v0.5.3

Full Changelog: v0.5.2...v0.5.3

v0.5.2

Full Changelog: v0.5.1...v0.5.2

v0.5.1

What's Changed

• release: v0.5.0 — dead commands fixed, security hardening, toolchain modernisation, CI by @brwinnov in #5

New Contributors

• @brwinnov made their first contribution in #5

Full Changelog: v0.5.0...v0.5.1

v0.5.0

Full Changelog: v0.4.6...v0.5.0

v0.4.4

Patch release with updated VSIX packaging and prior security hardening changes.

v0.4.2 — Remove Tailscale (parked for future)

Changes

Tailscale feature removed (parked for future release)

The Tailscale auto-install feature has been temporarily removed while it is redesigned for a future release.

Removed:

• Tailscale auth key storage and management
• Tailscale auto-inject toggle in server creation wizard
• Tailscale UDP 41641 rule offer when creating firewalls
• Tailscale entry in SETUP panel
• All Tailscale references in documentation and guide pages

The cloud-init script field in the server wizard remains fully functional — you can still manually add any cloud-init configuration including Tailscale setup.

v0.4.1 — Security patch

Security Fixes

• XSS patch — networkDetail.ts was missing HTML escaping and CSP header; all API-sourced values now go through escHtml() and the panel has a nonce-based CSP
• escHtml consistency — serverDetail.ts escHtml now also escapes single quotes (' → ')
• Type-safe error handling — catch (err: any) replaced with catch (err: unknown) throughout (networkDetail.ts, networkCommands.ts, sshKeyCommands.ts)
• CIDR validation — Stricter regex now correctly constrains octets to 0–255 and prefix to 0–32 (previously accepted invalid values like 999.0.0.0/99)

Other Changes

• Removed leftover Storage Box / Load Balancer references from Welcome page

v0.4.0 — Remove Storage Boxes and Load Balancers

What's Changed

Removed

• Storage Boxes (Hetzner Robot API) — Removed entirely: Robot API client, Storage Box provider, commands, cloud-init injector, credentials panel, and Robot API guide
• Load Balancers — Removed entirely: Load Balancer provider and all commands

Why

These features added significant maintenance surface and credential complexity. The extension now focuses exclusively on Hetzner Cloud API resources.

Remaining Features

• Server management (7-step creation wizard, power/reboot/delete, detail panel, SSH)
• Multi-project support (multiple API tokens)
• Networks & subnets
• Firewalls & rules
• Volumes (attach/detach/resize)
• SSH Key management
• Images (read-only)
• Cloud-init template library
• Tailscale auto-inject

Install

Download vscode-hetzner-cloud-0.4.0.vsix below, or install from the VS Code Marketplace.

v0.3.1

Fixed

• Security: escape Robot API error messages before rendering in robotCredentialsPanel WebView to prevent DOM-based XSS via malicious or MitM'd API responses

v0.3.0 — Guide WebViews & Robot credentials form

What's new in v0.3.0

Added

• Guide WebViews — each of Networks, Firewalls, Volumes, and Images panels now has an ℹ toolbar button opening a themed guide page with use cases, options, and action buttons that trigger extension commands directly
• Images guide is tabbed — Overview tab covers image types and available OS list; Custom Images tab has a step-by-step snapshot workflow guide, cloud-init alternative, and best-practice callouts (don't bake secrets into snapshots, version naming)
• Robot API credentials form — replaces the sequential input-box prompts with a persistent WebView form; both username and password fields stay open at the same time so you can switch to your password manager and paste without losing the prompt

Changed

• Toolbar icon order standardised to info → add → refresh across all panels (SSH Keys and Networks were out of order)
• hcloud.setRobotCredentials now opens the WebView credentials form

Install

Download the .vsix below and install via Extensions → Install from VSIX…, or install from the VS Marketplace.