chore(deps): upgrade npm packages, GitHub Actions, and Docker image

.devcontainer/Dockerfile

@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/devcontainers/typescript-node:24-trixie@sha256:e36c918ec9c679c18451231e277ea9122c00a097fb6e4a23c8c3d35bf08bbc3a
+FROM mcr.microsoft.com/devcontainers/typescript-node:24-trixie@sha256:0cbad76d1987fd35fd78cbc58cbe8c2aa93a8daa45411e52c6c6b63ea2dae202
 
 # VS Code/Electron share Chromium's native library requirements; playwright
 # install-deps tracks that list upstream. Electron also requires libgtk-3-0t64

.github/actions/setup/action.yml

@@ -9,7 +9,7 @@ runs:
       # Needed for git-based deps (e.g. github:coder/coder) so pnpm can clone without SSH.
       run: git config --global url."https://github.com/".insteadOf "git@github.com:"
 
-    - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
+    - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
 
     - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
       with:

.github/workflows/ci.yaml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-24.04
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Setup pnpm, Node.js, and dependencies
         uses: ./.github/actions/setup
 
@@ -47,7 +47,7 @@ jobs:
           - { os: macos-15, name: macOS, electron-version: "42.3.0" }
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Setup pnpm, Node.js, and dependencies
         uses: ./.github/actions/setup
 
@@ -70,7 +70,7 @@ jobs:
           - { os: macos-15, name: macOS, vscode-version: "stable" }
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Setup pnpm, Node.js, and dependencies
         uses: ./.github/actions/setup
 
@@ -86,7 +86,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.ref }}
@@ -98,7 +98,7 @@ jobs:
       # PR builds gate on visual review; mainline auto-accepts.
       - name: Publish to Chromatic (non-mainline)
         if: github.ref != 'refs/heads/main' && github.repository_owner == 'coder'
-        uses: chromaui/action@1db61b73b7919508ee8e62336f04bd0aed6da756 # v17.4.1
+        uses: chromaui/action@7804f34e4e59c0d9b3c856848f46ad96d7897429 # v17.5.0
         env:
           NODE_OPTIONS: "--max_old_space_size=4096"
           STORYBOOK: true
@@ -114,7 +114,7 @@ jobs:
       # Auto-accept on mainline to avoid blocking CI after squash merges.
       - name: Publish to Chromatic (mainline)
         if: github.ref == 'refs/heads/main' && github.repository_owner == 'coder'
-        uses: chromaui/action@1db61b73b7919508ee8e62336f04bd0aed6da756 # v17.4.1
+        uses: chromaui/action@7804f34e4e59c0d9b3c856848f46ad96d7897429 # v17.5.0
         env:
           NODE_OPTIONS: "--max_old_space_size=4096"
           STORYBOOK: true
@@ -129,7 +129,7 @@ jobs:
     name: Package
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Setup pnpm, Node.js, and dependencies
         uses: ./.github/actions/setup
 

.github/workflows/pre-release.yaml

@@ -16,7 +16,7 @@ jobs:
     outputs:
       version: ${{ steps.version.outputs.version }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Setup pnpm, Node.js, and dependencies
         uses: ./.github/actions/setup

.github/workflows/publish-extension.yaml

@@ -27,7 +27,7 @@ jobs:
       hasVscePat: ${{ steps.check-secrets.outputs.hasVscePat }}
       hasOvsxPat: ${{ steps.check-secrets.outputs.hasOvsxPat }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
@@ -116,7 +116,7 @@ jobs:
           name: extension-${{ inputs.version }}
 
       - name: Create ${{ inputs.isPreRelease && 'Pre-' || '' }}Release
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           prerelease: ${{ inputs.isPreRelease }}

