Skip to content

update packages to fix some audit warnings, update solution to slnx, add vue-tsc so type validation works#1771

Open
redwyre wants to merge 8 commits into
vrcx-team:masterfrom
redwyre:dev
Open

update packages to fix some audit warnings, update solution to slnx, add vue-tsc so type validation works#1771
redwyre wants to merge 8 commits into
vrcx-team:masterfrom
redwyre:dev

Conversation

@redwyre

@redwyre redwyre commented May 21, 2026

Copy link
Copy Markdown
  • Add launch.json and tasks.json to run in VSCode
  • Migrate sln to slnx - opening in vs2026 updates the sln to a newer version anyway, so might as well migrate to the new slnx standard which is a lot more concise. Rider, VSCode, VS2022, and VS2026 all can understand the format as of around early 2025 so anything reasonably up to date will be fine. The sln file isn't used in building so this doesn't affect anything other than editing.
  • Change VRCX-Cef.csproj debugging type to portable so it can work with VSCode, works with everything.
  • Added typescript and tsc-vue for type checking. The setup was there it just didn't work, so this makes it work for .js and adds support for .vue files. I started fixing some warnings but moved that to a separate PR.
  • Set .npmrc to only allow packages older than 7 days (which is main window of supply chain attacks)
  • Updated packages due to vulnerabilities. Very selective update, nothing newer than a week old except where indicated.
    • showdown (markdown renderer) has a moderate vulnerability but since the input is controlled it should be fine, but it's long since abandoned, used by vue-showdown
    • updated tmp and added override so it can't be added as an older version
    • js-cookie was updated in another commit, but I've added an override so it can't be added as an older version
  • Updated build-all.ps1‎ to use absolute path when creating symbolic link because it gave me an error
  • Fixed deprecated file warnings in generate-third-party-licenses.js‎
  • Updated electron dotnet from 9 to 10, to consolidate dotnet versions on 10.0.8
  • Added install-linux-deps.sh to install all linux dependencies (.deb, Ubuntu). Used to set up testing environment for now but can be expanded later.

@Natsumi-sama

Copy link
Copy Markdown
Member

@redwyre

redwyre commented May 24, 2026

Copy link
Copy Markdown
Author
  • Leave out npm updates as it's easy to add malicious packages to package-lock.json, also we don't want to update Electron due to a Linux bug.

Covered in updated description

It is duplicated two lines below

Doesn't work in VSCode, works the same as full

@redwyre redwyre force-pushed the dev branch 3 times, most recently from e04c0a7 to 3dd7035 Compare June 21, 2026 21:59
@redwyre redwyre marked this pull request as ready for review June 21, 2026 22:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants