security: clear Dependabot alert #2 (critical wish SCP path traversal) + harden VS Code dev deps - #618

Merged

jeduden merged 2 commits into

mainfrom

claude/wizardly-albattani-enivm8

Jun 14, 2026

Commits on Jun 14, 2026

security: drop vhs dev tool to clear critical wish SCP path traversal (CVE-2026-41589)
claude
committed
security: patch VS Code extension dev-dependency transitives
claude
committed