-
Notifications
You must be signed in to change notification settings - Fork 1.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Cache the value of extensions.all
#20222
Conversation
@@ -51,7 +63,7 @@ export class Extensions implements IExtensions { | |||
}) | |||
.filter((item) => item && !item.toLowerCase().startsWith(pythonExtRoot)) | |||
.filter((item) => | |||
this.all.some( | |||
this.cachedExtensions.some( |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Another possible solution is capture all extension uris at the entrance of determineExtensionFromCallStack
, if we don't want to hold all extension info objects in memory for too long.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
aah yes, will leave that change for kartik
This reverts commit db5e96c.
) Follow up from #20222. Apparently `setTimeout` changed the stack in such a way that we were unable to recognize which extension called the API: ``` [DEBUG 2023-2-2 16:21:9.641]: Extension unknown accessed getActiveEnvironmentPath with args: undefined ``` Reverting the change.
…on main Merge pull request #14 from posit-dev/merge_upstream Merge upstream of vscode python main -------------------- Commit message for posit-dev/positron-python@098389e026b7e405b604b0c9184346901bb44077: Ignore package-lock.json in favor of yarn -------------------- Commit message for posit-dev/positron-python@65bbcb1fe923cb9e110669c5fc048870a9ebfe59: Merge remote-tracking branch 'upstream/main' -------------------- Commit message for microsoft/vscode-python@04753c4d8c5f0443f57c69ad2a4fcfe4df07c740: Ensure editable install is triggered if `pyproject.toml` is found. (microsoft/vscode-python#20572) No-changelog because this feature is not in stable yet. -------------------- Commit message for microsoft/vscode-python@80ef35f7e1e83ffec09e5475c492fe8beaaad12b: Log as error in case we're unable to detect the active terminal shell type (microsoft/vscode-python#20545) -------------------- Commit message for microsoft/vscode-python@34414c8ef6ef9fd24986eeb3f5856fd370bf397d: Remove telemetry proposal + implicit activations (microsoft/vscode-python#20542) Removes the telemetryLogger proposal as it is finalized. Also removes the command activation events as vscode now automatically generates though so that information is redudant. Co-authored-by: Brett Cannon <brcan@microsoft.com> -------------------- Commit message for microsoft/vscode-python@fe40195db24a0f5d574b6744218cc472b2a36fa6: Switch to a different toml library. (microsoft/vscode-python#20544) -------------------- Commit message for microsoft/vscode-python@e9edfc01435ed37699c75b56c2681e4475f86861: Detect if VSCode is launched from an activated environment and select it (microsoft/vscode-python#20526) Closes https://github.com/microsoft/vscode-python/issues/10668 In case of base conda environments, show a prompt to select it instead, as getting configs is required in that case which can take time. -------------------- Commit message for microsoft/vscode-python@bebf05da6f5e7f29f3b41e4827743004612ca220: Create env shows requirements files or `pyproject.toml` extras when available (microsoft/vscode-python#20524) Closes https://github.com/microsoft/vscode-python/issues/20277 Closes https://github.com/microsoft/vscode-python/issues/20278 -------------------- Commit message for microsoft/vscode-python@c545a366318b0852b970703b8da8c9ffe65d86bf: Add GDPR tag for new pylance property (microsoft/vscode-python#20501) `packages` has become `packagesBitArray` -------------------- Commit message for microsoft/vscode-python@e92c1248b138a6eb2914a2392ffc1d1cce715edf: Update to new l10n (microsoft/vscode-python#20484) Following https://github.com/microsoft/vscode-engineering/wiki/Extensions-Localization This onboards vscode-python to the new localization API which enables localization for the web. It's a large PR ... but pretty boring since it's just replacing one syntax with another. Co-authored-by: Tyler Leonhardt <me@tylerleonhardt.com> -------------------- Commit message for microsoft/vscode-python@0f4e6ae49df32113ed5672ae6fd85f7a2bc16ecb: Stop suggesting the MS Python Discord server for help (microsoft/vscode-python#20499) -------------------- Commit message for microsoft/vscode-python@f7d732eb244755de21b1526679774671adca0d4a: Bump json5 from 2.2.1 to 2.2.3 (microsoft/vscode-python#20448) Bumps [json5](https://github.com/json5/json5) from 2.2.1 to 2.2.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/json5/json5/releases">json5's releases</a>.</em></p> <blockquote> <h2>v2.2.3</h2> <ul> <li>Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/299">#299</a>)</li> </ul> <h2>v2.2.2</h2> <ul> <li>Fix: Properties with the name <code>__proto__</code> are added to objects and arrays. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/199">#199</a>) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (<a href="https://github-redirect.dependabot.com/json5/json5/issues/295">#295</a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/json5/json5/blob/main/CHANGELOG.md">json5's changelog</a>.</em></p> <blockquote> <h3>v2.2.3 [<a href="https://github.com/json5/json5/tree/v2.2.3">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.2...v2.2.3">diff</a>]</h3> <ul> <li>Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/299">#299</a>)</li> </ul> <h3>v2.2.2 [<a href="https://github.com/json5/json5/tree/v2.2.2">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.1...v2.2.2">diff</a>]</h3> <ul> <li>Fix: Properties with the name <code>__proto__</code> are added to objects and arrays. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/199">#199</a>) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (<a href="https://github-redirect.dependabot.com/json5/json5/issues/295">#295</a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/json5/json5/commit/c3a75242772a5026a49c4017a16d9b3543b62776"><code>c3a7524</code></a> 2.2.3</li> <li><a href="https://github.com/json5/json5/commit/94fd06d82eeed225fa172f6fb2ca27375cbd2e39"><code>94fd06d</code></a> docs: update CHANGELOG for v2.2.3</li> <li><a href="https://github.com/json5/json5/commit/3b8cebf0c474a8b20c78bd75c89cca0c4dce84ce"><code>3b8cebf</code></a> docs(security): use GitHub security advisories</li> <li><a href="https://github.com/json5/json5/commit/f0fd9e194dde282caff114a110f4fac635f3a62c"><code>f0fd9e1</code></a> docs: publish a security policy</li> <li><a href="https://github.com/json5/json5/commit/6a91a05fffeda16ff6b3b5008b6b340d42d31ec0"><code>6a91a05</code></a> docs(template): bug -> bug report</li> <li><a href="https://github.com/json5/json5/commit/14f8cb186e8abdfaccf6527171da7b1224374650"><code>14f8cb1</code></a> 2.2.2</li> <li><a href="https://github.com/json5/json5/commit/10cc7ca9169b59c5e0f5afc03dbd870cd06bcc46"><code>10cc7ca</code></a> docs: update CHANGELOG for v2.2.2</li> <li><a href="https://github.com/json5/json5/commit/7774c1097993bc3ce9f0ac4b722a32bf7d6871c8"><code>7774c10</code></a> fix: add <strong>proto</strong> to objects and arrays</li> <li><a href="https://github.com/json5/json5/commit/edde30abd8b22facf2c06c72586b9f6edf12700d"><code>edde30a</code></a> Readme: slight tweak to intro</li> <li><a href="https://github.com/json5/json5/commit/97286f8bd542c89dcee096bc05dd28ed2dfc1e16"><code>97286f8</code></a> Improve example in readme</li> <li>Additional commits viewable in <a href="https://github.com/json5/json5/compare/v2.2.1...v2.2.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=json5&package-manager=npm_and_yarn&previous-version=2.2.1&new-version=2.2.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-python/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> -------------------- Commit message for microsoft/vscode-python@b7e949009455ec23521a7ab63f1a11d1e2b0c906: Bump mheap/github-action-required-labels from 2 to 3 (microsoft/vscode-python#20447) Bumps [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels) from 2 to 3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mheap/github-action-required-labels/releases">mheap/github-action-required-labels's releases</a>.</em></p> <blockquote> <h2>v3</h2> <p>Tag that always points to the latest commit in the v3.x.x series of releases</p> <h2>v3.0.0</h2> <h2>What's Changed</h2> <ul> <li>Switch to using <code>@actions/core</code> by <a href="https://github.com/mheap"><code>@mheap</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/44">mheap/github-action-required-labels#44</a></li> <li>Custom messages by <a href="https://github.com/mheap"><code>@mheap</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/46">mheap/github-action-required-labels#46</a></li> <li>Bump json5 from 2.2.1 to 2.2.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/45">mheap/github-action-required-labels#45</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mheap/github-action-required-labels/compare/v2.2.3...v3.0.0">https://github.com/mheap/github-action-required-labels/compare/v2.2.3...v3.0.0</a></p> <h2>v2.2.3</h2> <h2>What's Changed</h2> <ul> <li>Fix add_comment input by <a href="https://github.com/mheap"><code>@mheap</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/40">mheap/github-action-required-labels#40</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mheap/github-action-required-labels/compare/v2.2.2...v2.2.3">https://github.com/mheap/github-action-required-labels/compare/v2.2.2...v2.2.3</a></p> <h2>v2.2.2</h2> <h2>What's Changed</h2> <ul> <li>Update action.yml by <a href="https://github.com/jeff-miller-cfa"><code>@jeff-miller-cfa</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/37">mheap/github-action-required-labels#37</a></li> <li>Bump <code>@actions/core</code> from 1.2.6 to 1.9.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/34">mheap/github-action-required-labels#34</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mheap/github-action-required-labels/compare/v2.2.1...v2.2.2">https://github.com/mheap/github-action-required-labels/compare/v2.2.1...v2.2.2</a></p> <h2>v2.2.1</h2> <ul> <li>Adding <code>node16</code> support</li> </ul> <h2>v2.2.0</h2> <h2>What's Changed</h2> <ul> <li>Add comment on failure by <a href="https://github.com/mheap"><code>@mheap</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/36">mheap/github-action-required-labels#36</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mheap/github-action-required-labels/compare/v2.1.0...v2.2.0">https://github.com/mheap/github-action-required-labels/compare/v2.1.0...v2.2.0</a></p> <h2>v2.1.0</h2> <h2>What's Changed</h2> <ul> <li>Add support for output status by <a href="https://github.com/mheap"><code>@mheap</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/32">mheap/github-action-required-labels#32</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mheap/github-action-required-labels/compare/v2.0.1...v2.1.0">https://github.com/mheap/github-action-required-labels/compare/v2.0.1...v2.1.0</a></p> <h2>v2.0.1</h2> <h2>What's Changed</h2> <ul> <li>Update action.yml by <a href="https://github.com/yannickm95"><code>@yannickm95</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/30">mheap/github-action-required-labels#30</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/yannickm95"><code>@yannickm95</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/30">mheap/github-action-required-labels#30</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mheap/github-action-required-labels/compare/v2.0.0...v2.0.1">https://github.com/mheap/github-action-required-labels/compare/v2.0.0...v2.0.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mheap/github-action-required-labels/commit/179af849240d834567e1a3d6dc781575eede757c"><code>179af84</code></a> Automatic compilation</li> <li><a href="https://github.com/mheap/github-action-required-labels/commit/e49d4bee708a114e73d1dd790d354c109e0cfe12"><code>e49d4be</code></a> Bump json5 from 2.2.1 to 2.2.2</li> <li><a href="https://github.com/mheap/github-action-required-labels/commit/6008ef38d7350168a91dab200a9d48ae21b42676"><code>6008ef3</code></a> Add ability to customise comment / error message</li> <li><a href="https://github.com/mheap/github-action-required-labels/commit/43f0d746ccf0990f7dec9fb7f4322d55bce51ab0"><code>43f0d74</code></a> Bump README to v3</li> <li><a href="https://github.com/mheap/github-action-required-labels/commit/6831eb28b639f195899c3c6422fc0ca08d84c2e0"><code>6831eb2</code></a> Move from actions-toolkit to <code>@actions/core</code></li> <li>See full diff in <a href="https://github.com/mheap/github-action-required-labels/compare/v2...v3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mheap/github-action-required-labels&package-manager=github_actions&previous-version=2&new-version=3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> -------------------- Commit message for microsoft/vscode-python@074ffb60de55b27285262f7968f7ddaa75b600ef: Re-revert "Update to proposed telemetry logger" (microsoft/vscode-python#20482) The telemetry issue has been fixed by https://github.com/microsoft/vscode/pull/170740, so we're re-reverting the changes. -------------------- Commit message for microsoft/vscode-python@90cb8296d6f139102850c087c3dfd83bb15399ad: Make auto indent depend on formatOnType setting value (microsoft/vscode-python#20480) For https://github.com/microsoft/vscode-python/issues/20479 -------------------- Commit message for microsoft/vscode-python@e6b27521746af44e26f054122c0f22efbf80ce73: Update debugpy to 1.6.5 (microsoft/vscode-python#20477) -------------------- Commit message for microsoft/vscode-python@e8e7d8899bb3093895408cc3480d8d5393aad3d9: Revert "Update to proposed telemetry logger" (microsoft/vscode-python#20469) This reverts commit 03e53538955e58a0e7f3f2cce144c4398483815b. To temporarily fix telemetry issues. Co-authored-by: Brett Cannon <brcan@microsoft.com> -------------------- Commit message for microsoft/vscode-python@2211996979342e5cd9bb31a7ca0ece637779da18: Make sure we do not use or execute the default `python` on `PATH` if there is any other known interpreter (microsoft/vscode-python#20457) -------------------- Commit message for microsoft/vscode-python@4e1f79c08e0497bcaca725e400cd9e407d2dcfa9: Bump the major version to 2023 (microsoft/vscode-python#20465) For microsoft/vscode-python#20456 -------------------- Commit message for microsoft/vscode-python@f6a0d456c99c1eac8e9564f14823752397d600e0: Bump extension/telemetry dependency version (microsoft/vscode-python#20462) Corresponds to https://github.com/microsoft/vscode/commit/4acf2d9b46b75748ae687cf3b2952a0799679873 . Closes microsoft/vscode-python#20456 -------------------- Commit message for microsoft/vscode-python@9461f4abc43e0e75f6a6b6eac3f3e83d3b294bd9: Enables successful running of python file even when parentheses are present in the path (microsoft/vscode-python#20414) -------------------- Commit message for microsoft/vscode-python@32f55109c976e66bf39e8da6aae0c9b6f5115df2: Do not remove envs which are provided by the consumer (microsoft/vscode-python#20424) For https://github.com/microsoft/vscode-python/issues/20292 We currently remove environments from cache which aren't part of the latest discovery run. This is not correct as consumers can still select envs not reported by discovery run, which we shouldn't remove. -------------------- Commit message for microsoft/vscode-python@65cf0fbb88ad839f1f41e5dc16fad0086f9cc871: Drop telemetry CI (microsoft/vscode-python#20393) Downloading the ripgrep dependency is a bit flaky. Part of microsoft/vscode-python#20390 -------------------- Commit message for microsoft/vscode-python@6d0aaa7fc577d3b1fbe7352ba37d9df0e39c441a: Add description on hover to interpreter status bar item (microsoft/vscode-python#20411) Closes https://github.com/microsoft/vscode-python/issues/16480 -------------------- Commit message for microsoft/vscode-python@804e65608f4d2a1a3b6e0bb7cde3aeefa6757340: Update link to A/B experiments description (microsoft/vscode-python#20409) Closes https://github.com/microsoft/vscode-python/issues/15635 -------------------- Commit message for microsoft/vscode-python@2d4f34ad1712f6a201d7c1056349de8606caed1a: Use isolated flag when gathering environment information (microsoft/vscode-python#20403) Closes https://github.com/microsoft/vscode-python/issues/20382 -------------------- Commit message for microsoft/vscode-python@5b7e040886defce82a363d714f60a2d25f9e9fa1: Stop asking which package manager to use for installing tools (microsoft/vscode-python#20405) Closes https://github.com/microsoft/vscode-python/issues/11739 -------------------- Commit message for microsoft/vscode-python@5b6c99b08108aee8eca8a8e0d7043427067f4812: Remove poetry watcher (microsoft/vscode-python#20404) Closes https://github.com/microsoft/vscode-python/issues/17087 -------------------- Commit message for microsoft/vscode-python@5e83629cae7cd408fdba483513d00a05e13fb995: Update release_plan.md (microsoft/vscode-python#20351) went through and made edits to try and help clarify the release process and all the different branches and PRs that we are creating/keeping track of in this process. Thanks! Co-authored-by: Brett Cannon <brcan@microsoft.com> Co-authored-by: Kartik Raj <karraj@microsoft.com> -------------------- Commit message for microsoft/vscode-python@1bf055880019e42a0cf2eca3307925846016f5fc: Bump VS Code engine in `package.json` (microsoft/vscode-python#20392) Accidentally left out of https://github.com/microsoft/vscode-python/commit/cb124e7b408af2afa3e074e541ddf8c09b95e2ff . As it pertains to a change made in VS Code insiders today, we are setting the engine to a specific date. This requires updating the `getChannel()` code, so took the opportunity to factor it out. -------------------- Commit message for microsoft/vscode-python@cb124e7b408af2afa3e074e541ddf8c09b95e2ff: Update telemetry package (microsoft/vscode-python#20388) There has been breaking changes in the proposed telemetry surface so we must update the package to prevent breaking the python extension -------------------- Commit message for microsoft/vscode-python@07e334af8ad631da01c21ce339366f907006520c: Display user friendly path when displaying create environment notification (microsoft/vscode-python#20387) Closes https://github.com/microsoft/vscode-python/issues/19934 -------------------- Commit message for microsoft/vscode-python@e72ca977f52b063a56c1408978e2fee401d566cb: Use `uniqueItems` for settings (microsoft/vscode-python#20375) Leaves string arrays alone that are used as arguments to external tools as we can't know if unique values are valid or not. Closes microsoft/vscode-python#7881 -------------------- Commit message for microsoft/vscode-python@69e9625b84788bcb319e3b232bcffd9b7834fecd: Stop installing pre-release version of black when using poetry or pipenv environments (microsoft/vscode-python#20381) Release version is now available on pypi, so this should no longer be needed. Closes https://github.com/microsoft/vscode-python/issues/10696 -------------------- Commit message for microsoft/vscode-python@118643290db172566b145bd14cb3ab08c0c9cf86: Merge `release/2022.20` into `main` (microsoft/vscode-python#20374) Co-authored-by: Eleanor Boyd <eleanorboyd@microsoft.com> -------------------- Commit message for microsoft/vscode-python@15b9815a30c1483f5913b56c788f8de061cd521d: Remove `python.pythonPath` deprecation prompt (microsoft/vscode-python#20371) Closes https://github.com/microsoft/vscode-python/issues/20340 -------------------- Commit message for microsoft/vscode-python@32ab2f1e3bb8bf6e9998a493238cc099eddda034: Do not allow use of discovery API in an untrusted workspace (microsoft/vscode-python#20372) -------------------- Commit message for microsoft/vscode-python@eb66e81f0b053d1f499f8be14ba613f53c069860: Re-register API for jupyter integration once trust is granted (microsoft/vscode-python#20370) Closes https://github.com/microsoft/vscode-python/issues/20261 -------------------- Commit message for microsoft/vscode-python@2afda3f3f03f31646e2464c78c5e0120aa156a2a: Bump qs from 6.5.2 to 6.5.3 (microsoft/vscode-python#20332) Bumps [qs](https://github.com/ljharb/qs) from 6.5.2 to 6.5.3. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ljharb/qs/blob/main/CHANGELOG.md">qs's changelog</a>.</em></p> <blockquote> <h2><strong>6.5.3</strong></h2> <ul> <li>[Fix] <code>parse</code>: ignore <code>__proto__</code> keys (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/428">#428</a>)</li> <li>[Fix]<code> </code>utils.merge`: avoid a crash with a null target and a truthy non-array source</li> <li>[Fix] correctly parse nested arrays</li> <li>[Fix] <code>stringify</code>: fix a crash with <code>strictNullHandling</code> and a custom <code>filter</code>/<code>serializeDate</code> (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/279">#279</a>)</li> <li>[Fix] <code>utils</code>: <code>merge</code>: fix crash when <code>source</code> is a truthy primitive & no options are provided</li> <li>[Fix] when <code>parseArrays</code> is false, properly handle keys ending in <code>[]</code></li> <li>[Fix] fix for an impossible situation: when the formatter is called with a non-string value</li> <li>[Fix] <code>utils.merge</code>: avoid a crash with a null target and an array source</li> <li>[Refactor] <code>utils</code>: reduce observable [[Get]]s</li> <li>[Refactor] use cached <code>Array.isArray</code></li> <li>[Refactor] <code>stringify</code>: Avoid arr = arr.concat(...), push to the existing instance (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/269">#269</a>)</li> <li>[Refactor] <code>parse</code>: only need to reassign the var once</li> <li>[Robustness] <code>stringify</code>: avoid relying on a global <code>undefined</code> (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/427">#427</a>)</li> <li>[readme] remove travis badge; add github actions/codecov badges; update URLs</li> <li>[Docs] Clean up license text so it’s properly detected as BSD-3-Clause</li> <li>[Docs] Clarify the need for "arrayLimit" option</li> <li>[meta] fix README.md (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/399">#399</a>)</li> <li>[meta] add FUNDING.yml</li> <li>[actions] backport actions from main</li> <li>[Tests] always use <code>String(x)</code> over <code>x.toString()</code></li> <li>[Tests] remove nonexistent tape option</li> <li>[Dev Deps] backport from main</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ljharb/qs/commit/298bfa55d6db00ddea78dd0333509aadf9bb3077"><code>298bfa5</code></a> v6.5.3</li> <li><a href="https://github.com/ljharb/qs/commit/ed0f5dcbef4b168a8ae299d78b1e4a2e9b1baf1f"><code>ed0f5dc</code></a> [Fix] <code>parse</code>: ignore <code>__proto__</code> keys (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/428">#428</a>)</li> <li><a href="https://github.com/ljharb/qs/commit/691e739cfa40cd42604dc05a54e6154371a429ab"><code>691e739</code></a> [Robustness] <code>stringify</code>: avoid relying on a global <code>undefined</code> (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/427">#427</a>)</li> <li><a href="https://github.com/ljharb/qs/commit/1072d57d38a690e1ad7616dced44390bffedcbb2"><code>1072d57</code></a> [readme] remove travis badge; add github actions/codecov badges; update URLs</li> <li><a href="https://github.com/ljharb/qs/commit/12ac1c403aaa04d1a34844f514ed9f9abfb76e64"><code>12ac1c4</code></a> [meta] fix README.md (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/399">#399</a>)</li> <li><a href="https://github.com/ljharb/qs/commit/0338716b09fdbd4711823eeb0a14e556a2498e7a"><code>0338716</code></a> [actions] backport actions from main</li> <li><a href="https://github.com/ljharb/qs/commit/5639c20ce0a7c1332200a3181339331483e5a3a1"><code>5639c20</code></a> Clean up license text so it’s properly detected as BSD-3-Clause</li> <li><a href="https://github.com/ljharb/qs/commit/51b8a0b1b213596dd1702b837f5e7dec2229793d"><code>51b8a0b</code></a> add FUNDING.yml</li> <li><a href="https://github.com/ljharb/qs/commit/45f675936e742d92fac8d4dae5cfc385c576a977"><code>45f6759</code></a> [Fix] fix for an impossible situation: when the formatter is called with a no...</li> <li><a href="https://github.com/ljharb/qs/commit/f814a7f8f2af059f8158f7e4b2bf8b46aeb62cd3"><code>f814a7f</code></a> [Dev Deps] backport from main</li> <li>Additional commits viewable in <a href="https://github.com/ljharb/qs/compare/v6.5.2...v6.5.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=qs&package-manager=npm_and_yarn&previous-version=6.5.2&new-version=6.5.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-python/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Eleanor Boyd <eleanorboyd@microsoft.com> Co-authored-by: Brett Cannon <brcan@microsoft.com> -------------------- Commit message for microsoft/vscode-python@a30b7711847f83fa5b9d8c7a0cda436b2c5968a5: Bump dessant/lock-threads from 3 to 4 (microsoft/vscode-python#20318) Bumps [dessant/lock-threads](https://github.com/dessant/lock-threads) from 3 to 4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dessant/lock-threads/releases">dessant/lock-threads's releases</a>.</em></p> <blockquote> <h2>v4.0.0</h2> <p>Learn more about this release from the <a href="https://github.com/dessant/lock-threads/blob/master/CHANGELOG.md#changelog">changelog</a>.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/dessant/lock-threads/blob/master/CHANGELOG.md">dessant/lock-threads's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/dessant/lock-threads/compare/v3.0.0...v4.0.0">4.0.0</a> (2022-12-04)</h2> <h3>⚠ BREAKING CHANGES</h3> <ul> <li>the action now requires Node.js 16</li> </ul> <h3>Bug Fixes</h3> <ul> <li>update dependencies (<a href="https://github.com/dessant/lock-threads/commit/38e918558115222435d26c0639870cdbe3572929">38e9185</a>)</li> <li>update docs (<a href="https://github.com/dessant/lock-threads/commit/32986e26965060a85db09e98ef7e5958c961ae84">32986e2</a>)</li> </ul> <h2><a href="https://github.com/dessant/lock-threads/compare/v2.1.2...v3.0.0">3.0.0</a> (2021-09-27)</h2> <h3>⚠ BREAKING CHANGES</h3> <ul> <li> <p>input parameter names have changed</p> <p>Rename the following input parameters when upgrading from v2 to v3:</p> <ul> <li><code>issue-lock-inactive-days</code> --> <code>issue-inactive-days</code></li> <li><code>issue-exclude-created-before</code> --> <code>exclude-issue-created-before</code></li> <li><code>issue-exclude-labels</code> --> <code>exclude-any-issue-labels</code></li> <li><code>issue-lock-labels</code> --> <code>add-issue-labels</code></li> <li><code>issue-lock-comment</code> --> <code>issue-comment</code></li> <li><code>pr-lock-inactive-days</code> --> <code>pr-inactive-days</code></li> <li><code>pr-exclude-created-before</code> --> <code>exclude-pr-created-before</code></li> <li><code>pr-exclude-labels</code> --> <code>exclude-any-pr-labels</code></li> <li><code>pr-lock-labels</code> --> <code>add-pr-labels</code></li> <li><code>pr-lock-comment</code> --> <code>pr-comment</code></li> </ul> </li> </ul> <h3>Features</h3> <ul> <li>add new filtering and labeling options, update input parameter names (<a href="https://github.com/dessant/lock-threads/commit/26fd836f96f46625de24663c4dc2b84c8408fcb1">26fd836</a>)</li> <li>allow manual triggering (<a href="https://github.com/dessant/lock-threads/commit/a0c7da306555d946273957477018fe178130ccf9">a0c7da3</a>)</li> </ul> <h3><a href="https://github.com/dessant/lock-threads/compare/v2.1.1...v2.1.2">2.1.2</a> (2021-08-17)</h3> <h3>Bug Fixes</h3> <ul> <li>ignore error when commenting on issue converted to discussion (<a href="https://github.com/dessant/lock-threads/commit/60d2a1a4bee140c0408a057fdb025155cdba18dd">60d2a1a</a>), closes <a href="https://github-redirect.dependabot.com/dessant/lock-threads/issues/24">#24</a></li> </ul> <h3><a href="https://github.com/dessant/lock-threads/compare/v2.1.0...v2.1.1">2.1.1</a> (2021-07-09)</h3> <h3>Bug Fixes</h3> <ul> <li>update GitHub API calls (<a href="https://github.com/dessant/lock-threads/commit/a3ccc71fffa8f16e865eb3661cf8852e11d0a289">a3ccc71</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dessant/lock-threads/commit/c1b35aecc5cdb1a34539d14196df55838bb2f836"><code>c1b35ae</code></a> chore(release): 4.0.0</li> <li><a href="https://github.com/dessant/lock-threads/commit/32986e26965060a85db09e98ef7e5958c961ae84"><code>32986e2</code></a> fix: update docs</li> <li><a href="https://github.com/dessant/lock-threads/commit/b677b85bbb81f02cbd6ee8c7d64b627d9a0d98eb"><code>b677b85</code></a> chore: update workflows</li> <li><a href="https://github.com/dessant/lock-threads/commit/dc42875c063d607b02f82ac2f4fd962f620cf459"><code>dc42875</code></a> chore: update package</li> <li><a href="https://github.com/dessant/lock-threads/commit/38e918558115222435d26c0639870cdbe3572929"><code>38e9185</code></a> fix: update dependencies</li> <li><a href="https://github.com/dessant/lock-threads/commit/08e671be8ac8944d0e132aa71d0ae8ccfb347675"><code>08e671b</code></a> chore: add upgrade guide</li> <li>See full diff in <a href="https://github.com/dessant/lock-threads/compare/v3...v4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dessant/lock-threads&package-manager=github_actions&previous-version=3&new-version=4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Eleanor Boyd <eleanorboyd@microsoft.com> Co-authored-by: Brett Cannon <brcan@microsoft.com> -------------------- Commit message for microsoft/vscode-python@3a2e9430af852742af09eb181bcc637335c7282e: Bump decode-uri-component from 0.2.0 to 0.2.2 (microsoft/vscode-python#20308) Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/SamVerschueren/decode-uri-component/releases">decode-uri-component's releases</a>.</em></p> <blockquote> <h2>v0.2.2</h2> <ul> <li>Prevent overwriting previously decoded tokens 980e0bf</li> </ul> <p><a href="https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2">https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2</a></p> <h2>v0.2.1</h2> <ul> <li>Switch to GitHub workflows 76abc93</li> <li>Fix issue where decode throws - fixes <a href="https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/6">#6</a> 746ca5d</li> <li>Update license (<a href="https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/1">#1</a>) 486d7e2</li> <li>Tidelift tasks a650457</li> <li>Meta tweaks 66e1c28</li> </ul> <p><a href="https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1">https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/a0eea469d26eb0df668b081672cdb9581feb78eb"><code>a0eea46</code></a> 0.2.2</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/980e0bf09b64d94f1aa79012f895816c30ffd152"><code>980e0bf</code></a> Prevent overwriting previously decoded tokens</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/3c8a373dd4837e89b3f970e01295dd03e1405a33"><code>3c8a373</code></a> 0.2.1</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/76abc939783fe3900fadb7d384a74d324d5557f3"><code>76abc93</code></a> Switch to GitHub workflows</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/746ca5dcb6667c5d364e782d53c542830e4c10b9"><code>746ca5d</code></a> Fix issue where decode throws - fixes <a href="https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/6">#6</a></li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/486d7e26d3a8c0fbe860fb651fe1bc98c2f2be30"><code>486d7e2</code></a> Update license (<a href="https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/1">#1</a>)</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/a65045724e6234acef87f31da499d4807b20b134"><code>a650457</code></a> Tidelift tasks</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/66e1c2834c0e189201cb65196ec3101372459b02"><code>66e1c28</code></a> Meta tweaks</li> <li>See full diff in <a href="https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=decode-uri-component&package-manager=npm_and_yarn&previous-version=0.2.0&new-version=0.2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-python/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Eleanor Boyd <eleanorboyd@microsoft.com> Co-authored-by: Brett Cannon <brcan@microsoft.com> -------------------- Commit message for microsoft/vscode-python@713cd4e0eff38dcc5cdd5b5656c7c4377e4a4670: Bump loader-utils from 2.0.3 to 2.0.4 (microsoft/vscode-python#20241) Bumps [loader-utils](https://github.com/webpack/loader-utils) from 2.0.3 to 2.0.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/loader-utils/releases">loader-utils's releases</a>.</em></p> <blockquote> <h2>v2.0.4</h2> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.3...v2.0.4">2.0.4</a> (2022-11-11)</h3> <h3>Bug Fixes</h3> <ul> <li>ReDoS problem (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/225">#225</a>) (<a href="https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb">ac09944</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md">loader-utils's changelog</a>.</em></p> <blockquote> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.3...v2.0.4">2.0.4</a> (2022-11-11)</h3> <h3>Bug Fixes</h3> <ul> <li>ReDoS problem (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/225">#225</a>) (<a href="https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb">ac09944</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/loader-utils/commit/6688b5028106f144ee9f543bebc8e6a87b57829f"><code>6688b50</code></a> chore(release): 2.0.4</li> <li><a href="https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb"><code>ac09944</code></a> fix: ReDoS problem (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/225">#225</a>)</li> <li>See full diff in <a href="https://github.com/webpack/loader-utils/compare/v2.0.3...v2.0.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=loader-utils&package-manager=npm_and_yarn&previous-version=2.0.3&new-version=2.0.