Skip to content

Remove always-auth.#13377

Merged
sean-mcmanus merged 7 commits into
mainfrom
seanmcm/removeAlwaysAuth
Jun 1, 2026
Merged

Remove always-auth.#13377
sean-mcmanus merged 7 commits into
mainfrom
seanmcm/removeAlwaysAuth

Conversation

@sean-mcmanus

@sean-mcmanus sean-mcmanus commented Mar 17, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Fix npm warning:

image

@sean-mcmanus sean-mcmanus requested a review from a team as a code owner March 17, 2025 19:12
@github-project-automation github-project-automation Bot moved this to Pull Request in cpptools Mar 17, 2025
@bobbrow

bobbrow commented Mar 17, 2025

Copy link
Copy Markdown
Member

This line is still in the instructions for CFS. Are you sure it needs to be removed now? We could wait until we upgrade to a version of npm that fails.

There is also a .npmrc in the .github/actions folder.

@sean-mcmanus

sean-mcmanus commented Mar 17, 2025

Copy link
Copy Markdown
Contributor Author

This line is still in the instructions for CFS. Are you sure it needs to be removed now? We could wait until we upgrade to a version of npm that fails.

There is also a .npmrc in the .github/actions folder.

We could wait 11 is the current version and it says it'll be removed in 12, but it said it was removed in npm 7 in 2021 because it wasn't used: https://docs.npmjs.com/cli/v7/using-npm/changelog#v7111-2021-04-23

@sean-mcmanus sean-mcmanus mentioned this pull request Mar 24, 2025
Merged
Colengms
Colengms previously approved these changes Jun 1, 2026
View reviewed changes
@sean-mcmanus sean-mcmanus requested a review from Copilot June 1, 2026 22:57
Copilot AI reviewed Jun 1, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Removes the deprecated always-auth=true setting from both .npmrc files to silence an npm warning.

Changes:

  • Drop always-auth=true from Extension/.npmrc
  • Drop always-auth=true from .github/actions/.npmrc

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
Extension/.npmrc Removes deprecated always-auth option.
.github/actions/.npmrc Removes deprecated always-auth option.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@sean-mcmanus sean-mcmanus merged commit bb5b252 into main Jun 1, 2026
7 checks passed
@github-project-automation github-project-automation Bot moved this from Pull Request to Done in cpptools Jun 1, 2026
@sean-mcmanus sean-mcmanus deleted the seanmcm/removeAlwaysAuth branch June 1, 2026 23:06
hanniavalera added a commit to microsoft/vscode-cmake-tools that referenced this pull request Jun 15, 2026
@hanniavalera
Use pre-installed Yarn 1.22.22 on signing pipelines to fix CFS feed E401
e450313 
The prior commit a3316fa deleted the user .npmrc and left always-auth=true
in the project .npmrc, but neither was the cause of the E401. The actual cause:
the azure-public/cpp_PublicPackages CFS feed under CFSClean network isolation
only serves package versions that have already been saved to the feed - it
does not transparently pull from upstream npmjs. Requests for yarn@1.22.19
return 401 because that tarball is not in the feed; yarn@1.22.22 IS in the
feed and IS pre-installed on the 1ESPT-Windows2025 image. The npm error
'authentication token seems to be invalid' is just how npm formats any 401
with a WWW-Authenticate: Bearer header.

This change adopts the working microsoft/vscode-cpptools and
microsoft/vscode-makefile-tools loc pipeline pattern:
- Use pre-installed Yarn 1.22.22 (no npm install -g yarn).
- Use @vscode/vsce from devDependencies via 'yarn run vsce' (no npm install
  -g @vscode/vsce) in pipelines that check out the repo.
- Drop always-auth=true from .npmrc. It is a no-op for anonymous CFS reads
  in both clients: npm 10 ignores it entirely (removed in v7.11.1, will
  warn/error in npm 11/12), and Yarn 1 gates the Authorization header
  behind 'if (authorization)' so it has no effect without a configured
  credential. Mirrors microsoft/vscode-cpptools#13377.
- Bump the packageManager field to yarn@1.22.22 to match the pre-installed
  Yarn the signing pipelines now rely on.
- Keep the del %USERPROFILE%\.npmrc cleanup step and the npm_config_registry
  env on yarn/vsce steps as defense-in-depth. Both are no-ops on the current
  1ESPT-Windows2025 image and yarn.lock pinning, but guard against future
  image changes that inject a scoped .npmrc or a tool that reads
  npm_config_registry directly.

The release.yml / prerelease.yml release jobs do not check out the repo, so
they cannot use the devDependency. They keep 'npm install -g @vscode/vsce'
but pin to @3.1.0 - the same version the build pipelines resolve via
yarn.lock, verified saved in the CFS feed. Without a pin, npm would resolve
'latest' to 3.9.2, which is NOT saved in the feed and 401s; a3316fa
inherited this latent bug from #4086. Pinning to 3.1.0 keeps the package,
sign, and publish steps on a single vsce version.

Long-term, the cleaner fix is to bundle vsce into the vsix artifact so
release jobs never hit the feed for tooling.
hanniavalera added a commit to microsoft/vscode-cmake-tools that referenced this pull request Jun 16, 2026
@hanniavalera
Use pre-installed Yarn 1.22.22 on signing pipelines to fix CFS feed E401
605e184 
The prior commit a3316fa deleted the user .npmrc and left always-auth=true
in the project .npmrc, but neither was the cause of the E401. The actual cause:
the azure-public/cpp_PublicPackages CFS feed under CFSClean network isolation
only serves package versions that have already been saved to the feed - it
does not transparently pull from upstream npmjs. Requests for yarn@1.22.19
return 401 because that tarball is not in the feed; yarn@1.22.22 IS in the
feed and IS pre-installed on the 1ESPT-Windows2025 image. The npm error
'authentication token seems to be invalid' is just how npm formats any 401
with a WWW-Authenticate: Bearer header.

This change adopts the working microsoft/vscode-cpptools and
microsoft/vscode-makefile-tools loc pipeline pattern:
- Use pre-installed Yarn 1.22.22 (no npm install -g yarn).
- Use @vscode/vsce from devDependencies via 'yarn run vsce' (no npm install
  -g @vscode/vsce) in pipelines that check out the repo.
- Drop always-auth=true from .npmrc. It is a no-op for anonymous CFS reads
  in both clients: npm 10 ignores it entirely (removed in v7.11.1, will
  warn/error in npm 11/12), and Yarn 1 gates the Authorization header
  behind 'if (authorization)' so it has no effect without a configured
  credential. Mirrors microsoft/vscode-cpptools#13377.
- Bump the packageManager field to yarn@1.22.22 to match the pre-installed
  Yarn the signing pipelines now rely on.
- Keep the del %USERPROFILE%\.npmrc cleanup step and the npm_config_registry
  env on yarn/vsce steps as defense-in-depth. Both are no-ops on the current
  1ESPT-Windows2025 image and yarn.lock pinning, but guard against future
  image changes that inject a scoped .npmrc or a tool that reads
  npm_config_registry directly.

The release.yml / prerelease.yml release jobs do not check out the repo, so
they cannot use the devDependency. They keep 'npm install -g @vscode/vsce'
but pin to @3.1.0 - the same version the build pipelines resolve via
yarn.lock, verified saved in the CFS feed. Without a pin, npm would resolve
'latest' to 3.9.2, which is NOT saved in the feed and 401s; a3316fa
inherited this latent bug from #4086. Pinning to 3.1.0 keeps the package,
sign, and publish steps on a single vsce version.

Long-term, the cleaner fix is to bundle vsce into the vsix artifact so
release jobs never hit the feed for tooling.
@hanniavalera hanniavalera mentioned this pull request Jun 16, 2026
Merged
hanniavalera added a commit to microsoft/vscode-cmake-tools that referenced this pull request Jun 16, 2026
@hanniavalera
Use pre-installed Yarn 1.22.22 on signing pipelines to fix CFS feed E…
79a2cc5 
…401 (#4976)

The prior commit a3316fa deleted the user .npmrc and left always-auth=true
in the project .npmrc, but neither was the cause of the E401. The actual cause:
the azure-public/cpp_PublicPackages CFS feed under CFSClean network isolation
only serves package versions that have already been saved to the feed - it
does not transparently pull from upstream npmjs. Requests for yarn@1.22.19
return 401 because that tarball is not in the feed; yarn@1.22.22 IS in the
feed and IS pre-installed on the 1ESPT-Windows2025 image. The npm error
'authentication token seems to be invalid' is just how npm formats any 401
with a WWW-Authenticate: Bearer header.

This change adopts the working microsoft/vscode-cpptools and
microsoft/vscode-makefile-tools loc pipeline pattern:
- Use pre-installed Yarn 1.22.22 (no npm install -g yarn).
- Use @vscode/vsce from devDependencies via 'yarn run vsce' (no npm install
  -g @vscode/vsce) in pipelines that check out the repo.
- Drop always-auth=true from .npmrc. It is a no-op for anonymous CFS reads
  in both clients: npm 10 ignores it entirely (removed in v7.11.1, will
  warn/error in npm 11/12), and Yarn 1 gates the Authorization header
  behind 'if (authorization)' so it has no effect without a configured
  credential. Mirrors microsoft/vscode-cpptools#13377.
- Bump the packageManager field to yarn@1.22.22 to match the pre-installed
  Yarn the signing pipelines now rely on.
- Keep the del %USERPROFILE%\.npmrc cleanup step and the npm_config_registry
  env on yarn/vsce steps as defense-in-depth. Both are no-ops on the current
  1ESPT-Windows2025 image and yarn.lock pinning, but guard against future
  image changes that inject a scoped .npmrc or a tool that reads
  npm_config_registry directly.

The release.yml / prerelease.yml release jobs do not check out the repo, so
they cannot use the devDependency. They keep 'npm install -g @vscode/vsce'
but pin to @3.1.0 - the same version the build pipelines resolve via
yarn.lock, verified saved in the CFS feed. Without a pin, npm would resolve
'latest' to 3.9.2, which is NOT saved in the feed and 401s; a3316fa
inherited this latent bug from #4086. Pinning to 3.1.0 keeps the package,
sign, and publish steps on a single vsce version.

Long-term, the cleaner fix is to bundle vsce into the vsix artifact so
release jobs never hit the feed for tooling.
sean-mcmanus added a commit that referenced this pull request Jun 19, 2026
@sean-mcmanus @dependabot
@sergior2 @kuchungmsft @bobbrow @Colengms @lukka @csigs @WardenGnaw @benmcmorran @notable-equivalent
Merge for 1.33.0 pre-release (#14534)
87a16ac 
* Bump uuid from 8.3.2 to 14.0.0 in /.github/actions (#14402)

Bumps [uuid](https://github.com/uuidjs/uuid) from 8.3.2 to 14.0.0.
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v8.3.2...v14.0.0)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump @xmldom/xmldom from 0.8.12 to 0.8.13 in /Extension (#14403)

Bumps [@xmldom/xmldom](https://github.com/xmldom/xmldom) from 0.8.12 to 0.8.13.
- [Release notes](https://github.com/xmldom/xmldom/releases)
- [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md)
- [Commits](xmldom/xmldom@0.8.12...0.8.13)

---
updated-dependencies:
- dependency-name: "@xmldom/xmldom"
  dependency-version: 0.8.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sean McManus <seanmcm@microsoft.com>

* clang-analyazer (#14411)

* Adding additional parse checking logic (#14407)

Adding additional parse checking logic to determine if idle state has no pending calls and finished workspace parsing, file parsing, and intellisense updates.

* Update changelog and version for 1.32.2. (#14415)

* Add Native Strings (#14419)

* address codeQL issues (#14425)

* Database population unification (#14426)

* Bump ip-address from 10.1.0 to 10.2.0 in /.github/actions (#14429)

Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.1.0 to 10.2.0.
- [Commits](https://github.com/beaugunderson/ip-address/commits)

---
updated-dependencies:
- dependency-name: ip-address
  dependency-version: 10.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump axios from 1.15.0 to 1.16.0 in /.github/actions (#14431)

Bumps [axios](https://github.com/axios/axios) from 1.15.0 to 1.16.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.15.0...v1.16.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.16.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add telemetry for run without debugging (#14428)

* Allow for scheduling CI on any branch on demand (#14433)

* Bump fast-xml-builder from 1.1.4 to 1.1.9 in /.github/actions (#14436)

Bumps [fast-xml-builder](https://github.com/NaturalIntelligence/fast-xml-builder) from 1.1.4 to 1.1.9.
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-builder/blob/main/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-builder@v1.1.4...1.1.9)

---
updated-dependencies:
- dependency-name: fast-xml-builder
  dependency-version: 1.1.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump fast-uri from 3.1.0 to 3.1.2 in /Themes (#14437)

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump fast-uri from 3.1.0 to 3.1.2 in /ExtensionPack (#14438)

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sean McManus <seanmcm@microsoft.com>

* Bump fast-uri from 3.1.0 to 3.1.2 in /Extension (#14439)

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update postcss. (#14444)

* Update fast-xml-parser. (#14445)

* add strings to localize (#14448)

* cpptools-srv2 crash handler. (#14449)

* cpptools-srv2 crash handler.

* Bump uuid and @azure/identity in /ExtensionPack (#14468)

Removes [uuid](https://github.com/uuidjs/uuid). It's no longer used after updating ancestor dependency [@azure/identity](https://github.com/Azure/azure-sdk-for-js). These dependencies need to be updated together.


Removes `uuid`

Updates `@azure/identity` from 4.13.0 to 4.13.1
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/identity_4.13.0...@azure/identity_4.13.1)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version:
  dependency-type: indirect
- dependency-name: "@azure/identity"
  dependency-version: 4.13.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump @nevware21/ts-utils from 0.13.0 to 0.14.0 in /Extension (#14469)

Bumps [@nevware21/ts-utils](https://github.com/nevware21/ts-utils) from 0.13.0 to 0.14.0.
- [Release notes](https://github.com/nevware21/ts-utils/releases)
- [Changelog](https://github.com/nevware21/ts-utils/blob/main/CHANGELOG.md)
- [Commits](nevware21/ts-utils@0.13.0...0.14.0)

---
updated-dependencies:
- dependency-name: "@nevware21/ts-utils"
  dependency-version: 0.14.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update localization (#14461)

* Localization - Translated Strings

---------

Co-authored-by: csigs <csigs@users.noreply.github.com>

* Reset status UI if DB fails to open (#14475)

* Add "important" doxygen.sectionTags. (#14473)

* Add "important" to doxygen.sectionTags.

* Add debuginfod launch option to cppdbg debugger schema (#14471)

Add the `debuginfod` configuration option to both launch and attach
configurations for the cppdbg debugger type. This exposes the MIEngine
debuginfod settings (enabled/timeout) so users can control GDB's
debuginfod behavior and prevent hangs when debuginfod servers are
unreachable.

* Bump uuid and @azure/identity in /Themes (#14476)

Removes [uuid](https://github.com/uuidjs/uuid). It's no longer used after updating ancestor dependency [@azure/identity](https://github.com/Azure/azure-sdk-for-js). These dependencies need to be updated together.


Removes `uuid`

Updates `@azure/identity` from 4.13.0 to 4.13.1
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/identity_4.13.0...@azure/identity_4.13.1)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version:
  dependency-type: indirect
- dependency-name: "@azure/identity"
  dependency-version: 4.13.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sean McManus <seanmcm@microsoft.com>

* Bump qs from 6.15.0 to 6.15.2 in /Themes (#14477)

Bumps [qs](https://github.com/ljharb/qs) from 6.15.0 to 6.15.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.15.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sean McManus <seanmcm@microsoft.com>

* Update localization (#14484)

* Localization - Translated Strings

* Update localization.

---------

Co-authored-by: csigs <csigs@users.noreply.github.com>

* Bump tmp from 0.2.5 to 0.2.6 in /Extension (#14488)

Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.5 to 0.2.6.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](raszi/node-tmp@v0.2.5...v0.2.6)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump qs from 6.15.0 to 6.15.2 in /Extension (#14489)

Bumps [qs](https://github.com/ljharb/qs) from 6.15.0 to 6.15.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.15.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump qs from 6.15.0 to 6.15.2 in /ExtensionPack (#14490)

Bumps [qs](https://github.com/ljharb/qs) from 6.15.0 to 6.15.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.15.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump tmp from 0.2.5 to 0.2.7 in /ExtensionPack (#14492)

Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.5 to 0.2.7.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](raszi/node-tmp@v0.2.5...v0.2.7)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump tmp from 0.2.5 to 0.2.7 in /Themes (#14493)

Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.5 to 0.2.7.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](raszi/node-tmp@v0.2.5...v0.2.7)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Remove compiler argument translation JSON files (#14467)

* Update uuid and vsce. (#14495)

* Update vsce.
* Update uuid.

* Update brace-expansion. (#14494)

* Add a progress indicator with cancel for Switch Header/Source. (#14386)

* Add a progress indicator with Cancel for Switch Header/Source.

* Remove always-auth. (#13377)

* Remove always-auth.

* Update minimum VS Code version to 1.77 and vscode-languageclient to 9.0.1 (#14502)

* Update minimum VS Code version to 1.77 since Windows 7 and 8 support was dropped.
* Update vscode-languageclient.

* Set debuginfod.enable to false (#14506)

* Bump shell-quote from 1.8.2 to 1.8.4 in /Extension (#14507)

Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.2 to 1.8.4.
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](ljharb/shell-quote@v1.8.2...v1.8.4)

---
updated-dependencies:
- dependency-name: shell-quote
  dependency-version: 1.8.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump tmp from 0.2.6 to 0.2.7 in /Extension (#14512)

Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.6 to 0.2.7.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](raszi/node-tmp@v0.2.6...v0.2.7)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.7
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump js-yaml from 4.1.1 to 4.2.0 in /Extension (#14514)

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump form-data from 4.0.5 to 4.0.6 in /Extension (#14513)

Bumps [form-data](https://github.com/form-data/form-data) from 4.0.5 to 4.0.6.
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v4.0.5...v4.0.6)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sean McManus <seanmcm@microsoft.com>

* Minor IntelliSense loc changes. (#14518)

* Add plugin-specific login and EULA messages (#14519)

These messages will be used by the plugin mode of the standalone language server.

* Bump markdown-it from 14.1.1 to 14.2.0 in /Extension (#14522)

Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.1.1 to 14.2.0.
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@14.1.1...14.2.0)

---
updated-dependencies:
- dependency-name: markdown-it
  dependency-version: 14.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump form-data from 4.0.5 to 4.0.6 in /Themes (#14527)

Bumps [form-data](https://github.com/form-data/form-data) from 4.0.5 to 4.0.6.
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v4.0.5...v4.0.6)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump undici from 7.24.0 to 7.28.0 in /Themes (#14528)

Bumps [undici](https://github.com/nodejs/undici) from 7.24.0 to 7.28.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.24.0...v7.28.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 7.28.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump js-yaml from 4.1.1 to 4.2.0 in /Themes (#14529)

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump form-data from 4.0.5 to 4.0.6 in /ExtensionPack (#14530)

Bumps [form-data](https://github.com/form-data/form-data) from 4.0.5 to 4.0.6.
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v4.0.5...v4.0.6)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* get OptionsSchema.json back in sync with package.json (#14523)

* Cleanup from #13654

* Update OptionsSchema for #14108

* Update dependencies. (#14532)

* Update github actions dependencies. (#14531)

* Lock debuginfod strings. (#14520)

* Allow suppression of run without debugging warnings (#14516)

Added a property to disable the warning message generated when a launch config cannot be run directly in the terminal.

* Update changelog and TPN for 1.33.0. (#14533)

* Update changelog and TPN for 1.33.0.

* Substitute `${env:X}` with an empty string for unset environment variables (#14535)

* Expand undefined environment variables to empty

* Use unique env var name

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Marked optional capturing groups as potentially undefined

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Update changelog again. (#14536)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sergio Ramirez II <sergioramirez3434@gmail.com>
Co-authored-by: Glen Chung <105310954+kuchungmsft@users.noreply.github.com>
Co-authored-by: Bob Brown <bobbrow@users.noreply.github.com>
Co-authored-by: Colen Garoutte-Carson <49173979+Colengms@users.noreply.github.com>
Co-authored-by: Luca <681992+lukka@users.noreply.github.com>
Co-authored-by: csigs <csigs@users.noreply.github.com>
Co-authored-by: Andrew Wang <waan@microsoft.com>
Co-authored-by: Ben McMorran <bemcmorr@microsoft.com>
Co-authored-by: notable-equivalent <193968300+notable-equivalent@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@Colengms Colengms Colengms approved these changes

Assignees

No one assigned

Labels

None yet

Projects

cpptools
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@sean-mcmanus @bobbrow @Colengms