v1.0.1

Bug Fixes

• tree: format the held-back date in package rows (87f51ac)

v1.0.0

⚠ BREAKING CHANGES

• release: nestro.includePreReleases now defaults to false, so update checks and the version picker only offer prerelease versions after you opt in.
• release: A new nestro.minimumReleaseAgeDays setting (default 7) holds back releases younger than seven days: update checks offer the newest eligible version instead, and the version picker marks a held-back version and asks for confirmation before it is applied. Set it to 0 to disable the hold-back.
• release: Update Package, Pick Version..., Switch to dev/dep, Toggle version pin, Remove Package, Open on npmjs.com, and Copy Package Name no longer appear in the Command Palette; run them from a package row in the Nestro view. Update All, Run Install, Search Packages, Run Security Audit, and Pin All Versions still appear in the Command Palette, but only while they can actually run.
• release: Clear Search Query no longer appears in the Command Palette either; it is now in the Nestro view's overflow menu and is shown only while a search is active.
• release: Open on npmjs.com, Switch to dev/dep, Toggle version pin, and Remove Package no longer have inline buttons on a package row; open the row's context menu instead, where Toggle version pin appears only for a dependency whose version spec Nestro can rewrite.
• release: Run Install and Settings are no longer buttons in the Nestro view title bar; both moved into the view's overflow menu, and Run Install is shown there only when it can actually run.
• release: Nestro now declares that it does not support virtual workspaces, so it no longer loads in a virtual workspace such as a Remote Repositories window. It still runs in Remote SSH, Dev Containers, and WSL, where its file access and package-manager processes execute on the remote or container side rather than on the local client.
• release: The search and filter rows were removed from the package tree in favor of status rows, detailed failure output moved to dedicated Output channels, and the Marketplace category "Programming Languages" was dropped, leaving "Other" as the extension's only category.

Features

• accessibility: describe package update states (68e0fe5)
• audit: expose structured advisory reports (b4d54b3)
• localization: add english message catalogs (4465ef9)
• remove obsolete skills and update project learnings (0915a4b)
• updates: enforce a release cooldown (78d1c44)
• workspaces: parallelize package project checks (f003255)

Bug Fixes

• audit: attribute npm audit v2 advisories to package rows (12e377d)
• audit: bound audit process execution (e1e35a7)
• audit: ignore stale audit completions (09a8ea8)
• audit: parse bun advisory results (8f9c376)
• audit: require recognized audit results (d177e01)
• audit: resolve canonical package projects (c4e5658)
• audit: support explicit yarn audit families (bd0324e)
• clients: validate package manager operands (30c4eb0)
• commands: correct command palette visibility (0e497ff)
• commands: validate current package identity (cf03f15)
• debug: point the launch configuration at the real bundle (7606245)
• dependencies: prevent switch target overwrites (61cd9c7)
• filters: reject unrecognized filter values (5e4f1b6)
• filters: unify visible package counts (028c2ec)
• install: treat a cancelled package root pick as a cancel (eab4dc9)
• logging: sanitize extension diagnostics (ea4411b)
• manifest: declare workspace capabilities (65e225e)
• operations: serialize package project mutations (5956d1e)
• packaging: enforce the vsix content allowlist (158e011)
• picker: format the held-back date (95f68b1)
• pinning: make pin all atomic (125a2a7)
• pinning: preserve dependency spec semantics (0665a7e)
• provider: ignore stale package loads (8061ec2)
• registry: honor bun project configuration (f50ffbe)
• registry: honor npm project configuration (6ce57f8)
• registry: honor yarn project configuration (ef67ef7)
• release: add missing release rules for refactor and style types [skip ci] (a988079)
• release: align analyzed release types (eec0afb)
• test: terminate tasks through the started execution (206af74)
• ui: describe the running operation on a busy row (e970548)
• ui: enable global actions only where they can run (24af9c3)
• ui: move detailed failures to output (a826111)
• ui: show the active filter and search in the tree (c9aee8e)
• updates: make prerelease updates opt in (f4f85f0)
• updates: reject stale update results (3206b24)
• workspaces: disambiguate package root labels (f1d217f)

Maintenance

• branding: replace the marketplace icon (59fb6c3)
• deps: patch brace expansion tooling (034d3dd)
• deps: patch drifted tooling advisories (ad66b06)
• deps: patch drifted tooling advisories (b194e2b)
• deps: patch redrifted tooling advisories (e938d96)
• deps: patch release tooling advisories (6f6b8d5)
• deps: patch vite tooling advisories (6595acc)
• deps: remove the unused script runner (51a6051)
  *...

v0.4.2

0.4.2 (2026-07-12)

Bug Fixes

• audit: clarify incomplete audit status (5311557)
• bound npm-check-updates runtime (65ad990)
• ci: use portable package check (0b33d8b)
• ci: validate built extension package (6916477)
• keep partial multi-root audit results (2765eef)
• make deferred bulk updates atomic (b1db636)
• pin concrete workspace ranges (afebddd)
• preserve installing state across reloads (e8aa93e)
• provider: reconcile failed update state (445b035)
• report deferred rollback failures (529b191)
• surface package read failures (7dc8498)
• update agent configuration synchronization instructions (858d12d)

v0.4.1

0.4.1 (2026-07-09)

Bug Fixes

• audit: ignore concurrent audit runs (b463fc8)
• clients: detect package manager from workspace ancestors (8081d4c)
• deps: update dependency version in selected section (6184fbb)
• docs: update extension patterns and agents documentation for workspace folder handling and task execution (82abd9a)
• ensure consistent newline at end of files across multiple source and test files (da030bc)
• manifest: declare filter commands (9d3d59a)
• package-json: preserve tab indentation (9e70535)
• package-manager: respect nearest marker precedence (6c5b946)
• package: audit fixes (746bd03)
• picker: dispose version quick pick (c838343)
• picker: format workspace package labels by path segment (ea17118)
• pnpm: remove unused tmp dependency from overrides (c92d3b5)
• provider: ignore concurrent update checks (6fef779)
• provider: include dependency section in package identity (8e8c0d4)
• provider: preserve live package state during update checks (115e8fe)
• provider: refcount write suppression timers (cd9537f)
• provider: reset update debounce on cache invalidation (1dd82d9)
• provider: target package mutations by file path (239a801)
• registry: reject non-success package metadata responses (fb3acaf)
• registry: resolve npmrc from owning workspace (210a10c)
• registry: resolve package metadata registry from npmrc (3352c69)
• registry: timeout and cap package metadata responses (33437ce)
• tasks: handle shell task completion during startup (22c27df)
• tasks: quote package manager task arguments (e3f1793)
• tasks: surface failed install and remove tasks (0f73a18)
• update VS Code engine version to ^1.125.0 and add check:vsce script (4ade89b)
• updates: preserve valid update cache (2d2dd2d)
• watcher: route package deletes through debounced refresh (ed4ffb9)
• workspace: refresh packages when folders change (35cda83)

v0.4.0

0.4.0 (2026-06-12)

Bug Fixes

• show relative paths in package.json picker instead of absolute (1300258)

Features

• add checkUpdatesForceAlways setting to bypass debounce (9e9c1af)
• add Pin All Versions command to advanced tools overflow menu (09000e6)
• toolbar cleanup, pin-version update preservation, forced re-check (3c6f7a5)

v0.3.0

0.3.0 (2026-06-12)

Features

• add cache invalidation to command updates and sort workspace folders (6834ff0)
• enhance package manager commands to support devDependencies (efe24ee)

v0.2.0

0.2.0 (2026-06-08)

Bug Fixes

• keep dependency sections alphabetized (7e4f50e)
• show complete stable version list in picker (4319ac1)

Features

• add package removal command (ca3515e)
• add package search in sidebar (a8e241a)
• search: add clear search query command (cd7e7fb)
• search: split search query into tree item (9c5907c)

v0.1.1

0.1.1 (2026-05-29)