feat: update deps

[9romise]

No description provided.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	fast-npm-meta@​1.5.1
	@​typescript/​native-preview@​7.0.0-dev.20260421.2
	vitest@​4.1.6
	reactive-vscode@​1.0.2
	@​types/​node@​25.9.0
	vite@​8.0.13
	tsdown@​0.22.0
	eslint@​10.4.0
	semver@​7.8.0
	yaml@​2.9.0
	msw@​2.14.6

View full report

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: c6654c42-c15a-4676-9123-07487b78a33e

📥 Commits

Reviewing files that changed from the base of the PR and between becae0a and a7bfe02.

📒 Files selected for processing (4)

• CONTRIBUTING.md
• extensions/vscode/src/commands/open-file-in-npmx.ts
• extensions/vscode/src/providers/decorators.ts
• extensions/vscode/src/utils/request.ts

✅ Files skipped from review due to trivial changes (4)

• extensions/vscode/src/commands/open-file-in-npmx.ts
• extensions/vscode/src/providers/decorators.ts
• extensions/vscode/src/utils/request.ts
• CONTRIBUTING.md

---

📝 Walkthrough

Walkthrough

This pull request bumps package.json packageManager to pnpm@11.1.3, updates pnpm-workspace.yaml (rekeys patchedDependencies to module-replacements@3.0.0-beta.7, refreshes versions in catalogs.dev and catalogs.inline, and updates test tooling versions and an allowBuilds override for msw), and applies small import-order reorders in three VS Code extension files plus a one-line import-order example change in CONTRIBUTING.md.

Suggested reviewers

• gameroman

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The pull request has no description provided by the author, making it impossible to assess whether the intent and rationale for the changes are communicated.	Add a pull request description explaining the purpose of the dependency updates, any breaking changes, and testing performed.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch deps

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

pnpm-workspace.yaml (1)

8-8: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Patch scope can silently stop applying when module-replacements updates.

Line 8 pins the patch to module-replacements@3.0.0-beta.7, but line 41 allows ^3.0.0-beta.7. If a newer prerelease is released (e.g., 3.0.0-beta.8), the caret range would permit resolution to that version, but the patch key would not match, causing the patch to fail silently.

Suggested change

   test:
     jest-mock-vscode: ^4.12.0
-    module-replacements: ^3.0.0-beta.7
+    module-replacements: 3.0.0-beta.7
     msw: ^2.14.6
     vite-tsconfig-paths: ^6.1.1
     vitest: ^4.1.6

🧹 Nitpick comments (1)

pnpm-workspace.yaml (1)

15-15: ⚡ Quick win

Pin @typescript/native-preview to an explicit prerelease version instead of the beta dist-tag.

Using the beta dist-tag causes floating resolution—the next pnpm install could resolve to a newer beta release if maintainers push updates, potentially introducing unplanned breakage. Pin to an explicit version (currently 7.0.0-dev.20260421.2) for stable, reproducible builds.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: ca87a704-9a82-4a60-93eb-815366a54c3d

📥 Commits

Reviewing files that changed from the base of the PR and between 9ad4390 and becae0a.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (1)

• pnpm-workspace.yaml