules/@microsoft/teams.dev
npm error gotica (@microso)
templates/vsc/ts/teams-collaborator-agent/package.json.tpl esbuild candidate did not remove the vulnerability
templates/vsc/ts/teams-collaborator-agent/package.json.tpl uuid npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @microsoft/teams.apps@2.0.15
npm error node_modules/@microsoft/teams.apps
npm error @microsoft/teams.apps@"2.0.15" from the root project
npm error
npm error Could not resolve dependency:
npm error peer @microsoft/teams.apps@"2.0.12" from @microsoft/teams.dev@2.0.12
npm error node_modules/@microsoft/teams.dev
npm error Matt Mullenweg (@m)
templates/vsc/ts/office-addin-wxpo-taskpane/package.json.tpl @microsoft/kiota candidate did not remove the vulnerability
templates/vsc/ts/office-addin-wxpo-taskpane/package.json.tpl @microsoft/m365agentstoolkit-cli candidate did not remove the vulnerability
templates/vsc/ts/office-addin-wxpo-taskpane/package.json.tpl @microsoft/teamsfx-core candidate did not remove the vulnerability
templates/vsc/ts/office-addin-wxpo-taskpane/package.json.tpl adm-zip candidate did not remove the vulnerability
templates/vsc/ts/office-addin-wxpo-taskpane/package.json.tpl office-addin-debugging candidate did not remove the vulnerability
templates/vsc/ts/office-addin-wxpo-taskpane/package.json.tpl office-addin-dev-settings candidate did not remove the vulnerability
templates/vsc/ts/office-addin-wxpo-taskpane/package.json.tpl office-addin-manifest candidate did not remove the vulnerability
templates/vsc/ts/office-addin-wxpo-taskpane/package.json.tpl office-addin-project candidate did not remove the vulnerability
templates/vsc/ts/office-addin-wxpo-taskpane/package.json.tpl office-addin-usage-data candidate did not remove the vulnerability
templates/vsc/ts/office-addin-wxpo-taskpane/package.json.tpl uuid candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-customfunctions/package.json.tpl @microsoft/kiota candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-customfunctions/package.json.tpl @microsoft/m365agentstoolkit-cli candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-customfunctions/package.json.tpl @microsoft/teamsfx-core candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-customfunctions/package.json.tpl adm-zip candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-customfunctions/package.json.tpl office-addin-debugging candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-customfunctions/package.json.tpl office-addin-dev-settings candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-customfunctions/package.json.tpl office-addin-manifest candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-customfunctions/package.json.tpl office-addin-project candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-customfunctions/package.json.tpl office-addin-usage-data candidate did not remove the vulnerability
templates/vsc/ts/office-addin-excel-customfunctions/package.json.tpl uuid candidate did not remove the vulnerability
templates/vsc/ts/basic-tab/package.json.tpl @azure/msal-node npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@0.1.0
npm error Found: @microsoft/teams.apps@2.0.15
npm error node_modules/@microsoft/teams.apps
npm error @microsoft/teams.apps@"^2.0.15" from the root project
npm error
npm error Could not resolve dependency:
npm error peer @microsoft/teams.apps@"2.0.12" from @microsoft/teams.dev@2.0.12
npm error node_modules/@microsoft/teams.dev
npm error @
