Skip to content

v0.6.1 - Security Update

Choose a tag to compare

@h-a-graham h-a-graham released this 21 Jan 12:04
· 58 commits to main since this release

✅ Testing & Verification

  • ✅ Compiles successfully
  • ✅ Extension packages successfully
  • ✅ All existing functionality preserved
  • ✅ Backward compatible (only rejects invalid names)
  • ✅ Ready for VS Code Marketplace publication

Upgrade Notes

This is a mandatory security update. No configuration
changes required.

If you see errors about invalid connection names after
upgrading:

  1. Your R connection object has an unusual name
  2. Rename it to follow R identifier rules: start with
    letter, use only letters/numbers/dots/underscores
  3. Example: rename `my-connection` to
    my_connection

Security Audit

  • Last Audit: 2026-01-21
  • Runtime Vulnerabilities: None (known)
  • Development Vulnerabilities: Not applicable (tar
    package only affects npm install)

For security questions or to report vulnerabilities:
https://github.com/h-a-graham/duckdb-r-editor/security


📦 Installation

Download the .vsix file from the Assets section below
and install via:

  1. Positron → Extensions → ... → Install from VSIX
  2. Or use: code --install-extension duckdb-r-editor-0.6.1.vsix