[external-plugin] Upgrade timebase plugin to v0.1.7

[TyomaVader]

Pull Request Checklist

• I have read and followed the CONTRIBUTING.md guidelines.
• I have read and followed the Guidance for submissions involving paid services.
• My contribution adds a new instruction, prompt, agent, skill, workflow, or canvas extension file in the correct directory.
• The file follows the required naming convention.
• The content is clearly structured and follows the example format.
• I have tested my instructions, prompt, agent, skill, workflow, or canvas extension with GitHub Copilot.
• I have run npm start and verified that README.md is up to date.
• I am targeting the main branch for this pull request.

---

Description

Upgrades the external timebase plugin to version 0.1.7 using source commit d5b0d7bd57b7dd7bd051238527bfe3d87e15da29.

Changelog: https://github.com/epam/TimeBase-Agent-Plugins/releases/tag/v0.1.7

Regenerates .github/plugin/marketplace.json from the updated external plugin catalog.

---

Type of Contribution

• Update to existing plugin.

---

By submitting this pull request, I confirm that my contribution abides by the Code of Conduct and will be licensed under the MIT License.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[github-actions]

🔒 PR Risk Scan Results

Scanned 2 changed file(s).

Severity	Count
🔴 High	0
🟠 Medium	4
ℹ️ Info	0

Severity	Rule	File	Line	Match
🟠	package-exec-command	.github/plugin/marketplace.json	994	"description": "Windows-only Excel automation plugin that runs the latest excelcli package through npx.",
🟠	package-exec-command	.github/plugin/marketplace.json	1025	"description": "Windows-only Excel automation plugin that runs the latest ExcelMcp MCP server through npx.",
🟠	package-exec-command	plugins/external.json	786	"description": "Windows-only Excel automation plugin that runs the latest excelcli package through npx.",
🟠	package-exec-command	plugins/external.json	817	"description": "Windows-only Excel automation plugin that runs the latest ExcelMcp MCP server through npx.",

This is an automated soft-gate report. Findings indicate review targets and do not block merge by themselves.

[github-actions]

🚦 Submission status: 💬 Review in progress

Risk tier: merge-risk:high — Privileged execution, automation, or review-policy change
Required to merge: passing submission-gate checks plus 2 approvals from reviewers with write access, including a maintainer with admin or maintain permission.

Why this tier

• plugins/external.json is a high-risk path (automation, scripts, MCP config, hooks, or review policy)

Automated checks

Check	Status	Details
Line endings	✅ Passed	Passed · logs
Spelling	✅ Passed	Passed · logs
Generated README consistency	✅ Passed	Passed · logs
Plugin and extension validation	✅ Passed	Passed · logs
Plugin structure	✅ Passed	Passed · logs
Risk scan	✅ Passed	Passed · logs
Contributor reputation	✅ Passed	Passed · logs
Duplicate resource scan	✅ Passed	Passed · logs
PR quality signal	⏭️ Skipped	Skipped by its workflow · logs
Canvas/plugin smoke test	✅ Passed	Passed · logs

Review

• Approvals: 1/2 (aaronpowell)
• Assigned reviewer: not assigned yet — comment /request-review to ask for one
• Review target date: not set
• Still needed: 1 more approval(s)
• The core-maintainers pool is not staffed yet; an approver with admin or maintain permission is required instead.

Commands

Command	Who	What it does
/rerun-checks	PR author, maintainers	Re-runs failed or incomplete checks and re-evaluates this gate
/request-review	PR author, maintainers	Asks the review rotation to assign a reviewer (adds needs-reviewer)

_{Updated for 2fb601d · gate run · This comment is maintained automatically — see submission gate docs.}

[github-actions]

⚠️ External plugin PR checks passed with spec warnings

• Changed entries detected: 1
• Workflow state label: ready-for-review
• Full logs: Download quality gate artifact
• Status legend: ✅ pass · ⚠️ warning · 🛑 fail

Per-plugin quality summary

Plugin	spec compliance (non-blocking)	vally lint	install smoke test	version match	ref/sha consistency	canvas structure	overall	source tree
timebase	⚠️ warning	✅ pass	✅ pass	✅ pass	✅ pass	⚪ not_run	✅ pass	d5b0d7bd57b7dd7bd051238527bfe3d87e15da29

Gate output details

timebase - spec compliance (⚠️ warning)

Agent Plugins v1.0.0 manifest warnings:
- manifest location is ".plugin/plugin.json"; expected "plugin.json" at plugin root
- $schema should be "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json"
- top-level field "logo" is not part of Agent Plugins v1.0.0
- top-level field "mcpServers" is not part of Agent Plugins v1.0.0
- schema validation: manifest must have required property '$schema'
- schema validation: manifest must NOT have additional properties
- schema validation: manifest must NOT have additional properties

timebase - vally lint (✅ pass)

✅ qql-generator (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ timebase-cpp-client (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ timebase-csharp-client (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ timebase-java-client (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ timebase-python-client (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ timebase-troubleshooting (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ timebase-webadmin-api (2/2 checks passed)
    ✓ [spec-compliance] All 1 s
...output truncated...

timebase - install smoke test (✅ pass)

Install smoke test succeeded. Verified /tmp/external-plugin-quality-d7MZsm/copilot-home/.copilot/installed-plugins/external-plugin-intake/timebase/.plugin/plugin.json.

timebase - version match (pass)

- v0.1.7: matched version "0.1.7" at ".plugin/plugin.json".
- d5b0d7bd57b7dd7bd051238527bfe3d87e15da29: matched version "0.1.7" at ".plugin/plugin.json".

timebase - ref/sha consistency (pass)

source.ref "v0.1.7" resolves to the same commit as source.sha "d5b0d7bd57b7dd7bd051238527bfe3d87e15da29".

timebase - canvas structure (not_run)

Canvas structure gate skipped because plugin is not tagged with "canvas".

- timebase: spec=warning, vally-lint=pass, install-smoke=pass, version-match=pass, ref-sha-consistency=pass, canvas-structure=not_run, overall=pass

[TyomaVader]

/request-review

[github-actions]

🙋 Added needs-reviewer. Reviewer routing is assigning a reviewer now.