.github/workflows/release.yaml

@@ -17,7 +17,7 @@ jobs:
     outputs:
       version: ${{ steps.version.outputs.version }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
 

package.json

@@ -722,7 +722,7 @@
 		"@opentelemetry/api-logs": "^0.218.0",
 		"@peculiar/x509": "^2.0.0",
 		"@repo/shared": "workspace:*",
-		"axios": "^1.17.0",
+		"axios": "^1.18.1",
 		"date-fns": "catalog:",
 		"eventsource": "^4.1.0",
 		"fflate": "^0.8.3",
@@ -732,14 +732,14 @@
 		"pretty-bytes": "^7.1.0",
 		"proper-lockfile": "^4.1.2",
 		"proxy-agent": "^8.0.2",
-		"semver": "^7.8.4",
+		"semver": "^7.8.5",
 		"strip-ansi": "^7.2.0",
 		"ua-parser-js": "^1.0.41",
 		"ws": "^8.21.0",
 		"zod": "^4.4.3"
 	},
 	"devDependencies": {
-		"@eslint-react/eslint-plugin": "^5.9.0",
+		"@eslint-react/eslint-plugin": "^5.9.2",
 		"@eslint/js": "^10.0.1",
 		"@eslint/markdown": "^8.0.2",
 		"@repo/mocks": "workspace:*",
@@ -752,7 +752,7 @@
 		"@testing-library/react": "^16.3.2",
 		"@tsconfig/node22": "^22.0.5",
 		"@types/mocha": "^10.0.10",
-		"@types/node": "^22.19.21",
+		"@types/node": "^22.20.0",
 		"@types/proper-lockfile": "^4.1.4",
 		"@types/react": "catalog:",
 		"@types/react-dom": "catalog:",
@@ -761,17 +761,17 @@
 		"@types/vscode": "1.105.0",
 		"@types/vscode-webview": "catalog:",
 		"@types/ws": "^8.18.1",
-		"@typescript-eslint/eslint-plugin": "^8.61.0",
-		"@typescript-eslint/parser": "^8.61.0",
+		"@typescript-eslint/eslint-plugin": "^8.62.0",
+		"@typescript-eslint/parser": "^8.62.0",
 		"@vitejs/plugin-react": "catalog:",
-		"@vitest/coverage-v8": "^4.1.8",
+		"@vitest/coverage-v8": "^4.1.9",
 		"@vscode/codicons": "catalog:",
-		"@vscode/test-cli": "^0.0.12",
+		"@vscode/test-cli": "^0.0.15",
 		"@vscode/test-electron": "^3.0.0",
 		"@vscode/vsce": "^3.9.2",
 		"babel-plugin-react-compiler": "catalog:",
 		"bufferutil": "^4.1.0",
-		"chromatic": "^17.4.1",
+		"chromatic": "^17.5.0",
 		"coder": "catalog:",
 		"concurrently": "^10.0.3",
 		"cross-env": "^10.1.0",
@@ -781,22 +781,22 @@
 		"eslint": "^10.5.0",
 		"eslint-config-prettier": "^10.1.8",
 		"eslint-import-resolver-typescript": "^4.4.5",
-		"eslint-plugin-import-x": "^4.16.2",
-		"eslint-plugin-package-json": "^1.3.0",
-		"eslint-plugin-storybook": "^10.4.4",
-		"globals": "^17.6.0",
+		"eslint-plugin-import-x": "^4.17.0",
+		"eslint-plugin-package-json": "^1.5.0",
+		"eslint-plugin-storybook": "^10.4.6",
+		"globals": "^17.7.0",
 		"jsdom": "^29.1.1",
 		"jsonc-eslint-parser": "^3.1.0",
-		"memfs": "^4.57.7",
+		"memfs": "^4.57.8",
 		"prettier": "^3.8.4",
 		"react": "catalog:",
 		"react-dom": "catalog:",
-		"storybook": "^10.4.4",
+		"storybook": "^10.4.6",
 		"typescript": "catalog:",
-		"typescript-eslint": "^8.61.0",
+		"typescript-eslint": "^8.62.0",
 		"utf-8-validate": "^6.0.6",
 		"vite": "catalog:",
-		"vitest": "^4.1.8"
+		"vitest": "^4.1.9"
 	},
 	"extensionPack": [
 		"ms-vscode-remote.remote-ssh"