2.0.8

Important

• Fix CVE-2026-90711 (GHSA-jqcg-44mw-7w3h)

What's Changed

• Add OSSF scorecard action by @carpasse in #27
• Fix ci pipeline and add missing Node.JS versions by @carpasse in #26
• [StepSecurity] Apply security best practices by @step-security-bot in #29
• build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by @dependabot[bot] in #30
• build(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by @dependabot[bot] in #31
• build(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by @dependabot[bot] in #32
• build(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by @dependabot[bot] in #33
• build(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by @dependabot[bot] in #35
• build(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by @dependabot[bot] in #34
• build(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by @dependabot[bot] in #36
• chore: add funding to package.json by @Phillip9587 in #40
• build(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by @dependabot[bot] in #41
• build(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by @dependabot[bot] in #43
• build(deps): bump actions/checkout from 3.6.0 to 5.0.0 by @dependabot[bot] in #42
• build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #47
• build(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by @dependabot[bot] in #46
• build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by @dependabot[bot] in #50
• build(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by @dependabot[bot] in #49
• build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in #48
• build(deps): bump actions/checkout from 6.0.0 to 6.0.2 by @dependabot[bot] in #56
• build(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by @dependabot[bot] in #55
• build(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by @dependabot[bot] in #57
• build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by @dependabot[bot] in #58
• Fix "arugment" typo in README by @schiwekM in #61
• build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by @dependabot[bot] in #64
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #63
• build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in #45
• build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by @dependabot[bot] in #39
• chore(ci): npm-publish via reusable workflows by @sheplu in #54
• refresh CI by @UlisesGascon in #69
• fix: typo by @UlisesGascon in #71
• Release: 2.0.8 by @UlisesGascon in #70

New Contributors

• @carpasse made their first contribution in #27
• @step-security-bot made their first contribution in #29
• @dependabot[bot] made their first contribution in #30
• @Phillip9587 made their first contribution in #40
• @schiwekM made their first contribution in #61
• @sheplu made their first contribution in #54

Full Changelog: v2.0.7...v2.0.8