Skip to content

build(deps-dev): bump ovsx from 1.0.2 to 1.1.1 - #168

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/master/ovsx-1.1.1
Open

build(deps-dev): bump ovsx from 1.0.2 to 1.1.1#168
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/master/ovsx-1.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown

Bumps ovsx from 1.0.2 to 1.1.1.

Release notes

Sourced from ovsx's releases.

CLI v1.1.1

Dependencies

  • Bump ip-address from 10.2.0 to 10.4.0
  • Bump fast-uri from 3.1.4 to 3.1.5
  • Bump js-yaml from 4.3.0 to 4.3.1

Frontend Library v1.1.1

Fixed

  • Fix the WebUI build failing on s390x and ppc64le: use postcss instead of lightningcss (no ppc64le binary) for CSS, and bump vite for the Rolldown big-endian sourcemap fix (#2051)
  • Fix the admin publisher revoke dialog prompting for an Eclipse login even when the target publisher's agreement status is none or could not be determined (nothing confirmed to revoke)

Dependencies

  • Remove the unused @mui/base dependency; it is deprecated upstream (replaced by @base-ui/react) and nothing in the codebase imports from it
  • Bump socks from 2.8.3 to 2.8.9
  • Bump ip-address from 9.0.5 to 10.4.0
  • Bump postcss from 8.5.22 to 8.5.25
  • Bump vite from 8.1.5 to 8.2.1
  • Bump dompurify from 3.4.12 to 3.4.13
  • Bump js-yaml from 4.3.0 to 4.3.1
  • Bump react-router from 7.18.1 to 7.18.2

v1.1.1

This release of Open VSX consists of:

Deploying the server application is documented in the Wiki.

What's Changed

🏕 Features

... (truncated)

Changelog

Sourced from ovsx's changelog.

[v1.1.1] (09/08/2026)

Dependencies

  • Bump ip-address from 10.2.0 to 10.4.0
  • Bump fast-uri from 3.1.4 to 3.1.5
  • Bump js-yaml from 4.3.0 to 4.3.1

[v1.1.0] (02/08/2026)

Added

  • Add an encrypted filestore as fallback to the system keychain if it cant be accessed (#1950)
  • Add --allow-missing-repository option to the publish command, passed on to vsce to package an extension whose package.json has no repository field without asking for confirmation (#1735)

Changed

  • Replace keytar with cross-keychain to store credentials in the system keychain (#1950)
  • Mask token input when using login command (#1966

Dependencies

  • Bump js-yaml from 4.2.0 to 4.3.0 (#1976)
  • Bump tar from 7.5.16 to 7.5.21 (#1987)
  • Bump brace-expansion from 1.1.16 to 1.1.18 (#2031)
Commits
  • 0eb87af chore: prepare cli 1.1.1 release
  • a3bcfef build(deps): bump js-yaml from 4.3.0 to 4.3.1 in /cli (#2056)
  • 5c257bf build(deps): bump fast-uri from 3.1.4 to 3.1.5 in /cli (#2041)
  • ed9f099 chore(deps): bump socks and ip-address versions
  • 37bc90b chore: bump for next dev cycle
  • 53049dc chore: prepare cli version for release
  • c31e166 chore: prepare for cli-1.1.0 release
  • 556069e chore(deps): bump brace-expansion in cli
  • 5de3810 build(deps): bump brace-expansion from 1.1.16 to 1.1.18 in /cli (#2031)
  • 36de5ac feat: add --allow-empty-repository option to ovsx publish (#2012)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [ovsx](https://github.com/eclipse-openvsx/openvsx/tree/HEAD/cli) from 1.0.2 to 1.1.1.
- [Release notes](https://github.com/eclipse-openvsx/openvsx/releases)
- [Changelog](https://github.com/eclipse-openvsx/openvsx/blob/main/cli/CHANGELOG.md)
- [Commits](https://github.com/eclipse-openvsx/openvsx/commits/v1.1.1/cli)

---
updated-dependencies:
- dependency-name: ovsx
  dependency-version: 1.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency updates label Aug 14, 2026
@dependabot
dependabot Bot requested a review from FanaticPythoner as a code owner August 14, 2026 08:53
@dependabot dependabot Bot added the dependencies Dependency updates label Aug 14, 2026
@github-actions

github-actions Bot commented Aug 14, 2026

Copy link
Copy Markdown

PR VSIX: ready

Full CI passed for d014ac1d38ba.

Security: This VSIX contains unreviewed code from this pull request. Use an isolated VS Code profile and a disposable test workspace without production credentials.

Platform Target Download
Windows x64 win32-x64 Download VSIX
Windows Arm64 win32-arm64 Download VSIX
Linux x64 linux-x64 Download VSIX
Linux Arm64 linux-arm64 Download VSIX
Linux Armhf linux-armhf Download VSIX
macOS Intel darwin-x64 Download VSIX
macOS Apple silicon darwin-arm64 Download VSIX
Alpine Linux x64 alpine-x64 Download VSIX
Alpine Linux Arm64 alpine-arm64 Download VSIX
Web web Download VSIX

Expires: 2026-09-13T08:56:19Z

Installation:

  1. Download the VSIX matching the test platform while signed in to GitHub.
  2. Run Profiles: Create a Temporary Profile from the VS Code Command Palette.
  3. Open a disposable test workspace without production credentials.
  4. Run Extensions: Install from VSIX... from the Command Palette.

Workflow run

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants