1.3.8 (2026-11-02)

Bug Fixes

• deps: drop bundled npm from release tooling (73eea17)

1.3.7 (2026-11-02)

Bug Fixes

• renovate: keep npm 11 constraint out of updates (92287f6)

1.3.6 (2026-11-02)

Bug Fixes

• renovate: generate lockfiles with npm 11 (cae81c7), closes npm/cli#9800 #163

1.3.5 (2026-11-01)

Bug Fixes

• deps: install npm from the registry instead of a git pin (80edc9e)

1.3.4 (2026-10-14)

Bug Fixes

• deps: bump handlebars to 4.7.10 (b2deee5)
• deps: bump js-yaml to 4.3.2 (463bc84)
• deps: bump undici to 6.29.0 and 7.30.0 (263ce05)
• deps: pin npm to patched bundled dependencies (8e7424f)
• deps: refresh npm git pin integrity in the lockfile (961e108)

1.3.3 (2026-03-18)

Bug Fixes

• deps: pin undici to >=6.24.0 to resolve Dependabot alerts #29, #30 (b2115f0)

1.3.2 (2026-01-20)

Bug Fixes

• Add input validation to prevent command injection in workflow_dispatch (9ab996d)
• update .github/workflows/publish-marketplace.yml (6beb952)

1.3.1 (2025-11-28)

Bug Fixes

• Use GH_PAT to trigger marketplace publish workflow (b11a926)

1.3.0 (2025-11-28)

Features

• Add VSIX package as release asset (40c8419)

1.2.0 (2025-11-28)

Features

• add manual trigger option to marketplace publishing workflow (2ea517c)