chore(deps): update gRPC across azd core and extensions by vhvb1989 · Pull Request #9934 · Azure/azure-dev

Victor Vazquez (vhvb1989) · 2026-09-09T20:05:31Z

Stack

Depends on fix(extensions): initialize streams before startup #9987, which fixes the pre-existing extension startup initialization race exposed by CI.
This PR contains only the synchronized dependency, scaffold, and extension-labeler changes on top of that fix.

Summary

update google.golang.org/grpc from v1.83.1 to v1.83.2 in azd core and all 14 affected first-party extensions
update the generated Go extension scaffold to use the patched dependency set
keep shared direct dependency versions synchronized with the azd core source of truth
update transitive golang.org/x/* dependencies selected by the patched gRPC release
raise the extension PR labeler bound so repository-wide extension updates can apply all matching labels
resolve the 15 open Dependabot alerts for GHSA-2v4p-qf9q-27wj

This replaces #9917, #9918, and #9930, which update individual modules and fail the repository dependency synchronization check.

Fixes #9935

Validation

go build ./... in azd core and all 14 affected extension modules
mage checkDependencyVersions
Go scaffold resource tests and module checksum verification

github-actions · 2026-09-09T20:06:35Z

📋 Prioritization Note

Thanks for the contribution! The linked issue isn't in the current milestone yet.
Thank you for logging this issue; our team is reviewing it. If you need urgent prioritization, tag Rick Winter (@RickWinter) and Kristen Womack (@kristenwomack) to let us know.

azure-pipelines · 2026-09-09T20:07:36Z

Azure Pipelines: Successfully started running 16 pipeline(s). 6 pipeline(s) were filtered out due to trigger conditions. There may be pipelines that require an authorized user to comment /azp run to run.

Copilot

🟡 Changes recommended

The generated Go extension scaffold still pins the vulnerable gRPC v1.83.1 release.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Updates gRPC to v1.83.2 across azd core and 14 extensions to address GHSA-2v4p-qf9q-27wj.

Changes:

Upgrades gRPC and synchronized golang.org/x/* dependencies.
Regenerates module checksums.
Leaves the Go extension scaffold on vulnerable gRPC v1.83.1.

File summaries

File	Description
`cli/azd/go.mod`	Updates core dependencies.
`cli/azd/go.sum`	Updates core checksums.
`cli/azd/extensions/microsoft.azd.concurx/go.mod`	Updates extension dependencies.
`cli/azd/extensions/microsoft.azd.concurx/go.sum`	Updates extension checksums.
`cli/azd/extensions/azure.coding-agent/go.mod`	Updates extension dependencies.
`cli/azd/extensions/azure.coding-agent/go.sum`	Updates extension checksums.
`cli/azd/extensions/azure.appservice/go.mod`	Updates extension dependencies.
`cli/azd/extensions/azure.appservice/go.sum`	Updates extension checksums.
`cli/azd/extensions/azure.ai.training/go.mod`	Updates extension dependencies.
`cli/azd/extensions/azure.ai.training/go.sum`	Updates extension checksums.
`cli/azd/extensions/azure.ai.toolboxes/go.mod`	Updates extension dependencies.
`cli/azd/extensions/azure.ai.toolboxes/go.sum`	Updates extension checksums.
`cli/azd/extensions/azure.ai.skills/go.mod`	Updates extension dependencies.
`cli/azd/extensions/azure.ai.skills/go.sum`	Updates extension checksums.
`cli/azd/extensions/azure.ai.routines/go.mod`	Updates extension dependencies.
`cli/azd/extensions/azure.ai.routines/go.sum`	Updates extension checksums.
`cli/azd/extensions/azure.ai.rle/go.mod`	Updates extension dependencies.
`cli/azd/extensions/azure.ai.rle/go.sum`	Updates extension checksums.
`cli/azd/extensions/azure.ai.projects/go.mod`	Updates extension dependencies.
`cli/azd/extensions/azure.ai.projects/go.sum`	Updates extension checksums.
`cli/azd/extensions/azure.ai.models/go.mod`	Updates extension dependencies.
`cli/azd/extensions/azure.ai.models/go.sum`	Updates extension checksums.
`cli/azd/extensions/azure.ai.inspector/go.mod`	Updates extension dependencies.
`cli/azd/extensions/azure.ai.inspector/go.sum`	Updates extension checksums.
`cli/azd/extensions/azure.ai.finetune/go.mod`	Updates extension dependencies.
`cli/azd/extensions/azure.ai.finetune/go.sum`	Updates extension checksums.
`cli/azd/extensions/azure.ai.connections/go.mod`	Updates extension dependencies.
`cli/azd/extensions/azure.ai.connections/go.sum`	Updates extension checksums.
`cli/azd/extensions/azure.ai.agents/go.mod`	Updates extension dependencies.
`cli/azd/extensions/azure.ai.agents/go.sum`	Updates extension checksums.

