[main] Michijs Dependabot changes

[michijs]

Updated Packages

• Bump @​michijs/shared-configs from 0.0.36 to 0.0.37
• Bump @​vscode/vsce from 3.7.1 to 3.9.1

[michijs]

Bump @​michijs/shared-configs from 0.0.36 to 0.0.37

Changelog:

Sourced from releases.

        ### 0.0.37## What's Changed

• Update tsconfig.json by @​lsegurado in https://redirect.github.com/michijs/shared-configs/pull/16

Full Changelog: https://redirect.github.com/michijs/shared-configs/compare/0.0.36...0.0.37

        ### 0.0.36## What's Changed

• Update package.json by @​lsegurado in https://redirect.github.com/michijs/shared-configs/pull/15

New Contributors

• @​lsegurado made their first contribution in https://redirect.github.com/michijs/shared-configs/pull/15

Full Changelog: https://redirect.github.com/michijs/shared-configs/compare/0.0.34...0.0.36

Commit history:

• bf294a Update tsconfig.json ([main] Michijs Dependabot changes #16)

  What is the purpose of this pull request?

  Screenshots or example usage

  Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Quality improvement (tests or refactors)
  • Breaking change (fix or feature that would cause existing
    functionality to change)
  • Trivial change (small fix or feature that doesn't impact
    functionalities)
  • Requires change to documentation, which has been updated
    accordingly

  Signed-off-by: Lucas Segurado <lsegurado1996@​gmail.com>

• 3c3aca chore: Release v0.0.37

[michijs]

Bump @​vscode/vsce from 3.7.1 to 3.9.1

Changelog:

Sourced from releases.

        ### v3.9.2-1

Changes:

• #1267: Bump minimatch from 10.2.2 to 10.2.3

This list of changes was auto generated.

        ### v3.9.2-0

Changes:

• #1247: Update minimatch dependency to v10

This list of changes was auto generated.

        ### v3.9.1

Changes:

• #1266: fix: module type mismatch

This list of changes was auto generated.

        ### v3.9.1-0

Changes:

• #1266: fix: module type mismatch

This list of changes was auto generated.

        ### v3.9.0

Changes:

• #1263: fix: build regressions in 3.8.1
• #1261: Add override for serialize-javascript

This list of changes was auto generated.

        ### v3.8.2-1

Changes:

• #1263: fix: build regressions in 3.8.1

This list of changes was auto generated.

        ### v3.8.2-0

Changes:

• #1261: Add override for serialize-javascript

This list of changes was auto generated.

        ### v3.8.1

Changes:

• #1259: chore: update @​azure/identity to 4.13.1 and modernize TypeScript/Node.js configuration

This list of changes was auto generated.

        ### v3.8.1-0

Changes:

• #1259: chore: update @​azure/identity to 4.13.1 and modernize TypeScript/Node.js configuration

This list of changes was auto generated.

        ### v3.8.0

Changes:

• #1258: fix: run npm audit fix
• #1255: Bump brace-expansion
• #1253: Bump picomatch from 2.3.1 to 2.3.2
• #1252: Bump yauzl from 2.10.0 to 3.2.1
• #1250: Bump underscore from 1.13.1 to 1.13.8
• #1249: Bump minimatch
• #1243: Bump markdown-it from 14.1.0 to 14.1.1
• #1244: Bump qs from 6.14.1 to 6.14.2
• #1239: Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1
• #1238: Bump lodash from 4.17.21 to 4.17.23

See More

• #1234: Bump qs from 6.11.0 to 6.14.1
• #1233: Return non-zero exit code when signature verification fails
• #1232: Audit npm package
• #1228: Bump jws

This list of changes was auto generated.

        ### v3.7.2-13

Changes:

• #1258: fix: run npm audit fix

This list of changes was auto generated.

        ### v3.7.2-12

Changes:

• #1255: Bump brace-expansion

This list of changes was auto generated.

        ### v3.7.2-11

Changes:

• #1253: Bump picomatch from 2.3.1 to 2.3.2

This list of changes was auto generated.

        ### v3.7.2-10

Changes:

• #1252: Bump yauzl from 2.10.0 to 3.2.1

This list of changes was auto generated.

        ### v3.7.2-9

Changes:

• #1250: Bump underscore from 1.13.1 to 1.13.8

This list of changes was auto generated.

        ### v3.7.2-8

Changes:

• #1249: Bump minimatch

This list of changes was auto generated.

        ### v3.7.2-7

Changes:

• #1243: Bump markdown-it from 14.1.0 to 14.1.1

This list of changes was auto generated.

        ### v3.7.2-6

Changes:

• #1244: Bump qs from 6.14.1 to 6.14.2

This list of changes was auto generated.

        ### v3.7.2-5

Changes:

• #1239: Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1

This list of changes was auto generated.

        ### v3.7.2-4

Changes:

• #1238: Bump lodash from 4.17.21 to 4.17.23

This list of changes was auto generated.

        ### v3.7.2-3

Changes:

• #1234: Bump qs from 6.11.0 to 6.14.1

This list of changes was auto generated.

        ### v3.7.2-2

Changes:

• #1233: Return non-zero exit code when signature verification fails

This list of changes was auto generated.

        ### v3.7.2-1

Changes:

• #1232: Audit npm package

This list of changes was auto generated.

        ### v3.7.2-0

Changes:

• #1228: Bump jws

This list of changes was auto generated.

        ### v3.7.1

Changes:

• #1223: Bump js-yaml
• #1222: Bump glob

This list of changes was auto generated.

        ### v3.7.1-1

Changes:

• #1223: Bump js-yaml

This list of changes was auto generated.

        ### v3.7.1-0

Changes:

• #1222: Bump glob

This list of changes was auto generated.

Commit history:

• 7a3c1c Bump minimatch from 10.2.2 to 10.2.3 (#1267)

  Bumps minimatch from 10.2.2 to 10.2.3.

  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: minimatch
    dependency-version: 10.2.3
    dependency-type: direct:production
    ...

  Signed-off-by: dependabot[bot] <support@​redirect.github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.redirect.github.com>

• 54bea4 update minimatch dependency to v10 (#1247)

  Signed-off-by: Andrew Twydell <andrew.twydell@​ibm.com>

• 98cca9 fix: module type mismatch (#1266)

  Co-authored-by: Copilot <copilot@​redirect.github.com>

• 9329b3 fix: build regressions in 3.8.1 (#1263)
  • chore: add serialize-javascript override

  Agent-Logs-Url: https://redirect.github.com/microsoft/vscode-vsce/sessions/542e6132-ca27-4a60-b13f-e4d127bc19db

  Co-authored-by: rzhao271 <7199958+rzhao271@​users.noreply.redirect.github.com>

  • chore: update serialize-javascript override to 7.x

  Agent-Logs-Url: https://redirect.github.com/microsoft/vscode-vsce/sessions/1a55d5b2-81b6-49f5-8caf-f6ccee37a4b5

  Co-authored-by: rzhao271 <7199958+rzhao271@​users.noreply.redirect.github.com>

  • chore: refresh lockfile after serialize-javascript override

  Agent-Logs-Url: https://redirect.github.com/microsoft/vscode-vsce/sessions/13bb15ff-ae4f-4d6f-a53e-c9794578e757

  Co-authored-by: rzhao271 <7199958+rzhao271@​users.noreply.redirect.github.com>

  • fix: downgrade engine and fix build

  ---

  Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@​users.noreply.redirect.github.com>

• 165b0f Add override for serialize-javascript (#1261)
  • chore: add serialize-javascript override

  Agent-Logs-Url: https://redirect.github.com/microsoft/vscode-vsce/sessions/542e6132-ca27-4a60-b13f-e4d127bc19db

  Co-authored-by: rzhao271 <7199958+rzhao271@​users.noreply.redirect.github.com>

  • chore: update serialize-javascript override to 7.x

  Agent-Logs-Url: https://redirect.github.com/microsoft/vscode-vsce/sessions/1a55d5b2-81b6-49f5-8caf-f6ccee37a4b5

  Co-authored-by: rzhao271 <7199958+rzhao271@​users.noreply.redirect.github.com>

  • chore: refresh lockfile after serialize-javascript override

  Agent-Logs-Url: https://redirect.github.com/microsoft/vscode-vsce/sessions/13bb15ff-ae4f-4d6f-a53e-c9794578e757

  Co-authored-by: rzhao271 <7199958+rzhao271@​users.noreply.redirect.github.com>

  ---

  Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@​users.noreply.redirect.github.com>
  Co-authored-by: rzhao271 <7199958+rzhao271@​users.noreply.redirect.github.com>

• 7d124a chore: update @​azure/identity to 4.13.1 and modernize TypeScript/Node.js configuration (#1259)
  • chore: update @​azure/identity to 4.13.1

  Agent-Logs-Url: https://redirect.github.com/microsoft/vscode-vsce/sessions/eaaf7c49-62dc-48e3-a4bc-f0b4286e52d5

  Co-authored-by: rzhao271 <7199958+rzhao271@​users.noreply.redirect.github.com>

  • chore: set moduleResolution to nodenext in tsconfig.json

  Agent-Logs-Url: https://redirect.github.com/microsoft/vscode-vsce/sessions/e9cc90e0-f5ea-49d7-9728-9c667e7835f4

  Co-authored-by: rzhao271 <7199958+rzhao271@​users.noreply.redirect.github.com>

  • chore: bump @​types/node to ^22, update engines and CI workflow to Node 22

  Agent-Logs-Url: https://redirect.github.com/microsoft/vscode-vsce/sessions/2dff95b2-a252-43a9-b142-ae81b52bc6d3

  Co-authored-by: rzhao271 <7199958+rzhao271@​users.noreply.redirect.github.com>

  ---

  Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@​users.noreply.redirect.github.com>
  Co-authored-by: rzhao271 <7199958+rzhao271@​users.noreply.redirect.github.com>

• cbdd40 fix: run npm audit fix to update package-lock.json (#1258)

  Agent-Logs-Url: https://redirect.github.com/microsoft/vscode-vsce/sessions/79064f2b-a533-4e09-ac40-4f8bce617f05

  Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@​users.noreply.redirect.github.com>
  Co-authored-by: rzhao271 <7199958+rzhao271@​users.noreply.redirect.github.com>

• 13c5fa Merge pull request #1255 from microsoft/dependabot/npm_and_yarn/multi-580a7c2f10

  Bump brace-expansion

• c6f98d Bump brace-expansion

  Bumps and brace-expansion. These dependencies needed to be updated together.

  Updates brace-expansion from 5.0.3 to 5.0.5

  • Release notes
  • Commits

  Updates brace-expansion from 1.1.12 to 1.1.13

  • Release notes
  • Commits

  Updates brace-expansion from 2.0.2 to 2.0.3

  • Release notes
  • Commits

  ---

  updated-dependencies:

  • dependency-name: brace-expansion
    dependency-version: 5.0.5
    dependency-type: indirect
  • dependency-name: brace-expansion
    dependency-version: 1.1.13
    dependency-type: indirect
  • dependency-name: brace-expansion
    dependency-version: 2.0.3
    dependency-type: indirect
    ...

  Signed-off-by: dependabot[bot] <support@​redirect.github.com>

• 01da00 Bump picomatch from 2.3.1 to 2.3.2 (#1253)

  Bumps picomatch from 2.3.1 to 2.3.2.

  • Release notes
  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: picomatch
    dependency-version: 2.3.2
    dependency-type: indirect
    ...

  Signed-off-by: dependabot[bot] <support@​redirect.github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.redirect.github.com>

• bb899f Merge pull request #1252 from microsoft/dependabot/npm_and_yarn/yauzl-3.2.1

  Bump yauzl from 2.10.0 to 3.2.1

• 3f4fa9 Bump yauzl from 2.10.0 to 3.2.1

  Bumps yauzl from 2.10.0 to 3.2.1.

  • Commits

  ---

  updated-dependencies:

  • dependency-name: yauzl
    dependency-version: 3.2.1
    dependency-type: direct:production
    ...

  Signed-off-by: dependabot[bot] <support@​redirect.github.com>

• 72f319 Merge pull request #1250 from microsoft/dependabot/npm_and_yarn/underscore-1.13.8

  Bump underscore from 1.13.1 to 1.13.8

• c65131 Bump underscore from 1.13.1 to 1.13.8

  Bumps underscore from 1.13.1 to 1.13.8.

  • Commits

  ---

  updated-dependencies:

  • dependency-name: underscore
    dependency-version: 1.13.8
    dependency-type: indirect
    ...

  Signed-off-by: dependabot[bot] <support@​redirect.github.com>

• 82cd05 Merge pull request #1249 from microsoft/dependabot/npm_and_yarn/multi-3189fdc835

  Bump minimatch

• f8e927 Bump minimatch

  Bumps minimatch to 10.2.3 and updates ancestor dependencies and minimatch. These dependencies need to be updated together.

  Updates minimatch from 10.1.1 to 10.2.3

  • Changelog
  • Commits

  Updates minimatch from 3.1.2 to 3.1.4

  • Changelog
  • Commits

  Updates minimatch from 9.0.5 to 9.0.7

  • Changelog
  • Commits

  Updates minimatch from 5.1.6 to 5.1.8

  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: minimatch
    dependency-version: 10.2.3
    dependency-type: indirect
  • dependency-name: minimatch
    dependency-version: 3.1.4
    dependency-type: direct:production
  • dependency-name: minimatch
    dependency-version: 9.0.7
    dependency-type: indirect
  • dependency-name: minimatch
    dependency-version: 5.1.8
    dependency-type: indirect
    ...

  Signed-off-by: dependabot[bot] <support@​redirect.github.com>

• 5f09e2 Merge pull request #1243 from microsoft/dependabot/npm_and_yarn/markdown-it-14.1.1

  Bump markdown-it from 14.1.0 to 14.1.1

• 61ad36 Merge pull request #1244 from microsoft/dependabot/npm_and_yarn/qs-6.14.2

  Bump qs from 6.14.1 to 6.14.2

• b30d61 Bump qs from 6.14.1 to 6.14.2

  Bumps qs from 6.14.1 to 6.14.2.

  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: qs
    dependency-version: 6.14.2
    dependency-type: indirect
    ...

  Signed-off-by: dependabot[bot] <support@​redirect.github.com>

• d3230b Bump markdown-it from 14.1.0 to 14.1.1

  Bumps markdown-it from 14.1.0 to 14.1.1.

  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: markdown-it
    dependency-version: 14.1.1
    dependency-type: direct:production
    ...

  Signed-off-by: dependabot[bot] <support@​redirect.github.com>

• 2aeafb Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1 (#1239)

  Bumps @​isaacs/brace-expansion from 5.0.0 to 5.0.1.

  ---

  updated-dependencies:

  • dependency-name: "@​isaacs/brace-expansion"
    dependency-version: 5.0.1
    dependency-type: indirect
    ...

  Signed-off-by: dependabot[bot] <support@​redirect.github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.redirect.github.com>

• dea3b1 Bump lodash from 4.17.21 to 4.17.23 (#1238)

  Bumps lodash from 4.17.21 to 4.17.23.

  • Release notes
  • Commits

  ---

  updated-dependencies:

  • dependency-name: lodash
    dependency-version: 4.17.23
    dependency-type: indirect
    ...

  Signed-off-by: dependabot[bot] <support@​redirect.github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.redirect.github.com>

• dc34fd Merge pull request #1234 from microsoft/dependabot/npm_and_yarn/qs-6.14.1

  Bump qs from 6.11.0 to 6.14.1

• 5ac9b7 Bump qs from 6.11.0 to 6.14.1

  Bumps qs from 6.11.0 to 6.14.1.

  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: qs
    dependency-version: 6.14.1
    dependency-type: indirect
    ...

  Signed-off-by: dependabot[bot] <support@​redirect.github.com>

• 47330a Merge pull request #1233 from JoeRobich/dev/jorobich/set-exitcode

  Return non-zero exit code when signature verification fails

• 7a8969 Return non-zero exit code when signature verification fails
• d6d2ef Merge pull request #1232 from microsoft/benibenj/relevant-lamprey

  Audit npm package

• 915bc0 audit npm package
• 1dbea2 Merge pull request #1228 from microsoft/dependabot/npm_and_yarn/multi-d0f6e8601e

  Bump jws

• 142aaa Bump jws

  Bumps and jws. These dependencies needed to be updated together.

  Updates jws from 3.2.2 to 3.2.3

  • Release notes
  • Changelog
  • Commits

  Updates jws from 4.0.0 to 4.0.1

  • Release notes
  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: jws
    dependency-version: 3.2.3
    dependency-type: indirect
  • dependency-name: jws
    dependency-version: 4.0.1
    dependency-type: indirect
    ...

  Signed-off-by: dependabot[bot] <support@​redirect.github.com>