Skip to content

Bump ovsx from 0.10.12 to 1.1.1 - #581

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/ovsx-1.1.1
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/ovsx-1.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •

Copy link
Copy Markdown
Contributor

Bumps ovsx from 0.10.12 to 1.1.1.

Release notes

Sourced from ovsx's releases.

CLI v1.1.1

Dependencies

  • Bump ip-address from 10.2.0 to 10.4.0
  • Bump fast-uri from 3.1.4 to 3.1.5
  • Bump js-yaml from 4.3.0 to 4.3.1

Frontend Library v1.1.1

Fixed

  • Fix the WebUI build failing on s390x and ppc64le: use postcss instead of lightningcss (no ppc64le binary) for CSS, and bump vite for the Rolldown big-endian sourcemap fix (#2051)
  • Fix the admin publisher revoke dialog prompting for an Eclipse login even when the target publisher's agreement status is none or could not be determined (nothing confirmed to revoke)

Dependencies

  • Remove the unused @mui/base dependency; it is deprecated upstream (replaced by @base-ui/react) and nothing in the codebase imports from it
  • Bump socks from 2.8.3 to 2.8.9
  • Bump ip-address from 9.0.5 to 10.4.0
  • Bump postcss from 8.5.22 to 8.5.25
  • Bump vite from 8.1.5 to 8.2.1
  • Bump dompurify from 3.4.12 to 3.4.13
  • Bump js-yaml from 4.3.0 to 4.3.1
  • Bump react-router from 7.18.1 to 7.18.2

v1.1.1

This release of Open VSX consists of:

Deploying the server application is documented in the Wiki.

What's Changed

🏕 Features

... (truncated)

Changelog

Sourced from ovsx's changelog.

[v1.1.1] (09/08/2026)

Dependencies

  • Bump ip-address from 10.2.0 to 10.4.0
  • Bump fast-uri from 3.1.4 to 3.1.5
  • Bump js-yaml from 4.3.0 to 4.3.1

[v1.1.0] (02/08/2026)

Added

  • Add an encrypted filestore as fallback to the system keychain if it cant be accessed (#1950)
  • Add --allow-missing-repository option to the publish command, passed on to vsce to package an extension whose package.json has no repository field without asking for confirmation (#1735)
  • Support trusted publishing: publish can exchange an OIDC ID token for a short-lived publishing token, via --trusted-publishing, --idToken and --oidcAudience

Changed

  • Replace keytar with cross-keychain to store credentials in the system keychain (#1950)
  • Mask token input when using login command (#1966

Dependencies

  • Bump js-yaml from 4.2.0 to 4.3.0 (#1976)
  • Bump tar from 7.5.16 to 7.5.21 (#1987)
  • Bump brace-expansion from 1.1.16 to 1.1.18 (#2031)

[v1.0.2] (23/06/2026)

Dependencies

  • Bump tmp from 0.2.6 to 0.2.7 (#1903)
  • Bump tar from 7.5.11 to 7.5.16 (#1911)
  • Bump form-data from 4.0.4 to 4.0.6 (#1910)
  • Bump js-yaml from 4.1.1 to 4.2.0 (#1912)
  • Bump markdown-it from 14.1.1 to 14.2.0 (#1913)

[v1.0.1] (11/06/2026)

Fixes

  • Properly encode path segments in getUrl method (#1893)

[v1.0.0] (28/05/2026)

Dependencies

  • Bump fast-uri from 3.1.0 to 3.1.2 (#1829)
  • Bump brace-expansion from 5.0.5 to 5.0.6 (#1846)
  • Bump qs from 6.15.0 to 6.15.2 (#1869)

... (truncated)

Commits
  • 0eb87af chore: prepare cli 1.1.1 release
  • a3bcfef build(deps): bump js-yaml from 4.3.0 to 4.3.1 in /cli (#2056)
  • 5c257bf build(deps): bump fast-uri from 3.1.4 to 3.1.5 in /cli (#2041)
  • ed9f099 chore(deps): bump socks and ip-address versions
  • 37bc90b chore: bump for next dev cycle
  • 53049dc chore: prepare cli version for release
  • c31e166 chore: prepare for cli-1.1.0 release
  • 556069e chore(deps): bump brace-expansion in cli
  • 5de3810 build(deps): bump brace-expansion from 1.1.16 to 1.1.18 in /cli (#2031)
  • 36de5ac feat: add --allow-empty-repository option to ovsx publish (#2012)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ovsx-1.1.1 branch 3 times, most recently from 33f114f to 4d14cd7 Compare August 20, 2026 23:34
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ovsx-1.1.1 branch 5 times, most recently from f35ee97 to 6418aa0 Compare September 2, 2026 19:55
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ovsx-1.1.1 branch 2 times, most recently from 981f23b to c18c948 Compare September 10, 2026 03:03
Bumps [ovsx](https://github.com/eclipse-openvsx/openvsx/tree/HEAD/cli) from 0.10.12 to 1.1.1.
- [Release notes](https://github.com/eclipse-openvsx/openvsx/releases)
- [Changelog](https://github.com/eclipse-openvsx/openvsx/blob/main/cli/CHANGELOG.md)
- [Commits](https://github.com/eclipse-openvsx/openvsx/commits/v1.1.1/cli)

---
updated-dependencies:
- dependency-name: ovsx
  dependency-version: 1.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ovsx-1.1.1 branch from c18c948 to 07a6beb Compare September 10, 2026 03:07
@dependabot @github

dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #596.

@dependabot dependabot Bot closed this Sep 14, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/ovsx-1.1.1 branch September 14, 2026 09:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants