Prepare the repository and the 0.2.0 release for a public listing - #11
Merged
krotname merged 3 commits intoAug 4, 2026
Merged
Conversation
Release 0.2.0 with the Marketplace metadata a public listing needs: gallery banner, Q&A link, free pricing, untrusted and virtual workspace capabilities, and an explicit extension kind. The extension now activates on Markdown documents, so light auto align and the status-bar toggles are live before the first command instead of after it. Bring the repository up to the standard already used by the JetBrains and Notepad++ editions: README rewritten in both languages with real before/after output produced by the core, third-party notices, a Marketplace submission record, contribution layout and release instructions, issue and pull request templates, and an .editorconfig. Add the actionlint, dependency review, and OpenSSF Scorecard workflows, and a publish workflow that verifies the VSIX without credentials and uploads exactly that artifact from an approval-gated environment. Every action is pinned to a commit SHA and checked out without persisted credentials. The VSIX verification script no longer hardcodes the version; it compares the installed extension against the manifest. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 960b9c54dd
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
…ncy review The lockfile still identified the project as 0.1.0 after the manifest bump, and dependency-review-action cannot compare anything on a workflow_dispatch run because that event carries no pull request base and head refs. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
An extension repository without .vscode/launch.json makes every contributor reconstruct the Extension Development Host invocation by hand. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
krotname
deleted the
feature/vscode-markdown-table-editor-publish-de5cb8
branch
August 4, 2026 16:31
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
User impact
Cuts the 0.2.0 release and makes the repository presentable as a public project and the extension
publishable to the Visual Studio Marketplace.
extensionKind, and declaredsupport for untrusted and virtual workspaces.
activationEvents: ["onLanguage:markdown"]— Light Auto Align and the status-bar toggles used tostay dormant until the user invoked a command, even though light auto align is on by default.
editions, and before/after samples that were generated by running the core, not written by hand.
THIRD_PARTY_NOTICES.md(verified against the installed dev dependency manifests),MARKETPLACE_SUBMISSION.md,.editorconfig, PR template, issue template config, and a featurerequest form.
Publish to VS Code Marketplace. The publish workflow verifies the VSIX in a job that never sees the token, thenuploads exactly that checksummed artifact from the approval-gated
marketplaceenvironment.persist-credentials: false.scripts/verify-vsix.mjscompared the installed extension against a hardcoded0.1.0; it nowreads publisher, name, and version from the manifest, so a version bump cannot silently pass.
Validation
npm run checknpm run test:coverage— 69 tests, 97.85% linesnpm run test:e2e— 4 Extension Host testsnpm run package+npm run test:vsix— installs askrotname.markdown-table-editor@0.2.0Core parity
src/core.tsbehavior.