templates/vsc/ts/basic-tab/package.json.tpl @microsoft/teams.apps no candidate version
templates/vsc/ts/basic-tab/package.json.tpl @microsoft/teams.dev no candidate version
templates/vsc/ts/basic-tab/package.json.tpl esbuild candidate did not remove the vulnerability
templates/vsc/ts/basic-tab/package.json.tpl uuid npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@0.1.0
npm error Found: @microsoft/teams.apps@2.0.15
npm error node_modules/@microsoft/teams.apps
npm error @microsoft/teams.apps@"^2.0.15" from the root project
npm error
npm error Could not resolve dependency:
npm error peer @microsoft/teams.apps@"2.0.12" from @microsoft/teams.dev@2.0.12
npm error node_modules/@microsoft/teams.dev
npm error @
templates/vsc/js/weather-agent/package.json.tpl @langchain/core npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/js/weather-agent/package.json.tpl @langchain/langgraph npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/js/weather-agent/package.json.tpl @langchain/langgraph-checkpoint npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/js/weather-agent/package.json.tpl @langchain/langgraph-sdk npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/js/weather-agent/package.json.tpl @langchain/openai npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@0.3.80
npm error node_modules/@langchain/core
npm error peer @langchain/core@">=0.2.36 <0.3.0 >=0.3.40 < 0.4.0" from @langchain/langgraph@0.2.74
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^0.2.66" from the root project
npm error
npm error Could not resolve dependency:
npm error Adar Butel (@LA)
templates/vsc/js/weather-agent/package.json.tpl langsmith npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/js/weather-agent/package.json.tpl langsmith npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/js/weather-agent/package.json.tpl langsmith npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/js/weather-agent/package.json.tpl langsmith npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/js/weather-agent/package.json.tpl uuid npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: placeholder-safeprojectnamelowercase@1.0.0
npm error Found: @langchain/core@1.2.5
npm error node_modules/@langchain/core
npm error peer @langchain/core@"^1.1.48" from @langchain/langgraph@1.4.9
npm error node_modules/@langchain/langgraph
npm error @langchain/langgraph@"^1.4.9" from the root project
npm error
npm error Could not resolve dependency:
npm error @langchain/openai@"^0.5.6" from th
templates/vsc/js/custom-copilot-rag-custom-api/package.json.tpl adaptive-expressions candidate did not remove the vulnerability
templates/vsc/js/custom-copilot-rag-custom-api/package.json.tpl fast-xml-parser candidate did not remove the vulnerability
templates/vsc/js/custom-copilot-rag-custom-api/package.json.tpl uuid candidate did not remove the vulnerability
templates/vs/csharp/non-sso-tab-ssr/{{ProjectName}}.csproj.tpl Microsoft.Kiota.Abstractions transitive dependency; cannot fix by editing the project file
templates/vs/csharp/foundry-proxy-agent/{{ProjectName}}.csproj.tpl Microsoft.Bcl.Memory transitive dependency; cannot fix by editing the project file
templates/vs/csharp/teams-collaborator-agent/{{ProjectName}}.csproj.tpl SQLitePCLRaw.lib.e_sqlite3 transitive dependency; cannot fix by editing the project file
templates/vs/csharp/custom-copilot-travel-agent/{{ProjectName}}.csproj.tpl Microsoft.Kiota.Abstractions transitive dependency; cannot fix by editing the project file

Operational errors (0)

None.

@github-actions

github-actions Bot commented Jul 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

❌ VscUse Test Plan — Tests failure

Why these tests: All changed files are in templates/vsc/ts/ for office-addin and declarative-agent templates (trivial security/dependency bumps); these are not VS Code extension templates with dedicated plans, so a single smoke plan is returned as a basic sanity check.

Branch diff: auto-fix-vuln/rolling → dev

Results: ✅ 0 passed · ❌ 1 failed (of 1 plans)

Plans run:

  • Basic_Custom_Engine_Azure_OpenAI_ts_Copilot_Remote_Debug
Step Status
1️⃣ Build VSIX (CD) ✅ Done
2️⃣ Build Docker image ✅ Done
3️⃣ Run UI tests ❌ Tests failure (0/1 passed)

🎯 Actual UI test run
🔗 Full pipeline results
📊 Detailed test report

ℹ️ How were these tests selected?

GitHub Copilot (Claude Sonnet 4.6, high reasoning) analysed the PR title, description, and the diff between
auto-fix-vuln/rolling and dev
to pick the most relevant test plans from packages/tests/vscuse/Index.md.

@github-actions

github-actions Bot commented Jul 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

E2E Test Selection — AI Selected

Why these tests: AI selection failed — will fall back to all cases

Cases selected (60):

  • ./teamsApp/basicBot.tests.ts
  • ./teamsApp/basicMessageExtension.tests.ts
  • ./teamsApp/basicTab.tests.ts
  • ./teamsAgent/DebugCustomCopilotBasicBot.tests.ts
  • ./teamsAgent/teamsCollaboratorAgent.tests.ts
  • ./teamsAgent/DebugCustomCopilotRagAiSearchBot.tests.ts
  • ./teamsAgent/DebugCustomCopilotRagBasicBot.tests.ts
  • ./declarativeAgent/DeclarativeAgentWithEntra.tests.ts
  • ./declarativeAgent/DeclarativeAgentInvalidManifestShape.tests.ts
  • ./declarativeAgent/mcp/DeclarativeAgentMCPNoAuth.tests.ts
  • ./declarativeAgent/mcp/DeclarativeAgentMCPAuthEdgeCases.tests.ts
  • ./declarativeAgent/mcp/DeclarativeAgentMCPWithAuth.tests.ts
  • ./declarativeAgent/DeclarativeAgentBasic.tests.ts
  • ./declarativeAgent/typespec/typespec.withoutAction.tests.ts
  • ./declarativeAgent/typespec/typespec.withAction.tests.ts
  • ./declarativeAgent/addKnowledge/AddWebSearchByUrl.tests.ts
  • ./declarativeAgent/addKnowledge/AddWebSearchByAll.tests.ts
  • ./declarativeAgent/DeclarativeAgentWithApiKeyAuth.tests.ts
  • ./declarativeAgent/DeclarativeAgentWithOAuth.tests.ts
  • ./declarativeAgent/DeclarativeAgentWithNoneAuth.tests.ts
  • ./declarativeAgent/RopcRegionLifecycle.tests.ts
  • ./vs/FoundryProxyAgent.dotnet.tests.ts
  • ./vs/TeamsCollaboratorAgent.dotnet.tests.ts
  • ./vs/BasicTabHappyPath.dotnet.tests.ts
  • ./vs/EchoBotHappyPath.dotnet.tests.ts
  • ./samples/ProvisionReactRetailDashboard.tests.ts
  • ./samples/ProvisionProxyAgentNodeJS.tests.ts
  • ./samples/ProvisionAdaptiveCard.tests.ts
  • ./samples/ProvisionQueryOrg.tests.ts
  • ./samples/ProvisionTabOutlookAddin.tests.ts
  • ./samples/ProvisionTodoListBackend.tests.ts
  • ./samples/ProvisionTodoListM365.tests.ts
  • ./samples/ProvisionTeamDashboard.tests.ts
  • ./samples/ProvisionMyFirstMeeting.tests.ts
  • ./samples/ProvisionTabDocker.tests.ts
  • ./samples/ProvisionProactiveMessage.tests.ts
  • ./samples/ProvisionContactExporter.tests.ts
  • ./samples/ProvisionTodoListSpfx.tests.ts
  • ./samples/ProvisionDeveloperDashboard.tests.ts
  • ./samples/ProvisionCoffeeAgent.tests.ts
  • ./samples/ProvisionStockUpdate.tests.ts
  • ./samples/ProvisionShareNow.tests.ts
  • ./samples/ProvisionHelloWorldTabBackEnd.tests.ts
  • ./samples/ProvisionTabSSOApimProxy.tests.ts
  • ./samples/ProvisionCopilotConnector.tests.ts
  • ./samples/ProvisionLargeScaleNotiBot.tests.ts
  • ./samples/ProvisionSignatureOutlook.tests.ts
  • ./samples/ProvisionIncomingWebhook.tests.ts
  • ./samples/ProvisionDataAnalystAgentV2.tests.ts
  • ./samples/ProvisionDiceRoller.tests.ts
  • ./samples/ProvisionOneProductivityHub.tests.ts
  • ./samples/ProvisionBotSSO.tests.ts
  • ./samples/ProvisionBotSSODocker.tests.ts
  • ./feature/helpInfo.tests.ts
  • ./feature/OpenV5ProjectByCli1.2.5.tests.ts
  • ./feature/mosApi/sideloading.tests.ts
  • ./feature/jsonFormatAndMultipleDeployment.tests.ts
  • ./feature/Permission.tests.ts
  • ./feature/accountCommand.tests.ts
  • ./feature/multienv.tests.ts

View pipeline run

Need to run more tests?

