chore(deps): update all dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@babel/runtime (source)	^7.26.7 → ^8.0.0			devDependencies	major
@types/node (source)	~24.11.0 → ~24.19.0			devDependencies	minor
@vscode/vsce (source)	^3.2.2 → ^4.0.0			devDependencies	major
actions/checkout	v6 → v7			action	major
actions/setup-node	v6 → v7			action	major
concurrently	^9.0.0 → ^10.0.0			devDependencies	major
esbuild	^0.27.0 → ^0.28.0			devDependencies	minor
pnpm (source)	10.30.3 → 12.6.0			packageManager	major
pnpm/action-setup	v4.2.0 → v6.1.0			action	major
typescript (source)	^5.6.2 → ^7.0.0			devDependencies	major

---

Release Notes

babel/babel (@​babel/runtime)

v8.0.5

Compare Source

👓 Spec Compliance

• babel-parser
  • #​18218 fix(parser): do not form html entity for invalid codepoint (@​JLHwung)

🐛 Bug Fix

• babel-parser
  • #​18215 fix(parser): remove non-decimal prefix from bigint (@​JLHwung)
  • #​18063 Disallow new import prop access (@​JLHwung)
• babel-plugin-transform-destructuring
  • #​18214 fix: only collapse the empty-object check when it targets the declared binding (@​Kjubikstronk)
• babel-plugin-transform-typescript
  • #​18190 fix(ts): improve variable handling in namespace (@​JLHwung)
  • #​18207 [ts] Allow merging enum into a namespace (@​nicolo-ribaudo)
• babel-node
  • #​18217 Fix import path for babel-node.js (@​drubetti)
• babel-plugin-bugfix-safari-rest-destructuring-rhs-array
  • #​18213 fix(bugfix): bound check before array access (@​JLHwung)
• babel-traverse
  • #​18183 fix(remove): unwrap single sequence expression (@​JLHwung)
  • #​18153 Handle null in getAll{Prev,Next}Siblings (@​JLHwung)
• babel-plugin-transform-block-scoping
  • #​18194 fix: improve for loop closure environment check (@​JLHwung)
  • #​18193 fix: assign closure body after handling return (@​JLHwung)
  • #​18088 Fix initialization of nested for loop head declarations (@​journey-ad)
• babel-generator
  • #​18202 fix(generator): keep parens for ?. chain in tag (@​JLHwung)
• babel-register
  • #​18137 fix(babel-register): preserve app-managed graceful shutdown (@​jibin7jose)
• Other
  • #​18140 chore: fix @​babel/eslint-plugin peer deps (@​JLHwung)
• babel-cli, babel-helper-transform-fixture-test-runner, babel-register
  • #​18131 fix(register): do not inherit parent execArgv (@​JLHwung)
• babel-standalone
  • #​18095 Add types for @babel/standalone (@​liuxingbaoyu)

📝 Documentation

• #​18187 Add AI policy (@​nicolo-ribaudo)

🏠 Internal

• babel-cli, babel-core, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-create-regexp-features-plugin, babel-helper-fixtures, babel-preset-env
  • #​18145 refactor: replace semver with verkit (@​sxzz)
• babel-node
  • #​18177 Update node flags list (@​nicolo-ribaudo)
• babel-types
  • #​18103 Simplify AST validators (@​fisker)

🏃‍♀️ Performance

• babel-parser
  • #​18176 perf: Improve @babel/parser (@​liuxingbaoyu)

v8.0.0

Compare Source

👓 Spec Compliance

• babel-core
  • #​18039 perf: Only extract source map comments at the end of the file (@​liuxingbaoyu)

💥 Breaking Change

• babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register
  • #​18069 Fallback to assuming ESM support with modules: auto (@​nicolo-ribaudo)
• babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime
  • #​18036 Remove corejs exports for @babe/runtime-corejs3 (@​liuxingbaoyu)
• babel-parser
  • #​18034 Remove locations: "packed" (@​liuxingbaoyu)

🐛 Bug Fix

• babel-generator
  • #​18046 fix(generator): improve new callee parens check (@​JLHwung)
• babel-plugin-transform-modules-systemjs
  • #​18032 fix(systemjs): support proto as an export name (@​JLHwung)

📝 Documentation

• #​18070 Add EOL date for Babel 7 (end of June 2027) to SECURITY.md (@​nicolo-ribaudo)

🏠 Internal

• #​18018 ci: enforce yarn integrity (@​JLHwung)

