Skip to content

Conversation

@chunqilu
Copy link
Contributor

Issue

security scan reports that main and 1.0 branch contains security vulnerabilities in undici which is used by @vscode/proxy-agent remote distribution, we need to mitigate this risk. Previously, #115 only mitigated this risk in regular distribution and also didn't update code change for the new vscode/proxy-agent

Description of Changes

The change is based on change in official vscode
microsoft/vscode@ff388f3
microsoft/vscode@470d770
microsoft/vscode@29bced6

Testing

Screenshots/Videos

Additional Notes

Backporting


By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@chunqilu chunqilu requested review from a team as code owners January 26, 2026 18:21
Copy link
Contributor

@feiyangliu2023 feiyangliu2023 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me

@chunqilu chunqilu merged commit 4ed4254 into main Jan 27, 2026
3 checks passed
@chunqilu chunqilu deleted the adopt-new-proxy-agent branch January 27, 2026 11:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants