patchloom: v0.0.4

Patchloom for VS Code v0.0.4

This release brings full alignment with Patchloom CLI v0.2.0, new Quick Actions, improved documentation, and infrastructure hardening.

What's new

Patchloom CLI v0.2.0 support

• Patch Merge Quick Action: three-way merge is now available directly from the command palette, matching the new patch merge command in CLI v0.2.0.
• Updated documentation links: all "Open Documentation" links now point to the new docs site at patchloom.github.io/patchloom.
• MCP setup guide: the Getting Started walkthrough now includes a direct link to the MCP configuration guide.

Documentation improvements

• The README now lists all 13 commands (previously "Open Documentation" was missing).
• Four undocumented settings are now in the README: patchloom.enable, patchloom.trace.server, patchloom.env, and patchloom.managedInstall.autoUpdate.

Under the hood

• Security: resolved a high-severity vulnerability in markdown-it (GHSA-6v5v-wf23-fmfq) and updated transitive dependencies.
• Code quality: deduplicated constants and error helpers across managed install commands, removing repeated code from three parallel functions.
• CI: replaced the third-party auto-approve action with a native gh pr review call, added a monthly PAT expiry reminder workflow, and added support for curated release notes.
• Dependencies: bumped @vscode/test-electron to v3, @types/node, ovsx, and actions/attest-build-provenance to v4.

Test coverage

252 unit tests, 91% line coverage, zero npm audit vulnerabilities.

patchloom: v0.0.3

0.0.3 (2026-06-07)

Features

• expand Quick Actions with markdown, doc mutations, and undo (#117) (3be2018), closes #114 #115 #116
• expose remaining medium-priority CLI commands as Quick Actions (#122) (cf652a2), closes #120

Bug Fixes

• exclude .patchloom/ from git tracking and VSIX package (#121) (84060fb), closes #119

patchloom: v0.0.2

0.0.2 (2026-06-07)

Features

• add dynamic code coverage badge (#87) (73c7231)
• cache VS Code Marketplace version badge via Gist (#88) (e24a3cc)
• managed install fix + 10 competitive gap improvements (#113) (ea7fcfc)
• MCP-aware status bar, per-editor breakdown, verify command (#94) (21fb8e8)
• use GitHub App token for release-please identity separation (#89) (dfb58f1), closes #77

Bug Fixes

• align release tag format and batch template with patchloom CLI (#98) (623f60f), closes #97
• migrate app-id to client-id in workflow app tokens (#92) (68b9fc8)
• replace retired shields.io Marketplace badges (#82) (00257de)
• resolve CodeQL and AI code quality findings (#100) (6cf1a64)
• skip auto-merge for release PRs (#90) (6613770)
• trim README badges to 7 dynamic essentials (#83) (8e20298)
• update MCP test to use newline-delimited JSON-RPC (#102) (eda9e6b), closes #101
• update release URL tag format and README for patchloom v0.1.4 (#99) (f69d011)
• use App token for auto-merge to unblock post-merge events (#91) (4ed6802)

patchloom: v0.0.1

0.0.1 (2026-06-05)

Features

• add output channel, search/create/doc-get actions, and batch apply (e451e03), closes #27 #28 #29
• implement managed Patchloom binary install, update, and reinstall (d272511), closes #9
• log CLI invocation details in generateAgentRules (9d0095a)

Bug Fixes

• add missing .js extension to re-export in showStatus (2764301)
• ci: exclude private patchloom URLs from lychee (0277fb2)
• ci: fix lychee config syntax and FOSSA job gate (a86c8c8)
• ci: use self-hosted runner for unit tests (private repo) (29e343c)
• correct release-please-action SHA pin (#68) (de77c2f)
• harden managed install download and cleanup (54b061c)
• include workspace name and log errors in generateAgentRules (b194ce4), closes #38
• make all unit tests cross-platform for Windows (#39) (2d82279)
• make dedup test platform-aware for Windows PATHEXT (cf8512d)
• patch test VS Code after download to suppress macOS windows (7549763)
• re-sign VS Code app bundle after LSUIElement patch (c010b30)
• remove placeholder screenshots from README (#66) (b29bbce)
• resolve code quality alerts and improve Scorecard (#54) (cf5aeb0)
• resolve npm audit vulnerabilities via overrides (c3801a9), closes #37
• revert cross-platform CI matrix and use self-hosted for security (93d21a2)
• update integration test for 12 registered commands (b58f606)
• update integration test to expect 9 commands (7e5b78e)
• validate create action path stays inside workspace folder (d107a3b)