dependabot[bot]
6b77fe3666
Bump @eslint/compat from 1.4.1 to 2.1.1
...
Bumps [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat ) from 1.4.1 to 2.1.1.
- [Release notes](https://github.com/eslint/rewrite/releases )
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md )
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.1.1/packages/compat )
---
updated-dependencies:
- dependency-name: "@eslint/compat"
dependency-version: 2.1.1
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-28 22:28:26 +00:00
Harsh Bhanushali
70fc911358
Override basic-ftp to ^6.2.1 ( #8086 )
...
get-uri still depends on basic-ftp ^5.x, which has no patched release.
2026-10-28 14:25:45 -08:00
Raphael Fakhri
761b0d2a19
Fix cookie domain not being set against root host ( #8076 )
2026-10-27 13:05:56 -08:00
Vincent Coffey
09012065c9
Support load balancer service in Helm chart ( #8081 )
2026-10-27 11:58:13 -08:00
dependabot[bot]
e999549684
Bump follow-redirects from 1.16.0 to 1.16.2 ( #8065 )
2026-10-27 11:51:39 -08:00
dependabot[bot]
9d0eee156e
Bump ip-address from 10.7.2 to 10.7.5 ( #8080 )
2026-10-26 17:01:48 -08:00
dependabot[bot]
b87ae88bc6
Bump body-parser from 2.3.0 to 2.4.0 ( #8079 )
2026-10-26 17:01:24 -08:00
Harsh Bhanushali
89cba83cb4
Normalize default ports and use X-Forwarded-Port in the origin check ( #8059 )
...
The origin check compared the host header to the origin's host as plain
strings, so `example.com:443` did not match `https://example.com `, and a
proxy forwarding `$host` (no port) together with X-Forwarded-Port failed
on any non-default port.
Default ports (80 for http, 443 for https) are now treated as no port,
and when X-Forwarded-Host has no port the port from X-Forwarded-Port is
used. Everything else is still an exact match. getHost() is unchanged
for the domain proxy.
2026-10-26 16:42:24 -08:00
dependabot[bot]
b45f29491d
Bump js-yaml from 4.3.1 to 5.4.3 ( #8054 )
2026-10-26 15:47:26 -08:00
cdrci
4677c9d865
Update Helm chart and changelog with 4.143.1 ( #8072 )
2026-10-23 15:32:11 -08:00
cdrci
22ddf60dbc
Update Code to 1.143.1 ( #8069 )
...
* Remove Node patch
* Update patches
Just one conflict, they use user-data-dir now which is something we
already have been doing for a long time.
2026-10-23 22:15:00 +00:00
cdrci
e777c1f963
Update Helm chart and changelog with 4.141.1 ( #8071 )
2026-10-23 13:49:22 -08:00
Dean Sheather
279b5702aa
Merge pull request #8070 from coder/upgrade-node-checksums
...
Fix Node 24.22.1 checksums
2026-10-24 04:50:00 +11:00
Dean Sheather
27baccf843
Fix Node 24.22.1 checksums
2026-10-23 17:35:56 +00:00
Dean Sheather
8aab1b0d72
Merge pull request #8068 from coder/upgrade-node
...
Upgrade Node to 24.22.1
2026-10-24 02:35:35 +11:00
Dean Sheather
777c493a9b
Upgrade Node to 24.22.1
2026-10-23 15:06:41 +00:00
Harsh Bhanushali
f07405cba3
Expand ~ in path options from the config file ( #8055 )
...
The shell expands ~ in command-line arguments, but values read from
config.yaml were passed to path.resolve as-is, so
`user-data-dir: ~/.config/code-server-data` resolved to
`<cwd>/~/.config/code-server-data`.
2026-10-14 13:47:08 -08:00
dependabot[bot]
c5fee2d2f9
Bump brace-expansion from 1.1.18 to 1.1.21 ( #8044 )
2026-10-13 17:02:46 -08:00
Harsh Bhanushali
83670e50c6
Fix false booleans in config file being parsed as true ( #8053 )
...
Options like `enable-remote-storage: false` in config.yaml are converted to
`--enable-remote-storage=false`, but the parser set any boolean option to
true regardless of its value. Booleans set to false are now ignored, the
same way optional strings set to false already are.
2026-10-13 17:01:10 -08:00
KeuqS
41cf6f7eaf
Add Turkish locale ( #8050 )
2026-10-09 22:50:17 +00:00
cdrci
78aad47ce6
Update Helm chart and changelog with 4.141.0 ( #8045 )
2026-10-08 02:35:52 -08:00
cdrci
8b41915d25
Update Code to 1.141.0 ( #8040 )
...
* Update Code to 1.141.0
* Allow pull_request_target
* Add e2e tests for remote storage
* Fix Typescript extension not loading
* Remove unused imports
2026-10-07 22:54:47 -08:00
dependabot[bot]
6d7b6f8a17
Bump prettier-plugin-sh from 0.18.0 to 0.20.2 ( #8028 )
2026-10-07 17:40:44 -08:00
dependabot[bot]
be95e9f163
Bump @babel/core from 7.25.7 to 7.29.7 in /test ( #8004 )
2026-10-07 17:39:45 -08:00
dependabot[bot]
317a591ed7
Bump docker/setup-buildx-action from 4.3.0 to 4.4.1 ( #8027 )
2026-10-07 17:37:57 -08:00
dependabot[bot]
5244097e99
Bump limiter from 2.1.0 to 4.1.0 ( #8030 )
2026-10-07 17:36:34 -08:00
dependabot[bot]
8a1f2e3d55
Bump brace-expansion from 1.1.18 to 1.1.21 in /test ( #8041 )
2026-10-07 17:33:36 -08:00
dependabot[bot]
8b20b3e128
Bump github/codeql-action/analyze from 4.37.9 to 4.38.2 ( #8032 )
2026-10-07 16:40:21 -08:00
dependabot[bot]
b43e8a3dd1
Bump compression from 1.8.1 to 1.8.2 ( #8042 )
2026-10-07 16:39:41 -08:00
dependabot[bot]
48b45385f7
Bump github/codeql-action/init from 4.37.9 to 4.38.2 ( #8034 )
2026-10-07 16:38:41 -08:00
dependabot[bot]
74571ff255
Bump codecov/codecov-action from 7.0.0 to 7.1.1 ( #8035 )
2026-10-07 16:36:49 -08:00
dependabot[bot]
04ab55c4f2
Bump github/codeql-action/autobuild from 4.37.8 to 4.38.2 ( #8036 )
2026-10-07 16:36:15 -08:00
Daywin67
8be4df7ab0
Add flag to store state on remote instead of browser ( #7914 )
2026-10-07 16:35:44 -08:00
cdrci
067f1e35dd
Update Helm chart and changelog with 4.140.0 ( #8038 )
2026-10-01 16:18:01 -08:00
cdrci
ccc19adc2e
Update Code to 1.140.0 ( #8037 )
2026-10-01 12:42:33 -08:00
Steven
f871c1663b
Document that Cloudflare Rocket Loader must be disabled ( #8026 )
2026-09-30 14:55:09 -08:00
dependabot[bot]
fa7caee4dd
Bump ip-address from 10.4.0 to 10.7.2 ( #8023 )
2026-09-29 14:54:16 -08:00
Zain Qureshi
2bb012c17a
Sync Helm docs table and badges with the chart ( #8024 )
2026-09-29 14:53:43 -08:00
cdrci
96e468eaa6
Update Helm chart and changelog with 4.139.1 ( #8022 )
2026-09-28 14:45:26 -08:00
cdrci
53c2f3253b
Update Code to 1.139.1 ( #8021 )
...
* Update Code to 1.139.1
* Bump proxy-addr to 2.0.8
* Add preinstall setup to build
Already had this in the release build step, not sure why it is not in
the main build step. But we started getting errors building native
modules in ci, and this seems to be why.
* Fix quick input
It types too quickly, before the input is visible.
2026-09-25 15:12:50 -08:00
Leo Camus
8a7bf87a4d
Fix --idle-timeout-seconds validation being skipped ( #8009 )
...
The lower bound check ran before the parser had resolved the value, so it
only saw a value with the --idle-timeout-seconds=<value> form. With the
space-separated form the value was still undefined at that point,
Number(undefined) is NaN, and NaN <= 60 is false, so anything got through.
Move the check below the block that pulls the value from the next
argument so both forms are validated the same way.
2026-09-20 02:53:04 -08:00
cdrci
cd0f21dc72
Update Helm chart and changelog with 4.138.0 ( #8014 )
2026-09-20 02:51:41 -08:00
cdrci
59c988c744
Update Code to 1.138.0 ( #8011 )
2026-09-18 23:44:50 +00:00
Limbo
ef5eba4348
Preserve path, query, and fragment in proxy URL rewrite ( #8012 )
2026-09-17 12:41:01 -08:00
dependabot[bot]
20a260f748
Bump typescript-eslint from 8.61.1 to 8.69.0 ( #7998 )
2026-09-11 11:06:50 -08:00
dependabot[bot]
729815064f
Bump js-yaml from 3.14.2 to 3.15.2 in /test ( #8003 )
2026-09-11 11:06:08 -08:00
cdrci
771a637516
Update Helm chart and changelog with 4.137.0 ( #8007 )
2026-09-10 17:11:14 -08:00
cdrci
b11dabdaca
Update Code to 1.137.0 ( #8005 )
2026-09-10 12:38:15 -08:00
dependabot[bot]
7f25500e74
Bump aquasecurity/trivy-action to latest ( #7966 )
2026-09-08 13:24:21 -08:00
dependabot[bot]
ebc25530a2
Bump semver and @types/semver ( #7971 )
2026-09-08 13:20:41 -08:00
dependabot[bot]
c218591a83
Bump js-yaml from 5.2.3 to 5.4.1 ( #7996 )
2026-09-08 13:20:04 -08:00
dependabot[bot]
e57e399b41
Bump github/codeql-action/init from 4.37.8 to 4.37.9 ( #7999 )
2026-09-08 13:18:55 -08:00
dependabot[bot]
61ad19ca2a
Bump dorny/paths-filter from 4.0.1 to 4.0.3 ( #8000 )
2026-09-08 13:15:18 -08:00
dependabot[bot]
b262510fd8
Bump github/codeql-action/analyze from 4.37.6 to 4.37.9 ( #8001 )
2026-09-08 13:14:51 -08:00
dependabot[bot]
bcfff05ae9
Bump docker/setup-buildx-action from 4.1.0 to 4.3.0 ( #7995 )
2026-09-08 13:14:25 -08:00
denusklo
dc044303c7
Add a windows package job to the release workflow ( #7987 )
2026-09-08 13:13:59 -08:00
denusklo
8ab0bec5f3
Fix the windows arms of the release build scripts ( #7986 )
2026-09-08 13:00:10 -08:00
Asher
8604302ded
Run lint-ts on ci and npm changes
2026-09-08 12:57:11 -08:00
dependabot[bot]
9219c40229
Bump softprops/action-gh-release from 3.0.2 to 3.0.3 ( #7997 )
2026-09-08 12:54:14 -08:00
dependabot[bot]
ca7a314339
Bump docker/setup-qemu-action from 4.1.0 to 4.3.0 ( #7994 )
2026-09-08 12:53:49 -08:00
dependabot[bot]
0bb6a31fb0
Bump heyhusen/archlinux-package-action from 3.0.0 to 3.0.1 ( #7968 )
2026-09-08 12:53:23 -08:00
dependabot[bot]
0e439cb9dc
Bump docker/setup-qemu-action from 4.1.0 to 4.3.0 ( #7969 )
2026-09-08 12:52:57 -08:00
Asher
75d7e662b4
Remove semantic config
2026-09-08 12:52:08 -08:00
dependabot[bot]
716a4eedbe
Bump github/codeql-action/autobuild from 4.37.6 to 4.37.8 ( #7974 )
2026-09-08 12:50:22 -08:00
dependabot[bot]
577da3111f
chore: bump github/codeql-action/init from 4.37.6 to 4.37.8 ( #7975 )
2026-09-08 12:49:54 -08:00
dependabot[bot]
8f2983bab5
Bump qs from 6.15.2 to 6.16.0 ( #7978 )
2026-09-08 12:49:28 -08:00
dependabot[bot]
6f23ab892b
Bump @humanfs/node from 0.16.7 to 0.16.8 ( #7979 )
2026-09-08 12:48:54 -08:00
dependabot[bot]
76f7789303
Bump browserslist from 4.24.0 to 4.28.9 in /test ( #7988 )
2026-09-08 12:48:11 -08:00
denusklo
9d72dceac6
Detect the system when OS is Windows_NT ( #7989 )
...
Since we assume only Windows would set this value, we just run OS detection rather than trying to normalize it to `windows`.
2026-09-08 12:47:04 -08:00
Asher
53692fd9fd
Add local settings test ( #7992 )
2026-09-08 12:38:24 -08:00
denusklo
f1dde9b093
Default the session socket to a named pipe on windows ( #7985 )
2026-09-08 12:37:51 -08:00
denusklo
8c8476eb76
Add a windows launcher to the standalone release ( #7984 )
2026-09-08 12:27:19 -08:00
cdrci
322f065cf0
Update Helm chart and changelog with 4.136.2 ( #7993 )
2026-09-08 12:17:20 -08:00
Asher
8d5f383f30
Fix incorrect data path being used ( #7991 )
2026-09-08 11:02:14 -08:00
cdrci
c9b1fa2e16
Update Helm chart and changelog with 4.136.1 ( #7990 )
2026-09-08 10:36:08 -08:00
cdrci
00672a5522
Update Code to 1.136.1 ( #7981 )
...
* Update Code to 1.136.1
* Do not click on tab during test file opens
It will already be the selected tab, and if any other tab is already
open (like the welcome tab), it will click that instead.
We disable the welcome page so this is not supposed to actually matter,
but that Setting appears not to be working.
Also add the quick input widget selector in the disabled downloads test,
since if the widget never shows up it would mistakenly pass.
2026-09-08 08:32:03 -08:00
denusklo
62284ed549
Run mklink through cmd so windows postinstall works ( #7982 )
...
npm install fails on Windows in postinstall with "mklink: command not
found". mklink is a cmd.exe builtin rather than an executable, so the sh
running this script cannot exec it, and every symlink the install needs is
made this way.
The doubled slashes are the usual MSYS escaping, and are safe here because
this branch only runs when the OS was detected as cygwin or mingw.
2026-09-04 12:06:30 -08:00
denusklo
11699e6cd7
Guard FORCE_NODE_VERSION in the version error path ( #7983 )
...
Installing on the wrong node version dies with "FORCE_NODE_VERSION: unbound
variable" instead of explaining itself. The script runs under set -u and
this is the one place the variable is read bare; the three other reads all
default it.
2026-09-04 10:46:24 -08:00
cdrci
2b2f8b3d5c
Update Helm chart and changelog with 4.135.0 ( #7964 )
2026-08-27 11:46:21 -08:00
cdrci
de89acbcdc
Update Code to 1.135.0 ( #7963 )
2026-08-26 14:54:52 -08:00
cdrci
e08e907889
Update Helm chart and changelog with 4.134.0 ( #7961 )
2026-08-24 14:00:49 -08:00
Asher
92f44d9c7b
Fix changelog typo
2026-08-24 13:44:38 -08:00
cdrci
88c2b7432e
Update Code to 1.134.0 ( #7954 )
2026-08-20 21:45:25 +00:00
Robert Gingras
4cb856c475
Add --socket-fd CLI option ( #7940 )
2026-08-20 13:24:49 -08:00
Asher
2d5dbf0b77
Update codeql actions to 4.37.6
...
One was updated by Dependabot, but not the others.
2026-08-19 14:57:47 -08:00
dependabot[bot]
7833136337
Bump js-yaml from 4.3.1 to 5.2.3 ( #7916 )
2026-08-19 14:53:50 -08:00
dependabot[bot]
1735f6d3fb
Bump brace-expansion from 1.1.11 to 1.1.18 in /test ( #7957 )
2026-08-19 14:45:44 -08:00
dependabot[bot]
0a7b4b1e16
Bump brace-expansion ( #7958 )
2026-08-19 22:45:03 +00:00
Asher
fa4426393e
Run unit tests when npm deps change
2026-08-19 14:31:06 -08:00
Fernando Softov
04ce2301a7
Add VSCODE_OPTIONS and --vscode-option for Code flags ( #1528 ) ( #7952 )
2026-08-19 13:44:48 -08:00
dependabot[bot]
2edeb1c991
chore: bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.6 ( #7917 )
2026-08-19 13:28:08 -08:00
dependabot[bot]
02badb2056
chore: bump github/codeql-action/init from 4.36.2 to 4.37.6 ( #7918 )
2026-08-19 13:24:38 -08:00
dependabot[bot]
fb43d02d10
chore: bump docker/login-action from 4.2.0 to 4.6.0 ( #7919 )
2026-08-19 13:23:12 -08:00
dependabot[bot]
b9653442b3
chore: bump softprops/action-gh-release from 3.0.1 to 3.0.2 ( #7920 )
2026-08-19 13:22:48 -08:00
dependabot[bot]
30852bb006
chore: bump actions/setup-node from 6.4.0 to 7.0.0 ( #7921 )
2026-08-19 13:22:13 -08:00
dependabot[bot]
f69d40ce6f
Bump js-yaml from 4.3.0 to 4.3.1 ( #7935 )
2026-08-19 13:21:37 -08:00
Anthony Holten
876304f95f
Remove --unsafe-perm flag from install scripts ( #7953 )
...
npm 12 rejects unknown CLI flags, so the npm install path crashes
with EUNKNOWNCONFIG before installing. The flag has been a no-op
since npm 7; remove it from install.sh and the postinstall guard.
2026-08-19 13:18:20 -08:00
cdrci
c22dc74d53
Update Helm chart and changelog with 4.133.0 ( #7951 )
2026-08-17 15:58:30 -08:00
cdrci
d2f7a12252
Update Code to 1.133.0 ( #7942 )
2026-08-17 10:06:00 -08:00
Alexander Freiherr von Buddenbrock
596dbf3416
Update files to reflect the new node.js v24 ( #7949 )
...
With the update to node.js v24 in vscode and package.json some files have not been updated and still referenced version 22.x.
2026-08-17 09:03:55 -08:00
赵鑫亿
51f90a376b
docs(helm): remove duplicated 'the' in persistence example ( #7936 )
2026-08-10 10:22:48 -08:00
cdrci
29785ddfba
Update Helm chart and changelog with 4.132.0 ( #7937 )
2026-08-10 10:20:19 -08:00
dependabot[bot]
313bf0359b
Bump ip-address from 10.2.0 to 10.4.0 ( #7931 )
2026-08-06 14:45:38 -08:00
cdrci
41cbd28c44
Update Code to 1.132.0 ( #7933 )
2026-08-06 22:13:49 +00:00
Asher
208c81a072
Fix mistakenly encoding cookies to proxy
...
We use the cookie parser to remove the code-server token but by default
it encodes using encodeURIComponent, which encodes more than is strictly
necessary and can break proxied applications.
Now we pass the cookies through unchanged (other than removing the
code-server token).
Fixes #7927 .
2026-08-06 13:06:00 -08:00
Asher
f836314954
Use const for unmutated let
2026-08-06 12:35:34 -08:00
Asher
1a370bb606
Update Node types to 24
2026-08-06 11:04:32 -08:00
dependabot[bot]
7ff34158a1
Bump body-parser from 2.2.2 to 2.3.0 ( #7902 )
2026-08-03 08:26:26 -08:00
dependabot[bot]
2a1c2637cd
Bump js-yaml from 4.2.0 to 4.3.0 ( #7900 )
2026-08-03 08:25:52 -08:00
Anupam Mediratta
4f73664880
Require auth for mint key endpoint ( #7923 )
...
The client combines the key from this endpoint to then encrypt secrets into browser storage.
2026-08-03 08:24:25 -08:00
cdrci
eb4ba56acb
Update Helm chart and changelog with 4.131.0 ( #7922 )
2026-07-30 14:37:01 -08:00
Vishal Doshi
924bfac9fd
Document opening a file at a line via the payload query parameter ( #7909 )
2026-07-30 14:14:17 -08:00
Asher
4cf9c11e3f
Update changelog with 1.131.0
2026-07-30 14:13:53 -08:00
cdrci
a3fc2899bd
Update Code to 1.131.0 ( #7912 )
2026-07-30 12:25:04 -08:00
Asher
b95360f302
Continue update even if csp patch is missing
...
This can happen if you run the update multiple times and it was already
deleted from another run but not regenerated yet due to an early
failure like from a conflict.
2026-07-30 11:22:20 -08:00
Asher
9edf867909
Remove dash partially completed update step
...
Not sure why I assumed this would render.
2026-07-30 11:22:20 -08:00
Anupam Mediratta
f3aca85d02
fix: add cooldown to dependabot config ( #7910 )
2026-07-30 11:18:50 -08:00
cdrci
14bdb36f92
Update Helm chart and changelog with 4.130.0 ( #7906 )
2026-07-23 16:18:12 -08:00
cdrci
197ef3e8da
Update Code to 1.130.0 ( #7904 )
2026-07-23 19:09:58 +00:00
dependabot[bot]
5cf68f6241
Bump prettier from 3.8.3 to 3.9.4 ( #7876 )
2026-07-21 11:45:28 -08:00
dependabot[bot]
1dabd152be
chore: bump actions/checkout from 6.0.3 to 7.0.1 ( #7874 )
2026-07-21 19:18:19 +00:00
dependabot[bot]
3ed5f97448
chore: bump ws from 7.5.10 to 7.5.13 in /test ( #7901 )
2026-07-21 11:14:19 -08:00
dependabot[bot]
b99ce9a992
chore: bump actions/cache from 5.0.5 to 6.1.0 ( #7875 )
2026-07-21 11:12:59 -08:00
dependabot[bot]
c2337fec2d
chore: bump azure/setup-helm from 5.0.0 to 5.0.1 ( #7873 )
2026-07-21 11:12:19 -08:00
dependabot[bot]
1e2b734be8
chore: bump awalsh128/cache-apt-pkgs-action from 1.6.1 to 1.6.3 ( #7877 )
2026-07-20 14:04:23 -08:00
dependabot[bot]
31e6279646
chore: bump softprops/action-gh-release from 3.0.0 to 3.0.1 ( #7878 )
2026-07-20 14:03:57 -08:00
cdrci
227d08660b
Update Code to 1.129.1 ( #7899 )
2026-07-20 11:00:27 -08:00
cdrci
22b0a3eeab
Update Helm chart and changelog with 4.129.0 ( #7898 )
2026-07-17 11:33:10 -08:00
cdrci
77baee7fe0
Update Code to 1.129.0 ( #7897 )
2026-07-17 07:05:13 +00:00
Asher
3e76a04b1b
Fix automatic CSP hash update
...
The problem was that whenever the hashe needed an update, the current
patch would create a conflict which cannot be easily auto-resolved.
Instead, put the hashes in a separate patch that is deleted and
regenerated each time, avoiding the conflicts.
Also the web worker iframe hash was not being updated.
2026-07-16 12:41:14 -08:00
cdrci
421e7eb084
Update Helm chart and changelog with 4.128.0 ( #7891 )
2026-07-13 08:56:29 -08:00
cdrci
cb22f74650
Update Code to 1.128.0 ( #7889 )
2026-07-10 12:08:44 -08:00
Asher
d103d5057a
Fix update script using old Node version
...
It needs to parse the version *after* the VS Code update, otherwise it
is just pulling whatever the previous version was.
That means we cannot use it in the step title without some refactoring;
opted to just omit it for now.
2026-07-09 22:58:44 -08:00
Asher
aed61bf6ab
Remove @schemastore/package
...
Providing our own type is trivial.
2026-07-02 12:29:55 -08:00
cdrci
1e160477be
Update Helm chart and changelog with 4.127.0 ( #7882 )
2026-07-02 12:05:31 -08:00
cdrci
1e6ed874e3
Update Code to 1.127.0 ( #7880 )
...
There is a new use of parsedArgs so we have to pass that in since we
parse on demand instead of globally.
2026-07-01 13:01:48 -08:00
cdrci
dd48f7753b
Update Helm chart and changelog with 4.126.0 ( #7869 )
2026-06-24 14:08:03 -08:00
cdrci
2c06497ca9
Update Code to 1.126.0 ( #7868 )
2026-06-24 12:05:00 -08:00
Asher
9ccf763b02
Match update PRs titles with commits
2026-06-22 11:31:25 -08:00
cdrci
40b39293fa
Update Helm chart and changelog with 4.125.0 ( #7863 )
2026-06-22 11:29:01 -08:00
Asher
02e28cd254
Name VS Code package "code-oss"
...
The -dev seems a bit weird since it is not a dev version once it is
built, and also there is a false positive advisory with the code-oss-dev
name.
