-
Notifications
You must be signed in to change notification settings - Fork 221
Use @azure-tools/cspell for spelling pin package name #12734
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR updates the cspell package configuration to align with best practices for dependency management. The changes rename the package, mark it as private, and pin the cspell dependency to an exact version.
Key Changes:
- Package renamed from "cspell-version-pin" to "@azure-tools/cspell" with scoped naming
- Package marked as private to prevent accidental publication
- cspell dependency version changed from caret range (^9.2.1) to exact version (9.2.1)
|
The following pipelines have been queued for testing: |
|
The following pipelines have been queued for testing: |
The name
cspell-version-pinwas used to deliver malware (GHSA-pxjc-7552-fh9c). This uses a namespace over which we have control.