v2.22.2

What's Changed

• docs(security): add SHA-pin fix for composite allow-lists, state why fork PRs come first by @CybotTM in #280
• chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.17.4 by @renovate[bot] in #281
• chore(deps): update pre-commit hook netresearch/skill-repo-skill to v3 by @renovate[bot] in #265
• chore(npm): mark the source package private by @CybotTM in #282
• chore(deps): update step-security/harden-runner action to v2.22.4 by @renovate[bot] in #283
• chore(deps): update pre-commit hook netresearch/skill-repo-skill to v3.3.1 by @renovate[bot] in #284
• chore(release): v2.22.2 by @CybotTM in #285

Full Changelog: v2.22.1...v2.22.2