OTPLib Files

What's Changed

• fix: override flatted package security alert by @yeojz in https://github.com/yeojz/otplib/pull/820
• fix: override picomatch and yaml package security alerts by @yeojz in https://github.com/yeojz/otplib/pull/822
• refactor(testing): replace custom Deno adapter with @std/expect by @yeojz in https://github.com/yeojz/otplib/pull/821
• fix: override brace-expansion package security alert by @yeojz in https://github.com/yeojz/otplib/pull/824
• chore: update github actions pinned images by @yeojz in https://github.com/yeojz/otplib/pull/823
• Add @otplib/plugin-base32-alt to dependencies by @yeojz in https://github.com/yeojz/otplib/pull/825
• chore: harden supply chain with cooldown and version pinning by @yeojz in https://github.com/yeojz/otplib/pull/826
• refactor(testing): centralize test secrets into shared module by @yeojz in https://github.com/yeojz/otplib/pull/831
• chore(deps): bump the github-actions group with 5 updates by @dependabot[bot] in https://github.com/yeojz/otplib/pull/827
• refactor(testing): rename test secret constants for semantic clarity by @yeojz in https://github.com/yeojz/otplib/pull/832
• chore(deps-dev): bump the dev-dependencies-minor group with 4 updates by @dependabot[bot] in https://github.com/yeojz/otplib/pull/828
• refactor: replace size-limit with native bundle size check by @yeojz in https://github.com/yeojz/otplib/pull/835
• chore(deps-dev): bump vite from 7.3.1 to 8.0.0 by @dependabot[bot] in https://github.com/yeojz/otplib/pull/830
• refactor/docs/unusedImport by @ValeriYanev98 in https://github.com/yeojz/otplib/pull/837
• fix(security): address npm audit vulnerabilities by @yeojz in https://github.com/yeojz/otplib/pull/839
• fix(docker): bump pnpm to 10.30.1 to match packageManager by @yeojz in https://github.com/yeojz/otplib/pull/847
• docs: note short-secret guardrail override for legacy/test secrets by @yeojz in https://github.com/yeojz/otplib/pull/848
• docs(getting-started): clarify when each function runs by @yeojz in https://github.com/yeojz/otplib/pull/846
• chore(deps): bump vite from 5.4.21 to 8.0.10 by @dependabot[bot] in https://github.com/yeojz/otplib/pull/845
• chore(deps-dev): bump the dev-dependencies-patch group across 1 directory with 6 updates by @dependabot[bot] in https://github.com/yeojz/otplib/pull/849
• chore(deps-dev): bump the dev-dependencies-minor group across 1 directory with 6 updates by @dependabot[bot] in https://github.com/yeojz/otplib/pull/841
• docs(otplib): note 16-byte minimum and fix broken secret-handling link by @yeojz in https://github.com/yeojz/otplib/pull/851
• chore(deps-dev): bump @codecov/bundle-analyzer from 1.9.1 to 2.0.1 by @dependabot[bot] in https://github.com/yeojz/otplib/pull/843
• fix(benchmarks): adapt to tinybench v6 TaskResult shape by @yeojz in https://github.com/yeojz/otplib/pull/852
• chore(deps): bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] in https://github.com/yeojz/otplib/pull/844
• chore(deps): bump @noble/hashes and @scure/base to 2.2.0 by @yeojz in https://github.com/yeojz/otplib/pull/853
• chore(deps-dev): bump turbo from 2.9.9 to 2.9.14 by @dependabot[bot] in https://github.com/yeojz/otplib/pull/855
• ci: split security audit into blocking prod and informational full scans by @yeojz in https://github.com/yeojz/otplib/pull/857
• chore(deps-dev): bump vite from 8.0.10 to 8.0.11 by @dependabot[bot] in https://github.com/yeojz/otplib/pull/856
• release(packages): v13.4.1 by @github-actions[bot] in https://github.com/yeojz/otplib/pull/854

New Contributors

• @ValeriYanev98 made their first contribution in https://github.com/yeojz/otplib/pull/837

Full Changelog: https://github.com/yeojz/otplib/compare/v13.4.0...v13.4.1