v3.1.1

What's Changed

• Bump fontaine peer dependency by @joetannenbaum in #354
• Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in #355
• GitHub Actions hardening by @nunomaduro in #362
• Add Dependabot cooldown of 5 days by @nunomaduro in #363
• Bump github/codeql-action from 3.35.4 to 4.36.0 in the github-actions group across 1 directory by @dependabot[bot] in #358
• Enable Dependabot auto-merge by @nunomaduro in #364
• Bump the github-actions group with 2 updates by @dependabot[bot] in #367
• Bump esbuild from 0.27.4 to 0.28.1 by @dependabot[bot] in #376
• [3.x] Sanitize variable font weight ranges in emitted asset filenames by @naveentehrpariya in #375
• [3.x] Respect the resolved Vite base in generated font CSS URLs by @naveentehrpariya in #372
• [3.x] Use spec-compliant format() keywords for ttf, otf, and eot fonts by @naveentehrpariya in #371
• [3.x] Honor the subsets option for google and bunny providers by @naveentehrpariya in #374
• [3.x] Warn when optimized font fallbacks cannot be generated by @naveentehrpariya in #373
• [3.x] Small fix in v3 upgrade guide by @gdebrauwer in #346
• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in #381
• Bump the github-actions group with 3 updates by @dependabot[bot] in #382

New Contributors

• @nunomaduro made their first contribution in #362
• @naveentehrpariya made their first contribution in #375
• @gdebrauwer made their first contribution in #346

Full Changelog: v3.1.0...v3.1.1