Release/v2.1.0: Local Extensions Tracker & Security Enhancemets#1

Merged

vigilantloki merged 21 commits into

masterfrom

release/v2.1.0

Jun 30, 2026

Commits on Jun 6, 2026

feat(db): add local SQLite tracking database for extension fetches

ZenithClown
and
Copilot
committed

Commits on Jun 27, 2026

🛠️✨ refactor(remote): harden TLS and extraction, add verify flags

ZenithClown
and
claude
committed
🐛🛠️ fix(cli): clean error handling, URL encoding, pagination cap

ZenithClown
and
claude
committed
✨🛠️ refactor(error): add exception hierarchy, constants, User-Agent

ZenithClown
and
claude
committed
🧪🛠️ test(tests): add hermetic security suite, gate live tests

ZenithClown
and
claude
committed
🔒🤖 ci(workflows): pin actions to commit SHA and add security scan

ZenithClown
and
claude
committed
🔀 merge(release): integrate security hardening (phases 1-4)
ZenithClown
committed
🔀 merge(release): integrate CI/CD supply-chain hardening (phase 5)
ZenithClown
committed
🤖 ci(security): scope bandit scan to the package source

ZenithClown
and
claude
committed
📝 docs(changelog): add v2.1.0 security-hardening release notes
ZenithClown
committed
✨ feat(db): merge auditing-database history into feature/tracker

ZenithClown
and
claude
committed
✨ feat(database): add records.db path resolver and package scaffold

ZenithClown
and
claude
committed
✨ feat(database): add normalized ORM schema and engine bootstrap

ZenithClown
and
claude
committed
✨ feat(database): add best-effort tracking write and query API

ZenithClown
and
claude
committed
🛠️ feat(remote): add resolveCommit ref-to-SHA resolver for tracking

ZenithClown
and
claude
committed
✨ feat(cli): track fetches, add --no-tracking flag and records command

ZenithClown
and
claude
committed
💣 refactor(db): drop superseded raw-sqlite tracker package

ZenithClown
and
claude
committed
🧪 test(database): add offline tracking tests and suite DB redirect

ZenithClown
and
claude
committed
📝 docs: document tracking database, --no-tracking and records

ZenithClown
and
claude
committed
🐛🛠️ fix(database): harden audit findings (path key, UTC, races)

ZenithClown
and
claude
committed
🔀 merge(release): integrate feature/tracker tracking database
ZenithClown
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Release/v2.1.0: Local Extensions Tracker & Security Enhancemets#1

Release/v2.1.0: Local Extensions Tracker & Security Enhancemets#1
vigilantloki merged 21 commits into
masterfrom
release/v2.1.0

Commits on Jun 6, 2026

feat(db): add local SQLite tracking database for extension fetches

Commits on Jun 27, 2026

🛠️✨ refactor(remote): harden TLS and extraction, add verify flags

🐛🛠️ fix(cli): clean error handling, URL encoding, pagination cap

✨🛠️ refactor(error): add exception hierarchy, constants, User-Agent

🧪🛠️ test(tests): add hermetic security suite, gate live tests

🔒🤖 ci(workflows): pin actions to commit SHA and add security scan

🔀 merge(release): integrate security hardening (phases 1-4)

🔀 merge(release): integrate CI/CD supply-chain hardening (phase 5)

🤖 ci(security): scope bandit scan to the package source

📝 docs(changelog): add v2.1.0 security-hardening release notes

✨ feat(db): merge auditing-database history into feature/tracker

✨ feat(database): add records.db path resolver and package scaffold

✨ feat(database): add normalized ORM schema and engine bootstrap

✨ feat(database): add best-effort tracking write and query API

🛠️ feat(remote): add resolveCommit ref-to-SHA resolver for tracking

✨ feat(cli): track fetches, add --no-tracking flag and records command

💣 refactor(db): drop superseded raw-sqlite tracker package

🧪 test(database): add offline tracking tests and suite DB redirect

📝 docs: document tracking database, --no-tracking and records

🐛🛠️ fix(database): harden audit findings (path key, UTC, races)

🔀 merge(release): integrate feature/tracker tracking database