Release 0.7.1 (#100)

Author: andrewkoltsov

CHANGELOG.md

@@ -6,6 +6,15 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [0.7.1] - 2026-05-20
+
+### Fixed
+
+- Development dependency lockfile now resolves `brace-expansion` to `5.0.6`,
+  removing the disclosed `CVE-2026-45149` high-severity resource exhaustion
+  advisory from maintainer tooling. Published SDK and CLI runtime dependencies
+  are unchanged.
+
 ## [0.7.0] - 2026-05-18
 
 ### Added

openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.0.3",
   "info": {
     "title": "Librus Synergia API (SDK-supported subset)",
-    "version": "0.7.0",
+    "version": "0.7.1",
     "description": "Best-effort OpenAPI document generated from the SDK's supported child-scoped Synergia GET surface. Authentication starts on portal.librus.pl; this document covers the subsequent bearer-token calls against api.librus.pl/3.0."
   },
   "servers": [

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "librus-sdk",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "TypeScript SDK and CLI for Librus family portal and Gateway API 2.0 flows.",
   "author": "Andrey Koltsov",
   "repository": {