This release of Open VSX consists of:
Deploying the server application is documented in the Wiki.
What's Changed
🏕 Features
- fix: configure /openvsx context path for OpenShift deployment and fix test extension publish paths by @svor in #2080
- fix: get rid of most build warnings by @cstamas in #2085
- fix: clear scan admin loading spinner once fresh data lands after a tab switch by @netomi in #2084
- feat: Trusted Publishing support (#1980) by @netomi in #2000
- feat: add a Data Consistency admin page (#1622) by @netomi in #2086
- feat: add unpublish command to cli by @netomi in #2032
- feat: check max extension size in publish before uploading by @netomi in #2087
- feat: user settings overhaul by @gnugomez in #2091
- fix: limit decompressed size when serving vscode/unpkg web resources by @netomi in #2060
- feat: verified check scanner by @cstamas in #2074
- feat: store filesizes for each FileResource by @netomi in #2089
- Delete migration_item rows once their job completes by @netomi in #2092
- Tolerate missing storage objects in the file-size backfill by @netomi in #2094
- Backfill file sizes per extension version instead of per file resource by @netomi in #2095
- Throttle migration item scheduling to avoid crowding out real jobs by @netomi in #2096
- feat: some user-settings ajustments by @gnugomez in #2097
- fix: keep scroll position on scroll lock by @gnugomez in #2101
- refactor: clarify namespace vs. per-publisher verification checks by @netomi in #2103
- fix: guard scan recovery on startup with a Postgres advisory lock by @netomi in #2104
- refactor: remove unused methods from RepositoryService and repository layer by @netomi in #2105
- feat(cli): add verify and verify-signature commands by @netomi in #2107
- feat: detach tokens from extension versions by @cstamas in #2065
- chore: upgrade springdoc-openapi to 3.1.0 for Spring Data 4 compatibility by @netomi in #2112
- test: narrow the Spring context for tests that don't need the full application by @netomi in #2113
- Rework prerelease limit SQL by @cstamas in #2106
- feat: publish extensions overhaul by @gnugomez in #2098
- refactor: handle error results in sendStrictRequest by @gnugomez in #2109
- Trusted publishing changes by @netomi in #2114
- chore: remove unused methods from RepositoryService by @netomi in #2117
- fix: add /publish and /search to default frontend routes by @netomi in #2118
- chore: regenerate jooq classes by @netomi in #2119
- fix: read the real namespace and extension ids out of a lateral join by @netomi in #2120
- feat: add a search index page to the admin dashboard by @netomi in #2121
- fix: do not reference a one-time token from the version it published by @netomi in #2122
- fix: stop adding to the inverse versions collection when publishing by @netomi in #2123
- fix: keep a type on the rate limit headers under OpenAPI 3.1 by @netomi in #2124
- feat: let one trusted publishing token publish every target platform by @netomi in #2125
- fix: stop treating an empty error string as an error result by @gnugomez in #2128
- feat: limit TPT tokens to publishing only by @cstamas in #2127
- chore: replace the redis cluster in docker-compose with valkey by @netomi in #2140
- build: update Spring Boot to 4.0.8 by @netomi in #2141
- fix: keep generated token bodies free of - and _ by @netomi in #2142
- chore: add a Makefile for common development tasks by @netomi in #2144
- chore: remove codeql and sonar workflows by @netomi in #2147
- chore: drop the qs resolution and nine unused dependencies by @netomi in #2146
- feat: widen the webui library surface for consumers building their own pages by @netomi in #2130
- chore: add scripts to scrub and import partial db dumps by @netomi in #2110
- fix: align the Kubernetes ConfigMap with the Spring Boot 4 properties by @netomi in #2158
- refactor: call the access token hash secret a pepper, not a salt by @netomi in #2159
- feat(cli): add a show command by @netomi in #2153
- feat(cli): add search and list commands by @netomi in #2154
- refactor: stop using EntityManager.merge to obtain managed entities by @netomi in #2150
- refactor: replace the remaining EntityManager.merge updates with find by @netomi in #2151
- build(deps): bump js-yaml from 4.3.1 to 4.3.2 by @svor in #2160
- fix: default personal_access_token.version and .type by @netomi in #2166
- feat(cli): forward vsce's --follow-symlinks, and document the pnpm story by @netomi in #2169
- fix: stop signing a package from allocating several times its size by @netomi in #2170
- feat: add an admin statistics dashboard by @netomi in #2156
- fix: serve the public API's CORS headers whatever ovsx.webui.url says by @netomi in #2173
- chore: update spotless by @cstamas in #2176
- fix(webui): stop the download count spilling out of the extension card by @netomi in #2178
- feat: show what a search result's score is made of in the admin dashboard by @netomi in #2179
- feat: keep access tokens valid across a pepper change by @netomi in #2162
- tool: generate configuration properties reference by @cstamas in #2145
- fix: make the documented docker compose command work by @netomi in #2182
- fix(cli): resolve a download once the file is written, not when the response ends by @netomi in #2185
- fix(cli): give up on a request that stops making progress by @netomi in #2186
- fix: apply the search boosts the text query is written to apply by @netomi in #2174
- fix: weigh download counts on a log scale by @netomi in #2175
- docs: say that a comment should not recount the bug it fixed by @netomi in #2180
- fix: enforce the targetPlatform values the API documents by @netomi in #2181
- docs: move the deployment documentation into the repository by @netomi in #2191
- docs: split the configuration reference out of the deployment guide by @netomi in #2192
- build: check that doc/configuration.md documents the properties the server binds by @netomi in #2193
- docs: correct the properties the reference documents but the server does not bind by @netomi in #2194
- docs: document the configuration properties outside ovsx.scanning by @netomi in #2195
- fix: stop deriving the base URL from untrusted X-Forwarded-* headers by @netomi in #2196
- fix(webui): add fixed height to footer rating by @gnugomez in #2198
- docs: date the unreleased properties to 1.2.0 by @netomi in #2199
👒 Dependencies
- build(deps): bump the github-actions group with 6 updates by @dependabot[bot] in #2088
- build(deps): bump the github-actions group with 2 updates by @dependabot[bot] in #2111
- build(deps): bump @humanfs/node from 0.16.6 to 0.16.8 in /webui by @dependabot[bot] in #2137
- build(deps): bump fast-uri from 3.1.5 to 3.1.7 in /cli by @dependabot[bot] in #2139
- build(deps): bump qs from 6.15.2 to 6.16.0 in /cli by @dependabot[bot] in #2143
- build(deps): bump @humanfs/node from 0.16.6 to 0.16.8 in /cli by @dependabot[bot] in #2138
- build(deps): bump the github-actions group with 2 updates by @dependabot[bot] in #2172
- build(deps): bump nanoid from 3.3.16 to 3.3.18 in /cli by @dependabot[bot] in #2197
Full Changelog: v1.1.2...v1.2.0