What's Changed
- Move the install locking file to "installed" rather than VCPKG_ROOT. by @BillyONeal in #1938
- Update Component Governance manifest. by @BillyONeal in #1940
- Make z-applocal command cross-platform for PE dependency analysis by @zynfly in #1910
- Update vulnerable npm dependencies. by @BillyONeal in #1953
- [ci] Treat feature supports as 'top level'. by @BillyONeal in #1955
- [artifacts] Use JSON.parse rather than require for locale loading. by @BillyONeal in #1952
- [ci] Down with 'exclude', up with 'skip'. by @BillyONeal in #1956
- Use more recent curl headers when building for non-amd64. by @BillyONeal in #1957
- Bump picomatch from 2.3.1 to 2.3.2 in /vcpkg-artifacts by @dependabot[bot] in #1960
- Bump yaml from 2.8.0 to 2.8.3 in /vcpkg-artifacts by @dependabot[bot] in #1962
- Update SPDX license lists. by @BillyONeal in #1966
- Localized file check-in by OneLocBuild Task: Build definition ID 15684: Build ID 13679423 by @embeddedbot in #1967
- Update fmt and fix no-PCH builds. by @BillyONeal in #1965
- Update NPM dependencies. by @BillyONeal in #1971
- Complete shell escaping. by @BillyONeal in #1970
- Fix --skip-failures feature set divergence between PR and CI. by @BillyONeal in #1958
- Adopt libfuzzer to replace AFL. by @BillyONeal in #1951
- Bump lodash from 4.17.23 to 4.18.1 in /vcpkg-artifacts by @dependabot[bot] in #1972
- Update scripts sha 2026-04-02. by @BillyONeal in #1973
- Update the signed build lab and suppress fmt warning. by @BillyONeal in #1975
Full Changelog: 2026-03-04...2026-04-06