Skip to content

Commit 0cc4e3b

Browse files
EhabYEhabY
committed
chore(deps): update dependencies, bump electron for extract-zip CVE, fix vite/lint gaps
- Bump all workspace npm deps to latest semver-compatible versions (eventsource, eslint tooling, vitest/vite, storybook, coder catalog pin, pnpm itself, etc). Majors ignored by dependabot (@types/vscode, @types/node, typescript, ua-parser-js) are left untouched. - Bump electron devDependency 39.8.10 -> 42.5.1 to drop the vulnerable extract-zip dependency (GHSA-jmr9-qjv8-65gv, unfixable upstream) and a separate Electron cache-reuse CVE in the 42.0-42.5.0 range. CI's test-unit matrix now runs "latest" instead of the 42.3.0 pin to re-test whether the documented macOS arm64 oxc-transform regression still applies. - Bump toshimaru/auto-author-assign action to v3.1.0. - Fix Vite "native config loader" warnings in all four webview packages (__dirname -> import.meta.dirname, explicit .ts import extension). - Cover vitest.config.mts in typecheck and lint, which the *.ts globs were silently missing. - Exclude vitest.config.mts and pixel.jsonc from the packaged .vsix.
1 parent 6f27d3a commit 0cc4e3b

12 files changed

Lines changed: 969 additions & 1249 deletions

File tree

‎.github/workflows/ci.yaml‎

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -40,16 +40,15 @@ jobs:
4040
matrix:
4141
# Minimum supported version: VS Code 1.105 (Sept 2025) -> Electron 37 -> Node 22
4242
# See https://github.com/ewanharris/vscode-versions for version mapping.
43-
# Newer Electron is pinned (not "latest"): 42.3.1+ breaks the oxc transform on macOS arm64.
4443
include:
4544
- { os: ubuntu-24.04, name: Linux, electron-version: "37" }
46-
- { os: ubuntu-24.04, name: Linux, electron-version: "42.3.0" }
45+
- { os: ubuntu-24.04, name: Linux, electron-version: "latest" }
4746
- {
4847
os: windows-2025-vs2026,
4948
name: Windows,
50-
electron-version: "42.3.0",
49+
electron-version: "latest",
5150
}
52-
- { os: macos-15, name: macOS, electron-version: "42.3.0" }
51+
- { os: macos-15, name: macOS, electron-version: "latest" }
5352

5453
steps:
5554
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

‎.github/workflows/pr-auto-assign.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,4 +13,4 @@ jobs:
1313
runs-on: ubuntu-24.04
1414
steps:
1515
- name: Assign author
16-
uses: toshimaru/auto-author-assign@3e19bfc990cb1cf0589dce95e9f75289bb1e22de # v3.0.3
16+
uses: toshimaru/auto-author-assign@a78a94b219445cece8ccf0d45fec60af449f212a # v3.1.0

‎.vscodeignore‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,8 @@ tsconfig.json
1818
eslint.config.mjs
1919
.eslintcache
2020
esbuild.mjs
21+
vitest.config.mts
22+
pixel.jsonc
2123
.editorconfig
2224
.prettierignore
2325
**/.gitignore

‎eslint.config.mjs‎

Lines changed: 13 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,6 @@ export default defineConfig(
1818
"out/**",
1919
"dist/**",
2020
"**/*.d.ts",
21-
"vitest.config.ts",
2221
"**/vite.config*.ts",
2322
".vscode-test/**",
2423
"test/fixtures/scripts/**",
@@ -27,21 +26,31 @@ export default defineConfig(
2726

2827
// Base ESLint recommended rules (for JS/TS/TSX files only)
2928
{
30-
files: ["**/*.ts", "**/*.tsx", "**/*.js", "**/*.mjs", "**/*.cjs"],
29+
files: [
30+
"**/*.ts",
31+
"**/*.tsx",
32+
"**/*.mts",
33+
"**/*.cts",
34+
"**/*.js",
35+
"**/*.mjs",
36+
"**/*.cjs",
37+
],
3138
...eslint.configs.recommended,
3239
},
3340

3441
// TypeScript configuration with type-checked rules
3542
{
36-
files: ["**/*.ts", "**/*.tsx"],
43+
files: ["**/*.ts", "**/*.tsx", "**/*.mts", "**/*.cts"],
3744
extends: [
3845
...tseslint.configs.recommendedTypeChecked,
3946
...tseslint.configs.stylisticTypeChecked,
4047
importXFlatConfigs.typescript,
4148
],
4249
languageOptions: {
4350
parserOptions: {
44-
projectService: true,
51+
projectService: {
52+
allowDefaultProject: ["vitest.config.mts"],
53+
},
4554
tsconfigRootDir: import.meta.dirname,
4655
},
4756
},

