ecto@5.1.0 — 2026-08-26
Fix Windows path handling and ship dependency, tooling, and supply-chain hardening updates.
Bug Fixes
- use Node path APIs for directory creation, extension detection, and template lookup so Windows paths work (#387)
Internal
- upgrade dev dependencies, including TypeScript 7 and GitHub Actions majors (breaking for maintainers, not the public API) (#388)
- upgrade runtime dependencies: cacheable, writr, fumanchu, hookified, liquidjs (#389)
- upgrade pnpm packageManager pin and docula (#390)
- scaffold security docs (#392)
- add CODEOWNERS and Safe Chain (#399)
- freeze the lockfile and tighten CI permissions (#400)
- pin GitHub Actions and harden checkout (#401)
- add Socket Firewall and Corepack to CI (#402)
- add zizmor workflow lint (#403)
- stage npm publish and add the Aikido release gate (#404)
- record repository lockdown (#405)
- upgrade code quality dependencies (#406)
- upgrade TypeScript and build tooling to current majors (#407)
- upgrade pnpm (#408)
- upgrade @jaredwray/fumanchu (#409)
- upgrade hookified (#410)
- upgrade writr (#411)
- remove the undici override (#412)
- upgrade liquidjs (#413)
Contributors
- @jaredwray (19 PRs)
- @capitnflam (1 PR)
Full List of Changes
- fix(win32): fix win32 path support by @capitnflam in #387
- root - chore: upgrade dev dependencies (breaking) by @jaredwray in #388
- root - chore: upgrade runtime dependencies by @jaredwray in #389
- root - chore: upgrade pnpm and docula (deferrals from #388) by @jaredwray in #390
- ecto - chore: defense - scaffold security docs by @jaredwray in #392
- ecto - chore: defense - add CODEOWNERS and Safe Chain by @jaredwray in #399
- ecto - chore: defense - freeze lockfile and least-privilege CI by @jaredwray in #400
- ecto - chore: defense - pin actions and checkout hygiene by @jaredwray in #401
- ecto - chore: defense - add Socket Firewall and Corepack by @jaredwray in #402
- ecto - chore: defense - add zizmor workflow lint by @jaredwray in #403
- ecto - chore: defense - stage publish and Aikido release gate by @jaredwray in #404
- ecto - chore: defense - record repository lockdown by @jaredwray in #405
- ecto - chore: upgrade code quality dependencies by @jaredwray in #406
- ecto - chore: upgrade TypeScript and build tooling (breaking) by @jaredwray in #407
- ecto - chore: upgrade pnpm by @jaredwray in #408
- ecto - chore: upgrade @jaredwray/fumanchu by @jaredwray in #409
- ecto - chore: upgrade hookified by @jaredwray in #410
- ecto - chore: upgrade writr by @jaredwray in #411
- ecto - chore: remove undici override by @jaredwray in #412
- ecto - chore: upgrade liquidjs by @jaredwray in #413
Full diff: v5.0.0...v5.0.1
Contributors
capitnflam and jaredwray