v1.2.2 — security/deps patch + find-duplicates tunability + OIDC publishing
Security and dependency patch release.
Fixed
- find-duplicates: expose
scan_limit+max_candidatesparameters; document recency limitation (972db6f, +168-line test suite) - Security: bump vitest 3.2.4 → 4.1.8, clearing a critical UI-server arbitrary-file advisory (b5888f5)
- Dependencies: patch Dependabot advisories —
qs(#32),uuid+ip-addressmediums (084e3d1), dev-deps group (#30)
Added
- CI: npm OIDC trusted-publishing workflow (
publish.yml) — tag pushes now publish to npm with no NPM_TOKEN or 2FA OTP (3e52a40)