v1.140.0-web.0

What's Changed

• fix: Tighten Scorecard workflow controls by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/12
• chore(deps): Update actions/cache action to v6 by @renovate[bot] in https://github.com/HRAshton/code-oss-static-web/pull/14
• chore: Update planned dependencies by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/15
• fix: Publish verifiable release provenance by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/16
• feat: Allow Remotish proposed APIs by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/18
• fix: Enforce release publication environment by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/36
• chore(deps): Update dependency ruff to v0.16.10 by @renovate[bot] in https://github.com/HRAshton/code-oss-static-web/pull/38
• fix(ci): Decouple release tag test from upstream lock by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/39
• chore(upstream): Update Code OSS to v1.140.0 by @renovate[bot] in https://github.com/HRAshton/code-oss-static-web/pull/37
• fix: Handle missing file provider in Copilot plugin discovery by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/41

Full Changelog: https://github.com/HRAshton/code-oss-static-web/compare/v1.139.1-web.1...v1.140.0-web.0