v0.2.6

What's Changed

• fix(ci): remove duplicate create-release job from publish-npm by @pppp606 in #86
• chore(deps): bump the security-updates group across 1 directory with 41 updates by @dependabot[bot] in #94
• Build demo script and remove unnecessary dev dependencies by @pppp606 in #95
• Improve URL validation for OIDC endpoints using hostname parsing by @pppp606 in #96
• Simplify npm publishing workflow and remove GitHub Packages support by @pppp606 in #97
• fix(deps): bump fast-uri to 3.1.2 to resolve Dependabot alerts by @pppp606 in #108
• chore(release): bump version to 0.2.6 by @pppp606 in #110
• chore(security): tighten Actions permissions and remove publish-time cache by @pppp606 in #111
• chore(security): simplify workflows and strengthen SHA-pinning validator by @pppp606 in #113
• fix(security): bump lodash & fast-uri to patched versions (lockfile) by @pppp606 in #119
• chore: remove leftover license-check script and its tests by @pppp606 in #120

Full Changelog: v0.2.5...v0.2.6