Stylesmith 1.16.3

Security

Fixes from a red-team review of Stylesmith:

• Remote imports (stylesmith.allowRemoteImports, off by default) followed a redirect through plain http:// if the chain ended on https:// again. Someone on the network could change that step and point the import to their own file. Redirects are now followed one at a time, and every step must use https://.
• A pinned stylesheet could load other files from the web with @import or url(), which the pin doesn't cover. Stylesmith now refuses that. Local and data: references are still fine.
• A problem's message can contain text from the file, and VS Code drew $(…) in it as icons in the Problem Lens status bar item, so a repository could show a fake badge there. The text is now shown as written.
• Saved settings in Stylesmith's state file are read into an object without a prototype, so a damaged or edited file can't change shared objects.

Stylesmith 1.16.2

Documentation

• The README shows every Stylesmith setting in a settings.json example, with a short comment on each line, and lists the VS Code settings Stylesmith changes for you. A test keeps the example in step with the extension's settings.
• A screenshot of the Stylesmith menu, opened from the paint-can button in the status bar.

Stylesmith 1.16.1

Changed

• Cleaner Problem Lens gutter icons: a bold X for errors, without the square around it, a bold ! for warnings, without the triangle, and a bold i for info, without the circle. The colors stay the same, and each kind of problem still has its own shape.
• Problem outlines are now solid problem underlines: a calm, solid underline under the exact code instead of a box around it, in the same colors. The setting stays stylesmith.effects.diagnosticHighlights.

Stylesmith 1.16.0

Added

• Stylesmith ICE, a new dark theme: white phosphor on a cold night screen, and the glowing ICE of cyberpunk. Iced white text with frost cyan and pale blue, checked against the WCAG contrast rules and for color blindness like the other themes.
• Black ICE, a new preset: the ICE theme, ShureTechMono, glowing code and terminal, CRT scanlines, the boot sequence and the retro terminal cursor.

Stylesmith 1.15.0

Added

• Neon terminal frame: the terminal you're typing in gets a soft neon frame, like the editor's. On by default and in every preset.
• Terminal glow: the terminal's text glows softly in the theme's terminal text color, in dark themes. Off by default; in the Night City, Phosphor Terminal and Amber Monitor presets. Measured in VS Code 1.140 while printing 20,000 lines: no measurable cost.
• Retro terminal cursor: a blinking block cursor in the terminal. It sets VS Code's terminal cursor settings while it's on and puts yours back afterwards. Off by default; in the same three presets.

Stylesmith 1.14.4

Added

• A Sponsor button on Stylesmith's page in VS Code and on GitHub. Stylesmith stays free and open source; sponsoring is a way to support its development: github.com/sponsors/21010.

Stylesmith 1.14.3

Changed

• The Marketplace package is now the one built by the release workflow, with a signed build provenance. Version 1.14.2 on the Marketplace was uploaded from a local build with the same code. Nothing changes in how Stylesmith works.

Stylesmith 1.14.2

Added

• Stylesmith is on the VS Code Marketplace.
• Every version is built by GitHub Actions with a signed build provenance and attached to its GitHub release.
• A website: stylesmith.dev.

Changed

• No longer marked as a preview.