From 0862df410c6f4478854245eb1e4da7472f89a26f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20Bal=C3=ADn?= <Martin.Balin@oracle.com>
Date: Wed, 26 Nov 2025 20:45:42 +0100
Subject: [PATCH 1/2] Update js-yaml.npm to fix CVE-2025-64718

---
 vscode/package-lock.json | 12 ++++++++----
 vscode/package.json      | 22 +++++++++++++---------
 2 files changed, 21 insertions(+), 13 deletions(-)

diff --git a/vscode/package-lock.json b/vscode/package-lock.json
index 3324da7..2568581 100644
--- a/vscode/package-lock.json
+++ b/vscode/package-lock.json
@@ -1183,7 +1183,9 @@
 			"peer": true
 		},
 		"node_modules/js-yaml": {
-			"version": "4.1.0",
+			"version": "4.1.1",
+			"resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
+			"integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
 			"dev": true,
 			"license": "MIT",
 			"dependencies": {
@@ -1285,7 +1287,7 @@
 				"glob": "7.2.0",
 				"growl": "1.10.5",
 				"he": "1.2.0",
-				"js-yaml": "4.1.0",
+				"js-yaml": "^4.1.1",
 				"log-symbols": "4.1.0",
 				"minimatch": "4.2.1",
 				"ms": "2.1.3",
@@ -2495,7 +2497,9 @@
 			"peer": true
 		},
 		"js-yaml": {
-			"version": "4.1.0",
+			"version": "4.1.1",
+			"resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
+			"integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
 			"dev": true,
 			"requires": {
 				"argparse": "^2.0.1"
@@ -2564,7 +2568,7 @@
 				"glob": "7.2.0",
 				"growl": "1.10.5",
 				"he": "1.2.0",
-				"js-yaml": "4.1.0",
+				"js-yaml": "^4.1.1",
 				"log-symbols": "4.1.0",
 				"minimatch": "4.2.1",
 				"ms": "2.1.3",
diff --git a/vscode/package.json b/vscode/package.json
index d9d08d7..3ee87d2 100644
--- a/vscode/package.json
+++ b/vscode/package.json
@@ -271,15 +271,19 @@
 					"description": "Enable or disable various inline hints.",
 					"type": "array",
 					"default": [],
-                                        "items": {
-                                            "type": "string",
-                                            "enum": ["chained", "parameter", "var"],
-                                            "markdownEnumDescriptions": [
-                                                "show return types of chained methods",
-                                                "show parameter names",
-                                                "show types of `var` variables"
-                                            ]
-                                        }
+					"items": {
+						"type": "string",
+						"enum": [
+							"chained",
+							"parameter",
+							"var"
+						],
+						"markdownEnumDescriptions": [
+							"show return types of chained methods",
+							"show parameter names",
+							"show types of `var` variables"
+						]
+					}
 				}
 			}
 		},

From 989f3714e678d373a7ae962db6655353c6736d8b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20Bal=C3=ADn?= <Martin.Balin@oracle.com>
Date: Thu, 27 Nov 2025 08:40:10 +0100
Subject: [PATCH 2/2] Update Changelog for 28.0.1 release

---
 vscode/CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/vscode/CHANGELOG.md b/vscode/CHANGELOG.md
index 66534e0..bba5844 100644
--- a/vscode/CHANGELOG.md
+++ b/vscode/CHANGELOG.md
@@ -20,6 +20,10 @@
     under the License.
 
 -->
+## Version 28.0.1
+* VSNetBeans release based on Apache NetBeans 28.0 IDE release
+* Several fixes improving VS Code functionality
+
 ## Version 27.0.1
 * Support Gradle 9 and several bug fixes for Gradle
 * 1st release of Apache NetBeans for VS Code done from `netbeans-vscode` repository