v1.1.0

🦄 LLM Wiki 1.1.0 replaces the deprecated @wiki chat participant with Copilot skills, a Wiki Librarian agent and a richer MCP server. It also updates dependencies to fix the security advisories reported since v1.0.1.

Chat participant deprecation

VS Code has deprecated chat participants. The Copilot harness, which VS Code 1.142 began rolling out as the default for new chat sessions, doesn't run them, so @wiki stopped working in most new chats. This release removes @wiki and moves its features to the replacement VS Code recommends: skills backed by the LLM Wiki MCP server, plus a custom agent (#124).

Before	Now
@wiki <question>	Ask in Agent mode, or /wiki-ask <question>
@wiki /status	Status bar, LLM Wiki: Show Status, or the wiki_status tool
@wiki /lint	LLM Wiki: Run Lint, or the wiki_lint tool
@wiki /fix	LLM Wiki: Fix Issues, then /wiki-fix for the findings that need judgment
@wiki /save	/wiki-save [title]

Requires VS Code 1.109 or later.

What's new

• Copilot skills: /wiki-ask, /wiki-research and /wiki-ingest, which Copilot also loads on its own when they fit, plus /wiki-save and /wiki-fix, which run only when you invoke them.
• Wiki Librarian custom agent, and instructions for files under .wiki/.
• Agent plugin with the same skills and agent and a self-contained MCP server, for Copilot CLI and other agent plugin clients: copilot plugin install microsoft/llmwiki:plugin.
• LLM Wiki: Run Lint and LLM Wiki: Fix Remaining Issues with Copilot commands, and a Lint Findings view.
• MCP server: new wiki_fix and wiki_delete_page tools, plus wiki_open and wiki_init when the server isn't tied to one wiki. Tools have titles and read-only or destructive annotations, so VS Code no longer asks before running read-only tools. The server also adds structured output, argument completions, and instructions that include the wiki's AGENTS.md.
• Pages record the sources they came from, so removing a source deletes only the pages that have no other source left.

Security patches

Runtime dependencies

• body-parser 2.4.0: denial of service via trailing bytes after a compressed request body (GHSA-27r3-jxmh-p828, high) (#118)
• zod 4.6.7: memory exhaustion while validating oversized constrained collections (GHSA-mrhx-c7xc-m3w5, high) (#120)
• hono 4.13.13 and @hono/node-server 2.1.6: serveStatic decoded the request path twice, which bypassed middleware on static paths (GHSA-5r4p-p66f-jhc7, GHSA-rmxm-3fg6-px4f, medium) (#113, #121)
• fast-uri 3.1.9: scheme spoofing and host confusion (GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, medium), plus two low-severity URI normalization issues (GHSA-xhq7-xmqj-769h, GHSA-333x-w4r6-6crp) (#116)
• qs 6.17.1: denial of service in qs.stringify with arrayFormat: 'comma' (GHSA-6pq8-jhm2-2vcw, medium) (#122)
• ip-address 10.7.5: quadratic-time matching of IPv6 zone identifiers (GHSA-rxp7-6hxx-x8q5, medium) (#119)

Dev / build dependencies

• undici 7.30.1: 8 advisories, 4 of them high, including a TLS certificate validation bypass (GHSA-2m5v-pch6-74hx) and cache poisoning through cross-origin redirects (GHSA-4w7w-5xrc-9h26) (#117)
• @azure/msal-node 7.1.2 and @azure/identity 4.14.1: the authorization code flow could send parameters to an attacker-controlled endpoint (GHSA-xcx6-jx8p-x3h5, high) (#115)
• vite 8.3.5: 6 advisories, including a launch-editor check that could be bypassed on Windows (GHSA-587h-7wmj-h5pm, high) (#112)
• markdown-it 14.3.3: quadratic-time rendering of link reference definitions (GHSA-gfr2-rv44-r23c, high) and of inline HTML (GHSA-vfgh-jcmw-g37q, low) (#114)
• mocha 12.0.3 (#123)

Wiki tools

• Deleting pages refuses paths that leave the wiki through a symlinked folder, and never deletes index.md or log.md under another letter case (#124).
• wiki_ingest_with_context resolves relative source paths against the wiki root and keeps them inside it (#124).
• The /wiki-fix skill and the MCP lint-and-fix prompt ask before applying fixes that delete pages (#124).

Supply chain

• GitHub Actions updated, still pinned to full-length commit SHAs (#111)

Fixes

• Removing a source deletes only the pages that have no other remaining source. Refresh and Fix Issues no longer delete pages whose sources list raw/ paths or URLs.
• The extension's LLM ingest extends existing entity and concept pages instead of overwriting them.
• Concurrent writers, such as two ingests or an ingest and a Copilot agent, no longer overwrite each other's changes to the same page.
• wiki_ingest_with_context accepts relative paths such as raw/article.md.
• Lint auto-fix no longer adds an orphan page to the index twice.
• Long-running processes such as the MCP server no longer read frontmatter that an earlier caller changed, which could make lint miss findings.

Known issues

These affect only development and test tooling, which isn't included in the extension package:

• vitest 4.1.11 (@vitest/mocker, 2 medium advisories, fixed in 4.1.12)
• serialize-javascript 7.0.5, used by mocha (low)
• minimatch 10.2.5, used by @vscode/vsce, glob and mocha (medium). The fix is in minimatch 11, which those packages don't accept yet.

Full Changelog: v1.0.1...v1.1.0