🏃‍♀️ Performance

• babel-core
  • #​18039 perf: Only extract source map comments at the end of the file (@​liuxingbaoyu)

v7.29.7

Compare Source

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.2

Compare Source

v7.29.2 (2026-03-16)

👓 Spec Compliance

• babel-parser
  • #​17840 [7.x backport] async x => {} must be in leading pos (@​JLHwung)

🐛 Bug Fix

• babel-helpers, babel-plugin-transform-async-generator-functions, babel-preset-env, babel-runtime-corejs3
  • #​17805 [7.x backport] fix: Properly handle await in finally (@​liuxingbaoyu)
• babel-preset-env
  • #​17789 [7.x backport] preset-env include/exclude should accept bugfix plugins (@​JLHwung)

🏠 Internal

• #​17813 chore: update eslint peer deps (@​JLHwung)

Committers: 2

• Huáng Jùnliàng (@​JLHwung)
• @​liuxingbaoyu

v7.28.6

Compare Source

v7.28.6 (2026-01-12)

Thanks @​kadhirash and @​kolvian for your first PRs!

🐛 Bug Fix

• babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types
  • #​17589 Improve Unicode handling in code-frame tokenizer (@​JLHwung)
• babel-plugin-transform-regenerator
  • #​17556 fix: transform-regenerator correctly handles scope (@​liuxingbaoyu)
• babel-plugin-transform-react-jsx
  • #​17538 fix: Keep jsx comments (@​liuxingbaoyu)

💅 Polish

• babel-core, babel-standalone
  • #​17606 Polish(standalone): improve message on invalid preset/plugin (@​JLHwung)

🏠 Internal

• babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex
  • #​17580 Allow Babel 8 in compatible Babel 7 plugins (@​nicolo-ribaudo)

🏃‍♀️ Performance

• babel-plugin-transform-react-jsx
  • #​17555 perf: Use lighter traversal for jsx __source,__self (@​liuxingbaoyu)

Committers: 7

• Babel Bot (@​babel-bot)
• Eliot Pontarelli (@​kolvian)
• Huáng Jùnliàng (@​JLHwung)
• Kadhirash Sivakumar (@​kadhirash)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu
• coderaiser (@​coderaiser)

v7.28.4

Compare Source

🏠 Internal

• babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
  • #​17493 Update Jest to v30.1.1 (@​JLHwung)
• babel-plugin-transform-regenerator
  • #​17455 chore: Clean up transform-regenerator (@​liuxingbaoyu)
• babel-core
  • #​17474 Switch to @​jridgewell/remapping (@​mrginglymus)

v7.28.3

Compare Source

👓 Spec Compliance

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env
  • #​17443 [static blocks] Do not inject new static fields after static code (@​nicolo-ribaudo)

🐛 Bug Fix

• babel-parser
  • #​17465 fix(parser/typescript): parse import("./a", {with:{},}) (@​easrng)
  • #​17478 fix(parser): stop subscript parsing on async arrow (@​JLHwung)

💅 Polish

• babel-plugin-transform-regenerator, babel-plugin-transform-runtime
  • #​17363 Do not save last yield in call in temp var (@​nicolo-ribaudo)

📝 Documentation

• #​17448 move eslint-{parser,plugin} docs to the website (@​JLHwung)

🏠 Internal

• #​17454 Enable type checking for scripts and babel-worker.cjs (@​JLHwung)

🔬 Output optimization

• babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions
  • #​17444 Optimize do expression output (@​JLHwung)

v7.28.2

Compare Source

🐛 Bug Fix

• babel-types
  • #​17445 [babel 7] Make operator param in t.tsTypeOperator optional (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • #​17441 fix: regeneratorDefine compatibility with es5 strict mode (@​liuxingbaoyu)

v7.27.6

Compare Source

🐛 Bug Fix

• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • #​17366 fix: finally causes unexpected return value (@​liuxingbaoyu)
• babel-generator, babel-parser, babel-types
  • #​17357 Ensure syntactic ordering when visiting array-type AST nodes (@​JLHwung)

v7.27.4

Compare Source

👓 Spec Compliance

• babel-parser, babel-plugin-proposal-explicit-resource-management
  • #​17323 Disallow using in bare case statement (@​JLHwung)

💅 Polish

• babel-parser
  • #​17311 Improve parseExpression error messages (@​JLHwung)

🔬 Output optimization

• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​17287 Reduce regenerator size more (@​liuxingbaoyu)
• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • #​17334 Use shorter method names for regenerator context (@​nicolo-ribaudo)
  • #​17268 Reduce regenerator helper size (@​liuxingbaoyu)
• babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
  • #​17238 Split regeneratorRuntime into multiple helpers (@​nicolo-ribaudo)

v7.27.3

Compare Source

🐛 Bug Fix

• babel-generator
  • #​17324 Improve multiline comments handling in yield/await expression (@​JLHwung)
• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • #​17328 Correctly set .displayName on GeneratorFunction (@​nicolo-ribaudo)
• babel-plugin-proposal-explicit-resource-management
  • #​17319 fix: handle shadowed binding in for using of body (@​JLHwung)
  • #​17317 fix: support named evaluation for using declaration (@​JLHwung)
• babel-plugin-proposal-decorators, babel-types
  • #​17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@​magic-akari)
• babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
  • #​17257 Preserve class id when transforming using declarations with exported class (@​JLHwung)
• babel-parser
  • #​17312 fix(parser): properly handle optional markers in generator class methods (@​magic-akari)
  • #​17307 fix(parser): Terminate modifier parsing at newline (@​magic-akari)
• babel-generator, babel-parser
  • #​17308 Improve import phase parsing (@​JLHwung)

v7.27.1

Compare Source

👓 Spec Compliance

• babel-parser
  • #​17254 Allow using of as lexical declaration within for (@​JLHwung)
  • #​17230 Disallow get/set in TSPropertySignature (@​JLHwung)
• babel-parser, babel-types
  • #​17193 Stricter TSImportType options parsing (@​JLHwung)

🐛 Bug Fix

• babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  • #​17137 fix: do expressions should allow early exit (@​kermanx)
• babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  • #​17251 Fix: propagate argument evaluation errors through async promise chain (@​magic-akari)
• babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  • #​17231 fix apply()/call() annotated as pure (@​Lacsw)
• babel-helper-fixtures, babel-parser
  • #​17233 Create ChainExpression within TSInstantiationExpression (@​JLHwung)
• babel-generator, babel-parser
  • #​17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@​JLHwung)
• babel-parser
  • #​17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@​JLHwung)
  • #​17080 Fix start of TSParameterProperty (@​JLHwung)
• babel-compat-data, babel-preset-env
  • #​17228 Update firefox bugfix compat data (@​JLHwung)
• babel-traverse
  • #​17156 fix: Objects and arrays with multiple references should not be evaluated (@​liuxingbaoyu)
• babel-generator
  • #​17216 Fix: support const type parameter in generator (@​JLHwung)

💅 Polish

• babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse
  • #​17221 Reduce generated names size for the 10th-11th (@​nicolo-ribaudo)

🏠 Internal

• babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​17263 Remove unused regenerator-runtime dep in @babel/runtime (@​nicolo-ribaudo)
• babel-compat-data, babel-preset-env
  • #​17256 Tune plugin compat data (@​JLHwung)
• babel-compat-data, babel-standalone
  • #​17236 migrate babel-compat-data build script to mjs (@​JLHwung)
• Other
  • #​17232 Bump typescript-eslint to 8.29.1 (@​JLHwung)
  • #​17219 test: add basic typescript-eslint integration tests (@​JLHwung)
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
• babel-register
  • #​16844 Migrate @babel/register to cts (@​liuxingbaoyu)
• babel-cli, babel-compat-data, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-fixtures, babel-helper-module-imports, babel-helper-module-transforms, babel-helper-plugin-test-runner, babel-helper-transform-fixture-test-runner, babel-helpers, babel-node, babel-parser, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-plugin-transform-react-display-name, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-preset-env, babel-register, babel-standalone, babel-types
  • #​17207 Enforce node protocol import (@​JLHwung)
• babel-plugin-transform-regenerator
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-transform-regenerator
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
• babel-helpers
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)

🔬 Output optimization

• babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
  • #​16538 Reduce interopRequireWildcard size (@​liuxingbaoyu)
• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • #​17213 Reduce regeneratorRuntime size (@​liuxingbaoyu)

v7.27.0

Compare Source

👓 Spec Compliance

• babel-generator, babel-parser
  • #​16977 Default importAttributesKeyword to with (@​JLHwung)

🚀 New Feature

• babel-helper-create-class-features-plugin, babel-traverse, babel-types
  • #​17169 Allow traverseFast to exit early (@​liuxingbaoyu)
• babel-parser, babel-types
  • #​17110 Add ImportAttributes to Standardized and move its parser test fixtures (@​JLHwung)
• babel-generator
  • #​17100 fix(babel-generator): add named export of generate function (@​vovkasm)
• babel-parser, babel-template
  • #​17149 Add allowYieldOutsideFunction to parser (@​liuxingbaoyu)
• babel-plugin-transform-typescript, babel-traverse
  • #​17102 feat: Add upToScope parameter to hasBinding (@​liuxingbaoyu)
• babel-parser
  • #​17082 Support ESTree AccessorProperty (@​JLHwung)
• babel-types
  • #​17162 feat(babel-types): Add support for BigInt literal conversion in valueToNode (@​ishchhabra)

🐛 Bug Fix

• babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  • #​16816 fix: Class reference in type throws error (@​liuxingbaoyu)
• babel-traverse
  • #​17170 fix: Reset child scopes when scope.crawl() (@​liuxingbaoyu)
• babel-helpers, babel-preset-typescript, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​17118 Fix: align behaviour to tsc rewriteRelativeImportExtensions (@​JLHwung)
• babel-cli
  • #​17182 fix: @babel/cli generates duplicate inline source maps (@​liuxingbaoyu)
• babel-plugin-transform-named-capturing-groups-regex, babel-types
  • #​17175 Generate computed proto key (@​JLHwung)

🏃‍♀️ Performance

• babel-types
  • #​16870 perf: Improve builders of @babel/types (@​liuxingbaoyu)
• babel-helper-create-regexp-features-plugin
  • #​17176 fix: improve duplicate named groups check (@​JLHwung)

Microsoft/vsce (@​vscode/vsce)

v4.0.0

Compare Source

Changes:

• #​1329: Offer prompted migration of legacy PAT credentials
• #​1325: Remove leven dependency
• #​1324: Replace form-data with Node streams
• #​1326: Fix MSAL declaration build failure
• #​1323: Relock deps and mirror to package.json
• #​1314: Replace chalk with Node styling
• #​1312: Remove parse-semver dependency
• #​1313: Reduce secretlint dependency tree
• #​1315: chore(deps): bump the github-actions group with 2 updates
• #​1306: Pin GitHub Actions to full-length commit SHAs

See More

• #​1309: Replace glob with tinyglobby
• #​1308: Raise Node.js baseline to 22
• #​1305: Update and replace many dependencies
• #​1298: chore(deps): bump js-yaml from 4.2.0 to 4.3.1
• #​1297: Hide OIDC option from publish help
• #​1296: Remove redundant secretlint dependency
• #​1295: chore(deps): bump fast-uri from 3.1.4 to 3.1.5
• #​1294: chore(deps): bump brace-expansion
• #​1293: chore(deps): bump fast-uri from 3.1.2 to 3.1.4
• #​1292: chore(deps): bump linkify-it from 5.0.1 to 5.0.2
• #​1291: auth: support OIDC trusted publishing
• #​1289: chore(deps): bump js-yaml and @​textlint/linter-formatter
• #​1288: chore(deps): bump form-data from 4.0.4 to 4.0.6
• #​1287: chore(deps): bump markdown-it from 14.1.1 to 14.2.0
• #​1284: chore(deps): bump tmp from 0.2.6 to 0.2.7

This list of changes was auto generated.

v3.9.2

Compare Source

Changes:

• #​1283: fix: skip APIScan
• #​1282: chore: bump CI to Node 22 and fix build
• #​1279: Bump the uuid test fixture version to 100.0.0
• #​1278: Bump tmp from 0.2.4 to 0.2.6
• #​1277: Bump qs from 6.14.2 to 6.15.2
• #​1276: Bump uuid and @​azure/msal-node
• #​1274: Run npm audit fix
• #​1272: Bump fast-uri from 3.0.6 to 3.1.2
• #​1267: Bump minimatch from 10.2.2 to 10.2.3
• #​1247: Update minimatch dependency to v10

This list of changes was auto generated.

v3.9.1

Compare Source

Changes:

• #​1266: fix: module type mismatch

This list of changes was auto generated.

v3.9.0

Compare Source

Changes:

• #​1263: fix: build regressions in 3.8.1
• #​1261: Add override for serialize-javascript

This list of changes was auto generated.

v3.8.1

Compare Source

Changes:

• #​1259: chore: update @​azure/identity to 4.13.1 and modernize TypeScript/Node.js configuration

This list of changes was auto generated.

v3.8.0

Compare Source

Changes:

