Skip to content

Lean VS Code v0.10.3

Latest
Latest

Choose a tag to compare

View all tags
@mattivilola mattivilola released this 08 Nov 10:25
v0.10.3
0728eb4

Lean VS Code v0.10.3 release notes

The Apple Silicon app can retry an update through the GitHub API when the regular update feed or ZIP download fails. This covers the HTTP 504 failure seen after v0.10.2. The retry checks that the API describes a stable release and verifies the ZIP size and SHA-256 before the native updater verifies the app’s signature and installs it.

Earlier versions use the original download route. If that route is unavailable during the upgrade to v0.10.3, install the signed DMG by replacing Lean VS Code.app in Applications. The app reads your existing settings and extensions on the next launch.

Release verification uses focused functional and updater checks for this patch. Existing performance figures retain the versions measured in their original trials.

The minified Apple Silicon app was built from 0728eb43f4a20e73f3e43c5c09d5a5b1a6258b8a with Node 24.21.0 and Electron 43.6.0, on Code-OSS base 04c0d99f4fb0d8afe6ce4f0c58e31e183ac3e4b1. Electron’s ordinary checksum URL returned HTTP 504 during the build. The official checksum manifest retrieved through the GitHub API matched the published digest, and the packager used it to validate the cached Electron archive.

Typecheck, lint, the nine focused updater tests, and the desktop compatibility guard passed. The tests cover stable release selection, matching feed and ZIP metadata, rejection of incomplete or corrupted archives, cancellation, and private delivery to the native updater.

Both signed native fallback trials passed. A disposable signed app used the exact v0.10.3 updater code with an older version number so it could install the real public v0.10.2 release. One trial returned HTTP 504 for the normal feed. The other served a valid normal feed and returned HTTP 504 for its ZIP. Each retried once through the live GitHub API, reached Ready, restarted into the signed destination, and retained the test profile’s settings and extension.

The signed DMG app smoke passed editing and saving, file and workspace text search, local Git review, the integrated terminal, extension webviews, and installation and activation of EditorConfig 0.18.2 through Open VSX. The app was tested in a compact window with an isolated profile.

Signed downloads

The artifact report verifies that the DMG and update ZIP contain the same app across 2,218 files, directories, and symlinks. The smoke-tested copy matched the final DMG. The packages passed strict signature, stapled ticket, and Gatekeeper checks.

  • Apple Silicon DMG (206,623,477 bytes), SHA-256 49717a321eca1605548aeb69ca0711582aab86c62019521fc3e4869b97cd7ca6
  • Auto-update ZIP (192,183,344 bytes), SHA-256 46df1df5fbd6ad8ca049e5ca2ec98a60d4e083d7ece166e9ae5be37457abb055

Apple accepted app submission a64d05ba-31e6-4882-9927-66961860030f and DMG submission e509872e-c8b3-43fb-9865-ffb3e8b9c811.

Published delivery

v0.10.3 is the latest stable GitHub release. The tag points to the exact build commit and all three uploaded digests match the local artifacts. During publication verification, the normal feed, ZIP, and DMG URLs returned HTTP 504 from the test Mac. The fallback code fetched the public v0.10.3 feed and the complete ZIP through the API and verified the archive. The public API also served a DMG with the SHA-256 listed above.

If GitHub's download button returns 504, use Terminal to download the same signed installer through the public API.

curl -fL -H 'Accept: application/octet-stream' \
  'https://api.github.com/repos/mattivilola/lean-vs-code/releases/assets/723588183' \
  -o Lean-VS-Code-0.10.3-macos-arm64.dmg

The website now links to v0.10.3 from all three download pages. The delivery record contains the asset digests, public API verification, and deployment ID.

Assets 5
Loading