[Anthony Kim (anthonykim1)]

• Update all @xterm/* dependencies to the publish generation built from c58ea363 across the root, remote/, and remote/web/ dependency sets (@xterm/xterm → beta.304, @xterm/headless and addon-clipboard → beta.303, addon-image/addon-ligatures/addon-progress/addon-search/addon-serialize/addon-unicode11 → beta.301, addon-webgl → beta.300).
• Regenerate the corresponding lockfiles for all three dependency roots.
• Advance the published xterm.js source from d3e32b34 to c58ea363.

Upstream changelog

• xtermjs/xterm.js#5879 changes image storage to use the general-purpose ExtendedAttrs.payload field, avoiding conflicts with other extensions and reducing reliance on BufferLine internals.
• The remaining commits in the range are supporting merge and follow-up fix commits for that change.

Version alignment note

All ten packages in this update are built from the same upstream commit, c58ea363. The differing -beta.N values are per-package publish counters and are expected to be unequal.

Verified: addon peer ranges (^6.1.0-beta.304) are satisfied by @xterm/xterm@6.1.0-beta.304, all three dependency trees resolve a single copy of each package with no nested duplicates, git diff --check passes, and npm run typecheck-client passes.

Full upstream diff

---

Inspirations from:

• The dependency-bump scope, version-alignment note, and upstream-diff presentation follow VS Code PR #333612.
• Package update targets and install roots come from scripts/xterm-update.js.

[Copilot]

Copilot review overview

🟢 Approval recommended

No unresolved review issues were identified.

Review tier: Lite
Findings: None

What changed in this PR

Updates @xterm/* dependencies to the c58ea363 publish generation across all dependency roots.

Changes:

• Bumps xterm and addon package versions.
• Aligns peer dependencies and lockfile resolutions.
• Regenerates all three lockfiles.

File	Description
remote/​web/​package.json	Updates web xterm dependencies.
remote/​web/​package-lock.json	Locks updated web packages.
remote/​package.json	Updates remote xterm dependencies.
remote/​package-lock.json	Locks updated remote packages.
package.json	Updates root xterm dependencies.
package-lock.json	Locks updated root packages.

Files not reviewed (2)

• remote/package-lock.json: Generated file
• remote/web/package-lock.json: Generated file

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.