Jeremy Meng

tshy docs mentioned some env var that may help. should we enable more verbose logs for all builds? https://github.com/isaacs/tshy?tab=readme-ov-file#making-noise

Used in ai-form-recognizer. Not sure whether it is really used in `api-management-custom-widgets-scaffolder` ``` sdk/apimanagement/api-management-custom-widgets-scaffolder/rollup.config.bin.js:1:import MagicString from "magic-string"; sdk/formrecognizer/ai-form-recognizer/package.json:123: "magic-string": "~0.26.2", sdk/formrecognizer/ai-form-recognizer/rollup.config.bin.js:2:import MagicString from "magic-string"; ```

still need to upgrade ai-form-recognizer

> The only downside to this change is when `shell: true` is set if there are strings passed from input/etc it opens us up to injection attacks. > > Rush...

Looks that only `run vendored` command is affected (.cmd and Windows). I revert changes to other files, and adopted the fix that rush did for their install-run.ts in https://github.com/microsoft/rushstack/pull/4637/files I...

/azp run js - data-tables - tests

/azp run js - monitor - tests

/azp help

@bogdanbrudiu thanks for the PR. could you add a unit case that covers issue?

Unfortunately the extension doesn't have any knowledge about projects. Some idea that might help: add another command that allows users to choose a certain directory then provides a list of...