Skip to content

chore(deps): bump vscode-tas-client from 0.3.0 to 0.3.1 - #1091

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vscode-tas-client-0.3.1
Open

chore(deps): bump vscode-tas-client from 0.3.0 to 0.3.1#1091
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vscode-tas-client-0.3.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps vscode-tas-client from 0.3.0 to 0.3.1.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps): bump vscode-tas-client from 0.3.0 to 0.3.1
d400869 
Bumps vscode-tas-client from 0.3.0 to 0.3.1.

---
updated-dependencies:
- dependency-name: vscode-tas-client
  dependency-version: 0.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 9, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 9, 2026
@chagong

Changyong Gong (chagong) commented Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Decision: NOT_MERGED

Dependabot PR Manager result

Repository: microsoft/vscode-java-dependency
Pull request: microsoft/vscode-java-dependency#1091 — chore(deps): bump vscode-tas-client from 0.3.0 to 0.3.1
Update: vscode-tas-client 0.3.0 -> 0.3.1 (patch), including tas-client 0.4.2 -> 0.4.3; not security-related.
Safety assessment: Verified Dependabot-authored, bot-only history. The manifest/lockfile-only diff passes the Standard Dependency Gate. The direct production dependency remains necessary for ExperimentationService.ts; package APIs and engine requirements remain compatible, lock resolution is consistent, and no known vulnerabilities were found. Risk is low.
Final state: Head d40086943f603df6d6ce9e64ab3e2a611284592b; live main f8cbde4b7fe08a11d1d54722660b6b16d173d905; mergeable MERGEABLE, merge state BEHIND, review decision APPROVED. CI: 31/33 successful, 0 non-terminal; all 4 required checks passed. E2E Windows (java-dep-classpath) and dependent E2E Summary failed (UNRELATED) because an expired/missing vsix-windows artifact prevented test execution.
Actions taken: Audited the complete diff, commit provenance, dependency usage/tree, package changes, advisories, reviews, threads, and checks. Completed a clean dependency installation. Approved head d40086943f603df6d6ce9e64ab3e2a611284592b. Attempted @dependabot rebase, then the authorized @dependabot recreate fallback; both were rejected because the originating dependabot.yml entry was deleted. Head did not change. No rerun, remediation, commit, push, or merge was performed.
Reason: The PR is behind live main, and both authorized recovery methods are unavailable because its Dependabot configuration entry was deleted.
Next action: A maintainer must update the branch to current main or close it and allow the current Dependabot configuration to create the appropriate replacement, then rerun management.
Workflow run: https://github.com/chagong/JavaForge/actions/runs/34573424885

chagong
Changyong Gong (chagong) approved these changes Sep 11, 2026
View reviewed changes

@chagong Changyong Gong (chagong) left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved.

@chagong

Changyong Gong (chagong) commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor Author

The dependabot.yml entry that created this PR has been deleted so this PR can't be rebased. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

@chagong

Changyong Gong (chagong) commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) recreate

@dependabot @github

dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor Author

The dependabot.yml entry that created this PR has been deleted so this PR can't be recreated. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chagong Changyong Gong (chagong) chagong approved these changes
@testforstephen Jinbo Wang (testforstephen) Awaiting requested review from testforstephen testforstephen is a code owner
@wenytang-ms wenyt (wenytang-ms) Awaiting requested review from wenytang-ms wenytang-ms is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chagong