Fix Dependabot alerts and publish under prefix-dev

.github/workflows/ci.yaml

@@ -38,7 +38,7 @@ jobs:
         run: npm run compile
 
       - name: Package extension
-        run: npx vsce package
+        run: npx --no-install vsce package
 
   prerelease-code-marketplace:
     name: 'Pre-release (Code Marketplace)'
@@ -64,7 +64,7 @@ jobs:
           npm version "${MAJOR_MINOR}.$(date -u +'%y%j%H%M')" --no-git-tag-version
 
       - name: Publish Extension (Code Marketplace, pre-release)
-        run: npx vsce publish --pre-release --pat ${{ secrets.MARKETPLACE_TOKEN }}
+        run: npx --no-install vsce publish --pre-release --pat ${{ secrets.MARKETPLACE_TOKEN }}
 
   prerelease-openvsx:
     name: 'Pre-release (OpenVSX)'
@@ -90,5 +90,5 @@ jobs:
           npm version "${MAJOR_MINOR}.$(date -u +'%y%j%H%M')" --no-git-tag-version
 
       - name: Publish Extension (OpenVSX, pre-release)
-        run: npx ovsx publish --pre-release --pat ${{ secrets.OPENVSX_TOKEN }}
+        run: npx --no-install ovsx publish --pre-release --pat ${{ secrets.OPENVSX_TOKEN }}
         timeout-minutes: 2

.github/workflows/release.yaml

@@ -18,7 +18,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
-          fetch-depth: ${{ env.FETCH_DEPTH }}
+          fetch-depth: 0
 
       - name: Validate package version matches git tag
         run: |
@@ -49,7 +49,7 @@ jobs:
 
       # Publish to the Code Marketplace.
       - name: Publish Extension (Code Marketplace)
-        run: npx vsce publish --pat ${{ secrets.MARKETPLACE_TOKEN }}
+        run: npx --no-install vsce publish --pat ${{ secrets.MARKETPLACE_TOKEN }}
 
   publish-openvsx:
     name: 'Publish (OpenVSX)'
@@ -71,5 +71,5 @@ jobs:
 
       # Publish to OpenVSX.
       - name: Publish Extension (OpenVSX, release)
-        run: npx ovsx publish --pat ${{ secrets.OPENVSX_TOKEN }}
+        run: npx --no-install ovsx publish --pat ${{ secrets.OPENVSX_TOKEN }}
         timeout-minutes: 2

CHANGELOG.md

@@ -5,6 +5,11 @@ All notable changes to the "pixi-code" extension will be documented in this file
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+- Publish under the `prefix-dev` publisher (extension ID is now `prefix-dev.pixi-code`)
+- Update dependencies to fix security advisories
+
 ## [0.2.0]
 
 - Use published @vscode/python-environments API package

CONTRIBUTING.md

@@ -13,7 +13,7 @@ Code extension that integrates Pixi environments with the Python Environments ex
 2. **Clone and setup**
 
     ```bash
-    git clone https://github.com/renan-r-santos/pixi-code.git
+    git clone https://github.com/prefix-dev/pixi-code.git
     cd pixi-code
     npm install
     ```

README.md

@@ -3,7 +3,7 @@
 <img src="./assets/icon.png" alt="VSCode" width="220" height="220">
 
 [![VS Code Marketplace
-Version](https://img.shields.io/visual-studio-marketplace/v/renan-r-santos.pixi-code)](https://marketplace.visualstudio.com/items?itemName=renan-r-santos.pixi-code)
+Version](https://img.shields.io/visual-studio-marketplace/v/prefix-dev.pixi-code)](https://marketplace.visualstudio.com/items?itemName=prefix-dev.pixi-code)
 
 </div>
 
@@ -35,7 +35,7 @@ conda, venv, and other Python environments in VS Code.
 ## Installation
 
 1. Install Pixi on your system
-2. Install [this extension](https://marketplace.visualstudio.com/items?itemName=renan-r-santos.pixi-code) from the VS
+2. Install [this extension](https://marketplace.visualstudio.com/items?itemName=prefix-dev.pixi-code) from the VS
    Code Marketplace
 3. Open a project with a `pixi.toml` or `pyproject.toml` file