Comment on this PR:

  • /e2e-run ./path/to/test.tests.ts — add specific cases to AI selection
  • /e2e-run-all — run all e2e cases

Then re-run the workflow.

@codecov

codecov Bot commented Jul 25, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.94%. Comparing base (7d8ba7a) to head (9439a10).

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##              dev   #16455   +/-   ##
=======================================
  Coverage   87.94%   87.94%           
=======================================
  Files         650      650           
  Lines       34379    34379           
  Branches     8148     8148           
=======================================
  Hits        30235    30235           
  Misses       2314     2314           
  Partials     1830     1830
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions

github-actions Bot commented Jul 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

❌ VscUse Test Plan — Tests failure

Why these tests: Changed files are mostly office-addin and one declarative-agent template under templates/vsc/ts/ — these are trivial dependency/vulnerability fixes, so 2 smoke plans suffice: one for the declarative-agent-with-action template and one general sanity check.

Branch diff: auto-fix-vuln/rolling → dev

Results: ✅ 0 passed · ❌ 2 failed (of 2 plans)

Plans run:

  • Basic_Custom_Engine_Azure_OpenAI_ts_Copilot_Remote_Debug
  • DA_None_ts_Remote_Debug
Step Status
1️⃣ Build VSIX (CD) ✅ Done
2️⃣ Build Docker image ✅ Done
3️⃣ Run UI tests ❌ Tests failure (0/2 passed)

🎯 Actual UI test run
🔗 Full pipeline results
📊 Detailed test report

ℹ️ How were these tests selected?

GitHub Copilot (Claude Sonnet 4.6, high reasoning) analysed the PR title, description, and the diff between
auto-fix-vuln/rolling and dev
to pick the most relevant test plans from packages/tests/vscuse/Index.md.

@github-actions

github-actions Bot commented Aug 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

❌ VscUse Test Plan — Tests failure

Why these tests: All changed files are trivial package.json.tpl vulnerability fixes in office-addin and declarative-agent templates (no functional code changes), so only 1 smoke plan is needed as a basic sanity check.

Branch diff: auto-fix-vuln/rolling → dev

Results: ✅ 0 passed · ❌ 1 failed (of 1 plans)

Plans run:

  • Basic_Custom_Engine_Azure_OpenAI_ts_Copilot_Remote_Debug
Step Status
1️⃣ Build VSIX (CD) ✅ Done
2️⃣ Build Docker image ✅ Done
3️⃣ Run UI tests ❌ Tests failure (0/1 passed)

🎯 Actual UI test run
🔗 Full pipeline results
📊 Detailed test report

ℹ️ How were these tests selected?

GitHub Copilot (Claude Sonnet 4.6, high reasoning) analysed the PR title, description, and the diff between
auto-fix-vuln/rolling and dev
to pick the most relevant test plans from packages/tests/vscuse/Index.md.

@github-actions

github-actions Bot commented Aug 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

✅ VscUse Test Plan — All tests passed

Why these tests: One changed file is the declarative-agent-with-action-from-scratch-oauth template (maps to DA_Oauth_ts_Remote_Debug); the remaining changes are office-addin package.json version bumps with no matching VscUse plans, so a single smoke plan is added as a basic sanity check.

Branch diff: auto-fix-vuln/rolling → dev

Results: ✅ 2 passed · ❌ 0 failed (of 2 plans)

Plans run:

  • DA_Oauth_ts_Remote_Debug
  • Basic_Custom_Engine_Azure_OpenAI_ts_Copilot_Remote_Debug
Step Status
1️⃣ Build VSIX (CD) ✅ Done
2️⃣ Build Docker image ✅ Done
3️⃣ Run UI tests ✅ All tests passed (2/2 passed)

🎯 Actual UI test run
🔗 Full pipeline results
📊 Detailed test report

ℹ️ How were these tests selected?

