Skip to content

Releases: Taxperia/TaxCode

TaxCode 1.131.1

Choose a tag to compare

@Taxperia Taxperia released this 04 Aug 23:10

TaxCode 1.131.1

TaxCode 1.131.1 is a maintenance update on the VS Code OSS 1.131.0 base, focused on dependency security updates and code quality improvements.

What's Changed

Security Updates

  • Merged 7 Dependabot pull requests addressing dependency vulnerabilities
  • Updated github/codeql-action from 4.37.3 to 4.37.4
  • Updated fast-uri from 3.1.2 to 3.1.5 in agent-sdk
  • Updated body-parser from 2.2.2 to 2.3.0 in agent-sdk
  • Updated hono from 4.12.25 to 4.13.0 in agent-sdk
  • Updated ip-address from 10.2.0 to 10.4.0 in agent-sdk
  • Updated @vscode/markdown-editor from 0.0.2-24 to 0.0.2-44
  • Applied npm_and_yarn group updates across 10 directories

Quality Improvements

  • Addressed GitHub CodeQL security scanning alerts
  • Improved dependency audit posture
  • Updated CodeQL workflow configuration

Release Assets

Asset Profile
TaxCodeVDSUserSetup.exe Remote desktop / low RAM, plugins hidden, telemetry disabled
TaxCodeLiteUserSetup.exe Lightweight, plugins hidden, telemetry disabled
TaxCodeNoTelemetryUserSetup.exe Plugin-capable editor surface, telemetry disabled
TaxCodePluginsUserSetup.exe Marketplace/plugin-enabled, telemetry disabled
SHA256SUMS.txt SHA256 checksums for the installer assets
SECURITY-AUDIT.md Dependency and release-configuration audit notes

Validation

  • All dependency updates merged successfully
  • No breaking changes introduced
  • All four Windows x64 user installers built and verified

Upgrade Path

Users on TaxCode 1.131.0 can upgrade by downloading the appropriate installer for their profile. Settings and extensions are preserved across updates.

TaxCode 1.131.0

Choose a tag to compare

@Taxperia Taxperia released this 01 Aug 19:49

TaxCode 1.131.0

TaxCode 1.131.0 updates the project baseline to VS Code OSS 1.131.0.

Versioning

TaxCode follows the upstream VS Code major/minor number and reserves the rightmost patch number for TaxCode-specific revisions.

Version Meaning
1.131.0 First TaxCode release based on VS Code OSS 1.131.0
1.131.1 TaxCode-only update on the same VS Code 1.131 base
1.132.0 First TaxCode release after moving to VS Code 1.132

Release Assets

Asset Profile
TaxCodeVDSUserSetup.exe Remote desktop / low RAM, plugins hidden, telemetry disabled
TaxCodeLiteUserSetup.exe Lightweight, plugins hidden, telemetry disabled
TaxCodeNoTelemetryUserSetup.exe Plugin-capable editor surface, telemetry disabled
TaxCodePluginsUserSetup.exe Marketplace/plugin-enabled, telemetry disabled
SHA256SUMS.txt SHA256 checksums for the installer assets
SECURITY-AUDIT.md Dependency and release-configuration audit notes

Highlights

  • Updated the source baseline to upstream VS Code OSS 1.131.0.
  • Kept the main TaxCode source product as the plugin-enabled, telemetry-disabled build.
  • Preserved the four Windows profile builds: VDS, Lite, NoTelemetry, and Plugins.
  • Preserved TaxCode branding, application IDs, profile-specific data folders, and installer naming.
  • Removed an obsolete sessions Git contribution file that no longer exists in upstream 1.131.0.
  • Added a runtime security override for adm-zip 0.6.0 to clear the high-severity foundry-local-sdk -> adm-zip audit finding.
  • Filtered non-target native addon payloads from Windows x64 packages, including Linux/macOS Copilot Claude audio-capture binaries and non-target node-pty prebuilds.
  • Hardened Windows installer packaging by keeping the generated installer product.json outside the Inno Setup output directory.

Validation

  • npm.cmd run typecheck-client passed.
  • Root runtime audit after remediation reports no high or critical runtime findings.
  • Built all four Windows x64 user installers for TaxCodeVDS, TaxCodeLite, TaxCodeNoTelemetry, and TaxCodePlugins.

Known Release Build Requirement

The Windows machine used for packaging must have Node.js 24.x, Visual Studio 2022 Build Tools with the "Desktop development with C++" workload, and Windows SDK signing tools available on PATH. Without those tools, native npm modules and installer packaging cannot be completed.