2026-06-18 10:50:51 -08:00
cdrci
fade53fcaf
Update Code to 1.125.0 ( #7861 )
2026-06-17 10:51:01 -08:00
dependabot[bot]
804ba5bfce
Bump codecov/codecov-action from 6.0.1 to 7.0.0 ( #7853 )
2026-06-16 12:02:46 -08:00
dependabot[bot]
9545b26036
Bump awalsh128/cache-apt-pkgs-action from 1.6.0 to 1.6.1 ( #7855 )
2026-06-16 12:01:52 -08:00
dependabot[bot]
2ef530ce11
Bump actions/cache from 4.3.0 to 5.0.5 ( #7856 )
2026-06-16 12:01:11 -08:00
dependabot[bot]
8009d3c360
Bump typescript-eslint from 8.56.1 to 8.61.1 ( #7857 )
2026-06-16 11:53:49 -08:00
dependabot[bot]
4ae1fc202e
Bump doctoc from 2.3.0 to 2.5.0 ( #7858 )
2026-06-16 11:52:36 -08:00
dependabot[bot]
a59c3ab990
Bump github/codeql-action from 4.35.4 to 4.36.2 ( #7860 )
2026-06-16 11:51:47 -08:00
dependabot[bot]
a7f457046f
Bump actions/checkout from 6.0.2 to 6.0.3 ( #7852 )
2026-06-16 11:51:19 -08:00
Asher
25e847dc94
Update Playwright
2026-06-16 11:33:33 -08:00
Asher
e1c839fb1d
Slightly improve heart tests
...
- Get rid of the global isActive mock; in particular the way it shadows
local ones seemed sketchy.
- No need for requireActual from my testing.
- Reword the comment for why we need setImmediate.
- Add the setImmediate to another test that seemed to only pass because
of an await on the timer call which is not actually a promise but had
the side effect of yielding.
- Always set fake/real timers in the before/after handlers and never in
individual tests.
2026-06-16 11:27:53 -08:00
YONGJAE LEE (이용재)
7dfd68589a
fix: re-enable skipped Heart tests and make non-asserting checks assert ( #7845 )
2026-06-16 09:58:42 -08:00
Asher
72086edbdb
Remove Windows npm installation recommendation
...
We need to properly support Windows before we can recommend any method
of installation, including npm.
2026-06-16 09:45:30 -08:00
Asher
7617ab2b92
Update AUR commit message to match code-server's
2026-06-16 09:45:30 -08:00
Asher
d31d0347cf
Remove Dependabot commit prefix
...
The changelog is manually curated so the prefixes are noise.
2026-06-16 09:45:30 -08:00
dependabot[bot]
5dca609c2a
chore: bump i18next from 25.8.13 to 26.3.1 ( #7828 )
2026-06-16 09:38:09 -08:00
dependabot[bot]
87ac56bf8c
chore: bump softprops/action-gh-release from 1 to 3 ( #7774 )
2026-06-16 09:37:41 -08:00
dependabot[bot]
a056406eff
chore: bump form-data in /test ( #7848 )
2026-06-16 17:35:17 +00:00
dependabot[bot]
24811a6269
chore: bump docker/setup-buildx-action from 4.0.0 to 4.1.0 ( #7829 )
2026-06-16 17:16:41 +00:00
dependabot[bot]
53ed1e30d2
chore: bump docker/setup-qemu-action from 4.0.0 to 4.1.0 ( #7830 )
2026-06-16 09:04:01 -08:00
dependabot[bot]
7393d50b09
chore: bump awalsh128/cache-apt-pkgs-action from 1.5.3 to 1.6.0 ( #7832 )
2026-06-16 09:03:28 -08:00
dependabot[bot]
f7663cc34c
chore: bump codecov/codecov-action from 5.5.4 to 6.0.1 ( #7833 )
2026-06-16 09:02:59 -08:00
dependabot[bot]
71ba0191f2
chore: bump globals from 16.5.0 to 17.6.0 ( #7831 )
2026-06-16 08:59:54 -08:00
cdrci
19be49ebe4
Update Helm chart and changelog with 4.124.2 ( #7851 )
...
Co-authored-by: cdrci <opensource@coder.com >
2026-06-16 07:57:28 -08:00
cdrci
9fe7eb79d5
Update Code to 1.124.2 ( #7846 )
2026-06-15 22:28:49 -08:00
Asher
1ccd4f04d2
Update brace-expansion, js-yaml, and ws
2026-06-15 16:42:17 -08:00
Asher
364cf99338
Strip token from cookies before proxying
...
Since this functionality requires information placed onto the request by
code-server (req.args) and Express (req.cookies), move the standalone
tests into the integration tests as the proxy can no longer run
correctly on its own without that context.
We could strip the header elsewhere or refactor in some way (pass in a
callback function for the stripping or something) but this seems like
the simplest and safest place at the moment to ensure we catch all uses
of the proxy.
In any case, I think it does lend more confidence to know we are testing
the proxy the way it will be used in practice. The downside is some
additional complexity when setting up tests, but at the moment I do not
think that exchange is overly burdensome.
2026-06-15 16:42:17 -08:00
ka-ishimoto
92a7dce46f
Fix false positive CVE alerts by setting package name to code-oss-dev ( #7839 )
...
The VS Code build process sets the bundled lib/vscode/package.json name to "code-server" (from product.json nameShort), causing vulnerability scanners to misidentify it and flag non-applicable CVEs. Override the name to "code-oss-dev" in build-release.sh after merging package.json.
Fixes #7071
Signed-off-by: ka-ishimoto <ka-ishimoto@kddi.com >
2026-06-10 11:59:45 -08:00
cdrci
d0d53d924e
Update Helm chart and changelog with 4.123.0 ( #7838 )
2026-06-04 10:50:04 -08:00
Asher
77d880d0c3
Drop armhf builds
2026-06-03 12:06:07 -08:00
Asher
559d73a636
Update Code to 1.123.0 ( #7837 )
2026-06-03 11:33:49 -08:00
Asher
6fd40c04c7
Fix Helm chart version bump script
...
Instead of relying on semver which is not installed, just parse it with
bash.
2026-06-02 11:29:19 -08:00
cdrci
63c071959f
Update Helm chart and changelog with 4.122.1 ( #7835 )
2026-06-02 10:42:18 -08:00
cdrci
7be257b252
Update Code to 1.122.1 ( #7825 )
2026-06-01 14:06:15 -08:00
Asher
923cb753b8
Fix automatic release major version
...
It was using the VS Code major version instead of code-server's.
