Skip to content

chore: update VS Code to 1.132.0 - #58

Merged
sdf-actions-actor[bot] merged 1 commit into
mainfrom
automated/update-vscode-df53daa
Aug 6, 2026
Merged

chore: update VS Code to 1.132.0#58
sdf-actions-actor[bot] merged 1 commit into
mainfrom
automated/update-vscode-df53daa

Conversation

@sdf-actions-actor

Copy link
Copy Markdown
Contributor

🔄 Automated VS Code Update

This PR updates the VS Code commit hash to the latest stable release.

Previous version: 7e7950df89d055b5a378379db9ee14290772148a
New version: df53daabb18cd157bdb08c7f01c34df936cf12f4
Release: 1.132.0

Changes

  • Updated VSCODE_COMMIT in Dockerfile

Verification

This PR will trigger the build workflow to ensure the container builds successfully with the new VS Code version.


This PR was created automatically by the Update VS Code Version workflow.

Update VSCODE_COMMIT from 7e7950d to df53daa
@github-actions

github-actions Bot commented Aug 6, 2026

Copy link
Copy Markdown

🔒 Trivy Security Scan Results

Status: ⚠️ Vulnerabilities found (see details in artifacts)
Vulnerabilities Found: 176 critical/high severity issues

⚠️ Action Required: Critical or high severity vulnerabilities detected.

Top 10 Critical/High Severity Vulnerabilities:

Type Package Vulnerability Severity Fixed Version
node-pkg loader-utils CVE-2022-37601 CRITICAL 2.0.3, 1.4.1
node-pkg minimist CVE-2021-44906 CRITICAL 1.2.6, 0.2.4
node-pkg sha.js CVE-2025-9288 CRITICAL 2.4.12
node-pkg tar CVE-2026-59873 CRITICAL 7.5.19
node-pkg tar CVE-2026-59873 CRITICAL 7.5.19
node-pkg tar CVE-2026-59873 CRITICAL 7.5.19
python-pkg Twisted CVE-2022-24801 CRITICAL 22.4.0
node-pkg adm-zip CVE-2026-39244 HIGH 0.6.0
node-pkg axios GHSA-gcfj-64vw-6mp9 HIGH 0.33.0, 1.18.0
node-pkg brace-expansion CVE-2026-13149 HIGH 5.0.7, 1.1.16, 2.1.2

... and 7 more issues.

📊 Scan Details

  • Image: ghcr.io/smartdatafoundry/devcontainer
  • Scan Date: 2026-08-06 03:12:05 UTC
  • Total Vulnerabilities: 176

Action Run: view run
Trivy Report: view report

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR bumps the pinned VS Code Server commit used by the devcontainer image to align with VS Code stable 1.132.0, ensuring the container builds against the latest stable server version used by this repository.

Changes:

  • Updated the default ARG VSCODE_COMMIT value in Dockerfile from 7e7950d… to df53daa….

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@SathvikS-18

Copy link
Copy Markdown

Looks good

@SathvikS-18 SathvikS-18 left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good

@sdf-actions-actor
sdf-actions-actor Bot merged commit b78e7af into main Aug 6, 2026
2 checks passed
@sdf-actions-actor
sdf-actions-actor Bot deleted the automated/update-vscode-df53daa branch August 6, 2026 13:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants