JumpStart Workbench Changelog

This page records verified JumpStart Workbench documentation and public service-surface changes. cosmos-workbench was added to the docs coverage registry on 2026-09-23; no PR-based backfill has been generated for it yet, so earlier history is not backfilled unless verified from source. Once the repo runs through refresh-local-docs.py, backfilled PR entries will appear here in the standard ## <date> — <Type> — <title> format.

Generated from merged cosmos-workbench changes to develop from 2026-09-28 onward. Each bullet links back to the source PR or commit.

2026-11-03 — Feature — October–November 2026 Backfill: Developer Tooling

• Type: Feature
• Source: merged changes from 2026-09-28 onward.
• Included changes:
  • 2026-10-14: #92 feat(vscode): default Cosmos org to JumpStart; add Change Organization
  • 2026-10-22: #74 feat(vscode): shared SAP MCP server with per-user SAP connections
  • 2026-10-25: #103 feat(vscode): expose local environment in picker and add opt-in E2E harness

2026-11-03 — Bugfix — October–November 2026 Backfill: Developer Tooling

• Type: Bugfix
• Source: merged changes from 2026-09-28 onward.
• Included changes:
  • 2026-10-06: #72 fix(ui): drop redundant retry button from VS Code project gate overlay
  • 2026-10-08: #81 fix(vscode): show loading state during runtime startup and unify load…
  • 2026-10-09: #83 fix(security): close config read-modify-write race in cosmos-config-seed (CWE-367)
  • 2026-10-13: #85 fix(ui): suppress input-needed toast when VS Code chat is visible
  • 2026-10-13: #87 fix: clear Checkmarx CWE-606 loop-bound findings in dev scripts
  • 2026-10-13: #89 fix(vscode): keep project picker open and add Select project action on the gate
  • 2026-10-15: #98 fix: port seven upstream OpenChamber fixes (config safety, Shiki worker, reload leak, image/preview hardening)
  • 2026-10-22: #100 fix(vscode): republish Cosmos context after a block so panels recover (2.1.5)

2026-11-03 — Bugfix — October–November 2026 Backfill: SAP Workbench

• Type: Bugfix
• Source: merged changes from 2026-09-28 onward.
• Included changes:
  • 2026-10-06: #73 fix/defer-session-selection-during-workspace-change
  • 2026-10-08: #75 fix(ui): stop persisting provider API keys in clear text
  • 2026-10-08: #76 fix(android): disable allowBackup to prevent app data extraction
  • 2026-10-08: #79 fix(deps): bump simple-git to ^4.0.1 (GHSA-x6jw-m9v5-85vh)
  • 2026-10-08: #80 fix(security): avoid externally-controlled format strings in opencode logging (CWE-134)
  • 2026-10-08: #82 fix(security): run macOS say via execFile to prevent command injection (CWE-116/CWE-78)
  • 2026-10-12: #84 fix(ui): clear stale project-change footer and show agent loading state
  • 2026-10-24: #102 fix(cosmos): show the session's pinned agent version
  • 2026-10-29: #104 fix(ui): cap context usage percentage at 100

2026-11-03 — Security — October–November 2026 Backfill: SAP Workbench

• Type: Security
• Source: merged changes from 2026-09-28 onward.
• Included changes:
  • 2026-10-08: #78 fix(web): bump @simplewebauthn/server to 13.3.2 (GHSA-6hxq-p678-4hr2)

2026-11-03 — Docs — October–November 2026 Backfill: Developer Tooling

• Type: Docs
• Source: merged changes from 2026-09-28 onward.
• Included changes:
  • 2026-10-14: #94 docs(vscode): build the runtime with --skip-embed-web-ui

2026-11-03 — Docs — October–November 2026 Backfill: Documentation And Maintenance

• Type: Docs
• Source: merged changes from 2026-09-28 onward.
• Included changes:
  • 2026-10-24: #101 docs(publishing): build feature-branch runtimes with OPENCODE_CHANNEL=develop

2026-11-03 — Chore — October–November 2026 Backfill: Developer Tooling

• Type: Chore
• Source: merged changes from 2026-09-28 onward.
• Included changes:
  • 2026-09-30: c201f7e64 Add CODEOWNERS file
  • 2026-10-13: #86 chore(vscode): bump to 2.1.0
  • 2026-10-14: #90 chore(vscode): release 2.1.1 with Cosmos project-selection fixes
  • 2026-10-14: #93 refactor(ui): one context-usage computation
  • 2026-10-14: #96 chore(vscode): bump to 2.1.2
  • 2026-10-14: #95 ci(vscode): build the runtime with --skip-embed-web-ui
  • 2026-10-14: #97 chore(vscode): bump to 2.1.3
  • 2026-10-15: #99 chore(vscode): bump to 2.1.4

2026-11-03 — Chore — October–November 2026 Backfill: Evaluation And Review

• Type: Chore
• Source: merged changes from 2026-09-28 onward.
• Included changes:
  • 2026-10-13: #88 ci: skip pr-review automation when review app secrets are absent