Skip to content

Update proxy agent to 0.45.0 - #333953

Merged
Christof Marti (chrmarti) merged 3 commits into
mainfrom
chrmarti/test-macos-system-cert-worker
Sep 2, 2026
Merged

Update proxy agent to 0.45.0#333953
Christof Marti (chrmarti) merged 3 commits into
mainfrom
chrmarti/test-macos-system-cert-worker

Conversation

@chrmarti

@chrmarti Christof Marti (chrmarti) commented Sep 2, 2026

Copy link
Copy Markdown
Collaborator

Summary

Update @vscode/proxy-agent to 0.45.0 in the root and remote dependency manifests.

This version loads Node.js system certificates in a worker on macOS and starts loading during proxy resolver creation, preventing slow keychain trust evaluation from blocking the extension-host main thread.

Fixes #333830.

Validation

  • npm run typecheck-client
  • npm run hygiene
  • Root and remote dependency trees resolve to the published @vscode/proxy-agent@0.45.0 tarball.
  • Confirmed the published package contains out/systemCertificatesWorker.js.
  • Confirmed system certificates load through the worker and it exits successfully.
  • Product Build 470171 successfully packaged the worker into the macOS application's node_modules.asar. All non-macOS stages passed; macOS failures occurred later in ESRP signing and universal notice comparison.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot AI balanced review requested due to automatic review settings September 2, 2026 09:02

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

The explicitly temporary Git dependency must return to a published registry version before merge.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Review tier: Balanced
Findings: None

What changed in this PR

Pins the proxy agent’s macOS certificate-worker implementation for product-build validation.

Changes:

  • References proxy-agent commit 354da71.
  • Updates the lockfile to version 0.45.0.
File Description
package.json Adds the temporary Git dependency pin.
package-lock.json Locks the corresponding commit and package metadata.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@chrmarti Christof Marti (chrmarti) changed the title Test non-blocking macOS system certificate loading Update proxy agent to 0.45.0 Sep 2, 2026
@chrmarti
Christof Marti (chrmarti) marked this pull request as ready for review September 2, 2026 16:45
@chrmarti
Christof Marti (chrmarti) merged commit ca90419 into main Sep 2, 2026
41 checks passed
@chrmarti
Christof Marti (chrmarti) deleted the chrmarti/test-macos-system-cert-worker branch September 2, 2026 17:48
@vs-code-engineering vs-code-engineering Bot added this to the 1.137.0 milestone Sep 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Extension host unresponsive ~40s at startup: synchronous macOS system CA load evaluates every keychain cert via trustd XPC

3 participants