build: move to Code - OSS 1.138.0 - #465
Merged
Merged
Conversation
1.138.0 still targets Node 24 (remote/.npmrc names 24.18.1, the bundled Termux runtime is 24.18.0) and locks the same node-pty, @parcel/watcher and @vscode/sqlite3 that the Bionic overlay builds, so the runtime and the native addons stay as they are. - VSCODE_VERSION and VSCODE_COMMIT name the 1.138.0 tag and 7debcd0e. - 0001 and 0012 are rebased onto moved context. Their added and removed lines are unchanged, and all nineteen patches apply to 7debcd0e in order. - The workbench page's policy now trusts inline scripts by a nonce the server writes into each request, and no longer hashes bare <script> tags. The two scripts server.js adds to the page (trusted link domains and extension recommendations) would have been refused without a word, so they now carry the page's own nonce placeholder when the page uses one. - The agent host's @github/copilot-linux-arm64 moves to 1.0.84-4, whose runtime.node imports malloc_trim@GLIBC_2.17. Bionic has none at any API level, so its forwarder would abort on the first call. The glibc shim now answers it with mallopt(M_PURGE); every other strong import is exported by Bionic at API 33 or already by the shim. - @microsoft/mxc-sdk 0.8.0 replaced its glibc linux-test-proxy with a Mach-O unix-test-proxy, so that path leaves the ELF allowlist, whose stale-entry check would otherwise fail the packaging, and LEGAL_NOTICES.md lists the thirteen binaries 0.8.0 ships. - VSCODE_LOC_COMMIT moves to the first vscode-loc string drop after the 1.138.0 tag, microsoft/vscode-loc#2412, one commit on top of the previous pin and kept reachable by its pull request ref. vscode-loc's main has not moved since 2026-09-04: against the localize() keys in the 1.138 sources, that commit lacks about 5 percent of them and leaves about 2,800 more in English in each language. The published server-1.133.0 no longer matches patches/, so a server-1.138.0 build has to be published before an APK can be packaged.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Moves the Code - OSS server from 1.133.0 to 1.138.0. The published
server-1.138.0prerelease was built from this branch bybuild-vscode-oss.yml.1.138.0 still targets Node 24 (
remote/.npmrcnames 24.18.1; the bundled Termux runtime is 24.18.0, and no startup check refuses it). It also locks the same node-pty, @parcel/watcher and @vscode/sqlite3 the Bionic overlay builds, so the runtime and native addons stay as they are.Changes:
VSCODE_VERSIONandVSCODE_COMMITname the 1.138.0 tag (7debcd0e).0001and0012are rebased onto moved context; their added and removed lines are unchanged, and all 19 patches apply to7debcd0ein order.patches/fingerprints.txtrows still match.server.js: the 1.138 workbench page trusts inline scripts by a per-request nonce ({{WORKBENCH_SCRIPT_NONCE}}) instead of hashing bare<script>tags. The two scripts it adds (trusted link domains, extension recommendations) would have been refused without an error, soextendWorkbenchPagenow writes the page's own nonce placeholder when the page uses one.test-server-bootstrap.jscovers the 1.138-shaped page.glibc-shim.c: the agent host's@github/copilot-linux-arm64moves to 1.0.84-4, whoseruntime.nodeimportsmalloc_trim@GLIBC_2.17. Bionic has nomalloc_trimat any API level, so the forwarder would abort on the first call. It is now answered withmallopt(M_PURGE).@microsoft/mxc-sdk0.8.0 replaced its glibclinux-test-proxywith a Mach-Ounix-test-proxy. That path leaves the ELF allowlist inverify-android-elf.py, whose stale-entry check would otherwise fail packaging, andLEGAL_NOTICES.mdlists the thirteen binaries 0.8.0 ships.VSCODE_LOC_COMMITmoves to Updated strings from microsoft/vscode-loc-drop@0d6c79fe1758ae1e79bf289e187c477e0bc439ec microsoft/vscode-loc#2412 (06b1c836), the first string drop after the 1.138.0 tag. It is one commit on top of the previous pin and is reachable through its pull request ref; vscode-loc's main has not moved since 2026-09-04. All 13 bundles build at 100%.Verified on a Pixel 10 API 36 emulator, upgrading from a main build (1.133.0, versionCode 15) to this build (versionCode 16 locally), with the upgrade setup re-extracting the tree:
7debcd0e,/versionanswers 200, and the workbench loads with the VSCodroid walkthrough (0011).node24.18.0,python33.14.6,git2.55.0, andvscodroid --versionprints 1.138.0.vscodroid --install-extension anthropic.claude-codeinstalledanthropic.claude-code-2.1.283-alpine-arm64(0001 + 0009). Its CLI printed2.1.283 (Claude Code)throughlibclaude-launch.so, rc 0.statedecoded to the full callback on the newstable-7debcd0eroute. Sent back withprompt=none, the callback reached the app and the extension got Microsoft's answer after 51 s.runtime.node1.0.84-4 mapped through thelibc.so.6stub andlibglibc-shim.so, with noglibc-shimlog lines. The new stub exportsmalloc_trim@@GLIBC_2.17; the previous one did not.vsda404s.test-server-bootstrap.js,verify-android-elf.py --self-test,check-library-attribution.pyand the packaging gates pass.The same upgrade path on a Pixel 7 Pro API 33 emulator (minSdk): the server reports 1.138.0, the terminal tools and
vscodroid --versionanswer,vscodroid --install-extension anthropic.claude-codeinstalls the alpine-arm64 build, its CLI runs through the launcher and seccomp shim (rc 0), and both injected scripts run.Not verified: a signed-in chat turn, which is what calls
malloc_trim.