chore(deps-dev): bump ovsx from 0.10.10 to 0.10.11 in /packages/vscode by dependabot[bot] · Pull Request #113 · kagan-sh/kagan

dependabot · 2026-04-16T08:47:22Z

Bumps ovsx from 0.10.10 to 0.10.11.

Release notes

CLI v0.10.11

Dependencies

Bump picomatch from 2.3.1 to 2.3.2 (#1719)

Bump picomatch from 4.0.3 to 4.0.4

Bump brace-expansion from 1.1.12 to 1.1.13 (#1725)

Bump brace-expansion from 2.0.2 to 2.0.3

Bump brace-expansion from 5.0.4 to 5.0.5

Bump lodash from 4.17.23 to 4.18.1 (#1745)

Changelog

Sourced from ovsx's changelog.

[v0.10.11] (13/04/2026)

Dependencies

Bump picomatch from 2.3.1 to 2.3.2 (#1719)

Bump picomatch from 4.0.3 to 4.0.4

Bump brace-expansion from 1.1.12 to 1.1.13 (#1725)

Bump brace-expansion from 2.0.2 to 2.0.3

Bump brace-expansion from 5.0.4 to 5.0.5

Bump lodash from 4.17.23 to 4.18.1 (#1745)

Commits

a057355 chore: prepare for cli-0.10.11 release
1ceaaa0 chore: prepare for cli-0.10.11 release
65856ae chore(deps): bump brace-expansion dependencies
b2e9721 build(deps): bump lodash from 4.17.23 to 4.18.1 in /cli (#1745)
86f3667 build(deps): bump brace-expansion from 1.1.12 to 1.1.13 in /cli (#1725)
5304c24 chore(deps): also bump picomatch 4.0.3 to 4.0.4
f032b1c build(deps): bump picomatch from 2.3.1 to 2.3.2 in /cli (#1719)
d571efb chore: bump for next dev cycle
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [ovsx](https://github.com/eclipse-openvsx/openvsx/tree/HEAD/cli) from 0.10.10 to 0.10.11. - [Release notes](https://github.com/eclipse-openvsx/openvsx/releases) - [Changelog](https://github.com/eclipse-openvsx/openvsx/blob/main/cli/CHANGELOG.md) - [Commits](https://github.com/eclipse-openvsx/openvsx/commits/cli-0.10.11/cli) --- updated-dependencies: - dependency-name: ovsx dependency-version: 0.10.11 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>

greptile-apps · 2026-04-16T08:47:24Z

PR author is in the excluded authors list.

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

socket-security · 2026-04-19T18:07:35Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/ovsx@0.10.10 ⏵ 0.10.11	⁺¹			⁺⁶

View full report

socket-security · 2026-04-19T18:07:37Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		License policy violation: npm `ovsx` under EPL-2.0 License: EPL-2.0 - The applicable license policy does not permit this license (5) (npm metadata) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/check-license.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/check-license.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/create-namespace.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/create-namespace.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/create-namespace.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/verify-pat.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/verify-pat.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/verify-pat.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/get.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/get.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/main.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/main.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/util.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/util.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/get.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/main.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/util.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/check-license.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/create-namespace-options.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/create-namespace-options.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/create-namespace-options.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/registry.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/login-options.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/logout.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/store.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/zip.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/login-options.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/login.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/logout.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/store.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/zip.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/verify-pat-options.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/verify-pat-options.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/verify-pat-options.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/publish.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/index.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/registry.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/get-options.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/get-options.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/publish-options.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/registry-options.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/registry-options.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/get-options.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/publish-options.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/registry-options.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/pat.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/pat.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/index.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/index.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/registry.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/publish.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/package.json) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/LICENSE) From: packages/vscode/package.json → `npm/[email protected]` ℹ Read more on: This package \| This alert \| What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `[email protected]`. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/[email protected]`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 16, 2026

dependabot Bot requested a review from kagan-agent as a code owner April 16, 2026 08:47

github-actions Bot assigned kagan-agent Apr 16, 2026

aorumbayev force-pushed the main branch from bdf3acd to f6e341e Compare April 16, 2026 09:34

chore(deps-dev): update pnpm-lock.yaml for ovsx 0.10.11

e2db788

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

aorumbayev merged commit 69ec762 into main Apr 19, 2026
18 checks passed

aorumbayev deleted the dependabot/npm_and_yarn/packages/vscode/ovsx-0.10.11 branch April 19, 2026 18:12

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump ovsx from 0.10.10 to 0.10.11 in /packages/vscode#113

chore(deps-dev): bump ovsx from 0.10.10 to 0.10.11 in /packages/vscode#113
aorumbayev merged 2 commits intomainfrom
dependabot/npm_and_yarn/packages/vscode/ovsx-0.10.11

dependabot Bot commented on behalf of github Apr 16, 2026

Uh oh!

greptile-apps Bot commented Apr 16, 2026

Uh oh!

socket-security Bot commented Apr 19, 2026

Uh oh!

socket-security Bot commented Apr 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Apr 16, 2026

CLI v0.10.11

Dependencies

[v0.10.11] (13/04/2026)

Dependencies

Uh oh!

greptile-apps Bot commented Apr 16, 2026

Uh oh!

socket-security Bot commented Apr 19, 2026

Uh oh!

socket-security Bot commented Apr 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants