Skip to content

AB#139412 - Point diffbot registry entry to 2.0.1 release - #900

Merged
Fabio Colajanni (fabclj) merged 1 commit into
masterfrom
fix/139412-update-diffbot-registry
Jul 6, 2026
Merged

AB#139412 - Point diffbot registry entry to 2.0.1 release#900
Fabio Colajanni (fabclj) merged 1 commit into
masterfrom
fix/139412-update-diffbot-registry

Conversation

@fabclj

Copy link
Copy Markdown
Contributor

Summary

Updates the diffbot entry in metadata/extensions.json to point at the 2.0.1 security release.

Field Before After
version 1.0.1 2.0.1
downloadUrl .../diffbot101/diffbot.tar.gz .../diffbot201/diffbot-2.0.1.tar.gz

The 2.0.1 release remediates all HIGH-severity Snyk findings (langsmith, yaml, ws, form-data) landed in #898. This also catches up the metadata entry, which was still at 1.0.1 — the 2.0.0 release did not update this file.

⚠️ Merge order

Do not merge until the diffbot201 GitHub release exists (asset diffbot-2.0.1.tar.gz uploaded), otherwise downloadUrl will 404. Recommended: create the release first, then merge.

How to test

  1. After the diffbot201 release is published, confirm the downloadUrl resolves (HTTP 200).
  2. metadata/extensions.json remains valid JSON.

Update the diffbot metadata entry to the 2.0.1 security release
(langsmith, yaml, ws, form-data). Also catches up the entry, which
was still at 1.0.1 (the 2.0.0 release did not update this file).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings July 6, 2026 14:17
@snyk-io

snyk-io Bot commented Jul 6, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the extension registry metadata so the diffbot extension points to the 2.0.1 security release artifact, aligning the registry with the latest published package.

Changes:

  • Bumps diffbot registry version from 1.0.1 to 2.0.1.
  • Updates downloadUrl to the new GitHub Releases tag (diffbot201) and versioned tarball name (diffbot-2.0.1.tar.gz).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@fabclj
Fabio Colajanni (fabclj) merged commit 3456de6 into master Jul 6, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants