Skip to content

Commit d2434f4

Browse files
committed
merge main into highlightLiveWatch
2 parents 9aa36f2 + 8f4010a commit d2434f4

21 files changed

Lines changed: 515 additions & 100 deletions

.github/copilot-instructions.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -86,6 +86,16 @@ Every TypeScript file under `src` and `scripts` must start with this header (adj
8686
* Provide meaningful error and log messages that help troubleshooting
8787
* Preserve existing behavior unless a change is intentional; cover behavior changes with tests
8888

89+
## Dependency Updates
90+
91+
Check the following for dependency updates and involved versions. Do this for PRs from developers and Dependabot.
92+
93+
* Known functional issues, API changes, or other incompatibilities
94+
* Known security vulnerabilities, malicious code, or supply chain attacks
95+
* Are the new versions at least 3 days old. Use NPM registry, GitHub releases, and GitHub tags to determine this (in the listed order)
96+
97+
Add the results to the review report.
98+
8999
## Imports
90100

91101
* Group imports in this order:

.github/workflows/ci.yml

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ jobs:
5252

5353
steps:
5454
- name: Harden the runner (Audit all outbound calls)
55-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
55+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
5656
with:
5757
egress-policy: audit
5858

@@ -62,7 +62,7 @@ jobs:
6262
fetch-depth: 0
6363
submodules: true
6464

65-
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
65+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
6666
env:
6767
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
6868
with:
@@ -133,7 +133,7 @@ jobs:
133133

134134
- name: Upload dist
135135
if: runner.os == 'Linux'
136-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
136+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
137137
with:
138138
name: dist
139139
path: |
@@ -154,13 +154,13 @@ jobs:
154154
git commit -m "Update CHANGELOG.md after release [skip ci]"
155155
git push
156156
157-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
157+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
158158
if: runner.os == 'Linux'
159159
with:
160160
name: test-coverage
161161
path: ./coverage
162162

163-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
163+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
164164
with:
165165
name: test-report-${{ matrix.target }}
166166
path: ./test-report.html
@@ -189,7 +189,7 @@ jobs:
189189
packages: read
190190
steps:
191191
- name: Harden the runner (Audit all outbound calls)
192-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
192+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
193193
with:
194194
egress-policy: audit
195195

@@ -198,7 +198,7 @@ jobs:
198198

199199
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
200200

201-
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
201+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
202202
env:
203203
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
204204
with:
@@ -222,7 +222,7 @@ jobs:
222222
npm run package -- --target ${{ matrix.target }}
223223
224224
- name: Upload package
225-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
225+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
226226
with:
227227
name: vscode-cmsis-debugger-${{ matrix.target }}
228228
path: ./*.vsix
@@ -250,7 +250,7 @@ jobs:
250250
packages: read
251251
steps:
252252
- name: Harden the runner (Audit all outbound calls)
253-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
253+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
254254
with:
255255
egress-policy: audit
256256

@@ -259,7 +259,7 @@ jobs:
259259

260260
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
261261

262-
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
262+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
263263
env:
264264
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
265265
with:
@@ -291,7 +291,7 @@ jobs:
291291
contents: write # for softprops/action-gh-release to create a GitHub release
292292
steps:
293293
- name: Harden the runner (Audit all outbound calls)
294-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
294+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
295295
with:
296296
egress-policy: audit
297297

@@ -321,7 +321,7 @@ jobs:
321321
working-directory: test-coverage
322322

323323
- name: Attach packages
324-
uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1
324+
uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
325325
with:
326326
files: |
327327
**/*.vsix

.github/workflows/codeql.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141

4242
steps:
4343
- name: Harden the runner (Audit all outbound calls)
44-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
44+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
4545
with:
4646
egress-policy: audit
4747

@@ -51,16 +51,16 @@ jobs:
5151

5252
- name: Initialize CodeQL
5353
id: initialize
54-
uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
54+
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
5555
with:
5656
queries: security-extended
5757
languages: TypeScript
5858
source-root: src
5959

6060
- name: Autobuild
6161
id: autobuild
62-
uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
62+
uses: github/codeql-action/autobuild@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
6363

6464
- name: Perform CodeQL Analysis
6565
id: analyze
66-
uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
66+
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2

.github/workflows/dependency-review.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
if: github.repository_owner == 'Open-CMSIS-Pack'
1414
steps:
1515
- name: Harden the runner (Audit all outbound calls)
16-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
16+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
1717
with:
1818
egress-policy: audit
1919

.github/workflows/markdown.yml

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
runs-on: ubuntu-latest
2323
steps:
2424
- name: Harden Runner
25-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
25+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
2626
with:
2727
egress-policy: audit
2828

@@ -49,13 +49,13 @@ jobs:
4949
packages: read
5050
steps:
5151
- name: Harden the runner (Audit all outbound calls)
52-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
52+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
5353
with:
5454
egress-policy: audit
5555

5656
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5757

58-
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
58+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
5959
env:
6060
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
6161
with:
@@ -68,5 +68,12 @@ jobs:
6868
GITHUB_TOKEN: ${{ github.token }}
6969
run: npm ci
7070

71+
# Automatically retry the link check if it fails
72+
# This helps reduce false positives in CI caused by transient errors
7173
- name: Check Links
72-
run: npm run check:links
74+
if: runner.os == 'Linux'
75+
uses: Wandalen/wretry.action@e68c23e6309f2871ca8ae4763e7629b9c258e1ea # v3.8.0
76+
with:
77+
attempt_delay: 2000
78+
attempt_limit: 3
79+
command: npm run check:links

.github/workflows/nightly.yml

Lines changed: 17 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232

3333
steps:
3434
- name: Harden the runner (Audit all outbound calls)
35-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
35+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
3636
with:
3737
egress-policy: audit
3838

@@ -42,7 +42,7 @@ jobs:
4242
fetch-depth: 0
4343
submodules: true
4444

45-
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
45+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
4646
env:
4747
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
4848
with:
@@ -84,9 +84,15 @@ jobs:
8484
if: runner.os == 'Linux'
8585
run: npm run build
8686

87+
# Automatically retry the link check if it fails
88+
# This helps reduce false positives in CI caused by transient errors
8789
- name: Check Links
8890
if: runner.os == 'Linux'
89-
run: npm run check:links
91+
uses: Wandalen/wretry.action@e68c23e6309f2871ca8ae4763e7629b9c258e1ea # v3.8.0
92+
with:
93+
attempt_delay: 2000
94+
attempt_limit: 3
95+
command: npm run check:links
9096

9197
- name: Check copyright
9298
if: runner.os == 'Linux'
@@ -97,7 +103,7 @@ jobs:
97103

98104
- name: Upload dist
99105
if: runner.os == 'Linux'
100-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
106+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
101107
with:
102108
name: dist
103109
path: |
@@ -107,13 +113,13 @@ jobs:
107113
./dist
108114
retention-days: 1
109115

110-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
116+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
111117
if: runner.os == 'Linux'
112118
with:
113119
name: test-coverage
114120
path: ./coverage
115121

116-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
122+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
117123
with:
118124
name: test-report-${{ matrix.target }}
119125
path: ./test-report.html
@@ -143,7 +149,7 @@ jobs:
143149
actions: read # For fetching workflow artifacts with 'download-tools --nightly'
144150
steps:
145151
- name: Harden the runner (Audit all outbound calls)
146-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
152+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
147153
with:
148154
egress-policy: audit
149155

@@ -152,7 +158,7 @@ jobs:
152158

153159
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
154160

155-
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
161+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
156162
env:
157163
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
158164
with:
@@ -178,7 +184,7 @@ jobs:
178184
npm run package -- --target ${{ matrix.target }}
179185
180186
- name: Upload package
181-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
187+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
182188
with:
183189
name: vscode-cmsis-debugger-nightly-${{ matrix.target }}
184190
path: ./*.vsix
@@ -206,7 +212,7 @@ jobs:
206212
packages: read
207213
steps:
208214
- name: Harden the runner (Audit all outbound calls)
209-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
215+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
210216
with:
211217
egress-policy: audit
212218

@@ -215,7 +221,7 @@ jobs:
215221

216222
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
217223

218-
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
224+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
219225
env:
220226
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
221227
with:

.github/workflows/scorecard.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636

3737
steps:
3838
- name: Harden Runner
39-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
39+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
4040
with:
4141
egress-policy: audit
4242

@@ -71,7 +71,7 @@ jobs:
7171
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
7272
# format to the repository Actions tab.
7373
- name: "Upload artifact"
74-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
74+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
7575
with:
7676
name: SARIF file
7777
path: results.sarif
@@ -80,6 +80,6 @@ jobs:
8080
# Upload the results to GitHub's code scanning dashboard (optional).
8181
# Commenting out will disable the upload of results to your repo's Code Scanning dashboard
8282
- name: "Upload to code-scanning"
83-
uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
83+
uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
8484
with:
8585
sarif_file: results.sarif

.github/workflows/tpip.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,15 +32,15 @@ jobs:
3232
runs-on: ubuntu-latest
3333
steps:
3434
- name: Harden the runner (Audit all outbound calls)
35-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
35+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
3636
with:
3737
egress-policy: audit
3838

3939
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4040
with:
4141
ref: ${{ github.head_ref }}
4242

43-
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
43+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
4444
env:
4545
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
4646
with:

TPIP.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
# TPIP Report for vscode-cmsis-debugger
22

3-
Report prepared at: 24/02/2026, 17:21:44
3+
Report prepared at: 06/05/2026, 17:17:17
44

55
| *Package* | *Version* | *Repository* | *License* |
66
|---|---|---|---|
7-
| arm-none-eabi-gdb | 14.3.1 | https://artifacts.tools.arm.com/arm-none-eabi-gdb/14.3.1/ | [GPL-3.0-or-later](https://developer.arm.com/GetEula?Id=15d9660a-2059-4985-85e9-c01cdd4b1ba0) |
7+
| arm-none-eabi-gdb | 15.2.1 | https://artifacts.tools.arm.com/arm-none-eabi-gdb/15.2.1/ | [GPL-3.0-or-later](https://developer.arm.com/GetEula?Id=a162e8bb-8565-45a5-bdf6-7249bf3afe43) |
88
| pyocd | 0.43.0 | https://github.com/pyocd/pyOCD | [Apache-2.0](https://github.com/pyocd/pyOCD/blob/v0.43.0/LICENSE) |
99
| vscode-uri | 3.1.0 | https://github.com/microsoft/vscode-uri | [MIT](https://github.com/microsoft/vscode-uri/blob/main/LICENSE.md) |
1010
| xml2js | 0.6.2 | https://github.com/Leonidas-from-XIV/node-xml2js | [MIT](https://github.com/Leonidas-from-XIV/node-xml2js/blob/master/LICENSE) |

__mocks__/vscode.js

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -89,6 +89,7 @@ module.exports = {
8989
showErrorMessage: jest.fn(),
9090
showInformationMessage: jest.fn(() => Promise.resolve(undefined)),
9191
showWarningMessage: jest.fn(),
92+
showInputBox: jest.fn(),
9293
showQuickPick: jest.fn(),
9394
createInputBox: jest.fn(() => {
9495
const handlers = { onDidChangeValue: [], onDidAccept: [], onDidHide: [] };

0 commit comments

Comments
 (0)