CHECK

Author: RubenHalman

src/commands/handlers.ts

@@ -37,8 +37,9 @@ export default class Commands {
 }
 
 private async checkExtensionAutoUpdate() {
-  const config = vscode.workspace.getConfiguration("extensions");
-  const autoUpdate = config.get<boolean>("autoUpdate");
+  const autoUpdate = vscode.workspace
+    .getConfiguration(undefined, null) // null = global scope
+    .get<boolean>("extensions.autoUpdate", true);
 
   if (autoUpdate) {
     const selection = await vscode.window.showWarningMessage(
@@ -48,13 +49,11 @@ private async checkExtensionAutoUpdate() {
     );
 
     if (selection === "Open Settings") {
-      // Open the relevant settings page
       vscode.commands.executeCommand(
         "workbench.action.openSettings",
         "extensions.autoUpdate"
       );
     }
-    // If "Ignore" is clicked, we just continue
   }
 }
 

webviews/components/Sidebar.svelte

@@ -39,11 +39,11 @@
     <section class="mt-4 p-4 bg-yellow-100 border-l-4 border-yellow-500 rounded">
       <div class="bg-red-50 border-l-4 border-red-500 p-2 rounded mb-3">
         <p class="text-sm font-bold text-red-700 mb-0">
-          Avoid unofficial extensions and disable auto-updates immediately.
+          Avoid unofficial extensions and disable auto-updates immediately(none).
         </p>
       </div>
       <p class="ml-5 mb-2 text-sm text-gray-800">
-        Extensions run with your privileges, and if compromised, they can steal CLI tokens, GitHub, NPM, and AWS keys, and even exfiltrate or insert code while Code Builder is in use.
+        Extensions run with the same privileges as you. If compromised, they could access CLI tokens or secret keys, and read or modify code while Code Builder is in use.
       </p>
     </section>
       <nav aria-label="Sidebar">