GitHub Copilot (Claude Sonnet 4.6, high reasoning) analysed the PR title, description, and the diff between
auto-fix-vuln/rolling and dev
to pick the most relevant test plans from packages/tests/vscuse/Index.md.

@github-actions

github-actions Bot commented Aug 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

✅ VscUse Test Plan — All tests passed

Why these tests: AI selection unavailable (source=smoke-fallback); using smoke test cases as fallback.

Branch diff: auto-fix-vuln/rolling → dev

Results: ✅ 5 passed · ❌ 0 failed (of 5 plans)

Plans run:

  • Basic_Custom_Engine_Azure_OpenAI_ts_Copilot_Remote_Debug
  • General_Teams_Agent_OpenAI_py_Remote_Debug
  • Message_extension_ts_remote_debug
  • DA_Oauth_js_Remote_Debug
  • Teams_Agent_With_Data_AI_Search_Azure_OpenAI_ts_Remote_Debug
Step Status
1️⃣ Build VSIX (CD) ✅ Done
2️⃣ Build Docker image ✅ Done
3️⃣ Run UI tests ✅ All tests passed (5/5 passed)

🎯 Actual UI test run
🔗 Full pipeline results
📊 Detailed test report

ℹ️ How were these tests selected?

GitHub Copilot (Claude Sonnet 4.6, high reasoning) analysed the PR title, description, and the diff between
auto-fix-vuln/rolling and dev
to pick the most relevant test plans from packages/tests/vscuse/Index.md.

@github-actions

github-actions Bot commented Aug 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

❌ VscUse Test Plan — Tests failure

Why these tests: AI selection unavailable (source=smoke-fallback); using smoke test cases as fallback.

Branch diff: auto-fix-vuln/rolling → dev

Results: ✅ 4 passed · ❌ 1 failed (of 5 plans)

Plans run:

  • Basic_Custom_Engine_Azure_OpenAI_ts_Copilot_Remote_Debug
  • General_Teams_Agent_OpenAI_py_Remote_Debug
  • Message_extension_ts_remote_debug
  • DA_Oauth_js_Remote_Debug
  • Teams_Agent_With_Data_AI_Search_Azure_OpenAI_ts_Remote_Debug
Step Status
1️⃣ Build VSIX (CD) ✅ Done
2️⃣ Build Docker image ✅ Done
3️⃣ Run UI tests ❌ Tests failure (4/5 passed)

🎯 Actual UI test run
🔗 Full pipeline results
📊 Detailed test report

ℹ️ How were these tests selected?

GitHub Copilot (Claude Sonnet 4.6, high reasoning) analysed the PR title, description, and the diff between
auto-fix-vuln/rolling and dev
to pick the most relevant test plans from packages/tests/vscuse/Index.md.

@github-actions

github-actions Bot commented Aug 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

❌ VscUse Test Plan — Tests failure

Why these tests: AI selection unavailable (source=smoke-fallback); using smoke test cases as fallback.

Branch diff: auto-fix-vuln/rolling → dev

Results: ✅ 2 passed · ❌ 3 failed (of 5 plans)

Plans run:

  • Basic_Custom_Engine_Azure_OpenAI_ts_Copilot_Remote_Debug
  • General_Teams_Agent_OpenAI_py_Remote_Debug
  • Message_extension_ts_remote_debug
  • DA_Oauth_js_Remote_Debug
  • Teams_Agent_With_Data_AI_Search_Azure_OpenAI_ts_Remote_Debug
Step Status
1️⃣ Build VSIX (CD) ✅ Done
2️⃣ Build Docker image ✅ Done
3️⃣ Run UI tests ❌ Tests failure (2/5 passed)

🎯 Actual UI test run
🔗 Full pipeline results
📊 Detailed test report

ℹ️ How were these tests selected?

GitHub Copilot (Claude Sonnet 4.6, high reasoning) analysed the PR title, description, and the diff between
auto-fix-vuln/rolling and dev
to pick the most relevant test plans from packages/tests/vscuse/Index.md.

@github-actions

github-actions Bot commented Aug 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

❌ VscUse Test Plan — Tests failure

Why these tests: The TypeScript declarative-agent OAuth template dependency changed, while the Office add-in package updates lack dedicated plans, so one targeted DA plan and one smoke plan are selected.

Branch diff: auto-fix-vuln/rolling → dev

Results: ✅ 1 passed · ❌ 1 failed (of 2 plans)

Plans run:

  • DA_Oauth_ts_Remote_Debug
  • Basic_Custom_Engine_Azure_OpenAI_ts_Copilot_Remote_Debug
Step Status
1️⃣ Build VSIX (CD) ✅ Done
2️⃣ Build Docker image ✅ Done
3️⃣ Run UI tests ❌ Tests failure (1/2 passed)

🎯 Actual UI test run
🔗 Full pipeline results
📊 Detailed test report

ℹ️ How were these tests selected?

GitHub Copilot (GPT-5.6-sol, high reasoning) analysed the PR title, description, and the diff between
auto-fix-vuln/rolling and dev
to pick the most relevant test plans from packages/tests/vscuse/Index.md.

@microsoft-github-policy-service

microsoft-github-policy-service Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

@teamstoolkitworkflowapp[bot] please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.

@microsoft-github-policy-service agree [company="{your company}"]

Options:

  • (default - no company specified) I have sole ownership of intellectual property rights to my Submissions and I am not making Submissions in the course of work for my employer.
@microsoft-github-policy-service agree
  • (when company given) I am making Submissions in the course of work for my employer (or my employer has intellectual property rights in my Submissions by contract or applicable law). I have permission from my employer to make Submissions and enter into this Agreement on behalf of my employer. By signing below, the defined term “You” includes me and my employer.
@microsoft-github-policy-service agree company="Microsoft"
Contributor License Agreement

Contribution License Agreement

This Contribution License Agreement (“Agreement”) is agreed to by the party signing below (“You”),
and conveys certain license rights to Microsoft Corporation and its affiliates (“Microsoft”) for Your
contributions to Microsoft open source projects. This Agreement is effective as of the latest signature
date below.

