microsoft / microsoft/vscode-python-environments
Update dependencies with actionable security alerts
@rzhao271 is already working on this.
Since Sep 16, 2026.
- #1792 by @copilot-swe-agent — closed without merging
- Dominant language
- TypeScript
- Stars
- 138
- Forks
- 62
- Avg merge
- 1d 4h
- Merged PRs (30d)
- 35
Description
## Dependency updates
| Dependency | Current version | Required version |
| --- | --- | --- |
| `brace-expansion` | `1.1.14` | `1.1.17` |
| `brace-expansion` | `2.1.0` | `2.1.3` |
| `brace-expansion` | `5.0.6` | `5.0.8` |
| `js-yaml` | `4.2.0` | `4.3.2` |
Please update the dependencies listed above to at least the required versions.
### Requirements
- Do not use force flags, dependency-resolution overrides, or equivalent mechanisms to bypass
compatibility or security checks.
- Set the minimum required age for dependency versions to 7 days.
- Keep the changes focused on these dependency updates and any directly required lockfile changes.
- Run the repository's relevant tests and validation after making the updates.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.