1.0.2

What's Changed

v1.x security and publishing fixes

• chore: pin v1 publishes to the v1 dist-tag by @cliffhall in #1828
• fix: v1 dist-tag must be v1-latest — npm rejects v1 by @cliffhall in #1829
• ci(v1): pin workflow branch filters to v1/main, re-enabling the e2e gate by @cliffhall in #2066
• fix: prevent DNS-rebinding TOCTOU in safeProxyFetch by pinning resolved IPs by @manjunathbhaskar in #1732
• fix(deps): bump js-yaml overrides to patched 3.15.1 / 4.3.1 by @cliffhall in #2073
• fix(deps): clear remaining npm audit advisories by @cliffhall in #2075
• chore: deny esbuild and fsevents install scripts by @cliffhall in #2077
• chore: bump version to 1.0.2 by @cliffhall in #2081

New Contributors

• @manjunathbhaskar made their first contribution in #1732

Full Changelog: 1.0.1...1.0.2