Update publish workflow and add token expiry check

- Update vsce.yml: add Open VSX publish, upgrade to actions v4, use npm ci
- Add token-expiry-check.yml: verify PAT via API every 3 months, auto-create
  issue with renewal instructions if expired (skips if open issue exists)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: cypher256

.github/workflows/token-expiry-check.yml

@@ -0,0 +1,76 @@
+name: Token Expiry Reminder
+on:
+  schedule:
+    - cron: '0 0 1 */3 *' # Every 3 months (Jan, Apr, Jul, Oct)
+  workflow_dispatch:
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    environment:
+      name: production
+    permissions:
+      issues: write
+    steps:
+      - name: Verify VS Code Marketplace PAT
+        id: vsce
+        continue-on-error: true
+        run: |
+          STATUS=$(curl -s -o /dev/null -w "%{http_code}" \
+            -u ":${{ secrets.VSCE_PAT }}" \
+            "https://marketplace.visualstudio.com/_apis/gallery/publishers/Pleiades?api-version=6.0-preview.1")
+          echo "status=$STATUS" >> "$GITHUB_OUTPUT"
+          if [ "$STATUS" != "200" ]; then
+            echo "VSCE PAT is invalid (HTTP $STATUS)"
+            exit 1
+          fi
+          echo "VSCE PAT is valid"
+
+      - name: Verify Open VSX PAT
+        id: ovsx
+        continue-on-error: true
+        run: |
+          STATUS=$(curl -s -o /dev/null -w "%{http_code}" \
+            -H "Authorization: Bearer ${{ secrets.OVSX_PAT }}" \
+            "https://open-vsx.org/api/-/user")
+          echo "status=$STATUS" >> "$GITHUB_OUTPUT"
+          if [ "$STATUS" != "200" ]; then
+            echo "Open VSX PAT is invalid (HTTP $STATUS)"
+            exit 1
+          fi
+          echo "Open VSX PAT is valid"
+
+      - name: Create issue if any PAT is expired
+        if: steps.vsce.outcome == 'failure' || steps.ovsx.outcome == 'failure'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          VSCE_RESULT: ${{ steps.vsce.outcome }}
+          OVSX_RESULT: ${{ steps.ovsx.outcome }}
+        run: |
+          EXISTING=$(gh issue list --label "token-expiry" --state open --json number --jq length)
+          if [ "$EXISTING" != "0" ]; then
+            echo "Issue already exists, skipping"
+            exit 0
+          fi
+          BODY="## Marketplace トークンが期限切れです\n\n"
+          BODY+="| Token | Status |\n|---|---|\n"
+          BODY+="| VSCE_PAT | ${VSCE_RESULT} |\n"
+          BODY+="| OVSX_PAT | ${OVSX_RESULT} |\n\n"
+          BODY+="### VS Code Marketplace PAT 再生成手順\n"
+          BODY+="1. **Windows Edge** で https://dev.azure.com/cypher256/_usersSettings/tokens を開く\n"
+          BODY+="2. **New Token** → Organization: **All accessible organizations** → Expiration: Custom **1年** → Scopes: **Marketplace (Manage)**\n"
+          BODY+="3. トークンをコピーして GitHub Secret **VSCE_PAT** を更新\n\n"
+          BODY+="### Open VSX PAT 再生成手順\n"
+          BODY+="1. https://open-vsx.org/user-settings/tokens で再生成\n"
+          BODY+="2. GitHub Secret **OVSX_PAT** を更新\n\n"
+          BODY+="### Secret 更新コマンド\n"
+          BODY+="\`\`\`bash\n"
+          BODY+="gh secret set VSCE_PAT -R cypher256/java-extension-pack -e production\n"
+          BODY+="gh secret set OVSX_PAT -R cypher256/java-extension-pack -e production\n"
+          BODY+="\`\`\`\n\n"
+          BODY+="### 注意\n"
+          BODY+="- Azure DevOps は **kashihara@live.jp** でログイン\n"
+          BODY+="- Mac ブラウザでは AD アカウント干渉でエラーになる場合あり、Windows Edge を使う\n"
+          gh issue create \
+            --title "Marketplace token expired" \
+            --label "token-expiry" \
+            --body "$(echo -e "$BODY")"

.github/workflows/vsce.yml

@@ -1,16 +1,18 @@
-name: Deploy Extension
+name: Publish Extension
 on:
   workflow_dispatch:
 jobs:
-  deploy:
+  publish:
     runs-on: ubuntu-latest
     environment:
       name: production
     steps:
-      - uses: actions/checkout@v3
-      - run: npm install
-      - uses: lannonbr/vsce-action@3.0.0
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
-          args: "publish -p $VSCE_TOKEN"
-        env:
-          VSCE_TOKEN: ${{ secrets.VSCE_TOKEN }}
+          node-version: 20
+      - run: npm ci
+      - name: Publish to VS Code Marketplace
+        run: npx vsce publish -p ${{ secrets.VSCE_PAT }}
+      - name: Publish to Open VSX
+        run: npx ovsx publish -p ${{ secrets.OVSX_PAT }}