• #​1258: fix: run npm audit fix
• #​1255: Bump brace-expansion
• #​1253: Bump picomatch from 2.3.1 to 2.3.2
• #​1252: Bump yauzl from 2.10.0 to 3.2.1
• #​1250: Bump underscore from 1.13.1 to 1.13.8
• #​1249: Bump minimatch
• #​1243: Bump markdown-it from 14.1.0 to 14.1.1
• #​1244: Bump qs from 6.14.1 to 6.14.2
• #​1239: Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1
• #​1238: Bump lodash from 4.17.21 to 4.17.23

See More

• #​1234: Bump qs from 6.11.0 to 6.14.1
• #​1233: Return non-zero exit code when signature verification fails
• #​1232: Audit npm package
• #​1228: Bump jws

This list of changes was auto generated.

v3.7.1

Compare Source

Changes:

• #​1223: Bump js-yaml
• #​1222: Bump glob

This list of changes was auto generated.

v3.7.0

Compare Source

Changes:

• #​1219: Remove invalid validation for extension dependencies
• #​1212: Validate extension dependencies use lowercase letters and warn about deprecated github.copilot
• #​1209: Bump validator from 13.9.0 to 13.15.20
• #​1200: Bump tar-fs from 2.1.3 to 2.1.4

This list of changes was auto generated.

v3.6.2

Compare Source

Changes:

• #​1199: fix: generate language model tag for languageModelChatProvider contributions

This list of changes was auto generated.

v3.6.1

Compare Source

Changes:

• #​1198: chore: bump vsce-sign to 2.0.7
• #​1194: Engineering - do not run Azure Pipeline for pull requests
• #​1193: fix: check exec params
• #​1191: Bump tmp from 0.2.3 to 0.2.4
• #​1188: Avoid Node.js DEP0190 warning by using string form for prepublish command
• #​1190: chore: migrate PR check to GitHub Actions
• #​1189: update secretlint
• #​1187: Bump form-data from 4.0.0 to 4.0.4
• #​1185: chore: onboard OSS pipeline to 1ES template
• #​1179: add commonjs annotation to package.json

This list of changes was auto generated.

v3.6.0

Compare Source

Changes:

• #​1175: Allow dots in tags and update extension tag handling
• #​1173: Exclude image files from scanning for secrets
• #​1174: Update secretlint dependency
• #​1170: Improve error message for missing entrypoints
• #​1169: Sanitize tags to remove special characters
• #​1166: Add language-models tag for extensions with languageModels contribution
• #​1167: chore: npm audit fix

This list of changes was auto generated.

v3.5.0

Compare Source

Changes:

• #​1162: Update secretlint dependencies
• #​1161: Bump tar-fs from 2.1.2 to 2.1.3
• #​1159: Update chalk version to 4.1.2
• #​1128: fix: improve error messages for vsce publish validation
• #​1130: Make the [Content_Types].xml file deterministic
• #​1158: remove codeql and cg from OSS build
• #​1157: Add OSS pipeline

This list of changes was auto generated.

v3.4.2

Compare Source

Changes:

• #​1152: Only scan secrets when .env is ignored and vice versa
• #​1155: Fix npm token scanning false positives
• #​1151: Do not scan node modules and improve error messages for secret scanning

This list of changes was auto generated.

v3.4.1

Compare Source

Changes:

• #​1149: Fix false positives in private key scanning
• #​1148: Clarify unpublish command description

This list of changes was auto generated.

v3.4.0

Compare Source

Changes:

• #​1145: Allow packaging .env and secrets using command line flags
• #​1144: Scan for secrets and disallow .env files
• #​1141: Add language-model-tools tag for MCP extensions
• #​1138: Proper entry point validation
• #​1137: Add 'mcp' tag support in TagsProcessor
• #​1131: Remove deprecated SVG sources from TrustedSVGSources array
• #​1127: Improve error message for Personal Access Token verification

This list of changes was auto generated.

v3.3.2

Compare Source

Changes:

• #​1126: Bump tar-fs from 2.1.1 to 2.1.2

This list of changes was auto generated.

v3.3.1

Compare Source

Changes:

• #​1124: Add 'copilot-tools' to languageModelTools contributions

This list of changes was auto generated.

v3.3.0

Compare Source

Changes:

• #​1122: Remove unused 'github-copilot' tag
• #​1120: Add tools tag for languageModelTools contribution
• #​1116: add VSCE_DEBUG to spit out error
• #​1114: Bump serialize-javascript and mocha

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: cef1cd8

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR