chore(external): bump rayfin plugin to 0.4.2

[chcaru]

Description

Bump the existing Rayfin external plugin from 0.4.0 to 0.4.2, following the update process for previously approved listings. Original approval: #2836.

Pin the source to ed4647453c8890f874e072d669ac8b8120b9bf37, the merged commit from microsoft/rayfin#84. Version 0.4.2 switches scaffolding to the CLI's bundled default template and simplifies the getting-started guidance.

Only Rayfin's version and immutable source locator change. plugins/external.json is hand-edited; .github/plugin/marketplace.json is regenerated with npm run build.

Type of Contribution

• Update to an existing plugin.

Pull Request Checklist

• I have read and followed the contribution guidelines.
• I have read and followed the paid-services guidance.
• The changes follow the existing format and naming conventions.
• I ran npm run build and verified the generated documentation is unchanged.
• I ran npm run plugin:validate and the required line-ending normalization.
• This PR targets main.

Verified: plugin validation passes; the pinned source manifest declares 0.4.2. PR automation runs the external-plugin lint and install-smoke checks.

GitHub Copilot assisted with this metadata update. I work on Rayfin at Microsoft.

[github-actions]

🔒 PR Risk Scan Results

Scanned 2 changed file(s).

Severity	Count
🔴 High	0
🟠 Medium	0
ℹ️ Info	0

✅ No matching risk patterns were detected in changed files.

This is an automated soft-gate report. Findings indicate review targets and do not block merge by themselves.

[github-actions]

✅ External plugin PR checks passed

• Changed entries detected: 1
• Workflow state label: ready-for-review
• Full logs: Download quality gate artifact
• Status legend: ✅ pass · ⚠️ warning · 🛑 fail

Per-plugin quality summary

Plugin	spec compliance (non-blocking)	vally lint	install smoke test	version match	ref/sha consistency	canvas structure	overall	source tree
rayfin	✅ pass	✅ pass	✅ pass	✅ pass	⚪ not_run	⚪ not_run	✅ pass	ed4647453c8890f874e072d669ac8b8120b9bf37

Gate output details

rayfin - spec compliance (✅ pass)

Agent Plugins v1.0.0 manifest checks passed for plugin.json.

rayfin - vally lint (✅ pass)

✅ rayfin-getting-started (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.

1 skill(s) linted, 1 passed

rayfin - install smoke test (✅ pass)

Install smoke test succeeded. Verified /tmp/external-plugin-quality-DgovoS/copilot-home/.copilot/installed-plugins/external-plugin-intake/rayfin/plugin.json.

rayfin - version match (pass)

- ed4647453c8890f874e072d669ac8b8120b9bf37: matched version "0.4.2" at "plugin.json".

rayfin - ref/sha consistency (not_run)

Ref/SHA consistency gate skipped because one of source.ref or source.sha was not provided.

rayfin - canvas structure (not_run)

Canvas structure gate skipped because plugin is not tagged with "canvas".

- rayfin: spec=pass, vally-lint=pass, install-smoke=pass, version-match=pass, ref-sha-consistency=not_run, canvas-structure=not_run, overall=pass

[Copilot]

Copilot review overview

🟢 Approval recommended

The focused metadata update is valid, immutable, and consistent across source and generated catalog files.

Review effort: Balanced
Findings: None

What changed in this PR

Updates the previously approved Rayfin external plugin to version 0.4.2.

Changes:

• Bumps Rayfin from 0.4.0 to 0.4.2.
• Pins installation to an immutable commit SHA.
• Regenerates matching marketplace metadata.

File	Description
plugins/​external.json	Updates Rayfin’s version and source locator.
.github/​plugin/​marketplace.json	Mirrors the updated generated catalog entry.

---

💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.