diff --git a/.github/workflows/weekly-security-maintenance.yml b/.github/workflows/weekly-security-maintenance.yml
index cda3fea3d..765c8325e 100644
--- a/.github/workflows/weekly-security-maintenance.yml
+++ b/.github/workflows/weekly-security-maintenance.yml
@@ -196,3 +196,67 @@ jobs:
if ($unpinnedCount -eq '0' -and $staleCount -eq '0') {
Write-Output "::notice::All dependencies are properly pinned and up-to-date!"
}
+ - name: Create or Update Staleness Issue
+ if: always()
+ uses: actions/github-script@v7
+ with:
+ script: |
+ const staleCount = Number('${{ needs.check-staleness.outputs.stale-count }}');
+ const threshold = Number('${{ inputs.max-age-days || 30 }}');
+
+ const issueTitle = "Security: Stale dependency SHAs detected";
+
+ const { data: issues } = await github.rest.issues.listForRepo({
+ owner: context.repo.owner,
+ repo: context.repo.repo,
+ state: "open"
+ });
+
+ const existingIssue = issues.find(i => i.title === issueTitle);
+
+ if (staleCount > 0) {
+
+ const body = `
+ ## Stale GitHub Action SHAs Detected
+
+ ${staleCount} dependencies have SHA pins older than ${threshold} days.
+
+ Please run:
+
+ \`\`\`powershell
+ npm run sha-staleness
+ \`\`\`
+
+ Then update outdated SHAs using:
+
+ \`\`\`powershell
+ scripts/security/Update-ActionSHAPinning.ps1 -Path .github/workflows -UpdateStale
+ \`\`\`
+ `;
+
+ if (existingIssue) {
+ await github.rest.issues.update({
+ owner: context.repo.owner,
+ repo: context.repo.repo,
+ issue_number: existingIssue.number,
+ body: body
+ });
+ } else {
+ await github.rest.issues.create({
+ owner: context.repo.owner,
+ repo: context.repo.repo,
+ title: issueTitle,
+ body: body
+ });
+ }
+
+ } else if (existingIssue) {
+
+ await github.rest.issues.update({
+ owner: context.repo.owner,
+ repo: context.repo.repo,
+ issue_number: existingIssue.number,
+ state: "closed"
+ });
+
+ }
diff --git a/README.md b/README.md
index 10769c2ca..06cdd9fbc 100644
--- a/README.md
+++ b/README.md
@@ -45,6 +45,13 @@ Install the VS Code extension from the Marketplace:
Need a different installation method? See the [Installation Guide](docs/getting-started/install.md) for CLI plugins, submodules, multi-root workspaces, and more.
+### Browse Extension Collections
+
+Explore all available extension bundles and choose the one that fits your workflow.
+
+See the full collections overview:
+[Browse Extension Collections](https://microsoft.github.io/hve-core/docs/getting-started/collections)
+
### 2. Verify
Open GitHub Copilot Chat (`Ctrl+Alt+I`) and check that HVE Core agents appear in the agent picker. Look for **task-researcher**, **task-planner**, and **rpi-agent**.
diff --git a/docs/docusaurus/src/components/Icons/index.tsx b/docs/docusaurus/src/components/Icons/index.tsx
index b25d55984..19c7eb2a1 100644
--- a/docs/docusaurus/src/components/Icons/index.tsx
+++ b/docs/docusaurus/src/components/Icons/index.tsx
@@ -86,6 +86,43 @@ export function DesignThinkingIcon({ className }: { className?: string }) {
);
}
+export function VsCodeExtensionIcon ({className}:{className?:string}){
+ return(
+
+ )
+}
+
export function TemplatesExamplesIcon({ className }: { className?: string }) {
return (