GitHub Pull Requests 0.0.2

Added

• A GitHub token setting, optional and secret, in the desktop app only: with your own token
  GitHub allows 5,000 requests an hour instead of 60. The desktop keeps it in its encrypted
  secret vault on the device and the plugin sends it only to api.github.com; the web app has
  no secret settings, so the plugin runs without a token there. A saved token that is not valid
  stops every fetch, and the panel asks to paste it again or clear it. The panel's foot opens
  the settings. No new permission is asked for.

Changed

• When GitHub's hourly limit is used up, the message says how to add a token in the desktop
  app, or that the saved one could not be read while the desktop's secret vault is locked. A
  token GitHub rejects is named as the reason instead of an error per repository.

Install

Install from link (Settings → Plugins):

https://github.com/rim-platform/plugin-github-prs/releases/download/v0.0.2/chat.rim.github-prs-0.0.2.rimbundle#sha256=e180467d85dc82fcb130361fe5538251836e7e03f8c29bed80018fdb62fe4234

The desktop app fetches this link itself. GitHub serves release assets without CORS
headers, so the web app cannot fetch it: in the browser, install through a workspace
registry or from a host that sends CORS headers.

Install from git URL (Settings → Plugins, on the desktop):
https://github.com/rim-platform/plugin-github-prs.git installs the built plugin on master.

Verify the bundle

e180467d85dc82fcb130361fe5538251836e7e03f8c29bed80018fdb62fe4234  chat.rim.github-prs-0.0.2.rimbundle

The bundle has a build provenance attestation from this repository's release workflow.
Next to the downloaded files:

sha256sum --check SHA256SUMS
gh attestation verify chat.rim.github-prs-0.0.2.rimbundle --repo rim-platform/plugin-github-prs

The maintainer attaches chat.rim.github-prs-0.0.2.rimsig.json, the publisher's signed
statement for this bundle, by hand after the release. A workspace adds it to its plugin
registry with Workspace settings → Plugins → Add from files, together with the bundle.

GitHub Pull Requests 0.0.1

Added

• The GitHub Pull Requests plugin, first released from its own repository. It lists the open
  pull requests of up to 10 public GitHub repositories in its Pull requests panel, with
  the commands Pull requests: Refresh, Add repository and Remove repository. It
  talks only to api.github.com and avatars.githubusercontent.com, without a token.
• A new list starts with the project's own repositories, rim-platform/rim-ui and
  rim-platform/rim-server, until you save one of your own.
• The repository holds the built plugin at its root (rim-plugin.json, main.mjs and
  panels/), so the desktop installs it from its git URL; each release attaches a
  .rimbundle for Install from link.

Install

Install from link (Settings → Plugins):

https://github.com/rim-platform/plugin-github-prs/releases/download/v0.0.1/chat.rim.github-prs-0.0.1.rimbundle#sha256=1a1a6cff0051c80cdcec1f09a28f38ff005e503a4b0e6c64b390a6a25d781ced

The app fetches a link from its web view, and GitHub serves release assets without
CORS headers, so this link works on the desktop once it fetches links natively
(rim-ui issue #146); in the browser, install through a workspace registry or from a
host that sends CORS headers.

Install from git URL (Settings → Plugins, on the desktop):
https://github.com/rim-platform/plugin-github-prs.git installs the built plugin on master.

Verify the bundle

1a1a6cff0051c80cdcec1f09a28f38ff005e503a4b0e6c64b390a6a25d781ced  chat.rim.github-prs-0.0.1.rimbundle

The bundle has a build provenance attestation from this repository's release workflow.
Next to the downloaded files:

sha256sum --check SHA256SUMS
gh attestation verify chat.rim.github-prs-0.0.1.rimbundle --repo rim-platform/plugin-github-prs

The maintainer attaches chat.rim.github-prs-0.0.1.rimsig.json, the publisher's signed
statement for this bundle, by hand after the release. A workspace adds it to its plugin
registry with Workspace settings → Plugins → Add from files, together with the bundle.