v3.1.0

What's Changed

• fix: use npx/pnpm dlx @socketsecurity/socket-patch and add dependencies script by Mikola Lysenko (@mikolalysenko) in #63
• chore(deps): Bump quinn-proto from 0.11.13 to 0.11.14 by Dependabot (@dependabot)[bot] in #40
• chore(deps): Bump rand from 0.9.2 to 0.9.4 by Dependabot (@dependabot)[bot] in #65
• chore(deps): Bump rustls-webpki from 0.103.9 to 0.103.13 by Dependabot (@dependabot)[bot] in #66
• feat(patch): add package- and diff-level patch sources by Mikola Lysenko (@mikolalysenko) in #67
• test(cli): foundation for CLI-contract unit-test campaign by Mikola Lysenko (@mikolalysenko) in #68
• feat(scan): unified auto-update engine — --sync, --prune, --dry-run (v3.0) by Mikola Lysenko (@mikolalysenko) in #79
• feat(apply): safety hardening — atomicity, locking, pnpm CoW, sidecars, Maven gate by Mikola Lysenko (@mikolalysenko) in #80
• feat(vex): OpenVEX 0.2.0 attestation generator by Mikola Lysenko (@mikolalysenko) in #81
• feat: telemetry coverage for read-side commands + paid-tier fallback (3.1.0) by Mikola Lysenko (@mikolalysenko) in #82
• update release workflow by Mikola Lysenko (@mikolalysenko) in #84
• ci(release): tag after build + fix rustup toolchain setup by Mikola Lysenko (@mikolalysenko) in #85
• ci(release): pin newer cross NDK image for aarch64-linux-android by Mikola Lysenko (@mikolalysenko) in #86

New Contributors

• Dependabot (@dependabot)[bot] made their first contribution in #40

Full Changelog: v2.1.4...v3.1.0