Bump the minor-and-patch group with 2 updates

[dependabot]

Bumps the minor-and-patch group with 2 updates: mocha and ovsx.

Updates mocha from 11.7.6 to 11.8.0

Release notes

Sourced from mocha's releases.

v11.8.0

11.8.0 (2026-08-02)

🌟 Features

• add --fail-hook-affected-tests option to report skipped tests as failed (#5519) (#6052) (7830309)

🧹 Chores

• add modern Netlify to v11.x branch (#6082) (26deb23), closes #5696
• change site title to Mocha 11, update index note (#6086) (1f44d5f)
• CI: bump Node from 22 to 24 in publish action (#6206) (05aec43)

v11.7.7

11.7.7 (2026-06-13)

🩹 Fixes

• surface ts-node compile errors (#6045) (3477563)

Changelog

Sourced from mocha's changelog.

11.8.0 (2026-08-02)

🌟 Features

• add --fail-hook-affected-tests option to report skipped tests as failed (#5519) (#6052) (7830309)

🧹 Chores

• add modern Netlify to v11.x branch (#6082) (26deb23), closes #5696
• change site title to Mocha 11, update index note (#6086) (1f44d5f)
• CI: bump Node from 22 to 24 in publish action (#6206) (05aec43)

11.7.7 (2026-06-13)

🩹 Fixes

• surface ts-node compile errors (#6045) (3477563)

Commits

• 90c1bb3 chore(v11.x): release 11.8.0 (#6076)
• 05aec43 chore(CI): bump Node from 22 to 24 in publish action (#6206)
• 1f44d5f chore: change site title to Mocha 11, update index note (#6086)
• 26deb23 chore: add modern Netlify to v11.x branch (#6082)
• 7830309 feat: add --fail-hook-affected-tests option to report skipped tests as failed...
• 41f2b95 chore(v11.x): release 11.7.7 (#6068)
• 3477563 fix: surface ts-node compile errors (#6045)
• See full diff in compare view

Updates ovsx from 1.0.2 to 1.1.0

Release notes

Sourced from ovsx's releases.

CLI v1.1.0

Added

• Add an encrypted filestore as fallback to the system keychain if it cant be accessed (#1950)
• Add --allow-missing-repository option to the publish command, passed on to vsce to package an extension whose package.json has no repository field without asking for confirmation (#1735)

Changed

• Replace keytar with cross-keychain to store credentials in the system keychain (#1950)
• Mask token input when using login command (#1966

Dependencies

• Bump js-yaml from 4.2.0 to 4.3.0 (#1976)
• Bump tar from 7.5.16 to 7.5.21 (#1987)
• Bump brace-expansion from 1.1.16 to 1.1.18 (#2031)

Frontend Library v1.1.0

Added

• Add a home page with hero search, popular searches, a category browser, curated extension rows and get-involved cards
• Add a dedicated search page under /search with query, category, sort field and sort order synced to the URL
• Add global keyboard shortcuts
• Add keyboard navigation of search results: ↑/↓
• Add a structured footer
• Add scroll-to-top on forward navigation
• Support searching users and managing their roles in the admin dashboard (#1847)
• Added an extension details page to admin dashboard and user settings (#1939)

Changed

• Redesign the web UI: new navbar with integrated search field, new theme, extension cards, category pills and page layout
• Consolidate the app-wide providers into a single AppProviders; keyboard shortcuts and search now wrap every route, including the admin dashboard
• Improve accessibility: visible focus outlines on interactive controls
• Morph the hero search into the navbar search field using the View Transitions API
• Token display in generate-token dialog now uses a masked input with show/hide toggle and copy button (#1966
• Migrate admin dashboard to use @tanstack/react-query (#1917
• Replace formatting from stylistic with prettier (#1916)
• Upgrade to vite 8+ and disable manual chunks for bundling (#1989)
• Upgrade to react-router 7: import everything from react-router instead of react-router-dom. Consumers passing additionalRoutes must upgrade to react-router 7 as well

Fixed

• Refresh the extension version list in the delete views when a delete fails with a conflict
• Keep the hero-to-navbar search morph working under react-router 7, which wraps location updates in React.startTransition

Dependencies

• Bump brace-expansion from 1.1.11 to 1.1.16 (#1981)
• Bump brace-expansion from 2.0.2 to 2.1.2 (#1944)

... (truncated)

Changelog

Sourced from ovsx's changelog.

[v1.1.0] (02/08/2026)

Added

• Add an encrypted filestore as fallback to the system keychain if it cant be accessed (#1950)
• Add --allow-missing-repository option to the publish command, passed on to vsce to package an extension whose package.json has no repository field without asking for confirmation (#1735)

Changed

• Replace keytar with cross-keychain to store credentials in the system keychain (#1950)
• Mask token input when using login command (#1966

Dependencies

• Bump js-yaml from 4.2.0 to 4.3.0 (#1976)
• Bump tar from 7.5.16 to 7.5.21 (#1987)
• Bump brace-expansion from 1.1.16 to 1.1.18 (#2031)

Commits

• 53049dc chore: prepare cli version for release
• c31e166 chore: prepare for cli-1.1.0 release
• 556069e chore(deps): bump brace-expansion in cli
• 5de3810 build(deps): bump brace-expansion from 1.1.16 to 1.1.18 in /cli (#2031)
• 36de5ac feat: add --allow-empty-repository option to ovsx publish (#2012)
• cdf4589 chore(deps): bump deps in cli
• 19f9118 build(deps): bump tar from 7.5.16 to 7.5.21 in /cli (#1987)
• f901ed5 build(deps): bump brace-expansion from 1.1.13 to 1.1.16 in /cli (#1981)
• 9a2403b fix: resolve js-yaml to ^5.2.1 to address CVE-2026-59869 (#1976)
• 643b6bd feat: masking PAT in CLI and webui (#1966)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions