fix(update): re-check transitive dependencies' own semver ranges during apm update#2053

Open

nadav-y wants to merge 6 commits into

microsoft:mainfrom

nadav-y:fix/transitive-semver-reresolution

Commits on Jul 6, 2026

fix(update): stage semver re-resolution downloads so a declined/aborted/dry-run apm update cannot leave apm_modules/ ahead of apm.lock.yaml

nadav-y
and
claude
committed
fix(update): address Copilot review on #2050 -- restore backups on resolve-phase failure, fix collision-prone naming

nadav-y
and
claude
committed
chore: spec-conformance waiver for update-confirm-gate bug fix
nadav-y
committed
fix(update): re-check transitive dependencies' own semver ranges during apm update

nadav-y
and
claude
committed
docs: add PR number to transitive semver re-resolution CHANGELOG entry

nadav-y
and
claude
committed
fix(update): fail closed when backup staging fails before an overwrite

nadav-y
and
claude
committed