v0.2.8

What's Changed

• fix(aube): honor bundleDependencies on the lockfile-restore install path by @colinhacks in #226
• aube(linker): promote the most-referenced version to the hoisted root slot by @colinhacks in #227
• fix(lockfile): resolve git deps in the yarn-classic reader (#217 regression) by @colinhacks in #228
• fix(runtime): fall back to original source when oxc rejects V8-tolerated plain JS (#225) by @colinhacks in #229
• perf(aube): overlap no-downgrade trust validation with the tarball fetch by @colinhacks in #230
• test(aube-linker): direct dep wins the hoisted root slot over a transitive majority by @colinhacks in #231
• fix(aube): key the no-integrity warm binding by registry URL in the global store by @colinhacks in #232

Full Changelog: v0.2.7...v0.2.8