Release 2.2.1 — Security Hardening & Patched Dependency Updates

Security & Entropy Hardening

• Cryptographically Secure Random Identifiers: Replaced pseudo-random number generator routines (Math.random()) with cryptographically secure Web Crypto APIs (crypto.randomUUID() and crypto.getRandomValues()) across fallback blob URL generation, manual redaction IDs, and form role assignments. Resolves GitHub CodeQL alert CWE-338.

Dependency Vulnerability Fixes

• Vite (^8.3.5): Upgraded to patch launch-editor CLI flag misinterpretation, command execution, and filesystem traversal advisories (GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw, GHSA-587h-7wmj-h5pm, GHSA-9jrq-w75r-8gcw, GHSA-rq7h-c2jc-7f22, GHSA-vfpm-58rq-9qcg).
• Vitest (^5.0.5 -> 5.1.0): Upgraded to patch arbitrary manual mock registration and path traversal bypass in @vitest/mocker (GHSA-qxg6-89mg-rqv8, GHSA-xp26-3454-mjgp).
• vite-plugin-dts (^5.1.2): Upgraded to eliminate minimatch quadratic processing and glob amplification denial-of-service advisory (GHSA-g3hv-75wg-m249).
• undici (^8.12.3): Transitive override applied across all dependencies resolving cache poisoning, TLS options drop, and Denial of Service advisories (GHSA-4w7w-5xrc-9h26, GHSA-2m5v-pch6-74hx, GHSA-qrxm-fqhp-jwvm, GHSA-9fm3-97px-rjf6, GHSA-xjj6-f33q-929c).
• fast-uri (^3.1.9) and source-map-js (^1.2.2): Patched to latest secure versions.
• Audits: npm audit reports 0 vulnerabilities. GitHub Dependabot and CodeQL open alerts: 0.

Compatibility & Build Improvements

• Adapted TypeScript declaration generator configuration in vite.config.ts for vite-plugin-dts v5 (outDirs, bundleTypes).
• Maintained strict package exports and full backward compatibility across all SDK interfaces.