release: v1.0.3 — Open VSX recovery republish of v1.0.2

v1.0.2 reached the VS Code Marketplace but the Open VSX publish
step returned HTTP 405 (transient registry-side failure; same code
path published v1.0.1 unchanged 14 h earlier). The "Create GitHub
release" step short-circuited behind the failed publish, so v1.0.2
is missing from both Open VSX and GitHub Releases. v1.0.3 carries
no source changes — the bump exists solely to re-trigger the publish
pipeline so Open VSX catches up and the 1.0.x GitHub release lands.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: dmartinochoa

CHANGELOG.md

@@ -11,6 +11,25 @@ versions follow [SemVer](https://semver.org/).
 > section **above** Unreleased, or remove the Unreleased block for the
 > release commit. Otherwise the GitHub release ships boilerplate.
 
+## [1.0.3] — 2026-05-21
+
+Recovery republish of v1.0.2 — Open VSX returned an HTTP 405 on
+the v1.0.2 publish step (transient registry-side failure; v1.0.1
+shipped unchanged 14 h earlier through the same code path).
+v1.0.2 reached the VS Code Marketplace but not Open VSX, and the
+"Create GitHub release" step short-circuited behind the failed
+publish. No source changes between v1.0.2 and v1.0.3; this tag
+exists solely to re-trigger the publish pipeline so Open VSX
+catches up with the Marketplace and the GitHub release for the
+1.0.x line is restored.
+
+### Changed
+
+- **Version bump only — no functional changes.** v1.0.2 is the
+  identical extension code; users on the VS Code Marketplace will
+  see a 1.0.2 → 1.0.3 update with no behavioural diff. Open VSX
+  users skip 1.0.2 entirely (none was ever published there).
+
 ## [1.0.2] — 2026-05-20
 
 Bug-fix batch on top of v1.0.1 — three review rounds turned up five

package-lock.json

@@ -2,7 +2,7 @@
   "name": "pipeline-check",
   "displayName": "Pipeline-Check",
   "description": "Lint CI/CD pipelines for 22 providers against OWASP Top 10 CI/CD Risks and 14 other compliance frameworks. 810+ rules, inline in your editor.",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "publisher": "greylag-ci",
   "license": "MIT",
   "icon": "icon.png",