Ships the GHSA-fpvw-w7ff-h7vr ReDoS fix and is the first release published
through npm trusted publishing (OIDC, no token).