chore(deps): update dependency @vscode/vsce to v3.7.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@vscode/vsce (source)	3.0.0 -> 3.7.1

---

Release Notes

Microsoft/vsce (@​vscode/vsce)

v3.7.1

Compare Source

Changes:

• #​1223: Bump js-yaml
• #​1222: Bump glob

This list of changes was auto generated.

v3.7.0

Compare Source

Changes:

• #​1219: Remove invalid validation for extension dependencies
• #​1212: Validate extension dependencies use lowercase letters and warn about deprecated github.copilot
• #​1209: Bump validator from 13.9.0 to 13.15.20
• #​1200: Bump tar-fs from 2.1.3 to 2.1.4

This list of changes was auto generated.

v3.6.2

Compare Source

Changes:

• #​1199: fix: generate language model tag for languageModelChatProvider contributions

This list of changes was auto generated.

v3.6.1

Compare Source

Changes:

• #​1198: chore: bump vsce-sign to 2.0.7
• #​1194: Engineering - do not run Azure Pipeline for pull requests
• #​1193: fix: check exec params
• #​1191: Bump tmp from 0.2.3 to 0.2.4
• #​1188: Avoid Node.js DEP0190 warning by using string form for prepublish command
• #​1190: chore: migrate PR check to GitHub Actions
• #​1189: update secretlint
• #​1187: Bump form-data from 4.0.0 to 4.0.4
• #​1185: chore: onboard OSS pipeline to 1ES template
• #​1179: add commonjs annotation to package.json

This list of changes was auto generated.

v3.6.0

Compare Source

Changes:

• #​1175: Allow dots in tags and update extension tag handling
• #​1173: Exclude image files from scanning for secrets
• #​1174: Update secretlint dependency
• #​1170: Improve error message for missing entrypoints
• #​1169: Sanitize tags to remove special characters
• #​1166: Add language-models tag for extensions with languageModels contribution
• #​1167: chore: npm audit fix

This list of changes was auto generated.

v3.5.0

Compare Source

Changes:

• #​1162: Update secretlint dependencies
• #​1161: Bump tar-fs from 2.1.2 to 2.1.3
• #​1159: Update chalk version to 4.1.2
• #​1128: fix: improve error messages for vsce publish validation
• #​1130: Make the [Content_Types].xml file deterministic
• #​1158: remove codeql and cg from OSS build
• #​1157: Add OSS pipeline

This list of changes was auto generated.

v3.4.2

Compare Source

Changes:

• #​1152: Only scan secrets when .env is ignored and vice versa
• #​1155: Fix npm token scanning false positives
• #​1151: Do not scan node modules and improve error messages for secret scanning

This list of changes was auto generated.

v3.4.1

Compare Source

Changes:

• #​1149: Fix false positives in private key scanning
• #​1148: Clarify unpublish command description

This list of changes was auto generated.

v3.4.0

Compare Source

Changes:

• #​1145: Allow packaging .env and secrets using command line flags
• #​1144: Scan for secrets and disallow .env files
• #​1141: Add language-model-tools tag for MCP extensions
• #​1138: Proper entry point validation
• #​1137: Add 'mcp' tag support in TagsProcessor
• #​1131: Remove deprecated SVG sources from TrustedSVGSources array
• #​1127: Improve error message for Personal Access Token verification

This list of changes was auto generated.

v3.3.2

Compare Source

Changes:

• #​1126: Bump tar-fs from 2.1.1 to 2.1.2

This list of changes was auto generated.

v3.3.1

Compare Source

Changes:

• #​1124: Add 'copilot-tools' to languageModelTools contributions

This list of changes was auto generated.

v3.3.0

Compare Source

Changes:

• #​1122: Remove unused 'github-copilot' tag
• #​1120: Add tools tag for languageModelTools contribution
• #​1116: add VSCE_DEBUG to spit out error
• #​1114: Bump serialize-javascript and mocha

This list of changes was auto generated.

v3.2.2

Compare Source

Changes:

Feature Requests:

• #​719: Update command line parameters to be in a consistent style and specify which override parameter can be used to override an error in the error message.
• #​1074: The tree, after packing the extension, does not take the out option into account

Others:

• #​1103: Update command line parameters for consistency
• #​1100: Allow for reproducible .vsix packages
• #​906: Reproducible builds
• #​1078: Updated the semver comparison
• #​1101: Fix tree printing to respect the out option
• #​1080: allow manual prerelease

See More

• #​1075: Fix issue with file inclusion patterns
• #​1073: The following include patterns in the...

This list of changes was auto generated.

v3.2.1

Compare Source

Changes:

• #​1070: copilot should be github-copilot tag

This list of changes was auto generated.

v3.2.0

Compare Source

Changes:

Feature Requests:

• #​1061: Added unpublish to api.ts
• #​1064: vsce not up to date should be a WARNING not INFO

Bugs:

• #​1048: --readme-path is ignored by the marketplace

Others:

• #​1069: add copilot tag
• #​1065: Change vsce update notification from INFO to WARNING
• #​1053: Fix regression with workdir symlinks
• #​1062: Fix readme-path handling

This list of changes was auto generated.

v3.1.1

Compare Source

Changes:

• #​1058: Auto Assign Chat Participant Tag
• #​1060: Quote filename value in Content-Disposition header

This list of changes was auto generated.

v3.1.0

Compare Source

Changes:

Feature Requests:

• #​1044: Enable verifying the signed package

Others:

• #​1050: Fix unused-files-patterns check and add tests
• #​1046: Fix typo in option hint
• #​1045: add verify-signature command. Fixes #​1044
• #​1037: Fix punycode deprecation warning
• #​1040: Allow packaging extension without a publisher

This list of changes was auto generated.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}