Skip to content

chore(deps): update dependencies for security advisories - #52

Merged
Sequela02 merged 1 commit into
mainfrom
chore/dependency-security-updates
Nov 6, 2026
Merged

Sequela02 merged 1 commit into
mainfrom
chore/dependency-security-updates

Conversation

@Sequela02

Copy link
Copy Markdown
Contributor

Updates dependencies within their declared ranges in the VS Code extension; only the lockfile changes.

  • Updates stay within the declared ranges; the open Dependabot pull requests with major versions (TypeScript 7, vscode-languageclient 10, @types/node 26) are separate.

Verification

  • Audit: 71 (36 high) advisories before, 6 (1 high) after.
  • On Windows: typecheck and test passed.
  • git diff --check: clean.

Risk

Two-way door: minor and patch updates within existing ranges. Blast radius: the next extension release. Evidence above; the running application was not exercised. Needs the owner to merge.

Update dependencies within their declared ranges as part of the
August-October 2026 advisory remediation.
@Sequela02
Sequela02 merged commit b178928 into main Nov 6, 2026
4 checks passed
@Sequela02
Sequela02 deleted the chore/dependency-security-updates branch November 6, 2026 12:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant