Bump ovsx from 0.10.12 to 1.0.2

[dependabot]

Bumps ovsx from 0.10.12 to 1.0.2.

Release notes

Sourced from ovsx's releases.

CLI v1.0.2

Dependencies

• Bump tmp from 0.2.6 to 0.2.7 (#1903)
• Bump tar from 7.5.11 to 7.5.16 (#1911)
• Bump form-data from 4.0.4 to 4.0.6 (#1910)
• Bump js-yaml from 4.1.1 to 4.2.0 (#1912)
• Bump markdown-it from 14.1.1 to 14.2.0 (#1913)

Frontend Library v1.0.2

Changed

• Migrate unit test framework from mocha to vitest

Dependencies

• Bump tar from 7.5.11 to 7.5.16 (#1907)
• Bump js-yaml from 4.1.1 to 4.2.0 (#1908)
• Bump vite from 7.3.2 to 7.3.5 (#1905)
• Bump dompurify from 3.4.0 to 3.4.11 (#1920)
• Bump markdown-it from 14.1.1 to 14.2.0 (#1904)
• Bump @​babel/core from 7.29.0 to 7.29.7 (#1909)

v1.0.2

This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

🏕 Features

• Change: switch from mocha to vitest by @​netomi in eclipse-openvsx/openvsx#1914
• Change: add check for unsafe paths to MaliciousZipCheckService by @​netomi in eclipse-openvsx/openvsx#1915
• Fix: add consistent and strict http headers when serving files inside extensions by @​netomi in eclipse-openvsx/openvsx#1922

👒 Dependencies

• build(deps): bump tmp from 0.2.6 to 0.2.7 in /cli by @​dependabot[bot] in eclipse-openvsx/openvsx#1903
• build(deps): bump the github-actions group with 2 updates by @​dependabot[bot] in eclipse-openvsx/openvsx#1902
• build(deps): bump tar from 7.5.11 to 7.5.16 in /webui by @​dependabot[bot] in eclipse-openvsx/openvsx#1907
• build(deps): bump js-yaml from 4.1.1 to 4.2.0 in /webui by @​dependabot[bot] in eclipse-openvsx/openvsx#1908
• build(deps-dev): bump vite from 7.3.2 to 7.3.5 in /webui by @​dependabot[bot] in eclipse-openvsx/openvsx#1905
• build(deps): bump dompurify from 3.4.0 to 3.4.9 in /webui by @​dependabot[bot] in eclipse-openvsx/openvsx#1906
• build(deps): bump markdown-it from 14.1.1 to 14.2.0 in /webui by @​dependabot[bot] in eclipse-openvsx/openvsx#1904
• build(deps): bump tar from 7.5.11 to 7.5.16 in /cli by @​dependabot[bot] in eclipse-openvsx/openvsx#1911
• build(deps): bump @​babel/core from 7.29.0 to 7.29.7 in /webui by @​dependabot[bot] in eclipse-openvsx/openvsx#1909
• build(deps): bump form-data from 4.0.4 to 4.0.6 in /cli by @​dependabot[bot] in eclipse-openvsx/openvsx#1910

... (truncated)

Changelog

Sourced from ovsx's changelog.

[v1.0.2] (23/06/2026)

Dependencies

• Bump tmp from 0.2.6 to 0.2.7 (#1903)
• Bump tar from 7.5.11 to 7.5.16 (#1911)
• Bump form-data from 4.0.4 to 4.0.6 (#1910)
• Bump js-yaml from 4.1.1 to 4.2.0 (#1912)
• Bump markdown-it from 14.1.1 to 14.2.0 (#1913)

[v1.0.1] (11/06/2026)

Fixes

• Properly encode path segments in getUrl method (#1893)

[v1.0.0] (28/05/2026)

Dependencies

• Bump fast-uri from 3.1.0 to 3.1.2 (#1829)
• Bump brace-expansion from 5.0.5 to 5.0.6 (#1846)
• Bump qs from 6.15.0 to 6.15.2 (#1869)
• Bump tmp from 0.2.4 to 0.2.6 (#1877)

Commits

• 7cdc854 chore: prepare cli 1.0.2 release
• 787c45c build(deps): bump markdown-it from 14.1.1 to 14.2.0 in /cli (#1913)
• 9d61e9b build(deps): bump js-yaml from 4.1.1 to 4.2.0 in /cli (#1912)
• 03399e4 build(deps): bump form-data from 4.0.4 to 4.0.6 in /cli (#1910)
• 2acaf8e build(deps): bump tar from 7.5.11 to 7.5.16 in /cli (#1911)
• 48cdde2 build(deps): bump tmp from 0.2.6 to 0.2.7 in /cli (#1903)
• 724dea0 chore: prepare cli 1.0.1 release
• 19442b0 Fix: properly encode path segments in getUrl (#1893)
• 89fbda8 chore: bump to cli 1.0.0 release
• f79fae2 chore: prepare for cli 0.10.13 release
• Additional commits viewable in compare view