v2.0.0

What's Changed

• fix: upgrade fast-uri, fast-xml-builder, @babel/plugin-transform-modules-systemjs (security) by @tylerzey in #18
• refactor: use OIDC npm OUR-4016 by @victorcastilloharrington in #19
• ci: split publish job, add zizmor, pin actions OUR-4084 by @tylerzey in #20
• fix: bump @babel/runtime from 7.28.4 to 7.29.2 in the prod-minor-patch group across 1 directory by @dependabot[bot] in #25
• fix: bump actions/setup-node from 4.4.0 to 6.4.0 by @dependabot[bot] in #21
• fix: bump the dev-dependencies group across 1 directory with 5 updates by @dependabot[bot] in #24
• fix: bump actions/checkout from 4.2.2 to 6.0.2 by @dependabot[bot] in #23
• chore: bump root dev tooling (jest 30, eslint 10, eslint-config 3) by @tylerzey in #36
• feat: track() accepts optional per-call userProperties OUR-4098 by @tylerzey in #37
• release: 2.0.0 by @tylerzey in #38
• fix: install OIDC-compatible npm in publish job by @tylerzey in #39
• debug: print OIDC claims to diagnose npm TP rejection by @tylerzey in #40
• debug: use github-script for robust OIDC claim fetch by @tylerzey in #41
• fix(ci): revert publish to NPM_TOKEN auth by @tylerzey in #42

New Contributors

• @victorcastilloharrington made their first contribution in #19
• @dependabot[bot] made their first contribution in #25

Full Changelog: v1.4.2...v2.0.0