Environment
@vscode/vsce: 3.9.2 (latest when tested)- npm on GitHub-hosted Node 22 runners
Reproduction
npm install --no-audit --no-fund
with @vscode/vsce in devDependencies emits deprecation warnings for prebuild-install@7.1.3 and whatwg-encoding@3.1.1. npm ls traces these through the optional keytar path and the cheerio/encoding-sniffer path respectively. Public CI reproduction: https://github.com/link-assistant/formal-ai/actions/runs/29465138404.
Expected
Installing the current packaging CLI on its supported Node release should be warning-free.
Suggested fix
Update or remove the optional keytar/prebuild-install path and update the HTML/encoding dependency chain; add a Node 22/24 install smoke test that rejects npm deprecation diagnostics.
Environment
@vscode/vsce: 3.9.2 (latest when tested)Reproduction
with
@vscode/vscein devDependencies emits deprecation warnings forprebuild-install@7.1.3andwhatwg-encoding@3.1.1.npm lstraces these through the optional keytar path and the cheerio/encoding-sniffer path respectively. Public CI reproduction: https://github.com/link-assistant/formal-ai/actions/runs/29465138404.Expected
Installing the current packaging CLI on its supported Node release should be warning-free.
Suggested fix
Update or remove the optional keytar/prebuild-install path and update the HTML/encoding dependency chain; add a Node 22/24 install smoke test that rejects npm deprecation diagnostics.