chore(deps-dev): bump the development-dependencies group with 2 updates

[dependabot]

Bumps the development-dependencies group with 2 updates: ovsx and tsx.

Updates ovsx from 1.0.2 to 1.1.0

Release notes

Sourced from ovsx's releases.

CLI v1.1.0

Added

• Add an encrypted filestore as fallback to the system keychain if it cant be accessed (#1950)
• Add --allow-missing-repository option to the publish command, passed on to vsce to package an extension whose package.json has no repository field without asking for confirmation (#1735)

Changed

• Replace keytar with cross-keychain to store credentials in the system keychain (#1950)
• Mask token input when using login command (#1966

Dependencies

• Bump js-yaml from 4.2.0 to 4.3.0 (#1976)
• Bump tar from 7.5.16 to 7.5.21 (#1987)
• Bump brace-expansion from 1.1.16 to 1.1.18 (#2031)

Frontend Library v1.1.0

Added

• Add a home page with hero search, popular searches, a category browser, curated extension rows and get-involved cards
• Add a dedicated search page under /search with query, category, sort field and sort order synced to the URL
• Add global keyboard shortcuts
• Add keyboard navigation of search results: ↑/↓
• Add a structured footer
• Add scroll-to-top on forward navigation
• Support searching users and managing their roles in the admin dashboard (#1847)
• Added an extension details page to admin dashboard and user settings (#1939)

Changed

• Redesign the web UI: new navbar with integrated search field, new theme, extension cards, category pills and page layout
• Consolidate the app-wide providers into a single AppProviders; keyboard shortcuts and search now wrap every route, including the admin dashboard
• Improve accessibility: visible focus outlines on interactive controls
• Morph the hero search into the navbar search field using the View Transitions API
• Token display in generate-token dialog now uses a masked input with show/hide toggle and copy button (#1966
• Migrate admin dashboard to use @tanstack/react-query (#1917
• Replace formatting from stylistic with prettier (#1916)
• Upgrade to vite 8+ and disable manual chunks for bundling (#1989)
• Upgrade to react-router 7: import everything from react-router instead of react-router-dom. Consumers passing additionalRoutes must upgrade to react-router 7 as well

Fixed

• Refresh the extension version list in the delete views when a delete fails with a conflict
• Keep the hero-to-navbar search morph working under react-router 7, which wraps location updates in React.startTransition

Dependencies

• Bump brace-expansion from 1.1.11 to 1.1.16 (#1981)
• Bump brace-expansion from 2.0.2 to 2.1.2 (#1944)

... (truncated)

Changelog

Sourced from ovsx's changelog.

[v1.1.0] (02/08/2026)

Added

• Add an encrypted filestore as fallback to the system keychain if it cant be accessed (#1950)
• Add --allow-missing-repository option to the publish command, passed on to vsce to package an extension whose package.json has no repository field without asking for confirmation (#1735)

Changed

• Replace keytar with cross-keychain to store credentials in the system keychain (#1950)
• Mask token input when using login command (#1966

Dependencies

• Bump js-yaml from 4.2.0 to 4.3.0 (#1976)
• Bump tar from 7.5.16 to 7.5.21 (#1987)
• Bump brace-expansion from 1.1.16 to 1.1.18 (#2031)

Commits

• 53049dc chore: prepare cli version for release
• c31e166 chore: prepare for cli-1.1.0 release
• 556069e chore(deps): bump brace-expansion in cli
• 5de3810 build(deps): bump brace-expansion from 1.1.16 to 1.1.18 in /cli (#2031)
• 36de5ac feat: add --allow-empty-repository option to ovsx publish (#2012)
• cdf4589 chore(deps): bump deps in cli
• 19f9118 build(deps): bump tar from 7.5.16 to 7.5.21 in /cli (#1987)
• f901ed5 build(deps): bump brace-expansion from 1.1.13 to 1.1.16 in /cli (#1981)
• 9a2403b fix: resolve js-yaml to ^5.2.1 to address CVE-2026-59869 (#1976)
• 643b6bd feat: masking PAT in CLI and webui (#1966)
• Additional commits viewable in compare view

Updates tsx from 4.23.1 to 4.23.9

Release notes

Sourced from tsx's releases.

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

• map Node test locations (2f55884)
• support data URLs in tsImport (b94f46f)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.8

4.23.8 (2026-08-05)

Bug Fixes

• preserve package subpath resolution (be1315e)
• preserve typeless ESM dependency exports (70dfc5e)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.7

4.23.7 (2026-08-05)

Bug Fixes

• prevent tsImport cache collisions (4e5a138)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.6

4.23.6 (2026-08-05)

Bug Fixes

• compose resolver URL metadata (5040762)
• preserve Node resolution with allowJs (2046d9e)
• preserve resolver URL metadata (a91df46)

---

This release is also available on:

... (truncated)

Commits

• 2f55884 fix: map Node test locations
• de935d5 docs: document Node source-map stack formatting
• b94f46f fix: support data URLs in tsImport
• be1315e fix: preserve package subpath resolution
• 5efba41 docs: organize transform backend research
• 70dfc5e fix: preserve typeless ESM dependency exports
• a74ee91 docs: document engineering principles
• 4e5a138 fix: prevent tsImport cache collisions
• 205868f test: wait for complete PTY lines
• 5040762 fix: compose resolver URL metadata
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions