Release 0.2.17

build: bundle extension with esbuild (#55)

The extension shipped every tsc-emitted file plus the full
`node_modules` tree in the `.vsix` (198 files, 361KB). Bundling
`src/extension.ts` into a single minified `dist/extension.js` with
esbuild inlines the runtime deps (all pure JS, `vscode` left external)
and drops `node_modules` from the package entirely:

| | Before (tsc) | After (esbuild) |
|---|---|---|
| `.vsix` (compressed) | 361 KB | 75 KB (**-79%**) |
| Files | 198 | 7 |

Faster activation too: the host resolves one module instead of ~190.

`tsc` is kept for type-checking (`--noEmit`) and for compiling tests to
`out/`, so test coverage is unaffected. Nix (`vsix.nix`) already derives
deps via `importNpmLock`, so no hash to maintain; `vsce package` now
runs the esbuild-based `vscode:prepublish`.

Also fixes a pre-existing ordering-dependent flaky test in
`highlighters` (`highlightLayer` relied on `extension.activate()` having
run in another test file first, leaving `vulnTreeDataProvider` undefined
otherwise) by stubbing it locally in setup.

Note: the `pre-commit` lint hook also runs `npm audit`, which fails on a
pre-existing `serialize-javascript` advisory pulled in via
`@vscode/test-cli → mocha` (no fix available, unrelated to this change).
esbuild itself has zero dependencies.

Release 0.2.16

chore: update deps and release 0.2.16 (#53)

Routine dependency refresh to ship release 0.2.16.

- Pin GitHub Actions to immutable commit SHAs (supply-chain hardening)
and add `pinact` to the dev shell + `just update`.
- `npm audit fix`: 7 vulns patched. Remaining 3 (`serialize-javascript`
via `mocha` → `@vscode/test-cli`) have no upstream fix and are dev-only,
not shipped in the VSIX.
- `@vscode/vsce` 2 → 3, flake.lock refresh, `unzip` path fix in
flake.nix.
- New `just update-scanner-version` recipe pulls the latest
`sysdig-cli-scanner` from upstream `latest_version.txt` and rewrites
`SCANNER_VERSION`, wired into `just update` (mirrors the jenkins plugin
flow). Bumps scanner 1.22.2 → 1.27.1.
- Test now derives the expected binary path from `SCANNER_VERSION`
instead of a hardcoded version, so it survives future scanner bumps.

Release 0.2.15

fix: patch 14 npm audit vulnerabilities (#50)

Dependency updates resolve 14 of 17 npm audit vulnerabilities (8 high, 5
moderate, 1 low).

Fixed packages: `@isaacs/brace-expansion`, `ajv`, `brace-expansion`,
`diff`, `flatted`, `follow-redirects`, `lodash`, `markdown-it`,
`minimatch`, `path-to-regexp`, `picomatch`, `qs`, `underscore`,
`undici`.

Remaining 3 high (`serialize-javascript` via `mocha` →
`@vscode/test-cli`) have no upstream fix and are dev-only, not shipped
in VSIX.

Release 0.2.14

 fix(darwin/nix): use clang 20 instead of clang 21 to fix dep build (…

Release 0.2.13

build: update dependencies (#34)

Release 0.2.12

build: release new version (#27)

Release 0.2.11

build: update vscode extension to 0.2.11 (#22)

Release 0.2.10

What's Changed

• ci: automatically release to marketplace by @tembleking in #15
• chore: remove changelog file by @tembleking in #16
• chore: update dependencies to fix vulns by @tembleking in #17
• refactor(nix): reorder flake to make it more idiomatic by @tembleking in #18
• build: release new version by @tembleking in #19

Full Changelog: 0.2.9...0.2.10

Release 0.2.9

feat: Add various QoL improvements (#10)

Release 0.2.8

chore: update dependencies, add tests for nix and update the hash