fix(deps): update dependency @theia/workspace to v1.69.0 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@theia/workspace	1.67.0 → 1.69.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

[Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions

CVE-2026-44691 / GHSA-g9jw-92q7-g7fj

More information

Details

In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g. .theia/tasks.json, .vscode/tasks.json) could be executed without requiring workspace trust. An attacker could craft a malicious repository that, when cloned and opened in Theia, leads to execution of arbitrary commands with the user's privileges. In combination with AI chat features and a workspace .theia/settings.json that disabled tool confirmation, this could be triggered automatically by sending a message in the AI chat.

Severity

• CVSS Score: 8.4 / 10 (High)
• Vector String: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-44691
• https://gitlab.eclipse.org/security/cve-assignment/-/work_items/116
• https://github.com/eclipse-theia/theia/issues/16889
• https://github.com/eclipse-theia/theia/pull/16917
• https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/331
• https://github.com/advisories/GHSA-g9jw-92q7-g7fj

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

Release Notes

eclipse-theia/theia (@​theia/workspace)

v1.69.0

Compare Source

• [ai] declared agent-specific variable in claudeCode agent and improved agent specific variable status UX #​16967

• [ai-anthropic] added support for custom anthropic models #​16673

• [ai-anthropic] updated max tokens for opus 4.6 #​17051

• [ai-anthropic, ai-core, ai-google, ai-openai] updated models #​17040

• [ai-chat] added mode selector to ask AI input without session overhead or code duplication #​16914 - contributed on behalf of EclipseSource

• [ai-chat] added showInChat property to control agent visibility in chat #​16925

• [ai-chat] do not open editor on apply change #​16986

• [ai-chat] fixed cannot configure tool confirmation mode if default is configured in package.json preferences #​17068 - Contributed on behalf of Lonti.com Pty Ltd.

• [ai-chat] fixed: clear image context from chat input after sending #​16863

• [ai-chat] improved usability of image file picker #​17018

• [ai-chat] small ui improvements #​16952

• [ai-chat-ui] added back/forward navigation between chats in the AI Chat View #​16894

• [ai-chat-ui] added generic capabilities selection UI for chat requests #​17041

• [ai-chat-ui] displayed images in chat request tree nodes #​17024

• [ai-chat-ui] improved image variable semantics and behavior #​16902 - contributed on behalf of STMicroelectronics

• [ai-chat-ui] improved tool call hover behavior and argument rendering #​16990

• [ai-chat-ui] improved tool call parameters rendering #​16844

• [ai-chat-ui] used bindRootContributionProvider for GenericCapabilitiesContribution #​17070

• [ai-claude-code] implemented session-based tool approval for claude code #​16961

• [ai-claude-code] supported for the AskUserQuestion functionality #​16981

• [ai-copilot] ux improvements for GitHub copilot integration #​17059

• [ai-core] added ./prompts/skills default to preference description #​17008

• [ai-core] added capability variable for conditional prompt fragments #​16985

• [ai-core] improved AI agent completion notifications #​17029 - contributed on behalf of STMicroelectronics

• [ai-core] improved how to enable thinking mode #​17023

• [ai-core] made opus 4.6 default in model aliases #​17066

• [ai-core] passed toolCallId across RPC and normalized empty tool arguments #​16908

• [ai-core] sorted the list by agent name and removed disabled agents #​16997

• [ai-core] supported name and description for prompt fragments via frontmatter #​17048

• [ai-core] watched parent directory for skills folder creation #​16927

• [ai-history] showed prompt variant ID and edit state in history #​16876

• [ai-ide] added cards for recent chat sessions to the Welcome screen #​16894

• [ai-ide] added MCP server CRUD dialogs and slash commands to skills widget #​16991

• [ai-ide] allowed Theia Coder Agent Mode to launch Apps #​17012

• [ai-ide] consolidated coder prompts #​17004

• [ai-ide] enhanced and refined capabilities #​17049

• [ai-ide] fixed fileDiagnosticProvider to not open an editor #​17014

• [ai-ide] fixed small improvements in AI agent config view #​16974

• [ai-ide] fixed unread badge clearing all sessions when any chat is opened #​17045

• [ai-ide] improved AI Chat welcome screen styling and UX #​17039

• [ai-ide] made chrome dev App Tester default #​17042

• [ai-ide] made new plan mode default #​17005

• [ai-ide] Removed confusing escaping comment from function #​17006

• [ai-ide] removed usage statistics from devtools mcp #​16943

• [ai-ide] sorted agents alphabetically #​16979

• [ai-ide] sorted alphabetically the MCP servers, variables, tools, and prompts lists #​16983

• [ai-mcp] added roots support for mcp servers #​16911

• [ai-ollama] yielded toolCallResponsePart before calling the tool handler #​16976

• [ai-terminal] added shell command permission UI for AI terminal tool confirmation #​17054

• [ai-terminal] added shell command whitelist for auto-approval #​16931

• [ai-terminal] made shell command parser quote-aware #​17022

• [api-samples] improved clarity of sample contributions #​16937

• [ci] published next version on weekdays instead of only Mondays #​16989

• [core] added a simple Card React component #​16894

• [core] added locale and no-translate attributes to html element on startup #​16966

• [core] changed 'no reply handler' from throw to console.warn #​16850 - contributed on behalf of es6kr

• [core] fixed issue of preserving multiple consecutive spaces in theia ui elements #​16935

• [core] fixed validation error messages in vscode.window.showInputBox and vscode.window.createInputBox #​17001

• [core] fixed whitespace collapsing in explorer file/folder names #​16932

• [core] improved containerBasedContributionProvider memory cleanup #​17021

• [core] only set window.titleBarStyle preference if different from active value #​16425

• [core] updated the dragdrop and widgets packages to the latest #​16970

• [debug] prevented task execution and debug session creation without workspace trust #​16917

• [debug] updated debug frame decoration logic #​16995

• [dev-packages] merged the changes from the release branch to master #​16910

• [editor] added formatter status bar with smart configuration management #​16829

• [localization-manager] supported string concatenation and template literals in nls extraction and improved translation quality #​17035

• [monaco] Called handleVisibilityChanged for embedded diff editor #​17009

• [monaco] fixed search-in-workspace replace all failure for unopened files #​16945

• [monaco] set model for embedded diff editors immediately #​16940

• [plugin] fixed hostedPluginReader loads browser plugins relying on implicit .js resolution #​16886

• [plugin-ext] fixed authentication session event chain #​16915

• [plugin-ext] supported custom editors in the recently opened files list in files search quick pick #​16999

• [preferences] scroll to focused item when search cleared #​16992

• [prompts] mentioned npm and tasks in project info #​16973

• [scm] improved merge conflict revealing #​16950

• [scm] improved scroll state preservation #​16960

• [scm] improved scroll sync implementation in merge editor #​16947

• [scm] improved UX for merge conflict actions in special cases #​16980

• [terminal] added optional trimRight parameter to TerminalBuffer.getLines to strip trailing whitespace used for terminal grid alignment #​16975

• [terminal] synchronized onOutput with buffer updates using onWriteParsed #​16934

• [ui] fixed debug console filter spellcheck and workspace trust dialog styles #​17015

• [vscode] api evolution (public) and nls update to 1.109.4 #​17047

• [vsx-registry] filtered versions for target platform in Extensions view #​17027

• [workspace] ensured UNC paths are normalized correctly on Windows #​16712

• [workspace] fixed minor css issues in workspace trust dialog and quick input list #​17063

• [workspace] prevented restart dialog on startup for empty windows #​16924

• [workspace] removed the seeding of workspace chat history from global history #​16933

• [debug] reduced calls to provide dynamic debug configs #​16916

• [terminal] fix TerminalBuffer.getLines to iterate in natural order instead of reversed order #​16975

• [terminal] fix TerminalBuffer.getLines to use the start parameter instead of replacing it with 0 #​16975

v1.68.2: Eclipse Theia v1.68.2

Compare Source

Based on https://github.com/eclipse-theia/theia/tree/v1.68.2

Includes the following fixes:

• 7a3a06d

Full Changelog: eclipse-theia/theia@v1.68.1...v1.68.2

v1.68.1: Eclipse Theia v1.68.1

Compare Source

Based on https://github.com/eclipse-theia/theia/tree/v1.68.1

Includes the following fixes:

• 980aa62
• e151a36
• 76d6187
• a3317ca
• 7766259

Full Changelog: should be generated via 'Generate release notes'

Full Changelog: eclipse-theia/theia@v1.68.0...v1.68.1

v1.68.0

Compare Source

• [ai-chat] added mode selection for coder and architect agents #​16860

• [ai-chat] fix: do not break chat when interrupting tool calls #​16806

• [ai-chat] fixed refresh bug after manual task context change #​16816

• [ai-chat] fixed respect for agentId in delegateToAgent when prompt contains @​mentions #​16855

• [ai-chat] fixed the failing test #​16897

• [ai-chat] implemented preference for AI chat persisted session limit #​16776

• [ai-chat] serialized and restored parsedChatRequest in chat sessions #​16736

• [ai-chat] stored persistent chat sessions in the workspace by default #​16847

• [ai-chat-ui] added toggle button to collapse changeset list #​16801

• [ai-chat-ui] displayed prompt variant customization in chat view responses and agent config #​16749

• [ai-chat-ui] enhanced chat accessibility (focus commands and ARIA) #​16835

• [ai-chat-ui] highlighted referenced tools in users' chat messages #​16812

• [ai-copilot] added GitHub Copilot language model integration #​16841

• [ai-core] added agent skills support #​16810

• [ai-core] updated default models #​16828

• [ai-hugging-face] upgraded sdk to v4.x for new api endpoint #​16864

• [ai-hugging-face] used patchLanguageModel to update model status #​16885

• [ai-ide] added createSkill agent #​16903

• [ai-ide] added Theia coder agent mode next prompt #​16799

• [ai-ide] added todo tool function #​16859

• [ai-ide] appTester improvements #​16898

• [ai-ide] fixed misleading tool description for context_addFiles #​16778

• [ai-ide] fixed model selection UI update for model alias #​16800

• [ai-ide] fixed remote MCP server state and improved UX #​16822

• [ai-ide] fixed selected item after model alias change #​16760

• [ai-ide] improved architect planning mode - next prompt #​16843

• [ai-ide] improved function descriptions #​16796

• [ai-ide] improved task context variable description #​16817

• [ai-ide] Reverted "Fixed #​16795 (#​16800)" #​16802

• [ai-ide] switched writeFileReplacement to V2 replacer #​16815

• [ai-mcp] blocked mcp server autostart in untrusted workspaces #​16891

• [ai-mcp] updated MCP SDK to v1.25.1 and migrated to zod v4 #​16780

• [core] added injectable LoggerSanitizer to mask sensitive data in logs #​16771 - Contributed on behalf of STMicroelectronics

• [core] fixed memory leaks from 'toDisposeOn' disposable collections #​16856

• [core] improved keybinding lookup and prioritization #​16763

• [core] postponed default override warning logging until builtin preferences registered #​16853

• [core] refactored tree search box into react widget and enhanced ux and styling #​16761

• [core] restored enhanced tab preview for all widgets #​16895

• [core] theia v1.67.0 released #​16738

• [core] translation update for version 1.68.0 #​16907

• [debug] fixed deletion of disabled source breakpoints #​16794

• [debug] improved debug console with output persistence and text filtering #​16882

• [doc] updated publishing guide documentation #​16768 - Contributed on behalf of STMicroelectronics

• [examples] fixed clean script for the example applications #​16767

• [github] added discussion auto-reply #​16746

• [github] added sponsoring hint to discussion templates #​16745

• [github] added sponsoring hint to gh ticket templates #​16744

• [localization-manager] set deepl auth header #​16906

• [messages] allowed copying messages from notifications and fixed copying of error messages in AI chat #​16830 - Contributed on behalf of STMicroelectronics

• [messages] handled notification timeout correctly when set to 0 #​16849 - Contributed on behalf of STMicroelectronics

• [monaco] updated built-in theme and color definitions #​16873

• [output] fixed state restoration in outputWidget #​16851

• [plugin] preserved lsp diagnostic.data in markers #​16766

• [plugin] updated VS Code built-in extensions to 1.104.0 and Typescript to 5.9.3 #​16774 - contributed on behalf of STMicroelectronics

• [preferences] marked llmprovider as experimental #​16784

• [preferences] supported preference tags in settings view #​16783

• [scm] added action button (commit button) support to scm #​16803 - contributed under the supervision of @​JonasHelming as part of the TUM Bachelor Thesis project "Enhancing Terminal Usability in Modern IDEs through AI-Assisted Interaction"

• [scm] fix manual resolution not detected in some cases #​16869

• [scm] fixed Go to Previous Unhandled Conflict doing nothing #​16838

• [scm] fixed mark as handled having no effect in some cases #​16858

• [scm] ux: fixed styling for scm commit button for high contrast themes #​16905

• [terminal-manager] improved handling of terminal manager preferences & element deletion #​16827

• [terminal-manager] updated active page handling on terminal page deletion #​16807

• [vscode] API evolution (public and proposed) and nls update to 1.108.0 #​16871 - contributed on behalf of STMicroelectronics

• [vsx-registry] fixed vsxExtensionsViewContainer onAfterAttach issue #​16862

• [workspace] implemented workspace trust dialog and management #​16809

• [workspace] improved computation of workspace trust for saved/multi-root workspaces #​16893

• [workspace] updated dialog and status bar item styling and fixed command state handling #​16877

• [monaco] refactored some of the fields in MonacoEditor and MonacoDiffEditor as part of #​16832:

  • changed the type of MonacoEditor.savedViewState from monaco.editor.ICodeEditorViewState | null to monaco.editor.IEditorViewState | null and also changed its visibility from public to protected
  • removed protected field MonacoEditor.model
  • removed protected fields savedDiffState, originalTextModel, and modifiedTextModel in MonacoDiffEditor

• [preferences] Removed the optional 'knownCurrentValue' argument to PreferenceLeadNodeRenderer#updateModificationStatus. Renamed isModifiedInScope to isSet to reflect new semantics. #​16836

• [core] removed oldValue and newValue fields from the PreferenceChange and the PreferenceProxy's PreferenceChangeEvent interfaces. The newValue field was a common footgun, as it represented the value in the changed scope rather than the effective value. In particular, it could be undefined when a given scope was cleared even if another scope provided a defined value. Use PreferenceService.get or PreferenceProxy.get or indexing on a PreferenceProxy to retrieve the active value rather than using the newValue field. #​16832

• [scm] refactored some of the methods pertaining to the 3-way Merge Editor implementation as part of #​16867

  • removed the MergeEditorModel.findMergeRanges method
  • renamed the RangeUtils.isBeforeOrTouching method to isBefore

• [ai-chat, ai-core] refactored tool handler context types #​16899: Tool handlers now receive ToolInvocationContext (with cancellationToken) instead of MutableChatRequestModel. Chat-bound tools should use assertChatContext(ctx) to access ChatToolContext with request and response properties.

• [ai-chat] fixed: refactor tool handler context types for type safety #​16901

• [ai-terminal] added shellExecutionTool for AI agents #​16878

• [core] passed widget consistently to toolbar enablement handlers #​16826

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.