Merge origin/main into copilot/stream-cache-entry-for-http-plugin

Author: Copilot

apps/playwright-browser-tunnel/CHANGELOG.json

@@ -1,6 +1,18 @@
 {
   "name": "@rushstack/playwright-browser-tunnel",
   "entries": [
+    {
+      "version": "0.3.23",
+      "tag": "@rushstack/playwright-browser-tunnel_v0.3.23",
+      "date": "Sat, 20 Jun 2026 21:37:11 GMT",
+      "comments": {
+        "patch": [
+          {
+            "comment": "Bump `ws` in `rush-serve-plugin` to mitigate CVE-2026-48779."
+          }
+        ]
+      }
+    },
     {
       "version": "0.3.22",
       "tag": "@rushstack/playwright-browser-tunnel_v0.3.22",

apps/playwright-browser-tunnel/CHANGELOG.md

@@ -1,6 +1,13 @@
 # Change Log - @rushstack/playwright-browser-tunnel
 
-This log was last generated on Sat, 13 Jun 2026 00:16:19 GMT and should not be manually modified.
+This log was last generated on Sat, 20 Jun 2026 21:37:11 GMT and should not be manually modified.
+
+## 0.3.23
+Sat, 20 Jun 2026 21:37:11 GMT
+
+### Patches
+
+- Bump `ws` in `rush-serve-plugin` to mitigate CVE-2026-48779.
 
 ## 0.3.22
 Sat, 13 Jun 2026 00:16:19 GMT

apps/playwright-browser-tunnel/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rushstack/playwright-browser-tunnel",
-  "version": "0.3.22",
+  "version": "0.3.23",
   "description": "Run a remote Playwright Browser Tunnel. Useful in remote development environments.",
   "license": "MIT",
   "repository": {
@@ -48,15 +48,15 @@
     "@rushstack/terminal": "workspace:*",
     "@rushstack/ts-command-line": "workspace:*",
     "string-argv": "~0.3.1",
-    "ws": "~8.20.0",
+    "ws": "~8.21.0",
     "playwright": "1.56.1"
   },
   "devDependencies": {
     "@rushstack/heft": "workspace:*",
     "eslint": "~9.37.0",
     "local-node-rig": "workspace:*",
     "@types/semver": "7.7.1",
-    "@types/ws": "8.5.5",
+    "@types/ws": "8.18.1",
     "playwright-core": "~1.56.1",
     "@playwright/test": "~1.56.1",
     "@types/node": "20.17.19"

apps/rush/CHANGELOG.json

@@ -1,6 +1,35 @@
 {
   "name": "@microsoft/rush",
   "entries": [
+    {
+      "version": "5.177.1",
+      "tag": "@microsoft/rush_v5.177.1",
+      "date": "Sat, 20 Jun 2026 21:37:30 GMT",
+      "comments": {
+        "none": [
+          {
+            "comment": "Bump `ws` in `rush-serve-plugin` to mitigate CVE-2026-48779."
+          }
+        ]
+      }
+    },
+    {
+      "version": "5.177.0",
+      "tag": "@microsoft/rush_v5.177.0",
+      "date": "Sat, 20 Jun 2026 00:16:15 GMT",
+      "comments": {
+        "none": [
+          {
+            "comment": "Fix build cache failures when running inside a git linked worktree via a pre-commit hook, caused by GIT_DIR being set to the per-worktree metadata directory"
+          }
+        ],
+        "patch": [
+          {
+            "comment": "Set Redis `connectTimeout` and `socketTimeout` so half-dead TCP connections (NAT/firewall) surface in seconds instead of stalling in-flight commands for many minutes while the kernel waits to give up."
+          }
+        ]
+      }
+    },
     {
       "version": "5.176.0",
       "tag": "@microsoft/rush_v5.176.0",

apps/rush/CHANGELOG.md

@@ -1,6 +1,24 @@
 # Change Log - @microsoft/rush
 
-This log was last generated on Tue, 09 Jun 2026 02:02:32 GMT and should not be manually modified.
+This log was last generated on Sat, 20 Jun 2026 21:37:30 GMT and should not be manually modified.
+
+## 5.177.1
+Sat, 20 Jun 2026 21:37:30 GMT
+
+### Updates
+
+- Bump `ws` in `rush-serve-plugin` to mitigate CVE-2026-48779.
+
+## 5.177.0
+Sat, 20 Jun 2026 00:16:15 GMT
+
+### Patches
+
+- Set Redis `connectTimeout` and `socketTimeout` so half-dead TCP connections (NAT/firewall) surface in seconds instead of stalling in-flight commands for many minutes while the kernel waits to give up.
+
+### Updates
+
+- Fix build cache failures when running inside a git linked worktree via a pre-commit hook, caused by GIT_DIR being set to the per-worktree metadata directory
 
 ## 5.176.0
 Tue, 09 Jun 2026 02:02:32 GMT

apps/rush/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/rush",
-  "version": "5.176.0",
+  "version": "5.177.1",
   "description": "A professional solution for consolidating all your JavaScript projects in one Git repo",
   "keywords": [
     "install",

common/changes/@microsoft/rush/fix-git-dir-worktree-hook-repo-root_2026-06-08-19-02.json

@@ -102,8 +102,8 @@
   {
     "policyName": "rush",
     "definitionName": "lockStepVersion",
-    "version": "5.176.0",
-    "nextBump": "minor",
+    "version": "5.177.1",
+    "nextBump": "patch",
     "mainProject": "@microsoft/rush"
   }
 ]