This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

🏕 Features

• Upgrade to Java 25 by @amvanbaren in #1446
• chore(deps): bump apache:tika to 3.2.2 version by @svor in #1462
• cli 0.10.8 unreleased by @amvanbaren in #1465
• Fix gatling configuration / setup after upgrade to Java 25 by @netomi in #1461
• Fix Gatling tests by @amvanbaren in #1466
• Cleanup sonar workflow by @netomi in #1468
• Create issue template config by @netomi in #1472
• Fix: coalesce the max download count in case the database is empty by @netomi in #1444
• Update mocha and rimraf dev dependencies by @netomi in #1473
• Improve CI workflow by @netomi in #1475
• Search by publisher by @amvanbaren in #1447
• Fix order of parameters passed in the NamingUtil by @netomi in #1455
• Reduce log verbosity of ExpireFileListener to DEBUG instead of INFO by @netomi in #1481
• Only build docker images if respective files have changed by @netomi in #1483
• Only print the error result message when publishing an extension fails by @netomi in #1485
• Properly URI decode wildcard paths from URL endpoints by @netomi in #1484
• Properly validate MAX_CONTENT_SIZE when publishing extensions by @netomi in #1458
• Ensure to retrieve and display up-to-date publisher agreement status by @netomi in #1445
• Add support for CDN front URL configuration for storage providers by @netomi in #1452
• Add AwsDownloadCountService by @netomi in #1451
• Update glob and jws transitive dependencies by @netomi in #1482
• Release v0.31.0 by @amvanbaren in #1492
• Fallback for unsupported gallery color by @netomi in #1508
• Update qs dependency to 6.14.1 by @netomi in #1520
• Pin remaining workflows by @netomi in #1521
• Fix login of blocked users by @netomi in #1527
• Add publishing workflow for CLI by @netomi in #1525
• Add publishing workflow for frontend library by @netomi in #1526
• Improve release workflow by @netomi in #1528

👒 Dependencies

• Bump jws from 3.2.2 to 3.2.3 in /cli by @dependabot[bot] in #1460
• build(deps): bump glob from 10.4.1 to 10.5.0 in /webui by @dependabot[bot] in #1474
• build(deps): bump the github-actions group with 8 updates by @dependabot[bot] in #1476
• build(deps): bump qs from 6.12.0 to 6.14.1 in /cli by @dependabot[bot] in #1516
• build(deps): bump the github-actions group across 1 directory with 4 updates by @dependabot[bot] in #1512

Full Changelog: v0.30.0...v0.31.0

Dependencies

• Upgrade rimraf from 6.0.1 to 6.1.2
• Upgrade @playwright/test from 1.49.0 to 1.55.1
• Upgrade mocha from 10.8.2 to 11.7.5
• Upgrade ts-mocha from 10.0.0 to 11.1.0
• Add ts-node version 10.9.2

Dependencies

• Upgrade jws from 3.2.2 to 4.0.1 (#1482)
• Upgrade @vscode/vsce from 3.2.1 to 3.7.1 (#1482)

This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

• feat: Update OpenVSX Publisher agreement to v1.1 for dev document by @autumnfound in #1364
• feat: Add IRSA and session token support to AWS Storage Service by @achdmbp in #1327
• Bump js-yaml from 4.1.0 to 4.1.1 in /cli by @dependabot[bot] in #1417
• Bump glob from 10.3.10 to 10.5.0 in /cli by @dependabot[bot] in #1423
• feat: centering banner button by @gnugomez in #1405
• Allow admins to revoke a user's Personal Access Token by @amvanbaren in #1415
• Fix: correctly reference the request body class for the /api/user/namespace/create operation by @netomi in #1414
• Fix refreshing eclipse oauth2 token by @netomi in #1388
• Add scorecard workflow and update badges / logo by @netomi in #1422
• Fix: handle duplicate extensions included in search results by @netomi in #1408
• Bump js-yaml from 4.1.0 to 4.1.1 in /webui by @dependabot[bot] in #1424
• Add configuration setting to disable automatic storage migration by @netomi in #1425
• Publisher remove extension by @amvanbaren in #1366
• Bump cli version by @amvanbaren in #1431

New Contributors

• @achdmbp made their first contribution in #1327
• @gnugomez made their first contribution in #1405
• @netomi made their first contribution in #1414

Full Changelog: v0.29.1...v0.30.0

This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

• Update springdoc by @amvanbaren in #1381

Full Changelog: v0.29.0...v0.29.1

This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

• Caffeine cache fallback by @amvanbaren in #1361
• Add logging to CacheConfig by @amvanbaren in #1367

Full Changelog: v0.28.0...v0.29.0

This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

• Update Spring Boot to 3.5.3 by @amvanbaren in #1288
• chore: update the deployment instructions for OpenShift by @svor in #1312
• Bump form-data from 4.0.0 to 4.0.4 in /cli by @dependabot[bot] in #1291
• Bump tmp from 0.2.3 to 0.2.4 in /cli by @dependabot[bot] in #1304
• Makes the web UI auto-reload (with logs) on local dev with docker-compose by @davidgomes in #1318
• chore: bump org.springframework.boot to 3.5.5 by @svor in #1325
• Cache /vscode/gallery/{namespaceName}/{extensionName}/latest by @amvanbaren in #1303
• Prefix personal access token by @amvanbaren in #1339
• Add allowed versions to EclipseService by @amvanbaren in #1347
• chore: bump springframework-boot to 3.5.6 version by @svor in #1345
• Redis Caching by @amvanbaren in #1277
• cli v0.10.6 by @amvanbaren in #1352
• Bump tar-fs from 2.1.3 to 2.1.4 in /cli by @dependabot[bot] in #1353
• Add tar-fs upgrade to CHANGELOG by @amvanbaren in #1354

New Contributors

• @davidgomes made their first contribution in #1318

Full Changelog: v0.27.0...v0.28.0

This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

• Find latest active extension version for search by @amvanbaren in #1256
• Make configurable whether migrations only run once per version. by @amvanbaren in #1266
• Remove BlockHostFilter by @amvanbaren in #1268
• chore: upgrade gradle from 8.1.1 to 8.3 by @svor in #1257
• Bump brace-expansion from 1.1.11 to 1.1.12 in /cli by @dependabot in #1261
• cli: Update CHANGELOG and bump version by @amvanbaren in #1273
• Improve search by @amvanbaren in #1275
• chore: add group Gradle property; add maven-publish plugin by @svor in #1274
• cli CHANGELOG for v0.10.5 by @amvanbaren in #1278
• webui: don't assume ErrorResult in tryResolveNamespaceError by @amvanbaren in #1281

Full Changelog: v0.26.0...v0.27.0

This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

• Add BlockHostFilter by @amvanbaren in #1253
• Bump tar-fs from 2.1.2 to 2.1.3 in /cli by @dependabot in #1252
• chore: Fix CVE-2025-22235 by upgrading org.springframework.boot to 3.3.11 by @svor in #1245
• cli 0.10.4 by @amvanbaren in #1254

Full Changelog: v0.25.0...v0.26.0

This release of Open VSX consists of:

• ovsx CLI
• openvsx-webui frontend library
• openvsx-server Docker image
• openvsx-webui Docker image

Deploying the server application is documented in the Wiki.

What's Changed

• Use publisher agreement after signing by @amvanbaren in #1178
• Automate namespace claim process by @amvanbaren in #1179
• Always enqueue RemoveFileJobRequest by @amvanbaren in #1181
• Fix artifact poisoning by @amvanbaren in #1186
• Run server tests conditionally by @amvanbaren in #1192
• Update Sonar github action by @amvanbaren in #1188
• Add workflow permissions by @amvanbaren in #1189
• Update yarn to 4.9.1 by @amvanbaren in #1190
• Use format specifiers by @amvanbaren in #1193
• Fix peer requirements by @amvanbaren in #1191
• Use dedicated exceptions by @amvanbaren in #1194
• Update server dependencies by @amvanbaren in #1195
• Conditional logging by @amvanbaren in #1196
• Expected the Promise rejection reason to be an Error. by @amvanbaren in #1197
• Add default case to switch by @amvanbaren in #1198
• Don't use Stream.peek by @amvanbaren in #1199
• Catch Exception instead of Throwable by @amvanbaren in #1200
• Add missing @OverRide annotations by @amvanbaren in #1201
• Remove exception in method declaration by @amvanbaren in #1202
• Replace "as" with upper case format "AS" by @amvanbaren in #1203
• Set defaultValue for boolean by @amvanbaren in #1204
• Remove unused imports by @amvanbaren in #1205
• Reduce complexity queryV2 method by @amvanbaren in #1206
• Reduce complexity upstream browse method by @amvanbaren in #1207
• Reduce complexity upstream asset method by @amvanbaren in #1208
• Use SLF4J fluent API by @amvanbaren in #1209
• Reduce getWebResource complexity by @amvanbaren in #1210
• Reduce OrphanNamespaceMigration complexity by @amvanbaren in #1211
• Reduce DataMirrorJobRequestHandler complexity by @amvanbaren in #1212
• Reduce ExtensionVersionHandler complexity by @amvanbaren in #1213
• Reduce DatabaseSearchService complexity by @amvanbaren in #1214
• Reduce AzureDownloadCountService complexity by @amvanbaren in #1215
• Reduce UrlUtil complexity by @amvanbaren in #1216
• Reduce toExtensionVersionJsonV2 complexity by @amvanbaren in #1217
• Fix missing files migration by @amvanbaren in #1218
• Fix deprecated method calls by @amvanbaren in #1219
• Move PAT functionality from util.ts to login.ts by @amvanbaren in #1220
• Make feed names constant by @amvanbaren in #1221
• Split command and options by @amvanbaren in #1222
• Reduce nested functions in zip.ts by @amvanbaren in #1223
• Enable XML secure processing feature to prevent XXE attacks by @amvanbaren in #1224
• Move personal access token functionality to pat.ts by @amvanbaren in #1225
• Use yauzl-promise instead of yauzl by @amvanbaren in #1226
• decrease cognitive complexity by @amvanbaren in #1227
• Append instead of overwrite URL by @amvanbaren in #1228
• Merge if statements and use pattern variable by @amvanbaren in #1229
• Use entrySet when both key and value are used by @amvanbaren in #1230
• Simplify assertions by @amvanbaren in #1231
• Add @deprecated javadoc by @amvanbaren in #1232
• Use nullish coalescing by @amvanbaren in #1233
• Extension header styling by @amvanbaren in #1242
• Delete extension using admin token by @amvanbaren in #1248
• v0.25.0-rc.1 changes by @amvanbaren in #1249
• Improve FixMissingFilesJobRequestHandler by @amvanbaren in #1250

Full Changelog: v0.24.0...v0.25.0