From 20c06d12913e6d4bcc2eb9a99c40af6a7e083621 Mon Sep 17 00:00:00 2001 From: Joshua Raphael Date: Thu, 13 Aug 2026 00:42:02 -0700 Subject: [PATCH 1/2] bump ci pipeline dep versions --- .github/workflows/publish.yaml | 4 ++-- .github/workflows/test.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 65094ad..6cb52e8 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -11,12 +11,12 @@ jobs: deploy: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Install pnpm uses: pnpm/action-setup@v6 with: version: latest - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: 24 - run: make syntax diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 364dfdd..e6b565e 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -6,12 +6,12 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Install pnpm uses: pnpm/action-setup@v6 with: version: latest - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: 24 - run: make syntax From 855611818cfe5d1c1ba3ecc5b9486ebde2367d63 Mon Sep 17 00:00:00 2001 From: Joshua Raphael Date: Thu, 13 Aug 2026 00:52:50 -0700 Subject: [PATCH 2/2] fix previously undone override for serialize-javascript --- CHANGELOG.md | 16 ++++++++++++++++ pnpm-lock.yaml | 27 +++++++++------------------ pnpm-workspace.yaml | 5 +++++ 3 files changed, 30 insertions(+), 18 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 724602b..5b71f84 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,22 @@ All notable changes to the "vscode-rascript" extension will be documented in thi The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [[0.5.2](https://github.com/joshraphael/vscode-rascript/releases/tag/v0.5.3)] - 2026-MM-DD + +[diff](https://github.com/joshraphael/vscode-rascript/compare/v0.5.2...v0.5.3) + +### Added + +### Changed + +### Removed + +### Fixed + +### Security + +- Bump dependencies to fix multiple vulnerabilities [#54](https://github.com/joshraphael/vscode-rascript/security/dependabot/54), [#55](https://github.com/joshraphael/vscode-rascript/security/dependabot/55), [#56](https://github.com/joshraphael/vscode-rascript/security/dependabot/56), [#57](https://github.com/joshraphael/vscode-rascript/security/dependabot/57), [#58](https://github.com/joshraphael/vscode-rascript/security/dependabot/58), [#60](https://github.com/joshraphael/vscode-rascript/security/dependabot/60), [#61](https://github.com/joshraphael/vscode-rascript/security/dependabot/61), [#62](https://github.com/joshraphael/vscode-rascript/security/dependabot/62) + ## [[0.5.2](https://github.com/joshraphael/vscode-rascript/releases/tag/v0.5.2)] - 2026-06-10 [diff](https://github.com/joshraphael/vscode-rascript/compare/v0.5.1...v0.5.2) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 99ead23..b9d9534 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -4,6 +4,10 @@ settings: autoInstallPeers: true excludeLinksFromLockfile: false +overrides: + playwright-core: ^1.62.1 + serialize-javascript: ^7.0.5 + importers: .: @@ -1292,9 +1296,6 @@ packages: resolution: {integrity: sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==} engines: {node: '>=6'} - randombytes@2.1.0: - resolution: {integrity: sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==} - readable-stream@2.3.8: resolution: {integrity: sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==} @@ -1342,9 +1343,6 @@ packages: safe-buffer@5.1.2: resolution: {integrity: sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==} - safe-buffer@5.2.1: - resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==} - schema-utils@4.3.3: resolution: {integrity: sha512-eflK8wEtyOE6+hsaRVPxvUKYCpRgzLqDTb8krvAsRIwOGlHoSgYLgBXoubGgLd2fT41/OUYdb48v4k4WWHQurA==} engines: {node: '>= 10.13.0'} @@ -1354,8 +1352,9 @@ packages: engines: {node: '>=10'} hasBin: true - serialize-javascript@6.0.2: - resolution: {integrity: sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g==} + serialize-javascript@7.1.0: + resolution: {integrity: sha512-RNEqWOyhhUQYN9V1GfHwu9AR/g+NTciH6Z5u3/no6X3/w+04J2lVDL+svFQVXgXrEGBMG2puMVN3gq2SNGuTGw==} + engines: {node: '>=20.0.0'} setimmediate@1.0.5: resolution: {integrity: sha512-MATJdZp8sLqDl/68LfQmbP8zKPLQNV6BIZoIgrscFDQ+RsvK/BxeDQOgyxKKoh0y/8h3BqVFnCqQ/gd+reiIXA==} @@ -2780,7 +2779,7 @@ snapshots: minimatch: 9.0.9 ms: 2.1.3 picocolors: 1.1.1 - serialize-javascript: 6.0.2 + serialize-javascript: 7.1.0 strip-json-comments: 3.1.1 supports-color: 8.1.1 workerpool: 9.3.4 @@ -2939,10 +2938,6 @@ snapshots: punycode@2.3.1: {} - randombytes@2.1.0: - dependencies: - safe-buffer: 5.2.1 - readable-stream@2.3.8: dependencies: core-util-is: 1.0.3 @@ -2990,8 +2985,6 @@ snapshots: safe-buffer@5.1.2: {} - safe-buffer@5.2.1: {} - schema-utils@4.3.3: dependencies: '@types/json-schema': 7.0.15 @@ -3001,9 +2994,7 @@ snapshots: semver@7.8.5: {} - serialize-javascript@6.0.2: - dependencies: - randombytes: 2.1.0 + serialize-javascript@7.1.0: {} setimmediate@1.0.5: {} diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index cc33f45..3ee86ba 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -1,2 +1,7 @@ allowBuilds: '@playwright/browser-chromium': true +minimumReleaseAgeExclude: + - playwright-core@1.62.1 +overrides: + 'playwright-core': '^1.62.1' # try removing once @vscode/test-cli upgrades > 0.0.15 + 'serialize-javascript': '^7.0.5' # try removing once @vscode/test-cli upgrades > 0.0.15 \ No newline at end of file