build(deps-dev): bump ovsx from 1.0.2 to 1.1.0

[dependabot]

Bumps ovsx from 1.0.2 to 1.1.0.

Release notes

Sourced from ovsx's releases.

CLI v1.1.0

Added

• Add an encrypted filestore as fallback to the system keychain if it cant be accessed (#1950)
• Add --allow-missing-repository option to the publish command, passed on to vsce to package an extension whose package.json has no repository field without asking for confirmation (#1735)

Changed

• Replace keytar with cross-keychain to store credentials in the system keychain (#1950)
• Mask token input when using login command (#1966

Dependencies

• Bump js-yaml from 4.2.0 to 4.3.0 (#1976)
• Bump tar from 7.5.16 to 7.5.21 (#1987)
• Bump brace-expansion from 1.1.16 to 1.1.18 (#2031)

Frontend Library v1.1.0

Added

• Add a home page with hero search, popular searches, a category browser, curated extension rows and get-involved cards
• Add a dedicated search page under /search with query, category, sort field and sort order synced to the URL
• Add global keyboard shortcuts
• Add keyboard navigation of search results: ↑/↓
• Add a structured footer
• Add scroll-to-top on forward navigation
• Support searching users and managing their roles in the admin dashboard (#1847)
• Added an extension details page to admin dashboard and user settings (#1939)

Changed

• Redesign the web UI: new navbar with integrated search field, new theme, extension cards, category pills and page layout
• Consolidate the app-wide providers into a single AppProviders; keyboard shortcuts and search now wrap every route, including the admin dashboard
• Improve accessibility: visible focus outlines on interactive controls
• Morph the hero search into the navbar search field using the View Transitions API
• Token display in generate-token dialog now uses a masked input with show/hide toggle and copy button (#1966
• Migrate admin dashboard to use @tanstack/react-query (#1917
• Replace formatting from stylistic with prettier (#1916)
• Upgrade to vite 8+ and disable manual chunks for bundling (#1989)
• Upgrade to react-router 7: import everything from react-router instead of react-router-dom. Consumers passing additionalRoutes must upgrade to react-router 7 as well

Fixed

• Refresh the extension version list in the delete views when a delete fails with a conflict
• Keep the hero-to-navbar search morph working under react-router 7, which wraps location updates in React.startTransition

Dependencies

• Bump brace-expansion from 1.1.11 to 1.1.16 (#1981)
• Bump brace-expansion from 2.0.2 to 2.1.2 (#1944)

... (truncated)

Changelog

Sourced from ovsx's changelog.

[v1.1.0] (02/08/2026)

Added

• Add an encrypted filestore as fallback to the system keychain if it cant be accessed (#1950)
• Add --allow-missing-repository option to the publish command, passed on to vsce to package an extension whose package.json has no repository field without asking for confirmation (#1735)

Changed

• Replace keytar with cross-keychain to store credentials in the system keychain (#1950)
• Mask token input when using login command (#1966

Dependencies

• Bump js-yaml from 4.2.0 to 4.3.0 (#1976)
• Bump tar from 7.5.16 to 7.5.21 (#1987)
• Bump brace-expansion from 1.1.16 to 1.1.18 (#2031)

Commits

• 53049dc chore: prepare cli version for release
• c31e166 chore: prepare for cli-1.1.0 release
• 556069e chore(deps): bump brace-expansion in cli
• 5de3810 build(deps): bump brace-expansion from 1.1.16 to 1.1.18 in /cli (#2031)
• 36de5ac feat: add --allow-empty-repository option to ovsx publish (#2012)
• cdf4589 chore(deps): bump deps in cli
• 19f9118 build(deps): bump tar from 7.5.16 to 7.5.21 in /cli (#1987)
• f901ed5 build(deps): bump brace-expansion from 1.1.13 to 1.1.16 in /cli (#1981)
• 9a2403b fix: resolve js-yaml to ^5.2.1 to address CVE-2026-59869 (#1976)
• 643b6bd feat: masking PAT in CLI and webui (#1966)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)