v5.1.0

Release

August 26, 2026

[email protected] — 2026-08-26

Fix Windows path handling and ship dependency, tooling, and supply-chain hardening updates.

use Node path APIs for directory creation, extension detection, and template lookup so Windows paths work (#387)

upgrade dev dependencies, including TypeScript 7 and GitHub Actions majors (breaking for maintainers, not the public API) (#388)
upgrade runtime dependencies: cacheable, writr, fumanchu, hookified, liquidjs (#389)
upgrade pnpm packageManager pin and docula (#390)
scaffold security docs (#392)
add CODEOWNERS and Safe Chain (#399)
freeze the lockfile and tighten CI permissions (#400)
pin GitHub Actions and harden checkout (#401)
add Socket Firewall and Corepack to CI (#402)
add zizmor workflow lint (#403)
stage npm publish and add the Aikido release gate (#404)
record repository lockdown (#405)
upgrade code quality dependencies (#406)
upgrade TypeScript and build tooling to current majors (#407)
upgrade pnpm (#408)
upgrade @jaredwray/fumanchu (#409)
upgrade hookified (#410)
upgrade writr (#411)
remove the undici override (#412)
upgrade liquidjs (#413)

fix(win32): fix win32 path support by @capitnflam in #387
root - chore: upgrade dev dependencies (breaking) by @jaredwray in #388
root - chore: upgrade runtime dependencies by @jaredwray in #389
root - chore: upgrade pnpm and docula (deferrals from #388) by @jaredwray in #390
ecto - chore: defense - scaffold security docs by @jaredwray in #392
ecto - chore: defense - add CODEOWNERS and Safe Chain by @jaredwray in #399
ecto - chore: defense - freeze lockfile and least-privilege CI by @jaredwray in #400
ecto - chore: defense - pin actions and checkout hygiene by @jaredwray in #401
ecto - chore: defense - add Socket Firewall and Corepack by @jaredwray in #402
ecto - chore: defense - add zizmor workflow lint by @jaredwray in #403
ecto - chore: defense - stage publish and Aikido release gate by @jaredwray in #404
ecto - chore: defense - record repository lockdown by @jaredwray in #405
ecto - chore: upgrade code quality dependencies by @jaredwray in #406
ecto - chore: upgrade TypeScript and build tooling (breaking) by @jaredwray in #407
ecto - chore: upgrade pnpm by @jaredwray in #408
ecto - chore: upgrade @jaredwray/fumanchu by @jaredwray in #409
ecto - chore: upgrade hookified by @jaredwray in #410
ecto - chore: upgrade writr by @jaredwray in #411
ecto - chore: remove undici override by @jaredwray in #412
ecto - chore: upgrade liquidjs by @jaredwray in #413

Full diff: https://github.com/jaredwray/ecto/compare/v5.0.0...v5.0.1