Skip to content

chore: Prefer Java upgrade over CVE in dependency recommendations#1033

Open
frankliu20 wants to merge 2 commits into
microsoft:mainfrom
frankliu20:haital-microsoft/prefer-java-upgrade-over-cve
Open

chore: Prefer Java upgrade over CVE in dependency recommendations#1033
frankliu20 wants to merge 2 commits into
microsoft:mainfrom
frankliu20:haital-microsoft/prefer-java-upgrade-over-cve

Conversation

@frankliu20

Copy link
Copy Markdown
Contributor
  • When both Java upgrade and CVE issues are detected, surface the Java upgrade recommendation first instead of the CVE fix.
  • Add a product-style README section describing the upgrade and security recommendations powered by the app modernization extension.

chagong
chagong previously approved these changes Jun 11, 2026
When both Java upgrade and CVE issues are detected, surface the Java upgrade recommendation first instead of the CVE fix. The notification selection logic derives its state from a single isCVE flag and uses ExtensionState-keyed lookup tables for button labels. Add a product-style README section describing the upgrade and security (CVE) recommendations powered by the app modernization extension.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@frankliu20 frankliu20 force-pushed the haital-microsoft/prefer-java-upgrade-over-cve branch from cd3a819 to 34e16c9 Compare June 17, 2026 03:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants