microsoft / microsoft/vscode-python-environments

Update dependencies with actionable security alerts

Open
#1,791 0 comments 1 reaction 2 assignees Claimed by @rzhao271 View on GitHub
triage-needed
Dominant language
TypeScript
Stars
138
Forks
62
Avg merge
1d 4h
Merged PRs (30d)
35

Description

## Dependency updates

| Dependency | Current version | Required version |
| --- | --- | --- |
| `brace-expansion` | `1.1.14` | `1.1.17` |
| `brace-expansion` | `2.1.0` | `2.1.3` |
| `brace-expansion` | `5.0.6` | `5.0.8` |
| `js-yaml` | `4.2.0` | `4.3.2` |

Please update the dependencies listed above to at least the required versions.

### Requirements

- Do not use force flags, dependency-resolution overrides, or equivalent mechanisms to bypass
compatibility or security checks.
- Set the minimum required age for dependency versions to 7 days.
- Keep the changes focused on these dependency updates and any directly required lockfile changes.
- Run the repository's relevant tests and validation after making the updates.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.