tag:github.com,2008:https://github.com/atsyplenkov/formalist/releases 2026-03-18T15:16:14Z tag:github.com,2008:Repository/903982492/0.2.4 2026-03-18T15:18:04Z <h2>v0.2.4 — Security Patch</h2> <p><strong>No functional changes.</strong> This release upgrades transitive dependencies to address a Dependabot security alert.</p> <h3>Vulnerability</h3> <p><strong>Serialize JavaScript is Vulnerable to RCE via <code>RegExp.flags</code> and <code>Date.prototype.toISOString()</code></strong></p> <p>Affected packages in the dependency tree:</p> <ul> <li><code>serialize-javascript</code> — upgraded from 6.0.2 to <strong>7.0.3</strong></li> <li><code>minimatch</code> — upgraded from 9.0.5 to <strong>9.0.7</strong></li> </ul> <p>Both are transitive dependencies pulled in by <code>mocha</code> and <code>@vscode/test-cli</code> (devDependencies only). The vulnerability does not affect runtime extension code, but is resolved out of caution.</p> <h3>References</h3> <ul> <li><a href="https://github.com/advisories/GHSA-69xj-mcc2-95jq">GHSA-69xj-mcc2-95jq</a> — serialize-javascript RCE</li> <li><a href="https://github.com/advisories/GHSA-35jh-r3h4-6jhm">CVE-2025-23208</a> — minimatch ReDoS</li> </ul> <h3>Install</h3> <p>Download <code>formalist-0.2.4.vsix</code> from the release assets and install via:</p> <div class="highlight highlight-source-shell notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="code --install-extension formalist-0.2.4.vsix"><pre>code --install-extension formalist-0.2.4.vsix</pre></div> atsyplenkov tag:github.com,2008:Repository/903982492/0.2.3-1 2026-03-03T13:22:22Z <h2>What's Changed</h2> <ul> <li>fix extension marketplace compatibility for Code 1.108+ by changing <code>engines.vscode</code> to a semver range (<code>^1.106.0</code>)</li> <li>fixes <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4016400013" data-permission-text="Title is private" data-url="https://github.com/atsyplenkov/formalist/issues/11" data-hovercard-type="issue" data-hovercard-url="/atsyplenkov/formalist/issues/11/hovercard" href="https://github.com/atsyplenkov/formalist/issues/11">#11</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/atsyplenkov/formalist/compare/0.2.3...0.2.3-1"><tt>0.2.3...0.2.3-1</tt></a></p> atsyplenkov tag:github.com,2008:Repository/903982492/0.2.3 2025-12-22T15:27:56Z <h2>What's Changed</h2> <ul> <li>just updated JS dependencies</li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/atsyplenkov/formalist/compare/0.2.2...0.2.3"><tt>0.2.2...0.2.3</tt></a></p> atsyplenkov tag:github.com,2008:Repository/903982492/0.2.2 2025-04-06T05:21:13Z <ul> <li>Updated R dependencies. Switched from <code>{flint}</code> to <code>{flir}</code> (fix <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2875854337" data-permission-text="Title is private" data-url="https://github.com/atsyplenkov/formalist/issues/5" data-hovercard-type="issue" data-hovercard-url="/atsyplenkov/formalist/issues/5/hovercard" href="https://github.com/atsyplenkov/formalist/issues/5">#5</a>)</li> <li>README update</li> </ul> atsyplenkov tag:github.com,2008:Repository/903982492/0.2.1 2025-01-05T00:58:56Z <ul> <li>Updated README</li> </ul> atsyplenkov tag:github.com,2008:Repository/903982492/0.2.0 2025-01-05T00:20:18Z <h2>[0.2.0] -- 2025-01-05</h2> <ul> <li>New feature -- added <code>Fix Lint</code> function</li> </ul> atsyplenkov tag:github.com,2008:Repository/903982492/0.1.0 2024-12-17T22:52:33Z <h2>[0.1.0] -- 2024-12-18</h2> <ul> <li>Added logo</li> <li>Published on Open VSX Registry (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2741202861" data-permission-text="Title is private" data-url="https://github.com/atsyplenkov/formalist/issues/2" data-hovercard-type="issue" data-hovercard-url="/atsyplenkov/formalist/issues/2/hovercard" href="https://github.com/atsyplenkov/formalist/issues/2">#2</a>)</li> </ul> atsyplenkov tag:github.com,2008:Repository/903982492/0.0.1 2024-12-16T03:02:14Z <p>Initial release of the <code>Formalist</code> Positron extension.</p> <p>⚠ It works only with the latest Positron version 2025.01.0</p> atsyplenkov