Rebase against the upstream 2901c5a

vscode-upstream-sha1: 2901c5a

Author: RomanNikitenko

code/.config/1espt/PipelineAutobaseliningConfig.yml

@@ -12,6 +12,8 @@ pipelines:
           lastModifiedDate: 2024-09-10
         armory:
           lastModifiedDate: 2024-09-10
+        accessibilityinsights:
+          lastModifiedDate: 2025-06-02
       binary:
         credscan:
           lastModifiedDate: 2025-02-04

code/.config/guardian/.gdnbaselines

@@ -250,6 +250,216 @@
       "createdDate": "2025-02-04 07:13:22Z",
       "expirationDate": "2025-07-24 07:25:17Z",
       "justification": "This error is baselined with an expiration date of 180 days from 2025-02-04 07:25:17Z"
+    },
+    "6216d3477ad4f56cb4ec316a9aaff02e9530a10d56469a4ef4063b8d02fe344b": {
+      "signature": "6216d3477ad4f56cb4ec316a9aaff02e9530a10d56469a4ef4063b8d02fe344b",
+      "alternativeSignatures": [
+        "46ad210995b2ff199f3bee5f271938a4251ed7a60058041ace1beaa53e36b51c"
+      ],
+      "target": "file:///D:/a/_work/1/vscode-server-win32-x64/node.exe",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "binskim",
+      "ruleId": "BA2008",
+      "createdDate": "2025-06-02 21:46:49Z",
+      "expirationDate": "2025-11-19 21:48:17Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2025-06-02 21:48:17Z"
+    },
+    "b8a4702fb4b855719e5e5033c3b629fbe6267d516ce8a18bd8f3be3b9962434b": {
+      "signature": "b8a4702fb4b855719e5e5033c3b629fbe6267d516ce8a18bd8f3be3b9962434b",
+      "alternativeSignatures": [
+        "52d986be88f1c5696fc87d7794279d02f5084c645440e2dd2c3b5a2176b6bf52"
+      ],
+      "target": "file:///D:/a/_work/1/vscode-server-win32-x64-web/node.exe",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "binskim",
+      "ruleId": "BA2008",
+      "createdDate": "2025-06-02 21:46:49Z",
+      "expirationDate": "2025-11-19 21:48:17Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2025-06-02 21:48:17Z"
+    },
+    "471f3e40d545a9d29754f7169c1e4e5b44c067f60ace4c4750b7e9abbaa76e4a": {
+      "signature": "471f3e40d545a9d29754f7169c1e4e5b44c067f60ace4c4750b7e9abbaa76e4a",
+      "alternativeSignatures": [
+        "d8d66858e7ba56494a7b5cdc42278362e5191797dc9622de92f494928e0d8fa0"
+      ],
+      "target": "file:///D:/a/_work/1/vscode-server-win32-x64/node_modules/@vscode/ripgrep/bin/rg.exe",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "binskim",
+      "ruleId": "BA2008",
+      "createdDate": "2025-06-02 21:46:49Z",
+      "expirationDate": "2025-11-19 21:48:17Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2025-06-02 21:48:17Z"
+    },
+    "216e2ac9cb596796224b47799f656570a01fa0d9b5f935608b47d15ab613c8e8": {
+      "signature": "216e2ac9cb596796224b47799f656570a01fa0d9b5f935608b47d15ab613c8e8",
+      "alternativeSignatures": [
+        "07746898f43afab7cc50931b33154c2d9e1a35f82a649dbe8aecf785b3d5a813"
+      ],
+      "target": "file:///D:/a/_work/1/vscode-server-win32-x64/node_modules/@vscode/vsce-sign/bin/vsce-sign.exe",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "binskim",
+      "ruleId": "BA2008",
+      "createdDate": "2025-06-02 21:46:49Z",
+      "expirationDate": "2025-11-19 21:48:17Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2025-06-02 21:48:17Z"
+    },
+    "1d4a48ebc63e3b652146bc16309b2d960a7168d299c7ac94cf794347c06265ef": {
+      "signature": "1d4a48ebc63e3b652146bc16309b2d960a7168d299c7ac94cf794347c06265ef",
+      "alternativeSignatures": [
+        "679d725f3dda5ced7103a135600f67fb2b4ee66b286aa995205feb4eafa2e3b0"
+      ],
+      "target": "file:///D:/a/_work/1/vscode-server-win32-x64-web/node_modules/@vscode/ripgrep/bin/rg.exe",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "binskim",
+      "ruleId": "BA2008",
+      "createdDate": "2025-06-02 21:46:49Z",
+      "expirationDate": "2025-11-19 21:48:17Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2025-06-02 21:48:17Z"
+    },
+    "77797a3e44634bb2994bd13ccc95ff4575bba474585dbd2cf3068a1c16bc0624": {
+      "signature": "77797a3e44634bb2994bd13ccc95ff4575bba474585dbd2cf3068a1c16bc0624",
+      "alternativeSignatures": [
+        "4a6cb67bd4b401e9669c13a2162660aaefc0a94a4122e5b50c198414db545672"
+      ],
+      "target": "file:///D:/a/_work/1/vscode-server-win32-x64-web/node_modules/@vscode/vsce-sign/bin/vsce-sign.exe",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "binskim",
+      "ruleId": "BA2008",
+      "createdDate": "2025-06-02 21:46:49Z",
+      "expirationDate": "2025-11-19 21:48:17Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2025-06-02 21:48:17Z"
+    },
+    "21b8091cf937b1be55c7a300483182fec206bc0cd8e2666727b29c8c200aa101": {
+      "signature": "21b8091cf937b1be55c7a300483182fec206bc0cd8e2666727b29c8c200aa101",
+      "alternativeSignatures": [
+        "09571db1cc8ea8e8292e9fcb6da3592a734a2314b4fc98ea97a87a7559ecdeea"
+      ],
+      "target": "file:///D:/a/_work/1/vscode-server-win32-x64/node_modules/@parcel/watcher/build/Release/watcher.node",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "binskim",
