@toiroakr/lines-db 0.9.2 → 0.10.1

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @toiroakr/lines-db
 
+## 0.10.1
+
+### Patch Changes
+
+- 4587fb2: Remove the `js-yaml: '>=4.2.0'` pnpm override. It forced `@manypkg/get-packages` (via `read-yaml-file@1.1.0`, a transitive dependency of `@changesets/cli`) onto js-yaml 4, whose `yaml.safeLoad` was removed, breaking `pnpm changeset version` and the release workflow. Both js-yaml security advisories the override addressed (quadratic-complexity DoS and prototype pollution in merge handling) are already patched in the 3.x line at 3.15.0, so removing the override lets pnpm resolve that dependency to a safe 3.x release without forcing an incompatible major on affected consumers.
+- 5450665: Remove the optional `valibot` peerDependency. The library only relies on the `@standard-schema/spec` interface at runtime and in its public types, so no schema library needs to be declared as a peer dependency.
+
+## 0.10.0
+
+### Minor Changes
+
+- 332b239: Drop CJS build and replace tsx with amaro
+
+  - ESM-only build. Node.js 22.12+ (VSCode 1.118+) required.
+  - Replace `tsx` runtime dependency with `amaro` for TypeScript schema file loading.
+
+### Patch Changes
+
+- c42865e: Replace commander with politty for the CLI framework. Bundle zod and politty into the CLI binary so they are no longer installed as runtime dependencies for library users.
+
 ## 0.9.2
 
 ### Patch Changes