Skip to content

Bump ovsx from 0.10.12 to 1.1.0 - #580

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/ovsx-1.1.0
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/ovsx-1.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026 •

Copy link
Copy Markdown
Contributor

Bumps ovsx from 0.10.12 to 1.1.0.

Release notes

Sourced from ovsx's releases.

CLI v1.1.0

Added

  • Add an encrypted filestore as fallback to the system keychain if it cant be accessed (#1950)
  • Add --allow-missing-repository option to the publish command, passed on to vsce to package an extension whose package.json has no repository field without asking for confirmation (#1735)

Changed

  • Replace keytar with cross-keychain to store credentials in the system keychain (#1950)
  • Mask token input when using login command (#1966

Dependencies

  • Bump js-yaml from 4.2.0 to 4.3.0 (#1976)
  • Bump tar from 7.5.16 to 7.5.21 (#1987)
  • Bump brace-expansion from 1.1.16 to 1.1.18 (#2031)

Frontend Library v1.1.0

Added

  • Add a home page with hero search, popular searches, a category browser, curated extension rows and get-involved cards
  • Add a dedicated search page under /search with query, category, sort field and sort order synced to the URL
  • Add global keyboard shortcuts
  • Add keyboard navigation of search results: ↑/↓
  • Add a structured footer
  • Add scroll-to-top on forward navigation
  • Support searching users and managing their roles in the admin dashboard (#1847)
  • Added an extension details page to admin dashboard and user settings (#1939)

Changed

  • Redesign the web UI: new navbar with integrated search field, new theme, extension cards, category pills and page layout
  • Consolidate the app-wide providers into a single AppProviders; keyboard shortcuts and search now wrap every route, including the admin dashboard
  • Improve accessibility: visible focus outlines on interactive controls
  • Morph the hero search into the navbar search field using the View Transitions API
  • Token display in generate-token dialog now uses a masked input with show/hide toggle and copy button (#1966
  • Migrate admin dashboard to use @tanstack/react-query (#1917
  • Replace formatting from stylistic with prettier (#1916)
  • Upgrade to vite 8+ and disable manual chunks for bundling (#1989)
  • Upgrade to react-router 7: import everything from react-router instead of react-router-dom. Consumers passing additionalRoutes must upgrade to react-router 7 as well

Fixed

  • Refresh the extension version list in the delete views when a delete fails with a conflict
  • Keep the hero-to-navbar search morph working under react-router 7, which wraps location updates in React.startTransition

Dependencies

  • Bump brace-expansion from 1.1.11 to 1.1.16 (#1981)
  • Bump brace-expansion from 2.0.2 to 2.1.2 (#1944)

... (truncated)

Changelog

Sourced from ovsx's changelog.

[v1.1.0] (02/08/2026)

Added

  • Add an encrypted filestore as fallback to the system keychain if it cant be accessed (#1950)
  • Add --allow-missing-repository option to the publish command, passed on to vsce to package an extension whose package.json has no repository field without asking for confirmation (#1735)

Changed

  • Replace keytar with cross-keychain to store credentials in the system keychain (#1950)
  • Mask token input when using login command (#1966

Dependencies

  • Bump js-yaml from 4.2.0 to 4.3.0 (#1976)
  • Bump tar from 7.5.16 to 7.5.21 (#1987)
  • Bump brace-expansion from 1.1.16 to 1.1.18 (#2031)

[v1.0.2] (23/06/2026)

Dependencies

  • Bump tmp from 0.2.6 to 0.2.7 (#1903)
  • Bump tar from 7.5.11 to 7.5.16 (#1911)
  • Bump form-data from 4.0.4 to 4.0.6 (#1910)
  • Bump js-yaml from 4.1.1 to 4.2.0 (#1912)
  • Bump markdown-it from 14.1.1 to 14.2.0 (#1913)

[v1.0.1] (11/06/2026)

Fixes

  • Properly encode path segments in getUrl method (#1893)

[v1.0.0] (28/05/2026)

Dependencies

  • Bump fast-uri from 3.1.0 to 3.1.2 (#1829)
  • Bump brace-expansion from 5.0.5 to 5.0.6 (#1846)
  • Bump qs from 6.15.0 to 6.15.2 (#1869)
  • Bump tmp from 0.2.4 to 0.2.6 (#1877)
Commits
  • 53049dc chore: prepare cli version for release
  • c31e166 chore: prepare for cli-1.1.0 release
  • 556069e chore(deps): bump brace-expansion in cli
  • 5de3810 build(deps): bump brace-expansion from 1.1.16 to 1.1.18 in /cli (#2031)
  • 36de5ac feat: add --allow-empty-repository option to ovsx publish (#2012)
  • cdf4589 chore(deps): bump deps in cli
  • 19f9118 build(deps): bump tar from 7.5.16 to 7.5.21 in /cli (#1987)
  • f901ed5 build(deps): bump brace-expansion from 1.1.13 to 1.1.16 in /cli (#1981)
  • 9a2403b fix: resolve js-yaml to ^5.2.1 to address CVE-2026-59869 (#1976)
  • 643b6bd feat: masking PAT in CLI and webui (#1966)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ovsx-1.1.0 branch 2 times, most recently from 3bd1ba9 to 06e7e03 Compare August 10, 2026 09:09
Bumps [ovsx](https://github.com/eclipse-openvsx/openvsx/tree/HEAD/cli) from 0.10.12 to 1.1.0.
- [Release notes](https://github.com/eclipse-openvsx/openvsx/releases)
- [Changelog](https://github.com/eclipse-openvsx/openvsx/blob/main/cli/CHANGELOG.md)
- [Commits](https://github.com/eclipse-openvsx/openvsx/commits/v1.1.0/cli)

---
updated-dependencies:
- dependency-name: ovsx
  dependency-version: 1.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ovsx-1.1.0 branch from 06e7e03 to 50f3b10 Compare August 10, 2026 09:13
@dependabot @github

dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #581.

@dependabot dependabot Bot closed this Aug 17, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/ovsx-1.1.0 branch August 17, 2026 09:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants