v0.4.1

Release Summary

Changes since previous release

• Previous release: v0.4.0
• Compare: v0.4.0...v0.4.1
• Commits: 7
• Changed files: 16

Closed issues since previous release

• #253 chore(deps): consolidate Mocha 12 and VS Code type updates
• #249 docs: sync README and panel welcome text with the /ask and plain-chat grounding behavior
• #247 chore(deps): merge the open Dependabot updates and restore the version baselines

Additional release notes below are auto-generated by GitHub.

What's Changed

• chore(deps): bump marked from 18.0.12 to 18.0.13 by @dependabot[bot] in #244
• chore(deps): bump @typescript-eslint/parser from 8.69.0 to 8.70.0 by @dependabot[bot] in #243
• chore(deps): bump @types/node from 26.4.1 to 26.6.1 by @dependabot[bot] in #245
• chore(deps): bump @typescript-eslint/eslint-plugin from 8.69.0 to 8.70.0 by @dependabot[bot] in #246
• docs: record the Dependabot batch merge and the baseline policy by @kkamegawa in #248
• chore(deps): update Mocha to 12.0.2 and VS Code types to 1.138.0 by @kkamegawa in #254
• docs: sync README and panel welcome text with the /ask grounding behavior by @kkamegawa in #250

Full Changelog: v0.4.0...v0.4.1

v0.4.0

Release Summary

Changes since previous release

• Previous release: v0.3.0
• Compare: v0.3.0...v0.4.0
• Commits: 37
• Changed files: 36

Closed issues since previous release

• #236 Bump js-yaml override to 4.3.2 to clear GHSA-2883-xcg3-v3hh
• #232 Ground plain chat (and /ask) on pinned context automatically
• #230 chore(deps): consolidate open Dependabot npm updates onto 24h-eligible releases
• #220 fix: restore dependency version baselines after Dependabot merges
• #215 DOM testing: Phase 5 — SlashMenu DOM tests
• #214 DOM testing: Phase 4 — hashMenu.ts tests
• #213 DOM testing: Phase 3 — chatRenderer.ts tests
• #212 DOM testing: Phase 2 — shared DOM test utilities
• #211 DOM testing: Phase 1 — dependencies and build config
• #210 Add DOM/webview unit testing infrastructure
• #208 Make /ask work without pinned context and fix local file attachments
• #207 Merge Dependabot dependency updates (2026-08-15)
• #200 Update vulnerable npm dependency baselines
• #199 Group minor and patch Dependabot security updates
• #197 Review and merge Dependabot PR #189: @vscode/test-electron
• #196 Review and merge Dependabot PR #188: @types/node
• #195 Review and merge Dependabot PR #191: webpack
• #194 Review and merge Dependabot PR #187: webpack-cli
• #193 Review and merge Dependabot PR #190: eslint
• #192 Process all open Dependabot dependency updates

Additional release notes below are auto-generated by GitHub.

What's Changed

• chore(deps): bump webpack-cli from 7.2.1 to 7.2.2 by @dependabot[bot] in #187
• chore(deps): bump @types/node from 26.1.1 to 26.2.0 by @dependabot[bot] in #188
• chore(deps): bump @vscode/test-electron from 3.0.0 to 3.1.0 by @dependabot[bot] in #189
• chore(deps): bump eslint from 10.7.0 to 10.8.1 by @dependabot[bot] in #190
• chore(deps): bump webpack from 5.108.4 to 5.109.2 by @dependabot[bot] in #191
• chore: enforce final dependency security baselines by @kkamegawa in #198
• Group Dependabot security updates and refresh vulnerable npm dependencies by @kkamegawa in #201
• chore(deps): bump marked from 18.0.6 to 18.0.9 by @dependabot[bot] in #202
• chore(deps): bump mocha from 11.7.6 to 11.8.0 by @dependabot[bot] in #203
• chore(deps): bump esbuild from 0.28.1 to 0.28.2 by @dependabot[bot] in #204
• chore(deps): bump @typescript-eslint/eslint-plugin from 8.65.0 to 8.66.0 by @dependabot[bot] in #205
• chore(deps): bump @typescript-eslint/parser from 8.65.0 to 8.66.0 by @dependabot[bot] in #206
• chore(deps): bump sanitize-html from 2.17.6 to 2.17.7 by @dependabot[bot] in #216
• chore(deps): bump concurrently from 10.0.4 to 10.0.5 by @dependabot[bot] in #218
• chore(deps): bump @typescript-eslint/eslint-plugin from 8.66.0 to 8.67.0 by @dependabot[bot] in #217
• chore(deps): bump @typescript-eslint/parser from 8.66.0 to 8.67.0 by @dependabot[bot] in #219
• fix: restore dependency version baselines after Dependabot merges by @kkamegawa in #221
• chore(deps): consolidate Dependabot updates on 24h-eligible releases by @kkamegawa in #231
• chore(deps): bump webpack from 5.109.2 to 5.110.3 by @kkamegawa in #235
• fix: ground plain chat and /ask on pinned context automatically by @kkamegawa in #233
• feat: inline local file content, add attachment UX and streaming by @kkamegawa in #237
• fix(deps): bump js-yaml override to 4.3.2 (GHSA-2883-xcg3-v3hh) by @kkamegawa in #239
• chore(deps): bump jszip from 3.10.1 to 3.10.2 by @dependabot[bot] in #241
• chore(deps): bump marked from 18.0.11 to 18.0.12 by @dependabot[bot] in #242
• test: add DOM/webview unit testing infrastructure by @kkamegawa in #240

Full Changelog: v0.3.0...v0.4.0

v0.3.0

Release Summary

Changes since previous release

• Previous release: v0.2.4
• Compare: v0.2.4...v0.3.0
• Commits: 5
• Changed files: 15

Closed issues since previous release

• #184 Enforce npm install script allowlist in CI
• #182 Update release documentation and Preview wording
• #181 Update package metadata and VSIX release workflow
• #180 Update extension metadata and VSIX release publication flow
• #178 Integrate and merge Dependabot updates as a stacked pull request

Additional release notes below are auto-generated by GitHub.

What's Changed

• chore(deps-dev): bump fast-uri to 3.1.5 by @dependabot[bot] in #172
• chore(deps): bump @typescript-eslint/eslint-plugin from 8.64.0 to 8.65.0 by @dependabot[bot] in #177
• update: adopt TypeScript 7 with TypeScript 6 compatibility by @dependabot[bot] in #174
• Update release metadata and draft publication workflow by @kkamegawa in #183
• Enforce strict npm install script allowlisting by @kkamegawa in #185

Full Changelog: v0.2.4...v0.3.0

v0.2.4

Release Summary

Changes since previous release

• Previous release: v0.2.3
• Compare: v0.2.3...v0.2.4
• Commits: 9
• Changed files: 6

Closed issues since previous release

• #170 Fix vsce packaging failure caused by npm allow-scripts / npx install
• #168 fix: update dependencyVersions test baselines after dependabot batch update
• #167 chore: bump webpack-cli to 7.2.1
• #166 chore: bump webpack to 5.108.4
• #165 chore: bump @typescript-eslint/parser to 8.64.0 (override dependabot 8.63.0)
• #164 chore: bump @typescript-eslint/eslint-plugin to 8.64.0 (override dependabot 8.63.0)
• #163 chore: bump eslint to 10.7.0 (override dependabot 10.6.0)
• #162 chore: bump @types/node to 26.1.1 (override dependabot 26.0.1)
• #161 chore: bump sanitize-html to 2.17.6
• #160 chore: bump marked to 18.0.6
• #159 chore: dependabot dependency updates batch (2026-07-19)

Additional release notes below are auto-generated by GitHub.

What's Changed

• chore(deps): bump marked from 18.0.5 to 18.0.6 by @dependabot[bot] in #152
• chore(deps): bump sanitize-html from 2.17.5 to 2.17.6 by @dependabot[bot] in #156
• chore(deps): bump @types/node from 25.9.4 to 26.0.1 by @dependabot[bot] in #153
• chore(deps): bump eslint from 10.5.0 to 10.6.0 by @dependabot[bot] in #147
• chore(deps): bump @typescript-eslint/eslint-plugin from 8.62.0 to 8.63.0 by @dependabot[bot] in #157
• chore(deps): bump webpack from 5.107.2 to 5.108.4 by @dependabot[bot] in #154
• chore(deps): bump webpack-cli from 7.0.3 to 7.2.1 by @dependabot[bot] in #155
• fix: restore eslint 10.7.0 override and update dependency baseline tests by @kkamegawa in #169
• Fix vsce packaging failure caused by npm allow-scripts inheritance by @kkamegawa in #171

Full Changelog: v0.2.3...v0.2.4

v0.2.3

Release Summary

Changes since previous release

• Previous release: v0.2.2
• Compare: v0.2.2...v0.2.3
• Commits: 6
• Changed files: 3

Closed issues since previous release

• #143 Resolve all open Dependabot pull requests
• #136 Consolidate open Dependabot npm dependency updates

Additional release notes below are auto-generated by GitHub.

What's Changed

• chore(deps): consolidate Dependabot npm updates by @kkamegawa in #137
• chore(deps): bump @types/vscode from 1.120.0 to 1.125.0 by @dependabot[bot] in #138
• chore(deps): bump ts-loader from 9.6.1 to 9.6.2 by @dependabot[bot] in #139
• chore(deps): bump @vscode/test-electron from 2.5.2 to 3.0.0 by @dependabot[bot] in #140
• chore(deps): bump @typescript-eslint/eslint-plugin from 8.61.1 to 8.62.0 by @dependabot[bot] in #141

Full Changelog: v0.2.2...v0.2.3

v0.2.2

Release Summary

Changes since previous release

• Previous release: v0.2.1
• Compare: v0.2.1...v0.2.2
• Commits: 2
• Changed files: 9

Closed issues since previous release

• #124 Consolidate dependency security updates and CodeQL remediation
• #114 Consolidate open Dependabot dependency updates into a single verified pull request

Additional release notes below are auto-generated by GitHub.

What's Changed

• chore: consolidate open Dependabot dependency updates by @kkamegawa in #115
• fix: consolidate dependency and CodeQL security remediation by @kkamegawa in #125

Full Changelog: v0.2.1...v0.2.2

v0.2.1

Release Summary

Changes since previous release

• Previous release: v0.2.0
• Compare: v0.2.0...v0.2.1
• Commits: 4
• Changed files: 9

Closed issues since previous release

• #105 Exclude Japanese docs (*_ja.md) from the packaged VSIX
• #103 Automate extension version from git tag in release CI and explicit local sync
• #101 Consolidate open Dependabot pull requests
• #95 fix: debug launch fails when dist/extension.js is missing
• #92 Update: align engines.vscode with @types/vscode 1.120
• #91 Design: # file context relay for Copilot/WorkIQ

Additional release notes below are auto-generated by GitHub.

What's Changed

• chore(deps): consolidate Dependabot pull requests by @kkamegawa in #102
• feat: derive extension version from git tags by @kkamegawa in #104
• Exclude Japanese docs (*_ja.md) from the packaged VSIX by @kkamegawa in #106

Full Changelog: v0.2.0...v0.2.1

v0.2.0

Release Summary

Changes since previous release

• Previous release: v0.1.5
• Compare: v0.1.5...v0.2.0
• Commits: 2
• Changed files: 23

Closed issues since previous release

• #93 Fix: # file picker UI missing and /ask mention rejection
• #89 fix-dependabot-pullrequest

Additional release notes below are auto-generated by GitHub.

What's Changed

• fix-dependabot-pullrequest by @kkamegawa in #90
• fix: add # file picker UI and mention context handling by @kkamegawa in #94

Full Changelog: v0.1.5...v0.2.0

v0.1.5

Release Summary

Changes since previous release

• Previous release: v0.1.4
• Compare: v0.1.4...v0.1.5
• Commits: 24
• Changed files: 17

Closed issues since previous release

• #82 fix: remediate remaining High CodeQL alerts
• #80 Fix CodeQL HIGH-severity security vulnerabilities in webview
• #78 Consolidate open Dependabot npm updates into one mergeable PR
• #76 Allow Dependabot in push protection workflow
• #66 Release 0.1.5 and Dependabot policy update

Additional release notes below are auto-generated by GitHub.

What's Changed

• chore(deps-dev): bump fast-uri from 3.1.0 to 3.1.2 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #65
• Allow Dependabot in push protection workflow by @kkamegawa in #77
• chore(deps): consolidate open Dependabot npm updates by @kkamegawa in #79
• fix: Resolve CodeQL HIGH-severity security vulnerabilities by @kkamegawa in #81
• fix: remediate remaining High CodeQL alerts by @kkamegawa in #83

New Contributors

• @dependabot[bot] made their first contribution in #65

Full Changelog: v0.1.4...v0.1.5

v0.1.4

Release Summary

Changes since previous release

• Previous release: v0.1.3-1
• Compare: v0.1.3-1...v0.1.4
• Commits: 2
• Changed files: 1

Closed issues since previous release

• None found

Additional release notes below are auto-generated by GitHub.

What's Changed

• fix: version number by @kkamegawa in #63
• fix: miss version number by @kkamegawa in #64

Full Changelog: v0.1.3...v0.1.4