CI and publish hardening plus development tooling upgrades; no changes to published library code.

• add SECURITY.md and DEFENSE_IN_DEPTH.md (880b9b6, #175)

• record repository lockdown and completed manuals (1d463a6, #195)

• add CODEOWNERS for high-risk paths (0752116, #184)

• bootstrap Aikido Safe Chain for cloud agents (2bc0f26, #185)

• drop first-party pnpm cooldown exclude (54a7f2a, #186)

• set pnpm trustPolicy to no-downgrade (af7bf6e, #187)

Development dependency updates only; no changes to published code.

• update @biomejs/biome, vitest, @vitest/coverage-v8, docula, tsx, @types/node to latest (a3e53e4, #173)

• update @types/node to 26.1.1 (major) (c6b470b, #173)

• @jaredwray (2)

• chore: update @biomejs/biome, vitest, @vitest/coverage-v8, docula, tsx to latest and @types/node to 26.1.1 (major) by @jaredwray in #173

Full diff:...

Fixes once-listener/hook removal-by-original-reference leaks and emit mid-mutation safety.

• remove once listeners/hooks when called with the original reference (45a81bc, #168)

• guard once-wrapper matching against undefined targets (7f0a45e, #168)

• prefer exact reference match over once-wrapper when removing (c0ca435, #168)

• iterate a snapshot of listeners in emit to survive mid-emit mutation (2c4c622, #168)

• remove Node.js version requirement from features list (e14c890, #166)

Upgrade all devDependencies, CI workflows, and add engines.node >=22.18.0.

• upgrade code quality dependencies (38713d4, #158)
• add allowBuilds for esbuild/unrs-resolver (74fe3d0, #158)
• upgrade codeql workflow actions (bbd6f7d, #158)
• upgrade TypeScript and build tooling (4912fdb, #159)
• drop Node 20, require Node >=22.18.0 (1f19313, #159)
• upgrade GitHub Actions (93fb7ff, #160)
• upgrade docula (735a0e3, #161)

• chore: upgrade biome, vitest, docula, hookable, typescript to latest by @jaredwray in https://github.com/jaredwray/hookified/pull/155
• chore: migrating to tsdown from tsup by @jaredwray in https://github.com/jaredwray/hookified/pull/156
• feat: adding ParallelHook by @jaredwray in https://github.com/jaredwray/hookified/pull/157

Full Changelog:...

• chore: upgrading biome, vitest, and types by @jaredwray in https://github.com/jaredwray/hookified/pull/151
• chore: upgrading hookable and emittery by @jaredwray in https://github.com/jaredwray/hookified/pull/152
• chore: upgrading docula by @jaredwray in https://github.com/jaredwray/hookified/pull/153

Full Changelog:...

• feat: support (event, handler) signature in onHook by @jaredwray in https://github.com/jaredwray/hookified/pull/150

Full Changelog: https://github.com/jaredwray/hookified/compare/v2.0.1...v2.1.0

• feat: adding more performance to event emitter by @jaredwray in https://github.com/jaredwray/hookified/pull/148
• feat: optimizing for single entry and argument by @jaredwray in https://github.com/jaredwray/hookified/pull/149

Full Changelog:...

• fix: type issues with index.test.ts by @jaredwray in https://github.com/jaredwray/hookified/pull/129
• chore: upgrading pino to 10.3.1 by @jaredwray in https://github.com/jaredwray/hookified/pull/130
• chore: upgrading dev tools to latest such as biome, types, and docula by @jaredwray in https://github.com/jaredwray/hookified/pull/131
• feat: (breaking) moving logger to eventLogger to not have conflicts by @jaredwray in https://github.com/jaredwray/hookified/pull/132

• feat: adding Agents.md by @jaredwray in https://github.com/jaredwray/hookified/pull/124
• chore: upgrading vitest to 4.0.18 by @jaredwray in https://github.com/jaredwray/hookified/pull/125
• chore: upgrading eventemitter3 to 5.0.4 by @jaredwray in https://github.com/jaredwray/hookified/pull/126
• chore: upgrading pino to 10.3.0 by @jaredwray in https://github.com/jaredwray/hookified/pull/127

• chore: upgrading hookable to 6.0.1 by @jaredwray in https://github.com/jaredwray/hookified/pull/121
• feat: adding in hookSync function by @jaredwray in https://github.com/jaredwray/hookified/pull/122
• feat: updating to use HookEntry as core by @jaredwray in https://github.com/jaredwray/hookified/pull/123

Full Changelog:...

• fix: getting exports to work correctly by @jaredwray in https://github.com/jaredwray/hookified/pull/113
• chore: moving to pinned modules for security by @jaredwray in https://github.com/jaredwray/hookified/pull/114
• chore: upgrading @biomejs/biome to 2.3.8 by @jaredwray in https://github.com/jaredwray/hookified/pull/115
• chore: upgrading vitest to 4.0.15 by @jaredwray in https://github.com/jaredwray/hookified/pull/116

• chore: upgrading vitest to 4.0.8 by @jaredwray in https://github.com/jaredwray/hookified/pull/105
• chore: upgrading tinybench to 5.1.0 by @jaredwray in https://github.com/jaredwray/hookified/pull/106
• chore: upgrading @biomejs/biome to 2.3.5 by @jaredwray in https://github.com/jaredwray/hookified/pull/107
• chore: upgrading pino to 10.1.0 by @jaredwray in https://github.com/jaredwray/hookified/pull/108

• chore: removing minify as it causes debugging issues by @jaredwray in https://github.com/jaredwray/hookified/pull/100
• chore: upgrading typescript to 5.9.3 by @jaredwray in https://github.com/jaredwray/hookified/pull/101
• chore: upgrading pino to 10.0.0 by @jaredwray in https://github.com/jaredwray/hookified/pull/102
• chore: upgrading docula to 0.30.0 by @jaredwray in https://github.com/jaredwray/hookified/pull/103

• doc: updating the benchmarks by @jaredwray in https://github.com/jaredwray/hookified/pull/89
• chore: fixing biome and readme by @jaredwray in https://github.com/jaredwray/hookified/pull/90
• chore: biome error on warnings by @jaredwray in https://github.com/jaredwray/hookified/pull/91
• feat: adding enforceBeforeAfter option by @jaredwray in https://github.com/jaredwray/hookified/pull/92

• feat - migrating from xo to biome by @jaredwray in https://github.com/jaredwray/hookified/pull/77
• chore: upgrading typescript to 5.9.2 by @jaredwray in https://github.com/jaredwray/hookified/pull/78
• chore: removing eslint comments by @jaredwray in https://github.com/jaredwray/hookified/pull/79
• fix: adding in lcov for coverage reporting by @jaredwray in https://github.com/jaredwray/hookified/pull/80

• chore: upgrading xo to 1.2.1 by @jaredwray in https://github.com/jaredwray/hookified/pull/72
• chore: upgrading docula to 0.13.1 by @jaredwray in https://github.com/jaredwray/hookified/pull/73
• fix: updating readme with better wording around benchmarks by @jaredwray in https://github.com/jaredwray/hookified/pull/74
• feat: adding onHookEntry by @jaredwray in https://github.com/jaredwray/hookified/pull/75

• chore: upgrading xo to 1.1.1 by @jaredwray in https://github.com/jaredwray/hookified/pull/65
• chore: upgrading vitest to 3.2.4 by @jaredwray in https://github.com/jaredwray/hookified/pull/66
• chore: upgrading tsx to 4.20.3 by @jaredwray in https://github.com/jaredwray/hookified/pull/67
• chore: upgrading docula to 0.13.0 by @jaredwray in https://github.com/jaredwray/hookified/pull/68
• chore: upgrading emittery to 1.2.0 by @jaredwray in https://github.com/jaredwray/hookified/pull/69

• chore: upgrading xo to 1.0.5 by @jaredwray in https://github.com/jaredwray/hookified/pull/59
• chore: upgrading vitest to 3.1.4 by @jaredwray in https://github.com/jaredwray/hookified/pull/60
• chore: upgrading tsup to 8.5.0 by @jaredwray in https://github.com/jaredwray/hookified/pull/61
• chore: upgrading pino to 9.7.0 by @jaredwray in https://github.com/jaredwray/hookified/pull/62
• chore: upgrading docula to 0.12.2 by @jaredwray in https://github.com/jaredwray/hookified/pull/63

Now you can add and remove multiple events and hooks with these new functions! 🎉

• chore: upgrading vitest to 3.1.3 by @jaredwray in https://github.com/jaredwray/hookified/pull/54
• chore: upgrading docula to 0.11.1 by @jaredwray in https://github.com/jaredwray/hookified/pull/55
• chore: upgrading tsx to 4.19.4 by @jaredwray in https://github.com/jaredwray/hookified/pull/56
• fix: adding in permissions to github actions by @jaredwray in https://github.com/jaredwray/hookified/pull/57