v0.33.1

This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

Changes

• chore: update devfile commands to use OpenVSX v0.33.0 by @svor in #1722
• Change: make malicious zip file checks a synchronous PublishCheck by @netomi in #1721
• Fix dispatcher race condition when multiple scan jobs are dispatched in one go by @netomi in #1740
• fix: display usage stats in UTC timezone by @netomi in #1747

👒 Dependencies

• chore(deps): bump spring boot to 3.5.13 by @netomi in #1739
• build(deps): bump picomatch from 4.0.3 to 4.0.4 in /webui by @dependabot[bot] in #1720
• build(deps): bump yaml from 1.10.2 to 1.10.3 in /webui by @dependabot[bot] in #1717
• build(deps): bump picomatch from 2.3.1 to 2.3.2 in /cli by @dependabot[bot] in #1719
• build(deps): bump the github-actions group across 1 directory with 7 updates by @dependabot[bot] in #1710
• build(deps): bump io.netty dependency set from 4.2.7.Final to 4.2.12.Final in /server by @dependabot[bot] in #1724
• build(deps): bump brace-expansion from 1.1.12 to 1.1.13 in /cli by @dependabot[bot] in #1725
• build(deps): bump lodash from 4.17.23 to 4.18.1 in /webui by @dependabot[bot] in #1742
• build(deps-dev): bump vite from 7.3.1 to 7.3.2 in /webui by @dependabot[bot] in #1744
• build(deps): bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in #1743
• build(deps): bump lodash from 4.17.23 to 4.18.1 in /cli by @dependabot[bot] in #1745

Full Changelog: v0.33.0...v0.33.1

Frontend Library v0.19.1

Fixed

• Display usage stats tick labels in UTC timezone (#1747)

Dependencies

• Bump picomatch from 4.0.3 to 4.0.4 (#1720)
• Bump yaml from 1.20.2 to 1.20.3 (#1717)
• Bump lodash from 4.17.23 to 4.18.1 (#1742)
• Bump vite from 7.3.1 to 7.3.2 (#1744)

v0.33.0

This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

🏕 Features

• Migrate to vite for webui by @netomi in #1399
• Check for Retry-After reposonse header when receiving 429 responses from the server by @netomi in #1637
• fix(webui): improve mobile menu item link styling for better usability by @llinq in #1598
• Update secret detection configuration by @janbro in #1645
• Fix: handle empty fullName / email of users when sending emails by @netomi in #1648
• Update name squatting by @janbro in #1646
• Improve wording for empty extension state by @ranjithkumar0556-art in #1641
• feat: adding platform to scan card + some refactoring by @gnugomez in #1650
• Fix duplicate scan job key by @janbro in #1657
• Add more transparent error details to admin UI by @janbro in #1658
• Access token expiry by @amvanbaren in #1513
• Remove Content-Length header from forwarded http header options by @netomi in #1659
• Max Scan Concurrency by @janbro in #1654
• Align entity definition with schema migration and update jooq generated sources by @netomi in #1664
• Remove deprecated content column from FileResource entity by @netomi in #1667
• Fix: update lastUpdatedTime of an Extension when there are changes by @netomi in #1670
• chore: adapt .devfile.yaml to the recent changes by @svor in #1668
• Fix: race condition in GenerateKeyPairJobRequestHandler by @netomi in #1669
• Fix: add size limit when reading data from a zip file entry by @netomi in #1673
• Handle license check within PublishExtensionVersionHandler by @netomi in #1677
• Remove Develocity configuration by @ribafish in #1679
• Fix race condition wrt file caches by @netomi in #1687
• feat: add support for positron engine by @netomi in #1689
• change: do not post reviews when hitting enter, properly align buttons by @netomi in #1690
• Fix: make query more resilient by @netomi in #1697
• chore[devfile]: revert postgresql image in devfile by @svor in #1699
• Fix: gracefully handle case of file resources without extension version by @netomi in #1706
• chore: bump spring boot to 3.5.12 by @netomi in #1714
• fix: make error dialog link visible on white background by @JudyLipinski in #1712
• Feat: improve access token expiry by supporting sending an email when tokens have expired by @netomi in #1701
• fix: display an accurate number of total hits for search by @netomi in #1716

👒 Dependencies

• build(deps): bump ajv from 6.12.6 to 6.14.0 in /cli by @dependabot[bot] in #1632
• build(deps): bump tar from 7.5.7 to 7.5.9 in /cli by @dependabot[bot] in #1624
• build(deps): bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in /webui by @dependabot[bot] in #1638
• build(deps): bump tar from 7.5.7 to 7.5.9 in /webui by @dependabot[bot] in #1639
• build(deps): bump rollup from 4.53.1 to 4.59.0 in /webui by @dependabot[bot] in #1647
• build(deps): bump underscore from 1.13.6 to 1.13.8 in /cli by @dependabot[bot] in #1656
• build(deps): bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] in #1660
• build(deps): bump tar from 7.5.9 to 7.5.10 in /cli by @dependabot[bot] in #1666
• build(deps): bump tar from 7.5.9 to 7.5.10 in /webui by @dependabot[bot] in #1665
• build(deps): bump dompurify from 3.2.4 to 3.3.2 in /webui by @dependabot[bot] in #1671
• build(deps): bump tar from 7.5.10 to 7.5.11 in /webui by @dependabot[bot] in #1678
• build(deps): bump tar from 7.5.10 to 7.5.11 in /cli by @dependabot[bot] in #1681
• build(deps): bump flatted from 3.3.1 to 3.4.2 in /cli by @dependabot[bot] in #1703
• build(deps): bump flatted from 3.3.1 to 3.4.2 in /webui by @dependabot[bot] in #1702

New Contributors

• @llinq made their first contribution in #1598
• @ranjithkumar0556-art made their first contribution in #1641
• @JudyLipinski made their first contribution in #1712

Full Changelog: v0.32.3...v0.33.0

Frontend Library v0.19.0

Added

• Add support for positron engine in the extension detail view and filter out unknown engines (#1689)

Changed

• Switch from webpack to vite for building the bundle (#1399)
• Add more target information and useful links to scan card (#1650)
• Do not post a review when hitting enter anymore (#1690)

Fixed

• Check Retry-After http header when receiving 429 responses from the server (#1637)
• Menu items link clicks now capture the whole menu item area (#1598)
• Fix color of error links in ErrorDialog to make them visible (#1712)

Dependencies

• Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 (#1638)
• Bump minimatch from to 3.1.5, 9.0.9 and 10.2.4 respectively
• Bump tar from 7.5.9 to 7.5.11 (#1678)
• Bump dompurify from 3.2.4 to 3.3.2 (#1671)
• Bump flatten from 3.3.1 to 3.4.2 (#1702)

CLI v0.10.10

Dependencies

• Bump ajv from 6.12.6 to 6.14.0 (#1632)
• Bump ajv from 8.17.1 to 8.18.0
• Bump tar from 7.5.7 to 7.5.11 (#1681)
• Bump minimatch to 3.1.5, 9.0.9 and 10.2.4
• Bump underscore from 1.13.6 to 1.13.8 (#1656)
• Bump flatted from 3.3.1 to 3.4.2 (#1703)

v0.32.3

This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

🏕 Features

• Improve error handling in VSCodeAPI wrt file resources by @netomi in #1625
• Check if the IP address string can be resolved to an IPv4 address by @netomi in #1627
• Ensure temporary extension files are deleted during publication by @netomi in #1628

Full Changelog: v0.32.2...v0.32.3

v0.32.2

This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

🏕 Features

• Fix dynamic rate limiting for customers in state evaluation by @netomi in #1623

Full Changelog: v0.32.1...v0.32.2

v0.32.1

This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

🏕 Features

• Add ovsx.logs.aws.max-keys config parameter by @netomi in #1619

Full Changelog: v0.32.0...v0.32.1

v0.32.0

This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

🏕 Features

• Support removing arbitrary reviews for admins by @netomi in #1403
• Cleanup cli script by @netomi in #1538
• Add support for GfM alerts by @idleberg in #1535
• Support custom registry url with a subpath by @netomi in #1542
• Disable scripts by default for yarn by @netomi in #1546
• feat: support customizing the publisher agreement name and contact email by @gnugomez in #1550
• Fix searching by publisher by @netomi in #1578
• Redirect to /error only for html pages, not api calls by @netomi in #1577
• Improve search result relevance by not boosting fuzzy matches anymore by @netomi in #1579
• Suppress MediaTypeNotSupportedException in server logs by @netomi in #1580
• Dependency and build updates by @netomi in #1586
• Security Check Framework by @netomi in #1529
• feat(webui): display extension unique identifier by @Pranav-0440 in #1590
• Cleanup MigrationItemJob by @netomi in #1587
• Use Version catalog by @netomi in #1594
• Add support for analysing fastly log files by @netomi in #1599
• Consistently use javax.annotations package for Nullable and Nonnull annotations by @netomi in #1600
• Simplify sonar workflow to only analyse master branch and enable gradle dependency submission by @netomi in #1601
• Submit scanning jobs in a fail-safe manner by @netomi in #1606
• Add download metrics for Prometheus by @netomi in #1607
• Migrate deprecated javax.annotation to jakarta.annotation by @netomi in #1609
• Crash at startup when local storage directory is not writable by @Pranav-0440 in #1603
• Evict namespace details json cache after membership change by @netomi in #1615
• Log if a user deletes an extension by @netomi in #1616
• Implement dynamic tier-based rate limiting by @netomi in #1569
• feat: adding admin logs to the backoffice by @gnugomez in #1582

👒 Dependencies

• build(deps): bump lodash from 4.17.21 to 4.17.23 in /webui by @dependabot[bot] in #1557
• build(deps): bump react-router from 6.23.1 to 6.30.2 in /webui by @dependabot[bot] in #1532
• build(deps): bump lodash from 4.17.21 to 4.17.23 in /cli by @dependabot[bot] in #1567
• build(deps): bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in /cli by @dependabot[bot] in #1583
• build(deps-dev): bump webpack from 5.94.0 to 5.104.1 in /webui by @dependabot[bot] in #1593

New Contributors

• @idleberg made their first contribution in #1535
• @Pranav-0440 made their first contribution in #1590

Full Changelog: v0.31.0...v0.32.0

Frontend Library v0.18.0

Added

• Support removing reviews by admins (#1403)
• Support for GitHub flavored markdown alerts (#1535)
• Support customizing the publisher agreement name and contact email (#1550)
• Display the unique identifier on the extension details page (#1590)
• Add admin pages to edit / view data for dynamic rate limits (#1569)
• Add ability to browse admin logs via the admin dashboard (#1582)

Changed

• Disable the automatic execution of lifecycle scripts by yarn (#1546)

Dependencies

• Upgrade lodash from 4.17.21 to 4.17.23 (#1557)
• Upgrade react-router from 6.23.1 to 6.30.3 (#1532)
• Upgrade react-router-dom from 6.23.1 to 6.30.3
• Upgrade @playwright/test from 1.57.0 to 1.58.0