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-python/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brett Cannon <brett@python.org> -------------------- Commit message for microsoft/vscode-python@b754904baa22c7a103a7d59c14e850033de04624: 2022.21.0 version bump (microsoft/vscode-python#20342) -------------------- Commit message for microsoft/vscode-python@88c5709d0f2bf94fcadd5507a3bc1e09394b0a5f: create RC for 2022.20 (microsoft/vscode-python#20328) -------------------- Commit message for microsoft/vscode-python@f9e98fc35f24bd48f4c7910e403f0864dc5d4bd0: Simplify launch debug (microsoft/vscode-python#20286) Closed: microsoft/vscode-python#19770 -------------------- Commit message for microsoft/vscode-python@71766e3385b09ed2902c4e44cb52734024fc9249: Upgrade debugpy to 1.6.4 (microsoft/vscode-python#20291) Also ship CPython 3.10 wheels instead of 3.9. -------------------- Commit message for microsoft/vscode-python@4ee6050b023716a1537240feb469c8db6f4b8b4e: Catch exceptions when changing `formatOnType` setting (microsoft/vscode-python#20285) -------------------- Commit message for microsoft/vscode-python@133a8e877aa3755eaf101f1f1edf446432770b40: Fix CI tests (microsoft/vscode-python#20273) Fix Ci test using the insiders version of vscode in tests. Remove old insider tests. -------------------- Commit message for microsoft/vscode-python@a2aa1fb9274ca6c515ca7c2fdea0f8df7f287198: Merge Getting Started walkthrough to include Create Environment Tile (microsoft/vscode-python#20258) Merging create environment tile into main walkthrough and deleted create environment walkthrough used in the experiment -------------------- Commit message for microsoft/vscode-python@a9e299f49c3ab8d9bdb5e16193e9e9098be11934: Drop the `-insiders` suffix from the VS Code engine (microsoft/vscode-python#20256) -------------------- Commit message for microsoft/vscode-python@9893a0cdd1b9465c9ae9b750705cd78ef8d3cc55: Bump VS Code engine to `1.74.0-insiders` (microsoft/vscode-python#20255) Closes microsoft/vscode-python#20247 -------------------- Commit message for microsoft/vscode-python@b8f9b1d3b453fbabf166ff6b4f9a54e0f08d1a17: Add button to open folder from venv failure message (microsoft/vscode-python#20243) Closes https://github.com/microsoft/vscode-python/issues/20242 cc/ @cwebster-99 -------------------- Commit message for microsoft/vscode-python@c78ef060810cc452a4b336787466479337627094: Notify Pylance on `jupyter.runStartupCommands` config change (microsoft/vscode-python#20237) -------------------- Commit message for microsoft/vscode-python@ad46fb3a5888804d39582fe044bfdf07ac3e5804: Show user deprecated message for unsupported Python versions when launching the debugger (microsoft/vscode-python#20172) Closed: https://github.com/microsoft/vscode-python/issues/19799 Closes https://github.com/microsoft/vscode-python/issues/19988 -------------------- Commit message for microsoft/vscode-python@78e136f52dcf45ed0c911065a6bc224195a5f8ad: Update to proposed telemetry logger (microsoft/vscode-python#20238) This updates to the proposed telemetry logger to gain support for output channels -------------------- Commit message for microsoft/vscode-python@9701c53ccf046c9dd2753f9ee2c2b538d63007b5: Remove DI from config launch (microsoft/vscode-python#20226) closed: https://github.com/microsoft/vscode-python/issues/19769 -------------------- Commit message for microsoft/vscode-python@ad0286c9c44884c6d43a7648b14ca69bec9ae989: Fix venv tests (microsoft/vscode-python#20230) Closes https://github.com/microsoft/vscode-python/issues/19859 -------------------- Commit message for microsoft/vscode-python@c70a0bccaac31a04b7c85080fc191f56f2192194: Update cached list of extensions correctly (microsoft/vscode-python#20229) -------------------- Commit message for microsoft/vscode-python@8fe4d0b9f687f6393a5e26687481df22602b4e50: Improve doc string for description of environment argument in API (microsoft/vscode-python#20223) Closes https://github.com/microsoft/vscode-python/issues/20220 -------------------- Commit message for microsoft/vscode-python@db5e96c68757e6f7fb981d1ec9481a4ebf29223a: Cache the value of `extensions.all` (microsoft/vscode-python#20222) Fixes microsoft/vscode-python#20221 @karrtikr Please feel free to make necessary changes to this PR to get this through the tests. Co-authored-by: Kartik Raj <karraj@microsoft.com> -------------------- Commit message for microsoft/vscode-python@29a72b4fca446eeb8629213f7128dd6cdb33e812: Extend scope of "python.tensorBoard.logDirectory" and support variable substitution (microsoft/vscode-python#20103) Fixes https://github.com/microsoft/vscode-jupyter/issues/8802 Credit: @PillarsZhang [patch-by-zhang](https://github.com/PillarsZhang/vscode-python/tree/patch-by-zhang) Co-authored-by: Evan Philip <107-ephilip@users.noreply.gitlab.pasqal.io> -------------------- Commit message for microsoft/vscode-python@f671b9bb7f932d465b2b9a7891185d89bf961ed9: Ensure we don't use the same interpreter for equally named project on different hosts (microsoft/vscode-python#20212) Closes https://github.com/microsoft/vscode-python/issues/19859 Include remote name in path keys for fetch interpreter setting value -------------------- Commit message for microsoft/vscode-python@f2ca5b9c4130e036c6c75835e5f61d9328aa7c44: Improve description for `python.terminal.focusAfterLaunch` setting (microsoft/vscode-python#20195) Closes https://github.com/microsoft/vscode-python/issues/19914 -------------------- Commit message for microsoft/vscode-python@885733e5a3c941e46f23bbb51f6f6a6c93c4bfd2: Bump loader-utils from 2.0.0 to 2.0.3 (microsoft/vscode-python#20177) Bumps [loader-utils](https://github.com/webpack/loader-utils) from 2.0.0 to 2.0.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/loader-utils/releases">loader-utils's releases</a>.</em></p> <blockquote> <h2>v2.0.3</h2> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.1...v2.0.3">2.0.3</a> (2022-10-20)</h3> <h3>Bug Fixes</h3> <ul> <li><strong>security:</strong> prototype pollution exploit (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/217">#217</a>) (<a href="https://github.com/webpack/loader-utils/commit/a93cf6f4702012030f6b5ee8340d5c95ec1c7d4c">a93cf6f</a>)</li> </ul> <h2>v2.0.2</h2> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.1...v2.0.2">2.0.2</a> (2021-11-04)</h3> <h3>Bug Fixes</h3> <ul> <li>base64 generation and unicode characters (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/197">#197</a>) (<a href="https://github.com/webpack/loader-utils/commit/8c2d24ee400bc4567335e97ee6004c3baa6ef66f">8c2d24e</a>)</li> </ul> <h2>v2.0.1</h2> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.0...v2.0.1">2.0.1</a> (2021-10-29)</h3> <h3>Bug Fixes</h3> <ul> <li>md4 support on Node.js v17 (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/193">#193</a>) (<a href="https://github.com/webpack/loader-utils/commit/1069f61284a571614ee4acdde6e6087174be118a">1069f61</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack/loader-utils/blob/v2.0.3/CHANGELOG.md">loader-utils's changelog</a>.</em></p> <blockquote> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.1...v2.0.3">2.0.3</a> (2022-10-20)</h3> <h3>Bug Fixes</h3> <ul> <li><strong>security:</strong> prototype pollution exploit (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/217">#217</a>) (<a href="https://github.com/webpack/loader-utils/commit/a93cf6f4702012030f6b5ee8340d5c95ec1c7d4c">a93cf6f</a>)</li> </ul> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.1...v2.0.2">2.0.2</a> (2021-11-04)</h3> <h3>Bug Fixes</h3> <ul> <li>base64 generation and unicode characters (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/197">#197</a>) (<a href="https://github.com/webpack/loader-utils/commit/8c2d24ee400bc4567335e97ee6004c3baa6ef66f">8c2d24e</a>)</li> </ul> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.0...v2.0.1">2.0.1</a> (2021-10-29)</h3> <h3>Bug Fixes</h3> <ul> <li>md4 support on Node.js v17 (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/193">#193</a>) (<a href="https://github.com/webpack/loader-utils/commit/1069f61284a571614ee4acdde6e6087174be118a">1069f61</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/loader-utils/commit/7162619fb982c394ed75098a0a0ed7e7f3177c70"><code>7162619</code></a> chore(release): 2.0.3</li> <li><a href="https://github.com/webpack/loader-utils/commit/a93cf6f4702012030f6b5ee8340d5c95ec1c7d4c"><code>a93cf6f</code></a> fix(security): prototype polution exploit (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/217">#217</a>)</li> <li><a href="https://github.com/webpack/loader-utils/commit/90c7c4be17e3e0b2f6091a69c67db7a6df9fd044"><code>90c7c4b</code></a> chore(release): 2.0.2</li> <li><a href="https://github.com/webpack/loader-utils/commit/8c2d24ee400bc4567335e97ee6004c3baa6ef66f"><code>8c2d24e</code></a> fix: base64 generation and unicode characters (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/197">#197</a>)</li> <li><a href="https://github.com/webpack/loader-utils/commit/5fb556208426d281a18dfbf6f45dca24bfb24e96"><code>5fb5562</code></a> chore(release): 2.0.1</li> <li><a href="https://github.com/webpack/loader-utils/commit/1069f61284a571614ee4acdde6e6087174be118a"><code>1069f61</code></a> fix: md4 support on Node.js v17 (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/193">#193</a>)</li> <li>See full diff in <a href="https://github.com/webpack/loader-utils/compare/v2.0.0...v2.0.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=loader-utils&package-manager=npm_and_yarn&previous-version=2.0.0&new-version=2.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-python/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> -------------------- Commit message for microsoft/vscode-python@f9bb14a9d45be9bac664cfc06d7afe08f26ba28e: Do not replace discovered python executable using `sys.executable` (microsoft/vscode-python#20197) For https://github.com/microsoft/vscode-python/issues/20189 -------------------- Commit message for microsoft/vscode-python@d9ff1763f0923520dfe083e30bf0791b3784cb57: Remove pr-chat.yml (microsoft/vscode-python#20193) It should be safe to remove this now that we switched to webhooks -------------------- Commit message for microsoft/vscode-python@d17ebcec3a4f202ceb4715040343e97adbd103fe: Fix errors related to `python.envFile` setting (microsoft/vscode-python#20192) Closes https://github.com/microsoft/vscode-python/issues/20179 -------------------- Commit message for microsoft/vscode-python@96927c73734722509252d40872ba74bc8d5dcb8b: Only use environment cache to resolve environment if it has complete information (microsoft/vscode-python#20186) -------------------- Commit message for microsoft/vscode-python@cff8a97d46465f66fb6f09fd488f43db77bcff3f: Fix issue with extension prompt being shown to users after install (microsoft/vscode-python#20158) Fixes https://github.com/microsoft/vscode-python/issues/20157 -------------------- Commit message for microsoft/vscode-python@bdd9a4b67935a30244c9d286d03fdeddd5bc0cc8: Fix poetry discovery (microsoft/vscode-python#20181) -------------------- Commit message for microsoft/vscode-python@5bfc6d57338ad7c6c85427e2cef393c067b5d650: Add more logging and only retry once if fetching interpreter information fails (microsoft/vscode-python#20180) For https://github.com/microsoft/vscode-python/issues/20147 -------------------- Commit message for microsoft/vscode-python@08417adf5f01ee01db32124ee1114b2390eacd1b: Do not cache result if running an interpreter fails (microsoft/vscode-python#20178) For https://github.com/microsoft/vscode-python/issues/20147 -------------------- Commit message for microsoft/vscode-python@8e5ec71e3d4af87e2b8ca09ad55f85445d587870: Monkeypatch terminals created to log commands sent (microsoft/vscode-python#20173) -------------------- Commit message for microsoft/vscode-python@c6ad0f8af08ae21abda4d14aa379b31f3c92eb29: Accept pytest exit code 1 for some tests cannot be collected (microsoft/vscode-python#20074) In case you have some tests where not successfully collected (e.g. 10 ok and 1 fail) vscode display only an error in the test explorer. For pytest it is possible to set the flag `--continue-on-collection-errors` but also vscode only display an error and not the other successfully collected tests. Pytest has a specific exit code for this behaviour (1) [https://docs.pytest.org/en/7.1.x/reference/exit-codes.html](https://docs.pytest.org/en/7.1.x/reference/exit-codes.html) Co-authored-by: Eleanor Boyd <eleanorboyd@microsoft.com> -------------------- Commit message for microsoft/vscode-python@f62e96c39fe9e15cc5422184dac36f4f1a6a1eb7: Fix linting in debugger (microsoft/vscode-python#20152) For https://github.com/microsoft/vscode-python/issues/17181 -------------------- Commit message for microsoft/vscode-python@e65775a6befb1d1a6b426a74382c204bdd775695: Add tests for active environment API (microsoft/vscode-python#20166) For https://github.com/microsoft/vscode-python/issues/20147 -------------------- Commit message for microsoft/vscode-python@e5412bcc6f37d0257ec6ec3d241d847a6ad5a50b: Add more logging when resolving environments (microsoft/vscode-python#20165) For https://github.com/microsoft/vscode-python/issues/20147 -------------------- Commit message for microsoft/vscode-python@0e633edd27ad1bf943f99df0ea9a4cf22e4afdfb: Remove DI from factory (microsoft/vscode-python#20057) Closed: microsoft/vscode-python#19768 -------------------- Commit message for microsoft/vscode-python@f1dcf94fcfdd329dfaafc3f5479f2983454de387: Merge back from release (microsoft/vscode-python#20156) Co-authored-by: Kartik Raj <karraj@microsoft.com> -------------------- Commit message for microsoft/vscode-python@6eed80ad690d7a3557e137e2739663fbd4352be0: Fix GDPR tagging for package failure event (microsoft/vscode-python#20136) Great catch by @cwebster-99! -------------------- Commit message for microsoft/vscode-python@f82e73cae4964714335320f3a707cac637df92cf: Update Jedi to latest (microsoft/vscode-python#20134) -------------------- Commit message for microsoft/vscode-python@eb49b2df6c44e4de20b2dee05deabbff26b77b37: Update engine to upcoming VS Code version (microsoft/vscode-python#20128) Cherry picking https://github.com/microsoft/vscode-python/pull/20058 Co-authored-by: Karthik Nadig <kanadig@microsoft.com> -------------------- Commit message for microsoft/vscode-python@1205270cc554ea9e947c296d6b8ace000b146399: Don't show certain python commands in command palette when you don't have a python file open (microsoft/vscode-python#19977) Closes microsoft/vscode-python#10441 -------------------- Commit message for microsoft/vscode-python@723126b67015db59643c078cb893dde1b1294c28: Post release (microsoft/vscode-python#20126) -------------------- Commit message for microsoft/vscode-python@9e263dc0f367a25eb63689b88b45bc16e62fe1a0: Update `package.json` for release (microsoft/vscode-python#20125) -------…
Merge pull request #58 from posit-dev/merge-latest Merge latest upstream -------------------- Commit message for posit-dev/positron-python@b5cbe4f: Merge latest upstream -------------------- Commit message for microsoft/vscode-python@96aa8f8: Do not deprecate `python.terminal.activateEnvironmentInTerminal` setting along with terminal env var experiment (microsoft/vscode-python#20952) I initially deprecated this setting as I thought folks only disabled it because we were sending commands which was annoying. -------------------- Commit message for microsoft/vscode-python@37a70fd: Update note on the Jupyter extension in README (microsoft/vscode-python#20946) Karthik brought this up offline and I agree, instead of saying we don't offer support out of box, we say it needs to be via the Jupyter extension. -------------------- Commit message for microsoft/vscode-python@bc59a7d: Fix linting in APIs (microsoft/vscode-python#20623) Fix lint in api.ts -------------------- Commit message for microsoft/vscode-python@34c54f4: No longer install the Jupyter extension by default (microsoft/vscode-python#20218) For microsoft/vscode-python#18073 --------- Co-authored-by: Brett Cannon <brett@python.org> -------------------- Commit message for microsoft/vscode-python@8d8784f: Fix diagnostic to use "System32" instead of "SystemRoot" (microsoft/vscode-python#20937) For microsoft/vscode-python#16692 Follow up to microsoft/vscode-python#20927 -------------------- Commit message for microsoft/vscode-python@ef6511e: Fix telemetry when updating pip (microsoft/vscode-python#20903) @luabud This PR adds a minor telemetry change to create environment. There is a new telemetry point indicating pip upgrade. -------------------- Commit message for microsoft/vscode-python@b208384: Add diagnostic to validate ComSpec (microsoft/vscode-python#20927) Closes microsoft/vscode-python#16692 -------------------- Commit message for microsoft/vscode-python@5fd9f97: Update main to next pre-release (microsoft/vscode-python#20928) -------------------- Commit message for microsoft/vscode-python@6e31c6a: Update version of main to release candidate (microsoft/vscode-python#20923) -------------------- Commit message for microsoft/vscode-python@d809af4: Use new formatter install prompt on missing formatter (microsoft/vscode-python#20904) -------------------- Commit message for microsoft/vscode-python@43a21a2: Remove HTTP Client usage (microsoft/vscode-python#20922) This is addressing an internal CG issue. -------------------- Commit message for microsoft/vscode-python@5f9be4e: Make sure we delay start pylance server (microsoft/vscode-python#20910) fixes microsoft/vscode-python#20909 Activating `pylance` extension inside of `python` extension cause a dead lock since they have circular dependency. now we make sure we activate `pylance` once `python` extension is activated. `node` already works this way. it is just browser extension that started `pylance` inside `activate` directly. -------------------- Commit message for microsoft/vscode-python@be55c97: Adjust a few strings that mention Python (microsoft/vscode-python#20900) For microsoft/vscode-python#20899 (+ a few other strings I thought could use some tweaking too) -------------------- Commit message for microsoft/vscode-python@61f93c3: Fix title and placeholder for python selection when using create env command (microsoft/vscode-python#20896) Closes microsoft/vscode-python#19891 ![image](https://user-images.githubusercontent.com/3840081/227031948-de595993-80e1-43a0-8dd8-658848c6b3d5.png) -------------------- Commit message for microsoft/vscode-python@01e798a: Share telemetry from core extension. (microsoft/vscode-python#20893) it turns out the new telemetry API removed a way to set extension id and version when telemetry reporter is created and it implicitly sets from extension reporter is created. the same way how LSP client is working. since we want to keep using the same extension id and etc for our telemetry, we need the reporter created from core ext. -------------------- Commit message for microsoft/vscode-python@807b9fe: Add create environment button to `requirements.txt` and `pyproject.toml` files (microsoft/vscode-python#20879) Closes microsoft/vscode-python#20812 Related microsoft/vscode-python#20133 -------------------- Commit message for microsoft/vscode-python@730df28: Add GDPR tag to new telemetry property (microsoft/vscode-python#20871) -------------------- Commit message for microsoft/vscode-python@a6ac385: Bump webpack from 5.70.0 to 5.76.0 (microsoft/vscode-python#20856) Bumps [webpack](https://github.com/webpack/webpack) from 5.70.0 to 5.76.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p> <blockquote> <h2>v5.76.0</h2> <h2>Bugfixes</h2> <ul> <li>Avoid cross-realm object access by <a href="https://github.com/Jack-Works"><code>@Jack-Works</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16500">webpack/webpack#16500</a></li> <li>Improve hash performance via conditional initialization by <a href="https://github.com/lvivski"><code>@lvivski</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16491">webpack/webpack#16491</a></li> <li>Serialize <code>generatedCode</code> info to fix bug in asset module cache restoration by <a href="https://github.com/ryanwilsonperkin"><code>@ryanwilsonperkin</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16703">webpack/webpack#16703</a></li> <li>Improve performance of <code>hashRegExp</code> lookup by <a href="https://github.com/ryanwilsonperkin"><code>@ryanwilsonperkin</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16759">webpack/webpack#16759</a></li> </ul> <h2>Features</h2> <ul> <li>add <code>target</code> to <code>LoaderContext</code> type by <a href="https://github.com/askoufis"><code>@askoufis</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16781">webpack/webpack#16781</a></li> </ul> <h2>Security</h2> <ul> <li><a href="https://github.com/advisories/GHSA-3rfm-jhwj-7488">CVE-2022-37603</a> fixed by <a href="https://github.com/akhilgkrishnan"><code>@akhilgkrishnan</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16446">webpack/webpack#16446</a></li> </ul> <h2>Repo Changes</h2> <ul> <li>Fix HTML5 logo in README by <a href="https://github.com/jakebailey"><code>@jakebailey</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16614">webpack/webpack#16614</a></li> <li>Replace TypeScript logo in README by <a href="https://github.com/jakebailey"><code>@jakebailey</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16613">webpack/webpack#16613</a></li> <li>Update actions/cache dependencies by <a href="https://github.com/piwysocki"><code>@piwysocki</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16493">webpack/webpack#16493</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Jack-Works"><code>@Jack-Works</code></a> made their first contribution in <a href="https://redirect.github.com/webpack/webpack/pull/16500">webpack/webpack#16500</a></li> <li><a href="https://github.com/lvivski"><code>@lvivski</code></a> made their first contribution in <a href="https://redirect.github.com/webpack/webpack/pull/16491">webpack/webpack#16491</a></li> <li><a href="https://github.com/jakebailey"><code>@jakebailey</code></a> made their first contribution in <a href="https://redirect.github.com/webpack/webpack/pull/16614">webpack/webpack#16614</a></li> <li><a href="https://github.com/akhilgkrishnan"><code>@akhilgkrishnan</code></a> made their first contribution in <a href="https://redirect.github.com/webpack/webpack/pull/16446">webpack/webpack#16446</a></li> <li><a href="https://github.com/ryanwilsonperkin"><code>@ryanwilsonperkin</code></a> made their first contribution in <a href="https://redirect.github.com/webpack/webpack/pull/16703">webpack/webpack#16703</a></li> <li><a href="https://github.com/piwysocki"><code>@piwysocki</code></a> made their first contribution in <a href="https://redirect.github.com/webpack/webpack/pull/16493">webpack/webpack#16493</a></li> <li><a href="https://github.com/askoufis"><code>@askoufis</code></a> made their first contribution in <a href="https://redirect.github.com/webpack/webpack/pull/16781">webpack/webpack#16781</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/webpack/webpack/compare/v5.75.0...v5.76.0">https://github.com/webpack/webpack/compare/v5.75.0...v5.76.0</a></p> <h2>v5.75.0</h2> <h1>Bugfixes</h1> <ul> <li><code>experiments.*</code> normalize to <code>false</code> when opt-out</li> <li>avoid <code>NaN%</code></li> <li>show the correct error when using a conflicting chunk name in code</li> <li>HMR code tests existance of <code>window</code> before trying to access it</li> <li>fix <code>eval-nosources-*</code> actually exclude sources</li> <li>fix race condition where no module is returned from processing module</li> <li>fix position of standalong semicolon in runtime code</li> </ul> <h1>Features</h1> <ul> <li>add support for <code>@import</code> to extenal CSS when using experimental CSS in node</li> <li>add <code>i64</code> support to the deprecated WASM implementation</li> </ul> <h1>Developer Experience</h1> <ul> <li>expose <code>EnableWasmLoadingPlugin</code></li> <li>add more typings</li> <li>generate getters instead of readonly properties in typings to allow overriding them</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/webpack/commit/97b1718720c33f1b17302a74c5284b01e02ec001"><code>97b1718</code></a> Merge pull request <a href="https://redirect.github.com/webpack/webpack/issues/16781">#16781</a> from askoufis/loader-context-target-type</li> <li><a href="https://github.com/webpack/webpack/commit/b84efe6224b276bf72e4c5e2f4e76acddfaeef07"><code>b84efe6</code></a> Merge pull request <a href="https://redirect.github.com/webpack/webpack/issues/16759">#16759</a> from ryanwilsonperkin/real-content-hash-regex-perf</li> <li><a href="https://github.com/webpack/webpack/commit/c98e9e001441b165c7ed4845700839730b505833"><code>c98e9e0</code></a> Merge pull request <a href="https://redirect.github.com/webpack/webpack/issues/16493">#16493</a> from piwysocki/patch-1</li> <li><a href="https://github.com/webpack/webpack/commit/5f34acfbc074da6cc09f48944d7f2b4273ffb3f8"><code>5f34acf</code></a> feat: Add <code>target</code> to <code>LoaderContext</code> type</li> <li><a href="https://github.com/webpack/webpack/commit/b7fc4d876deb958d7ee81ecc00a312e39a354a44"><code>b7fc4d8</code></a> Merge pull request <a href="https://redirect.github.com/webpack/webpack/issues/16703">#16703</a> from ryanwilsonperkin/ryanwilsonperkin/fix-16160</li> <li><a href="https://github.com/webpack/webpack/commit/63ea82da4d4e4242b6a6285fc937f0684f264fe8"><code>63ea82d</code></a> Merge branch 'webpack:main' into patch-1</li> <li><a href="https://github.com/webpack/webpack/commit/4ba225225b1348c8776ca5b5fe53468519413bc0"><code>4ba2252</code></a> Merge pull request <a href="https://redirect.github.com/webpack/webpack/issues/16446">#16446</a> from akhilgkrishnan/patch-1</li> <li><a href="https://github.com/webpack/webpack/commit/1acd6350be3d74d4ac70b64cbbc60f27724b618b"><code>1acd635</code></a> Merge pull request <a href="https://redirect.github.com/webpack/webpack/issues/16613">#16613</a> from jakebailey/ts-logo</li> <li><a href="https://github.com/webpack/webpack/commit/302eb37fe19ed7ca60eaf895aca4f9da9dfd7931"><code>302eb37</code></a> Merge pull request <a href="https://redirect.github.com/webpack/webpack/issues/16614">#16614</a> from jakebailey/html5-logo</li> <li><a href="https://github.com/webpack/webpack/commit/cfdb1dfe59b33bf7441b8a8e4fc58d75e4f54cee"><code>cfdb1df</code></a> Improve performance of hashRegExp lookup</li> <li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.70.0...v5.76.0">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~evilebottnawi">evilebottnawi</a>, a new releaser for webpack since your current version.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack&package-manager=npm_and_yarn&previous-version=5.70.0&new-version=5.76.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-python/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> -------------------- Commit message for microsoft/vscode-python@3269137: Finalize Python Environment API (microsoft/vscode-python#20868) -------------------- Commit message for microsoft/vscode-python@00ce6d0: Update text shown in formatter install prompt (microsoft/vscode-python#20869) -------------------- Commit message for microsoft/vscode-python@d16568e: Ensure `resolveEnvironment` API resolves the latest details for conda envs without python (microsoft/vscode-python#20862) Closes microsoft/vscode-python#20765 Change `resolveEnvironment` API to validate cache for conda envs without python before using it, it also making sure we fire a update event after resolving it and adding it to cache. -------------------- Commit message for microsoft/vscode-python@7ee3f7d: Show prompt asking user to install formatter extension (microsoft/vscode-python#20861) For microsoft/vscode-python#19653 -------------------- Commit message for microsoft/vscode-python@b9c4ff7: Update walkthrough title (microsoft/vscode-python#20857) For consistency with other language extensions -------------------- Commit message for microsoft/vscode-python@1668d06: Made browser to expose pylance api. (microsoft/vscode-python#20847) This will let pylance to create LS Client on browser -------------------- Commit message for microsoft/vscode-python@0735876: Share output channel with pylance (microsoft/vscode-python#20833) Make sure `pylance` and `jedi` share the same output channel. -------------------- Commit message for microsoft/vscode-python@2cd2092: Fixed a bug where pylance not working on interactive window. (microsoft/vscode-python#20831) https://github.com/microsoft/vscode-python/pull/20816/files#diff-ba59d9ca0a087381d63119a88751fdc7c0aa07e6a10e772d3aefd4c10aa36fcfL47 this should have changed to return `false` rather than deleting since it would have been always return `false`. deleting effectively made it to have the same effect as always returning `true` follow up PR of microsoft/vscode-python#20816 -------------------- Commit message for microsoft/vscode-python@d3dd832: Expose client creation API for pylance (microsoft/vscode-python#20816) If new client change is available in pylance, made core extension to use pylance to do language server lifetime management. and also this PR removes all old notebook experiences so that it is inline with pylance (pylance already removed all those when moving client/middleware) -------------------- Commit message for microsoft/vscode-python@b897300: Restart reason telemetry event for `pylance` (microsoft/vscode-python#20821) Closes microsoft/vscode-python#19626 -------------------- Commit message for microsoft/vscode-python@8a80ebe: Add experiment to implicitly use environment variables for environment activation (microsoft/vscode-python#20651) -------------------- Commit message for microsoft/vscode-python@7aac96a: Fix typo with `clientOS` (microsoft/vscode-python#20819) -------------------- Commit message for microsoft/vscode-python@e9ff78d: Set clientOS debug option (microsoft/vscode-python#20805) Closed: microsoft/vscode-python#20407 -------------------- Commit message for microsoft/vscode-python@467823d: Add option to control if environment is selected after creation (microsoft/vscode-python#20738) For: microsoft/vscode-python#20270 @DonJayamanne This PR adds a field to the options that should allow you to skip environment selection. -------------------- Commit message for microsoft/vscode-python@672d07e: Do not use `-I` flag in case we're unable to find `encodings` module when validating python (microsoft/vscode-python#20803) Closes microsoft/vscode-python#20793 -------------------- Commit message for microsoft/vscode-python@2442dfb: Add logging which could help indicate why `Discovering Python Interpreters...` never finishes (microsoft/vscode-python#20792) For microsoft/vscode-python#20250 -------------------- Commit message for microsoft/vscode-python@e8303bb: Fix ability to recognize extensions which access environment API (microsoft/vscode-python#20791) Follow up from microsoft/vscode-python#20222. Apparently `setTimeout` changed the stack in such a way that we were unable to recognize which extension called the API: ``` [DEBUG 2023-2-2 16:21:9.641]: Extension unknown accessed getActiveEnvironmentPath with args: undefined ``` Reverting the change. -------------------- Commit message for microsoft/vscode-python@ee8e80e: Improve getting started experience when starting on a fresh macOS (microsoft/vscode-python#20789) Closes microsoft/vscode-python#20635 - Suggest to install from `python.org` if brew is not available - Do not suggest irrelevant prompts -------------------- Commit message for microsoft/vscode-python@16c0437: Update description of `python.terminal.activateEnvironment` setting (microsoft/vscode-python#20788) -------------------- Commit message for microsoft/vscode-python@54e37fe: Update README.md for isort changes (microsoft/vscode-python#20787) Updating the README to reflect isort not being installed by default -------------------- Commit message for microsoft/vscode-python@32c10e4: Add verbose logging for change events fired related to envs (microsoft/vscode-python#20780) For microsoft/vscode-python#20292 -------------------- Commit message for microsoft/vscode-python@be75eb2: Ensure both `python` and `pythonPath` are not set when resolving config. (microsoft/vscode-python#20781) Fixes microsoft/vscode-python#20655 -------------------- Commit message for microsoft/vscode-python@a5005f6: Ensure picker returns array only if multi-select is enabled (microsoft/vscode-python#20772) Fixes microsoft/vscode-python#20768 -------------------- Commit message for microsoft/vscode-python@c5e6378: Update main to next pre-release (microsoft/vscode-python#20764) -------------------- Commit message for microsoft/vscode-python@7c31a5e: Updating version for release candidate. (microsoft/vscode-python#20762) -------------------- Commit message for microsoft/vscode-python@e624eff: Make sure conda activate is used for micromamba (microsoft/vscode-python#20760) Closes microsoft/vscode-python#20756 -------------------- Commit message for microsoft/vscode-python@29bee00: Fix debugger attach to process when running on WSL (microsoft/vscode-python#20741) Possible fix for microsoft/vscode-python#16921 Closes microsoft/vscode-python#16921 BTW you folks should probably ask GitHub support to eject this repo from their original repository (so it stops being a fork and has its own network on GH) -------------------- Commit message for microsoft/vscode-python@e9dba6c: Bump typing-extensions from 4.4.0 to 4.5.0 (microsoft/vscode-python#20704) Bumps [typing-extensions](https://github.com/python/typing_extensions) from 4.4.0 to 4.5.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python/typing_extensions/blob/main/CHANGELOG.md">typing-extensions's changelog</a>.</em></p> <blockquote> <h1>Release 4.5.0 (February 14, 2023)</h1> <ul> <li>Runtime support for PEP 702, adding <code>typing_extensions.deprecated</code>. Patch by Jelle Zijlstra.</li> <li>Add better default value for TypeVar <code>default</code> parameter, PEP 696. Enables runtime check if <code>None</code> was passed as default. Patch by Marc Mueller (<a href="https://github.com/cdce8p"><code>@cdce8p</code></a>).</li> <li>The <code>@typing_extensions.override</code> decorator now sets the <code>.__override__</code> attribute. Patch by Steven Troxler.</li> <li>Fix <code>get_type_hints()</code> on cross-module inherited <code>TypedDict</code> in 3.9 and 3.10. Patch by Carl Meyer.</li> <li>Add <code>frozen_default</code> parameter on <code>dataclass_transform</code>. Patch by Erik De Bonte.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python/typing_extensions/commit/8dcd89993c3926d6c704232b9c56160447fa81fe"><code>8dcd899</code></a> Prepare release 4.5.0 (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/116">#116</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/e81cb8289874d6a6715675d77df88db033824e0d"><code>e81cb82</code></a> PEP 702: Runtime warnings (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/112">#112</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/1039bb2730e62e9763b8fd1d6a19ddd6bb0b6fe4"><code>1039bb2</code></a> fix PEP 702 link in the <code>README.md</code> (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/108">#108</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/673e5ceea32f77d90531d4d5e77a7694edba7fba"><code>673e5ce</code></a> Add <a href="https://github.com/typing"><code>@typing</code></a>_extensions.deprecated (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/105">#105</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/27646ecba87fe518566db3d6b970574ad8df2490"><code>27646ec</code></a> Fix tests on Python 3.11 (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/106">#106</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/57226b4fb64a5d9f4788e74fe3799d98fe02026b"><code>57226b4</code></a> Add <code>frozen_default</code> parameter on <code>dataclass_transform</code> (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/101">#101</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/0ea104bc37bd8f85246d48c7f6c7642f25771498"><code>0ea104b</code></a> Expand the pyproject.toml sdist include expression to include src/_typed_dict...</li> <li><a href="https://github.com/python/typing_extensions/commit/93ac93b58f23a2b7e4450cbe8819f5a36d319af7"><code>93ac93b</code></a> CI: test on Ubuntu-20.04, not Ubuntu-2004 (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/100">#100</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/5f9258d1efd5d8e4900ffc23ba2486240f2a2f35"><code>5f9258d</code></a> Test on Ubuntu 20.04</li> <li><a href="https://github.com/python/typing_extensions/commit/ad3966ddabe9adcbf2e76d88a7cf984fa9cb4237"><code>ad3966d</code></a> Replace type comments with annotations (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/98">#98</a>)</li> <li>Additional commits viewable in <a href="https://github.com/python/typing_extensions/compare/4.4.0...4.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typing-extensions&package-manager=pip&previous-version=4.4.0&new-version=4.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> -------------------- Commit message for microsoft/vscode-python@35be3c2: Ensure escape on TOML and requirements is treated as cancel. (microsoft/vscode-python#20739) -------------------- Commit message for microsoft/vscode-python@5d9bc1e: Tag Pylance settings properties for GDPR (microsoft/vscode-python#20745) -------------------- Commit message for microsoft/vscode-python@70716f0: Add description for `python.experiment` settings values (microsoft/vscode-python#20751) -------------------- Commit message for microsoft/vscode-python@7b488a9: Point to Python v3.11 instead of Python v3.10 when opening windows store (microsoft/vscode-python#20742) Closes microsoft/vscode-python#20736 Lead-authored-by: Karthik Nadig <kanadig@microsoft.com> Co-authored-by: Courtney Webster <60238438+cwebster-99@users.noreply.github.com> Co-authored-by: Jonathan Cardoso <me@jonathancardoso.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: paulacamargo25 <paulitacv25@gmail.com> Co-authored-by: Pete Farland <pete.farland@posit.co> Co-authored-by: Heejae Chang <1333179+heejaechang@users.noreply.github.com> Co-authored-by: Luciana Abud <45497113+luabud@users.noreply.github.com> Co-authored-by: Kartik Raj <karraj@microsoft.com> Signed-off-by: GitHub <noreply@github.com>
