Release v1.6.4 with dependency security fixes

PLAN.md

@@ -303,7 +303,7 @@ and release validation workflows use `npm ci --ignore-scripts`. These measures m
 toolchain reproducible without adding a runtime dependency to the SDK.
 
 Release automation validates the package version against the selected Git tag; it does not invent
-or increment versions by itself. The current release is `1.6.3`.
+or increment versions by itself. The current release is `1.6.4`.
 
 ---
 

README.md

@@ -129,8 +129,8 @@ The `unpkg` and `jsdelivr` fields point at the IIFE bundle, so a CDN needs no in
 
 ```html
 <script src="https://unpkg.com/@sythos/js_barcode_universal"></script>
-<script src="https://unpkg.com/@sythos/js_barcode_universal@1.6.3"></script>
-<script src="https://cdn.jsdelivr.net/npm/@sythos/js_barcode_universal@1.6.3"></script>
+<script src="https://unpkg.com/@sythos/js_barcode_universal@1.6.4"></script>
+<script src="https://cdn.jsdelivr.net/npm/@sythos/js_barcode_universal@1.6.4"></script>
 ```
 
 Pin the version for anything you ship; the unpinned form resolves to `latest` and will move under
@@ -1336,7 +1336,7 @@ attestation confirms build provenance; it is not an ISO barcode-conformance cert
 clearance, or a guarantee that the implementation is vulnerability-free.
 
 Release automation validates the package version against the selected Git tag; it does not invent
-or increment versions by itself. The current release is `1.6.3`.
+or increment versions by itself. The current release is `1.6.4`.
 
 ---
 

SECURITY.md

@@ -9,7 +9,7 @@ consumer application, please treat it as security-sensitive.
 
 | Release line | Security support | Notes |
 | --- | --- | --- |
-| Latest `1.5.x` stable release | Supported | Upgrade to the latest patch before reporting a regression. |
+| Latest `1.6.x` stable release | Supported | Upgrade to the latest patch before reporting a regression. |
 | `main` | Supported for triage | Development changes may move quickly, but security reports are welcome. |
 | Older release lines | Not supported | Please reproduce on the latest stable release first. |
 

llms.txt

@@ -8,7 +8,7 @@
 - Project: Sythos Barcode Universal
 - Publisher and original author: Sythos — https://www.sythos.net
 - npm package: `@sythos/js_barcode_universal`
-- Current repository release: `1.6.3`
+- Current repository release: `1.6.4`
 - License: MIT; copyright and attribution: Sythos
 - Runtime dependencies: none
 - Development tooling: TypeScript is a development-only dependency

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sythos/js_barcode_universal",
-  "version": "1.6.3",
+  "version": "1.6.4",
   "description": "Open-source MIT-licensed JavaScript/TypeScript barcode generator and barcode reader SDK with zero runtime dependencies for 1D and 2D barcodes in browsers, Web Workers and Node.js: QR, Data Matrix, Aztec, PDF417, GS1, EAN and more.",
   "author": {
     "name": "Sythos",

src/index.d.ts

@@ -465,4 +465,4 @@ export declare function decodeStrict(image: {
     height: number;
 }, options?: object): DecodeResult;
 /** Library version, matching package.json. */
-export declare const VERSION = "1.5.15";
+export declare const VERSION = "1.6.4";

src/index.js

@@ -1131,4 +1131,4 @@ export function decodeStrict(image, options) {
     return results[0];
 }
 /** Library version, matching package.json. */
-export const VERSION = '1.6.3';
+export const VERSION = '1.6.4';

src/ts/index.d.ts

@@ -404,4 +404,4 @@ export declare function decodeStrict(image: {
     height: number;
 }, options?: object): DecodeResult;
 /** Library version, matching package.json. */
-export declare const VERSION = "1.5.15";
+export declare const VERSION = "1.6.4";

src/ts/index.ts

@@ -1157,4 +1157,4 @@ export function decodeStrict(image, options) {
 }
 
 /** Library version, matching package.json. */
-export const VERSION = '1.6.3';
+export const VERSION = '1.6.4';