Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: atomiechen/vscode-python
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: microsoft/vscode-python
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: main
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 7 commits
  • 19 files changed
  • 7 contributors

Commits on Jul 29, 2026

  1. Configuration menu
    Copy the full SHA
    ed7244f View commit details
    Browse the repository at this point in the history

Commits on Jul 31, 2026

  1. Bump @vscode/test-electron to v3.1.0 (microsoft#26060)

    Updates `@vscode/test-electron` from `^2.3.8` to `^3.1.0`.
    
    ## Changes
    - `package.json`: version constraint updated to `^3.1.0`
    - `package-lock.json`: resolved to `3.1.0`
    
    ---------
    
    Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
    Co-authored-by: eleanorjboyd <26030610+eleanorjboyd@users.noreply.github.com>
    Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
    3 people authored Jul 31, 2026
    Configuration menu
    Copy the full SHA
    0a874c4 View commit details
    Browse the repository at this point in the history
  2. Bump github/codeql-action from 4 to 4.37.3 (microsoft#26074)

    Bumps [github/codeql-action](https://github.com/github/codeql-action)
    from 4 to 4.37.3.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/releases">github/codeql-action's">https://github.com/github/codeql-action/releases">github/codeql-action's
    releases</a>.</em></p>
    <blockquote>
    <h2>v4.37.3</h2>
    <p>No user facing changes.</p>
    <h2>v4.37.2</h2>
    <ul>
    <li>The new address format for the <code>config-file</code> input that
    was introduced in CodeQL Action 4.37.0 is now enabled by default. In
    addition to the format described there, the <code>remote=</code> prefix
    can now be used to explicitly indicate that the input refers to a remote
    file. All previous input formats continue to be accepted as well. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li">https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li>
    <li>The CodeQL Action can now make use of <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured">https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured
    private registries</a> in Default Setup to retrieve CodeQL configuration
    files from remote repositories that require authentication. This will
    allow customers to store their CodeQL configuration in a single
    repository that can then be referenced by Default Setup workflows in
    other repositories. We expect to roll this and other, related changes
    out to everyone in July. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li">https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li>
    </ul>
    <h2>v4.37.1</h2>
    <ul>
    <li><em>Upcoming breaking change</em>: Add a deprecation warning for
    customers using CodeQL version 2.20.6 and earlier. These versions of
    CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise
    Server 3.16, and will be unsupported by the next minor release of the
    CodeQL Action. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li">https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li>
    <li>Update default CodeQL bundle version to <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a">https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>.
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li">https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li>
    </ul>
    <h2>v4.37.0</h2>
    <ul>
    <li>Update default CodeQL bundle version to <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a">https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li">https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
    <li>In addition to the existing input format, the
    <code>config-file</code> input for the <code>codeql-action/init</code>
    step will soon support a new <code>[owner/]repo[@ref][:path]</code>
    format. All components except the repository name are optional. If
    omitted, <code>owner</code> defaults to the same owner as the repository
    the analysis is running for, <code>ref</code> to <code>main</code>, and
    <code>path</code> to <code>.github/codeql-action.yaml</code>. Support
    for this format ships in this version of the CodeQL Action, but will
    only be enabled over the coming weeks. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li">https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li>
    </ul>
    <h2>v4.36.3</h2>
    <p>No user facing changes.</p>
    <h2>v4.36.2</h2>
    <ul>
    <li>Cache CodeQL CLI version information across Actions steps. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li">https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li>
    <li>Reduce requests while waiting for analysis processing by using
    exponential backoff when polling SARIF processing status. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li">https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li>
    <li>Update default CodeQL bundle version to <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a">https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>.
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li">https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li>
    </ul>
    <h2>v4.36.1</h2>
    <p>No user facing changes.</p>
    <h2>v4.36.0</h2>
    <ul>
    <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
    version to 2.19.4. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li">https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li>
    <li>Add support for SHA-256 Git object IDs. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li">https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li>
    <li>Update default CodeQL bundle version to <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a">https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>.
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li">https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li>
    </ul>
    <h2>v4.35.5</h2>
    <ul>
    <li>We have improved how the JavaScript bundles for the CodeQL Action
    are generated to avoid duplication across bundles and reduce the size of
    the repository by around 70%. This should have no effect on the runtime
    behaviour of the CodeQL Action. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li">https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li>
    <li>For performance and accuracy reasons, <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/roadmap/issues/1158">improved">https://redirect.github.com/github/roadmap/issues/1158">improved
    incremental analysis</a> will now only be enabled on a pull request when
    diff-informed analysis is also enabled for that run. If diff-informed
    analysis is unavailable (for example, because the PR diff ranges could
    not be computed), the action will fall back to a full analysis. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li">https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li>
    <li>If multiple inputs are provided for the GitHub-internal
    <code>analysis-kinds</code> input, only <code>code-scanning</code> will
    be enabled. The <code>analysis-kinds</code> input is experimental, for
    GitHub-internal use only, and may change without notice at any time. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li">https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li>
    <li>Added an experimental change which, when running a Code Scanning
    analysis for a PR with <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/roadmap/issues/1158">improved">https://redirect.github.com/github/roadmap/issues/1158">improved
    incremental analysis</a> enabled, prefers CodeQL CLI versions that have
    a cached overlay-base database for the configured languages. This speeds
    up analysis for a repository when there is not yet a cached overlay-base
    database for the latest CLI version. We expect to roll this change out
    to everyone in May. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li">https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li>
    </ul>
    <h2>v4.35.4</h2>
    <ul>
    <li>Update default CodeQL bundle version to <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a">https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>.
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li">https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li>
    </ul>
    <h2>v4.35.3</h2>
    <ul>
    <li><em>Upcoming breaking change</em>: Add a deprecation warning for
    customers using CodeQL version 2.19.3 and earlier. These versions of
    CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
    Server 3.15, and will be unsupported by the next minor release of the
    CodeQL Action. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li">https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li>
    <li>Configurations for private registries that use Cloudsmith or GCP
    OIDC are now accepted. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li">https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li>
    <li>Best-effort connection tests for private registries now use
    <code>GET</code> requests instead of <code>HEAD</code> for better
    compatibility with various registry implementations. For NuGet feeds,
    the test is now always performed against the service index. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li">https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li>
    <li>Fixed a bug where two diagnostics produced within the same
    millisecond could overwrite each other on disk, causing one of them to
    be lost. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li">https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li>
    <li>Update default CodeQL bundle version to <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3">2.25.3</a">https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3">2.25.3</a>.
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3865">#3865</a></li">https://redirect.github.com/github/codeql-action/pull/3865">#3865</a></li>
    </ul>
    <h2>v4.35.2</h2>
    <ul>
    <li>The undocumented TRAP cache cleanup feature that could be enabled
    using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment
    variable is deprecated and will be removed in May 2026. If you are
    affected by this, we recommend disabling TRAP caching by passing the
    <code>trap-caching: false</code> input to the <code>init</code> Action.
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3795">#3795</a></li">https://redirect.github.com/github/codeql-action/pull/3795">#3795</a></li>
    <li>The Git version 2.36.0 requirement for improved incremental analysis
    now only applies to repositories that contain submodules. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3789">#3789</a></li">https://redirect.github.com/github/codeql-action/pull/3789">#3789</a></li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's">https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
    changelog</a>.</em></p>
    <blockquote>
    <h2>4.37.3 - 22 Jul 2026</h2>
    <p>No user facing changes.</p>
    <h2>4.37.2 - 21 Jul 2026</h2>
    <ul>
    <li>The new address format for the <code>config-file</code> input that
    was introduced in CodeQL Action 4.37.0 is now enabled by default. In
    addition to the format described there, the <code>remote=</code> prefix
    can now be used to explicitly indicate that the input refers to a remote
    file. All previous input formats continue to be accepted as well. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li">https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li>
    <li>The CodeQL Action can now make use of <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured">https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured
    private registries</a> in Default Setup to retrieve CodeQL configuration
    files from remote repositories that require authentication. This will
    allow customers to store their CodeQL configuration in a single
    repository that can then be referenced by Default Setup workflows in
    other repositories. We expect to roll this and other, related changes
    out to everyone in July. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li">https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li>
    </ul>
    <h2>4.37.1 - 16 Jul 2026</h2>
    <ul>
    <li><em>Upcoming breaking change</em>: Add a deprecation warning for
    customers using CodeQL version 2.20.6 and earlier. These versions of
    CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise
    Server 3.16, and will be unsupported by the next minor release of the
    CodeQL Action. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li">https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li>
    <li>Update default CodeQL bundle version to <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a">https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>.
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li">https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li>
    </ul>
    <h2>4.37.0 - 08 Jul 2026</h2>
    <ul>
    <li>Update default CodeQL bundle version to <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a">https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
    <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li">https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
    <li>In addition to the existing input format, the
    <code>config-file</code> input for the <code>codeql-action/init</code>
    step will soon support a new <code>[owner/]repo[@ref][:path]</code>
    format. All components except the repository name are optional. If
    omitted, <code>owner</code> defaults to the same owner as the repository
    the analysis is running for, <code>ref</code> to <code>main</code>, and
    <code>path</code> to <code>.github/codeql-action.yaml</code>. Support
    for this format ships in this version of the CodeQL Action, but will
    only be enabled over the coming weeks. <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li">https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li>
    </ul>
    <h2>4.36.3 - 01 Jul 2026</h2>
    <p>No user facing changes.</p>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/commit/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81"><code>e4fba86</code></a">https://github.com/github/codeql-action/commit/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81"><code>e4fba86</code></a>
    Merge pull request <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/issues/4031">#4031</a">https://redirect.github.com/github/codeql-action/issues/4031">#4031</a>
    from github/update-v4.37.3-72f6a9da0</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/commit/fb50ab5d62a274adf3ef3e22cfe750ae87a0ede7"><code>fb50ab5</code></a">https://github.com/github/codeql-action/commit/fb50ab5d62a274adf3ef3e22cfe750ae87a0ede7"><code>fb50ab5</code></a>
    Update changelog for v4.37.3</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/commit/72f6a9da0def52d9193d6a758f0378b65091f8d1"><code>72f6a9d</code></a">https://github.com/github/codeql-action/commit/72f6a9da0def52d9193d6a758f0378b65091f8d1"><code>72f6a9d</code></a>
    Merge pull request <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/issues/4030">#4030</a">https://redirect.github.com/github/codeql-action/issues/4030">#4030</a>
    from github/mbg/fix/no-proxy</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/commit/3b5ee58597653d9cc6785f3f1277f796d81f3646"><code>3b5ee58</code></a">https://github.com/github/codeql-action/commit/3b5ee58597653d9cc6785f3f1277f796d81f3646"><code>3b5ee58</code></a>
    Use default <code>request</code> options instead of
    <code>undefined</code></li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/commit/bfb6be4b5ecd3650f02f530571453e8c64ef0778"><code>bfb6be4</code></a">https://github.com/github/codeql-action/commit/bfb6be4b5ecd3650f02f530571453e8c64ef0778"><code>bfb6be4</code></a>
    Merge pull request <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/issues/4028">#4028</a">https://redirect.github.com/github/codeql-action/issues/4028">#4028</a>
    from github/mergeback/v4.37.2-to-main-e0647621</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/commit/526ab84f9858816d9cf5f7b9df4dd5e2235f0eba"><code>526ab84</code></a">https://github.com/github/codeql-action/commit/526ab84f9858816d9cf5f7b9df4dd5e2235f0eba"><code>526ab84</code></a>
    Rebuild</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/commit/d6217b9b8c14166e4851db94c11155d03bd13c07"><code>d6217b9</code></a">https://github.com/github/codeql-action/commit/d6217b9b8c14166e4851db94c11155d03bd13c07"><code>d6217b9</code></a>
    Update changelog and version after v4.37.2</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/commit/e0647621c2984b5ed2f768cb892365bf2a616ad1"><code>e064762</code></a">https://github.com/github/codeql-action/commit/e0647621c2984b5ed2f768cb892365bf2a616ad1"><code>e064762</code></a>
    Merge pull request <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://redirect.github.com/github/codeql-action/issues/4027">#4027</a">https://redirect.github.com/github/codeql-action/issues/4027">#4027</a>
    from github/update-v4.37.2-385bcdc5a</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/commit/e0faed839190caa67a5cd42f1cc16246028ca3df"><code>e0faed8</code></a">https://github.com/github/codeql-action/commit/e0faed839190caa67a5cd42f1cc16246028ca3df"><code>e0faed8</code></a>
    Add a couple of change notes</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/commit/73aad0eaa9df172668665a150d17b8bc5a650c20"><code>73aad0e</code></a">https://github.com/github/codeql-action/commit/73aad0eaa9df172668665a150d17b8bc5a650c20"><code>73aad0e</code></a>
    Update changelog for v4.37.2</li>
    <li>Additional commits viewable in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/github/codeql-action/compare/v4...v4.37.3">compare">https://github.com/github/codeql-action/compare/v4...v4.37.3">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=4&new-version=4.37.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jul 31, 2026
    Configuration menu
    Copy the full SHA
    82940c9 View commit details
    Browse the repository at this point in the history

Commits on Aug 7, 2026

  1. Bump fast-uri from 3.1.4 to 3.1.5 (microsoft#26095)

    Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.4 to
    3.1.5.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/fastify/fast-uri/releases">fast-uri's">https://github.com/fastify/fast-uri/releases">fast-uri's
    releases</a>.</em></p>
    <blockquote>
    <h2>v3.1.5</h2>
    <h2>⚠️ Security Warning</h2>
    <p>Fix for <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7">https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7</a></p">https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7">https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7</a></p>
    <p><strong>Full Changelog</strong>: <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5">https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5</a></p">https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5">https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5</a></p>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/fastify/fast-uri/commit/5e179cbb4636d5f773ed21126e5bd3068e87e94e"><code>5e179cb</code></a">https://github.com/fastify/fast-uri/commit/5e179cbb4636d5f773ed21126e5bd3068e87e94e"><code>5e179cb</code></a>
    Bumped v3.1.5</li>
    <li><a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/fastify/fast-uri/commit/2cad02d6ed428a720499bb7a3c3d6c3d41f10f5a"><code>2cad02d</code></a">https://github.com/fastify/fast-uri/commit/2cad02d6ed428a720499bb7a3c3d6c3d41f10f5a"><code>2cad02d</code></a>
    Merge commit from fork</li>
    <li>See full diff in <a
    href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fatomiechen%2Fvscode-python%2Fcompare%2F%3Ca+href%3D"https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5">compare">https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fast-uri&package-manager=npm_and_yarn&previous-version=3.1.4&new-version=3.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the
    [Security Alerts
    page](https://github.com/microsoft/vscode-python/network/alerts).
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Aug 7, 2026
    Configuration menu
    Copy the full SHA
    ea473c0 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    918ddc0 View commit details
    Browse the repository at this point in the history

Commits on Aug 11, 2026

  1. Add GDPR declarations for Pyrefly shadow telemetry (microsoft#26108)

    ## Summary
    
    Adds GDPR classifications for the Pyrefly shadow telemetry introduced by
    microsoft/pyrx#9077.
    
    - Declares the paired-request, shadow lifecycle, child lifecycle,
    sampling, and type-server child lifecycle events.
    - Adds the Pyrefly shadow health properties to `language_server.crash`.
    - Adds `pyreflyextensioninstalled` to the existing `pyrefly.detection`
    declaration.
    
    All fields are closed-set system metadata used for feature insight or
    performance and health analysis. Duration and counter fields are marked
    as measurements.
    
    ## Testing
    
    Not run (GDPR metadata-only change).
    
    Copilot-Session: f79da128-47e2-4a55-854d-0cf09f4673ad
    rchiodo authored Aug 11, 2026
    Configuration menu
    Copy the full SHA
    a0399d5 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    02fe7d0 View commit details
    Browse the repository at this point in the history
Loading