Merge branch 'main' into fix/protocol-whitespace

SECURITY.md

@@ -0,0 +1,9 @@
+# Security Policy
+
+## ⚠️ Reporting a Vulnerability
+
+To report a vulnerability, please send an email to [security+ufo@unjs.io](mailto:security+ufo@unjs.io) or submit it for a bounty via [Huntr](https://huntr.dev/bounties/disclose/?target=https://github.com/unjs/ufo).
+
+All security vulnerabilities will be promptly verified and addressed.
+
+We recommend to regulary upgrade and publish with the latest versions of used packages and sub-dependencies by maintaining lock files (`yarn.lock`, `package-lock.json` and `pnpm-lock.yaml`) in order to ensure your application remains as secure as possible.

package.json

@@ -29,14 +29,14 @@
     "test": "pnpm lint && vitest --run typecheck && vitest run"
   },
   "devDependencies": {
-    "@types/node": "^20.5.1",
+    "@types/node": "^20.5.4",
     "@vitest/coverage-v8": "^0.34.2",
-    "changelogen": "^0.5.4",
+    "changelogen": "^0.5.5",
     "eslint": "^8.47.0",
     "eslint-config-unjs": "^0.2.1",
     "prettier": "^3.0.2",
     "typescript": "^5.1.6",
-    "unbuild": "^1.2.1",
+    "unbuild": "^2.0.0",
     "vitest": "^0.34.2"
   },
   "packageManager": "pnpm@8.6.12"