Changelog: Latest-release reconcile, diff leak, quiet permissions prompt, 24-hour times, submodule branch picker, Cheap LFS tab (7cc31d9a8b)

[DingDingChae]

Pushed a205296ddc..7cc31d9a8b to main. CI on the pushed commit: 30229719376 — running at the time of writing; installer/Pages/CodeQL lanes started alongside it. No remote success is claimed here.

Fixed

• Auto-update was silently stranded. Releases publish with --latest=false and the promotion step only crowned a release whose commit still equalled the tip of main, so any push landing mid-build left Latest on an older release permanently — and Squirrel polls releases/latest/download/. Promotion is now a monotonic reconcile: among published non-draft, non-prerelease releases whose tags resolve to commits on main, the tip-most wins and same-commit ties go to the highest Squirrel version. Off-main releases can never own Latest, demotion requires proof the current Latest is off main, and a failed release listing aborts the reconcile instead of masquerading as "no releases" (2e62c5a2a6).
• Memory leak in the diff view. SideBySideDiff added document-level cut/copy listeners on mount and never removed them, so every text-diff view switch stranded two handlers retaining the whole component and its full diff row set for the session (290ec7dcdf).
• "Grant additional GitHub permissions" nagged on every launch. The launch-time scope audit deduplicated only per session. A Not-now answer (including close/Escape) now persists per account with the exact scope set it dismissed; the prompt returns only when the app starts requiring a scope the user was never asked about, and the record self-clears once nothing is missing. Choosing Sign in again records nothing, so an aborted sign-in still re-prompts (6a8a752ae1).

Changed

• Every time display defaults to 24-hour. The default previously fell back to 12-hour for unknown or listed locales. An explicitly stored 12-hour preference is still honored and selectable in Date & time settings (7cc31d9a8b).
• Cheap LFS settings have their own Repository Settings tab, split out of Build & Run, with the palette command and the Large files manager deep link rerouted to it (37077d8cf5, merge 2b56af5ccf).

Added

• Add Submodule dialog: searchable branch picker (Refs Add submodule dialog: branch selection with search bar / 加submodule揀branch有得搜尋 #34). A Load-branches action — plus auto-load on first URL blur — runs git ls-remote --symref through the credential trampoline with abort support, lists up to 5,000 heads with honest truncation, and pre-selects the visibly marked remote default (which maps to no -b, preserving the existing call contract). The search input is the registered surface add-submodule-branches on the shared fuzzy/substring/RE2 filter stack with the invalid-regex role="alert" contract, plain-text default (9b375560d9, merge 683bdeb45f).

Local verification on the pushed tree

Root npx tsc --noEmit exit 0; canonical prettier --check clean across the repository; eslint clean on the changed sources; targeted suites 75/75 across eight files (workflow-safety, super-express release, insufficient-scopes persistence, collection-surface registry, search-surface filters, i18n, settings surfaces, responsive-surface catalog). Agent-branch suites before merge: submodule picker 55/55 plus 16/16 dialog and 6/6 parser; Cheap LFS tab 43/43 and 80/80.

Still open

A ten-group fix wave for 31 adversarially-confirmed findings (all nine Cheap LFS performance defects behind #35, three canonical-remote bypasses, two GitHub Packages wedge bugs, three UI clipping defects, ten renderer performance defects, one unwired search surface) is still running on isolated branches and is not in this push. New user reports #55 and #56 are under read-only root-cause investigation. Those land in a later integration push with its own changelog.

---

呢轉推咗六件事上 main：最要緊嗰條係自動更新一直斷咗纜 — 以前升Latest嘅邏輯太硬頸，build途中有人push就永遠唔升，裝咗App嘅人乾等；而家改成沿住main單調向前行。仲有diff頁嘅memory leak、權限彈窗唔再日日嘈、全App轉24小時制、Cheap LFS設定自立門戶、加submodule可以搵branch。本地測試全綠，CI跑緊未有結果，唔會扮曬冷。三十一條蟲嘅修理大隊仲喺度開工，下轉先埋單。