Patch release bumping runtime dependencies writr, hookified, and @jaredwray/fumanchu.

• upgrade writr (#425)

• upgrade hookified (#424)

• upgrade @jaredwray/fumanchu (#423)

• upgrade wrangler (#422)

• pin Dev Container image (#421)

• upgrade GitHub Actions (#420)

• upgrade pnpm (#419)

• upgrade TypeScript and build tooling (#418)

• upgrade code quality dependencies (#417)

• sync defense-in-depth files from agentic (#416)

• @jaredwray (10)

Fix Windows path handling and ship dependency, tooling, and supply-chain hardening updates.

• use Node path APIs for directory creation, extension detection, and template lookup so Windows paths work (#387)

• upgrade dev dependencies, including TypeScript 7 and GitHub Actions majors (breaking for maintainers, not the public API) (#388)

• upgrade runtime dependencies: cacheable, writr, fumanchu, hookified, liquidjs (#389)

• upgrade pnpm packageManager pin and docula (#390)

5.0.1 that had to be removed by npm. Refer to 5.1.0

Major release: raises the minimum Node.js to 22.18.0 and upgrades the EJS and hookified engines across major versions.

• Minimum Node.js is now >=22.18.0. Driven by the hookified v3 upgrade; engines.node now declares the floor so older runtimes are warned at install time. (d628ef2, 5f72cd3, #385) Migration: upgrade your runtime to Node.js 22.18.0 or newer. Node 20 reached end-of-life in April 2026.

Dependency upgrades, supply chain hardening, and OIDC publishing migration.

• migrate release workflow to OIDC with provenance (904bc8e, #370)
• remove pnpm cache from release workflow (62e5a74, #370)
• remove registry-url from setup-node for pure OIDC publishing (658e90e, #370)
• upgrade code quality dependencies (d870ee6, #371)
• upgrade TypeScript and build tooling (b1cc58d, #372)
• upgrade GitHub Actions (49f6e40, #373)
• upgrade docula (9f4f7aa, #374)

Security patch updating liquidjs dependency to address a vulnerability.

• update liquidjs to ^10.27.0 to address security vulnerability (6435140, #368)

• Update pnpm-workspace.yaml (de500e2)

• @jaredwray (2)

• fix: update liquidjs to ^10.27.0 for security patch by @jaredwray in #368

• Update pnpm-workspace.yaml by @jaredwray in de500e2

Full diff:...

• ecto - chore: upgrade pnpm to v11 by @jaredwray in https://github.com/jaredwray/ecto/pull/353
• ecto - chore: upgrade docula by @jaredwray in https://github.com/jaredwray/ecto/pull/354
• ecto - chore: upgrade writr by @jaredwray in https://github.com/jaredwray/ecto/pull/360
• ecto - chore: upgrade liquidjs by @jaredwray in https://github.com/jaredwray/ecto/pull/359
• ecto - chore: upgrade ejs by @jaredwray in https://github.com/jaredwray/ecto/pull/357

• chore: upgrading vitest, types, faker, and biome by @jaredwray in https://github.com/jaredwray/ecto/pull/338
• chore: upgrading @jaredwray/fumanchu by @jaredwray in https://github.com/jaredwray/ecto/pull/339
• chore: upgading cacheable by @jaredwray in https://github.com/jaredwray/ecto/pull/340
• chore: upgrading pug by @jaredwray in https://github.com/jaredwray/ecto/pull/341
• chore: upgrading ejs by @jaredwray in https://github.com/jaredwray/ecto/pull/343

• chore: upgrading biome, faker-js, types, and rimraf to latest by @jaredwray in https://github.com/jaredwray/ecto/pull/334
• chore: upgrading cacheable to 2.3.3 by @jaredwray in https://github.com/jaredwray/ecto/pull/335
• chore: upgrading writr to 5.0.4 by @jaredwray in https://github.com/jaredwray/ecto/pull/336

• fix: changing the default import for ejs by @jaredwray in https://github.com/jaredwray/ecto/pull/333

Full Changelog: https://github.com/jaredwray/ecto/compare/v4.8.1...v4.8.2

• feat: adding in Agents.md by @jaredwray in https://github.com/jaredwray/ecto/pull/324
• chore: upgrading vitest to 4.0.18 and dev tools by @jaredwray in https://github.com/jaredwray/ecto/pull/325
• chore: upgrading docula to 0.40.0 by @jaredwray in https://github.com/jaredwray/ecto/pull/326
• chore: upgrading hookified to 1.15.0 by @jaredwray in https://github.com/jaredwray/ecto/pull/327

• chore: setting the minimum release age by @jaredwray in https://github.com/jaredwray/ecto/pull/317
• chore: upgrading vitest to 4.0.16 by @jaredwray in https://github.com/jaredwray/ecto/pull/318
• chore: upgrading hookified to 1.14.0 by @jaredwray in https://github.com/jaredwray/ecto/pull/319
• chore: upgrading cacheable to 2.3.1 by @jaredwray in https://github.com/jaredwray/ecto/pull/320
• chore: upgrading writr to 5.0.2 by @jaredwray in https://github.com/jaredwray/ecto/pull/321

• chore: upgrading vitest and @biomejs/biome to latest by @jaredwray in https://github.com/jaredwray/ecto/pull/310
• chore: upgrading @jaredwray/fumanchu to 4.4.0 by @jaredwray in https://github.com/jaredwray/ecto/pull/311
• chore: upgrading cacheable to 2.2.0 by @jaredwray in https://github.com/jaredwray/ecto/pull/312
• chore: upgrading docula to 0.31.1 by @jaredwray in https://github.com/jaredwray/ecto/pull/313

• chore: upgrading vitest to 4.0.3 by @jaredwray in https://github.com/jaredwray/ecto/pull/300
• chore: removing webpack as not needed by @jaredwray in https://github.com/jaredwray/ecto/pull/301
• chore: upgrading dev dependencies to latest by @jaredwray in https://github.com/jaredwray/ecto/pull/302
• chore: upgrading writr to 4.5.1 by @jaredwray in https://github.com/jaredwray/ecto/pull/303
• chore: upgrading liquidjs to 10.23.0 by @jaredwray in https://github.com/jaredwray/ecto/pull/304

• fix: making tests be a bit more robust with async testing by @jaredwray in https://github.com/jaredwray/ecto/pull/296
• chore: upgrading docula to 0.30.0 by @jaredwray in https://github.com/jaredwray/ecto/pull/297
• feat: updating to better jsDocs by @jaredwray in https://github.com/jaredwray/ecto/pull/298

• chore: upgrading @jaredwray/fumanchu to 4.3.0 by @jaredwray in https://github.com/jaredwray/ecto/pull/295

Full Changelog: https://github.com/jaredwray/ecto/compare/v4.5.0...v4.5.1

• Fix: add Handlebars renderFromFile partial tests and auto root inference by @jaredwray in https://github.com/jaredwray/ecto/pull/293
• chore: upgrading @jaredwray/fumanchu to 4.1.0 by @jaredwray in https://github.com/jaredwray/ecto/pull/294

Full Changelog:...

• chore: upgrading writr to 4.5.0 by @jaredwray in https://github.com/jaredwray/ecto/pull/289
• chore: upgrading cacheable to 2.0.1 by @jaredwray in https://github.com/jaredwray/ecto/pull/290
• chore: upgrading hookified to 1.12.1 by @jaredwray in https://github.com/jaredwray/ecto/pull/291
• chore: upgrading @jaredwray/fumanchu to 4.0.3 by @jaredwray in https://github.com/jaredwray/ecto/pull/292

Full Changelog:...

• chore: upgrading @jaredwray/fumanchu to 4.0.1 by @jaredwray in https://github.com/jaredwray/ecto/pull/286
• feat: add in better test coverage by @jaredwray in https://github.com/jaredwray/ecto/pull/287
• feat: migrating to biome by @jaredwray in https://github.com/jaredwray/ecto/pull/288

Full Changelog:...

• fix: respect disabled cache options by @jaredwray in https://github.com/jaredwray/ecto/pull/279
• refactor: use single underscore for privates by @jaredwray in https://github.com/jaredwray/ecto/pull/280
• chore: upgrading typescript to 5.9.2 by @jaredwray in https://github.com/jaredwray/ecto/pull/281
• chore: upgrading cacheable to 1.10.4 by @jaredwray in https://github.com/jaredwray/ecto/pull/282