endless loop while updating extension

[SimonSiefke]

• VSCode Version: 1.46.0-insider
• OS Version: Ubuntu 20.04

Steps to Reproduce:

1. Install Version Lens
2. Version Lens tries to update 1.0.1 (even though latest version seems to be 1.0.0)
3. Endless loop

Does this issue occur when all extensions are disabled? No

[Jakeeyturner]

On our extension, our users are seeing this problem as well - IBM-Blockchain/blockchain-vscode-extension#2349

We published a VSIX yesterday, so I'm guessing something is wrong with the marketplace. I'm hoping publishing a new version of our VSIX sorts the problem 🤞

[Jakeeyturner]

Publishing IBMBlockchain.ibm-blockchain-platform@1.0.30...
 ERROR  TF10216: Azure DevOps services are currently unavailable. Try again later. Activity Id: 27ab2aeb-cf42-430c-bae4-867cf103ce27

Looks like the marketplace is having issues.

[jacek-leoniec]

This issue is causing fan in MacPro spin at highest rate

[matthewlederman]

For Ubuntu 18.04 as well. I was updating from 1.0.28 which was working fine. Even tried a clean install of VS Code. No luck.

[matthewlederman]

I have a temporary fix/workaround.

The attempt to install 1.0.30 left this in ~/.vscode/extensions

.ibmblockchain.ibm-blockchain-platform-1.0.28

So

$ cd .vscode/extensions/

Copy it out

$ cp -r .ibmblockchain.ibm-blockchain-platform-1.0.28/ ibmblockchain.ibm-blockchain-platform-1.0.28

$ cd ibmblockchain.ibm-blockchain-platform-1.0.28/

$ npm install

After that completes, start up VS Code. It will take a while rebuild environments, etc., but everything seemed come back. Also, you might think about stopping automatic upgrades/updates/whatever in preferences.

[didaquis]

Also, you might think about stopping automatic upgrades/updates/whatever in preferences.

+1 to this!

[pflannery]

@joaomoreno

The problem seems to be how vscode is handling the api results from the marketplace

When version lens is not installed the json results from https://marketplace.visualstudio.com/_apis/public/gallery/extensionquery shows

v1.0.0 and flags=verified (screenshots from fiddler)

Once version lens is installed then the json shows v1.0.4 with flags=none

This is when I see

In the marketplace

After publishing the extension since v1.0.0 I see this error (screenshot from 2 days ago):

The error popup says this:

The extension 'vscode-versionlens' from 'pflannery' contains an entry which is unsafe for extraction.

I get a log file emailed to me and that shows the same high level message.

To add I have'nt actually included anything unsafe, in fact since v1.0.0 I've reduced the amount of production node_modules to less than half the file size.

There are 0 security issues reported by npm audit and github, so god knows what marketplace is falling over on.

When running vscode/vsce it packages and publishes to marketplace with no errors.

I emailed marketplace support 2 days ago and I'm just waiting to get more information about what the problem is.

The short term workaround is to install manually from the generated releases -> https://github.com/vscode-contrib/vscode-versionlens/releases

The issue is also being tracked at https://github.com/vscode-contrib/vscode-versionlens/issues/211