…on main Merge pull request #14 from posit-dev/merge_upstream Merge upstream of vscode python main -------------------- Commit message for posit-dev/positron-python@098389e026b7e405b604b0c9184346901bb44077: Ignore package-lock.json in favor of yarn -------------------- Commit message for posit-dev/positron-python@65bbcb1fe923cb9e110669c5fc048870a9ebfe59: Merge remote-tracking branch 'upstream/main' -------------------- Commit message for microsoft/vscode-python@04753c4d8c5f0443f57c69ad2a4fcfe4df07c740: Ensure editable install is triggered if `pyproject.toml` is found. (microsoft/vscode-python#20572) No-changelog because this feature is not in stable yet. -------------------- Commit message for microsoft/vscode-python@80ef35f7e1e83ffec09e5475c492fe8beaaad12b: Log as error in case we're unable to detect the active terminal shell type (microsoft/vscode-python#20545) -------------------- Commit message for microsoft/vscode-python@34414c8ef6ef9fd24986eeb3f5856fd370bf397d: Remove telemetry proposal + implicit activations (microsoft/vscode-python#20542) Removes the telemetryLogger proposal as it is finalized. Also removes the command activation events as vscode now automatically generates though so that information is redudant. Co-authored-by: Brett Cannon <brcan@microsoft.com> -------------------- Commit message for microsoft/vscode-python@fe40195db24a0f5d574b6744218cc472b2a36fa6: Switch to a different toml library. (microsoft/vscode-python#20544) -------------------- Commit message for microsoft/vscode-python@e9edfc01435ed37699c75b56c2681e4475f86861: Detect if VSCode is launched from an activated environment and select it (microsoft/vscode-python#20526) Closes https://github.com/microsoft/vscode-python/issues/10668 In case of base conda environments, show a prompt to select it instead, as getting configs is required in that case which can take time. -------------------- Commit message for microsoft/vscode-python@bebf05da6f5e7f29f3b41e4827743004612ca220: Create env shows requirements files or `pyproject.toml` extras when available (microsoft/vscode-python#20524) Closes https://github.com/microsoft/vscode-python/issues/20277 Closes https://github.com/microsoft/vscode-python/issues/20278 -------------------- Commit message for microsoft/vscode-python@c545a366318b0852b970703b8da8c9ffe65d86bf: Add GDPR tag for new pylance property (microsoft/vscode-python#20501) `packages` has become `packagesBitArray` -------------------- Commit message for microsoft/vscode-python@e92c1248b138a6eb2914a2392ffc1d1cce715edf: Update to new l10n (microsoft/vscode-python#20484) Following https://github.com/microsoft/vscode-engineering/wiki/Extensions-Localization This onboards vscode-python to the new localization API which enables localization for the web. It's a large PR ... but pretty boring since it's just replacing one syntax with another. Co-authored-by: Tyler Leonhardt <me@tylerleonhardt.com> -------------------- Commit message for microsoft/vscode-python@0f4e6ae49df32113ed5672ae6fd85f7a2bc16ecb: Stop suggesting the MS Python Discord server for help (microsoft/vscode-python#20499) -------------------- Commit message for microsoft/vscode-python@f7d732eb244755de21b1526679774671adca0d4a: Bump json5 from 2.2.1 to 2.2.3 (microsoft/vscode-python#20448) Bumps [json5](https://github.com/json5/json5) from 2.2.1 to 2.2.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/json5/json5/releases">json5's releases</a>.</em></p> <blockquote> <h2>v2.2.3</h2> <ul> <li>Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/299">#299</a>)</li> </ul> <h2>v2.2.2</h2> <ul> <li>Fix: Properties with the name <code>__proto__</code> are added to objects and arrays. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/199">#199</a>) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (<a href="https://github-redirect.dependabot.com/json5/json5/issues/295">#295</a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/json5/json5/blob/main/CHANGELOG.md">json5's changelog</a>.</em></p> <blockquote> <h3>v2.2.3 [<a href="https://github.com/json5/json5/tree/v2.2.3">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.2...v2.2.3">diff</a>]</h3> <ul> <li>Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/299">#299</a>)</li> </ul> <h3>v2.2.2 [<a href="https://github.com/json5/json5/tree/v2.2.2">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.1...v2.2.2">diff</a>]</h3> <ul> <li>Fix: Properties with the name <code>__proto__</code> are added to objects and arrays. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/199">#199</a>) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (<a href="https://github-redirect.dependabot.com/json5/json5/issues/295">#295</a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/json5/json5/commit/c3a75242772a5026a49c4017a16d9b3543b62776"><code>c3a7524</code></a> 2.2.3</li> <li><a href="https://github.com/json5/json5/commit/94fd06d82eeed225fa172f6fb2ca27375cbd2e39"><code>94fd06d</code></a> docs: update CHANGELOG for v2.2.3</li> <li><a href="https://github.com/json5/json5/commit/3b8cebf0c474a8b20c78bd75c89cca0c4dce84ce"><code>3b8cebf</code></a> docs(security): use GitHub security advisories</li> <li><a href="https://github.com/json5/json5/commit/f0fd9e194dde282caff114a110f4fac635f3a62c"><code>f0fd9e1</code></a> docs: publish a security policy</li> <li><a href="https://github.com/json5/json5/commit/6a91a05fffeda16ff6b3b5008b6b340d42d31ec0"><code>6a91a05</code></a> docs(template): bug -> bug report</li> <li><a href="https://github.com/json5/json5/commit/14f8cb186e8abdfaccf6527171da7b1224374650"><code>14f8cb1</code></a> 2.2.2</li> <li><a href="https://github.com/json5/json5/commit/10cc7ca9169b59c5e0f5afc03dbd870cd06bcc46"><code>10cc7ca</code></a> docs: update CHANGELOG for v2.2.2</li> <li><a href="https://github.com/json5/json5/commit/7774c1097993bc3ce9f0ac4b722a32bf7d6871c8"><code>7774c10</code></a> fix: add <strong>proto</strong> to objects and arrays</li> <li><a href="https://github.com/json5/json5/commit/edde30abd8b22facf2c06c72586b9f6edf12700d"><code>edde30a</code></a> Readme: slight tweak to intro</li> <li><a href="https://github.com/json5/json5/commit/97286f8bd542c89dcee096bc05dd28ed2dfc1e16"><code>97286f8</code></a> Improve example in readme</li> <li>Additional commits viewable in <a href="https://github.com/json5/json5/compare/v2.2.1...v2.2.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=json5&package-manager=npm_and_yarn&previous-version=2.2.1&new-version=2.2.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-python/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> -------------------- Commit message for microsoft/vscode-python@b7e949009455ec23521a7ab63f1a11d1e2b0c906: Bump mheap/github-action-required-labels from 2 to 3 (microsoft/vscode-python#20447) Bumps [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels) from 2 to 3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mheap/github-action-required-labels/releases">mheap/github-action-required-labels's releases</a>.</em></p> <blockquote> <h2>v3</h2> <p>Tag that always points to the latest commit in the v3.x.x series of releases</p> <h2>v3.0.0</h2> <h2>What's Changed</h2> <ul> <li>Switch to using <code>@actions/core</code> by <a href="https://github.com/mheap"><code>@mheap</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/44">mheap/github-action-required-labels#44</a></li> <li>Custom messages by <a href="https://github.com/mheap"><code>@mheap</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/46">mheap/github-action-required-labels#46</a></li> <li>Bump json5 from 2.2.1 to 2.2.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/45">mheap/github-action-required-labels#45</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mheap/github-action-required-labels/compare/v2.2.3...v3.0.0">https://github.com/mheap/github-action-required-labels/compare/v2.2.3...v3.0.0</a></p> <h2>v2.2.3</h2> <h2>What's Changed</h2> <ul> <li>Fix add_comment input by <a href="https://github.com/mheap"><code>@mheap</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/40">mheap/github-action-required-labels#40</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mheap/github-action-required-labels/compare/v2.2.2...v2.2.3">https://github.com/mheap/github-action-required-labels/compare/v2.2.2...v2.2.3</a></p> <h2>v2.2.2</h2> <h2>What's Changed</h2> <ul> <li>Update action.yml by <a href="https://github.com/jeff-miller-cfa"><code>@jeff-miller-cfa</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/37">mheap/github-action-required-labels#37</a></li> <li>Bump <code>@actions/core</code> from 1.2.6 to 1.9.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/34">mheap/github-action-required-labels#34</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mheap/github-action-required-labels/compare/v2.2.1...v2.2.2">https://github.com/mheap/github-action-required-labels/compare/v2.2.1...v2.2.2</a></p> <h2>v2.2.1</h2> <ul> <li>Adding <code>node16</code> support</li> </ul> <h2>v2.2.0</h2> <h2>What's Changed</h2> <ul> <li>Add comment on failure by <a href="https://github.com/mheap"><code>@mheap</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/36">mheap/github-action-required-labels#36</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mheap/github-action-required-labels/compare/v2.1.0...v2.2.0">https://github.com/mheap/github-action-required-labels/compare/v2.1.0...v2.2.0</a></p> <h2>v2.1.0</h2> <h2>What's Changed</h2> <ul> <li>Add support for output status by <a href="https://github.com/mheap"><code>@mheap</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/32">mheap/github-action-required-labels#32</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mheap/github-action-required-labels/compare/v2.0.1...v2.1.0">https://github.com/mheap/github-action-required-labels/compare/v2.0.1...v2.1.0</a></p> <h2>v2.0.1</h2> <h2>What's Changed</h2> <ul> <li>Update action.yml by <a href="https://github.com/yannickm95"><code>@yannickm95</code></a> in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/30">mheap/github-action-required-labels#30</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/yannickm95"><code>@yannickm95</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/mheap/github-action-required-labels/pull/30">mheap/github-action-required-labels#30</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mheap/github-action-required-labels/compare/v2.0.0...v2.0.1">https://github.com/mheap/github-action-required-labels/compare/v2.0.0...v2.0.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mheap/github-action-required-labels/commit/179af849240d834567e1a3d6dc781575eede757c"><code>179af84</code></a> Automatic compilation</li> <li><a href="https://github.com/mheap/github-action-required-labels/commit/e49d4bee708a114e73d1dd790d354c109e0cfe12"><code>e49d4be</code></a> Bump json5 from 2.2.1 to 2.2.2</li> <li><a href="https://github.com/mheap/github-action-required-labels/commit/6008ef38d7350168a91dab200a9d48ae21b42676"><code>6008ef3</code></a> Add ability to customise comment / error message</li> <li><a href="https://github.com/mheap/github-action-required-labels/commit/43f0d746ccf0990f7dec9fb7f4322d55bce51ab0"><code>43f0d74</code></a> Bump README to v3</li> <li><a href="https://github.com/mheap/github-action-required-labels/commit/6831eb28b639f195899c3c6422fc0ca08d84c2e0"><code>6831eb2</code></a> Move from actions-toolkit to <code>@actions/core</code></li> <li>See full diff in <a href="https://github.com/mheap/github-action-required-labels/compare/v2...v3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mheap/github-action-required-labels&package-manager=github_actions&previous-version=2&new-version=3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> -------------------- Commit message for microsoft/vscode-python@074ffb60de55b27285262f7968f7ddaa75b600ef: Re-revert "Update to proposed telemetry logger" (microsoft/vscode-python#20482) The telemetry issue has been fixed by https://github.com/microsoft/vscode/pull/170740, so we're re-reverting the changes. -------------------- Commit message for microsoft/vscode-python@90cb8296d6f139102850c087c3dfd83bb15399ad: Make auto indent depend on formatOnType setting value (microsoft/vscode-python#20480) For https://github.com/microsoft/vscode-python/issues/20479 -------------------- Commit message for microsoft/vscode-python@e6b27521746af44e26f054122c0f22efbf80ce73: Update debugpy to 1.6.5 (microsoft/vscode-python#20477) -------------------- Commit message for microsoft/vscode-python@e8e7d8899bb3093895408cc3480d8d5393aad3d9: Revert "Update to proposed telemetry logger" (microsoft/vscode-python#20469) This reverts commit 03e53538955e58a0e7f3f2cce144c4398483815b. To temporarily fix telemetry issues. Co-authored-by: Brett Cannon <brcan@microsoft.com> -------------------- Commit message for microsoft/vscode-python@2211996979342e5cd9bb31a7ca0ece637779da18: Make sure we do not use or execute the default `python` on `PATH` if there is any other known interpreter (microsoft/vscode-python#20457) -------------------- Commit message for microsoft/vscode-python@4e1f79c08e0497bcaca725e400cd9e407d2dcfa9: Bump the major version to 2023 (microsoft/vscode-python#20465) For microsoft/vscode-python#20456 -------------------- Commit message for microsoft/vscode-python@f6a0d456c99c1eac8e9564f14823752397d600e0: Bump extension/telemetry dependency version (microsoft/vscode-python#20462) Corresponds to https://github.com/microsoft/vscode/commit/4acf2d9b46b75748ae687cf3b2952a0799679873 . Closes microsoft/vscode-python#20456 -------------------- Commit message for microsoft/vscode-python@9461f4abc43e0e75f6a6b6eac3f3e83d3b294bd9: Enables successful running of python file even when parentheses are present in the path (microsoft/vscode-python#20414) -------------------- Commit message for microsoft/vscode-python@32f55109c976e66bf39e8da6aae0c9b6f5115df2: Do not remove envs which are provided by the consumer (microsoft/vscode-python#20424) For https://github.com/microsoft/vscode-python/issues/20292 We currently remove environments from cache which aren't part of the latest discovery run. This is not correct as consumers can still select envs not reported by discovery run, which we shouldn't remove. -------------------- Commit message for microsoft/vscode-python@65cf0fbb88ad839f1f41e5dc16fad0086f9cc871: Drop telemetry CI (microsoft/vscode-python#20393) Downloading the ripgrep dependency is a bit flaky. Part of microsoft/vscode-python#20390 -------------------- Commit message for microsoft/vscode-python@6d0aaa7fc577d3b1fbe7352ba37d9df0e39c441a: Add description on hover to interpreter status bar item (microsoft/vscode-python#20411) Closes https://github.com/microsoft/vscode-python/issues/16480 -------------------- Commit message for microsoft/vscode-python@804e65608f4d2a1a3b6e0bb7cde3aeefa6757340: Update link to A/B experiments description (microsoft/vscode-python#20409) Closes https://github.com/microsoft/vscode-python/issues/15635 -------------------- Commit message for microsoft/vscode-python@2d4f34ad1712f6a201d7c1056349de8606caed1a: Use isolated flag when gathering environment information (microsoft/vscode-python#20403) Closes https://github.com/microsoft/vscode-python/issues/20382 -------------------- Commit message for microsoft/vscode-python@5b7e040886defce82a363d714f60a2d25f9e9fa1: Stop asking which package manager to use for installing tools (microsoft/vscode-python#20405) Closes https://github.com/microsoft/vscode-python/issues/11739 -------------------- Commit message for microsoft/vscode-python@5b6c99b08108aee8eca8a8e0d7043427067f4812: Remove poetry watcher (microsoft/vscode-python#20404) Closes https://github.com/microsoft/vscode-python/issues/17087 -------------------- Commit message for microsoft/vscode-python@5e83629cae7cd408fdba483513d00a05e13fb995: Update release_plan.md (microsoft/vscode-python#20351) went through and made edits to try and help clarify the release process and all the different branches and PRs that we are creating/keeping track of in this process. Thanks! Co-authored-by: Brett Cannon <brcan@microsoft.com> Co-authored-by: Kartik Raj <karraj@microsoft.com> -------------------- Commit message for microsoft/vscode-python@1bf055880019e42a0cf2eca3307925846016f5fc: Bump VS Code engine in `package.json` (microsoft/vscode-python#20392) Accidentally left out of https://github.com/microsoft/vscode-python/commit/cb124e7b408af2afa3e074e541ddf8c09b95e2ff . As it pertains to a change made in VS Code insiders today, we are setting the engine to a specific date. This requires updating the `getChannel()` code, so took the opportunity to factor it out. -------------------- Commit message for microsoft/vscode-python@cb124e7b408af2afa3e074e541ddf8c09b95e2ff: Update telemetry package (microsoft/vscode-python#20388) There has been breaking changes in the proposed telemetry surface so we must update the package to prevent breaking the python extension -------------------- Commit message for microsoft/vscode-python@07e334af8ad631da01c21ce339366f907006520c: Display user friendly path when displaying create environment notification (microsoft/vscode-python#20387) Closes https://github.com/microsoft/vscode-python/issues/19934 -------------------- Commit message for microsoft/vscode-python@e72ca977f52b063a56c1408978e2fee401d566cb: Use `uniqueItems` for settings (microsoft/vscode-python#20375) Leaves string arrays alone that are used as arguments to external tools as we can't know if unique values are valid or not. Closes microsoft/vscode-python#7881 -------------------- Commit message for microsoft/vscode-python@69e9625b84788bcb319e3b232bcffd9b7834fecd: Stop installing pre-release version of black when using poetry or pipenv environments (microsoft/vscode-python#20381) Release version is now available on pypi, so this should no longer be needed. Closes https://github.com/microsoft/vscode-python/issues/10696 -------------------- Commit message for microsoft/vscode-python@118643290db172566b145bd14cb3ab08c0c9cf86: Merge `release/2022.20` into `main` (microsoft/vscode-python#20374) Co-authored-by: Eleanor Boyd <eleanorboyd@microsoft.com> -------------------- Commit message for microsoft/vscode-python@15b9815a30c1483f5913b56c788f8de061cd521d: Remove `python.pythonPath` deprecation prompt (microsoft/vscode-python#20371) Closes https://github.com/microsoft/vscode-python/issues/20340 -------------------- Commit message for microsoft/vscode-python@32ab2f1e3bb8bf6e9998a493238cc099eddda034: Do not allow use of discovery API in an untrusted workspace (microsoft/vscode-python#20372) -------------------- Commit message for microsoft/vscode-python@eb66e81f0b053d1f499f8be14ba613f53c069860: Re-register API for jupyter integration once trust is granted (microsoft/vscode-python#20370) Closes https://github.com/microsoft/vscode-python/issues/20261 -------------------- Commit message for microsoft/vscode-python@2afda3f3f03f31646e2464c78c5e0120aa156a2a: Bump qs from 6.5.2 to 6.5.3 (microsoft/vscode-python#20332) Bumps [qs](https://github.com/ljharb/qs) from 6.5.2 to 6.5.3. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ljharb/qs/blob/main/CHANGELOG.md">qs's changelog</a>.</em></p> <blockquote> <h2><strong>6.5.3</strong></h2> <ul> <li>[Fix] <code>parse</code>: ignore <code>__proto__</code> keys (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/428">#428</a>)</li> <li>[Fix]<code> </code>utils.merge`: avoid a crash with a null target and a truthy non-array source</li> <li>[Fix] correctly parse nested arrays</li> <li>[Fix] <code>stringify</code>: fix a crash with <code>strictNullHandling</code> and a custom <code>filter</code>/<code>serializeDate</code> (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/279">#279</a>)</li> <li>[Fix] <code>utils</code>: <code>merge</code>: fix crash when <code>source</code> is a truthy primitive & no options are provided</li> <li>[Fix] when <code>parseArrays</code> is false, properly handle keys ending in <code>[]</code></li> <li>[Fix] fix for an impossible situation: when the formatter is called with a non-string value</li> <li>[Fix] <code>utils.merge</code>: avoid a crash with a null target and an array source</li> <li>[Refactor] <code>utils</code>: reduce observable [[Get]]s</li> <li>[Refactor] use cached <code>Array.isArray</code></li> <li>[Refactor] <code>stringify</code>: Avoid arr = arr.concat(...), push to the existing instance (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/269">#269</a>)</li> <li>[Refactor] <code>parse</code>: only need to reassign the var once</li> <li>[Robustness] <code>stringify</code>: avoid relying on a global <code>undefined</code> (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/427">#427</a>)</li> <li>[readme] remove travis badge; add github actions/codecov badges; update URLs</li> <li>[Docs] Clean up license text so it’s properly detected as BSD-3-Clause</li> <li>[Docs] Clarify the need for "arrayLimit" option</li> <li>[meta] fix README.md (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/399">#399</a>)</li> <li>[meta] add FUNDING.yml</li> <li>[actions] backport actions from main</li> <li>[Tests] always use <code>String(x)</code> over <code>x.toString()</code></li> <li>[Tests] remove nonexistent tape option</li> <li>[Dev Deps] backport from main</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ljharb/qs/commit/298bfa55d6db00ddea78dd0333509aadf9bb3077"><code>298bfa5</code></a> v6.5.3</li> <li><a href="https://github.com/ljharb/qs/commit/ed0f5dcbef4b168a8ae299d78b1e4a2e9b1baf1f"><code>ed0f5dc</code></a> [Fix] <code>parse</code>: ignore <code>__proto__</code> keys (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/428">#428</a>)</li> <li><a href="https://github.com/ljharb/qs/commit/691e739cfa40cd42604dc05a54e6154371a429ab"><code>691e739</code></a> [Robustness] <code>stringify</code>: avoid relying on a global <code>undefined</code> (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/427">#427</a>)</li> <li><a href="https://github.com/ljharb/qs/commit/1072d57d38a690e1ad7616dced44390bffedcbb2"><code>1072d57</code></a> [readme] remove travis badge; add github actions/codecov badges; update URLs</li> <li><a href="https://github.com/ljharb/qs/commit/12ac1c403aaa04d1a34844f514ed9f9abfb76e64"><code>12ac1c4</code></a> [meta] fix README.md (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/399">#399</a>)</li> <li><a href="https://github.com/ljharb/qs/commit/0338716b09fdbd4711823eeb0a14e556a2498e7a"><code>0338716</code></a> [actions] backport actions from main</li> <li><a href="https://github.com/ljharb/qs/commit/5639c20ce0a7c1332200a3181339331483e5a3a1"><code>5639c20</code></a> Clean up license text so it’s properly detected as BSD-3-Clause</li> <li><a href="https://github.com/ljharb/qs/commit/51b8a0b1b213596dd1702b837f5e7dec2229793d"><code>51b8a0b</code></a> add FUNDING.yml</li> <li><a href="https://github.com/ljharb/qs/commit/45f675936e742d92fac8d4dae5cfc385c576a977"><code>45f6759</code></a> [Fix] fix for an impossible situation: when the formatter is called with a no...</li> <li><a href="https://github.com/ljharb/qs/commit/f814a7f8f2af059f8158f7e4b2bf8b46aeb62cd3"><code>f814a7f</code></a> [Dev Deps] backport from main</li> <li>Additional commits viewable in <a href="https://github.com/ljharb/qs/compare/v6.5.2...v6.5.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=qs&package-manager=npm_and_yarn&previous-version=6.5.2&new-version=6.5.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-python/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Eleanor Boyd <eleanorboyd@microsoft.com> Co-authored-by: Brett Cannon <brcan@microsoft.com> -------------------- Commit message for microsoft/vscode-python@a30b7711847f83fa5b9d8c7a0cda436b2c5968a5: Bump dessant/lock-threads from 3 to 4 (microsoft/vscode-python#20318) Bumps [dessant/lock-threads](https://github.com/dessant/lock-threads) from 3 to 4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dessant/lock-threads/releases">dessant/lock-threads's releases</a>.</em></p> <blockquote> <h2>v4.0.0</h2> <p>Learn more about this release from the <a href="https://github.com/dessant/lock-threads/blob/master/CHANGELOG.md#changelog">changelog</a>.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/dessant/lock-threads/blob/master/CHANGELOG.md">dessant/lock-threads's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/dessant/lock-threads/compare/v3.0.0...v4.0.0">4.0.0</a> (2022-12-04)</h2> <h3>⚠ BREAKING CHANGES</h3> <ul> <li>the action now requires Node.js 16</li> </ul> <h3>Bug Fixes</h3> <ul> <li>update dependencies (<a href="https://github.com/dessant/lock-threads/commit/38e918558115222435d26c0639870cdbe3572929">38e9185</a>)</li> <li>update docs (<a href="https://github.com/dessant/lock-threads/commit/32986e26965060a85db09e98ef7e5958c961ae84">32986e2</a>)</li> </ul> <h2><a href="https://github.com/dessant/lock-threads/compare/v2.1.2...v3.0.0">3.0.0</a> (2021-09-27)</h2> <h3>⚠ BREAKING CHANGES</h3> <ul> <li> <p>input parameter names have changed</p> <p>Rename the following input parameters when upgrading from v2 to v3:</p> <ul> <li><code>issue-lock-inactive-days</code> --> <code>issue-inactive-days</code></li> <li><code>issue-exclude-created-before</code> --> <code>exclude-issue-created-before</code></li> <li><code>issue-exclude-labels</code> --> <code>exclude-any-issue-labels</code></li> <li><code>issue-lock-labels</code> --> <code>add-issue-labels</code></li> <li><code>issue-lock-comment</code> --> <code>issue-comment</code></li> <li><code>pr-lock-inactive-days</code> --> <code>pr-inactive-days</code></li> <li><code>pr-exclude-created-before</code> --> <code>exclude-pr-created-before</code></li> <li><code>pr-exclude-labels</code> --> <code>exclude-any-pr-labels</code></li> <li><code>pr-lock-labels</code> --> <code>add-pr-labels</code></li> <li><code>pr-lock-comment</code> --> <code>pr-comment</code></li> </ul> </li> </ul> <h3>Features</h3> <ul> <li>add new filtering and labeling options, update input parameter names (<a href="https://github.com/dessant/lock-threads/commit/26fd836f96f46625de24663c4dc2b84c8408fcb1">26fd836</a>)</li> <li>allow manual triggering (<a href="https://github.com/dessant/lock-threads/commit/a0c7da306555d946273957477018fe178130ccf9">a0c7da3</a>)</li> </ul> <h3><a href="https://github.com/dessant/lock-threads/compare/v2.1.1...v2.1.2">2.1.2</a> (2021-08-17)</h3> <h3>Bug Fixes</h3> <ul> <li>ignore error when commenting on issue converted to discussion (<a href="https://github.com/dessant/lock-threads/commit/60d2a1a4bee140c0408a057fdb025155cdba18dd">60d2a1a</a>), closes <a href="https://github-redirect.dependabot.com/dessant/lock-threads/issues/24">#24</a></li> </ul> <h3><a href="https://github.com/dessant/lock-threads/compare/v2.1.0...v2.1.1">2.1.1</a> (2021-07-09)</h3> <h3>Bug Fixes</h3> <ul> <li>update GitHub API calls (<a href="https://github.com/dessant/lock-threads/commit/a3ccc71fffa8f16e865eb3661cf8852e11d0a289">a3ccc71</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dessant/lock-threads/commit/c1b35aecc5cdb1a34539d14196df55838bb2f836"><code>c1b35ae</code></a> chore(release): 4.0.0</li> <li><a href="https://github.com/dessant/lock-threads/commit/32986e26965060a85db09e98ef7e5958c961ae84"><code>32986e2</code></a> fix: update docs</li> <li><a href="https://github.com/dessant/lock-threads/commit/b677b85bbb81f02cbd6ee8c7d64b627d9a0d98eb"><code>b677b85</code></a> chore: update workflows</li> <li><a href="https://github.com/dessant/lock-threads/commit/dc42875c063d607b02f82ac2f4fd962f620cf459"><code>dc42875</code></a> chore: update package</li> <li><a href="https://github.com/dessant/lock-threads/commit/38e918558115222435d26c0639870cdbe3572929"><code>38e9185</code></a> fix: update dependencies</li> <li><a href="https://github.com/dessant/lock-threads/commit/08e671be8ac8944d0e132aa71d0ae8ccfb347675"><code>08e671b</code></a> chore: add upgrade guide</li> <li>See full diff in <a href="https://github.com/dessant/lock-threads/compare/v3...v4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dessant/lock-threads&package-manager=github_actions&previous-version=3&new-version=4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Eleanor Boyd <eleanorboyd@microsoft.com> Co-authored-by: Brett Cannon <brcan@microsoft.com> -------------------- Commit message for microsoft/vscode-python@3a2e9430af852742af09eb181bcc637335c7282e: Bump decode-uri-component from 0.2.0 to 0.2.2 (microsoft/vscode-python#20308) Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/SamVerschueren/decode-uri-component/releases">decode-uri-component's releases</a>.</em></p> <blockquote> <h2>v0.2.2</h2> <ul> <li>Prevent overwriting previously decoded tokens 980e0bf</li> </ul> <p><a href="https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2">https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2</a></p> <h2>v0.2.1</h2> <ul> <li>Switch to GitHub workflows 76abc93</li> <li>Fix issue where decode throws - fixes <a href="https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/6">#6</a> 746ca5d</li> <li>Update license (<a href="https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/1">#1</a>) 486d7e2</li> <li>Tidelift tasks a650457</li> <li>Meta tweaks 66e1c28</li> </ul> <p><a href="https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1">https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/a0eea469d26eb0df668b081672cdb9581feb78eb"><code>a0eea46</code></a> 0.2.2</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/980e0bf09b64d94f1aa79012f895816c30ffd152"><code>980e0bf</code></a> Prevent overwriting previously decoded tokens</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/3c8a373dd4837e89b3f970e01295dd03e1405a33"><code>3c8a373</code></a> 0.2.1</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/76abc939783fe3900fadb7d384a74d324d5557f3"><code>76abc93</code></a> Switch to GitHub workflows</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/746ca5dcb6667c5d364e782d53c542830e4c10b9"><code>746ca5d</code></a> Fix issue where decode throws - fixes <a href="https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/6">#6</a></li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/486d7e26d3a8c0fbe860fb651fe1bc98c2f2be30"><code>486d7e2</code></a> Update license (<a href="https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/1">#1</a>)</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/a65045724e6234acef87f31da499d4807b20b134"><code>a650457</code></a> Tidelift tasks</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/66e1c2834c0e189201cb65196ec3101372459b02"><code>66e1c28</code></a> Meta tweaks</li> <li>See full diff in <a href="https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=decode-uri-component&package-manager=npm_and_yarn&previous-version=0.2.0&new-version=0.2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-python/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Eleanor Boyd <eleanorboyd@microsoft.com> Co-authored-by: Brett Cannon <brcan@microsoft.com> -------------------- Commit message for microsoft/vscode-python@713cd4e0eff38dcc5cdd5b5656c7c4377e4a4670: Bump loader-utils from 2.0.3 to 2.0.4 (microsoft/vscode-python#20241) Bumps [loader-utils](https://github.com/webpack/loader-utils) from 2.0.3 to 2.0.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/loader-utils/releases">loader-utils's releases</a>.</em></p> <blockquote> <h2>v2.0.4</h2> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.3...v2.0.4">2.0.4</a> (2022-11-11)</h3> <h3>Bug Fixes</h3> <ul> <li>ReDoS problem (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/225">#225</a>) (<a href="https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb">ac09944</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md">loader-utils's changelog</a>.</em></p> <blockquote> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.3...v2.0.4">2.0.4</a> (2022-11-11)</h3> <h3>Bug Fixes</h3> <ul> <li>ReDoS problem (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/225">#225</a>) (<a href="https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb">ac09944</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/loader-utils/commit/6688b5028106f144ee9f543bebc8e6a87b57829f"><code>6688b50</code></a> chore(release): 2.0.4</li> <li><a href="https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb"><code>ac09944</code></a> fix: ReDoS problem (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/225">#225</a>)</li> <li>See full diff in <a href="https://github.com/webpack/loader-utils/compare/v2.0.3...v2.0.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=loader-utils&package-manager=npm_and_yarn&previous-version=2.0.3&new-version=2.0.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-python/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brett Cannon <brett@python.org> -------------------- Commit message for microsoft/vscode-python@b754904baa22c7a103a7d59c14e850033de04624: 2022.21.0 version bump (microsoft/vscode-python#20342) -------------------- Commit message for microsoft/vscode-python@88c5709d0f2bf94fcadd5507a3bc1e09394b0a5f: create RC for 2022.20 (microsoft/vscode-python#20328) -------------------- Commit message for microsoft/vscode-python@f9e98fc35f24bd48f4c7910e403f0864dc5d4bd0: Simplify launch debug (microsoft/vscode-python#20286) Closed: microsoft/vscode-python#19770 -------------------- Commit message for microsoft/vscode-python@71766e3385b09ed2902c4e44cb52734024fc9249: Upgrade debugpy to 1.6.4 (microsoft/vscode-python#20291) Also ship CPython 3.10 wheels instead of 3.9. -------------------- Commit message for microsoft/vscode-python@4ee6050b023716a1537240feb469c8db6f4b8b4e: Catch exceptions when changing `formatOnType` setting (microsoft/vscode-python#20285) -------------------- Commit message for microsoft/vscode-python@133a8e877aa3755eaf101f1f1edf446432770b40: Fix CI tests (microsoft/vscode-python#20273) Fix Ci test using the insiders version of vscode in tests. Remove old insider tests. -------------------- Commit message for microsoft/vscode-python@a2aa1fb9274ca6c515ca7c2fdea0f8df7f287198: Merge Getting Started walkthrough to include Create Environment Tile (microsoft/vscode-python#20258) Merging create environment tile into main walkthrough and deleted create environment walkthrough used in the experiment -------------------- Commit message for microsoft/vscode-python@a9e299f49c3ab8d9bdb5e16193e9e9098be11934: Drop the `-insiders` suffix from the VS Code engine (microsoft/vscode-python#20256) -------------------- Commit message for microsoft/vscode-python@9893a0cdd1b9465c9ae9b750705cd78ef8d3cc55: Bump VS Code engine to `1.74.0-insiders` (microsoft/vscode-python#20255) Closes microsoft/vscode-python#20247 -------------------- Commit message for microsoft/vscode-python@b8f9b1d3b453fbabf166ff6b4f9a54e0f08d1a17: Add button to open folder from venv failure message (microsoft/vscode-python#20243) Closes https://github.com/microsoft/vscode-python/issues/20242 cc/ @cwebster-99 -------------------- Commit message for microsoft/vscode-python@c78ef060810cc452a4b336787466479337627094: Notify Pylance on `jupyter.runStartupCommands` config change (microsoft/vscode-python#20237) -------------------- Commit message for microsoft/vscode-python@ad46fb3a5888804d39582fe044bfdf07ac3e5804: Show user deprecated message for unsupported Python versions when launching the debugger (microsoft/vscode-python#20172) Closed: https://github.com/microsoft/vscode-python/issues/19799 