Skip to content

chore: update VS Code to 1.130.0 - #56

Open
sdf-actions-actor[bot] wants to merge 1 commit into
mainfrom
automated/update-vscode-1b6a188
Open

chore: update VS Code to 1.130.0#56
sdf-actions-actor[bot] wants to merge 1 commit into
mainfrom
automated/update-vscode-1b6a188

Conversation

@sdf-actions-actor

Copy link
Copy Markdown
Contributor

🔄 Automated VS Code Update

This PR updates the VS Code commit hash to the latest stable release.

Previous version: 7e7950df89d055b5a378379db9ee14290772148a
New version: 1b6a188127eeaf9194f945eb6eb89a657e93c54c
Release: 1.130.0

Changes

  • Updated VSCODE_COMMIT in Dockerfile

Verification

This PR will trigger the build workflow to ensure the container builds successfully with the new VS Code version.


This PR was created automatically by the Update VS Code Version workflow.

Update VSCODE_COMMIT from 7e7950d to 1b6a188
@github-actions

Copy link
Copy Markdown

🔒 Trivy Security Scan Results

Status: ⚠️ Vulnerabilities found (see details in artifacts)
Vulnerabilities Found: 1260 critical/high severity issues

⚠️ Action Required: Critical or high severity vulnerabilities detected.

Top 10 Critical/High Severity Vulnerabilities:

Type Package Vulnerability Severity Fixed Version
ubuntu linux-libc-dev CVE-2026-52955 CRITICAL 6.8.0-136.136
ubuntu linux-libc-dev CVE-2026-52989 CRITICAL 6.8.0-136.136
ubuntu linux-libc-dev CVE-2026-52993 CRITICAL 6.8.0-136.136
ubuntu linux-libc-dev CVE-2026-53002 CRITICAL 6.8.0-136.136
node-pkg minimist CVE-2021-44906 CRITICAL 1.2.6, 0.2.4
node-pkg sha.js CVE-2025-9288 CRITICAL 2.4.12
node-pkg tar CVE-2026-59873 CRITICAL 7.5.19
node-pkg tar CVE-2026-59873 CRITICAL 7.5.19
node-pkg tar CVE-2026-59873 CRITICAL 7.5.19
node-pkg tar CVE-2026-59873 CRITICAL 7.5.19

... and 12 more issues.

📊 Scan Details

  • Image: ghcr.io/smartdatafoundry/devcontainer
  • Scan Date: 2026-07-24 03:12:44 UTC
  • Total Vulnerabilities: 1260

Action Run: view run
Trivy Report: view report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant