CertView v0.5.0

What's Changed

• ci: add one-time HAProxy publish recovery by @JuanTorchia in #83
• ci: remove completed HAProxy publish recovery by @JuanTorchia in #84
• chore(release): publish with Microsoft Entra by @JuanTorchia in #86
• chore(release): scope OIDC permission to publish by @JuanTorchia in #87
• build(deps): bump pnpm/action-setup from 6 to 6.0.9 by @dependabot[bot] in #74
• build(deps): bump github/codeql-action from 4 to 4.37.4 by @dependabot[bot] in #75
• build(deps-dev): bump the development-dependencies group across 1 directory with 5 updates by @dependabot[bot] in #79
• fix(parser): detect PEM blocks preceded by explanatory text by @JuanTorchia in #88
• docs(marketplace): align listing name and add demo GIF by @JuanTorchia in #89
• feat(editor): ask for a Marketplace rating after regular use by @JuanTorchia in #90
• chore(release): prepare v0.5.0 by @JuanTorchia in #91

Full Changelog: v0.4.0...v0.5.0

CertView v0.4.0

What's Changed

• chore: remediate dev dependency vulnerabilities by @JuanTorchia in #17
• chore: tighten code quality and dependency policy by @JuanTorchia in #20
• chore: keep node types aligned with extension runtime by @JuanTorchia in #24
• chore: defer eslint major updates until flat config migration by @JuanTorchia in #26
• build(deps-dev): bump typescript from 5.9.3 to 6.0.3 by @dependabot[bot] in #23
• chore: migrate eslint to flat config by @JuanTorchia in #28
• fix: preserve parser error causes by @JuanTorchia in #29
• test: add malformed DER and ASN.1 fixtures by @JuanTorchia in #30
• test: add corrupt PKCS#12 coverage by @JuanTorchia in #32
• ci: automate VSIX smoke packaging by @JuanTorchia in #33
• docs: add contributor project map by @JuanTorchia in #34
• docs: improve Marketplace readiness by @JuanTorchia in #35
• perf: cache parsed certificate documents by @JuanTorchia in #46
• Limit workspace certificate scans by @JuanTorchia in #47
• chore: add pre-merge security gate by @JuanTorchia in #49
• test: harden webview rendering coverage by @JuanTorchia in #51
• docs: document compatibility policy by @JuanTorchia in #53
• test: stabilize relative expiry formatter tests by @JuanTorchia in #55
• perf: configure certificate explorer watchers by @JuanTorchia in #56
• docs: add contributors section to README using All Contributors by @Kanneboinashivakumar in #57
• perf: restore webview tab state without retained context by @JuanTorchia in #58
• Improve certificate chain summary by @JuanTorchia in #59
• [codex] initialize agent working agreements by @JuanTorchia in #60
• fix: make key and jwk files text-first by @JuanTorchia in #62
• build(deps-dev): bump the development-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #64
• build(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in #65
• [codex] document repo commands and graph index by @JuanTorchia in #61
• build(deps-dev): bump the development-dependencies group with 2 updates by @dependabot[bot] in #66
• fix(security): unpin patched fast-uri and linkify-it, harden release job by @JuanTorchia in #67
• build(deps): remediate development advisories by @JuanTorchia in #80
• docs: move shipped items to new section in ROADMAP.md by @AdvaitVarhade in #72
• chore(release): prepare v0.4.0 and trusted publishing by @JuanTorchia in #81
• ci: publish 0.4.0 with Marketplace PAT fallback by @JuanTorchia in #82

New Contributors

• @Kanneboinashivakumar made their first contribution in #57
• @AdvaitVarhade made their first contribution in #72

Full Changelog: v0.3.6...v0.4.0

CertView 0.3.6

Summary

CertView 0.3.6 improves certificate, CSR, and key metadata display after the latest community contribution.

What changed

• Display clearer public-key summaries such as RSA-2048 and EC-P-256 across certificates, CSRs, and standalone key files.
• Add CSR SHA-1/SHA-256 fingerprints alongside existing SPKI fingerprints.
• Preserve raw Extended Key Usage keys while adding friendly EKU tooltip metadata in the webview.
• Improve selected X.509 extension rendering, including subject key identifier, authority key identifier, and CRL distribution point decoding.
• Add a path length constraint informational lint note for CA certificates with pathLenConstraint=0.
• Harden test discovery path handling in unit and integration test runners.

Validation

• corepack pnpm install --frozen-lockfile
• corepack pnpm compile
• corepack pnpm lint
• node ./out/test/unit/index.js - 145 passing
• node --check media/webview.js
• corepack pnpm package - generated certview-0.3.6.vsix

Notes

Dependency updates remain intentionally separate and will continue through Dependabot so feature releases stay auditable.

CertView 0.3.5

Summary

CertView 0.3.5 is a hardening and coverage release for certificate, key, CSR, CRL, and bundle inspection.

What changed

• Hardened certificate, PKCS#7, PKCS#12, PEM, DER, CSR, CRL, and key parsing paths with explicit input and PEM block limits to reduce extension-host DoS risk.
• Expanded X.509 extension decoding, advisory lint findings, chain-structure checks, Certificate Transparency SCT display, and RFC/NIST/ISO field help in the webview.
• Added native VS Code Problems diagnostics for certificate lint findings.
• Added PEM, DER, JWK, public-key, private-key, mixed certificate/key bundle, encrypted private-key metadata, and runtime-dependent ML-DSA key handling.
• Improved CSR and CRL detail extraction, including public-key metadata, SPKI fingerprints, CRL timing fields, selected CRL extensions, and fingerprints.
• Clarified PKCS#12 handling in the tree view: .p12 and .pfx files may require an interactive password prompt, so the tree shows an informational item and the editor view performs the actual inspection.
• Kept dependency management on pnpm, removed the duplicate npm lockfile, and pinned CI to pnpm@9.15.9 for reproducible release builds.

Validation

• npx --yes pnpm@9.15.9 test:unit - 140 passing
• npx --yes pnpm@9.15.9 lint
• npx --yes pnpm@9.15.9 test - 46 passing
• GitHub Actions CI & Publish for v0.3.5 completed successfully, including Marketplace publish.

Notes

Lint findings are advisory. They do not establish certificate trust, revocation status, WebPKI compliance, RFC 5280 path validation, FIPS compliance, Common Criteria conformance, or organizational policy compliance.