release: 0.3.2 (vscode + vs2026) - group counter + MessagePack security override#18
Merged
Merged
Conversation
Override the transitive MessagePack 2.5.198 dep pulled in by Microsoft.VisualStudio.Extensibility.Sdk 17.14 (via Microsoft.ServiceHub.Framework) with an explicit PackageReference on MessagePack / MessagePack.Annotations 2.5.302 -- the latest 2.5.x patch line that fixes GHSA-vh6j-jc39-fggf (MessagePackReader.Skip unbounded recursion) and GHSA-hv8m-jj95-wg3x (LZ4 decompression AccessViolationException). Kept on the 2.5.x line to preserve binary compatibility with the Extensibility SDK's own use of MessagePack. dotnet restore now reports 0 warnings, and the extension still deploys and runs cleanly against the Experimental hive.
…lter
GroupNode now stores its TotalCount and exposes UpdateFilteredCount(visibleCount), which sets Description to '{visible}/{total}' when the filter hides some items or to the plain total otherwise. ApplyVisibilityRecursive counts visible (non-InfoNode) children per GroupNode and updates the label in place; SetAllVisibleRecursive resets it to the plain total when the filter is cleared. Property changes fired on already-materialised group nodes propagate correctly over Remote UI -- this only touches the just-added path indirectly through BuildAnalysisChildren, which already runs ApplyVisibilityRecursive on the local children list before ReplaceList.
…lter Mirrors the VS 2026 change: while a filter is active, each group's description shows visible/total (e.g. Templates 4/7); when the filter clears (or all items still match) it reverts to the plain total.
VS Code: 0.3.0 -> 0.3.2 (skips 0.3.1, which was VS 2026-only). VS 2026: 0.3.1 -> 0.3.2. Rolls Unreleased into dated 0.3.2 sections in the two per-client CHANGELOGs and in the top-level aggregate CHANGELOG. Adds the previously- missing ReplaceList race fix (already shipped in vs2026 0.3.1) to the root aggregate under 0.3.2 for completeness.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Rolls both clients into a joint 0.3.2 release.
Version bumps
src/vscode)src/vs2026)The VS Code client skipped 0.3.1 because that patch shipped fixes only in the Visual Studio 2026 client (PR #17).
What ships in 0.3.2
Changed
[vscode] [vs2026]Group headers now show afiltered/totalcounter while the tree filter is active (e.g.4/7), and revert to a plain total (7) when the filter clears. Fixes the confusing case where a group advertised 7 templates but only 4 were visible.Fixed (
[vs2026], rolled up from 0.3.1 into the root aggregate)ReplaceList.Security (
[vs2026])MessagePackandMessagePack.Annotationsto2.5.302via explicit<PackageReference>overrides to clearNU1902/NU1903advisories (GHSA-vh6j-jc39-fggf, GHSA-hv8m-jj95-wg3x). Kept on 2.5.x for ABI compat with the Extensibility SDK's transitive 2.5.198 usage.Documentation (
[vscode] [vs2026])Verification
npm run compile— 0 errors, 0 warnings; banners now reportvscode-pipelinesexplorer@0.3.2.dotnet build src/vs2026/PipelinesExplorer.VisualStudio.csproj -c Debug— Build succeeded. 0 Warning(s). 0 Error(s). AssemblyVersionpicks up 0.3.2 fromsource.extension.vsixmanifestvia the csproj propagation.Commits in this PR
4463da8chore(vs2026): pin MessagePack 2.5.302 to clear NU1902/NU1903 advisories8e38caefeat(vs2026): group header shows filtered/total count under active filter60aae96feat(vscode): group header shows filtered/total count under active filter11ecd04chore: bump both clients to 0.3.2Tag plan (after merge)
vscode-v0.3.2vs2026-v0.3.2Tags are intentionally not created in this PR — they will be pushed after merge via the normal release flow.