📜 Changelog

✨ What's Changed in v3.0.0

0bddeec — (config) Modernize shared Lychee defaults _{(2 files, +183, -134)}
- 💥 [feat] Tighten the public link-checking baseline with GET requests, transient failure cache exclusions, explicit mail handling, safer generated-path filters, and narrowly scoped exclusions for consistently blocked services.
Keep GitHub-heavy CI concurrency conservative while adding targeted host throttles for APIs and documentation sites.
Clarify every public default and preserve strict TLS, HTTPS, private-address, and failure-status behavior.
- 🧪 [test] Expand the package-surface regression assertions to cover the new request, cache, report, mail, host, and credential-safety defaults.
- BREAKING CHANGE: The published lychee.toml baseline changes request behavior, cache policy, exclusions, and host throttling for every consumer.

3e81db4 — (lint) Make Tombi formatting portable _{(1 file, +21, -0)}
- 🐛 [fix] Check in the TOML formatting rules previously inherited from the local user profile.
  🧪 [test] Keep Windows and clean Linux ESLint/Tombi results identical.
a585747 — (labeler) Use supported branch matchers _{(1 file, +52, -121)}
- 🐛 [fix] Replace unsupported PR title and body matchers with actions/labeler head-branch rules that follow the repository's type/description branch convention.
- 🔧 [chore] Preserve path-based build, documentation, testing, configuration, dependency, and shared-rule labeling while composing branch alternatives with supported any matchers.

88a8b52 — 🔖 [chore] Release v3.0.0 _{(2 files, +3, -3)}
af9b0a8 — (tooling) Remove the legacy JSCPD config _{(1 file, +0, -111)}
04a5a04 — (tooling) Refresh shared validation tooling _{(5 files, +1046, -753)}

65293f8 — (release) Guard git-cliff note generation _{(5 files, +153, -121)}
- Validate the authoritative release tag at HEAD immediately before git-cliff and export GitHub authentication for enriched notes. Standardize Actionlint configuration and direct package CLI usage where applicable.

4ce146b — (deps) Refresh Node and validation toolchain _{(7 files, +2671, -4289)}
- ⬆️ [build] Update Node to 26.7.0, npm to 12.0.2, shared lint presets, validation CLIs, and compatible transitive packages; retain TypeScript 6 while the configured policy rejects the 7.x major.
- 🔒️ [ci] Refresh pinned checkout, setup-node, CodeQL, harden-runner, and release action SHAs to their verified release commits.
- 🔨 [chore] Make dependency updates clear the machine-level npm allow-scripts setting for the update command so the repository's package policy remains authoritative.
- 🐛 [fix] Consume eslint-plugin-yamllint 1.0.5 through eslint-config-nick2bad4u, restoring ESLint 10 native YAML linting without adding a duplicate direct dependency.
1d78a94 — ⬆️ [build] Update npm_and_yarn dependencies _{(1 file, +10, -10)}
d55cdef — ⬆️ [build] Update npm_and_yarn dependencies _{(1 file, +6, -6)}
f438448 — ⬆️ [build] Update npm_and_yarn dependencies _{(1 file, +19, -35)}

e72d108 — (supply-chain) Harden workflow dependency installs _{(2 files, +9, -9)}
- 🔒️ [ci] Block dependency lifecycle scripts during clean CI and release installs.
  📌 [ci] Pin Gitleaks to the immutable commit behind v8.30.1.
  🧪 [test] Require the lockfile-installed Vitest binary instead of permitting npx downloads.

Note

Release comparison: v2.0.0...v3.0.0

Thanks to anyone who has 🧑‍💻 contributed.

This changelog was automatically generated with ⛰️ git-cliff.