v0.2.1

Documentation, third-party licence notices and build tooling. No functional changes — the rendering path, SVG sanitisation and Markdown preview integration are identical to 0.2.0.

Added

• The VSIX now ships THIRD_PARTY_NOTICES.md and third-party/, carrying the copyright and licence texts of every bundled component: PlantUML, Viz.js, Graphviz (EPL-1.0, not MIT), Expat, happy-dom and its dependencies, and the extension kit. The licences of that code require their notices to travel with the package, and previously none shipped.
• verify-vsix fails the build if a licence text is missing from the package or is unreferenced by the notices file, so a future bundled dependency cannot ship without its notice.

Changed

• README and SECURITY.md now describe the local-rendering and network behaviour as design and implementation rather than as absolute guarantees. SECURITY.md gains a Non-goals section stating plainly that the render worker is an isolation boundary for JavaScript globals — not a process- or OS-level security sandbox — and that disabling browser-style network APIs is not the same as closing every network path available to Node.js.
• README gains a Known Limitations section: !include, remote themes and images, external sprite libraries, approximate text metrics and the render timeout.
• The Marketplace description and the repository description now match the README's wording.
• SECURITY.md supported-versions table tracks the latest release instead of naming 0.1.x; CONTRIBUTING.md requires Node 22 to match engines.node and CI; the untrustedWorkspaces description no longer calls the worker "sandboxed".
• Development moved to TypeScript 6.0 (from 5.9). Build tooling only — esbuild does the transpiling, so the shipped bundles are unaffected.

Fixed

• The Marketplace badge in the README was dead: shields.io has retired its entire visual-studio-marketplace/* family, so it rendered as a grey "retired badge".

Full changelog: v0.2.0...v0.2.1