  1. Definitions.
    “Code” means the computer software code, whether in human-readable or machine-executable form,
    that is delivered by You to Microsoft under this Agreement.
    “Project” means any of the projects owned or managed by Microsoft and offered under a license
    approved by the Open Source Initiative (www.opensource.org).
    “Submit” is the act of uploading, submitting, transmitting, or distributing code or other content to any
    Project, including but not limited to communication on electronic mailing lists, source code control
    systems, and issue tracking systems that are managed by, or on behalf of, the Project for the purpose of
    discussing and improving that Project, but excluding communication that is conspicuously marked or
    otherwise designated in writing by You as “Not a Submission.”
    “Submission” means the Code and any other copyrightable material Submitted by You, including any
    associated comments and documentation.
  2. Your Submission. You must agree to the terms of this Agreement before making a Submission to any
    Project. This Agreement covers any and all Submissions that You, now or in the future (except as
    described in Section 4 below), Submit to any Project.
  3. Originality of Work. You represent that each of Your Submissions is entirely Your original work.
    Should You wish to Submit materials that are not Your original work, You may Submit them separately
    to the Project if You (a) retain all copyright and license information that was in the materials as You
    received them, (b) in the description accompanying Your Submission, include the phrase “Submission
    containing materials of a third party:” followed by the names of the third party and any licenses or other
    restrictions of which You are aware, and (c) follow any other instructions in the Project’s written
    guidelines concerning Submissions.
  4. Your Employer. References to “employer” in this Agreement include Your employer or anyone else
    for whom You are acting in making Your Submission, e.g. as a contractor, vendor, or agent. If Your
    Submission is made in the course of Your work for an employer or Your employer has intellectual
    property rights in Your Submission by contract or applicable law, You must secure permission from Your
    employer to make the Submission before signing this Agreement. In that case, the term “You” in this
    Agreement will refer to You and the employer collectively. If You change employers in the future and
    desire to Submit additional Submissions for the new employer, then You agree to sign a new Agreement
    and secure permission from the new employer before Submitting those Submissions.
  5. Licenses.
  • Copyright License. You grant Microsoft, and those who receive the Submission directly or
    indirectly from Microsoft, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license in the
    Submission to reproduce, prepare derivative works of, publicly display, publicly perform, and distribute
    the Submission and such derivative works, and to sublicense any or all of the foregoing rights to third
    parties.
  • Patent License. You grant Microsoft, and those who receive the Submission directly or
    indirectly from Microsoft, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license under
    Your patent claims that are necessarily infringed by the Submission or the combination of the
    Submission with the Project to which it was Submitted to make, have made, use, offer to sell, sell and
    import or otherwise dispose of the Submission alone or with the Project.
  • Other Rights Reserved. Each party reserves all rights not expressly granted in this Agreement.
    No additional licenses or rights whatsoever (including, without limitation, any implied licenses) are
    granted by implication, exhaustion, estoppel or otherwise.
  1. Representations and Warranties. You represent that You are legally entitled to grant the above
    licenses. You represent that each of Your Submissions is entirely Your original work (except as You may
    have disclosed under Section 3). You represent that You have secured permission from Your employer to
    make the Submission in cases where Your Submission is made in the course of Your work for Your
    employer or Your employer has intellectual property rights in Your Submission by contract or applicable
    law. If You are signing this Agreement on behalf of Your employer, You represent and warrant that You
    have the necessary authority to bind the listed employer to the obligations contained in this Agreement.
    You are not expected to provide support for Your Submission, unless You choose to do so. UNLESS
    REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING, AND EXCEPT FOR THE WARRANTIES
    EXPRESSLY STATED IN SECTIONS 3, 4, AND 6, THE SUBMISSION PROVIDED UNDER THIS AGREEMENT IS
    PROVIDED WITHOUT WARRANTY OF ANY KIND, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY OF
    NONINFRINGEMENT, MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE.
  2. Notice to Microsoft. You agree to notify Microsoft in writing of any facts or circumstances of which
    You later become aware that would make Your representations in this Agreement inaccurate in any
    respect.
  3. Information about Submissions. You agree that contributions to Projects and information about
    contributions may be maintained indefinitely and disclosed publicly, including Your name and other
    information that You submit with Your Submission.
  4. Governing Law/Jurisdiction. This Agreement is governed by the laws of the State of Washington, and
    the parties consent to exclusive jurisdiction and venue in the federal courts sitting in King County,
    Washington, unless no federal subject matter jurisdiction exists, in which case the parties consent to
    exclusive jurisdiction and venue in the Superior Court of King County, Washington. The parties waive all
    defenses of lack of personal jurisdiction and forum non-conveniens.
  5. Entire Agreement/Assignment. This Agreement is the entire agreement between the parties, and
    supersedes any and all prior agreements, understandings or communications, written or oral, between
    the parties relating to the subject matter hereof. This Agreement may be assigned by Microsoft.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@wh-alice Alice Wang (wh-alice) Awaiting requested review from wh-alice wh-alice is a code owner
@qinzhouxu Qinzhou Xu (qinzhouxu) Awaiting requested review from qinzhouxu qinzhouxu is a code owner
@tecton Ning Tang (tecton) Awaiting requested review from tecton tecton is a code owner
@Sherylueen Sherylueen (Sherylueen) Awaiting requested review from Sherylueen Sherylueen is a code owner
@Alive-Fish Alive-Fish Awaiting requested review from Alive-Fish Alive-Fish is a code owner
@HuihuiWu-Microsoft HuihuiWu-Microsoft Awaiting requested review from HuihuiWu-Microsoft HuihuiWu-Microsoft is a code owner
@yuqizhou77 Yuqi Zhou (yuqizhou77) Awaiting requested review from yuqizhou77 yuqizhou77 is a code owner
@qinqingxu qinqingxu Awaiting requested review from qinqingxu qinqingxu is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants