[Eugene (OEvgeny)]

The archived 01.getting-started/k.direct-line-token sample still ships package-lock.json files, which carry 5 Dependabot alerts.

Changelog Entry

Changed

• 🏫 Samples: removed lockfiles of archived k.direct-line-token, and skipped it in npm run bump, in PR #6025, by @OEvgeny

Description

The sample was archived in #5537, which removed its lockfiles, but npm run bump still ran in it and recreated them in #5659. This PR deletes both lockfiles and skips the sample in npm run bump, as #5533 did for 07.advanced-web-chat-apps.

Design

• Delete instead of upgrading: restify 11 already crashes the sample at startup, and fixing zod needs a major that botbuilder does not support yet.

Specific Changes

• Deleted k.direct-line-token/javascript/{bot,web}/package-lock.json
• samples/package.json: bump:non-workspaces skips */k.direct-line-token/*, like */07.advanced-web-chat-apps/*

• I have added tests and executed them locally
• I have added .changelog/<PR#>-<slug>.md
• I have updated documentation

Review Checklist

This section is for contributors to review your work.

• Accessibility reviewed (tab order, content readability, alt text, color contrast)
• Browser and platform compatibilities reviewed
• CSS styles reviewed (minimal rules, no z-index)
• Documents reviewed (docs, samples, live demo)
• Internationalization reviewed (strings, unit formatting)
• package.json and package-lock.json reviewed
• Security reviewed (no data URIs, check for nonce leak)
• Tests reviewed (coverage, legitimacy)

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota. Try requesting a review at a lower effort level.