ToolPin v0.5.0
ToolPin v0.5.0
Node 24 runtime lane for issue #7.
Changed
- ToolPin now requires Node.js 24 or newer.
- Runtime dependencies align to
undici@7.28.0,@types/node@24.13.3, and TypeScript 6.0.3. - CI, release workflow, and the composite GitHub Action now set up Node 24.
safeFetchkeeps DNS-pinned undici dispatch with a narrow type-boundary adapter.- Lock-signature key fingerprints now normalize to public SPKI DER before hashing.
- Docs explain how projects on Node 18/20/22 can keep app/test jobs unchanged by running ToolPin in a separate CI job or final step.
- Dependabot now allows minor/patch updates on adopted runtime lanes and defers future incompatible majors.
- Launch docs include opt-in-only adoption candidates; no automated third-party PRs without approval.
Verification
npm run release:checkpassed under Node 24 in GitHub Actions.- npm publish completed with provenance.
Closes #7.