2026-06-01 14:05:20 -08:00
dependabot[bot]
6cad75773e
chore: bump basic-ftp from 5.3.0 to 5.3.1 ( #7786 )
2026-06-01 13:56:12 -08:00
Asher
cb2548f989
Make Helm and changelog commit more specific
2026-05-29 10:20:19 -08:00
cdrci
f87e243225
Update to 4.122.0 ( #7823 )
2026-05-29 10:19:24 -08:00
Asher
d98fcd3598
Fix macos release tag
2026-05-28 13:22:08 -08:00
cdrci
93d3ee8ab1
Update Code to 1.122.0 ( #7822 )
2026-05-28 12:02:35 -08:00
Asher
030bdcf771
Still finish checklist if a step failed
...
The point is to get as far as we can.
2026-05-28 11:04:14 -08:00
dependabot[bot]
4a50b99b67
chore: bump ip-address from 10.1.0 to 10.2.0 ( #7785 )
2026-05-28 10:26:53 -08:00
dependabot[bot]
382aa3ba87
chore: bump dorny/paths-filter from 3.0.3 to 4.0.1 ( #7771 )
2026-05-28 10:25:20 -08:00
dependabot[bot]
2243efb2e6
chore: bump docker/login-action from 3.7.0 to 4.2.0 ( #7772 )
2026-05-28 10:24:40 -08:00
dependabot[bot]
477c0b11b8
chore: bump qs from 6.15.0 to 6.15.2 ( #7814 )
2026-05-28 10:23:44 -08:00
Micah Zoltu
2396092ae9
Make app-name configurable via environment variable ( #7818 )
2026-05-26 12:26:48 -08:00
dependabot[bot]
4f9c23893a
chore: bump robinraju/release-downloader from 1.12 to 1.13 ( #7770 )
2026-05-22 12:30:42 -08:00
dependabot[bot]
62e5c450f7
chore: bump prettier from 3.6.2 to 3.8.3 ( #7776 )
2026-05-22 12:29:05 -08:00
dependabot[bot]
265713561c
chore: bump ws from 8.19.0 to 8.20.1 ( #7804 )
2026-05-22 12:28:29 -08:00
dependabot[bot]
c9faf343ba
chore: bump aquasecurity/trivy-action ( #7769 )
2026-05-22 12:27:36 -08:00
Asher
99bfbd5931
Update e2e example commands
...
I think the syntax changed when we moved from yarn to npm.
2026-05-21 13:30:44 -08:00
Micah Zoltu
238769e535
Apply --app-name to web page titles ( #7794 )
2026-05-21 12:22:29 -08:00
cdrci
bf61384523
Update to 4.121.0 ( #7808 )
2026-05-20 15:41:27 -08:00
Asher
2114937ec6
Fix release draft trigger
...
The branches filter is the target, not the PR branch.
2026-05-20 14:21:59 -08:00
Asher
cd1586214e
Remove "VS" from updates
...
Technically it is Code (or Code OSS), not VS Code.
2026-05-20 14:09:10 -08:00
Asher
51bc3c0f09
Remove unpublished 4.119.0
...
For some reason, I never actually published the draft on this one.
Since 4.121.0 will be out shortly, opted to just skip it.
2026-05-20 14:05:31 -08:00
Asher
3c3f87a3d2
Fix adding release notes to draft release
2026-05-20 14:01:37 -08:00
cdrci
174b7757a5
Update VS Code to 1.121.0 ( #7805 )
2026-05-20 10:20:27 -08:00
Asher
359b40d422
Ensure dir exists before writing update checklist
2026-05-19 10:13:01 -08:00
Olivier Benz
ef7ea3e515
Update Code to 1.120.0 ( #7796 )
2026-05-19 10:07:59 -08:00
Olivier Benz
190b09cc76
Update Code to 1.119.1 ( #7795 )
2026-05-19 09:54:22 -08:00
Asher
53d981a724
Automatically generate helm/changelog PR
2026-05-08 13:15:25 -08:00
Asher
89ca02c1f7
Add changelog notes to draft release
2026-05-08 13:15:25 -08:00
Asher
2fafe8771d
Set name and tag for release
2026-05-08 13:15:25 -08:00
Asher
41c9ed499b
Draft release when update branch is merged
...
Not completely sure this is correct, but will debug with the next
release.
2026-05-08 13:15:25 -08:00
Asher
1605d68709
Update contribution steps for updating
...
You can now more easily run the update script to finish out an update
and the documentation is updated to match.
2026-05-08 11:20:56 -08:00
Asher
93ce398e28
Make update cron run twice daily
...
Every hour seems aggressive, typically I will only check for PRs once a
day anyway.
2026-05-08 09:58:12 -08:00
Asher
62a552d896
Check for updates on a schedule
2026-05-07 15:20:49 -08:00
Asher
bd41dca064
Add 4.119.0 to the changelog
2026-05-07 12:10:55 -08:00
Asher
3dbddaaadf
Ignore .bak files from sed operations
2026-05-07 12:10:55 -08:00
Asher
58491f317f
Add workflow for updating VS Code
...
For now it is manually triggered.
2026-05-07 10:46:13 -08:00
Asher
9527b7879f
Pin GitHub actions
2026-05-07 10:30:37 -08:00
Asher
0059d37db5
Reset cdrci aur repo when publishing
...
I figure it is probably faster to keep it up to date than to merge
larger and larger changes each time?
2026-05-07 10:23:06 -08:00
Olivier Benz
58aedd0ebc
Update Code to 1.119.0 ( #7787 )
2026-05-07 10:22:50 -08:00
Asher
7056332f0b
Add update script
2026-05-07 09:21:20 -08:00
Asher
672b4edfbc
Add 4.117.0 and 4.118.0 to changelog
2026-05-07 09:21:20 -08:00
Olivier Benz
442db744d5
Update Code to 1.118.1 ( #7783 )
2026-05-06 14:18:46 -08:00
Asher
871f1d9048
Skip webkit in e2e tests for now
2026-05-06 12:12:54 -08:00
Asher
f6bd6aa1a4
Update Playwright to 1.59.1
2026-05-06 11:50:06 -08:00
Asher
2787a5ca5d
Set debug level for e2e tests
2026-05-06 11:38:07 -08:00
Olivier Benz
dbd25c945c
Update Code to 1.118.0 ( #7768 )
2026-05-05 13:13:54 -08:00
nom3ad
02f4d6ea0b
Add ubuntu:resolute 26.04 docker image ( #7764 )
2026-04-27 09:59:20 -08:00
nom3ad
80a642f511
Update ubuntu tag to noble 24.04 ( #7763 )
2026-04-27 09:35:06 -08:00
Asher
ddeb0a3de0
Update brace-expansion to 1.1.14
2026-04-22 14:20:28 -08:00
Asher
22ec1ea65b
Run formatter on build yaml
...
