Read docs/development.md "Tracking Upstream Dependencies"
section for full context.
Rules
Dependencies are split into three groups:
dependencies — runtime packages bundled into the extension
devDependencies — build tools only (minimum for Azure DevOps pipeline)
optionalDependencies — lint, type-checking, and test tools (for development and GitHub Actions)
Always use npm install --include=optional to get all three groups.
The .npmrc uses an Azure Artifacts mirror; read its comments for authentication instructions.
When updating engines.vscode follow the "Tracking Upstream Dependencies" section of docs/development.md.
Update the ESLint packages (eslint, @eslint/js, typescript-eslint,
eslint-config-prettier) together and fix any new lint warnings.
After updating, verify: npm run compile, npm run lint, npm audit.
For vulnerabilities in transitive dependencies identified by npm audit, add an overrides entry in package.json
rather than using npm audit fix --force which may downgrade our packages.
Check that each overrides entry is still necessary.
1---2name: powershell-vscode-powershell-vscode-powershell3description: Updating NPM Packages4---56# Updating NPM Packages78Read [docs/development.md](../../../docs/development.md) "Tracking Upstream Dependencies"9section for full context.1011## Rules1213- Dependencies are split into three groups:14 - `dependencies` — runtime packages bundled into the extension15 - `devDependencies` — build tools only (minimum for Azure DevOps pipeline)16 - `optionalDependencies` — lint, type-checking, and test tools (for development and GitHub Actions)17- Always use `npm install --include=optional` to get all three groups.18- The `.npmrc` uses an Azure Artifacts mirror; read its comments for authentication instructions.19- When updating `engines.vscode` follow the "Tracking Upstream Dependencies" section of `docs/development.md`.20- Update the ESLint packages (`eslint`, `@eslint/js`, `typescript-eslint`,21 `eslint-config-prettier`) together and fix any new lint warnings.22- After updating, verify: `npm run compile`, `npm run lint`, `npm audit`.23- For vulnerabilities in transitive dependencies identified by `npm audit`, add an `overrides` entry in `package.json`24 rather than using `npm audit fix --force` which may downgrade our packages.25- Check that each `overrides` entry is still necessary.2627---28> Source: [PowerShell/vscode-powershell](https://github.com/PowerShell/vscode-powershell) — distributed by [TomeVault](https://tomevault.io).29<!-- tomevault:4.0:skill_md:2026-06-27 -->
Run npx skillmds@latest add tomevault-io/powershell-vscode-powershell-vscode-powershell in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Updating NPM Packages It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.