Skip to content

Bump the vscode-deps group across 1 directory with 9 updates - #107

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vscode-extension/vscode-deps-507f7328f1
Open

Bump the vscode-deps group across 1 directory with 9 updates#107
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vscode-extension/vscode-deps-507f7328f1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 12, 2026

Copy link
Copy Markdown

Bumps the vscode-deps group with 9 updates in the /vscode-extension directory:

Package From To
smol-toml 1.7.1 1.8.0
@types/node 26.1.2 26.4.0
@types/react-dom 19.2.4 19.2.7
@types/vscode 1.125.0 1.134.0
css-loader 7.1.4 7.1.5
ovsx 1.0.2 1.1.1
typescript 6.0.3 7.0.2
webpack 5.109.2 5.110.2
webpack-cli 7.2.2 7.2.3

Updates smol-toml from 1.7.1 to 1.8.0

Release notes

Sourced from smol-toml's releases.

v1.8.0

What's Changed

Full Changelog: squirrelchat/smol-toml@v1.7.2...v1.8.0

v1.7.2

What's Changed

Full Changelog: squirrelchat/smol-toml@v1.7.1...v1.7.2

Commits
  • 6d0f477 chore: bump version
  • 97e9713 docs: mention temporal api
  • 7a3068d perf: ubench opt for instanceof Date
  • 7e8c09a feat: stringify temporal
  • 19239d0 chore: bump version
  • 5f55c3a chore: revert sourcemap publishing
  • 5c26f1b chore: update benchmarks
  • 92832d2 refactor: better logic orchestration in structs
  • 2fb9ab8 refactor: ctx object instead of pointer arg + tuple returns
  • e6017c4 ci: use staged publish
  • See full diff in compare view

Updates @types/node from 26.1.2 to 26.4.0

Commits

Updates @types/react-dom from 19.2.4 to 19.2.7

Commits

Updates @types/vscode from 1.125.0 to 1.134.0

Commits

Updates css-loader from 7.1.4 to 7.1.5

Release notes

Sourced from css-loader's releases.

v7.1.5

7.1.5 (2026-08-28)

Bug Fixes

  • strip BOM before processing with postcss (#1684) (bd20834)
Changelog

Sourced from css-loader's changelog.

7.1.5 (2026-08-28)

Bug Fixes

  • strip BOM before processing with postcss (#1684) (bd20834)
Commits
  • be04ec2 chore(release): 7.1.5
  • 405bdde docs: deprecate css-loader in favor of webpack's built-in CSS support (#1683)
  • bd20834 fix: strip BOM before processing with postcss (#1684)
  • 488cdb1 chore(deps-dev): bump lodash from 4.17.23 to 4.18.1 (#1663)
  • fd4cb47 chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (#1659)
  • 4bf84fa docs: clarify style-loader usage in Getting Started (#1656)
  • d7441e5 chore(deps): bump immutable from 5.1.3 to 5.1.5 (#1654)
  • ca53a77 chore(deps): bump minimatch (#1653)
  • See full diff in compare view

Updates ovsx from 1.0.2 to 1.1.1

Release notes

Sourced from ovsx's releases.

CLI v1.1.1

Dependencies

  • Bump ip-address from 10.2.0 to 10.4.0
  • Bump fast-uri from 3.1.4 to 3.1.5
  • Bump js-yaml from 4.3.0 to 4.3.1

Frontend Library v1.1.1

Fixed

  • Fix the WebUI build failing on s390x and ppc64le: use postcss instead of lightningcss (no ppc64le binary) for CSS, and bump vite for the Rolldown big-endian sourcemap fix (#2051)
  • Fix the admin publisher revoke dialog prompting for an Eclipse login even when the target publisher's agreement status is none or could not be determined (nothing confirmed to revoke)

Dependencies

  • Remove the unused @mui/base dependency; it is deprecated upstream (replaced by @base-ui/react) and nothing in the codebase imports from it
  • Bump socks from 2.8.3 to 2.8.9
  • Bump ip-address from 9.0.5 to 10.4.0
  • Bump postcss from 8.5.22 to 8.5.25
  • Bump vite from 8.1.5 to 8.2.1
  • Bump dompurify from 3.4.12 to 3.4.13
  • Bump js-yaml from 4.3.0 to 4.3.1
  • Bump react-router from 7.18.1 to 7.18.2

v1.1.1

This release of Open VSX consists of:

Deploying the server application is documented in the Wiki.

What's Changed

馃彆 Features

... (truncated)

Changelog

Sourced from ovsx's changelog.

