microsoft / microsoft/vscode-python-debugger
Update dependencies with actionable security alerts
Open
Beginner friendly
Nobody has claimed this yet.
triage-needed
- Dominant language
- TypeScript
- Stars
- 181
- Forks
- 126
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 3
Description
Dependency updates
| Dependency | Current version | Required version |
|---|---|---|
brace-expansion |
2.0.3 |
2.1.3 |
Please update the dependencies listed above to at least the required versions.
Requirements
- Do not use force flags, dependency-resolution overrides, or equivalent mechanisms to bypass
compatibility or security checks. - For package-lock.json files, use npm 11.10.0 or newer, and run every
npm installandnpm updatecommand with--min-release-age 7. - Do not create or update
.npmrcfiles. - Keep the changes focused on these dependency updates and any directly required lockfile changes.
- Run the repository's relevant tests and validation after making the updates.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the dependency manifests and package-lock.json files mentioned by the repository, then inspect the current brace-expansion entry and its dependency context. Update brace-expansion to at least 2.1.3 using npm 11.10.0 or newer with the required seven-day release-age setting, then run the repository's relevant tests and validation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, typescript
- Domain
- build-system
- Issue type
- Refactor
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Active
- Clarity
- Clearly specified
- Newbie friendliness
- 78/100