Update dependency @vscode/vsce to v3.9.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@vscode/vsce (source)	3.2.1 → 3.9.1

---

Release Notes

Microsoft/vsce (@​vscode/vsce)

v3.9.1

Compare Source

Changes:

• #​1266: fix: module type mismatch

This list of changes was auto generated.

v3.9.0

Compare Source

Changes:

• #​1263: fix: build regressions in 3.8.1
• #​1261: Add override for serialize-javascript

This list of changes was auto generated.

v3.8.1

Compare Source

Changes:

• #​1259: chore: update @​azure/identity to 4.13.1 and modernize TypeScript/Node.js configuration

This list of changes was auto generated.

v3.8.0

Compare Source

Changes:

• #​1258: fix: run npm audit fix
• #​1255: Bump brace-expansion
• #​1253: Bump picomatch from 2.3.1 to 2.3.2
• #​1252: Bump yauzl from 2.10.0 to 3.2.1
• #​1250: Bump underscore from 1.13.1 to 1.13.8
• #​1249: Bump minimatch
• #​1243: Bump markdown-it from 14.1.0 to 14.1.1
• #​1244: Bump qs from 6.14.1 to 6.14.2
• #​1239: Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1
• #​1238: Bump lodash from 4.17.21 to 4.17.23

See More

• #​1234: Bump qs from 6.11.0 to 6.14.1
• #​1233: Return non-zero exit code when signature verification fails
• #​1232: Audit npm package
• #​1228: Bump jws

This list of changes was auto generated.

v3.7.1

Compare Source

Changes:

• #​1223: Bump js-yaml
• #​1222: Bump glob

This list of changes was auto generated.

v3.7.0

Compare Source

Changes:

• #​1219: Remove invalid validation for extension dependencies
• #​1212: Validate extension dependencies use lowercase letters and warn about deprecated github.copilot
• #​1209: Bump validator from 13.9.0 to 13.15.20
• #​1200: Bump tar-fs from 2.1.3 to 2.1.4

This list of changes was auto generated.

v3.6.2

Compare Source

Changes:

• #​1199: fix: generate language model tag for languageModelChatProvider contributions

This list of changes was auto generated.

v3.6.1

Compare Source

Changes:

• #​1198: chore: bump vsce-sign to 2.0.7
• #​1194: Engineering - do not run Azure Pipeline for pull requests
• #​1193: fix: check exec params
• #​1191: Bump tmp from 0.2.3 to 0.2.4
• #​1188: Avoid Node.js DEP0190 warning by using string form for prepublish command
• #​1190: chore: migrate PR check to GitHub Actions
• #​1189: update secretlint
• #​1187: Bump form-data from 4.0.0 to 4.0.4
• #​1185: chore: onboard OSS pipeline to 1ES template
• #​1179: add commonjs annotation to package.json

This list of changes was auto generated.

v3.6.0

Compare Source

Changes:

• #​1175: Allow dots in tags and update extension tag handling
• #​1173: Exclude image files from scanning for secrets
• #​1174: Update secretlint dependency
• #​1170: Improve error message for missing entrypoints
• #​1169: Sanitize tags to remove special characters
• #​1166: Add language-models tag for extensions with languageModels contribution
• #​1167: chore: npm audit fix

This list of changes was auto generated.

v3.5.0

Compare Source

Changes:

• #​1162: Update secretlint dependencies
• #​1161: Bump tar-fs from 2.1.2 to 2.1.3
• #​1159: Update chalk version to 4.1.2
• #​1128: fix: improve error messages for vsce publish validation
• #​1130: Make the [Content_Types].xml file deterministic
• #​1158: remove codeql and cg from OSS build
• #​1157: Add OSS pipeline

This list of changes was auto generated.

v3.4.2

Compare Source

Changes:

• #​1152: Only scan secrets when .env is ignored and vice versa
• #​1155: Fix npm token scanning false positives
• #​1151: Do not scan node modules and improve error messages for secret scanning

This list of changes was auto generated.

v3.4.1

Compare Source

Changes:

• #​1149: Fix false positives in private key scanning
• #​1148: Clarify unpublish command description

This list of changes was auto generated.

v3.4.0

Compare Source

Changes:

• #​1145: Allow packaging .env and secrets using command line flags
• #​1144: Scan for secrets and disallow .env files
• #​1141: Add language-model-tools tag for MCP extensions
• #​1138: Proper entry point validation
• #​1137: Add 'mcp' tag support in TagsProcessor
• #​1131: Remove deprecated SVG sources from TrustedSVGSources array
• #​1127: Improve error message for Personal Access Token verification

This list of changes was auto generated.

v3.3.2

Compare Source

Changes:

• #​1126: Bump tar-fs from 2.1.1 to 2.1.2

This list of changes was auto generated.

v3.3.1

Compare Source

Changes:

• #​1124: Add 'copilot-tools' to languageModelTools contributions

This list of changes was auto generated.

v3.3.0

Compare Source

Changes:

• #​1122: Remove unused 'github-copilot' tag
• #​1120: Add tools tag for languageModelTools contribution
• #​1116: add VSCE_DEBUG to spit out error
• #​1114: Bump serialize-javascript and mocha

This list of changes was auto generated.

v3.2.2

Compare Source

Changes:

Feature Requests:

• #​719: Update command line parameters to be in a consistent style and specify which override parameter can be used to override an error in the error message.
• #​1074: The tree, after packing the extension, does not take the out option into account

Others:

• #​1103: Update command line parameters for consistency
• #​1100: Allow for reproducible .vsix packages
• #​906: Reproducible builds
• #​1078: Updated the semver comparison
• #​1101: Fix tree printing to respect the out option
• #​1080: allow manual prerelease

See More

• #​1075: Fix issue with file inclusion patterns
• #​1073: The following include patterns in the...

This list of changes was auto generated.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.