fix(dashboard): restore plugin card changelog and author

[ccsang]

Summary

• restore a manual changelog entry in installed plugin cards by wiring the existing view-changelog flow back into the installed-card action menu
• restore author display in installed plugin cards, keeping social_link clickable when available
• keep the change scoped to installed cards so market-mode behavior is unchanged

Testing

• cd dashboard && pnpm install --frozen-lockfile
• cd dashboard && pnpm run typecheck
• cd dashboard && pnpm run lint -- src/components/shared/ExtensionCard.vue (fails because of existing repository-wide ESLint/parser configuration issues, not this patch specifically)

Fixes #6639

Summary by Sourcery

Restore installed plugin card metadata and actions in the dashboard UI.

New Features:

• Show plugin author information on installed extension cards, linking to the social profile when available.
• Add a changelog menu action back to the installed extension card action menu to open the plugin changelog.

Enhancements:

• Style the author row in installed extension cards for consistent layout, truncation, and hover behavior while keeping market-mode cards unchanged.

[gemini-code-assist]

Summary of Changes

Hello, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request addresses a regression in the dashboard by reintroducing critical information to installed plugin cards. It focuses on enhancing the user experience by making the changelog accessible and displaying author details, including clickable social links, for installed extensions. The modifications are carefully confined to installed plugin cards to prevent unintended side effects on the market mode interface.

Highlights

• Changelog Restoration: The manual changelog entry for installed plugin cards has been restored by re-wiring the existing view-changelog flow back into the installed-card action menu.
• Author Display: The author display has been restored in installed plugin cards, ensuring the social_link remains clickable when available.
• Scope of Change: These changes are specifically scoped to installed cards, leaving market-mode behavior unaffected.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[sourcery-ai]

Hey - I've found 1 issue

Prompt for AI Agents

Please address the comments from this code review:

## Individual Comments

### Comment 1
<location path="dashboard/src/components/shared/ExtensionCard.vue" line_range="337-345" />
<code_context>
+                  size="x-small"
+                  class="extension-author-row__icon"
+                ></v-icon>
+                <a
+                  v-if="extension.social_link"
+                  :href="extension.social_link"
+                  target="_blank"
+                  rel="noopener noreferrer"
+                  class="extension-author-row__link"
+                  @click.stop
+                >
+                  {{ extension.author }}
+                </a>
+                <span v-else class="extension-author-row__text">
</code_context>
<issue_to_address>
**🚨 issue (security):** Consider sanitizing or constraining `extension.social_link` before binding it to `href`.

Since this value comes from extensions, it could include `javascript:` or other unsafe schemes. Ensure only expected protocols (e.g., `https`, `http`) are allowed, or require callers to pass a pre-validated URL so this anchor can’t render dangerous schemes.
</issue_to_address>

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[gemini-code-assist]

Code Review

This pull request successfully restores the author and changelog information on plugin cards as intended. The implementation is clean and correctly scoped to installed plugins, leaving the market view unchanged. The new UI elements are well-styled and functional. I have one minor suggestion regarding the use of typography to improve consistency with the existing design system. Overall, great work!