From 39a4ee20e15c23d298e1ad48b42877b95218ea86 Mon Sep 17 00:00:00 2001 From: pratikwayase Date: Thu, 5 Mar 2026 23:56:11 +0530 Subject: [PATCH 1/3] Replace black with ruff in uv environment instructions --- .../instructions/coding-standards/uv-projects.instructions.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/instructions/coding-standards/uv-projects.instructions.md b/.github/instructions/coding-standards/uv-projects.instructions.md index fec879081..d40bccf4b 100644 --- a/.github/instructions/coding-standards/uv-projects.instructions.md +++ b/.github/instructions/coding-standards/uv-projects.instructions.md @@ -25,7 +25,7 @@ Always install the following packages in every virtual environment: * `ipykernel` * `ipywidgets` -* `black` +* `ruff` * `tqdm` * `pytest` @@ -91,7 +91,7 @@ When users request help with Python environments: ```bash uv init -uv add ipykernel ipywidgets black tqdm pytest [additional packages] +uv add ipykernel ipywidgets ruff tqdm pytest [additional packages] uv sync uv lock ``` From 227ffab2c592b6c68134449860cad064398d1929 Mon Sep 17 00:00:00 2001 From: pratikwayase Date: Fri, 6 Mar 2026 23:30:02 +0530 Subject: [PATCH 2/3] Fix #894: automate stale SHA tracking issue --- .../workflows/weekly-security-maintenance.yml | 64 +++++++++++++++++++ 1 file changed, 64 insertions(+) diff --git a/.github/workflows/weekly-security-maintenance.yml b/.github/workflows/weekly-security-maintenance.yml index cda3fea3d..765c8325e 100644 --- a/.github/workflows/weekly-security-maintenance.yml +++ b/.github/workflows/weekly-security-maintenance.yml @@ -196,3 +196,67 @@ jobs: if ($unpinnedCount -eq '0' -and $staleCount -eq '0') { Write-Output "::notice::All dependencies are properly pinned and up-to-date!" } + - name: Create or Update Staleness Issue + if: always() + uses: actions/github-script@v7 + with: + script: | + const staleCount = Number('${{ needs.check-staleness.outputs.stale-count }}'); + const threshold = Number('${{ inputs.max-age-days || 30 }}'); + + const issueTitle = "Security: Stale dependency SHAs detected"; + + const { data: issues } = await github.rest.issues.listForRepo({ + owner: context.repo.owner, + repo: context.repo.repo, + state: "open" + }); + + const existingIssue = issues.find(i => i.title === issueTitle); + + if (staleCount > 0) { + + const body = ` + ## Stale GitHub Action SHAs Detected + + ${staleCount} dependencies have SHA pins older than ${threshold} days. + + Please run: + + \`\`\`powershell + npm run sha-staleness + \`\`\` + + Then update outdated SHAs using: + + \`\`\`powershell + scripts/security/Update-ActionSHAPinning.ps1 -Path .github/workflows -UpdateStale + \`\`\` + `; + + if (existingIssue) { + await github.rest.issues.update({ + owner: context.repo.owner, + repo: context.repo.repo, + issue_number: existingIssue.number, + body: body + }); + } else { + await github.rest.issues.create({ + owner: context.repo.owner, + repo: context.repo.repo, + title: issueTitle, + body: body + }); + } + + } else if (existingIssue) { + + await github.rest.issues.update({ + owner: context.repo.owner, + repo: context.repo.repo, + issue_number: existingIssue.number, + state: "closed" + }); + + } From 6a3c9ce5edc71fc8b8956c39908459863dedb01f Mon Sep 17 00:00:00 2001 From: pratikwayase Date: Mon, 9 Mar 2026 10:48:20 +0530 Subject: [PATCH 3/3] docs: add extension collections overview and integrate into getting started flow --- README.md | 7 ++++ .../docusaurus/src/components/Icons/index.tsx | 37 +++++++++++++++++++ docs/docusaurus/src/data/hubCards.tsx | 11 ++++++ docs/getting-started/README.md | 3 ++ docs/getting-started/collections.md | 29 +++++++++++++++ docs/getting-started/install.md | 4 ++ extension/templates/README.template.md | 8 ++++ 7 files changed, 99 insertions(+) create mode 100644 docs/getting-started/collections.md diff --git a/README.md b/README.md index 6a038f6b4..138a9a426 100644 --- a/README.md +++ b/README.md @@ -45,6 +45,13 @@ Install the VS Code extension from the Marketplace: Need a different installation method? See the [Installation Guide](docs/getting-started/install.md) for CLI plugins, submodules, multi-root workspaces, and more. +### Browse Extension Collections + +Explore all available extension bundles and choose the one that fits your workflow. + +See the full collections overview: +[Browse Extension Collections](https://microsoft.github.io/hve-core/docs/getting-started/collections) + ### 2. Verify Open GitHub Copilot Chat (`Ctrl+Alt+I`) and check that HVE Core agents appear in the agent picker. Look for **task-researcher**, **task-planner**, and **rpi-agent**. diff --git a/docs/docusaurus/src/components/Icons/index.tsx b/docs/docusaurus/src/components/Icons/index.tsx index b25d55984..19c7eb2a1 100644 --- a/docs/docusaurus/src/components/Icons/index.tsx +++ b/docs/docusaurus/src/components/Icons/index.tsx @@ -86,6 +86,43 @@ export function DesignThinkingIcon({ className }: { className?: string }) { ); } +export function VsCodeExtensionIcon ({className}:{className?:string}){ + return( + + ) +} + export function TemplatesExamplesIcon({ className }: { className?: string }) { return (