Review details

Files reviewed: 15/30 changed files
Comments generated: 1
Review effort level: Balanced

💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Copilot

🟡 Changes recommended

The unrelated extension startup concurrency change should be split out or documented and validated.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Review details

Files reviewed: 19/35 changed files
Comments generated: 1
Review effort level: Balanced

Update google.golang.org/grpc to v1.83.2 in azd core and every affected first-party extension so the shared dependency remains synchronized and the related security alerts are resolved. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Update the generated Go extension module template to use the patched gRPC release and its synchronized transitive dependencies. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 64b44c97-3679-442c-8e9f-e9eb3e67e797

Raise the extension PR labeler's bounded label output so repository-wide extension updates can apply all matching labels without failing safe-output processing. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 64b44c97-3679-442c-8e9f-e9eb3e67e797

azure-sdk-automation · 2026-09-11T00:05:10Z

azure.ai.finetune PR build

Note

This is an unsigned development build. Install it only if you trust this PR.

Install the extension:

azd ext install "https://azuresdkartifacts.z5.web.core.windows.net/azd/extensions/pr/9934/azure-ai-finetune.zip"

Version: 0.0.17-preview.pr.9934.6813107
Merge commit: 9e8b24e

azure-sdk-automation · 2026-09-11T00:06:17Z

azure.appservice PR build

Note

This is an unsigned development build. Install it only if you trust this PR.

Install the extension:

azd ext install "https://azuresdkartifacts.z5.web.core.windows.net/azd/extensions/pr/9934/azure-appservice.zip"

Version: 0.1.1-pr.9934.6813110
Merge commit: 9e8b24e

azure-sdk-automation · 2026-09-11T00:07:51Z

azure.ai.skills PR build

Note

This is an unsigned development build. Install it only if you trust this PR.

Install the extension:

azd ext install "https://azuresdkartifacts.z5.web.core.windows.net/azd/extensions/pr/9934/azure-ai-skills.zip"

Version: 1.0.0-beta.5.pr.9934.6813116
Merge commit: 9e8b24e

azure-sdk-automation · 2026-09-11T00:08:13Z

azure.ai.inspector PR build

Note

This is an unsigned development build. Install it only if you trust this PR.

Install the extension:

azd ext install "https://azuresdkartifacts.z5.web.core.windows.net/azd/extensions/pr/9934/azure-ai-inspector.zip"

Version: 1.0.0-beta.6.pr.9934.6813113
Merge commit: 9e8b24e

azure-sdk-automation · 2026-09-11T00:11:46Z

azure.coding-agent PR build

Note

This is an unsigned development build. Install it only if you trust this PR.

Install the extension:

azd ext install "https://azuresdkartifacts.z5.web.core.windows.net/azd/extensions/pr/9934/azure-coding-agent.zip"

Version: 0.6.1-pr.9934.6813105
Merge commit: 9e8b24e

azure-sdk-automation · 2026-09-11T00:13:52Z

microsoft.azd.extensions PR build

Note

This is an unsigned development build. Install it only if you trust this PR.

