This Jira cannot be summarized due to security protections. It must not be summarized.

On code-server workbench (both versions) we pre-install specific versions of the extensions, however observed that there is no mechanism to prevent the auto update. 

We can see in the code-server notebook logs that upgrades the `ms-python.python` from  `2024.2.1` to `2024.4.1`. 

[10:21:44] Extracted extension to file:///opt/app-root/src/.local/share/code-server/extensions/ms-python.python-2024.4.1-universal: ms-python.python
[10:21:44] Renamed to /opt/app-root/src/.local/share/code-server/extensions/ms-python.python-2024.4.1-universal
[10:21:44] Extracting extension completed. ms-python.python
[10:21:44] Extension installed successfully: ms-python.python
[10:21:44] Marked extension as uninstalled ms-python.python-2024.2.1

Dev

• Update the  code-server install-extension, to not allow `auto-update` link

 QA:

• we will trust that the vscode setting does what it is expected to do and just move on https://github.com/atheo89/notebooks/commit/0d1ab4d33feb187e747f626e2d18b881ddc0a606#r143328877; wdyt?
• we should check the logs as one-time check and see vs code is not doing any suspicious updates
• if we had any long-running tests, we could search for undesirable log patterns? or list the extensions from time to time and see versions haven't changed

Doc

maybe a release note in the resolved issues section? or just stay silent on this?

Slack refinement thread https://redhat-internal.slack.com/archives/C05TTTYG599/p1724939584470569