chore(deps-dev): bump ts-node from 9.1.1 to 10.0.0

Bumps [ts-node](https://github.com/TypeStrong/ts-node) from 9.1.1 to 10.0.0.
- [Release notes](https://github.com/TypeStrong/ts-node/releases)
- [Commits](https://github.com/TypeStrong/ts-node/compare/v9.1.1...v10.0.0)
Signed-off-by: Ndependabot[bot] <support@github.com>

chore(deps): bump browserslist from 4.16.4 to 4.16.6 in /test

docs: add Pomerium

Bumps [browserslist](https://github.com/browserslist/browserslist) from 4.16.4 to 4.16.6.
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](https://github.com/browserslist/browserslist/compare/4.16.4...4.16.6)
Signed-off-by: Ndependabot[bot] <support@github.com>

fix(ci): disable trivy-scan-image

chore(deps-dev): bump eslint-plugin-import from 2.23.2 to 2.23.3

chore(deps-dev): bump eslint from 7.26.0 to 7.27.0

Bumps [eslint-plugin-import](https://github.com/benmosher/eslint-plugin-import) from 2.23.2 to 2.23.3.
- [Release notes](https://github.com/benmosher/eslint-plugin-import/releases)
- [Changelog](https://github.com/benmosher/eslint-plugin-import/blob/master/CHANGELOG.md)
- [Commits](https://github.com/benmosher/eslint-plugin-import/compare/v2.23.2...v2.23.3)
Signed-off-by: Ndependabot[bot] <support@github.com>

Bumps [eslint](https://github.com/eslint/eslint) from 7.26.0 to 7.27.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v7.26.0...v7.27.0)
Signed-off-by: Ndependabot[bot] <support@github.com>

release: 3.10.2

fix(ci): update brew-bump.sh to update remote first

* chore: update CHANGELOG

* fix: use openFolder in welcomePage

In 1.56.2, they modified the WelcomePage use of OpenFileFolder in
src/vs/workbench/contrib/debug/browser/welcomeView.ts to only use on macOS +
Desktop (i.e. not Web). This caused the "Open Folder" to not work on macOS +
macOS-like environments.

Instead, we use OpenFolder which is a registered command and works as expected.

Co-authored-by: NJoe Previte <jjprevite@gmail.com>

Introduce extraInitContainers to helm chart

fix(dependabot): limit limiter updates

New extraInitContainers configuration added.
It allows to pass template with a list of containers to execute before
main code-server container started. Main container will only start when
all init containers are  completed (exited with 0 code).

 Additionally changes the way extraContainers is used - instead of
 toYaml use tpl, because this allows to
 reference any values from extraContainers string.

RE: https://github.com/pomerium/pomerium/pull/2223