VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks
In an effort to address software supply chain risks, Microsoft has stated that Visual Studio Code (VS Code) will implement a two-hour delay before extensions for the integrated development environment (IDE) are automatically updated to a newer version.
According to Microsoft, when automatic updates are enabled, new versions are automatically updated two hours after they are released, providing an additional line of defense against troublesome or possibly hacked releases. Beginning with VS Code 1.123, the new feature is accessible.
Beginning with VS Code 1.123, the new feature is accessible.
The tech giant pointed out that users can still utilize the "Update" button to instantly update any extension at any time. When extensions have outstanding updates, the details view will show ...