[Akanksha Jain (jainakanksha-msft)]

Bumps @azure/storage-blob from 12.33.0 to 12.34.0.

[Copilot]

🟡 Changes recommended

Service version 2026-10-06 is accepted without implementing its required CRC64 upload responses when MD5 is supplied, leaving a response-contract gap that needs version-aware handling and regression tests.

1 open issue

• Implement CRC64 responses for service version 2026-10-06 · New

What changed in this PR

Updates Azurite’s Blob SDK development dependency to 12.34.0 and advances the accepted and default Blob service API version to 2026-10-06. Queue and Table remain on 2026-06-06.

Changes:

• Updates the Blob SDK dependency and Blob API version constants.
• Aligns compatibility documentation and release notes.
• Revises npm registry configuration and contributor guidance, and adds a seven-day Dependabot cooldown.

Validation was limited to source inspection and upstream release notes; no builds or tests were run.

File	Description
src/​blob/​utils/​constants.ts	Accepts and defaults to Blob API version 2026-10-06.
README.md	Updates Blob compatibility claims and distinguishes service versions.
README.mcr.md	Updates the container image’s API compatibility table.
package.json	Bumps @azure/storage-blob to ^12.34.0.
CONTRIBUTION.md	Adds registry, TLS, and managed-feed guidance.
ChangeLog.md	Records the user-visible Blob API version change.
.npmrc	Uses the contributor’s registry, enforces TLS, and omits registry URLs from lockfiles.
.github/​dependabot.yml	Adds a seven-day npm update cooldown.

_{Review effort: Balanced}

[Copilot]

🔵 Needs a closer look

Newly exposed conditions and structured-upload headers are not enforced or decoded, allowing invalid conditional writes and deletions and causing structured uploads to store framing and checksum bytes as blob content.

1 open issue

• Implement CRC64 responses for service version 2026-10-06

_{Review effort: Balanced}

[Copilot]

🔵 Needs a closer look

Newly accepted preconditions are ignored for tag updates and deletion, while structured uploads can persist framing as blob content without validating embedded checksums, risking unintended writes, deletions, and data corruption.

1 open issue

• Implement CRC64 responses for service version 2026-10-06

_{Review effort: Balanced}