What's Changed
- fix: override flatted package security alert by @yeojz in #820
- fix: override picomatch and yaml package security alerts by @yeojz in #822
- refactor(testing): replace custom Deno adapter with @std/expect by @yeojz in #821
- fix: override brace-expansion package security alert by @yeojz in #824
- chore: update github actions pinned images by @yeojz in #823
- Add @otplib/plugin-base32-alt to dependencies by @yeojz in #825
- chore: harden supply chain with cooldown and version pinning by @yeojz in #826
- refactor(testing): centralize test secrets into shared module by @yeojz in #831
- chore(deps): bump the github-actions group with 5 updates by @dependabot[bot] in #827
- refactor(testing): rename test secret constants for semantic clarity by @yeojz in #832
- chore(deps-dev): bump the dev-dependencies-minor group with 4 updates by @dependabot[bot] in #828
- refactor: replace size-limit with native bundle size check by @yeojz in #835
- chore(deps-dev): bump vite from 7.3.1 to 8.0.0 by @dependabot[bot] in #830
- refactor/docs/unusedImport by @ValeriYanev98 in #837
- fix(security): address npm audit vulnerabilities by @yeojz in #839
- fix(docker): bump pnpm to 10.30.1 to match packageManager by @yeojz in #847
- docs: note short-secret guardrail override for legacy/test secrets by @yeojz in #848
- docs(getting-started): clarify when each function runs by @yeojz in #846
- chore(deps): bump vite from 5.4.21 to 8.0.10 by @dependabot[bot] in #845
- chore(deps-dev): bump the dev-dependencies-patch group across 1 directory with 6 updates by @dependabot[bot] in #849
- chore(deps-dev): bump the dev-dependencies-minor group across 1 directory with 6 updates by @dependabot[bot] in #841
- docs(otplib): note 16-byte minimum and fix broken secret-handling link by @yeojz in #851
- chore(deps-dev): bump @codecov/bundle-analyzer from 1.9.1 to 2.0.1 by @dependabot[bot] in #843
- fix(benchmarks): adapt to tinybench v6 TaskResult shape by @yeojz in #852
- chore(deps): bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] in #844
- chore(deps): bump @noble/hashes and @scure/base to 2.2.0 by @yeojz in #853
- chore(deps-dev): bump turbo from 2.9.9 to 2.9.14 by @dependabot[bot] in #855
- ci: split security audit into blocking prod and informational full scans by @yeojz in #857
- chore(deps-dev): bump vite from 8.0.10 to 8.0.11 by @dependabot[bot] in #856
- release(packages): v13.4.1 by @github-actions[bot] in #854
New Contributors
- @ValeriYanev98 made their first contribution in #837
Full Changelog: v13.4.0...v13.4.1