v3.3.0

What's Changed

• docs: consolidate global CLI options + document OpenVEX generation by Mikola Lysenko (@mikolalysenko) in #93
• feat(apply,scan): generate OpenVEX document inline via --vex by Mikola Lysenko (@mikolalysenko) in #94
• chore(deps): Bump tar from 0.4.45 to 0.4.46 by Dependabot (@dependabot)[bot] in #95
• chore(release): bump version to 3.3.0 by Mikola Lysenko (@mikolalysenko) in #96

Full Changelog: v3.2.0...v3.3.0

v3.2.0

What's Changed

• ci(release): adopt npm staged publishing via OIDC by Mikola Lysenko (@mikolalysenko) in #87
• refactor: dedupe ecosystem dispatch, telemetry, API client, cleanup, get by Mikola Lysenko (@mikolalysenko) in #88
• test(args): regression coverage for BoolishValueParser on env bools by Mikola Lysenko (@mikolalysenko) in #89
• feat(pypi): narrow/broad release breadth + multi-variant remove/rollback fixes by Mikola Lysenko (@mikolalysenko) in #90
• feat(gem,maven): extend multi-platform release patching to RubyGems + Maven by Mikola Lysenko (@mikolalysenko) in #91
• fix: repo-wide correctness, security & filesystem-safety hardening pass (v3.2.0) by Mikola Lysenko (@mikolalysenko) in #92

Full Changelog: v3.1.0...v3.2.0

v3.1.0

What's Changed

• fix: use npx/pnpm dlx @socketsecurity/socket-patch and add dependencies script by Mikola Lysenko (@mikolalysenko) in #63
• chore(deps): Bump quinn-proto from 0.11.13 to 0.11.14 by Dependabot (@dependabot)[bot] in #40
• chore(deps): Bump rand from 0.9.2 to 0.9.4 by Dependabot (@dependabot)[bot] in #65
• chore(deps): Bump rustls-webpki from 0.103.9 to 0.103.13 by Dependabot (@dependabot)[bot] in #66
• feat(patch): add package- and diff-level patch sources by Mikola Lysenko (@mikolalysenko) in #67
• test(cli): foundation for CLI-contract unit-test campaign by Mikola Lysenko (@mikolalysenko) in #68
• feat(scan): unified auto-update engine — --sync, --prune, --dry-run (v3.0) by Mikola Lysenko (@mikolalysenko) in #79
• feat(apply): safety hardening — atomicity, locking, pnpm CoW, sidecars, Maven gate by Mikola Lysenko (@mikolalysenko) in #80
• feat(vex): OpenVEX 0.2.0 attestation generator by Mikola Lysenko (@mikolalysenko) in #81
• feat: telemetry coverage for read-side commands + paid-tier fallback (3.1.0) by Mikola Lysenko (@mikolalysenko) in #82
• update release workflow by Mikola Lysenko (@mikolalysenko) in #84
• ci(release): tag after build + fix rustup toolchain setup by Mikola Lysenko (@mikolalysenko) in #85
• ci(release): pin newer cross NDK image for aarch64-linux-android by Mikola Lysenko (@mikolalysenko) in #86

New Contributors

• Dependabot (@dependabot)[bot] made their first contribution in #40

Full Changelog: v2.1.4...v3.1.0

v2.1.4

What's Changed

• fix: tolerate already-published npm packages in release workflow by Wenxin Jiang (@Wenxin-Jiang) in #61
• v2.1.4: bump and sync package versions by Wenxin Jiang (@Wenxin-Jiang) in #62

Full Changelog: v2.1.3...v2.1.4

v2.1.3

What's Changed

• fix: pin Node 22.22.1 in release workflow by Wenxin Jiang (@Wenxin-Jiang) in #58
• v2.1.3: bump and sync package versions by Wenxin Jiang (@Wenxin-Jiang) in #59

Full Changelog: v2.1.2...v2.1.3

v2.1.2

What's Changed

• Add explicit node types for TypeScript 6 compat by Jake Verbaten (@Raynos) in #51
• fix: harden core error handling, blob verification, and force-mode reporting by Wenxin Jiang (@Wenxin-Jiang) in #56
• fix: add apply diagnostics for silent no-op failures by Wenxin Jiang (@Wenxin-Jiang) in #53
• fix: surface crawler find_by_purls errors instead of swallowing by Wenxin Jiang (@Wenxin-Jiang) in #55
• fix: add error handling to get command for blob/decode failures by Wenxin Jiang (@Wenxin-Jiang) in #54
• v2.1.2: bump and sync package versions by Wenxin Jiang (@Wenxin-Jiang) in #57

New Contributors

• Jake Verbaten (@Raynos) made their first contribution in #51

Full Changelog: v2.1.1...v2.1.2

v2.1.1

What's Changed

• fix: use npx @socketsecurity/socket-patch for postinstall command by Mikola Lysenko (@mikolalysenko) in #39
• feat: unflag Ruby gem support and add e2e bundler tests by Mikola Lysenko (@mikolalysenko) in #41
• fix: harden GitHub Actions workflows by Ryan Eberhardt (@reberhardt7) in #44
• fix: prioritize pnpm-workspace.yaml detection and restrict setup to root package.json by Wenxin Jiang (@Wenxin-Jiang) in #45
• fix: split release workflow into PR-based prep + auto-publish by Wenxin Jiang (@Wenxin-Jiang) in #47
• fix: simplify release to workflow_dispatch (no bot commits) by Wenxin Jiang (@Wenxin-Jiang) in #48
• v2.1.1: bump and sync package versions by Wenxin Jiang (@Wenxin-Jiang) in #49

New Contributors

• Wenxin Jiang (@Wenxin-Jiang) made their first contribution in #45

Full Changelog: v2.1.0...v2.1.1

v2.1.0

What's Changed

• feat: add full glibc/musl support for all Linux architectures by Mikola Lysenko (@mikolalysenko) in #38

Full Changelog: v2.0.0...v2.1.0

v2.0.0

What's Changed

• feat: interactive prompts and smart patch selection by Mikola Lysenko (@mikolalysenko) in #37

Full Changelog: v1.7.1...v2.0.0

v1.7.1

Full Changelog: v1.7.0...v1.7.1