v1.141.0-web.1

What's Changed

• fix(release): Repair draft releases and parallelize reproducibility by @HRAshton in #102
• docs: Add OpenSSF Best Practices badge by @HRAshton in #105
• fix(release): Bootstrap canary when legacy Pages has no identity by @HRAshton in #106
• chore(migration): Bind Codellei release identity after transfer by @HRAshton in #107

Full Changelog: v1.141.0-web.0...v1.141.0-web.1

v1.141.0-web.0

What's Changed

• build: Centralize toolchain versions by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/42
• build: Centralize toolchain versions by @vodyanica in https://github.com/HRAshton/code-oss-static-web/pull/40
• ci: Consolidate browser qualification by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/43
• ci: Add artifact-aware pull request qualification by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/44
• fix(supply-chain): Verify upstream tag binding by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/45
• ci: Bind qualified distribution bytes to released bytes by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/46
• fix(release): Make publication retry-safe by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/48
• fix(extensions): Harden VSIX archive ingestion by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/49
• docs: Define browser deployment compatibility contract by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/52
• test(quality): Add performance and accessibility baselines by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/53
• docs(governance): Define organization ownership plan by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/56
• docs: Expand architecture and threat model by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/51
• feat(config): Introduce deployment profiles by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/55
• fix(ci): Qualify deployment profile resolver changes by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/54
• feat(release): Add immutable canary and stable promotion by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/57
• perf(ci): Reduce redundant Actions work by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/58
• fix(ci): Require human review for trust-boundary dependency updates by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/59
• fix(release): Route existing tags through publication recovery by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/60
• chore(governance): Enforce sensitive-path ownership by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/61
• fix(ci): Bind qualification dispatches to source SHA by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/62
• fix(release): Verify live Pages release identity by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/63
• perf(ci): Add release-only PR qualification by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/65
• feat(security): Add independent SBOM validation by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/64
• feat(security): Add vulnerability admission policy and rollout delay by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/66
• feat(release): Qualify production serving paths by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/67
• feat(release): Deploy and verify a real Pages canary by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/68
• refactor(policy): Isolate Remotish proposed API grants by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/69
• test(quality): Gate explicit console error fingerprints by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/70
• fix(build): Forbid symlinks in final distributions by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/71
• docs(ci): Validate repository Markdown links by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/72
• docs(release): Prepare controlled recovery game day by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/73
• build(release): Pin immutable builder environment by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/74
• chore(governance): Prepare organization team migration by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/75
• feat(extensions): Require immutable internal mirror by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/76
• fix(ci): Allow develop promotion merge commits by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/78
• fix(ci): Skip merge commit policy on develop pushes by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/79
• chore(release): Promote develop to master by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/77
• chore(deps): Update nginxinc/nginx-unprivileged:1.31.6-alpine Docker digest to b9241c6 by @renovate[bot] in https://github.com/HRAshton/code-oss-static-web/pull/82
• fix(release): Add explicit recovery evidence readiness gate by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/87
• fix(security): Restrict upstream soak overrides to break-glass qualification by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/88
• fix(ci): Trigger Renovate approval after PR qualification by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/89
• chore(upstream): Update Code OSS to v1.141.0 by @renovate[bot] in https://github.com/HRAshton/code-oss-static-web/pull/85
• docs(compatibility): Add enterprise browser qualification record template by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/90
• docs(security): Clarify iframe-neutral hosting contract by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/92
• fix(build): Automate Ubuntu APT snapshot updates with Code OSS by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/93
• docs(release): Clarify canary as production preflight by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/94
• docs: Align deployment profile documentation with actual policy by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/95
• chore(deps): Group routine GitHub Actions updates weekly by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/96
• fix(ci): Replace abandoned ShellCheck action with verified binary by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/97
• fix(release): Fail closed when release qualification jobs are skipped by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/98
• fix(build): Keep upstream source date epoch aligned with pinned commit by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/99
• fix(build): Protect builder identity from automated snapshot updates by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/100
• test(policy): Align Renovate platform-update allowlist docs and guards by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/101
• chore(deps): Update anchore/sbom-action action to v0.24.3 by @renovate[bot] in https://github.com/HRAshton/code-oss-static-web/pull/81

New Contributors

• @vodyanica made their first contribution in https://github.com/HRAshton/code-oss-static-web/pull/40

Full Changelog: https://github.com/HRAshton/code-oss-static-web/compare/v1.140.0-web.0...v1.141.0-web.0

v1.140.0-web.0

What's Changed

• fix: Tighten Scorecard workflow controls by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/12
• chore(deps): Update actions/cache action to v6 by @renovate[bot] in https://github.com/HRAshton/code-oss-static-web/pull/14
• chore: Update planned dependencies by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/15
• fix: Publish verifiable release provenance by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/16
• feat: Allow Remotish proposed APIs by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/18
• fix: Enforce release publication environment by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/36
• chore(deps): Update dependency ruff to v0.16.10 by @renovate[bot] in https://github.com/HRAshton/code-oss-static-web/pull/38
• fix(ci): Decouple release tag test from upstream lock by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/39
• chore(upstream): Update Code OSS to v1.140.0 by @renovate[bot] in https://github.com/HRAshton/code-oss-static-web/pull/37
• fix: Handle missing file provider in Copilot plugin discovery by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/41

Full Changelog: https://github.com/HRAshton/code-oss-static-web/compare/v1.139.1-web.1...v1.140.0-web.0

v1.139.1-web.1

What's Changed

• Initial implementation by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/1
• ci: Validate PR titles and skip default branch commit lint by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/2
• chore: Prepare first stable release by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/3
• fix: Preserve release distribution metadata by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/5
• chore: Improve project health and compliance by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/4
• ci: Automate upstream qualification and release by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/6
• chore(deps): Update dependency node to v24.21.0 by @renovate[bot] in https://github.com/HRAshton/code-oss-static-web/pull/7
• fix: Let Renovate own automatic merges by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/10
• chore(deps): Update dependency python to 3.14 by @renovate[bot] in https://github.com/HRAshton/code-oss-static-web/pull/8
• feat: Support project patch release revisions by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/11

New Contributors

• @HRAshton made their first contribution in https://github.com/HRAshton/code-oss-static-web/pull/1
• @renovate[bot] made their first contribution in https://github.com/HRAshton/code-oss-static-web/pull/7

Full Changelog: https://github.com/HRAshton/code-oss-static-web/commits/v1.139.1-web.1