socket-security[bot]
commented
2 months ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/@vscode/vsce@3.0.0 | environment, filesystem, shell Transitive: eval, network | +199 |
148 MB | vscode-bot |
🚮 Removed packages: npm/@vscode/vsce@2.31.1
Bumps @vscode/vsce from 2.31.1 to 3.0.0.
Release notes
Sourced from
@vscode/vsce's releases.... (truncated)
Commits
f7ed2e1Merge pull request #1035 from microsoft/benibenj/accessible-wolf6b64546engine updatece9b369update depricated dependencies and move to node 20b347c2bMerge pull request #1034 from microsoft/benibenj/revertDependency784e74dRevert "update depricated dependencies"b10ae0bfix: probabilistic trigger v8 crash (#1032)cf0bc32Merge pull request #1028 from microsoft/dev/bhavyau/need-more-info71d485dRemove need-more-info-closer workflowDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show