node-ovsx-sign

What's changed

• Signature manifests are now properly verified, although only with the verifySignatureManifest option turned on. In the CLI, this can also be enabled within the verify command with --verify-signature-manifest. To make use of this feature, please make sure you're running Open VSX deployed from https://github.com/eclipse/openvsx/commit/ffbf2d416994734914e90fa66e15b8b1c627e75f or newer. In a future patch release, this feature will be enabled by default. https://github.com/filiptronicek/node-ovsx-sign/commit/771100a8534663ed9712832398031a08e0827b68

Three ones, cool!

What's Changed

• Some tests fixes and their integration into CI #19
• Alias OVSX_REGISTRY_URL with VSX_REGISTRY_URL for better alignment with Gitpod's workspace environment variables https://github.com/filiptronicek/node-ovsx-sign/commit/1efe01e68efbea6e600cc35421013a47a957930d

Full Changelog: https://github.com/filiptronicek/node-ovsx-sign/compare/v1.1.0...v1.1.1

What's Changed

• Made signing use .signature.sig files instead of .signature https://github.com/filiptronicek/node-ovsx-sign/commit/87efd9f59f454aa5e0bb137f5dcb354e117c924e.
• Enabled generating a .signature.manifest for feature parity with @vscode/vsce-sign https://github.com/filiptronicek/node-ovsx-sign/pull/17
• Added proper e2e tests https://github.com/filiptronicek/node-ovsx-sign/pull/18

Full Changelog: https://github.com/filiptronicek/node-ovsx-sign/compare/v1.0.0...v1.1.0

This should not be considered as the "first official release", but rather a major change following semver.

Breaking changes

• Ensure created signatures are part of an archive to ensure compatibility with VS Code 1.90 (https://github.com/filiptronicek/node-ovsx-sign/pull/16)