v4.1.0 - boundation, changelog, version bump

.github/FUNDING.yml

@@ -3,4 +3,5 @@ patreon: bevry
 open_collective: bevry
 ko_fi: balupton
 liberapay: bevry
+tidelift: npm/start-of-week
 custom: ['https://bevry.me/fund']

HISTORY.md

@@ -1,5 +1,9 @@
 # History
 
+## v4.1.0 2023 November 14
+
+-   Updated dependencies, [base files](https://github.com/bevry/base), and [editions](https://editions.bevry.me) using [boundation](https://github.com/bevry/boundation)
+
 ## v4.0.0 2023 November 14
 
 -   Updated dependencies, [base files](https://github.com/bevry/base), and [editions](https://editions.bevry.me) using [boundation](https://github.com/bevry/boundation)

README.md

@@ -61,30 +61,30 @@ If you want something comprehensive, use [gamtiq/weekstart](https://github.com/g
 <a href="https://deno.land" title="Deno is a secure runtime for JavaScript and TypeScript, it is an alternative for Node.js"><h3>Deno</h3></a>
 
 ``` typescript
-import pkg from 'https://unpkg.com/start-of-week@^4.0.0/edition-deno/deno.ts'
+import pkg from 'https://unpkg.com/start-of-week@^4.1.0/edition-deno/deno.ts'
 ```
 
 <a href="https://www.skypack.dev" title="Skypack is a JavaScript Delivery Network for modern web apps"><h3>Skypack</h3></a>
 
 ``` html
 <script type="module">
-    import pkg from '//cdn.skypack.dev/start-of-week@^4.0.0'
+    import pkg from '//cdn.skypack.dev/start-of-week@^4.1.0'
 </script>
 ```
 
 <a href="https://unpkg.com" title="unpkg is a fast, global content delivery network for everything on npm"><h3>unpkg</h3></a>
 
 ``` html
 <script type="module">
-    import pkg from '//unpkg.com/start-of-week@^4.0.0'
+    import pkg from '//unpkg.com/start-of-week@^4.1.0'
 </script>
 ```
 
 <a href="https://jspm.io" title="Native ES Modules CDN"><h3>jspm</h3></a>
 
 ``` html
 <script type="module">
-    import pkg from '//dev.jspm.io/start-of-week@4.0.0'
+    import pkg from '//dev.jspm.io/start-of-week@4.1.0'
 </script>
 ```
 
@@ -93,7 +93,7 @@ import pkg from 'https://unpkg.com/start-of-week@^4.0.0/edition-deno/deno.ts'
 <p>This package is published with the following editions:</p>
 
 <ul><li><code>start-of-week</code> aliases <code>start-of-week/index.cjs</code> which uses the <a href="https://github.com/bevry/editions" title="You can use the Editions Autoloader to autoload the appropriate edition for your consumers environment">Editions Autoloader</a> to automatically select the correct edition for the consumer's environment</li>
-<li><code>start-of-week/source/node.ts</code> is <a href="https://www.typescriptlang.org/" title="TypeScript is a typed superset of JavaScript that compiles to plain JavaScript. ">TypeScript</a> source code with <a href="https://babeljs.io/docs/learn-es2015/#modules" title="ECMAScript Modules">Import</a> for modules</li>
+<li><code>start-of-week/source/index.ts</code> is <a href="https://www.typescriptlang.org/" title="TypeScript is a typed superset of JavaScript that compiles to plain JavaScript. ">TypeScript</a> source code with <a href="https://babeljs.io/docs/learn-es2015/#modules" title="ECMAScript Modules">Import</a> for modules</li>
 <li><code>start-of-week/edition-browsers/browser.js</code> is <a href="https://www.typescriptlang.org/" title="TypeScript is a typed superset of JavaScript that compiles to plain JavaScript. ">TypeScript</a> compiled against ES2022 for web browsers with <a href="https://babeljs.io/docs/learn-es2015/#modules" title="ECMAScript Modules">Import</a> for modules</li>
 <li><code>start-of-week/edition-es2022/node.js</code> is <a href="https://www.typescriptlang.org/" title="TypeScript is a typed superset of JavaScript that compiles to plain JavaScript. ">TypeScript</a> compiled against ES2022 for <a href="https://nodejs.org" title="Node.js is a JavaScript runtime built on Chrome's V8 JavaScript engine">Node.js</a> 6 || 8 || 10 || 12 || 14 || 16 || 18 || 20 || 21 with <a href="https://nodejs.org/dist/latest-v5.x/docs/api/modules.html" title="Node/CJS Modules">Require</a> for modules</li>
 <li><code>start-of-week/edition-es5/node.js</code> is <a href="https://www.typescriptlang.org/" title="TypeScript is a typed superset of JavaScript that compiles to plain JavaScript. ">TypeScript</a> compiled against ES5 for <a href="https://nodejs.org" title="Node.js is a JavaScript runtime built on Chrome's V8 JavaScript engine">Node.js</a> 4 || 6 || 8 || 10 || 12 || 14 || 16 || 18 || 20 || 21 with <a href="https://nodejs.org/dist/latest-v5.x/docs/api/modules.html" title="Node/CJS Modules">Require</a> for modules</li>

SECURITY.md

@@ -1,9 +1,21 @@
 # Security Policy
 
+## Security Practices
+
+This project meets standardized secure software development practices, including 2FA for all members, password managers with monitoring, secure secret retrieval instead of storage. [Learn more about our practices.](https://tidelift.com/funding/github/npm/start-of-week)
+
 ## Supported Versions
 
-HEAD receives all updates. [Bevry's automated tooling](https://github.com/bevry/boundation) maintains compatibility with a wide range of ecosystems (Node.js versions, Browsers, Deno) bringing the latest updates to all possible targets.
+This project uses [Bevry's automated tooling](https://github.com/bevry/boundation) to deliver the latest updates, fixes, and improvements inside the latest release while still maintaining widespread ecosystem compatibility.
+
+[Refer to supported ecosystem versions: `Editions` section in `README.md`.](https://github.com/bevry/start-of-week/blob/master/README.md#Editions)
+
+[Refer to automated support of ecosystem versions: `boundation` entries in `HISTORY.md`.](https://github.com/bevry/start-of-week/blob/master/HISTORY.md)
+
+Besides testing and verification, out CI also [auto-merges](https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions) [Dependabot security updates](https://docs.github.com/en/code-security/dependabot/dependabot-security-updates/about-dependabot-security-updates) and [auto-publishes](https://github.com/bevry-actions/npm) successful builds of the [`master` branch](https://github.com/bevry/wait/actions?query=branch%3Amaster) to the [`next` version tag](https://www.npmjs.com/package/start-of-week?activeTab=versions), offering immediate resolutions before scheduled maintenance releases.
 
 ## Reporting a Vulnerability
 
-Privately discuss, fix, and publish information about security vulnerabilities via [GitHub's Security Advisories](https://github.com/bevry/start-of-week/security/advisories).
+[Report the vulnerability to the project owners.](https://github.com/bevry/start-of-week/security/advisories)
+
+[Report the vulnerability to Tidelift.](https://tidelift.com/security)

index.cjs

@@ -1,4 +1,4 @@
 'use strict'
 // auto-generated by boundation, do not update manually
-/** @type {typeof import("./compiled-types/node.d.ts") } */
-module.exports = require('editions').requirePackage(__dirname, require, 'node.js')
+/** @type {typeof import("./compiled-types/index.d.ts") } */
+module.exports = require('editions').requirePackage(__dirname, require, 'index.js')