# Changelog

All notable changes are documented here, newest first. Entries use the timestamp scheme
`[YYYY.M.D-HHMM] - YYYY-MM-DD - HH:MM`.

## [2026.10.31-249] - 2026-10-31 - 02:49

### Fixed

- `pnpm package` did not exist and vsce would have packed everything: a `package` script (`vsce package --no-dependencies`, no runtime dependencies), a `.vscodeignore` (sources, explainer, maps, config), `*.vsix` in `.gitignore`, and `engines.vscode` raised to ^1.140.0 to match `@types/vscode`. It packages (8 files).

## [2026.10.31-117] - 2026-10-31 - 01:17

### Added

- The explainer site is published: <https://scaffolder.niftylittletools.dev/> (GitLab Pages, built from `explainer/` by the new `.gitlab-ci.yml`), its `site` set for canonical links and the sitemap, and the README's **Live:** line.

## [2026.10.30-1844] - 2026-10-30 - 18:44

### Changed

- Repository moved to GitLab, `gitlab.com/nifty-little-tools/vscode-extensions/scaffolder`: the README, the explainer (GitLab icon) and `package.json`. The GitHub repository stays as the remote `github`.

## [2026.10.29-1959] - 2026-10-29 - 19:59

### Documentation

- README rewritten to the workspace structure (`_templates/README.md`): the key line (repository on GitHub), Features, Installation, Usage, Parameters/Flags (its two commands), How it works (the two rules and the resolution table), Development and Licence. The packaged file is `scaffolder-<version>.vsix`, not `1.0.0`.

### Fixed

- `package.json` declared no licence; it now says `AGPL-3.0-only`, as `LICENSE` does.

## [2026.10.28-2156] - 2026-10-28 - 21:56

### Added

- **Explainer site** (`explainer/`, global §11): a static Astro page in the house Cyanotype style that says what the extension is, what it does, how to run it, and its privacy terms, written from this README. It is light by default with its theme remembered, has a toggleable intro and the privacy notice, and loads nothing from a third party. Built from the workspace's shared template (`_explainer/`), copied unchanged and checked by `check_conformance.py`; only `src/site.js` (its words) is this tool's own. It is published once the tool's domain is chosen (plan Phase 8). The README gains an "Explainer site" section.

### Fixed

- README: build steps use mise and pnpm (`pnpm dlx @vscode/vsce package`) instead of npm and npx.

## [2026.10.27-926] - 2026-10-27 - 09:26

### Changed

- Tooling: pnpm 12.15.0, the newest 12.x, pinned in `mise.toml` and in `packageManager` with its sha512; the lockfile's own pnpm entry follows, so `pnpm install --frozen-lockfile` passes on the new pin.

## [2026.10.27-911] - 2026-10-27 - 09:11

### Changed

- TypeScript 7 (from 5); the extension compiles with `tsc -p ./`, `pnpm audit` clean.

## [2026.10.26-1926] - 2026-10-26 - 19:26

### Added

- README `## Privacy & security`: creates the files you describe in your workspace and skips existing ones; no network requests, telemetry or stored settings.

## [2026.10.26-1833] - 2026-10-26 - 18:33

### Security

- Dependency CVE sweep (global §8): `pnpm update` within the declared ranges; `pnpm audit` was and stays clean. `pnpm compile` passes.

## [2026.10.26-1813] - 2026-10-26 - 18:13

### Changed

- npm lockfile replaced by `pnpm-lock.yaml` (`pnpm import`, same resolved versions).
- `.gitattributes` normalising line endings to LF (`* text=auto eol=lf`) and marking binaries.
- `mise.toml` pinning Node 24 and pnpm 12.12.1 (global §9; replaces any hand-installed toolchain).
- `packageManager` pinned to `pnpm@12.12.1` with its sha512, so corepack in CI uses the same pnpm.

## Before this changelog

Reconstructed from `git log` (commit date, subject, hash):

- 2026-06-30 — Add markdownlint config (house standard) (`a024bb1`)
- 2026-06-03 — Version 1.0.0 (`d0c73b0`)
- 2026-06-03 — Initial commit (`046cf46`)