[v1.1.1] (09/08/2026)

Dependencies

  • Bump ip-address from 10.2.0 to 10.4.0
  • Bump fast-uri from 3.1.4 to 3.1.5
  • Bump js-yaml from 4.3.0 to 4.3.1

[v1.1.0] (02/08/2026)

Added

  • Add an encrypted filestore as fallback to the system keychain if it cant be accessed (#1950)
  • Add --allow-missing-repository option to the publish command, passed on to vsce to package an extension whose package.json has no repository field without asking for confirmation (#1735)
  • Support trusted publishing: publish can exchange an OIDC ID token for a short-lived publishing token, via --trusted-publishing, --idToken and --oidcAudience

Changed

  • Replace keytar with cross-keychain to store credentials in the system keychain (#1950)
  • Mask token input when using login command (#1966

Dependencies

  • Bump js-yaml from 4.2.0 to 4.3.0 (#1976)
  • Bump tar from 7.5.16 to 7.5.21 (#1987)
  • Bump brace-expansion from 1.1.16 to 1.1.18 (#2031)
Commits
  • 0eb87af chore: prepare cli 1.1.1 release
  • a3bcfef build(deps): bump js-yaml from 4.3.0 to 4.3.1 in /cli (#2056)
  • 5c257bf build(deps): bump fast-uri from 3.1.4 to 3.1.5 in /cli (#2041)
  • ed9f099 chore(deps): bump socks and ip-address versions
  • 37bc90b chore: bump for next dev cycle
  • 53049dc chore: prepare cli version for release
  • c31e166 chore: prepare for cli-1.1.0 release
  • 556069e chore(deps): bump brace-expansion in cli
  • 5de3810 build(deps): bump brace-expansion from 1.1.16 to 1.1.18 in /cli (#2031)
  • 36de5ac feat: add --allow-empty-repository option to ovsx publish (#2012)
  • Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates webpack from 5.109.2 to 5.110.2

Release notes

Sourced from webpack's releases.

v5.110.2

Patch Changes

v5.110.1

Patch Changes

v5.110.0

Minor Changes

  • Wrap concatenated modules in lazy __webpack_require__.cw accessors and inline require(), keeping a wrapped body's names and side effects intact. (by @鈥媓ai-x in #21519)

  • Add performance hints reporting what a build costs: duplicate packages and modules, circular dependencies, broad contexts, large modules and chunks, hotspots, eval, missing PURE annotations, polyfills, redundant dynamic imports, OS-dependent rules, cache effectiveness, how chunks load, what splitting refused, why an optimization was skipped, and rules, defines, externals, aliases and barrel reexports nothing uses. An oversized asset names its largest modules, and an entrypoint carrying the runtime recommends optimization.runtimeChunk. Enable every check not set individually with performance.all, report hints in stats only with performance.hints: "stats", and get them in a stable order that leaves the build hashes unchanged. (by @鈥媋lexander-akait in #21841)

  • Add the descriptionRelativePath module rule condition. (by @鈥媋lexander-akait in #21705)

  • Add OS-independent glob matching to module rules. (by @鈥媋lexander-akait in #21771)

  • Report inner-graph, AMD and bare module bailouts in optimizationBailout. (by @鈥媋lexander-akait in #21740)

  • Allow marking externals as side-effect-free with a sideEffects flag. (by @鈥媋lexander-akait in #21712)

  • Give externals the original request of a context module element. (by @鈥媋lexander-akait in #21780)

  • Add the externalsPresets.nodeModules preset with an allowlist option to externalize installed packages, replacing the webpack-node-externals plugin. (by @鈥媋lexander-akait in #21569)

  • Add output.library.umdAmdContainer for an AMD-style loader branch in UMD. (by @鈥媓ai-x in #21770)

  • Resolve @custom-media values that are true / false or name another custom media. (by @鈥媋lexander-akait in #21624)

  • Add the __webpack_css_server_styles__ module variable to read the CSS collected while rendering without a DOM, and keep that CSS in the order the styles were applied. (by @鈥媋lexander-akait in #21576)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.110.2

Patch Changes

5.110.1

Patch Changes

5.110.0

Minor Changes

  • Wrap concatenated modules in lazy __webpack_require__.cw accessors and inline require(), keeping a wrapped body's names and side effects intact. (by @鈥媓ai-x in #21519)

  • Add performance hints reporting what a build costs: duplicate packages and modules, circular dependencies, broad contexts, large modules and chunks, hotspots, eval, missing PURE annotations, polyfills, redundant dynamic imports, OS-dependent rules, cache effectiveness, how chunks load, what splitting refused, why an optimization was skipped, and rules, defines, externals, aliases and barrel reexports nothing uses. An oversized asset names its largest modules, and an entrypoint carrying the runtime recommends optimization.runtimeChunk. Enable every check not set individually with performance.all, report hints in stats only with performance.hints: "stats", and get them in a stable order that leaves the build hashes unchanged. (by @鈥媋lexander-akait in #21841)

  • Add the descriptionRelativePath module rule condition. (by @鈥媋lexander-akait in #21705)

  • Add OS-independent glob matching to module rules. (by @鈥媋lexander-akait in #21771)

  • Report inner-graph, AMD and bare module bailouts in optimizationBailout. (by @鈥媋lexander-akait in #21740)

