From 7f88e2f347ad5330fb41918f3e879f69debfe059 Mon Sep 17 00:00:00 2001
From: "jac-made[bot]" <350467601+jac-made[bot]@users.noreply.github.com>
Date: Sat, 31 Oct 2026 00:23:51 +0100
Subject: [PATCH] release: 0.10.1

Co-authored-by: Ricardo Frantz <4220623+ricardofrantz@users.noreply.github.com>
---
 CHANGELOG.md      | 8 ++++++++
 package-lock.json | 4 ++--
 package.json      | 2 +-
 3 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8c9af7d..0e35b21 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.10.1
+
+Security update for the git library the extension uses.
+
+- Updated `simple-git` from 3.x to 4.0.2, which fixes a critical vulnerability
+  ([GHSA-v5rq-49vh-5v5c](https://github.com/advisories/GHSA-v5rq-49vh-5v5c)).
+- Added a disclaimer to the README.
+
 ## 0.10.0
 
 Tabs behave like editor tabs, and the picker remembers the folder you are in.
diff --git a/package-lock.json b/package-lock.json
index f67c4bd..a80fdd3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "diff-next",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "diff-next",
-      "version": "0.10.0",
+      "version": "0.10.1",
       "license": "MIT",
       "dependencies": {
         "simple-git": "^4.0.2"
diff --git a/package.json b/package.json
index 925c4d9..302eac7 100644
--- a/package.json
+++ b/package.json
@@ -2,7 +2,7 @@
   "name": "diff-next",
   "displayName": "vscode-diff Next",
   "description": "Compare Git branches or two workspace repos in VS Code: dual targets, file tree, commit history (same-repo), built-in diffs.",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "publisher": "RicardoFrantz",
   "license": "MIT",
   "icon": "icon.png",