Skip to content

deps(vscode): bump the vscode-minor-and-patch group in /editors/vscode with 2 updates - #21

Merged
trendvidia merged 2 commits into
mainfrom
dependabot/npm_and_yarn/editors/vscode/vscode-minor-and-patch-a62258d2c4
May 11, 2026
Merged

deps(vscode): bump the vscode-minor-and-patch group in /editors/vscode with 2 updates#21
trendvidia merged 2 commits into
mainfrom
dependabot/npm_and_yarn/editors/vscode/vscode-minor-and-patch-a62258d2c4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the vscode-minor-and-patch group in /editors/vscode with 2 updates: @types/node and esbuild.

Updates @types/node from 25.6.0 to 25.7.0

Commits

Updates esbuild from 0.28.0 to 0.24.2

Changelog

Sourced from esbuild's changelog.

0.24.2

  • Fix regression with --define and import.meta (#4010, #4012, #4013)

    The previous change in version 0.24.1 to use a more expression-like parser for define values to allow quoted property names introduced a regression that removed the ability to use --define:import.meta=.... Even though import is normally a keyword that can't be used as an identifier, ES modules special-case the import.meta expression to behave like an identifier anyway. This change fixes the regression.

    This fix was contributed by @​sapphi-red.

0.24.1

  • Allow es2024 as a target in tsconfig.json (#4004)

    TypeScript recently added es2024 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:

    {
      "compilerOptions": {
        "target": "ES2024"
      }
    }

    As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

    This fix was contributed by @​billyjanitsch.

  • Allow automatic semicolon insertion after get/set

    This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:

    class Foo {
      get
      *x() {}
      set
      *y() {}
    }

    The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.

  • Allow quoted property names in --define and --pure (#4008)

    The define and pure API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes --define and --pure consistent with --global-name, which already supported quoted property names. For example, the following is now possible:

    // The following code now transforms to "return true;\n"
    console.log(esbuild.transformSync(
      `return process.env['SOME-TEST-VAR']`,
      { define: { 'process.env["SOME-TEST-VAR"]': 'true' } },

... (truncated)

Commits
Attestation changes

This version has no provenance attestation, while the previous version (0.28.0) was attested. Review the package versions before updating.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the vscode-minor-and-patch group in /editors/vscode with 2 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [esbuild](https://github.com/evanw/esbuild).


Updates `@types/node` from 25.6.0 to 25.7.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `esbuild` from 0.28.0 to 0.24.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md)
- [Commits](evanw/esbuild@v0.28.0...v0.24.2)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 25.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: vscode-minor-and-patch
- dependency-name: esbuild
  dependency-version: 0.24.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: vscode-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 11, 2026
@trendvidia
trendvidia merged commit c5bd778 into main May 11, 2026
3 checks passed
@trendvidia
trendvidia deleted the dependabot/npm_and_yarn/editors/vscode/vscode-minor-and-patch-a62258d2c4 branch May 11, 2026 23:38
trendvidia added a commit that referenced this pull request Jul 16, 2026
* spec: add @sensitive annotation + report redaction (RFC-001 §6.7)

Settles the secrets-annotation story (#90) before annotations.proto
freezes (#58):

- annotations.proto: canonical marker `annotation sensitive;` —
  classification, not protection; class taxonomy deferred additively
- new RFC-001 §6.7: placement/propagation, normative consumer minima
  (render-surface redaction to [REDACTED], report redaction, no doc
  examples), standard 50400 carrier, chameleon orthogonality
- report.proto: EnrichedViolation.value_redacted = 7 so redaction is
  distinguishable from three-state absence; §7 excerpt synced
- §13: two new deferrals (class taxonomy; @Encrypted(key_ref) /
  chameleon interplay)

Closes #90

* docs: record #21 secrets-annotation resolution (GH #90, PR #107)
trendvidia added a commit that referenced this pull request Jul 16, 2026
* spec: ratify RFC-001 (issue #56)

Status Draft → Ratified (2026-07-16). §13 rows 13/14 now cite their
tracking issues (GH #111, #112) — with those filed, every open
question is either resolved in the RFC (S1: #11#16; S2: #15
source grammar, #21 sensitivity, #35 path scheme; S3: #22
engine-expression scope, #23 no dual-emission) or tracked as a
separate issue (GH #59, #66#69, #103, #111, #112). All v1.2 surface
is strictly additive; no locked decision blocks an existing port's
roadmap (per-port adoption is M9+, gated on the conformance corpus).

* docs: record #2 ratification (GH #56, PR #113)
trendvidia added a commit that referenced this pull request Jul 25, 2026
…#112) (#163)

* spec: @sensitive(class) — org-defined taxonomy in, key refs out (#111, #112)

* docs: RFC-001-issues.md #21 resolution records (GH #111/#112, PR #163)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant