release: Refresh 2026.6 candidate from current main (#26164)

## Summary
- Bring the existing 2026.6 release candidate forward to the latest
main, incorporating the 23 changes that have been in 2026.7 Insiders.
- Keep package.json and package-lock.json at 2026.6.0; leave main at
2026.7.0-dev.
- Keep the stable PET pipeline on release/2026.4 for now; its upgrade is
a separate release decision.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Raymond Zhao <7199958+rzhao271@users.noreply.github.com>
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rich Chiodo <rchiodo@users.noreply.github.com>
Co-authored-by: Eduardo Villalpando Mello <eduardo.villalpando.mello@gmail.com>
Co-authored-by: Stella Huang <100439259+StellaHuang95@users.noreply.github.com>
Co-authored-by: Eduardo Villalpando Mello <eduardovil@microsoft.com>
Co-authored-by: edvilme <5952839+edvilme@users.noreply.github.com>
Co-authored-by: Mohit Yadav <ymohit799057@gmail.com>
Co-authored-by: Satyam Pandey <satyam53@tsecol.onmicrosoft.com>
Copilot-Session: f79da128-47e2-4a55-854d-0cf09f4673ad
Copilot-Session: 2f537bc5-b389-4ee2-aac2-e2b83be47f5c
Copilot-Session: d598cbab-c8ac-496d-9757-ac98a8c9846f
Copilot-Session: 18854bb1-a4b0-4127-be25-ee17cb78943b

Author: 10 people

.github/workflows/codeql-analysis.yml

@@ -42,7 +42,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@v4.37.9
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -67,4 +67,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@v4.37.9

.github/workflows/pr-file-check.yml

@@ -9,7 +9,8 @@ on:
       - 'labeled'
       - 'unlabeled'
 
-permissions: {}
+permissions:
+  pull-requests: read
 
 jobs:
   changed-files-in-pr:
@@ -19,6 +20,7 @@ jobs:
       - name: 'package-lock.json matches package.json'
         uses: brettcannon/check-for-changed-files@d85c64d17b3c1d0ac57c9cc46ea39399b0d6fa71 # v1.2.2
         with:
+          token: ${{ github.token }}
           prereq-pattern: 'package.json'
           file-pattern: 'package-lock.json'
           skip-label: 'skip package*.json'
@@ -27,6 +29,7 @@ jobs:
       - name: 'package.json matches package-lock.json'
         uses: brettcannon/check-for-changed-files@d85c64d17b3c1d0ac57c9cc46ea39399b0d6fa71 # v1.2.2
         with:
+          token: ${{ github.token }}
           prereq-pattern: 'package-lock.json'
           file-pattern: 'package.json'
           skip-label: 'skip package*.json'
@@ -35,6 +38,7 @@ jobs:
       - name: 'Tests'
         uses: brettcannon/check-for-changed-files@d85c64d17b3c1d0ac57c9cc46ea39399b0d6fa71 # v1.2.2
         with:
+          token: ${{ github.token }}
           prereq-pattern: src/**/*.ts
           file-pattern: |
             src/**/*.test.ts

.gitignore

@@ -24,7 +24,6 @@ cucumber-report.json
 port.txt
 precommit.hook
 python_files/lib/**
-python_files/get-pip.py
 debug_coverage*/**
 languageServer/**
 languageServer.*/**

.vscodeignore

@@ -63,6 +63,7 @@ out/test/**
 out/testMultiRootWkspc/**
 precommit.hook
 python_files/**/*.pyc
+python_files/download_get_pip.py
 python_files/lib/**/*.egg-info/**
 python_files/lib/jedilsp/bin/**
 python_files/lib/python/bin/**

build/azure-pipeline.pre-release.yml

@@ -64,9 +64,20 @@ extends:
         vsceTarget: win32-x64
 
     buildSteps:
-      - task: NodeTool@0
+      - bash: |
+          set -euo pipefail
+          nodeVersion="$(tr -d '\r\n' < .nvmrc)"
+          nodeVersion="${nodeVersion#v}"
+          if [[ -z "$nodeVersion" ]]; then
+            echo ".nvmrc does not contain a Node version" >&2
+            exit 1
+          fi
+          echo "##vso[task.setvariable variable=nodeVersion;isReadOnly=true]$nodeVersion"
+        displayName: Read Node version
+
+      - task: UseNode@1
         inputs:
-          versionSpec: '22.17.0'
+          version: $(nodeVersion)
         displayName: Select Node version
 
       - task: UsePythonVersion@0
@@ -76,17 +87,22 @@ extends:
           architecture: 'x64'
         displayName: Select Python version
 
+      - task: PipAuthenticate@1
+        inputs:
+          artifactFeeds: 'Monaco/vscode'
+        displayName: Authenticate to vscode feed
+
       - script: python -m pip install -U pip
         displayName: Upgrade pip
 
-      - script: python -m pip install wheel nox
+      - script: python -m pip install wheel==0.47.0 nox==2026.7.11
         displayName: Install wheel and nox
 
       - script: npm ci
         displayName: Install NPM dependencies
 
       - script: nox --session install_python_libs
-        displayName: Install Jedi, get-pip, etc
+        displayName: Install Python extension dependencies
 
       - script: python ./build/update_package_file.py
         displayName: Update telemetry in package.json

build/azure-pipeline.stable.yml

@@ -58,9 +58,20 @@ extends:
         vsceTarget: win32-x64
 
     buildSteps:
-      - task: NodeTool@0
+      - bash: |
+          set -euo pipefail
+          nodeVersion="$(tr -d '\r\n' < .nvmrc)"
+          nodeVersion="${nodeVersion#v}"
+          if [[ -z "$nodeVersion" ]]; then
+            echo ".nvmrc does not contain a Node version" >&2
+            exit 1
+          fi
+          echo "##vso[task.setvariable variable=nodeVersion;isReadOnly=true]$nodeVersion"
+        displayName: Read Node version
+
+      - task: UseNode@1
         inputs:
-          versionSpec: '22.17.0'
+          version: $(nodeVersion)
         displayName: Select Node version
 
       - task: UsePythonVersion@0
@@ -70,17 +81,22 @@ extends:
           architecture: 'x64'
         displayName: Select Python version
 
+      - task: PipAuthenticate@1
+        inputs:
+          artifactFeeds: 'Monaco/vscode'
+        displayName: Authenticate to vscode feed
+
       - script: python -m pip install -U pip
         displayName: Upgrade pip
 
-      - script: python -m pip install wheel nox
+      - script: python -m pip install wheel==0.47.0 nox==2026.7.11
         displayName: Install wheel and nox
 
       - script: npm ci
         displayName: Install NPM dependencies
 
       - script: nox --session install_python_libs
-        displayName: Install Jedi, get-pip, etc
+        displayName: Install Python extension dependencies
 
       - script: python ./build/update_package_file.py
         displayName: Update telemetry in package.json

build/build-install-requirements.txt

@@ -4,7 +4,7 @@
             "Component": {
                 "Other": {
                     "Name": "get-pip",
-                    "Version": "21.3.1",
+                    "Version": "26.2.1",
                     "DownloadUrl": "https://github.com/pypa/get-pip"
                 },
                 "Type": "other"

cgmanifest.json

@@ -9,7 +9,6 @@
 'use strict';
 
 const gulp = require('gulp');
-const ts = require('gulp-typescript');
 const spawn = require('cross-spawn');
 const path = require('path');
 const del = require('del');
@@ -20,22 +19,15 @@ const nativeDependencyChecker = require('node-has-native-dependencies');
 const flat = require('flat');
 const { argv } = require('yargs');
 const os = require('os');
-const typescript = require('typescript');
-
-const tsProject = ts.createProject('./tsconfig.json', { typescript });
-
 const isCI = process.env.TRAVIS === 'true' || process.env.TF_BUILD !== undefined;
 
 gulp.task('compileCore', (done) => {
-    let failed = false;
-    tsProject
-        .src()
-        .pipe(tsProject())
-        .on('error', () => {
-            failed = true;
-        })
-        .js.pipe(gulp.dest('out'))
-        .on('finish', () => (failed ? done(new Error('TypeScript compilation errors')) : done()));
+    spawnAsync(process.execPath, ['./node_modules/typescript/lib/tsc.js', '-p', './tsconfig.json'], undefined, true)
+        .then(() => done())
+        .catch((ex) => {
+            console.log(ex);
+            done(new Error(`TypeScript compilation errors: ${ex instanceof Error ? ex.message : ex}`));
+        });
 });
 
 gulp.task('compileApi', (done) => {

gulpfile.js

@@ -55,13 +55,6 @@ def install_python_libs(session: nox.Session):
     session.install("packaging")
     session.install("debugpy")
 
-    # Download get-pip script
-    session.run(
-        "python",
-        "./python_files/download_get_pip.py",
-        env={"PYTHONPATH": "./python_files/lib/temp"},
-    )
-
     if pathlib.Path("./python_files/lib/temp").exists():
         shutil.rmtree("./python_files/lib/temp")