‎package.json‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -786,7 +786,7 @@
786786
"@repo/shared": "workspace:*",
787787
"axios": "^1.19.0",
788788
"date-fns": "catalog:",
789-
"eventsource": "^4.1.1",
789+
"eventsource": "^5.1.1",
790790
"fflate": "^0.8.3",
791791
"find-process": "^2.1.1",
792792
"jsonc-parser": "^3.3.1",
@@ -802,7 +802,7 @@
802802
},
803803
"devDependencies": {
804804
"@coder/pixel-storybook": "^0.3.0",
805-
"@eslint-react/eslint-plugin": "^5.18.3",
805+
"@eslint-react/eslint-plugin": "^5.18.6",
806806
"@eslint/js": "^10.0.1",
807807
"@eslint/markdown": "^8.0.3",
808808
"@repo/mocks": "workspace:*",
@@ -813,7 +813,7 @@
813813
"@tanstack/react-query": "catalog:",
814814
"@testing-library/jest-dom": "^7.0.1",
815815
"@testing-library/react": "^16.3.2",
816-
"@tsconfig/node22": "^22.0.5",
816+
"@tsconfig/node22": "^22.0.6",
817817
"@types/mocha": "^10.0.10",
818818
"@types/node": "^22.20.1",
819819
"@types/proper-lockfile": "^4.1.4",
@@ -824,30 +824,30 @@
824824
"@types/vscode": "1.105.0",
825825
"@types/vscode-webview": "catalog:",
826826
"@types/ws": "^8.18.1",
827-
"@typescript-eslint/eslint-plugin": "^8.66.0",
828-
"@typescript-eslint/parser": "^8.66.0",
827+
"@typescript-eslint/eslint-plugin": "^8.67.0",
828+
"@typescript-eslint/parser": "^8.67.0",
829829
"@vitejs/plugin-react": "catalog:",
830-
"@vitest/coverage-v8": "^4.1.10",
830+
"@vitest/coverage-v8": "^4.1.11",
831831
"@vscode/codicons": "catalog:",
832832
"@vscode/test-cli": "^0.0.15",
833833
"@vscode/test-electron": "^3.1.0",
834834
"@vscode/vsce": "^3.9.2",
835835
"babel-plugin-react-compiler": "catalog:",
836836
"bufferutil": "^4.1.0",
837837
"coder": "catalog:",
838-
"concurrently": "^10.0.4",
838+
"concurrently": "^10.0.5",
839839
"cross-env": "^10.1.0",
840-
"dayjs": "^1.11.21",
841-
"electron": "39.8.10",
840+
"dayjs": "^1.11.23",
841+
"electron": "42.5.1",
842842
"esbuild": "^0.28.2",
843-
"eslint": "^10.8.1",
843+
"eslint": "^10.9.0",
844844
"eslint-config-prettier": "^10.1.8",
845845
"eslint-import-resolver-typescript": "^4.4.5",
846846
"eslint-plugin-import-x": "^4.17.1",
847-
"eslint-plugin-package-json": "^1.7.0",
847+
"eslint-plugin-package-json": "^1.7.1",
848848
"eslint-plugin-react-hooks": "^7.1.1",
849-
"eslint-plugin-storybook": "^10.5.7",
850-
"globals": "^17.9.0",
849+
"eslint-plugin-storybook": "^10.5.10",
850+
"globals": "^17.11.0",
851851
"jsdom": "^30.0.1",
852852
"jsonc-eslint-parser": "^3.3.0",
853853
"memfs": "^4.68.1",
@@ -857,15 +857,15 @@
857857
"react-dom": "catalog:",
858858
"storybook": "catalog:",
859859
"typescript": "catalog:",
860-
"typescript-eslint": "^8.66.0",
860+
"typescript-eslint": "^8.67.0",
861861
"utf-8-validate": "^6.0.6",
862862
"vite": "catalog:",
863-
"vitest": "^4.1.10"
863+
"vitest": "^4.1.11"
864864
},
865865
"extensionPack": [
866866
"ms-vscode-remote.remote-ssh"
867867
],
868-
"packageManager": "pnpm@11.21.0+sha512.521705bce689924eac72f5a3587122f362689ef6571e55ba80076fd637c11132ecffada26fad4ea79c485bfddbfd3d5a2a5b05805a77e893de71ec8a6cca3bb1",
868+
"packageManager": "pnpm@11.23.0+sha512.f00082e5b283a199b74e079da28d155c008fe232f44c8a06ea7ddfa014ecf719fc362f790ecc67b28106ddac2afb24c49a9a079159da560b2ce7d1e98efd11af",
869869
"engines": {
870870
"vscode": "^1.105.0",
871871
"node": ">= 22"

‎packages/netcheck/vite.config.ts‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
1-
import { createWebviewConfig } from "../webview-shared/createWebviewConfig";
1+
import { createWebviewConfig } from "../webview-shared/createWebviewConfig.ts";
22

3-
export default createWebviewConfig("netcheck", __dirname);
3+
export default createWebviewConfig("netcheck", import.meta.dirname);

‎packages/speedtest/vite.config.ts‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
1-
import { createWebviewConfig } from "../webview-shared/createWebviewConfig";
1+
import { createWebviewConfig } from "../webview-shared/createWebviewConfig.ts";
22

3-
export default createWebviewConfig("speedtest", __dirname);
3+
export default createWebviewConfig("speedtest", import.meta.dirname);

‎packages/tasks/vite.config.ts‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
1-
import { createReactWebviewConfig } from "../webview-shared/createWebviewConfig";
1+
import { createReactWebviewConfig } from "../webview-shared/createWebviewConfig.ts";
22

3-
export default createReactWebviewConfig("tasks", __dirname);
3+
export default createReactWebviewConfig("tasks", import.meta.dirname);

‎packages/workspaces/vite.config.ts‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
1-
import { createReactWebviewConfig } from "../webview-shared/createWebviewConfig";
1+
import { createReactWebviewConfig } from "../webview-shared/createWebviewConfig.ts";
22

3-
export default createReactWebviewConfig("workspaces", __dirname);
3+
export default createReactWebviewConfig("workspaces", import.meta.dirname);

0 commit comments

Comments
 (0)