Bump tedious from 20.3.3 to 20.3.6

[dependabot]

Bumps tedious from 20.3.3 to 20.3.6.

Release notes

Sourced from tedious's releases.

v20.3.6

20.3.6 (2026-10-10)

Bug Fixes

• remove the sprintf-js dependency (#1814) (e936c0f)

v20.3.5

20.3.5 (2026-10-06)

Bug Fixes

• send the PLP terminator when an NVarChar or VarBinary length is missing (#1811) (5446adb)

v20.3.4

20.3.4 (2026-10-04)

Bug Fixes

• preserve Unicode across streamed text chunks (#1806) (0948a81)

Commits

• e936c0f fix: remove the sprintf-js dependency (#1814)
• 7643a94 docs: replace stale commitlint step in PR template (#1818)
• 3c98797 test: remove noisy log from cipher negotiation test (#1802)
• 204df43 chore(deps): bump undici (#1804)
• 5446adb fix: send the PLP terminator when an NVarChar or VarBinary length is missing ...
• 7707533 chore(deps-dev): bump markdown-it from 14.2.0 to 14.3.2 (#1808)
• de85097 chore(deps-dev): bump brace-expansion from 1.1.18 to 1.1.21 (#1809)
• 0948a81 fix: preserve Unicode across streamed text chunks (#1806)
• 3dabe6a docs: update README (#1801)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[Copilot]

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.

[Akanksha Jain (jainakanksha-msft)]

Copilot This PR was opened by Dependabot. Please take it the rest of the way before it's ready for human review:

1. Impact analysis — review the PR diff/description to identify what changed, including the package name and old → new version, then check where that dependency is actually used in the codebase, or whether it is unused, and summarize the potential impact.
2. Fix build/conflict issues — run npm ci --legacy-peer-deps, npm run build, and npm run lint; resolve any merge conflicts, build errors, or lint errors that surface.
3. Tests — add or update tests under tests/** to cover the changed usage, and make sure they meaningfully validate the change (not just re-assert the version bump).
4. Run the suite — run the relevant npm run test:* script(s) for the affected area (e.g. test:blob, test:queue, test:table) and keep fixing until they pass.
5. Changelog — Add a changelog entry only for changes that an Azurite user, operator, SDK developer, or extension user could reasonably observe. Exclude internal maintenance, testing, CI/CD, linting, and development dependency updates unless they result in a user-visible behaviour, compatibility, performance, or security improvement.
6. Comments — review any existing PR comments and review threads, including resolved/hidden ones, and address anything actionable.
7. Self-rate — rate this work 1-10 against: correctness, test coverage, changelog accuracy, build/lint health, and comment resolution.
8. Iterate — if it's not a 10, keep improving until it is before finishing.
9. Summary — your final response must use the following structure exactly (no free-form paragraph summary).

Impact analysis

• Package:
• Old version:
• New version:
• Change Impact:

Build/Conflict Issues

• Commands:
• Result:

Tests

• Added:
• Updated:
• Result:

Run the Suite

• Commands:
• Status:

Changelog

• Entry:
• Location:

Comments

• Reviewed:
• Actions:

Self-Rate

• Score:
• Reasoning:

Summary

• Why this matters:
• Risk of not taking change:

[Copilot]

Copilot This PR was opened by Dependabot. Please take it the rest of the way before it's ready for human review:

1. Impact analysis — review the PR diff/description to identify what changed, i...

Impact analysis

• Package: tedious, the SQL Server driver selected by Sequelize for Azurite’s SQL metadata store.
• Old version: 20.3.3.
• New version: 20.3.6.
• Change Impact: The lockfile-only patch update affects the SQL Server driver path. The existing Blob SQL metadata-store unit test verifies Sequelize resolves the tedious driver and enables encryption for MSSQL URIs. The update also removes sprintf-js from the driver’s dependency tree. No user-visible behavior change is specified.

Build/Conflict Issues

• Commands: npm ci --legacy-peer-deps; npm run build; npm run lint; git diff --check HEAD^ HEAD.
• Result: All commands passed; no merge conflicts or tracked working-tree changes. npm ci reported 3 moderate audit findings, not investigated as part of this dependency-only request.

Tests

• Added: None; the existing meaningful driver-wiring test covers the changed dependency usage, so an additional test asserting a package version would be redundant.
• Updated: None.
• Result: The existing SqlBlobMetadataStore driver resolution tests passed as part of test:blob.

Run the Suite

• Commands: npm run test:blob.
• Status: Passed: 618; pending: 3. PR CI had 0 failed jobs when checked; 11 matrix jobs remained in progress. Code scanning completed successfully.

Changelog

• Entry: None; this is a dependency-only patch with no identified user-visible behavior change.
• Location: Not applicable.

Comments

• Reviewed: This request, the existing reviewer comment, and PR review threads (none returned).
• Actions: Completed impact analysis and local install/build/lint/test validation on the existing Dependabot commit da9a47f.

Self-Rate

• Score: 10/10.
• Reasoning: Dependency use and impact are verified; existing behavior-focused coverage passed, build and lint are clean, no changelog entry is warranted, and comments were reviewed. The remaining CI jobs were still running at the time checked.

Summary

• Why this matters: Keeps Azurite’s SQL Server driver on the requested patch release and drops an obsolete transitive dependency.
• Risk of not taking change: Remains on the earlier SQL Server driver and its prior dependency tree.

[dependabot]

Superseded by #2853.