Install the extension:

azd ext install "https://azuresdkartifacts.z5.web.core.windows.net/azd/extensions/pr/9934/microsoft-azd-extensions.zip"

Version: 0.13.0-pr.9934.6813101
Merge commit: 9e8b24e

azure-sdk-automation · 2026-09-11T00:14:39Z

azure.ai.connections PR build

Note

This is an unsigned development build. Install it only if you trust this PR.

Install the extension:

azd ext install "https://azuresdkartifacts.z5.web.core.windows.net/azd/extensions/pr/9934/azure-ai-connections.zip"

Version: 1.0.0-beta.6.pr.9934.6813112
Merge commit: 9e8b24e

azure-sdk-automation · 2026-09-11T00:14:56Z

microsoft.azd.concurx PR build

Note

This is an unsigned development build. Install it only if you trust this PR.

Install the extension:

azd ext install "https://azuresdkartifacts.z5.web.core.windows.net/azd/extensions/pr/9934/microsoft-azd-concurx.zip"

Version: 0.1.0-pr.9934.6813108
Merge commit: 9e8b24e

azure-sdk-automation · 2026-09-11T00:15:08Z

azure.ai.training PR build

Note

This is an unsigned development build. Install it only if you trust this PR.

Install the extension:

azd ext install "https://azuresdkartifacts.z5.web.core.windows.net/azd/extensions/pr/9934/azure-ai-training.zip"

Version: 0.0.3-preview.pr.9934.6813118
Merge commit: 9e8b24e

azure-sdk-automation · 2026-09-11T00:15:23Z

azure.ai.projects PR build

Note

This is an unsigned development build. Install it only if you trust this PR.

Install the extension:

azd ext install "https://azuresdkartifacts.z5.web.core.windows.net/azd/extensions/pr/9934/azure-ai-projects.zip"

Version: 1.0.0-beta.9.pr.9934.6813114
Merge commit: 9e8b24e

azure-sdk-automation · 2026-09-11T00:15:33Z

azure.ai.models PR build

Note

This is an unsigned development build. Install it only if you trust this PR.

Install the extension:

azd ext install "https://azuresdkartifacts.z5.web.core.windows.net/azd/extensions/pr/9934/azure-ai-models.zip"

Version: 0.0.7-preview.pr.9934.6813109
Merge commit: 9e8b24e

azure-sdk-automation · 2026-09-11T00:15:36Z

azure.ai.toolboxes PR build

Note

This is an unsigned development build. Install it only if you trust this PR.

Install the extension:

azd ext install "https://azuresdkartifacts.z5.web.core.windows.net/azd/extensions/pr/9934/azure-ai-toolboxes.zip"

Version: 1.0.0-beta.6.pr.9934.6813117
Merge commit: 9e8b24e

azure-sdk-automation · 2026-09-11T00:15:43Z

azure.ai.routines PR build

Note

This is an unsigned development build. Install it only if you trust this PR.

Install the extension:

azd ext install "https://azuresdkartifacts.z5.web.core.windows.net/azd/extensions/pr/9934/azure-ai-routines.zip"

Version: 1.0.0-beta.5.pr.9934.6813115
Merge commit: 9e8b24e

azure-sdk-automation · 2026-09-11T00:15:52Z

azure.ai.rle PR build

Note

This is an unsigned development build. Install it only if you trust this PR.

Install the extension:

azd ext install "https://azuresdkartifacts.z5.web.core.windows.net/azd/extensions/pr/9934/azure-ai-rle.zip"

Version: 0.4.0-preview.pr.9934.6813120
Merge commit: 9e8b24e

Copilot AI balanced review requested due to automatic review settings September 9, 2026 20:05

microsoft-github-policy-service Bot assigned Victor Vazquez (vhvb1989) Sep 9, 2026

Copilot started reviewing on behalf of Victor Vazquez (vhvb1989) September 9, 2026 20:06 View session

Victor Vazquez (vhvb1989) added the skip-governance Skip PR governance checks label Sep 9, 2026

JeffreyCA approved these changes Sep 9, 2026

View reviewed changes

Copilot AI reviewed Sep 9, 2026

View reviewed changes

Comment thread cli/azd/go.mod

Victor Vazquez (vhvb1989) enabled auto-merge (squash) September 9, 2026 20:10

Travis Angevine (trangevi) approved these changes Sep 9, 2026

View reviewed changes

JeffreyCA approved these changes Sep 10, 2026

View reviewed changes

Copilot AI review requested due to automatic review settings September 10, 2026 21:44

Victor Vazquez (vhvb1989) force-pushed the grpc-sec-update-sync branch from 1c120e5 to a59e1e2 Compare September 10, 2026 21:44

Victor Vazquez (vhvb1989) requested a review from Daniel Jurek (danieljurek) as a code owner September 10, 2026 21:44

Copilot started reviewing on behalf of Victor Vazquez (vhvb1989) September 10, 2026 21:45 View session

Victor Vazquez (vhvb1989) added the ext-x microsoft.azd.extensions developer extension (azd x) label Sep 10, 2026

JeffreyCA mentioned this pull request Sep 10, 2026

Improve model selection and label limits for agentic triage workflows #9975

Open

Copilot AI reviewed Sep 10, 2026

View reviewed changes

Comment thread cli/azd/cmd/middleware/extensions.go

Victor Vazquez (vhvb1989) mentioned this pull request Sep 10, 2026

Fix extension startup initialization race #9986

Open

Victor Vazquez (vhvb1989) and others added 3 commits September 10, 2026 21:55

Victor Vazquez (vhvb1989) force-pushed the grpc-sec-update-sync branch from a59e1e2 to 3b40c71 Compare September 10, 2026 21:56

Victor Vazquez (vhvb1989) changed the base branch from main to fix-extension-startup-initialization September 10, 2026 21:56

Victor Vazquez (vhvb1989) merged commit 405c1bb into fix-extension-startup-initialization Sep 10, 2026
71 of 74 checks passed

Victor Vazquez (vhvb1989) mentioned this pull request Sep 10, 2026

chore(deps): update gRPC across azd core and extensions #9988

Open

Uh oh!

Conversation

Victor Vazquez (vhvb1989) commented Sep 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Stack

Summary

Validation

Uh oh!

github-actions Bot commented Sep 9, 2026

📋 Prioritization Note

Uh oh!

azure-pipelines Bot commented Sep 9, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Uh oh!

Uh oh!

Uh oh!

azure-sdk-automation Bot commented Sep 11, 2026

azure.ai.finetune PR build

Uh oh!

azure-sdk-automation Bot commented Sep 11, 2026

azure.appservice PR build

Uh oh!

azure-sdk-automation Bot commented Sep 11, 2026

azure.ai.skills PR build

Uh oh!

azure-sdk-automation Bot commented Sep 11, 2026

azure.ai.inspector PR build

Uh oh!

azure-sdk-automation Bot commented Sep 11, 2026

azure.coding-agent PR build

Uh oh!

azure-sdk-automation Bot commented Sep 11, 2026

microsoft.azd.extensions PR build

Uh oh!

azure-sdk-automation Bot commented Sep 11, 2026

azure.ai.connections PR build

Uh oh!

azure-sdk-automation Bot commented Sep 11, 2026

microsoft.azd.concurx PR build

Uh oh!

azure-sdk-automation Bot commented Sep 11, 2026

azure.ai.training PR build

Uh oh!

azure-sdk-automation Bot commented Sep 11, 2026

azure.ai.projects PR build

Uh oh!

azure-sdk-automation Bot commented Sep 11, 2026

azure.ai.models PR build

Uh oh!

azure-sdk-automation Bot commented Sep 11, 2026

azure.ai.toolboxes PR build

Uh oh!

azure-sdk-automation Bot commented Sep 11, 2026

azure.ai.routines PR build

Uh oh!

azure-sdk-automation Bot commented Sep 11, 2026

azure.ai.rle PR build

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

Victor Vazquez (vhvb1989) commented Sep 9, 2026 •

edited

Loading