⚠️ Security Warning

Fix for GHSA-7p8r-x3mc-p8w7

What's Changed

• ci: pin actions to commit-hash by @Fdawgs in #189
• chore: bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in #190
• docs: clarify security standards scope by @mcollina in #191
• ci: add ossf-scorecard workflow by @Fdawgs in #193
• ci(ossf-scorecard): add missing extension by @Fdawgs in #194

Full Changelog: v4.1.1...v4.1.2

⚠️ Security Warning

Fix for GHSA-7p8r-x3mc-p8w7

Full Changelog: v3.1.4...v3.1.5

⚠️ Security Warning

Fix for GHSA-7p8r-x3mc-p8w7

Full Changelog: v2.4.3...v2.4.4

⚠️ Security Release

Fix for GHSA-v2hh-gcrm-f6hx

Full Changelog: v3.1.3...v3.1.4

⚠️ Security Release

Fix for GHSA-v2hh-gcrm-f6hx

Full Changelog: v2.4.2...v2.3.4

⚠️ Security Release

Fix for GHSA-v2hh-gcrm-f6hx

Full Changelog: v4.1.0...v4.1.1

What's Changed

• fix: backport GHSA-4c8g-83qw-93j6 IDN host canonicalisation to v2.x by @mcollina in #188

Full Changelog: v2.4.1...v2.4.2

What's Changed

• fix: skip nonSimpleDomain when it is an IP by @Uzlopak in #87
• feat: improve stringToHexStripped by @Uzlopak in #88
• add uri-js tests by @Uzlopak in #86
• fix: backport GHSA-q3j6-qgpj-74h6 and GHSA-v39h-62p7-jpjc to v2.x by @mcollina in #187

Full Changelog: v2.4.0...v2.4.1

What's Changed

• fix: normalize percent-encoding in query and fragment (RFC 3986 §6.2.2) by @spokodev in #183
• fix: preserve trailing empty path segment in removeDotSegments (RFC 3986 §5.2.4) by @spokodev in #185

Full Changelog: v4.0.1...v4.1.0

⚠️ Security Release

• Fixes: GHSA-4c8g-83qw-93j6

What's Changed

• fix: normalize scheme to lowercase (RFC 3986 §6.2.2.1) by @spokodev in #182
• chore: update depedabot setting by @climba03003 in #179
• chore: replace http with https in urls by @Fdawgs in #184
• chore: bump actions/checkout from 6 to 7 by @dependabot[bot] in #186

New Contributors

• @spokodev made their first contribution in #182
• @climba03003 made their first contribution in #179

Full Changelog: v4.0.0...v4.0.1