Hookified
← Back to Changelog

v3.0.3

Release
August 20, 2026

[email protected] — 2026-08-20

CI and publish hardening plus development tooling upgrades; no changes to published library code.

Documentation

  • add SECURITY.md and DEFENSE_IN_DEPTH.md (880b9b6, #175)
  • record repository lockdown and completed manuals (1d463a6, #195)

Internal

  • add CODEOWNERS for high-risk paths (0752116, #184)
  • bootstrap Aikido Safe Chain for cloud agents (2bc0f26, #185)
  • drop first-party pnpm cooldown exclude (54a7f2a, #186)
  • set pnpm trustPolicy to no-downgrade (af7bf6e, #187)
  • pin all GitHub Actions via actions-up (8374a52, #188)
  • wrap CI installs with Socket Firewall (2a5aeb5, #189)
  • lint GitHub Actions workflows with zizmor (634187d, #190)
  • disable persist-credentials on checkouts (1c27648, #191)
  • disable setup-node cache on publish jobs (fae1dc3, #192)
  • stage npm publishes from packed tarball (84a774d, #193)
  • gate npm stage publish on Aikido scan-release (7a23b9e, #194)
  • remove writr override (59b65d7, #196)
  • upgrade code quality dependencies (bf7b54d, #197)
  • upgrade TypeScript and build tooling (c04da8d, #198)
  • upgrade pnpm (7dffb8a, #199)
  • upgrade tinybench (21cdd8f, #200)

Contributors

  • @jaredwray (18)

Full List of Changes

  • hookified - chore: defense - add SECURITY.md and DEFENSE_IN_DEPTH.md by @jaredwray in #175
  • hookified - chore: defense - add CODEOWNERS for high-risk paths by @jaredwray in #184
  • hookified - chore: defense - bootstrap Aikido Safe Chain for cloud agents by @jaredwray in #185
  • hookified - chore: defense - drop first-party pnpm cooldown exclude by @jaredwray in #186
  • hookified - chore: defense - set pnpm trustPolicy to no-downgrade by @jaredwray in #187
  • hookified - chore: defense - pin all GitHub Actions via actions-up by @jaredwray in #188
  • hookified - chore: defense - wrap CI installs with Socket Firewall by @jaredwray in #189
  • hookified - chore: defense - lint GitHub Actions workflows with zizmor by @jaredwray in #190
  • hookified - chore: defense - disable persist-credentials on checkouts by @jaredwray in #191
  • hookified - chore: defense - disable setup-node cache on publish jobs by @jaredwray in #192
  • hookified - chore: defense - stage npm publishes from packed tarball by @jaredwray in #193
  • hookified - chore: defense - gate npm stage publish on Aikido scan-release by @jaredwray in #194
  • hookified - chore: defense - record repository lockdown and completed manuals by @jaredwray in #195
  • hookified - chore: remove writr override by @jaredwray in #196
  • hookified - chore: upgrade code quality dependencies by @jaredwray in #197
  • hookified - chore: upgrade TypeScript and build tooling by @jaredwray in #198
  • hookified - chore: upgrade pnpm by @jaredwray in #199
  • hookified - chore: upgrade tinybench by @jaredwray in #200

Full diff: https://github.com/jaredwray/hookified/compare/v3.0.2...v3.0.3