Merge branch 'master' into dev/v-peq/removeNode10TodoComments

Author: ConnorQi01

.gitignore

@@ -32,6 +32,7 @@ VSCodeUserData
 vscode-react-native-*.vsix
 vscode-react-native-*.vsix.zip
 *-report
+mochawesome-report/
 
 # Sample Application auto-generated files
 SampleApplication/.vscode/.react/debuggerWorker.js

CHANGELOG.md

@@ -1,3 +1,23 @@
+## 1.13.3
+* Align Android launch command naming [#2580](https://github.com/microsoft/vscode-react-native/pull/2580)
+* Improve packager status bar to display Metro port and connected device name [#2557](https://github.com/microsoft/vscode-react-native/pull/2557) [#2564](https://github.com/microsoft/vscode-react-native/pull/2564)
+* Remove deprecated Element Inspector feature [#2561](https://github.com/microsoft/vscode-react-native/pull/2561)
+* Update README with security dependency override guidance [#2582](https://github.com/microsoft/vscode-react-native/pull/2582)
+* Internal changes:
+    * Fix shell injection risk in macOS app termination [#2550](https://github.com/microsoft/vscode-react-native/pull/2550)
+    * Fix packager test failure [#2559](https://github.com/microsoft/vscode-react-native/pull/2559)
+    * Add smoke test for simplified log grammar and stabilize app launch [#2551](https://github.com/microsoft/vscode-react-native/pull/2551)
+    * Explore and fix TypeScript 7 compatibility [#2543](https://github.com/microsoft/vscode-react-native/pull/2543)
+    * Pin and upgrade serialize-javascript to non-vulnerable versions [#2539](https://github.com/microsoft/vscode-react-native/pull/2539) [#2541](https://github.com/microsoft/vscode-react-native/pull/2541) [#2576](https://github.com/microsoft/vscode-react-native/pull/2576) [#2578](https://github.com/microsoft/vscode-react-native/pull/2578)
+    * Exclude auto-generated mochawesome test reports [#2583](https://github.com/microsoft/vscode-react-native/pull/2583)
+    * Bump minimatch in /test/smoke [#2537](https://github.com/microsoft/vscode-react-native/pull/2537)
+    * Bump tar in /test/smoke to 7.5.11 [#2547](https://github.com/microsoft/vscode-react-native/pull/2547) [#2554](https://github.com/microsoft/vscode-react-native/pull/2554)
+    * Bump @tootallnate/once and @vscode/test-electron [#2545](https://github.com/microsoft/vscode-react-native/pull/2545)
+    * Bump flatted from 3.1.1 to 3.4.2 [#2565](https://github.com/microsoft/vscode-react-native/pull/2565)
+    * Bump picomatch from 2.2.3 to 2.3.2 [#2569](https://github.com/microsoft/vscode-react-native/pull/2569)
+    * Bump brace-expansion to 5.0.5 [#2572](https://github.com/microsoft/vscode-react-native/pull/2572)
+    * Bump lodash from 4.17.23 to 4.18.1 [#2585](https://github.com/microsoft/vscode-react-native/pull/2585) [#2588](https://github.com/microsoft/vscode-react-native/pull/2588)
+
 ## 1.13.2
 * Add command to support Expo EAS workflow [#2432](https://github.com/microsoft/vscode-react-native/pull/2432)
 * Improve and verify added launch/debug configuration in `launch.json` [#2442](https://github.com/microsoft/vscode-react-native/pull/2442) [#2424](https://github.com/microsoft/vscode-react-native/pull/2424)

README.md

@@ -72,6 +72,7 @@ Using this extension, you can **debug your code and quickly run `react-native` o
   - [Change project root](#change-project-root)
   - [Configure an Android LogCat Monitor](#configure-an-android-logcat-monitor)
   - [Configure dependencies versions for debugging Expo projects](#configure-dependencies-versions-for-debugging-expo-projects)
+  - [Security dependency overrides](#security-dependency-overrides)
   - [Configure custom key bindings for extension commands](#configure-custom-key-bindings-for-extension-commands)
   - [Configure custom colors for extension output logs](#configure-custom-colors-for-extension-output-logs)
   - [Set pnpm as package manager](#set-pnpm-as-package-manager)
@@ -995,6 +996,22 @@ To debug Expo applications the extension requires additional dependencies, such
 
 To enable new versions of the dependencies, it's required to restart VS Code editor. After that the extension will download the new versions of the packages on the next Expo debugging starting.
 
+## Security dependency overrides
+
+Recent repository updates include a security pin for `serialize-javascript` via npm `overrides`.
+If you maintain a fork or run local dependency audits, align your `package.json` with the following:
+
+```json
+{
+  "overrides": {
+    "js-yaml": "4.1.1",
+    "serialize-javascript": "7.0.5"
+  }
+}
+```
+
+After updating `package.json`, run your package manager install command to refresh the lock file.
+
 ## Configure custom key bindings for extension commands
 
 The extension provides context variables for the following features:

package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "vscode-react-native",
   "displayName": "React Native Tools",
-  "version": "1.13.2",
+  "version": "1.13.3",
   "private": true,
   "publisher": "msjsdiag",
   "icon": "resources/images/icon.png",
@@ -1439,7 +1439,7 @@
     "extract-opts": "2.2.0",
     "flatten-source-map": "0.0.2",
     "glob": ">=10.5.0",
-    "ip-address": "^9.0.5",
+    "ip-address": "^10.1.1",
     "js-base64": "3.6.0",
     "json5": "^1.0.2",
     "jsonc-parser": "3.0.0",
@@ -1457,7 +1457,7 @@
     "source-map-resolve": "0.5.3",
     "strip-json-comments": "2.0.1",
     "tmp-promise": "3.0.2",
-    "uuid": "9.0.0",
+    "uuid": "14.0.0",
     "vscode-cdp-proxy": "0.2.0",
     "vscode-extension-telemetry": "0.4.5",
     "vscode-nls": "4.1.2",

package.json

@@ -6,7 +6,7 @@ import * as path from "path";
 import { RawSourceMap } from "source-map";
 import { SourceMapsCombinator } from "./sourceMapsCombinator";
 
-const IS_REMOTE = /^[A-z]{2,}:\/\//; // Detection remote sources or specific protocols (like "webpack:///")
+const IS_REMOTE = /^[A-Za-z]{2,}:\/\//; // Detection remote sources or specific protocols (like "webpack:///")
 
 interface ISourceMap extends RawSourceMap {
     sections?: ISourceMapSection[];

src/debugger/sourceMap.ts

@@ -7,6 +7,7 @@
     "test": "tsc && node ./node_modules/mocha/bin/_mocha --config ./.mocharc.js --reporter mocha-multi-reporters"
   },
   "devDependencies": {
+    "@types/adm-zip": "^0.5.8",
     "@types/mkdirp": "^2.0.0",
     "@types/mocha": "10.0.10",
     "@types/node": "^24.3.0",
@@ -15,7 +16,9 @@
     "@types/semver": "^7.7.1",
     "@types/shell-quote": "^1.7.5",
     "@types/url-parse": "^1.4.11",
+    "adm-zip": "^0.5.17",
     "ansi-styles": "^6.2.1",
+    "js-yaml": "4.1.1",
     "minimatch": "^10.2.4",
     "mkdirp": "^3.0.1",
     "mocha": "11.7.2",
@@ -29,8 +32,7 @@
     "tree-kill": "^1.2.2",
     "ts-node": "10.9.2",
     "typescript": "5.9.2",
-    "url-parse": "^1.5.10",
-    "js-yaml": "4.1.1"
+    "url-parse": "^1.5.10"
   },
   "overrides": {
     "serialize-javascript": "7.0.5"