Fabio Nunes Cerqueira a497178b3e fix(security): close the findings of GHSA-442p-gxfg-qxv9 ...

- Restricted Mode git: reads run without a signature verifier, hooks
  (including config-defined ones), an external diff, filters or a lazy
  fetch, also inside submodules; every repository and every git starts
  restricted until the project is trusted.
- project.write and plugin quick fixes cannot reach git's own files under
  any spelling or through links; project.write is a high-risk grant.
- Built-in web server: each served root has its own port and token; a
  file outside the project is served with its folder minus dot names, or
  alone when that folder is the home folder or above it; no fixed port.
- Images, references, Markdown links and language-server links reach no
  network share other than the one already open.
- Marketplace: entries whose id or version no manifest may carry are
  dropped; an index read over the network names nothing on this machine;
  network reads are bounded in size and time.
- Agent replies load remote images on a click; the Markdown preview and
  Mermaid configuration no longer fetch from other hosts.

2026-11-11 22:18:48 +08:00

..

agentApproval.spec.ts

feat(agents): incremental streaming, folded turns, approval tray and one Settings › Agents page (#2511)

2026-11-10 19:50:46 +08:00

agentMarkdown.spec.ts

fix(security): close the findings of GHSA-442p-gxfg-qxv9

2026-11-11 22:18:48 +08:00

agentQuestions.spec.ts

feat(agents): page multiple questions with tabs and a stable height (#2297)

2026-11-10 01:46:12 +08:00

agentScroll.spec.ts

fix(agents): steadier tool-call runs, working row in the stream, selection and scroll fixes

2026-11-11 15:20:09 +08:00

agentsDock.spec.ts

feat(agents): dock a session in the Agents tool window (#588)

2026-11-01 11:31:53 +08:00

angularInline.spec.ts

feat(angular): highlight inline templates and auto-close tags (#1897)

2026-11-07 11:13:09 +08:00

attachProject.spec.ts

fix(project): keep attachments in the current project (#2320)

2026-11-09 19:23:05 +08:00

boot.spec.ts

feat(gradle): debug forked JVMs on a dynamic JDWP port (#2154)

2026-11-09 01:15:23 +08:00

clickhouse-source.spec.ts

feat(database): add ClickHouse data sources (#865)

2026-11-04 12:21:03 +08:00

codeInsight.spec.ts

fix(editor): separate completion names from field types (#2402)

2026-11-10 03:01:00 +08:00

commentToggle.spec.ts

fix(editor): take a JSX block comment back out on the second toggling (#2121)

2026-11-08 20:36:07 +08:00

commit.spec.ts

test(vcs): check the files a commit takes from its options

2026-11-06 14:14:44 +08:00

commitDoubleClick.spec.ts

fix(vcs): open the source file on F4 in the changes trees (#2729)

2026-11-11 20:38:27 +08:00

commitDrag.spec.ts

feat(vcs): drag unversioned files onto a changelist to add them (#2531)

2026-11-11 00:12:24 +08:00

commitInclusion.spec.ts

test(vcs): check the files a commit takes from its options

2026-11-06 14:14:44 +08:00

compactSettingsControls.spec.ts

fix(settings): keep compact inline controls readable (#2114)

2026-11-08 16:16:02 +08:00

compareWith.spec.ts

feat(vcs): offer Compare With… in the editor and tab menus, and outside the desktop app (#433)

2026-10-30 19:25:41 +08:00

configurationNavigation.fixture.ts

perf(java): prewarm configuration navigation and share results between hover and click (#947)

2026-11-06 12:23:39 +08:00

configurationNavigation.html

perf(java): prewarm configuration navigation and share results between hover and click (#947)

2026-11-06 12:23:39 +08:00

configurationNavigation.spec.ts

perf(java): prewarm configuration navigation and share results between hover and click (#947)

2026-11-06 12:23:39 +08:00

conflictMarkers.spec.ts

feat(vcs): make unresolved merge conflicts visible wherever they come from (#905)

2026-11-03 23:39:26 +08:00

console-selection.spec.ts

fix(run): select and copy the whole console output with Select All (#903)

2026-11-02 23:41:21 +08:00

console-ui.spec.ts

fix(console): 16px toolbar icons and a two-row find bar in narrow panels (#2387)

2026-11-10 03:25:53 +08:00

consoleFont.spec.ts

fix(run): render the Run console with the terminal font (#2615)

2026-11-11 14:43:59 +08:00

cornerInset.spec.ts

fix(editor): keep the corner overlay from covering line ends (#2289)

2026-11-09 15:20:49 +08:00

databaseDialogLayout.spec.ts

fix(database): keep credential dialog fields inside the form (#2103)

2026-11-08 16:15:05 +08:00

databaseJsonValue.spec.ts

feat(database): JSON-aware value editor for json cells (#2410)

2026-11-10 05:22:56 +08:00

debug.spec.ts

test(e2e): cover the core editing, code intelligence, VCS, run and debug flows (#1277)

2026-11-04 22:52:48 +08:00

deployment.spec.ts

feat(deployment): add standalone comparison and selected-file sync (#1070)

2026-11-04 12:40:45 +08:00

dialogFocus.spec.ts

fix(ui): retain dialog focus and copy text through the native clipboard (#2403)

2026-11-10 03:25:21 +08:00

dialogTitleBar.fixture.tsx

fix(ui): keep dialogs below the macOS window buttons (#2523)

2026-11-10 23:16:32 +08:00

dialogTitleBar.html

fix(ui): keep dialogs below the macOS window buttons (#2523)

2026-11-10 23:16:32 +08:00

dialogTitleBar.spec.ts

fix(ui): keep dialogs below the macOS window buttons (#2523)

2026-11-10 23:16:32 +08:00

diff-navigation.spec.ts

fix(vcs): keep the caret visible when navigating between differences (#2395)

2026-11-10 03:23:27 +08:00

diff.spec.ts

test(vcs): use document-start shortcut in large diff checks (#2401)

2026-11-10 03:00:15 +08:00

diffRepo.ts

feat(vcs): soft-wrap long lines in the diff viewer (#2286)

2026-11-09 17:03:21 +08:00

editor.spec.ts

fix(editor): keep selection within its own row when font glyphs exceed line height (#2674)

2026-11-11 15:54:26 +08:00

editorGitMenu.spec.ts

feat(docker): Compose detection, banner, gutter run and Services grouping (#2429)

2026-11-10 09:20:33 +08:00

findUsages-ui.spec.ts

fix(search): use 16px file icons and spinners in Find and Usages (#2493)

2026-11-10 23:41:29 +08:00

fixtures.ts

test(e2e): cover the core editing, code intelligence, VCS, run and debug flows (#1277)

2026-11-04 22:52:48 +08:00

gitIgnore.spec.ts

feat(vcs): add Add to .gitignore to the commit changes menu (#371)

2026-10-30 15:09:55 +08:00

gitLogBranchMenu.spec.ts

fix(vcs): show branch actions in the Git Log commit menu (#1852)

2026-11-07 10:37:24 +08:00

gitLogCommitChecks.spec.ts

fix(vcs): show GitHub commit checks in the Git Log (#1861)

2026-11-07 00:26:42 +08:00

gitLogScrollbar.spec.ts

fix(vcs): stop hover flicker while scrolling the Git log (#2358)

2026-11-10 03:48:31 +08:00

goHighlight.fixture.ts

fix(go): enable semantic colors and Go scheme settings (#2017)

2026-11-08 22:28:20 +08:00

goHighlight.html

fix(go): enable semantic colors and Go scheme settings (#2017)

2026-11-08 22:28:20 +08:00

goHighlight.spec.ts

fix(go): enable semantic colors and Go scheme settings (#2017)

2026-11-08 22:28:20 +08:00

hierarchyRefactor.spec.ts

chore: move the JDT LS components out of plugins/ (#1292)

2026-11-04 22:11:38 +08:00

httpHighlight.fixture.ts

fix(http): recognize request lines and highlight JSON bodies (#2142)

2026-11-08 21:52:18 +08:00

httpHighlight.html

fix(http): recognize request lines and highlight JSON bodies (#2142)

2026-11-08 21:52:18 +08:00

httpHighlight.spec.ts

feat(run): add Build Module and Build Artifacts before launch (#2155)

2026-11-09 01:05:45 +08:00

icls-php.spec.ts

fix(themes): preserve language-specific ICLS styles (#1457)

2026-11-05 12:59:38 +08:00

keymap.spec.ts

fix(keymap): open shortcut menu when activating an action (#2148)

2026-11-08 20:53:51 +08:00

kotlinHighlight.fixture.ts

fix(kotlin): highlight declarations and semantic roles (#2097)

2026-11-08 21:56:26 +08:00

kotlinHighlight.html

fix(kotlin): highlight declarations and semantic roles (#2097)

2026-11-08 21:56:26 +08:00

kotlinHighlight.spec.ts

fix(kotlin): highlight declarations and semantic roles (#2097)

2026-11-08 21:56:26 +08:00

linkedGradle.spec.ts

fix(maven): run generated build-tool goals with the configured JDK (#2440)

2026-11-10 23:44:09 +08:00

mergeEditor.spec.ts

fix(vcs): keep the caret visible when navigating between differences (#2395)

2026-11-10 03:23:27 +08:00

newBranch.spec.ts

fix(vcs): allow explicitly overwriting a local branch (#1851)

2026-11-07 10:36:15 +08:00

openProject.spec.ts

test(e2e): cover the core editing, code intelligence, VCS, run and debug flows (#1277)

2026-11-04 22:52:48 +08:00

oracle-source.spec.ts

feat(db): Oracle thin driver and package nodes (#2129)

2026-11-11 00:31:43 +08:00

overviewLane.spec.ts

fix(editor): show the scrollbar thumb over overview marks (#1031)

2026-11-03 20:31:57 +08:00

overviewLaneSelection.spec.ts

fix(editor): let the overview lane own the editor's vertical scrollbar (#1449)

2026-11-05 12:19:47 +08:00

pageScroll.spec.ts

fix(editor): keep the page from scrolling with the editor (#2356)

2026-11-09 20:22:12 +08:00

plugin-settings.spec.ts

feat(plugins): add declarative multi-page settings (#2074)

2026-11-08 08:38:42 +08:00

pluginDetails.fixture.tsx

feat(plugins): support detail panes for tree and list views (#2033)

2026-11-08 03:18:44 +08:00

pluginDetails.html

feat(plugins): support detail panes for tree and list views (#2033)

2026-11-08 03:18:44 +08:00

pluginDetails.spec.ts

feat(plugins): support detail panes for tree and list views (#2033)

2026-11-08 03:18:44 +08:00

pluginEndpoints.spec.ts

feat(plugins): share project HTTP endpoints with the HTTP client (#1991)

2026-11-07 22:59:21 +08:00

pluginFileTemplates.spec.ts

feat(plugins): add fixed filenames and file template variables (#2032)

2026-11-08 02:37:26 +08:00

pluginMarkerIcons.spec.ts

fix(plugins): keep line-marker gutter icons inside their column (#2481)

2026-11-10 23:16:16 +08:00

pluginNotifications.spec.ts

feat(plugins): notifications with command buttons (#1974)

2026-11-07 22:35:36 +08:00

pluginViews.spec.ts

feat(plugins): group views and apply visibility conditions (#2019)

2026-11-08 02:04:10 +08:00

postfixRowLayout.spec.ts

fix(templates): keep postfix descriptions inside their rows (#2116)

2026-11-08 16:17:47 +08:00

projectTree.spec.ts

fix(menu): keep submenus open during diagonal pointer movement (#2153)

2026-11-08 21:28:06 +08:00

pushTargetBranch.spec.ts

feat(vcs): complete the push target branch from the remote's branches (#1680)

2026-11-11 07:07:40 +08:00

pythonHighlight.fixture.ts

fix(editor): align Python identifier colors and unused-parameter styling (#1572)

2026-11-05 23:38:03 +08:00

pythonHighlight.html

feat(editor): add PyCharm-style Python semantic highlighting (#1523)

2026-11-05 21:53:22 +08:00

pythonHighlight.spec.ts

fix(editor): align Python identifier colors and unused-parameter styling (#1572)

2026-11-05 23:38:03 +08:00

run.spec.ts

fix(build): build selected CMake targets in the Build window (#2061)

2026-11-08 04:48:14 +08:00

runConfigDialogScroll.spec.ts

fix(run): keep the Run/Debug Configurations toolbar visible with a long list (#2384)

2026-11-10 04:27:36 +08:00

runConfigLayout.spec.ts

fix(run): keep Run/Debug Configurations usable in narrow windows (#2485)

2026-11-10 23:41:15 +08:00

sdkFieldLayout.spec.ts

fix(settings): consistent form columns, font page metrics and sidebar width (#2388)

2026-11-10 03:46:22 +08:00

search.spec.ts

feat(search): edit files in the Find in Files preview (#2031)

2026-11-08 01:13:13 +08:00

searchEverywhereLayout.spec.ts

fix(search): show the results list when the preview is off (#2625)

2026-11-11 09:39:59 +08:00

selectPopupLayout.spec.ts

fix(ui): constrain long dropdowns to the viewport (#2106)

2026-11-08 16:15:16 +08:00

semanticStyle.fixture.ts

fix(editor): honor semantic token scheme styles (#2098)

2026-11-08 21:27:12 +08:00

semanticStyle.html

fix(editor): honor semantic token scheme styles (#2098)

2026-11-08 21:27:12 +08:00

semanticStyle.spec.ts

fix(editor): honor semantic token scheme styles (#2098)

2026-11-08 21:27:12 +08:00

services.spec.ts

feat(services): show only services the user added (#2740)

2026-11-11 21:28:41 +08:00

settings.spec.ts

feat(project): resolve navigation into attached dependency projects (#2448)

2026-11-11 01:01:09 +08:00

settingsFormLayout.spec.ts

fix(settings): consistent form columns, font page metrics and sidebar width (#2388)

2026-11-10 03:46:22 +08:00

settingsHeaderLayout.spec.ts

fix(settings): wrap header controls without splitting labels (#2107)

2026-11-08 16:15:20 +08:00

settingsListLayout.spec.ts

fix(settings): contain long names in configuration lists (#2104)

2026-11-08 16:15:09 +08:00

settingsPaneLayout.spec.ts

feat(agents): incremental streaming, folded turns, approval tray and one Settings › Agents page (#2511)

2026-11-10 19:50:46 +08:00

stripeTooltip.spec.ts

fix(workbench): 优化侧栏悬停、选中和提示框样式 (#2094)

2026-11-08 22:33:22 +08:00

terminal-clipboard.spec.ts

test(e2e): wait for xterm to open before pasting into the terminal

2026-11-05 21:30:14 +08:00

terminal-ui.spec.ts

fix(terminal): use editor search colors, keep the active match above the selection, and seed ⌘F (#2606)

2026-11-11 16:17:36 +08:00

testRunner-ui.spec.ts

fix(run): use 16px test status icons and the shared running indicator (#2487)

2026-11-10 23:41:22 +08:00

themes.spec.ts

fix(editor): keep selections whole over line backgrounds and indent guides (#1568)

2026-11-05 23:31:14 +08:00

toolwindows.spec.ts

fix(workbench): keep the resize cursor while dragging a splitter (#2560)

2026-11-11 00:06:59 +08:00

treeWidth.fixture.tsx

fix(tree): preserve horizontal scroll when expanding unrelated nodes (#504)

2026-10-31 05:20:39 +08:00

treeWidth.html

fix(tree): preserve horizontal scroll when expanding unrelated nodes (#504)

2026-10-31 05:20:39 +08:00

treeWidth.spec.ts

fix(tree): preserve horizontal scroll when expanding unrelated nodes (#504)

2026-10-31 05:20:39 +08:00

tsconfig.json

Initial open-source release

2026-10-22 18:55:10 +08:00

updateProject.spec.ts

fix(vcs): show feedback for explicit Git commands (#2444)

2026-11-10 23:41:06 +08:00

updates.spec.ts

fix(app): keep manual update check answers visible (#2385)

2026-11-10 00:16:38 +08:00

usage-highlight-contrast.spec.ts

fix(code-insight): keep usage highlights readable (#855)

2026-11-02 20:09:27 +08:00

workbench.spec.ts

fix(workbench): show splash-style progress when opening projects

2026-11-04 09:39:32 +08:00

workspaceProjectTypes.spec.ts

fix(project): keep workspace project icons stable on removal (#2699)

2026-11-11 20:54:16 +08:00