Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Aug 3, 2025

This PR contains the following updates:

Package Change Age Confidence
@vscode/vsce (source) ^3.2.2 -> ^3.6.0 age confidence

Release Notes

Microsoft/vsce (@​vscode/vsce)

v3.6.0

Compare Source

Changes:

  • #​1175: Allow dots in tags and update extension tag handling
  • #​1173: Exclude image files from scanning for secrets
  • #​1174: Update secretlint dependency
  • #​1170: Improve error message for missing entrypoints
  • #​1169: Sanitize tags to remove special characters
  • #​1166: Add language-models tag for extensions with languageModels contribution
  • #​1167: chore: npm audit fix

This list of changes was auto generated.

v3.5.0

Compare Source

Changes:

  • #​1162: Update secretlint dependencies
  • #​1161: Bump tar-fs from 2.1.2 to 2.1.3
  • #​1159: Update chalk version to 4.1.2
  • #​1128: fix: improve error messages for vsce publish validation
  • #​1130: Make the [Content_Types].xml file deterministic
  • #​1158: remove codeql and cg from OSS build
  • #​1157: Add OSS pipeline

This list of changes was auto generated.

v3.4.2

Compare Source

Changes:

  • #​1152: Only scan secrets when .env is ignored and vice versa
  • #​1155: Fix npm token scanning false positives
  • #​1151: Do not scan node modules and improve error messages for secret scanning

This list of changes was auto generated.

v3.4.1

Compare Source

Changes:

  • #​1149: Fix false positives in private key scanning
  • #​1148: Clarify unpublish command description

This list of changes was auto generated.

v3.4.0

Compare Source

Changes:

  • #​1145: Allow packaging .env and secrets using command line flags
  • #​1144: Scan for secrets and disallow .env files
  • #​1141: Add language-model-tools tag for MCP extensions
  • #​1138: Proper entry point validation
  • #​1137: Add 'mcp' tag support in TagsProcessor
  • #​1131: Remove deprecated SVG sources from TrustedSVGSources array
  • #​1127: Improve error message for Personal Access Token verification

This list of changes was auto generated.

v3.3.2

Compare Source

Changes:

  • #​1126: Bump tar-fs from 2.1.1 to 2.1.2

This list of changes was auto generated.

v3.3.1

Compare Source

Changes:

  • #​1124: Add 'copilot-tools' to languageModelTools contributions

This list of changes was auto generated.

v3.3.0

Compare Source

Changes:

  • #​1122: Remove unused 'github-copilot' tag
  • #​1120: Add tools tag for languageModelTools contribution
  • #​1116: add VSCE_DEBUG to spit out error
  • #​1114: Bump serialize-javascript and mocha

This list of changes was auto generated.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@zobo zobo merged commit 60e057d into main Aug 3, 2025
8 checks passed
@zobo zobo deleted the renovate/vscode-vsce-3.x branch August 3, 2025 22:29
@github-actions
Copy link

github-actions bot commented Aug 3, 2025

🎉 This PR is included in version 1.36.2 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants