v3.0.3

hookified@3.0.3 — 2026-08-20

CI and publish hardening plus development tooling upgrades; no changes to published library code.

Documentation

• add SECURITY.md and DEFENSE_IN_DEPTH.md (880b9b6, #175)
• record repository lockdown and completed manuals (1d463a6, #195)

Internal

• add CODEOWNERS for high-risk paths (0752116, #184)
• bootstrap Aikido Safe Chain for cloud agents (2bc0f26, #185)
• drop first-party pnpm cooldown exclude (54a7f2a, #186)
• set pnpm trustPolicy to no-downgrade (af7bf6e, #187)
• pin all GitHub Actions via actions-up (8374a52, #188)
• wrap CI installs with Socket Firewall (2a5aeb5, #189)
• lint GitHub Actions workflows with zizmor (634187d, #190)
• disable persist-credentials on checkouts (1c27648, #191)
• disable setup-node cache on publish jobs (fae1dc3, #192)
• stage npm publishes from packed tarball (84a774d, #193)
• gate npm stage publish on Aikido scan-release (7a23b9e, #194)
• remove writr override (59b65d7, #196)
• upgrade code quality dependencies (bf7b54d, #197)
• upgrade TypeScript and build tooling (c04da8d, #198)
• upgrade pnpm (7dffb8a, #199)
• upgrade tinybench (21cdd8f, #200)

Contributors

• @jaredwray (18)

Full List of Changes

• hookified - chore: defense - add SECURITY.md and DEFENSE_IN_DEPTH.md by @jaredwray in #175
• hookified - chore: defense - add CODEOWNERS for high-risk paths by @jaredwray in #184
• hookified - chore: defense - bootstrap Aikido Safe Chain for cloud agents by @jaredwray in #185
• hookified - chore: defense - drop first-party pnpm cooldown exclude by @jaredwray in #186
• hookified - chore: defense - set pnpm trustPolicy to no-downgrade by @jaredwray in #187
• hookified - chore: defense - pin all GitHub Actions via actions-up by @jaredwray in #188
• hookified - chore: defense - wrap CI installs with Socket Firewall by @jaredwray in #189
• hookified - chore: defense - lint GitHub Actions workflows with zizmor by @jaredwray in #190
• hookified - chore: defense - disable persist-credentials on checkouts by @jaredwray in #191
• hookified - chore: defense - disable setup-node cache on publish jobs by @jaredwray in #192
• hookified - chore: defense - stage npm publishes from packed tarball by @jaredwray in #193
• hookified - chore: defense - gate npm stage publish on Aikido scan-release by @jaredwray in #194
• hookified - chore: defense - record repository lockdown and completed manuals by @jaredwray in #195
• hookified - chore: remove writr override by @jaredwray in #196
• hookified - chore: upgrade code quality dependencies by @jaredwray in #197
• hookified - chore: upgrade TypeScript and build tooling by @jaredwray in #198
• hookified - chore: upgrade pnpm by @jaredwray in #199
• hookified - chore: upgrade tinybench by @jaredwray in #200

Full diff: v3.0.2...v3.0.3