4.0.5

What's Changed

• New develop release: 4.0.4-dev.0 by @github-actions[bot] in #2841
• build(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3 by @dependabot[bot] in #2844
• fix(cli): allow vip wp --help without requiring separator by @sjinks in #2832
• fix(keychain): add local types for optional keytar module by @sjinks in #2851
• build(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4 by @dependabot[bot] in #2850
• build(deps): bump semver from 7.8.0 to 7.8.1 by @dependabot[bot] in #2849
• build(deps): bump @apollo/client from 4.1.9 to 4.2.0 in the graphql group by @dependabot[bot] in #2848
• build(deps-dev): bump @types/node from 24.12.0 to 25.9.1 by @dependabot[bot] in #2847
• build(deps-dev): bump the babel group with 4 updates by @dependabot[bot] in #2854
• build(deps): bump ejs from 5.0.2 to 6.0.1 by @dependabot[bot] in #2855
• build(deps): bump commander from 14.0.3 to 15.0.0 by @dependabot[bot] in #2857
• Ensure the Login URL is using HTTPS by @dphiffer in #2856
• ci: update Automattic/vip-actions to address deprecation warnings by @sjinks in #2853
• build(deps): bump tar from 7.5.15 to 7.5.16 by @dependabot[bot] in #2866
• build(deps): bump js-yaml from 4.1.1 to 4.2.0 by @dependabot[bot] in #2865
• build(deps): bump graphql from 16.14.0 to 16.14.1 in the graphql group by @dependabot[bot] in #2864
• fix(dev-env): restore update wizard prompts by @sjinks in #2852
• fix(dev-env): avoid false use matches in SQL imports by @sjinks in #2863
• fix(keychain): load secure keychain export by @sjinks in #2867
• test(cli): cover wp parser invocation matrix by @sjinks in #2858
• build(deps): bump @apollo/client from 4.2.0 to 4.2.2 in the graphql group by @dependabot[bot] in #2868
• fix(dev-env): use -o so myloader drops existing tables before import by @WRasada in #2871
• build(deps-dev): bump @automattic/eslint-plugin-wpvip from 1.2.1 to 1.3.0 by @dependabot[bot] in #2876
• build(deps): bump semver from 7.8.1 to 7.8.2 by @dependabot[bot] in #2875
• feat(app): add deploy token generation by @sjinks in #2870
• build(deps-dev): bump @types/node from 25.9.1 to 25.9.2 by @dependabot[bot] in #2877
• chore(deps): update vulnerable packages by @sjinks in #2859
• docs(cli): add parser migration guardrails by @sjinks in #2860
• test(cli): add release smoke tests by @sjinks in #2861
• build(deps): bump semver from 7.8.2 to 7.8.3 by @dependabot[bot] in #2879
• build(deps): bump socks-proxy-agent from 10.0.0 to 10.1.0 by @dependabot[bot] in #2880
• build(deps): bump https-proxy-agent from 9.0.0 to 9.1.0 by @dependabot[bot] in #2881
• refactor: replace node-fetch/nock with undici by @sjinks in #2837
• build(deps): bump esbuild from 0.28.0 to 0.28.1 by @dependabot[bot] in #2885
• build(deps): bump semver from 7.8.3 to 7.8.4 by @dependabot[bot] in #2882
• build(deps-dev): bump @types/node from 25.9.2 to 25.9.3 by @dependabot[bot] in #2884
• build(deps): bump the graphql group across 1 directory with 3 updates by @dependabot[bot] in #2888
• vip app deploy - Flag large archive files included in BYOR deploy by @rebeccahum in #2889
• New package release: v4.0.4 by @github-actions[bot] in #2890
• chore: migrate to @github/keytar by @sjinks in #2892
• New package release: v4.0.5 by @github-actions[bot] in #2893

New Contributors

• @dphiffer made their first contribution in #2856
• @WRasada made their first contribution in #2871

Full Changelog: 4.0.3...4.0.5