  • Allow marking externals as side-effect-free with a sideEffects flag. (by @鈥媋lexander-akait in #21712)

  • Give externals the original request of a context module element. (by @鈥媋lexander-akait in #21780)

  • Add the externalsPresets.nodeModules preset with an allowlist option to externalize installed packages, replacing the webpack-node-externals plugin. (by @鈥媋lexander-akait in #21569)

  • Add output.library.umdAmdContainer for an AMD-style loader branch in UMD. (by @鈥媓ai-x in #21770)

... (truncated)

Commits
  • 75eec50 chore(release): new release (#21850)
  • 0b28311 fix: move the source map with a removed BOM (#21861)
  • c5fb111 fix(css): skip the loading runtime when every css chunk is initial (#21862)
  • 17fa705 docs: update examples (#21860)
  • e7ad244 fix: do not emit a JS chunk for an output.html generated page (#21859)
  • b74192f fix(loaders): strip a BOM from a string result in the loader chain (#21857)
  • 852e759 fix: report an unused named import that names a missing export (#21856)
  • 2a6a4fa docs: drop the built-in-superseded loaders and plugins from the README (#21855)
  • 1f3264e fix: ESM correctness in circular re-exports, imported bindings and defer orde...
  • e9a34ae fix(analyzable): bake urls past cycles, mixed-served wasm and partial style m...
  • Additional commits viewable in compare view

Updates webpack-cli from 7.2.2 to 7.2.3

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.2.3

Patch Changes

  • fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @鈥媌johansebas in #4834)

  • feat: allow toml@5 as a peer dependency for TOML configuration files (by @鈥媋lexander-akait in #4837)

Changelog

Sourced from webpack-cli's changelog.

7.2.3

Patch Changes

  • fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @鈥媌johansebas in #4834)

  • feat: allow toml@5 as a peer dependency for TOML configuration files (by @鈥媋lexander-akait in #4837)

Commits
  • 7d40e4e chore(release): new release (#4839)
  • 1f6593a ci: use the input names changesets/action v2 expects (#4838)
  • 99cfc4f build(deps): update dependencies (#4837)
  • 11be634 feat(create-webpack-app): stop asking about HTML and CSS (#4836)
  • a2418aa feat(create-webpack-app): use webpack's native CSS and HTML support in init t...
  • 3664b9d chore: update webpack-dev-server to v6 and test against v5 and v6 (#4834)
  • ce1a219 ci: node 26 (#4763)
  • 0cfc077 chore(deps): bump changesets/action in the dependencies group (#4831)
  • ef262eb chore(deps): bump changesets/action in the dependencies group (#4830)
  • d90f5ab chore: add gitignore to ignore autogenerated build & fix codecov option (#4828)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 12, 2026
Bumps the vscode-deps group with 9 updates in the /vscode-extension directory:

| Package | From | To |
| --- | --- | --- |
| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.7.1` | `1.8.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.2` | `26.4.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.2.7` |
| [@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode) | `1.125.0` | `1.134.0` |
| [css-loader](https://github.com/webpack/css-loader) | `7.1.4` | `7.1.5` |
| [ovsx](https://github.com/eclipse-openvsx/openvsx/tree/HEAD/cli) | `1.0.2` | `1.1.1` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [webpack](https://github.com/webpack/webpack) | `5.109.2` | `5.110.2` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `7.2.2` | `7.2.3` |



Updates `smol-toml` from 1.7.1 to 1.8.0
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.7.1...v1.8.0)

Updates `@types/node` from 26.1.2 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react-dom` from 19.2.4 to 19.2.7
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@types/vscode` from 1.125.0 to 1.134.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/vscode)

Updates `css-loader` from 7.1.4 to 7.1.5
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/css-loader@v7.1.4...v7.1.5)

Updates `ovsx` from 1.0.2 to 1.1.1
- [Release notes](https://github.com/eclipse-openvsx/openvsx/releases)
- [Changelog](https://github.com/eclipse-openvsx/openvsx/blob/main/cli/CHANGELOG.md)
- [Commits](https://github.com/eclipse-openvsx/openvsx/commits/v1.1.1/cli)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `webpack` from 5.109.2 to 5.110.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.109.2...v5.110.2)

Updates `webpack-cli` from 7.2.2 to 7.2.3
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.2.2...webpack-cli@7.2.3)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: vscode-deps
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vscode-deps
- dependency-name: "@types/vscode"
  dependency-version: 1.134.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: vscode-deps
- dependency-name: css-loader
  dependency-version: 7.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vscode-deps
- dependency-name: ovsx
  dependency-version: 1.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: vscode-deps
- dependency-name: smol-toml
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vscode-deps
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: vscode-deps
- dependency-name: webpack
  dependency-version: 5.110.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: vscode-deps
- dependency-name: webpack-cli
  dependency-version: 7.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vscode-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vscode-extension/vscode-deps-507f7328f1 branch from 7954ede to 51f1f5c Compare September 13, 2026 23:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants