[Snyk] Security upgrade azure-pipelines-task-lib from 3.0.6-preview.1 to 5.2.3

[newf-bgreet]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• src/Tasks/dependency-check-build-task/package.json
• src/Tasks/dependency-check-build-task/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-JS-BRACEEXPANSION-18512280	828

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[newf-bgreet]

This is a major version upgrade from a preview release to a stable major release, crossing two major versions (v3 → v5). This introduces significant breaking changes, primarily related to the underlying Node.js runtime environment required by the task.

Key Breaking Changes:

• Node.js Runtime Requirement: The most significant change is the required update of the execution handler in your task.json. Version 3 of the library was designed for older Node runners (Node 6, Node 10). Versions 4 and 5 require modern Node versions. You must update your task.json to use a newer handler like "execution": { "Node16": ... } or "Node20_1": ... }. This change requires that the agent running your task supports the specified Node version.

• API Removals: Although some of these changes were introduced before v3, upgrading from a preview version may expose them:

  • The vso-node-api dependency was removed. If your task relied on this, you must add it as a direct dependency.
  • Helper functions like startsWith, endsWith, and isEqual on string prototypes were removed. Standard JavaScript methods should be used instead.
  • The setEnvVar function was removed.

Recommendation:
This upgrade requires careful validation. You must update the execution handler in your task.json file to a modern Node version (e.g., Node16) and thoroughly test your task on an agent that supports it. Review your code for any usage of the removed APIs.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.