Skip to content

chore(deps): bump vscode-tas-client from 0.1.75 to 0.3.1 - #1928

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vscode-tas-client-0.3.1
Open

chore(deps): bump vscode-tas-client from 0.1.75 to 0.3.1#1928
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vscode-tas-client-0.3.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps vscode-tas-client from 0.1.75 to 0.3.1.

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for vscode-tas-client since your current version.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 8, 2026
@dependabot
chore(deps): bump vscode-tas-client from 0.1.75 to 0.3.1
321db57 
Bumps vscode-tas-client from 0.1.75 to 0.3.1.

---
updated-dependencies:
- dependency-name: vscode-tas-client
  dependency-version: 0.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vscode-tas-client-0.3.1 branch from b1f0060 to 321db57 Compare September 9, 2026 06:12
@chagong

Changyong Gong (chagong) commented Sep 10, 2026

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor Author

The dependabot.yml entry that created this PR has been deleted so this PR can't be rebased. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

@chagong

Changyong Gong (chagong) commented Sep 10, 2026

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) recreate

@dependabot @github

dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor Author

The dependabot.yml entry that created this PR has been deleted so this PR can't be recreated. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

@chagong

Changyong Gong (chagong) commented Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Decision: NOT_MERGED

Dependabot PR Manager result

  • Repository: microsoft/vscode-java-test
  • Pull request: microsoft/vscode-java-test#1928 — chore(deps): bump vscode-tas-client from 0.1.75 to 0.3.1
  • Update: vscode-tas-client 0.1.75 -> 0.3.1 (minor, direct runtime dependency, not known security-related); resolved tas-client 0.1.73 -> 0.4.5 (minor, compatibility-sensitive).
  • Safety assessment: Valid Dependabot target with one bot-only commit and a manifest/lockfile-only diff. The dependency is required by src/experimentationService.ts. The compatibility gate fails because tas-client@0.4.5 requires Node.js >=22, while repository CI uses Node.js 20 and the extension supports VS Code ^1.88.0.
  • Final state: Head 321db57a91205015b328ceb9ddd28d59354b6e7b; open, MERGEABLE, BEHIND, review decision REVIEW_REQUIRED. Current base is 91bf8efa0de925cecb72341c5f806a59af85840d; comparison is diverged with behind_by: 1. Current-head CI is 5/5 successful, including 2/2 required checks; no failed or non-terminal checks.
  • Actions taken: Audited dependency usage, package metadata, transitive changes, workflows, reviews, and checks. Installation on Node.js 20 completed with the expected unsupported-engine warning. Requested @dependabot rebase; Dependabot rejected it because the originating dependabot.yml entry was deleted, and the head remained unchanged. Recreation, remediation, approval, and merge were not attempted.
  • Reason: Required branch recovery failed, and the update independently introduces an unsupported Node.js 22 runtime requirement.
  • Next action: Maintainers should close the stale PR as Dependabot requested, then adopt the update only after upstream supports the extension’s runtime range or after intentionally raising engines.vscode, moving CI to Node.js 22, and validating the new minimum runtime.
  • Workflow run: https://github.com/chagong/JavaForge/actions/runs/34745166209

@chagong

Changyong Gong (chagong) commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor Author

The dependabot.yml entry that created this PR has been deleted so this PR can't be rebased. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

@chagong

Changyong Gong (chagong) commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) recreate

@dependabot @github

dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor Author

The dependabot.yml entry that created this PR has been deleted so this PR can't be recreated. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

@chagong

Changyong Gong (chagong) commented Sep 13, 2026

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 13, 2026

Copy link
Copy Markdown
Contributor Author

The dependabot.yml entry that created this PR has been deleted so this PR can't be rebased. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chagong