Skip to content

[pull] master from microsoft:master - #87

Merged
pull[bot] merged 2 commits into
ConnectionMaster:masterfrom
microsoft:master
Nov 13, 2025
Merged

pull[bot] merged 2 commits into
ConnectionMaster:masterfrom
microsoft:master

Conversation

@pull

@pull pull Bot commented Nov 13, 2025 •

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

jwunderl and others added 2 commits November 12, 2025 16:18
* pass 1

* axios, request

* gulp, cssnano, mocha

* bump dompurify

* gulp5 breaking change, need to explicitly output after merge, as streams close immediately

* sanitize html

* pin terser ver to clear uglifyify vuln

* clear smoothie vuln

* remove gulp-header; lodash vuln tagged in way that makes it unpinnable, and implementation is small

* sanitize-html seems useless when we have dompurify and use it elsewhere for same thing

* update marked (pxtlib/webapp portions mostly from codex, review)

* fix error on pxt serve

* attempt to fix gulp travis?

* cull remaining uglify, fix test failure

* Clean up multiple tags as well

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* remove legacy az media support

* fix spacing typo

* update smoothie.js

* add back in sanitize-html

* fix code blocks

* restore summary parsing

* docs fixed but need to clean up

* marked -> 17

* partially back to clean, next to figure out docsrender w/o restoreCodeLanguageClassesFromTokens

* fix cli server issue without mangling webapp logic

* clean up other attempts at fixes

---------

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Improves accessibility of page as focus is no longer lost to the
document body.

Co-authored-by: Richard Knoll <riknoll@users.noreply.github.com>
@pull pull Bot locked and limited conversation to collaborators Nov 13, 2025
@pull pull Bot added the ⤵️ pull label Nov 13, 2025
@pull
pull Bot merged commit aba285b into ConnectionMaster:master Nov 13, 2025
1 check passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants