-
Notifications
You must be signed in to change notification settings - Fork 227
Use @azure-tools/cspell for spelling pin package name #12734
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR updates the cspell package configuration to align with best practices for dependency management. The changes rename the package, mark it as private, and pin the cspell dependency to an exact version.
Key Changes:
- Package renamed from "cspell-version-pin" to "@azure-tools/cspell" with scoped naming
- Package marked as private to prevent accidental publication
- cspell dependency version changed from caret range (^9.2.1) to exact version (9.2.1)
|
The following pipelines have been queued for testing: |
|
The following pipelines have been queued for testing: |
|
Hi @danieljurek. Thank you for your interest in helping to improve the Azure SDK experience and for your contribution. We've noticed that there hasn't been recent engagement on this pull request. If this is still an active work stream, please let us know by pushing some changes or leaving a comment. Otherwise, we'll close this out in 7 days. |
The name
cspell-version-pinwas used to deliver malware (GHSA-pxjc-7552-fh9c). This uses a namespace over which we have control.