I must be too tired because I cannot figure out what happened in that pull request. The PR/source branch was over a year old with none of the commits adding up

I must be too tired because I cannot figure out what happened in that pull request. The PR/source branch was over a year old with none of the commits adding up to the full diff. There is [1], which introduced the vulnerability but didn't remove the environment variables above, then master is merged into it via [2] (but still doesn't show the variables being removed), yet in the full PR diff they're gone. In any case, I'm pretty sure you misattributed the vulnerability to Copilot because the PR got squash-merged and _all_ of the changes were then attributed to every contributor in that PR, despite Copilot only appearing on one of the commits. [1] https://github.com/snowflakedb/snowflake-connector-net/commit/094038e59d112906f1790acf39999045fc0df243 https://github.com/snowflakedb/snowflake-connector-net/commi... [2] https://github.com/snowflakedb/snowflake-connector-net/commit/51dc7381e64c60033ec10c52939ff4ae1d3d83ab https://github.com/snowflakedb/snowflake-connector-net/commi...