release: 0.10.0

[smolpaws]

Summary

• bump the extension and @smolpaws/agent-sdk to 0.10.0
• include the merged confirmation-policy fix from develop in the release branch
• exclude .venv-tokens/ from the VSIX so the packaged artifact stays lean and does not ship local environment files

Release Intent

This release keeps approval behavior user-controlled:

• NeverConfirm means never ask for confirmation
• the SDK no longer layers a separate workspace-access confirmation policy on top

Local Checks

• npm ci
• npm run build
• npm run typecheck
• npm test
• npm run package

Notes

• Local packaging produced openhands-tab-0.10.0.vsix successfully after excluding .venv-tokens/.
• This machine is on Node v25.9.0, so npm ci emitted an EBADENGINE warning against the repo's <23 engine range, but the actual build/typecheck/test/package steps completed successfully.

---

[coderabbitai]

Warning

Rate limit exceeded

@smolpaws has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 18 minutes and 11 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: fd107373-bbc5-4cbb-afe8-19c63c4fe163

📥 Commits

Reviewing files that changed from the base of the PR and between d8ed8ad and 9622bdd.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (3)

• .vscodeignore
• package.json
• packages/agent-sdk/package.json

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/0.10.0

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 1 additional finding.

[github-actions]

🔧 VSCode Extension Built Successfully

• File: openhands-tab-0.10.0.vsix (548 KB)
• Download: https://github.com/enyst/OpenHands-Tab/actions/runs/26061328835

To install:

1. Download the artifact from the run page above
2. VS Code → Command Palette → "Extensions: Install from VSIX..."
3. Select the downloaded .vsix

Built with Node 22. Commit 6968e56.

[gemini-code-assist]

Code Review

This pull request updates the project version from 0.9.4 to 0.10.0 across package.json, package-lock.json, and packages/agent-sdk/package.json. It also adds several platform-specific @vscode/vsce-sign dependencies to the lockfile and includes .venv-tokens/** in the .vscodeignore file. I have no feedback to provide.