v0.4.2

No runtime changes. First release published to the VS Code Marketplace:

• Releases now publish to the VS Code Marketplace with a Microsoft Entra ID
  identity federated to a GitHub environment, with no stored secret, alongside
  Open VSX.
• README install steps point Microsoft VS Code users at the Marketplace.
• README intro and the manifest description now cover mapped push and pull
  and the previewed folder sync, not only single-file hotfixes.
• SECURITY.md points at private vulnerability reporting and is no longer
  shipped in the VSIX.

What's Changed

• chore(security): point at private reporting and drop SECURITY.md from the vsix by @ddtcorex in #36
• ci(release): publish to the VS Code Marketplace via OIDC by @ddtcorex in #37
• ci(release): publish to the Marketplace with Entra ID by @ddtcorex in #38
• docs(publishing): correct the federated subject to the immutable OIDC format by @ddtcorex in #39
• chore(release): bump to 0.4.2 for the first Marketplace publish by @ddtcorex in #40

Full Changelog: v0.4.1...v0.4.2

v0.4.1

No runtime changes. This release refreshes the listing and the repository
metadata:

• README rewritten for the listing page: install steps for Open VSX and for
  the VSIX, a keybindings table, where local temp copies live and when they
  are purged, the per-connection configuration fields, and the dev commands.
• SECURITY.md, bug and feature issue templates, and a PR template added.
• Extension keywords widened for search.

What's Changed

• fix(e2e): poll server mtime past the no-baseline tolerance instead of a fixed sleep by @ddtcorex in #32
• docs: refresh README, agent map, and repo community docs by @ddtcorex in #33
• ci: enforce the docker-backed integration suites by @ddtcorex in #34
• chore(release): bump to 0.4.1 by @ddtcorex in #35

Full Changelog: v0.4.0...v0.4.1

v0.4.0

• Ctrl+Alt+Shift+X (Cmd+Alt+Shift+X on macOS) uploads the mapped
  workspace file open in the active editor, through the same mapping
  resolution, unmapped warning, and overwrite confirm as the
  Upload to Mapped Remote menu.

What's Changed

• feat(mapped): bind Ctrl+Alt+Shift+X to upload mapped file from active editor by @ddtcorex in #30
• chore(release): bump to 0.4.0 by @ddtcorex in #31

Full Changelog: v0.3.0...v0.4.0

v0.3.0

• BREAKING: removed server-side trash and backup (no remote footprint) —
  deletes are permanent with no undo and uploads overwrite directly.

What's Changed

• refactor!: remove server-side trash and backup (no remote footprint) by @ddtcorex in #28
• chore(release): bump to 0.3.0 by @ddtcorex in #29

Full Changelog: v0.2.0...v0.3.0

v0.2.0

• Remote file/folder ops from the tree context menu: new file/folder,
  rename, duplicate, chmod, cut/copy/paste, and drag & drop upload
  from the local Explorer/OS.
• Trash instead of delete: timestamped trash next to the remote root
  (.gangway-trash-*), restore-from-trash, explicit empty-trash
  (EMPTY TRASH), 30-day auto-sweep.
• Backup before overwrite: uploads stash the previous server copy under
  .gangway-backup-*.
• Freeze toggle per connection: mutating ops are refused while frozen;
  Govard protected remotes import frozen.
• Sync with preview: folder sync and workspace up/down with a diff
  preview and excludePatterns.
• Path mappings per connection (workspace folder ↔ remote path) backing
  workspace sync.
• Test-connection button on the add/edit form (15s bound draft dial).
• Context-menu refresh: 4 groups (clipboard/organize/transfer/danger),
  Paste on files, Restore from Trash in the folder menu, new Copy Remote
  Path command, Sync Folder… title.
• Mapped sync: Upload to Mapped Remote / Download to Workspace from the
  Local Explorer and Download to Workspace Folder from the Remote
  Explorer — one confirm, direct overwrite, no backup (the hotfix flow is
  unchanged).
• Workspace compare: Compare Workspace with Server from the Local
  Explorer — read-only vscode.diff of the workspace file against the
  server's fresh bytes (fetched under a cancellable progress notification,
  staged owner-only and atomically under tmp, kept for revisit), resolved
  through the active connection's mappings with the same unmapped warning
  as the mapped sync commands.

What's Changed

• ci(release): auto-create GitHub Release with changelog section by @ddtcorex in #17
• Remote file/folder ops, path mappings, and test connection by @ddtcorex in #18
• docs: refresh user and contributor docs after remote-ops batch by @ddtcorex in #19
• feat(menu): group context menu, add copy path and restore entries by @ddtcorex in #20
• feat(form): lay mapping rows out as one line each by @ddtcorex in #21
• ci(webview): harden verify-webview against cold-start flakes by @ddtcorex in #22
• feat(menu): clarify file transfer direction in context menu by @ddtcorex in #23
• feat(sync): sync files/folders via path mappings (pure-B) by @ddtcorex in #24
• feat(menu): name folder menus by destination and safety by @ddtcorex in #25
• feat(tree): compare workspace file against mapped server path by @ddtcorex in #26
• chore(release): bump to 0.2.0 by @ddtcorex in #27

Full Changelog: v0.1.0...v0.2.0

v0.1.0

Initial feature set:

• Single-file SFTP hotfix editing: browse, double-click to open, edit,
  Alt+Shift+Q to push.
• Folder download/upload from the remote tree's context menu.
• Compare-with-server diff view.
• Stat-based conflict detection on upload (no bulk overwrite).
• Cross-window edit-session awareness (warns before opening a file
  already open for editing in another Gangway session).
• Govard .govard.yml remote import.
• Workspace-scoped and global connection visibility.