Closes https://github.com/microsoft/vscode-python/issues/19988 -------------------- Commit message for microsoft/vscode-python@78e136f52dcf45ed0c911065a6bc224195a5f8ad: Update to proposed telemetry logger (microsoft/vscode-python#20238) This updates to the proposed telemetry logger to gain support for output channels -------------------- Commit message for microsoft/vscode-python@9701c53ccf046c9dd2753f9ee2c2b538d63007b5: Remove DI from config launch (microsoft/vscode-python#20226) closed: https://github.com/microsoft/vscode-python/issues/19769 -------------------- Commit message for microsoft/vscode-python@ad0286c9c44884c6d43a7648b14ca69bec9ae989: Fix venv tests (microsoft/vscode-python#20230) Closes https://github.com/microsoft/vscode-python/issues/19859 -------------------- Commit message for microsoft/vscode-python@c70a0bccaac31a04b7c85080fc191f56f2192194: Update cached list of extensions correctly (microsoft/vscode-python#20229) -------------------- Commit message for microsoft/vscode-python@8fe4d0b9f687f6393a5e26687481df22602b4e50: Improve doc string for description of environment argument in API (microsoft/vscode-python#20223) Closes https://github.com/microsoft/vscode-python/issues/20220 -------------------- Commit message for microsoft/vscode-python@db5e96c68757e6f7fb981d1ec9481a4ebf29223a: Cache the value of `extensions.all` (microsoft/vscode-python#20222) Fixes microsoft/vscode-python#20221 @karrtikr Please feel free to make necessary changes to this PR to get this through the tests. Co-authored-by: Kartik Raj <karraj@microsoft.com> -------------------- Commit message for microsoft/vscode-python@29a72b4fca446eeb8629213f7128dd6cdb33e812: Extend scope of "python.tensorBoard.logDirectory" and support variable substitution (microsoft/vscode-python#20103) Fixes https://github.com/microsoft/vscode-jupyter/issues/8802 Credit: @PillarsZhang [patch-by-zhang](https://github.com/PillarsZhang/vscode-python/tree/patch-by-zhang) Co-authored-by: Evan Philip <107-ephilip@users.noreply.gitlab.pasqal.io> -------------------- Commit message for microsoft/vscode-python@f671b9bb7f932d465b2b9a7891185d89bf961ed9: Ensure we don't use the same interpreter for equally named project on different hosts (microsoft/vscode-python#20212) Closes https://github.com/microsoft/vscode-python/issues/19859 Include remote name in path keys for fetch interpreter setting value -------------------- Commit message for microsoft/vscode-python@f2ca5b9c4130e036c6c75835e5f61d9328aa7c44: Improve description for `python.terminal.focusAfterLaunch` setting (microsoft/vscode-python#20195) Closes https://github.com/microsoft/vscode-python/issues/19914 -------------------- Commit message for microsoft/vscode-python@885733e5a3c941e46f23bbb51f6f6a6c93c4bfd2: Bump loader-utils from 2.0.0 to 2.0.3 (microsoft/vscode-python#20177) Bumps [loader-utils](https://github.com/webpack/loader-utils) from 2.0.0 to 2.0.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/loader-utils/releases">loader-utils's releases</a>.</em></p> <blockquote> <h2>v2.0.3</h2> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.1...v2.0.3">2.0.3</a> (2022-10-20)</h3> <h3>Bug Fixes</h3> <ul> <li><strong>security:</strong> prototype pollution exploit (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/217">#217</a>) (<a href="https://github.com/webpack/loader-utils/commit/a93cf6f4702012030f6b5ee8340d5c95ec1c7d4c">a93cf6f</a>)</li> </ul> <h2>v2.0.2</h2> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.1...v2.0.2">2.0.2</a> (2021-11-04)</h3> <h3>Bug Fixes</h3> <ul> <li>base64 generation and unicode characters (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/197">#197</a>) (<a href="https://github.com/webpack/loader-utils/commit/8c2d24ee400bc4567335e97ee6004c3baa6ef66f">8c2d24e</a>)</li> </ul> <h2>v2.0.1</h2> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.0...v2.0.1">2.0.1</a> (2021-10-29)</h3> <h3>Bug Fixes</h3> <ul> <li>md4 support on Node.js v17 (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/193">#193</a>) (<a href="https://github.com/webpack/loader-utils/commit/1069f61284a571614ee4acdde6e6087174be118a">1069f61</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack/loader-utils/blob/v2.0.3/CHANGELOG.md">loader-utils's changelog</a>.</em></p> <blockquote> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.1...v2.0.3">2.0.3</a> (2022-10-20)</h3> <h3>Bug Fixes</h3> <ul> <li><strong>security:</strong> prototype pollution exploit (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/217">#217</a>) (<a href="https://github.com/webpack/loader-utils/commit/a93cf6f4702012030f6b5ee8340d5c95ec1c7d4c">a93cf6f</a>)</li> </ul> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.1...v2.0.2">2.0.2</a> (2021-11-04)</h3> <h3>Bug Fixes</h3> <ul> <li>base64 generation and unicode characters (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/197">#197</a>) (<a href="https://github.com/webpack/loader-utils/commit/8c2d24ee400bc4567335e97ee6004c3baa6ef66f">8c2d24e</a>)</li> </ul> <h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.0...v2.0.1">2.0.1</a> (2021-10-29)</h3> <h3>Bug Fixes</h3> <ul> <li>md4 support on Node.js v17 (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/193">#193</a>) (<a href="https://github.com/webpack/loader-utils/commit/1069f61284a571614ee4acdde6e6087174be118a">1069f61</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/loader-utils/commit/7162619fb982c394ed75098a0a0ed7e7f3177c70"><code>7162619</code></a> chore(release): 2.0.3</li> <li><a href="https://github.com/webpack/loader-utils/commit/a93cf6f4702012030f6b5ee8340d5c95ec1c7d4c"><code>a93cf6f</code></a> fix(security): prototype polution exploit (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/217">#217</a>)</li> <li><a href="https://github.com/webpack/loader-utils/commit/90c7c4be17e3e0b2f6091a69c67db7a6df9fd044"><code>90c7c4b</code></a> chore(release): 2.0.2</li> <li><a href="https://github.com/webpack/loader-utils/commit/8c2d24ee400bc4567335e97ee6004c3baa6ef66f"><code>8c2d24e</code></a> fix: base64 generation and unicode characters (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/197">#197</a>)</li> <li><a href="https://github.com/webpack/loader-utils/commit/5fb556208426d281a18dfbf6f45dca24bfb24e96"><code>5fb5562</code></a> chore(release): 2.0.1</li> <li><a href="https://github.com/webpack/loader-utils/commit/1069f61284a571614ee4acdde6e6087174be118a"><code>1069f61</code></a> fix: md4 support on Node.js v17 (<a href="https://github-redirect.dependabot.com/webpack/loader-utils/issues/193">#193</a>)</li> <li>See full diff in <a href="https://github.com/webpack/loader-utils/compare/v2.0.0...v2.0.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=loader-utils&package-manager=npm_and_yarn&previous-version=2.0.0&new-version=2.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-python/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> -------------------- Commit message for microsoft/vscode-python@f9bb14a9d45be9bac664cfc06d7afe08f26ba28e: Do not replace discovered python executable using `sys.executable` (microsoft/vscode-python#20197) For https://github.com/microsoft/vscode-python/issues/20189 -------------------- Commit message for microsoft/vscode-python@d9ff1763f0923520dfe083e30bf0791b3784cb57: Remove pr-chat.yml (microsoft/vscode-python#20193) It should be safe to remove this now that we switched to webhooks -------------------- Commit message for microsoft/vscode-python@d17ebcec3a4f202ceb4715040343e97adbd103fe: Fix errors related to `python.envFile` setting (microsoft/vscode-python#20192) Closes https://github.com/microsoft/vscode-python/issues/20179 -------------------- Commit message for microsoft/vscode-python@96927c73734722509252d40872ba74bc8d5dcb8b: Only use environment cache to resolve environment if it has complete information (microsoft/vscode-python#20186) -------------------- Commit message for microsoft/vscode-python@cff8a97d46465f66fb6f09fd488f43db77bcff3f: Fix issue with extension prompt being shown to users after install (microsoft/vscode-python#20158) Fixes https://github.com/microsoft/vscode-python/issues/20157 -------------------- Commit message for microsoft/vscode-python@bdd9a4b67935a30244c9d286d03fdeddd5bc0cc8: Fix poetry discovery (microsoft/vscode-python#20181) -------------------- Commit message for microsoft/vscode-python@5bfc6d57338ad7c6c85427e2cef393c067b5d650: Add more logging and only retry once if fetching interpreter information fails (microsoft/vscode-python#20180) For https://github.com/microsoft/vscode-python/issues/20147 -------------------- Commit message for microsoft/vscode-python@08417adf5f01ee01db32124ee1114b2390eacd1b: Do not cache result if running an interpreter fails (microsoft/vscode-python#20178) For https://github.com/microsoft/vscode-python/issues/20147 -------------------- Commit message for microsoft/vscode-python@8e5ec71e3d4af87e2b8ca09ad55f85445d587870: Monkeypatch terminals created to log commands sent (microsoft/vscode-python#20173) -------------------- Commit message for microsoft/vscode-python@c6ad0f8af08ae21abda4d14aa379b31f3c92eb29: Accept pytest exit code 1 for some tests cannot be collected (microsoft/vscode-python#20074) In case you have some tests where not successfully collected (e.g. 10 ok and 1 fail) vscode display only an error in the test explorer. For pytest it is possible to set the flag `--continue-on-collection-errors` but also vscode only display an error and not the other successfully collected tests. Pytest has a specific exit code for this behaviour (1) [https://docs.pytest.org/en/7.1.x/reference/exit-codes.html](https://docs.pytest.org/en/7.1.x/reference/exit-codes.html) Co-authored-by: Eleanor Boyd <eleanorboyd@microsoft.com> -------------------- Commit message for microsoft/vscode-python@f62e96c39fe9e15cc5422184dac36f4f1a6a1eb7: Fix linting in debugger (microsoft/vscode-python#20152) For https://github.com/microsoft/vscode-python/issues/17181 -------------------- Commit message for microsoft/vscode-python@e65775a6befb1d1a6b426a74382c204bdd775695: Add tests for active environment API (microsoft/vscode-python#20166) For https://github.com/microsoft/vscode-python/issues/20147 -------------------- Commit message for microsoft/vscode-python@e5412bcc6f37d0257ec6ec3d241d847a6ad5a50b: Add more logging when resolving environments (microsoft/vscode-python#20165) For https://github.com/microsoft/vscode-python/issues/20147 -------------------- Commit message for microsoft/vscode-python@0e633edd27ad1bf943f99df0ea9a4cf22e4afdfb: Remove DI from factory (microsoft/vscode-python#20057) Closed: microsoft/vscode-python#19768 -------------------- Commit message for microsoft/vscode-python@f1dcf94fcfdd329dfaafc3f5479f2983454de387: Merge back from release (microsoft/vscode-python#20156) Co-authored-by: Kartik Raj <karraj@microsoft.com> -------------------- Commit message for microsoft/vscode-python@6eed80ad690d7a3557e137e2739663fbd4352be0: Fix GDPR tagging for package failure event (microsoft/vscode-python#20136) Great catch by @cwebster-99! -------------------- Commit message for microsoft/vscode-python@f82e73cae4964714335320f3a707cac637df92cf: Update Jedi to latest (microsoft/vscode-python#20134) -------------------- Commit message for microsoft/vscode-python@eb49b2df6c44e4de20b2dee05deabbff26b77b37: Update engine to upcoming VS Code version (microsoft/vscode-python#20128) Cherry picking https://github.com/microsoft/vscode-python/pull/20058 Co-authored-by: Karthik Nadig <kanadig@microsoft.com> -------------------- Commit message for microsoft/vscode-python@1205270cc554ea9e947c296d6b8ace000b146399: Don't show certain python commands in command palette when you don't have a python file open (microsoft/vscode-python#19977) Closes microsoft/vscode-python#10441 -------------------- Commit message for microsoft/vscode-python@723126b67015db59643c078cb893dde1b1294c28: Post release (microsoft/vscode-python#20126) -------------------- Commit message for microsoft/vscode-python@9e263dc0f367a25eb63689b88b45bc16e62fe1a0: Update `package.json` for release (microsoft/vscode-python#20125) -------…
Merge pull request #58 from posit-dev/merge-latest Merge latest upstream -------------------- Commit message for posit-dev/positron-python@b5cbe4f: Merge latest upstream -------------------- Commit message for microsoft/vscode-python@96aa8f8: Do not deprecate `python.terminal.activateEnvironmentInTerminal` setting along with terminal env var experiment (microsoft/vscode-python#20952) I initially deprecated this setting as I thought folks only disabled it because we were sending commands which was annoying. -------------------- Commit message for microsoft/vscode-python@37a70fd: Update note on the Jupyter extension in README (microsoft/vscode-python#20946) Karthik brought this up offline and I agree, instead of saying we don't offer support out of box, we say it needs to be via the Jupyter extension. -------------------- Commit message for microsoft/vscode-python@bc59a7d: Fix linting in APIs (microsoft/vscode-python#20623) Fix lint in api.ts -------------------- Commit message for microsoft/vscode-python@34c54f4: No longer install the Jupyter extension by default (microsoft/vscode-python#20218) For microsoft/vscode-python#18073 --------- Co-authored-by: Brett Cannon <brett@python.org> -------------------- Commit message for microsoft/vscode-python@8d8784f: Fix diagnostic to use "System32" instead of "SystemRoot" (microsoft/vscode-python#20937) For microsoft/vscode-python#16692 Follow up to microsoft/vscode-python#20927 -------------------- Commit message for microsoft/vscode-python@ef6511e: Fix telemetry when updating pip (microsoft/vscode-python#20903) @luabud This PR adds a minor telemetry change to create environment. There is a new telemetry point indicating pip upgrade. -------------------- Commit message for microsoft/vscode-python@b208384: Add diagnostic to validate ComSpec (microsoft/vscode-python#20927) Closes microsoft/vscode-python#16692 -------------------- Commit message for microsoft/vscode-python@5fd9f97: Update main to next pre-release (microsoft/vscode-python#20928) -------------------- Commit message for microsoft/vscode-python@6e31c6a: Update version of main to release candidate (microsoft/vscode-python#20923) -------------------- Commit message for microsoft/vscode-python@d809af4: Use new formatter install prompt on missing formatter (microsoft/vscode-python#20904) -------------------- Commit message for microsoft/vscode-python@43a21a2: Remove HTTP Client usage (microsoft/vscode-python#20922) This is addressing an internal CG issue. -------------------- Commit message for microsoft/vscode-python@5f9be4e: Make sure we delay start pylance server (microsoft/vscode-python#20910) fixes microsoft/vscode-python#20909 Activating `pylance` extension inside of `python` extension cause a dead lock since they have circular dependency. now we make sure we activate `pylance` once `python` extension is activated. `node` already works this way. it is just browser extension that started `pylance` inside `activate` directly. -------------------- Commit message for microsoft/vscode-python@be55c97: Adjust a few strings that mention Python (microsoft/vscode-python#20900) For microsoft/vscode-python#20899 (+ a few other strings I thought could use some tweaking too) -------------------- Commit message for microsoft/vscode-python@61f93c3: Fix title and placeholder for python selection when using create env command (microsoft/vscode-python#20896) Closes microsoft/vscode-python#19891 ![image](https://user-images.githubusercontent.com/3840081/227031948-de595993-80e1-43a0-8dd8-658848c6b3d5.png) -------------------- Commit message for microsoft/vscode-python@01e798a: Share telemetry from core extension. (microsoft/vscode-python#20893) it turns out the new telemetry API removed a way to set extension id and version when telemetry reporter is created and it implicitly sets from extension reporter is created. the same way how LSP client is working. since we want to keep using the same extension id and etc for our telemetry, we need the reporter created from core ext. -------------------- Commit message for microsoft/vscode-python@807b9fe: Add create environment button to `requirements.txt` and `pyproject.toml` files (microsoft/vscode-python#20879) Closes microsoft/vscode-python#20812 Related microsoft/vscode-python#20133 -------------------- Commit message for microsoft/vscode-python@730df28: Add GDPR tag to new telemetry property (microsoft/vscode-python#20871) -------------------- Commit message for microsoft/vscode-python@a6ac385: Bump webpack from 5.70.0 to 5.76.0 (microsoft/vscode-python#20856) Bumps [webpack](https://github.com/webpack/webpack) from 5.70.0 to 5.76.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p> <blockquote> <h2>v5.76.0</h2> <h2>Bugfixes</h2> <ul> <li>Avoid cross-realm object access by <a href="https://github.com/Jack-Works"><code>@Jack-Works</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16500">webpack/webpack#16500</a></li> <li>Improve hash performance via conditional initialization by <a href="https://github.com/lvivski"><code>@lvivski</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16491">webpack/webpack#16491</a></li> <li>Serialize <code>generatedCode</code> info to fix bug in asset module cache restoration by <a href="https://github.com/ryanwilsonperkin"><code>@ryanwilsonperkin</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16703">webpack/webpack#16703</a></li> <li>Improve performance of <code>hashRegExp</code> lookup by <a href="https://github.com/ryanwilsonperkin"><code>@ryanwilsonperkin</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16759">webpack/webpack#16759</a></li> </ul> <h2>Features</h2> <ul> <li>add <code>target</code> to <code>LoaderContext</code> type by <a href="https://github.com/askoufis"><code>@askoufis</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16781">webpack/webpack#16781</a></li> </ul> <h2>Security</h2> <ul> <li><a href="https://github.com/advisories/GHSA-3rfm-jhwj-7488">CVE-2022-37603</a> fixed by <a href="https://github.com/akhilgkrishnan"><code>@akhilgkrishnan</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16446">webpack/webpack#16446</a></li> </ul> <h2>Repo Changes</h2> <ul> <li>Fix HTML5 logo in README by <a href="https://github.com/jakebailey"><code>@jakebailey</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16614">webpack/webpack#16614</a></li> <li>Replace TypeScript logo in README by <a href="https://github.com/jakebailey"><code>@jakebailey</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16613">webpack/webpack#16613</a></li> <li>Update actions/cache dependencies by <a href="https://github.com/piwysocki"><code>@piwysocki</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/16493">webpack/webpack#16493</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Jack-Works"><code>@Jack-Works</code></a> made their first contribution in <a href="https://redirect.github.com/webpack/webpack/pull/16500">webpack/webpack#16500</a></li> <li><a href="https://github.com/lvivski"><code>@lvivski</code></a> made their first contribution in <a href="https://redirect.github.com/webpack/webpack/pull/16491">webpack/webpack#16491</a></li> <li><a href="https://github.com/jakebailey"><code>@jakebailey</code></a> made their first contribution in <a href="https://redirect.github.com/webpack/webpack/pull/16614">webpack/webpack#16614</a></li> <li><a href="https://github.com/akhilgkrishnan"><code>@akhilgkrishnan</code></a> made their first contribution in <a href="https://redirect.github.com/webpack/webpack/pull/16446">webpack/webpack#16446</a></li> <li><a href="https://github.com/ryanwilsonperkin"><code>@ryanwilsonperkin</code></a> made their first contribution in <a href="https://redirect.github.com/webpack/webpack/pull/16703">webpack/webpack#16703</a></li> <li><a href="https://github.com/piwysocki"><code>@piwysocki</code></a> made their first contribution in <a href="https://redirect.github.com/webpack/webpack/pull/16493">webpack/webpack#16493</a></li> <li><a href="https://github.com/askoufis"><code>@askoufis</code></a> made their first contribution in <a href="https://redirect.github.com/webpack/webpack/pull/16781">webpack/webpack#16781</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/webpack/webpack/compare/v5.75.0...v5.76.0">https://github.com/webpack/webpack/compare/v5.75.0...v5.76.0</a></p> <h2>v5.75.0</h2> <h1>Bugfixes</h1> <ul> <li><code>experiments.*</code> normalize to <code>false</code> when opt-out</li> <li>avoid <code>NaN%</code></li> <li>show the correct error when using a conflicting chunk name in code</li> <li>HMR code tests existance of <code>window</code> before trying to access it</li> <li>fix <code>eval-nosources-*</code> actually exclude sources</li> <li>fix race condition where no module is returned from processing module</li> <li>fix position of standalong semicolon in runtime code</li> </ul> <h1>Features</h1> <ul> <li>add support for <code>@import</code> to extenal CSS when using experimental CSS in node</li> <li>add <code>i64</code> support to the deprecated WASM implementation</li> </ul> <h1>Developer Experience</h1> <ul> <li>expose <code>EnableWasmLoadingPlugin</code></li> <li>add more typings</li> <li>generate getters instead of readonly properties in typings to allow overriding them</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/webpack/commit/97b1718720c33f1b17302a74c5284b01e02ec001"><code>97b1718</code></a> Merge pull request <a href="https://redirect.github.com/webpack/webpack/issues/16781">#16781</a> from askoufis/loader-context-target-type</li> <li><a href="https://github.com/webpack/webpack/commit/b84efe6224b276bf72e4c5e2f4e76acddfaeef07"><code>b84efe6</code></a> Merge pull request <a href="https://redirect.github.com/webpack/webpack/issues/16759">#16759</a> from ryanwilsonperkin/real-content-hash-regex-perf</li> <li><a href="https://github.com/webpack/webpack/commit/c98e9e001441b165c7ed4845700839730b505833"><code>c98e9e0</code></a> Merge pull request <a href="https://redirect.github.com/webpack/webpack/issues/16493">#16493</a> from piwysocki/patch-1</li> <li><a href="https://github.com/webpack/webpack/commit/5f34acfbc074da6cc09f48944d7f2b4273ffb3f8"><code>5f34acf</code></a> feat: Add <code>target</code> to <code>LoaderContext</code> type</li> <li><a href="https://github.com/webpack/webpack/commit/b7fc4d876deb958d7ee81ecc00a312e39a354a44"><code>b7fc4d8</code></a> Merge pull request <a href="https://redirect.github.com/webpack/webpack/issues/16703">#16703</a> from ryanwilsonperkin/ryanwilsonperkin/fix-16160</li> <li><a href="https://github.com/webpack/webpack/commit/63ea82da4d4e4242b6a6285fc937f0684f264fe8"><code>63ea82d</code></a> Merge branch 'webpack:main' into patch-1</li> <li><a href="https://github.com/webpack/webpack/commit/4ba225225b1348c8776ca5b5fe53468519413bc0"><code>4ba2252</code></a> Merge pull request <a href="https://redirect.github.com/webpack/webpack/issues/16446">#16446</a> from akhilgkrishnan/patch-1</li> <li><a href="https://github.com/webpack/webpack/commit/1acd6350be3d74d4ac70b64cbbc60f27724b618b"><code>1acd635</code></a> Merge pull request <a href="https://redirect.github.com/webpack/webpack/issues/16613">#16613</a> from jakebailey/ts-logo</li> <li><a href="https://github.com/webpack/webpack/commit/302eb37fe19ed7ca60eaf895aca4f9da9dfd7931"><code>302eb37</code></a> Merge pull request <a href="https://redirect.github.com/webpack/webpack/issues/16614">#16614</a> from jakebailey/html5-logo</li> <li><a href="https://github.com/webpack/webpack/commit/cfdb1dfe59b33bf7441b8a8e4fc58d75e4f54cee"><code>cfdb1df</code></a> Improve performance of hashRegExp lookup</li> <li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.70.0...v5.76.0">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~evilebottnawi">evilebottnawi</a>, a new releaser for webpack since your current version.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack&package-manager=npm_and_yarn&previous-version=5.70.0&new-version=5.76.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-python/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> -------------------- Commit message for microsoft/vscode-python@3269137: Finalize Python Environment API (microsoft/vscode-python#20868) -------------------- Commit message for microsoft/vscode-python@00ce6d0: Update text shown in formatter install prompt (microsoft/vscode-python#20869) -------------------- Commit message for microsoft/vscode-python@d16568e: Ensure `resolveEnvironment` API resolves the latest details for conda envs without python (microsoft/vscode-python#20862) Closes microsoft/vscode-python#20765 Change `resolveEnvironment` API to validate cache for conda envs without python before using it, it also making sure we fire a update event after resolving it and adding it to cache. -------------------- Commit message for microsoft/vscode-python@7ee3f7d: Show prompt asking user to install formatter extension (microsoft/vscode-python#20861) For microsoft/vscode-python#19653 -------------------- Commit message for microsoft/vscode-python@b9c4ff7: Update walkthrough title (microsoft/vscode-python#20857) For consistency with other language extensions -------------------- Commit message for microsoft/vscode-python@1668d06: Made browser to expose pylance api. (microsoft/vscode-python#20847) This will let pylance to create LS Client on browser -------------------- Commit message for microsoft/vscode-python@0735876: Share output channel with pylance (microsoft/vscode-python#20833) Make sure `pylance` and `jedi` share the same output channel. -------------------- Commit message for microsoft/vscode-python@2cd2092: Fixed a bug where pylance not working on interactive window. (microsoft/vscode-python#20831) https://github.com/microsoft/vscode-python/pull/20816/files#diff-ba59d9ca0a087381d63119a88751fdc7c0aa07e6a10e772d3aefd4c10aa36fcfL47 this should have changed to return `false` rather than deleting since it would have been always return `false`. deleting effectively made it to have the same effect as always returning `true` follow up PR of microsoft/vscode-python#20816 -------------------- Commit message for microsoft/vscode-python@d3dd832: Expose client creation API for pylance (microsoft/vscode-python#20816) If new client change is available in pylance, made core extension to use pylance to do language server lifetime management. and also this PR removes all old notebook experiences so that it is inline with pylance (pylance already removed all those when moving client/middleware) -------------------- Commit message for microsoft/vscode-python@b897300: Restart reason telemetry event for `pylance` (microsoft/vscode-python#20821) Closes microsoft/vscode-python#19626 -------------------- Commit message for microsoft/vscode-python@8a80ebe: Add experiment to implicitly use environment variables for environment activation (microsoft/vscode-python#20651) -------------------- Commit message for microsoft/vscode-python@7aac96a: Fix typo with `clientOS` (microsoft/vscode-python#20819) -------------------- Commit message for microsoft/vscode-python@e9ff78d: Set clientOS debug option (microsoft/vscode-python#20805) Closed: microsoft/vscode-python#20407 -------------------- Commit message for microsoft/vscode-python@467823d: Add option to control if environment is selected after creation (microsoft/vscode-python#20738) For: microsoft/vscode-python#20270 @DonJayamanne This PR adds a field to the options that should allow you to skip environment selection. -------------------- Commit message for microsoft/vscode-python@672d07e: Do not use `-I` flag in case we're unable to find `encodings` module when validating python (microsoft/vscode-python#20803) Closes microsoft/vscode-python#20793 -------------------- Commit message for microsoft/vscode-python@2442dfb: Add logging which could help indicate why `Discovering Python Interpreters...` never finishes (microsoft/vscode-python#20792) For microsoft/vscode-python#20250 -------------------- Commit message for microsoft/vscode-python@e8303bb: Fix ability to recognize extensions which access environment API (microsoft/vscode-python#20791) Follow up from microsoft/vscode-python#20222. Apparently `setTimeout` changed the stack in such a way that we were unable to recognize which extension called the API: ``` [DEBUG 2023-2-2 16:21:9.641]: Extension unknown accessed getActiveEnvironmentPath with args: undefined ``` Reverting the change. -------------------- Commit message for microsoft/vscode-python@ee8e80e: Improve getting started experience when starting on a fresh macOS (microsoft/vscode-python#20789) Closes microsoft/vscode-python#20635 - Suggest to install from `python.org` if brew is not available - Do not suggest irrelevant prompts -------------------- Commit message for microsoft/vscode-python@16c0437: Update description of `python.terminal.activateEnvironment` setting (microsoft/vscode-python#20788) -------------------- Commit message for microsoft/vscode-python@54e37fe: Update README.md for isort changes (microsoft/vscode-python#20787) Updating the README to reflect isort not being installed by default -------------------- Commit message for microsoft/vscode-python@32c10e4: Add verbose logging for change events fired related to envs (microsoft/vscode-python#20780) For microsoft/vscode-python#20292 -------------------- Commit message for microsoft/vscode-python@be75eb2: Ensure both `python` and `pythonPath` are not set when resolving config. (microsoft/vscode-python#20781) Fixes microsoft/vscode-python#20655 -------------------- Commit message for microsoft/vscode-python@a5005f6: Ensure picker returns array only if multi-select is enabled (microsoft/vscode-python#20772) Fixes microsoft/vscode-python#20768 -------------------- Commit message for microsoft/vscode-python@c5e6378: Update main to next pre-release (microsoft/vscode-python#20764) -------------------- Commit message for microsoft/vscode-python@7c31a5e: Updating version for release candidate. (microsoft/vscode-python#20762) -------------------- Commit message for microsoft/vscode-python@e624eff: Make sure conda activate is used for micromamba (microsoft/vscode-python#20760) Closes microsoft/vscode-python#20756 -------------------- Commit message for microsoft/vscode-python@29bee00: Fix debugger attach to process when running on WSL (microsoft/vscode-python#20741) Possible fix for microsoft/vscode-python#16921 Closes microsoft/vscode-python#16921 BTW you folks should probably ask GitHub support to eject this repo from their original repository (so it stops being a fork and has its own network on GH) -------------------- Commit message for microsoft/vscode-python@e9dba6c: Bump typing-extensions from 4.4.0 to 4.5.0 (microsoft/vscode-python#20704) Bumps [typing-extensions](https://github.com/python/typing_extensions) from 4.4.0 to 4.5.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python/typing_extensions/blob/main/CHANGELOG.md">typing-extensions's changelog</a>.</em></p> <blockquote> <h1>Release 4.5.0 (February 14, 2023)</h1> <ul> <li>Runtime support for PEP 702, adding <code>typing_extensions.deprecated</code>. Patch by Jelle Zijlstra.</li> <li>Add better default value for TypeVar <code>default</code> parameter, PEP 696. Enables runtime check if <code>None</code> was passed as default. Patch by Marc Mueller (<a href="https://github.com/cdce8p"><code>@cdce8p</code></a>).</li> <li>The <code>@typing_extensions.override</code> decorator now sets the <code>.__override__</code> attribute. Patch by Steven Troxler.</li> <li>Fix <code>get_type_hints()</code> on cross-module inherited <code>TypedDict</code> in 3.9 and 3.10. Patch by Carl Meyer.</li> <li>Add <code>frozen_default</code> parameter on <code>dataclass_transform</code>. Patch by Erik De Bonte.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python/typing_extensions/commit/8dcd89993c3926d6c704232b9c56160447fa81fe"><code>8dcd899</code></a> Prepare release 4.5.0 (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/116">#116</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/e81cb8289874d6a6715675d77df88db033824e0d"><code>e81cb82</code></a> PEP 702: Runtime warnings (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/112">#112</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/1039bb2730e62e9763b8fd1d6a19ddd6bb0b6fe4"><code>1039bb2</code></a> fix PEP 702 link in the <code>README.md</code> (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/108">#108</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/673e5ceea32f77d90531d4d5e77a7694edba7fba"><code>673e5ce</code></a> Add <a href="https://github.com/typing"><code>@typing</code></a>_extensions.deprecated (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/105">#105</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/27646ecba87fe518566db3d6b970574ad8df2490"><code>27646ec</code></a> Fix tests on Python 3.11 (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/106">#106</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/57226b4fb64a5d9f4788e74fe3799d98fe02026b"><code>57226b4</code></a> Add <code>frozen_default</code> parameter on <code>dataclass_transform</code> (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/101">#101</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/0ea104bc37bd8f85246d48c7f6c7642f25771498"><code>0ea104b</code></a> Expand the pyproject.toml sdist include expression to include src/_typed_dict...</li> <li><a href="https://github.com/python/typing_extensions/commit/93ac93b58f23a2b7e4450cbe8819f5a36d319af7"><code>93ac93b</code></a> CI: test on Ubuntu-20.04, not Ubuntu-2004 (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/100">#100</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/5f9258d1efd5d8e4900ffc23ba2486240f2a2f35"><code>5f9258d</code></a> Test on Ubuntu 20.04</li> <li><a href="https://github.com/python/typing_extensions/commit/ad3966ddabe9adcbf2e76d88a7cf984fa9cb4237"><code>ad3966d</code></a> Replace type comments with annotations (<a href="https://github-redirect.dependabot.com/python/typing_extensions/issues/98">#98</a>)</li> <li>Additional commits viewable in <a href="https://github.com/python/typing_extensions/compare/4.4.0...4.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typing-extensions&package-manager=pip&previous-version=4.4.0&new-version=4.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> -------------------- Commit message for microsoft/vscode-python@35be3c2: Ensure escape on TOML and requirements is treated as cancel. (microsoft/vscode-python#20739) -------------------- Commit message for microsoft/vscode-python@5d9bc1e: Tag Pylance settings properties for GDPR (microsoft/vscode-python#20745) -------------------- Commit message for microsoft/vscode-python@70716f0: Add description for `python.experiment` settings values (microsoft/vscode-python#20751) -------------------- Commit message for microsoft/vscode-python@7b488a9: Point to Python v3.11 instead of Python v3.10 when opening windows store (microsoft/vscode-python#20742) Closes microsoft/vscode-python#20736 Lead-authored-by: Karthik Nadig <kanadig@microsoft.com> Co-authored-by: Courtney Webster <60238438+cwebster-99@users.noreply.github.com> Co-authored-by: Jonathan Cardoso <me@jonathancardoso.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: paulacamargo25 <paulitacv25@gmail.com> Co-authored-by: Pete Farland <pete.farland@posit.co> Co-authored-by: Heejae Chang <1333179+heejaechang@users.noreply.github.com> Co-authored-by: Luciana Abud <45497113+luabud@users.noreply.github.com> Co-authored-by: Kartik Raj <karraj@microsoft.com> Signed-off-by: GitHub <noreply@github.com>
Fixes #20221
@karrtikr Please feel free to make necessary changes to this PR to get this through the tests.