Skip to content

ToolPin v0.5.0

Choose a tag to compare

@nillo nillo released this 09 Jul 12:38

ToolPin v0.5.0

Node 24 runtime lane for issue #7.

Changed

  • ToolPin now requires Node.js 24 or newer.
  • Runtime dependencies align to undici@7.28.0, @types/node@24.13.3, and TypeScript 6.0.3.
  • CI, release workflow, and the composite GitHub Action now set up Node 24.
  • safeFetch keeps DNS-pinned undici dispatch with a narrow type-boundary adapter.
  • Lock-signature key fingerprints now normalize to public SPKI DER before hashing.
  • Docs explain how projects on Node 18/20/22 can keep app/test jobs unchanged by running ToolPin in a separate CI job or final step.
  • Dependabot now allows minor/patch updates on adopted runtime lanes and defers future incompatible majors.
  • Launch docs include opt-in-only adoption candidates; no automated third-party PRs without approval.

Verification

  • npm run release:check passed under Node 24 in GitHub Actions.
  • npm publish completed with provenance.

Closes #7.