release: 14.2.0 - bump html-encoding-sniffer from 3.0.0 to 5.0.0 and bump node requirement as a result - #11

Closed

maw629 wants to merge 71 commits into

Commits on Jul 11, 2026

deps: add .npmrc with rule min-release-age=7 to harden supply-chain for dependency installs/updates
maw629
committed
6a58caa
deps: baseline package-lock.json
maw629
committed
d6e375a
docs: add design spec for 14.1.1-pkgnec.0 identity handshake release
maw629
committed
4fdb2dc
docs: tighten CI-trigger and trunk-exists prerequisites in handshake spec
maw629
committed
6ecb4d5
docs: add implementation plan for 14.1.1-pkgnec.0 identity handshake
maw629
committed
4ef4de5
chore: rebrand package.json for @pkg-nec/http-server@14.1.1-pkgnec.0
maw629
committed
b2ec129
docs(plan): accept pre-existing tap@14 test failure, rely on CI + tarball-identity check
maw629
committed
c2b9315
docs: rebrand README for @pkg-nec/http-server, add fork note
maw629
committed
30cc48a
docs: rewrite SECURITY.md for @pkg-nec/http-server disclosure channel
maw629
committed
beba547
ci: move workflow triggers from master to trunk
maw629
committed
f309986
chore: sweep .github/ for pkg-nec ownership (drop FUNDING.yml, rewrite URLs)
maw629
committed
68d74d7
ci: unstick node.js workflow (bump actions/checkout+setup-node to v4, prune matrix to Node 16 on ubuntu-latest)
maw629
committed
1f104d0
docs(plan): record CI matrix unstick as part of Task 6
maw629
committed
413ff9f
Merge pull request #1 from pkg-nec/release/14.1.1-pkgnec.0
maw629
authored
f8eb5ae
docs: add design spec for OIDC trusted publishing to npm
maw629
committed
cf37be7
docs: scrub author line in handshake spec
maw629
committed
5900c0f
docs: add implementation plan for OIDC trusted publishing
maw629
committed
c0fcbbb
chore: enable provenance attestations in publishConfig
maw629
committed
f5eeca9
ci: add OIDC-based publish workflow gated on npm-publish environment
maw629
committed
3a3b122
docs(plan): fix Task 2 Step 3 grep patterns (allow trailing inline comments)
maw629
committed
00fd56a
chore: remove release-drafter (workflow + config)
maw629
committed
c5e0df2
Merge pull request #2 from pkg-nec/chore/oidc-trusted-publishing
maw629
authored
ef671d4
docs: add canary release spec for 14.1.1-pkgnec.1 (OIDC pipeline smoke test)
maw629
committed
5e8784b
docs: add implementation plan for 14.1.1-pkgnec.1 canary release
maw629
committed
fb11812
chore: bump to 14.1.1-pkgnec.1 for OIDC pipeline canary release
maw629
committed
de55182
Merge pull request #3 from pkg-nec/chore/canary-14.1.1-pkgnec.1
maw629
authored
4352f8c
fix(ci): bump publish.yml Node 16.x → 22.x for OIDC trusted publishing
maw629
committed
1f568e9
Merge pull request #4 from pkg-nec/hotfix/publish-workflow-node-22
maw629
authored
2228a8d
fix(ci): pin npm@11.10.0 in publish workflow for OIDC trusted publishing
maw629
committed
507be8e
Merge pull request #5 from pkg-nec/hotfix/publish-workflow-npm-11
maw629
authored
a2e519e
chore: remove publishConfig.tag=canary now that the OIDC pipeline is verified
maw629
committed
f7977a2
Merge pull request #6 from pkg-nec/chore/remove-canary-dist-tag
maw629
authored
9ee3bcc
docs: add design spec for 14.1.2 vulnerability patch release
maw629
committed
5ff7009
docs: add implementation plan for 14.1.2 vulnerability patch release
maw629
committed
02a167f
docs: add 14.1.2 audit-delta doc with baseline snapshot
maw629
committed
1c95bb9
deps: bump minimist from 1.2.6 to 1.2.8 (prototype-pollution fix)
maw629
committed
4214985
deps: bump portfinder from 1.0.28 to 1.0.38
maw629
committed
976c992
deps: bump eol (dev) from 0.9.1 to 0.10.0
maw629
committed
2bef7fe
deps: bump express (dev) from 4.17.1 to 4.22.2
maw629
committed
f9d298c
docs: finalize 14.1.2 audit-delta with post-bump counts
maw629
committed
4f47e2e
chore: bump version to 14.1.2
maw629
committed
b45b5eb
Merge pull request #7 from pkg-nec/chore/release-14.1.2
maw629
authored
6b813b0

Commits on Jul 12, 2026

chore: update .gitignore
maw629
committed
b08aad5
deps: bump follow-redirects from 1.14.8 to 1.16.0
maw629
committed
43125d2
deps: bump jsprim from 1.4.1 to 1.4.2 to fix json-schema vulnerabilities
maw629
committed
4b8d61e
deps: bump braces from 3.0.2 to 3.0.3
maw629
committed
c009341
deps: bump minimatch from 3.0.4 to 3.1.4
maw629
committed
60e6144
deps: bump picomatch from 2.3.0 to 2.3.2
maw629
committed
383fa33
deps: bump brace-expansion from 1.1.11 to 1.1.13
maw629
committed
843ad91
deps: bump js-yaml from 3.14.2 to 3.15.0
maw629
committed
ad8abb4
deps: bump word-wrap from 1.2.3 to 1.2.4
maw629
committed
025c068
deps: bump diff from 4.0.2 to 4.0.4
maw629
committed
159555d
chore: bump version to 14.1.3
maw629
committed
f5ca0fb
Merge pull request #8 from pkg-nec/chore/release-14.1.3
maw629
authored
4a1dabf
chore: regenerate package-lock.json (v2 → v3, restore integrity hashes)
maw629
committed
c8e1b67
docs: add 14.1.4 spec (remove unused eslint, upgrade tap 14 to 21)
maw629
committed
60ad72e
docs: add implementation plan for 14.1.4 (remove eslint, upgrade tap)
maw629
committed
007efcf
docs: add 14.1.4 audit-delta doc with baseline snapshot
maw629
committed
1ea4c9c
chore: remove unused eslint dev deps and config
maw629
committed
9269e86
chore: ignore folder .tap/
maw629
committed
625768a
deps: bump tap from ^14.11.0 to ^21.7.4
maw629
committed
6a28544
test: tap ifError -> error

KernelDeimos
authored and
maw629
committed
9bd88df
test: avoid conflicting http servers in 304 test

KernelDeimos
authored and
maw629
committed
fbed496
test: update remaining tap asserts

KernelDeimos
authored and
maw629
committed
b7adbce
test: use terse reporter and allow incomplete coverage

ixth
authored and
maw629
committed
6c23096
ci: bump test workflow Node matrix from 16.x to 20.x
maw629
committed
f604dc6
deps: bump qs from 6.5.2 to 6.5.3
maw629
committed
f439f3a
deps: bump ajv from 6.12.6 to 6.14.0
maw629
committed
2201acc

Commits on Jul 14, 2026

docs: finalize 14.1.4 audit-delta with post-cleanup counts
maw629
committed
19784eb
chore: bump version to 14.1.4
maw629
committed
051da70
Merge pull request #9 from pkg-nec/chore/release-14.1.4
maw629
authored
b2f1abd