Merged PR posit-dev/positron-python#14: Merge upstream of vscode python main Merge pull request #14 from posit-dev/merge_upstream Merge upstream of vscode python main -------------------- Commit message for posit-dev/positron-python@098389e026b7e405b604b0c9184346901bb44077: Ignore package-lock.json in favor of yarn -------------------- Commit message for posit-dev/positron-python@65bbcb1fe923cb9e110669c5fc048870a9ebfe59: Merge remote-tracking branch 'upstream/main' -------------------- Commit message for microsoft/vscode-python@04753c4d8c5f0443f57c69ad2a4fcfe4df07c740: Ensure editable install is triggered if `pyproject.toml` is found. (microsoft/vscode-python#20572) No-changelog because this feature is not in stable yet. -------------------- Commit message for microsoft/vscode-python@80ef35f7e1e83ffec09e5475c492fe8beaaad12b: Log as error in case we're unable to detect the active terminal shell type (microsoft/vscode-python#20545) -------------------- Commit message for microsoft/vscode-python@34414c8ef6ef9fd24986eeb3f5856fd370bf397d: Remove telemetry proposal + implicit activations (microsoft/vscode-python#20542) Removes the telemetryLogger proposal as it is finalized. Also removes the command activation events as vscode now automatically generates though so that information is redudant. Co-authored-by: Brett Cannon -------------------- Commit message for microsoft/vscode-python@fe40195db24a0f5d574b6744218cc472b2a36fa6: Switch to a different toml library. (microsoft/vscode-python#20544) -------------------- Commit message for microsoft/vscode-python@e9edfc01435ed37699c75b56c2681e4475f86861: Detect if VSCode is launched from an activated environment and select it (microsoft/vscode-python#20526) Closes https://github.com/microsoft/vscode-python/issues/10668 In case of base conda environments, show a prompt to select it instead, as getting configs is required in that case which can take time. -------------------- Commit message for microsoft/vscode-python@bebf05da6f5e7f29f3b41e4827743004612ca220: Create env shows requirements files or `pyproject.toml` extras when available (microsoft/vscode-python#20524) Closes https://github.com/microsoft/vscode-python/issues/20277 Closes https://github.com/microsoft/vscode-python/issues/20278 -------------------- Commit message for microsoft/vscode-python@c545a366318b0852b970703b8da8c9ffe65d86bf: Add GDPR tag for new pylance property (microsoft/vscode-python#20501) `packages` has become `packagesBitArray` -------------------- Commit message for microsoft/vscode-python@e92c1248b138a6eb2914a2392ffc1d1cce715edf: Update to new l10n (microsoft/vscode-python#20484) Following https://github.com/microsoft/vscode-engineering/wiki/Extensions-Localization This onboards vscode-python to the new localization API which enables localization for the web. It's a large PR ... but pretty boring since it's just replacing one syntax with another. Co-authored-by: Tyler Leonhardt -------------------- Commit message for microsoft/vscode-python@0f4e6ae49df32113ed5672ae6fd85f7a2bc16ecb: Stop suggesting the MS Python Discord server for help (microsoft/vscode-python#20499) -------------------- Commit message for microsoft/vscode-python@f7d732eb244755de21b1526679774671adca0d4a: Bump json5 from 2.2.1 to 2.2.3 (microsoft/vscode-python#20448) Bumps [json5](https://github.com/json5/json5) from 2.2.1 to 2.2.3.

Release notes

Sourced from json5's releases.

v2.2.3

Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

Commits

c3a7524 2.2.3
94fd06d docs: update CHANGELOG for v2.2.3
3b8cebf docs(security): use GitHub security advisories
f0fd9e1 docs: publish a security policy
6a91a05 docs(template): bug -> bug report
14f8cb1 2.2.2
10cc7ca docs: update CHANGELOG for v2.2.2
7774c10 fix: add proto to objects and arrays
edde30a Readme: slight tweak to intro
97286f8 Improve example in readme
Additional commits viewable in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=json5&package-manager=npm_and_yarn&previous-version=2.2.1&new-version=2.2.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/vscode-python/network/alerts).

Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> -------------------- Commit message for microsoft/vscode-python@b7e949009455ec23521a7ab63f1a11d1e2b0c906: Bump mheap/github-action-required-labels from 2 to 3 (microsoft/vscode-python#20447) Bumps [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels) from 2 to 3.

Release notes

Sourced from mheap/github-action-required-labels's releases.

v3

Tag that always points to the latest commit in the v3.x.x series of releases

v3.0.0

What's Changed

Switch to using @actions/core by @mheap in mheap/github-action-required-labels#44

Custom messages by @mheap in mheap/github-action-required-labels#46

Bump json5 from 2.2.1 to 2.2.2 by @dependabot in mheap/github-action-required-labels#45

Full Changelog: https://github.com/mheap/github-action-required-labels/compare/v2.2.3...v3.0.0

v2.2.3

What's Changed

Fix add_comment input by @mheap in mheap/github-action-required-labels#40

Full Changelog: https://github.com/mheap/github-action-required-labels/compare/v2.2.2...v2.2.3

v2.2.2

What's Changed

Update action.yml by @jeff-miller-cfa in mheap/github-action-required-labels#37

Bump @actions/core from 1.2.6 to 1.9.1 by @dependabot in mheap/github-action-required-labels#34

Full Changelog: https://github.com/mheap/github-action-required-labels/compare/v2.2.1...v2.2.2

v2.2.1

Adding node16 support

v2.2.0

What's Changed

Add comment on failure by @mheap in mheap/github-action-required-labels#36

Full Changelog: https://github.com/mheap/github-action-required-labels/compare/v2.1.0...v2.2.0

v2.1.0

What's Changed

Add support for output status by @mheap in mheap/github-action-required-labels#32

Full Changelog: https://github.com/mheap/github-action-required-labels/compare/v2.0.1...v2.1.0

v2.0.1

What's Changed

Update action.yml by @yannickm95 in mheap/github-action-required-labels#30

New Contributors

@yannickm95 made their first contribution in mheap/github-action-required-labels#30

Full Changelog: https://github.com/mheap/github-action-required-labels/compare/v2.0.0...v2.0.1

Commits

179af84 Automatic compilation
e49d4be Bump json5 from 2.2.1 to 2.2.2
6008ef3 Add ability to customise comment / error message
43f0d74 Bump README to v3
6831eb2 Move from actions-toolkit to @actions/core
See full diff in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mheap/github-action-required-labels&package-manager=github_actions&previous-version=2&new-version=3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---

Dependabot commands and options

Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> -------------------- Commit message for microsoft/vscode-python@074ffb60de55b27285262f7968f7ddaa75b600ef: Re-revert "Update to proposed telemetry logger" (microsoft/vscode-python#20482) The telemetry issue has been fixed by https://github.com/microsoft/vscode/pull/170740, so we're re-reverting the changes. -------------------- Commit message for microsoft/vscode-python@90cb8296d6f139102850c087c3dfd83bb15399ad: Make auto indent depend on formatOnType setting value (microsoft/vscode-python#20480) For https://github.com/microsoft/vscode-python/issues/20479 -------------------- Commit message for microsoft/vscode-python@e6b27521746af44e26f054122c0f22efbf80ce73: Update debugpy to 1.6.5 (microsoft/vscode-python#20477) -------------------- Commit message for microsoft/vscode-python@e8e7d8899bb3093895408cc3480d8d5393aad3d9: Revert "Update to proposed telemetry logger" (microsoft/vscode-python#20469) This reverts commit 03e53538955e58a0e7f3f2cce144c4398483815b. To temporarily fix telemetry issues. Co-authored-by: Brett Cannon -------------------- Commit message for microsoft/vscode-python@2211996979342e5cd9bb31a7ca0ece637779da18: Make sure we do not use or execute the default `python` on `PATH` if there is any other known interpreter (microsoft/vscode-python#20457) -------------------- Commit message for microsoft/vscode-python@4e1f79c08e0497bcaca725e400cd9e407d2dcfa9: Bump the major version to 2023 (microsoft/vscode-python#20465) For microsoft/vscode-python#20456 -------------------- Commit message for microsoft/vscode-python@f6a0d456c99c1eac8e9564f14823752397d600e0: Bump extension/telemetry dependency version (microsoft/vscode-python#20462) Corresponds to https://github.com/microsoft/vscode/commit/4acf2d9b46b75748ae687cf3b2952a0799679873 . Closes microsoft/vscode-python#20456 -------------------- Commit message for microsoft/vscode-python@9461f4abc43e0e75f6a6b6eac3f3e83d3b294bd9: Enables successful running of python file even when parentheses are present in the path (microsoft/vscode-python#20414) -------------------- Commit message for microsoft/vscode-python@32f55109c976e66bf39e8da6aae0c9b6f5115df2: Do not remove envs which are provided by the consumer (microsoft/vscode-python#20424) For https://github.com/microsoft/vscode-python/issues/20292 We currently remove environments from cache which aren't part of the latest discovery run. This is not correct as consumers can still select envs not reported by discovery run, which we shouldn't remove. -------------------- Commit message for microsoft/vscode-python@65cf0fbb88ad839f1f41e5dc16fad0086f9cc871: Drop telemetry CI (microsoft/vscode-python#20393) Downloading the ripgrep dependency is a bit flaky. Part of microsoft/vscode-python#20390 -------------------- Commit message for microsoft/vscode-python@6d0aaa7fc577d3b1fbe7352ba37d9df0e39c441a: Add description on hover to interpreter status bar item (microsoft/vscode-python#20411) Closes https://github.com/microsoft/vscode-python/issues/16480 -------------------- Commit message for microsoft/vscode-python@804e65608f4d2a1a3b6e0bb7cde3aeefa6757340: Update link to A/B experiments description (microsoft/vscode-python#20409) Closes https://github.com/microsoft/vscode-python/issues/15635 -------------------- Commit message for microsoft/vscode-python@2d4f34ad1712f6a201d7c1056349de8606caed1a: Use isolated flag when gathering environment information (microsoft/vscode-python#20403) Closes https://github.com/microsoft/vscode-python/issues/20382 -------------------- Commit message for microsoft/vscode-python@5b7e040886defce82a363d714f60a2d25f9e9fa1: Stop asking which package manager to use for installing tools (microsoft/vscode-python#20405) Closes https://github.com/microsoft/vscode-python/issues/11739 -------------------- Commit message for microsoft/vscode-python@5b6c99b08108aee8eca8a8e0d7043427067f4812: Remove poetry watcher (microsoft/vscode-python#20404) Closes https://github.com/microsoft/vscode-python/issues/17087 -------------------- Commit message for microsoft/vscode-python@5e83629cae7cd408fdba483513d00a05e13fb995: Update release_plan.md (microsoft/vscode-python#20351) went through and made edits to try and help clarify the release process and all the different branches and PRs that we are creating/keeping track of in this process. Thanks! Co-authored-by: Brett Cannon Co-authored-by: Kartik Raj -------------------- Commit message for microsoft/vscode-python@1bf055880019e42a0cf2eca3307925846016f5fc: Bump VS Code engine in `package.json` (microsoft/vscode-python#20392) Accidentally left out of https://github.com/microsoft/vscode-python/commit/cb124e7b408af2afa3e074e541ddf8c09b95e2ff . As it pertains to a change made in VS Code insiders today, we are setting the engine to a specific date. This requires updating the `getChannel()` code, so took the opportunity to factor it out. -------------------- Commit message for microsoft/vscode-python@cb124e7b408af2afa3e074e541ddf8c09b95e2ff: Update telemetry package (microsoft/vscode-python#20388) There has been breaking changes in the proposed telemetry surface so we must update the package to prevent breaking the python extension -------------------- Commit message for microsoft/vscode-python@07e334af8ad631da01c21ce339366f907006520c: Display user friendly path when displaying create environment notification (microsoft/vscode-python#20387) Closes https://github.com/microsoft/vscode-python/issues/19934 -------------------- Commit message for microsoft/vscode-python@e72ca977f52b063a56c1408978e2fee401d566cb: Use `uniqueItems` for settings (microsoft/vscode-python#20375) Leaves string arrays alone that are used as arguments to external tools as we can't know if unique values are valid or not. Closes microsoft/vscode-python#7881 -------------------- Commit message for microsoft/vscode-python@69e9625b84788bcb319e3b232bcffd9b7834fecd: Stop installing pre-release version of black when using poetry or pipenv environments (microsoft/vscode-python#20381) Release version is now available on pypi, so this should no longer be needed. Closes https://github.com/microsoft/vscode-python/issues/10696 -------------------- Commit message for microsoft/vscode-python@118643290db172566b145bd14cb3ab08c0c9cf86: Merge `release/2022.20` into `main` (microsoft/vscode-python#20374) Co-authored-by: Eleanor Boyd -------------------- Commit message for microsoft/vscode-python@15b9815a30c1483f5913b56c788f8de061cd521d: Remove `python.pythonPath` deprecation prompt (microsoft/vscode-python#20371) Closes https://github.com/microsoft/vscode-python/issues/20340 -------------------- Commit message for microsoft/vscode-python@32ab2f1e3bb8bf6e9998a493238cc099eddda034: Do not allow use of discovery API in an untrusted workspace (microsoft/vscode-python#20372) -------------------- Commit message for microsoft/vscode-python@eb66e81f0b053d1f499f8be14ba613f53c069860: Re-register API for jupyter integration once trust is granted (microsoft/vscode-python#20370) Closes https://github.com/microsoft/vscode-python/issues/20261 -------------------- Commit message for microsoft/vscode-python@2afda3f3f03f31646e2464c78c5e0120aa156a2a: Bump qs from 6.5.2 to 6.5.3 (microsoft/vscode-python#20332) Bumps [qs](https://github.com/ljharb/qs) from 6.5.2 to 6.5.3.

Changelog

Sourced from qs's changelog.

6.5.3

[Fix] parse: ignore __proto__ keys (#428)

[Fix] utils.merge`: avoid a crash with a null target and a truthy non-array source

[Fix] correctly parse nested arrays

[Fix] stringify: fix a crash with strictNullHandling and a custom filter/serializeDate (#279)

[Fix] utils: merge: fix crash when source is a truthy primitive & no options are provided

[Fix] when parseArrays is false, properly handle keys ending in []

[Fix] fix for an impossible situation: when the formatter is called with a non-string value

[Fix] utils.merge: avoid a crash with a null target and an array source

[Refactor] utils: reduce observable [[Get]]s

[Refactor] use cached Array.isArray

[Refactor] stringify: Avoid arr = arr.concat(...), push to the existing instance (#269)

[Refactor] parse: only need to reassign the var once

[Robustness] stringify: avoid relying on a global undefined (#427)

[readme] remove travis badge; add github actions/codecov badges; update URLs

[Docs] Clean up license text so it’s properly detected as BSD-3-Clause

[Docs] Clarify the need for "arrayLimit" option

[meta] fix README.md (#399)

[meta] add FUNDING.yml

[actions] backport actions from main

[Tests] always use String(x) over x.toString()

[Tests] remove nonexistent tape option

[Dev Deps] backport from main

Commits

298bfa5 v6.5.3
ed0f5dc [Fix] parse: ignore __proto__ keys (#428)
691e739 [Robustness] stringify: avoid relying on a global undefined (#427)
1072d57 [readme] remove travis badge; add github actions/codecov badges; update URLs
12ac1c4 [meta] fix README.md (#399)
0338716 [actions] backport actions from main
5639c20 Clean up license text so it’s properly detected as BSD-3-Clause
51b8a0b add FUNDING.yml
45f6759 [Fix] fix for an impossible situation: when the formatter is called with a no...
f814a7f [Dev Deps] backport from main
Additional commits viewable in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=qs&package-manager=npm_and_yarn&previous-version=6.5.2&new-version=6.5.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---

Dependabot commands and options

Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Eleanor Boyd Co-authored-by: Brett Cannon -------------------- Commit message for microsoft/vscode-python@a30b7711847f83fa5b9d8c7a0cda436b2c5968a5: Bump dessant/lock-threads from 3 to 4 (microsoft/vscode-python#20318) Bumps [dessant/lock-threads](https://github.com/dessant/lock-threads) from 3 to 4.

Release notes

Sourced from dessant/lock-threads's releases.

v4.0.0

Learn more about this release from the changelog.

Changelog

Sourced from dessant/lock-threads's changelog.

4.0.0 (2022-12-04)

⚠ BREAKING CHANGES

the action now requires Node.js 16

Bug Fixes

update dependencies (38e9185)

update docs (32986e2)

3.0.0 (2021-09-27)

⚠ BREAKING CHANGES

input parameter names have changed

Rename the following input parameters when upgrading from v2 to v3:

issue-lock-inactive-days --> issue-inactive-days

issue-exclude-created-before --> exclude-issue-created-before

issue-exclude-labels --> exclude-any-issue-labels

issue-lock-labels --> add-issue-labels

issue-lock-comment --> issue-comment

pr-lock-inactive-days --> pr-inactive-days

pr-exclude-created-before --> exclude-pr-created-before

pr-exclude-labels --> exclude-any-pr-labels

pr-lock-labels --> add-pr-labels

pr-lock-comment --> pr-comment

Features

add new filtering and labeling options, update input parameter names (26fd836)

allow manual triggering (a0c7da3)

2.1.2 (2021-08-17)

Bug Fixes

ignore error when commenting on issue converted to discussion (60d2a1a), closes #24

2.1.1 (2021-07-09)

Bug Fixes

update GitHub API calls (a3ccc71)

... (truncated)

Commits

c1b35ae chore(release): 4.0.0
32986e2 fix: update docs
b677b85 chore: update workflows
dc42875 chore: update package
38e9185 fix: update dependencies
08e671b chore: add upgrade guide
See full diff in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dessant/lock-threads&package-manager=github_actions&previous-version=3&new-version=4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---

Dependabot commands and options

Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Eleanor Boyd Co-authored-by: Brett Cannon -------------------- Commit message for microsoft/vscode-python@3a2e9430af852742af09eb181bcc637335c7282e: Bump decode-uri-component from 0.2.0 to 0.2.2 (microsoft/vscode-python#20308) Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2.

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

Prevent overwriting previously decoded tokens 980e0bf

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2

v0.2.1

Switch to GitHub workflows 76abc93

Fix issue where decode throws - fixes #6 746ca5d

Update license (#1) 486d7e2

Tidelift tasks a650457

Meta tweaks 66e1c28

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1

Commits

a0eea46 0.2.2
980e0bf Prevent overwriting previously decoded tokens
3c8a373 0.2.1
76abc93 Switch to GitHub workflows
746ca5d Fix issue where decode throws - fixes #6
486d7e2 Update license (#1)
a650457 Tidelift tasks
66e1c28 Meta tweaks
See full diff in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=decode-uri-component&package-manager=npm_and_yarn&previous-version=0.2.0&new-version=0.2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---

Dependabot commands and options

Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Eleanor Boyd Co-authored-by: Brett Cannon -------------------- Commit message for microsoft/vscode-python@713cd4e0eff38dcc5cdd5b5656c7c4377e4a4670: Bump loader-utils from 2.0.3 to 2.0.4 (microsoft/vscode-python#20241) Bumps [loader-utils](https://github.com/webpack/loader-utils) from 2.0.3 to 2.0.4.

Release notes

Sourced from loader-utils's releases.

v2.0.4

2.0.4 (2022-11-11)

Bug Fixes

ReDoS problem (#225) (ac09944)

Changelog

Sourced from loader-utils's changelog.

2.0.4 (2022-11-11)

Bug Fixes

ReDoS problem (#225) (ac09944)

Commits

6688b50 chore(release): 2.0.4
ac09944 fix: ReDoS problem (#225)
See full diff in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=loader-utils&package-manager=npm_and_yarn&previous-version=2.0.3&new-version=2.0.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---

Dependabot commands and options

Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brett Cannon -------------------- Commit message for microsoft/vscode-python@b754904baa22c7a103a7d59c14e850033de04624: 2022.21.0 version bump (microsoft/vscode-python#20342) -------------------- Commit message for microsoft/vscode-python@88c5709d0f2bf94fcadd5507a3bc1e09394b0a5f: create RC for 2022.20 (microsoft/vscode-python#20328) -------------------- Commit message for microsoft/vscode-python@f9e98fc35f24bd48f4c7910e403f0864dc5d4bd0: Simplify launch debug (microsoft/vscode-python#20286) Closed: microsoft/vscode-python#19770 -------------------- Commit message for microsoft/vscode-python@71766e3385b09ed2902c4e44cb52734024fc9249: Upgrade debugpy to 1.6.4 (microsoft/vscode-python#20291) Also ship CPython 3.10 wheels instead of 3.9. -------------------- Commit message for microsoft/vscode-python@4ee6050b023716a1537240feb469c8db6f4b8b4e: Catch exceptions when changing `formatOnType` setting (microsoft/vscode-python#20285) -------------------- Commit message for microsoft/vscode-python@133a8e877aa3755eaf101f1f1edf446432770b40: Fix CI tests (microsoft/vscode-python#20273) Fix Ci test using the insiders version of vscode in tests. Remove old insider tests. -------------------- Commit message for microsoft/vscode-python@a2aa1fb9274ca6c515ca7c2fdea0f8df7f287198: Merge Getting Started walkthrough to include Create Environment Tile (microsoft/vscode-python#20258) Merging create environment tile into main walkthrough and deleted create environment walkthrough used in the experiment -------------------- Commit message for microsoft/vscode-python@a9e299f49c3ab8d9bdb5e16193e9e9098be11934: Drop the `-insiders` suffix from the VS Code engine (microsoft/vscode-python#20256) -------------------- Commit message for microsoft/vscode-python@9893a0cdd1b9465c9ae9b750705cd78ef8d3cc55: Bump VS Code engine to `1.74.0-insiders` (microsoft/vscode-python#20255) Closes microsoft/vscode-python#20247 -------------------- Commit message for microsoft/vscode-python@b8f9b1d3b453fbabf166ff6b4f9a54e0f08d1a17: Add button to open folder from venv failure message (microsoft/vscode-python#20243) Closes https://github.com/microsoft/vscode-python/issues/20242 cc/ @cwebster-99 -------------------- Commit message for microsoft/vscode-python@c78ef060810cc452a4b336787466479337627094: Notify Pylance on `jupyter.runStartupCommands` config change (microsoft/vscode-python#20237) -------------------- Commit message for microsoft/vscode-python@ad46fb3a5888804d39582fe044bfdf07ac3e5804: Show user deprecated message for unsupported Python versions when launching the debugger (microsoft/vscode-python#20172) Closed: https://github.com/microsoft/vscode-python/issues/19799 Closes https://github.com/microsoft/vscode-python/issues/19988 -------------------- Commit message for microsoft/vscode-python@78e136f52dcf45ed0c911065a6bc224195a5f8ad: Update to proposed telemetry logger (microsoft/vscode-python#20238) This updates to the proposed telemetry logger to gain support for output channels -------------------- Commit message for microsoft/vscode-python@9701c53ccf046c9dd2753f9ee2c2b538d63007b5: Remove DI from config launch (microsoft/vscode-python#20226) closed: https://github.com/microsoft/vscode-python/issues/19769 -------------------- Commit message for microsoft/vscode-python@ad0286c9c44884c6d43a7648b14ca69bec9ae989: Fix venv tests (microsoft/vscode-python#20230) Closes https://github.com/microsoft/vscode-python/issues/19859 -------------------- Commit message for microsoft/vscode-python@c70a0bccaac31a04b7c85080fc191f56f2192194: Update cached list of extensions correctly (microsoft/vscode-python#20229) -------------------- Commit message for microsoft/vscode-python@8fe4d0b9f687f6393a5e26687481df22602b4e50: Improve doc string for description of environment argument in API (microsoft/vscode-python#20223) Closes https://github.com/microsoft/vscode-python/issues/20220 -------------------- Commit message for microsoft/vscode-python@db5e96c68757e6f7fb981d1ec9481a4ebf29223a: Cache the value of `extensions.all` (microsoft/vscode-python#20222) Fixes microsoft/vscode-python#20221 @karrtikr Please feel free to make necessary changes to this PR to get this through the tests. Co-authored-by: Kartik Raj -------------------- Commit message for microsoft/vscode-python@29a72b4fca446eeb8629213f7128dd6cdb33e812: Extend scope of "python.tensorBoard.logDirectory" and support variable substitution (microsoft/vscode-python#20103) Fixes https://github.com/microsoft/vscode-jupyter/issues/8802 Credit: @PillarsZhang [patch-by-zhang](https://github.com/PillarsZhang/vscode-python/tree/patch-by-zhang) Co-authored-by: Evan Philip <107-ephilip@users.noreply.gitlab.pasqal.io> -------------------- Commit message for microsoft/vscode-python@f671b9bb7f932d465b2b9a7891185d89bf961ed9: Ensure we don't use the same interpreter for equally named project on different hosts (microsoft/vscode-python#20212) Closes https://github.com/microsoft/vscode-python/issues/19859 Include remote name in path keys for fetch interpreter setting value -------------------- Commit message for microsoft/vscode-python@f2ca5b9c4130e036c6c75835e5f61d9328aa7c44: Improve description for `python.terminal.focusAfterLaunch` setting (microsoft/vscode-python#20195) Closes https://github.com/microsoft/vscode-python/issues/19914 -------------------- Commit message for microsoft/vscode-python@885733e5a3c941e46f23bbb51f6f6a6c93c4bfd2: Bump loader-utils from 2.0.0 to 2.0.3 (microsoft/vscode-python#20177) Bumps [loader-utils](https://github.com/webpack/loader-utils) from 2.0.0 to 2.0.3.

Release notes

Sourced from loader-utils's releases.

v2.0.3

2.0.3 (2022-10-20)

Bug Fixes

security: prototype pollution exploit (#217) (a93cf6f)

v2.0.2

2.0.2 (2021-11-04)

Bug Fixes

base64 generation and unicode characters (#197) (8c2d24e)

v2.0.1

2.0.1 (2021-10-29)

Bug Fixes

md4 support on Node.js v17 (#193) (1069f61)

Changelog

Sourced from loader-utils's changelog.

2.0.3 (2022-10-20)

Bug Fixes

security: prototype pollution exploit (#217) (a93cf6f)

2.0.2 (2021-11-04)

Bug Fixes

base64 generation and unicode characters (#197) (8c2d24e)

2.0.1 (2021-10-29)

Bug Fixes

md4 support on Node.js v17 (#193) (1069f61)

Commits

7162619 chore(release): 2.0.3
a93cf6f fix(security): prototype polution exploit (#217)
90c7c4b chore(release): 2.0.2
8c2d24e fix: base64 generation and unicode characters (#197)
5fb5562 chore(release): 2.0.1
1069f61 fix: md4 support on Node.js v17 (#193)
See full diff in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=loader-utils&package-manager=npm_and_yarn&previous-version=2.0.0&new-version=2.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---

Dependabot commands and options

Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> -------------------- Commit message for microsoft/vscode-python@f9bb14a9d45be9bac664cfc06d7afe08f26ba28e: Do not replace discovered python executable using `sys.executable` (microsoft/vscode-python#20197) For https://github.com/microsoft/vscode-python/issues/20189 -------------------- Commit message for microsoft/vscode-python@d9ff1763f0923520dfe083e30bf0791b3784cb57: Remove pr-chat.yml (microsoft/vscode-python#20193) It should be safe to remove this now that we switched to webhooks -------------------- Commit message for microsoft/vscode-python@d17ebcec3a4f202ceb4715040343e97adbd103fe: Fix errors related to `python.envFile` setting (microsoft/vscode-python#20192) Closes https://github.com/microsoft/vscode-python/issues/20179 -------------------- Commit message for microsoft/vscode-python@96927c73734722509252d40872ba74bc8d5dcb8b: Only use environment cache to resolve environment if it has complete information (microsoft/vscode-python#20186) -------------------- Commit message for microsoft/vscode-python@cff8a97d46465f66fb6f09fd488f43db77bcff3f: Fix issue with extension prompt being shown to users after install (microsoft/vscode-python#20158) Fixes https://github.com/microsoft/vscode-python/issues/20157 -------------------- Commit message for microsoft/vscode-python@bdd9a4b67935a30244c9d286d03fdeddd5bc0cc8: Fix poetry discovery (microsoft/vscode-python#20181) -------------------- Commit message for microsoft/vscode-python@5bfc6d57338ad7c6c85427e2cef393c067b5d650: Add more logging and only retry once if fetching interpreter information fails (microsoft/vscode-python#20180) For https://github.com/microsoft/vscode-python/issues/20147 -------------------- Commit message for microsoft/vscode-python@08417adf5f01ee01db32124ee1114b2390eacd1b: Do not cache result if running an interpreter fails (microsoft/vscode-python#20178) For https://github.com/microsoft/vscode-python/issues/20147 -------------------- Commit message for microsoft/vscode-python@8e5ec71e3d4af87e2b8ca09ad55f85445d587870: Monkeypatch terminals created to log commands sent (microsoft/vscode-python#20173) -------------------- Commit message for microsoft/vscode-python@c6ad0f8af08ae21abda4d14aa379b31f3c92eb29: Accept pytest exit code 1 for some tests cannot be collected (microsoft/vscode-python#20074) In case you have some tests where not successfully collected (e.g. 10 ok and 1 fail) vscode display only an error in the test explorer. For pytest it is possible to set the flag `--continue-on-collection-errors` but also vscode only display an error and not the other successfully collected tests. Pytest has a specific exit code for this behaviour (1) [https://docs.pytest.org/en/7.1.x/reference/exit-codes.html](https://docs.pytest.org/en/7.1.x/reference/exit-codes.html) Co-authored-by: Eleanor Boyd -------------------- Commit message for microsoft/vscode-python@f62e96c39fe9e15cc5422184dac36f4f1a6a1eb7: Fix linting in debugger (microsoft/vscode-python#20152) For https://github.com/microsoft/vscode-python/issues/17181 -------------------- Commit message for microsoft/vscode-python@e65775a6befb1d1a6b426a74382c204bdd775695: Add tests for active environment API (microsoft/vscode-python#20166) For https://github.com/microsoft/vscode-python/issues/20147 -------------------- Commit message for microsoft/vscode-python@e5412bcc6f37d0257ec6ec3d241d847a6ad5a50b: Add more logging when resolving environments (microsoft/vscode-python#20165) For https://github.com/microsoft/vscode-python/issues/20147 -------------------- Commit message for microsoft/vscode-python@0e633edd27ad1bf943f99df0ea9a4cf22e4afdfb: Remove DI from factory (microsoft/vscode-python#20057) Closed: microsoft/vscode-python#19768 -------------------- Commit message for microsoft/vscode-python@f1dcf94fcfdd329dfaafc3f5479f2983454de387: Merge back from release (microsoft/vscode-python#20156) Co-authored-by: Kartik Raj -------------------- Commit message for microsoft/vscode-python@6eed80ad690d7a3557e137e2739663fbd4352be0: Fix GDPR tagging for package failure event (microsoft/vscode-python#20136) Great catch by @cwebster-99! -------------------- Commit message for microsoft/vscode-python@f82e73cae4964714335320f3a707cac637df92cf: Update Jedi to latest (microsoft/vscode-python#20134) -------------------- Commit message for microsoft/vscode-python@eb49b2df6c44e4de20b2dee05deabbff26b77b37: Update engine to upcoming VS Code version (microsoft/vscode-python#20128) Cherry picking https://github.com/microsoft/vscode-python/pull/20058 Co-authored-by: Karthik Nadig -------------------- Commit message for microsoft/vscode-python@1205270cc554ea9e947c296d6b8ace000b146399: Don't show certain python commands in command palette when you don't have a python file open (microsoft/vscode-python#19977) Closes microsoft/vscode-python#10441 -------------------- Commit message for microsoft/vscode-python@723126b67015db59643c078cb893dde1b1294c28: Post release (microsoft/vscode-python#20126) -------------------- Commit message for microsoft/vscode-python@9e263dc0f367a25eb63689b88b45bc16e62fe1a0: Update `package.json` for release (micros…

Specify uniqueItems for settings #7881

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions