v1.2.14

[1.2.14] - 2026-07-02

Changed

• Bumped github.com/theupdateframework/go-tuf/v2 to 2.4.2 (#13) — the TUF client used by update's trust-root/signature verification, vendored into the release binary.

Fixed

• npm ci lockfile drift fixed. The per-platform optionalDependencies subentries in package-lock.json (node_modules/@fateforge/gitlab-cli-*) were missing their version, so once those platform packages were published, npm ci failed its consistency check (lock file's <pkg>@ does not satisfy <pkg>@<version>). The version bump (scripts/version-files.js) now syncs the lockfile platform subentries too, and check-version.js guards them, so the drift can't silently recur.