chore: release

[googleworkspace-bot]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

[email protected]

Patch Changes

• 496529e: Add https://www.googleapis.com/auth/script.container.ui and https://www.googleapis.com/auth/script.send_mail to hardcoded scopes.

[gemini-code-assist]

Summary of Changes

Hello @googleworkspace-bot, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request facilitates the automated release of version 0.6.3 for the google-workspace-developer-tools package. It incorporates a recent patch that expands the set of hardcoded OAuth2 scopes, ensuring the VS Code extension remains up-to-date with necessary permissions for Google Workspace APIs. Merging this PR will trigger the automatic publication of the updated package to npm.

Highlights

• Automated Release: This pull request is an automated release generated by the Changesets GitHub action, preparing to publish a new version of the google-workspace-developer-tools package.
• Version Bump: The google-workspace-developer-tools package, specifically the VS Code extension, is being updated to version 0.6.3.
• Scope Additions: The release includes a patch change that adds https://www.googleapis.com/auth/script.container.ui and https://www.googleapis.com/auth/script.send_mail to the hardcoded OAuth2 scopes.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[gemini-code-assist]

Code Review

This pull request is an automated release. The version bump and changelog update are correct. However, I've identified a high-severity issue in the underlying code change being released. The new OAuth scopes have not been correctly classified as sensitive, which undermines a key security feature of the tool. I've left a detailed comment on the CHANGELOG.md with a recommendation on how to resolve this before merging the release.

[gemini-code-assist]

The underlying change for this release (commit 496529e) appears to be incomplete. The newly added scopes, https://www.googleapis.com/auth/script.container.ui and https://www.googleapis.com/auth/script.send_mail, should be classified as 'sensitive' scopes. Currently, they are not, which means the linter will fail to warn users about their sensitivity.

According to Google's documentation, both of these scopes are sensitive.

Please create a new changeset to correctly classify these scopes in packages/vscode-extension/src/scopes.ts. This release PR will then be automatically updated to include the fix.