5.0.0-alpha.10

What's Changed

• New develop release: 4.1.7-dev.0 by @github-actions[bot] in #3129
• build(deps): bump undici from 8.12.2 to 8.12.3 by @dependabot[bot] in #3131
• build(deps): bump @apollo/client from 4.3.4 to 4.3.5 in the graphql group by @dependabot[bot] in #3130
• build(babel): replace preset-env with modules by @sjinks in #3121
• build(deps): bump step-security/harden-runner from 2.22.1 to 2.22.2 by @dependabot[bot] in #3126
• build(deps): bump github/codeql-action from 4.39.0 to 4.39.1 by @dependabot[bot] in #3135
• ci(workflow): enable CodeQL scanning for Go by @sjinks in #3138
• ci(workflow): restrict Go CI token permissions by @sjinks in #3139
• ci(deps): enable Dependabot for Go modules by @sjinks in #3144
• build(deps): bump check-disk-space from 3.4.0 to 4.0.0 by @dependabot[bot] in #3134
• build(deps): bump golang.org/x/net from 0.55.0 to 0.61.0 by @dependabot[bot] in #3149
• build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.24 by @dependabot[bot] in #3145
• build(deps): bump golang.org/x/mod from 0.36.0 to 0.42.0 by @dependabot[bot] in #3147
• build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.19 to 2.5.64 by @dependabot[bot] in #3152
• build(deps): bump github.com/mattn/go-runewidth from 0.0.16 to 0.0.31 by @dependabot[bot] in #3148
• build(deps): bump actions/setup-dotnet from 5 to 6 by @dependabot[bot] in #3071
• test(release): cover archive traversal rejection by @sjinks in #3140
• test(update): cover archive filename rejection by @sjinks in #3141
• build: use TypeScript for CLI and Jest transforms by @sjinks in #3137
• build(deps): bump github.com/spf13/pflag from 1.0.9 to 1.0.10 by @dependabot[bot] in #3154
• fix(dev-env): avoid map capacity overflow by @sjinks in #3142
• fix(dev-env): switch to our own mailpit image by @sjinks in #3081
• fix(sync): handle current data sync statuses and show progress details by @luismulinari in #3125

Full Changelog: 4.1.6...5.0.0-alpha.10