Repository navigation
release: prepare 0.1.10 with audit and presentation hardening - #18
Merged
Merged
Conversation
This was referenced Aug 8, 2026
## Summary - Rework the README around direct installation, quick start, trust boundaries, and explicit compatibility status. - Remove unverified Cursor and Windsurf claims from Marketplace metadata and move cross-promotion below the core documentation. - Add a deterministic 1280×640 GitHub social preview without reusing the existing OpenAI-like artwork. - Synchronize `0.1.10` across the manifest, lockfile, README, changelog, citation metadata, and regression tests. ## Related Issue No linked issue. This PR targets the head branch of #18 so the presentation and release preparation can be validated independently before #18 is merged to `main`. ## Validation - [x] `npm run check` - [x] `npm run audit` (required for dependency or lockfile changes) - [x] Packaged VSIX inspected (required for release-facing changes) Additional evidence: - 41/41 tests passed. - VS Code 1.103.0 integration smoke test passed. - The social preview is 1280×640 and contains no embedded or external logo image. - `npm run package` produced a 14-file `0.1.10` VSIX with `.github/`, sources, tests, workflows, source maps, and local artifacts excluded. - Release-candidate VSIX SHA-256: `C0764B7359FF3CC704D6B6E6BDBC2C95F4099F76288A7E47ACC1F952BCB8DB7B`. - `git diff --cached --check` passed before commit. ## Checklist - [x] Tests cover new or changed behavior - [x] User-facing behavior is documented - [x] `CHANGELOG.md` is updated when appropriate - [x] Workspace trust, command scope, telemetry, and installer restrictions remain intact - [x] No generated files, secrets, or unrelated changes are included ## Screenshots or Notes Repository settings already updated outside the diff: - Added `openai-codex`, `open-vsx`, and `terminal` topics. - Disabled Discussions so support remains centralized in structured Issues. The social-preview asset is committed; uploading it to GitHub repository settings remains pending because the connected Chrome extension lacks file-URL access. No runtime UI, protected artwork, Marketplace publication, or Open VSX publication is included.
TheStreamCode
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
&call-operator commands when identifying the Codex executable without rewriting the configured command.fast-uri,js-yaml, andundicidevelopment dependency advisories together.0.1.10release across manifest, lockfile, README, changelog, citation metadata, and regression tests.Related Issue
No linked issue. This consolidates the completed presentation PR #19 and supersedes the closed Dependabot PRs #16 and #17.
Validation
npm run checknpm run audit(required for dependency or lockfile changes)Additional evidence:
npm run packageproduced a 14-file0.1.10VSIX with sources, tests, workflows,.github/, source maps, and local artifacts excluded.C0764B7359FF3CC704D6B6E6BDBC2C95F4099F76288A7E47ACC1F952BCB8DB7B.git diff --checkpassed.Checklist
CHANGELOG.mdis updated when appropriateScreenshots or Notes
Repository settings updated outside the diff: admin enforcement remains enabled on
main, the repository topics now includeopenai-codex,open-vsx, andterminal, and Discussions are disabled so support remains centralized in Issues.No runtime UI or protected artwork was changed. Marketplace and Open VSX publication remain owner-managed; this PR prepares the GitHub release and VSIX only.