I guess it wants double quotes...
2026-04-22 14:18:44 -08:00
Olivier Benz
e0b100ee31
Update Code to 1.117.0 ( #7760 )
2026-04-22 14:15:18 -08:00
dependabot[bot]
5f7c23bd8e
chore: bump lodash from 4.17.23 to 4.18.1 in /test ( #7743 )
2026-04-17 11:14:54 -08:00
Asher
367dcda592
Update changelog and chart up to 4.116.0
2026-04-17 11:12:33 -08:00
Asher
6ecac88f4d
Pin Helm version for linting
2026-04-17 11:12:04 -08:00
egvimo
cc8ac4f40f
feat(charts): make replicaCount optional ( #7744 )
2026-04-17 11:03:44 -08:00
dependabot[bot]
a12c89658c
chore: bump follow-redirects from 1.15.11 to 1.16.0 ( #7755 )
2026-04-17 11:02:42 -08:00
dependabot[bot]
4b4903e809
chore: bump basic-ftp from 5.2.1 to 5.3.0 ( #7759 )
2026-04-17 11:02:13 -08:00
Asher
be537ce77a
Optimize builtin copilot extension ( #7757 )
2026-04-16 00:07:15 -08:00
Asher
cc8f0b7348
Strip sourcemaps ( #7756 )
...
This will significantly reduce the size, and for errors we should be
able to map them as necessary.
2026-04-15 22:56:00 -08:00
Olivier Benz
7cc2270228
Update Code to 1.116.0 ( #7754 )
...
* Update Code to 1.116.0
* Add copilot extension build
Seems the vscode build requires this separately now.
* Disable welcome popup
A giant modal window asking you to sign in for AI features is blocking
the tests. Rather than have to click through it, disable it. It looks like
this has to be a user setting, so switch to that instead of machine (we
used machine because user settings were in the browser, but they have
been since moved back to disk).
---------
Co-authored-by: Asher <ash@coder.com >
2026-04-15 15:05:17 -08:00
dependabot[bot]
34ac5f47de
chore: bump basic-ftp from 5.2.0 to 5.2.1 ( #7749 )
2026-04-10 11:51:18 -08:00
dependabot[bot]
523c0cbaa7
chore: bump docker/setup-buildx-action from 3.12.0 to 4.0.0 ( #7732 )
2026-04-10 11:50:15 -08:00
dependabot[bot]
05f481d2f0
chore: bump codecov/codecov-action from 5.5.3 to 6.0.0 ( #7731 )
2026-04-08 15:29:57 -08:00
dependabot[bot]
c66372452f
chore: bump docker/setup-qemu-action from 3.7.0 to 4.0.0 ( #7729 )
2026-04-08 13:47:30 -08:00
dependabot[bot]
aee8825558
chore: bump azure/setup-helm from 4.3.1 to 5.0.0 ( #7728 )
2026-04-08 13:46:54 -08:00
dependabot[bot]
f612511974
chore: bump awalsh128/cache-apt-pkgs-action from 1.5.3 to 1.6.0 ( #7727 )
2026-04-08 13:46:25 -08:00
dependabot[bot]
287f8ecd56
chore: bump path-to-regexp from 8.3.0 to 8.4.0 ( #7722 )
2026-04-08 13:46:01 -08:00
Olivier Benz
1c6fb2dc20
Update Code to 1.115.0 ( #7748 )
2026-04-08 11:34:23 -08:00
Asher
f04dc2cabd
Update chart and changelog up to v4.114.1
2026-04-06 13:06:20 -08:00
Asher
4af6408e39
Preserve permissions with rsync
...
This is mostly just because if the opts are empty, it seems to error in
macOS for some reason...(rsync_opts[@]: unbound variable).
2026-04-06 12:03:45 -08:00
Asher
1fa5d5084b
Omit argon2 prebuilds
...
Since we build from source, these are dead weight.
It also ensures we did in fact build from source.
2026-04-06 11:56:28 -08:00
Asher
d74b002969
Build native modules from source
...
Another thing I managed to miss when refactoring CI.
2026-04-06 11:56:23 -08:00
dependabot[bot]
394c6fc3f9
chore: bump picomatch from 2.3.1 to 2.3.2 in /test ( #7717 )
2026-04-06 10:26:38 -08:00
dependabot[bot]
0b15b91dc1
chore: bump picomatch from 4.0.3 to 4.0.4 ( #7718 )
2026-04-06 10:26:13 -08:00
Olivier Benz
5fe286e8d5
Update Code to 1.114.0 ( #7735 )
2026-04-03 14:07:17 -08:00
Asher
82fe3a72a2
Copy correct Node into release
...
Still had the old code that copied the system Node, which in the case of
cross-compilation will be the wrong one. Instead copy the one VS Code
downloads, which should be for the correct platform.
2026-04-03 11:32:54 -08:00
Asher
b27ceeb106
Prune dev dependencies when building release
2026-03-31 09:07:39 -08:00
Asher
be062d06c1
Use tag env var in npm publish
2026-03-30 14:36:22 -08:00
Asher
f733ccaed1
Skip binary downloads during build
2026-03-30 14:36:21 -08:00
Asher
6f69f28379
Fix top level release package dir
2026-03-30 14:36:21 -08:00
Asher
6b36d4e421
Fix cross-compiled releases
...
Instead of doing our own thing, make use of VS Code's setup script.
2026-03-30 14:36:21 -08:00
Asher
9dcb1d7da0
Set version in release package.json
...
Before this was handled by an extra CI step, now we can just do it in
the release script.
Pulling it from the product.json since we already set it there, rather
than ask for it again via env var.
2026-03-27 17:53:59 -08:00
Asher
840a9430cd
Fix quilt and git install on linux job
2026-03-27 17:53:56 -08:00
Asher
9143a299a4
Update changelog with 4.110.0 through 4.112.0
2026-03-27 17:11:18 -08:00
Asher
41b0e45f91
Set npm token for publishing
2026-03-27 17:11:03 -08:00
Asher
b5611efe1a
Use VS Code packaging for releases ( #7721 )
...
* Allow setting the VS Code build target
For the NPM package (and tests, at least for now), we will still use
linux-x64, but this is going to allow using the platform build targets
for our standalone releases so we can avoid having to copy all the
packaging steps (like cleaning up modules).
