Bump vscode-languageclient from 9.0.1 to 10.0.1 - #472
Conversation
Bumps [vscode-languageclient](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client) from 9.0.1 to 10.0.1. - [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases) - [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/10.0.1/client) --- updated-dependencies: - dependency-name: vscode-languageclient dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
dependabot
Bot
added
dependencies
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Want reviews to match your repository better? Bugbot Learning can learn team-specific rules from PR activity. A team admin can enable Learning in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 5fecd95. Configure here.
| }, | ||
| "dependencies": { | ||
| "vscode-languageclient": "^9.0.1" | ||
| "vscode-languageclient": "^10.0.1" |
There was a problem hiding this comment.
VS Code engine below client
Medium Severity
Bumping vscode-languageclient to ^10.0.1 pulls in a client that declares engines.vscode of ^1.91.0, while the extension still advertises ^1.85.0. Installers and the marketplace can treat 1.85–1.90 as supported even though the bundled client targets newer VS Code APIs and behavior.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 5fecd95. Configure here.
|
Superseded by #480. |
Bumps vscode-languageclient from 9.0.1 to 10.0.1.
Release notes
Sourced from vscode-languageclient's releases.
... (truncated)
Commits
bb5ee92Prepare 3.18.1 releaseb0a8ea1MakeTextDocumentContentFeaturea supported capability (#1796)3c7721eUpdate dependency versions in lock files (#1788)dc94993Merge 3.18 release into main (#1787)b21577cMerge next release into main (#1778)c08bcaeUpdate dependencies and improve compatibility (#1775)0a70e0dImplement TextDocumentSnapshot for delay open notifications (#1773)d4f8eaePrevent pulling diagnostics on untitled documents (#1772)f168f85Update documentation and fix lint errors (#1770)2cf625fAdd optional MarkupContent support to diagnostics (#1766)Maintainer changes
This version was pushed to npm by microsoft1es, a new releaser for vscode-languageclient since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Medium Risk
Major-version LSP client and protocol stack bump can change client behavior (e.g. diagnostics ordering) without code edits; the client’s stricter VS Code engine may outpace the extension’s declared minimum.
Overview
Upgrades the extension’s LSP client dependency from vscode-languageclient
^9.0.1to^10.0.1, with matching package-lock.json updates only—no application source changes.The lockfile pulls in vscode-languageserver-protocol
3.18.1, vscode-jsonrpc9.0.0, and adds vscode-languageserver-textdocument; the client now depends on minimatch^10.2.5at the top level instead of nested v5 copies. vscode-languageclient10.xdeclares a minimum VS Code engine of^1.91.0(up from^1.82.0on v9), while this repo’sengines.vscoderemains^1.85.0—worth confirming supported VS Code versions still align.Reviewed by Cursor Bugbot for commit 5fecd95. Bugbot is set up for automated code reviews on this repo. Configure here.