v0.17.1 — security: smol-toml CVE-2026-85730

Security

• Bump smol-toml to ^1.7.1 for CVE-2026-85730 (HIGH): a DoS where parse() could enter an infinite loop on a value inside an array/inline table followed by a comment with no trailing newline. confdiff parses arbitrary user-supplied TOML, so this input was reachable.

Thanks to @anupamme for the report and patch (#3).

npm install -g confdiff@0.17.1