This does mean that the NPM package when installed will be missing those
cleanup steps. Possibly we can try to break out the packaging step into
a something that can be ran standalone (which will also require
installing dev dependencies like gulp) but not sure how much work this
would be.
* Preserve dependencies for e2e tests
To avoid having to install them again.
Also moved an env block to the root of the job.
* Refactor releases to use VS Code packaging
Instead of building the linux-x64 package, stripping the modules, then
installing them again, we build the correct target and use the modules
as they are.
This means we do not have to copy all the post-processing steps like the
ones that delete unnecessary modules.
For the NPM package we still publish the linux-x64 package (without
modules of course). This means npm installations do not get that same
post-processing.
Another advantage of this is that we can run the release immediately
without having to wait for the build step, or on a commit that no longer
has a build artifact, since they all build individually now. We could
try sharing the core-ci build step, but leaving that alone for now.
I also converted the macOS jobs into a matrix.
Deleted the CI readme because it was out of date and seemed to just
repeat what should be described in the scripts anyway.
Removed a section about Homebrew since we do not maintain that anymore.
It looks like there is no need to symlink node_modules.asar anymore.
2026-03-27 17:08:35 -08:00
Asher
a5c1b6a196
Use inputs instead of github.event.inputs
...
Just to be consistent with the other workflow. They are the same except
inputs treats booleans as booleans instead of strings, which seems like
it might be better anyway.
2026-03-26 12:04:11 -08:00
dagecko
2743655ab5
Pin actions and extract expressions to env vars ( #7719 )
2026-03-26 12:01:48 -08:00
Olivier Benz
8d9a44a024
Update Code to 1.113.0 ( #7716 )
...
* Update Code to 1.113.0
* Use CI build targets
The target we have been using has started throwing all sorts of errors
during the build (even without any of our patches). After checking the
VS Code repo I think these are the ones we should actually be using.
They are way faster, too.
---------
Co-authored-by: Asher <ash@coder.com >
2026-03-26 11:39:40 -08:00
Tianyi Cui
ada3489acf
feat: expose --reconnection-grace-time CLI flag ( #7678 )
...
* feat: expose --reconnection-grace-time CLI flag
Pass through VS Code Server's --reconnection-grace-time argument,
allowing users to configure how long the server waits for a
disconnected client to reconnect before cleaning up the session.
This is useful for users whose client machines sleep overnight, causing
the default 3-hour grace period to expire and forcing a "Reload Window"
on wake. The flag can also be set via CODE_SERVER_RECONNECTION_GRACE_TIME
env var or in config.yaml.
2026-03-25 11:47:58 -08:00
Abdulsattar Mohammed
4d615f18a9
feat: add wildcard support to trusted-origins ( #7697 )
2026-03-25 11:04:06 -08:00
dependabot[bot]
d544846caa
chore: bump flatted from 3.3.4 to 3.4.2 ( #7713 )
2026-03-23 10:50:35 -08:00
gwe32
44fc46316f
Update Debian base image to 13 (trixie) ( #7705 )
2026-03-20 10:57:17 -08:00
Karesansui
d7599ae360
fix: remove config file path from login page ( #7709 )
...
The login page displayed the full config file path (e.g.
/home/username/.config/code-server/config.yaml), which exposes
the username and system layout to anyone who can see the page.
The path is already printed in the CLI output when starting
code-server, so showing it on the login page is unnecessary.
Fixes #7643
2026-03-18 14:00:54 -08:00
Olivier Benz
13ca0e4731
Update Code to 1.112.0 ( #7711 )
2026-03-18 10:41:40 -08:00
woobs
b7c7a62049
Suppress i18next support notice in terminal output ( #7702 )
...
* Update i18next version to 25.8.3
This is the minimum i18next version that supports the showSupportNotice option
* Suppress i18next support notice
2026-03-12 10:10:54 -08:00
Luna Ops
24ea70ac88
feat: use --app-name in error page title ( #7693 )
2026-03-11 13:43:45 -08:00
Olivier Benz
a6d80dc434
Update Code to 1.111.0 ( #7700 )
2026-03-10 17:57:15 -08:00
Olivier Benz
b43e772707
Update Code to 1.110.1 ( #7699 )
2026-03-10 16:07:45 -08:00
Olivier Benz
1af5ce5ab6
Update Code to 1.110.0 ( #7694 )
...
* Update Code to 1.110.0
* Fix protected field error
* Lower mangle workers to 2 to fix oom
* Remove build timeouts
2026-03-05 23:54:52 -09:00
Asher
62afaf261b
Update npm dependencies
2026-03-03 16:18:30 -09:00
dependabot[bot]
b6e0c844a9
chore: bump eslint-config-prettier from 9.1.0 to 10.1.8 ( #7653 )
2026-03-03 15:27:51 -09:00
dependabot[bot]
83d2935223
chore: bump typescript-eslint from 8.33.0 to 8.54.0 ( #7654 )
2026-03-03 15:27:10 -09:00
dependabot[bot]
9e3794487f
chore: bump eslint-plugin-import from 2.31.0 to 2.32.0 ( #7652 )
2026-03-03 13:10:47 -09:00
dependabot[bot]
65b0f0e1bb
chore: bump heyhusen/archlinux-package-action from 2.4.0 to 3.0.0 ( #7650 )
2026-03-03 12:35:36 -09:00
dependabot[bot]
841ec45573
chore: bump aquasecurity/trivy-action from 0.33.1 to 0.34.1 ( #7676 )
2026-03-03 12:29:03 -09:00
dependabot[bot]
3eada681d3
chore: bump ws and @types/ws ( #7651 )
2026-03-03 12:24:36 -09:00
dependabot[bot]
52f1542621
chore: bump basic-ftp from 5.0.5 to 5.2.0 ( #7680 )
2026-03-03 12:23:40 -09:00
dependabot[bot]
b5e2c42183
chore: bump minimatch from 3.1.2 to 3.1.5 in /test ( #7682 )
2026-03-03 12:19:52 -09:00
dependabot[bot]
980e009b6d
chore: bump minimatch ( #7683 )
2026-03-03 12:19:01 -09:00
dependabot[bot]
36b00d37ff
chore: bump actions/upload-artifact from 4 to 7 ( #7685 )
2026-03-03 12:11:52 -09:00
dependabot[bot]
355546d0a5
chore: bump dawidd6/action-download-artifact from 12 to 16 ( #7686 )
2026-03-03 12:11:17 -09:00
