Update source-map-js to 1.2.2

[Brandon Waterloo [MSFT] (bwateratmsft)]

🤖

Summary

• Update every resolved source-map-js from 1.2.1 to 1.2.2 in the extension lockfile and both stage-local-dev fixture lockfiles.
• Existing Sass and PostCSS dependency ranges accept 1.2.2; no manifest changes, overrides, or direct dependencies are needed.
• npm hoists the fixture workspace resolution to its root. A structural comparison confirms that no other package resolutions or manifest fields changed.

Publication-age verification

Independently queried the npm registry version metadata and publication timestamps rather than relying on --min-release-age.

Package	Version	Published (UTC)	Age at verification
source-map-js	1.2.2	2026-09-30T14:08:09.382Z	8.001 days

Verification reference: 2026-10-08T14:10:13.027Z; seven-day cutoff: 2026-10-01T14:10:13.027Z. Version 1.2.2 is the latest stable eligible release. Registry tarball URLs and integrity hashes match all three lockfiles. No other non-azext resolutions changed.

Validation

• Root npm ci --ignore-scripts --no-audit --no-fund and npm run build passed, including webview bundling and TypeScript checks.
• Fixture workspace and standalone web npm ci passed; fixture workspace build passed for functions, shared, and web.
• Installed Sass/PostCSS dependency trees resolve source-map-js 1.2.2.
• Structural lockfile scope assertions and git diff --check passed.

The fixture workspace-only install initially omitted Rolldown's existing optional Windows native binding. Installing from the standalone web lockfile restored it and the build passed without additional tracked changes. Vite emitted its existing large-chunk warning. No remaining blockers.

[Copilot]

🟢 Approval recommended

The lockfile-only update is consistent across all affected dependency trees and satisfies existing version ranges.

Copilot wasn't able to review any files in this pull request.

Files not reviewed (2)

• evals/grader-certification/stage-local-dev/package-lock.json: Generated file
• evals/grader-certification/stage-local-dev/services/web/package-lock.json: Generated file