v1.141.0-web.0

What's Changed

• build: Centralize toolchain versions by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/42
• build: Centralize toolchain versions by @vodyanica in https://github.com/HRAshton/code-oss-static-web/pull/40
• ci: Consolidate browser qualification by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/43
• ci: Add artifact-aware pull request qualification by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/44
• fix(supply-chain): Verify upstream tag binding by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/45
• ci: Bind qualified distribution bytes to released bytes by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/46
• fix(release): Make publication retry-safe by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/48
• fix(extensions): Harden VSIX archive ingestion by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/49
• docs: Define browser deployment compatibility contract by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/52
• test(quality): Add performance and accessibility baselines by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/53
• docs(governance): Define organization ownership plan by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/56
• docs: Expand architecture and threat model by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/51
• feat(config): Introduce deployment profiles by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/55
• fix(ci): Qualify deployment profile resolver changes by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/54
• feat(release): Add immutable canary and stable promotion by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/57
• perf(ci): Reduce redundant Actions work by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/58
• fix(ci): Require human review for trust-boundary dependency updates by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/59
• fix(release): Route existing tags through publication recovery by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/60
• chore(governance): Enforce sensitive-path ownership by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/61
• fix(ci): Bind qualification dispatches to source SHA by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/62
• fix(release): Verify live Pages release identity by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/63
• perf(ci): Add release-only PR qualification by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/65
• feat(security): Add independent SBOM validation by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/64
• feat(security): Add vulnerability admission policy and rollout delay by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/66
• feat(release): Qualify production serving paths by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/67
• feat(release): Deploy and verify a real Pages canary by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/68
• refactor(policy): Isolate Remotish proposed API grants by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/69
• test(quality): Gate explicit console error fingerprints by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/70
• fix(build): Forbid symlinks in final distributions by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/71
• docs(ci): Validate repository Markdown links by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/72
• docs(release): Prepare controlled recovery game day by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/73
• build(release): Pin immutable builder environment by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/74
• chore(governance): Prepare organization team migration by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/75
• feat(extensions): Require immutable internal mirror by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/76
• fix(ci): Allow develop promotion merge commits by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/78
• fix(ci): Skip merge commit policy on develop pushes by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/79
• chore(release): Promote develop to master by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/77
• chore(deps): Update nginxinc/nginx-unprivileged:1.31.6-alpine Docker digest to b9241c6 by @renovate[bot] in https://github.com/HRAshton/code-oss-static-web/pull/82
• fix(release): Add explicit recovery evidence readiness gate by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/87
• fix(security): Restrict upstream soak overrides to break-glass qualification by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/88
• fix(ci): Trigger Renovate approval after PR qualification by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/89
• chore(upstream): Update Code OSS to v1.141.0 by @renovate[bot] in https://github.com/HRAshton/code-oss-static-web/pull/85
• docs(compatibility): Add enterprise browser qualification record template by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/90
• docs(security): Clarify iframe-neutral hosting contract by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/92
• fix(build): Automate Ubuntu APT snapshot updates with Code OSS by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/93
• docs(release): Clarify canary as production preflight by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/94
• docs: Align deployment profile documentation with actual policy by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/95
• chore(deps): Group routine GitHub Actions updates weekly by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/96
• fix(ci): Replace abandoned ShellCheck action with verified binary by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/97
• fix(release): Fail closed when release qualification jobs are skipped by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/98
• fix(build): Keep upstream source date epoch aligned with pinned commit by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/99
• fix(build): Protect builder identity from automated snapshot updates by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/100
• test(policy): Align Renovate platform-update allowlist docs and guards by @HRAshton in https://github.com/HRAshton/code-oss-static-web/pull/101
• chore(deps): Update anchore/sbom-action action to v0.24.3 by @renovate[bot] in https://github.com/HRAshton/code-oss-static-web/pull/81

New Contributors

• @vodyanica made their first contribution in https://github.com/HRAshton/code-oss-static-web/pull/40

Full Changelog: https://github.com/HRAshton/code-oss-static-web/compare/v1.140.0-web.0...v1.141.0-web.0