shellEmulator: true trustPolicy: no-downgrade # vsce 的传递依赖 parse-semver 钉死 semver@5.x,这一支停更在 provenance 普及之前, # 永远补不上签名;不豁免的话 no-downgrade 会卡住整个装包。 trustPolicyExclude: - semver@5.7.2 || 6.3.1 packages: - webview-ui patchedDependencies: buffer-equal-constant-time@1.0.1: patches/buffer-equal-constant-time@1.0.1.patch