+      "ruleId": "BA2007",
+      "createdDate": "2025-06-02 21:46:49Z",
+      "expirationDate": "2025-11-19 21:48:17Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2025-06-02 21:48:17Z"
+    },
+    "4b3cc578ca0d51fe370dfe0fb2a654dc70cd8d498a62f1efa74028df9637d53b": {
+      "signature": "4b3cc578ca0d51fe370dfe0fb2a654dc70cd8d498a62f1efa74028df9637d53b",
+      "alternativeSignatures": [
+        "ea934f0443da15b7f887884d4bf909c876fe2f689893677d63f95ee12f2b34ab"
+      ],
+      "target": "file:///D:/a/_work/1/vscode-server-win32-x64/node_modules/@parcel/watcher/build/Release/watcher.node",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "binskim",
+      "ruleId": "BA2008",
+      "createdDate": "2025-06-02 21:46:49Z",
+      "expirationDate": "2025-11-19 21:48:17Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2025-06-02 21:48:17Z"
+    },
+    "5fbddbcdd6dae78e3e2876c3198594a1f23b03bc4a2d34d1054c907e90f0f525": {
+      "signature": "5fbddbcdd6dae78e3e2876c3198594a1f23b03bc4a2d34d1054c907e90f0f525",
+      "alternativeSignatures": [
+        "9b7cbe3971924b7a57556d4d37b67bc6d6624a19cdab5d0be6f70b588d25d273"
+      ],
+      "target": "file:///D:/a/_work/1/vscode-server-win32-x64-web/node_modules/@parcel/watcher/build/Release/watcher.node",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "binskim",
+      "ruleId": "BA2007",
+      "createdDate": "2025-06-02 21:46:49Z",
+      "expirationDate": "2025-11-19 21:48:17Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2025-06-02 21:48:17Z"
+    },
+    "5dade33533dba7144ce169a70ac1858e734d5bb95fd056b107b1dc7955ac140b": {
+      "signature": "5dade33533dba7144ce169a70ac1858e734d5bb95fd056b107b1dc7955ac140b",
+      "alternativeSignatures": [
+        "d899dddcd071df9a15daf7cb3c5dd0a69d86903e5199f06afa07f1ca10de9ff2"
+      ],
+      "target": "file:///D:/a/_work/1/vscode-server-win32-x64-web/node_modules/@parcel/watcher/build/Release/watcher.node",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "binskim",
+      "ruleId": "BA2008",
+      "createdDate": "2025-06-02 21:46:49Z",
+      "expirationDate": "2025-11-19 21:48:17Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2025-06-02 21:48:17Z"
+    },
+    "8314c7866547b515200d8a02a7ad2d86053f170172ca056ae2b71ace5fd79a04": {
+      "signature": "8314c7866547b515200d8a02a7ad2d86053f170172ca056ae2b71ace5fd79a04",
+      "alternativeSignatures": [
+        "d33a0c2987713428bb7fc768be76919de7d7ea04d44d0339f561a044a2616eb8"
+      ],
+      "target": "file:///D:/a/_work/1/VSCode-win32-x64/resources/app/node_modules/@vscode/ripgrep/bin/rg.exe",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "binskim",
+      "ruleId": "BA2008",
+      "createdDate": "2025-06-02 21:46:49Z",
+      "expirationDate": "2025-11-19 21:48:17Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2025-06-02 21:48:17Z"
+    },
+    "30418bcc5269eaeb2832a2404465784431d4e72a2af332320c2b1db4768902ad": {
+      "signature": "30418bcc5269eaeb2832a2404465784431d4e72a2af332320c2b1db4768902ad",
+      "alternativeSignatures": [
+        "b7b9eb974d7d3a4ae14df8695ca5a62592c8c9d20b7eda70a6535d50cbda3e7f"
+      ],
+      "target": "file:///D:/a/_work/1/VSCode-win32-x64/resources/app/node_modules/@vscode/vsce-sign/bin/vsce-sign.exe",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "binskim",
+      "ruleId": "BA2008",
+      "createdDate": "2025-06-02 21:46:49Z",
+      "expirationDate": "2025-11-19 21:48:17Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2025-06-02 21:48:17Z"
+    },
+    "d23a7cc83e649f9a9c5831255cb7569d363799adb5490ff7e299685ea7cf5000": {
+      "signature": "d23a7cc83e649f9a9c5831255cb7569d363799adb5490ff7e299685ea7cf5000",
+      "alternativeSignatures": [
+        "e4084ce79a4fed95d29189c3b10811b131a35328957ed32f16366d110fcfeafd"
+      ],
+      "target": "file:///D:/a/_work/1/VSCode-win32-x64/resources/app/node_modules/@parcel/watcher/build/Release/watcher.node",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "binskim",
+      "ruleId": "BA2007",
+      "createdDate": "2025-06-02 21:46:49Z",
+      "expirationDate": "2025-11-19 21:48:17Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2025-06-02 21:48:17Z"
+    },
+    "bb5daeeb456c17015d07ff8744bc8058ee8c66d6542554fc0d81296c179c3e1f": {
+      "signature": "bb5daeeb456c17015d07ff8744bc8058ee8c66d6542554fc0d81296c179c3e1f",
+      "alternativeSignatures": [
+        "40b43227b215520ac1cb5683304d90b739718b97e8863c69164e2871065b6720"
+      ],
+      "target": "file:///D:/a/_work/1/VSCode-win32-x64/resources/app/node_modules/@parcel/watcher/build/Release/watcher.node",
+      "memberOf": [
+        "default"
+      ],
+      "tool": "binskim",
+      "ruleId": "BA2008",
+      "createdDate": "2025-06-02 21:46:49Z",
+      "expirationDate": "2025-11-19 21:48:17Z",
+      "justification": "This error is baselined with an expiration date of 180 days from 2025-06-02 21:48:17Z"
     }
   }
 }

code/.devcontainer/devcontainer-lock.json

@@ -6,9 +6,9 @@
       "integrity": "sha256:e7dc4d37ab9e3d6e7ebb221bac741f5bfe07dae47025399d038b17af2ed8ddb7"
     },
     "ghcr.io/devcontainers/features/rust:1": {
-      "version": "1.1.3",
-      "resolved": "ghcr.io/devcontainers/features/rust@sha256:aba6f47303b197976902bf544c786b5efecc03c238ff593583e5e74dfa9c7ccb",
-      "integrity": "sha256:aba6f47303b197976902bf544c786b5efecc03c238ff593583e5e74dfa9c7ccb"
+      "version": "1.3.3",
+      "resolved": "ghcr.io/devcontainers/features/rust@sha256:2521a8eeb4911bfcb22557c8394870ea22eb790d8e52219ddc5182f62d388995",
+      "integrity": "sha256:2521a8eeb4911bfcb22557c8394870ea22eb790d8e52219ddc5182f62d388995"
     }
   }
 }

code/.github/workflows/basic.yml

@@ -1,6 +1,7 @@
 name: Basic checks
 
 on: workflow_dispatch
+permissions: {}
 
 # on:
 #   push:
@@ -20,6 +21,8 @@ jobs:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       # TODO: rename azure-pipelines/linux/xvfb.init to github-actions
       - name: Setup Build Environment
@@ -80,6 +83,8 @@ jobs:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - uses: actions/setup-node@v4
         with:
@@ -118,8 +123,8 @@ jobs:
       - name: Run Valid Layers Checks
         run: npm run valid-layers-check
 
-      - name: Run Property Init Order Checks
-        run: npm run property-init-order-check
+      - name: Run Define Class Fields Checks
+        run: npm run define-class-fields-check
 
       - name: Compile /build/
         run: npm run compile
@@ -146,6 +151,8 @@ jobs:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - uses: actions/setup-node@v4
         with:

code/.github/workflows/ci.yml

@@ -1,6 +1,7 @@
 name: CI
 
 on: workflow_dispatch
+permissions: {}
 
 # on:
 #   push:
@@ -21,6 +22,8 @@ jobs:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - uses: actions/setup-node@v4
         with:
@@ -103,6 +106,8 @@ jobs:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       # TODO: rename azure-pipelines/linux/xvfb.init to github-actions
       - name: Setup Build Environment
@@ -185,6 +190,8 @@ jobs:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - uses: actions/setup-node@v4
         with:
@@ -258,6 +265,8 @@ jobs:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - uses: actions/setup-node@v4
         with:
@@ -299,8 +308,8 @@ jobs:
       - name: Run Valid Layers Checks
         run: npm run valid-layers-check
 
-      - name: Run Property Init Order Checks
-        run: npm run property-init-order-check
+      - name: Run Define Class Fields Checks
+        run: npm run define-class-fields-check
 
       - name: Compile /build/
         run: npm run compile

code/.github/workflows/monaco-editor.yml

@@ -9,6 +9,7 @@ on:
     branches:
       - main
       - release/*
+permissions: {}
 
 jobs:
   main:
@@ -19,6 +20,8 @@ jobs:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - uses: actions/setup-node@v4
         with: