NodeSecure · github-actions · Jan 16, 2026
diff --git a/.changeset/new-cows-cheer.md b/.changeset/new-cows-cheer.md
diff --git a/.changeset/petite-cloths-hunt.md b/.changeset/petite-cloths-hunt.md
diff --git a/.changeset/ripe-yaks-cheer.md b/.changeset/ripe-yaks-cheer.md
diff --git a/.changeset/sunny-knives-create.md b/.changeset/sunny-knives-create.md
diff --git a/workspaces/mama/CHANGELOG.md b/workspaces/mama/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @nodesecure/mama
 
+## 2.1.1
+
+### Patch Changes
+
+- [#610](https://github.com/NodeSecure/scanner/pull/610) [`5b71ff9`](https://github.com/NodeSecure/scanner/commit/5b71ff9ef8663b03af0ff2950a3532ade428b66d) Thanks [@clemgbld](https://github.com/clemgbld)! - fix(mama): include optional deps in pkg json integrity hash
+
 ## 2.1.0
 
 ### Minor Changes

diff --git a/workspaces/mama/package.json b/workspaces/mama/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@nodesecure/mama",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "Manifest Manager",
   "type": "module",
   "exports": "./dist/index.js",

diff --git a/workspaces/rc/CHANGELOG.md b/workspaces/rc/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @nodesecure/rc
 
+## 5.1.0
+
+### Minor Changes
+
+- [#603](https://github.com/NodeSecure/scanner/pull/603) [`5b237e2`](https://github.com/NodeSecure/scanner/commit/5b237e22ccee184855188ff1a94c9d5bc29920e4) Thanks [@clemgbld](https://github.com/clemgbld)! - feat(tarball): add warning when hostname resolve to a private ip
+
 ## 5.0.2
 
 ### Patch Changes

diff --git a/workspaces/rc/package.json b/workspaces/rc/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@nodesecure/rc",
-  "version": "5.0.2",
+  "version": "5.1.0",
   "description": "NodeSecure runtime configuration",
   "type": "module",
   "main": "./dist/index.js",

diff --git a/workspaces/scanner/CHANGELOG.md b/workspaces/scanner/CHANGELOG.md
@@ -1,5 +1,23 @@
 # @nodesecure/scanner
 
+## 10.0.0
+
+### Major Changes
+
+- [#606](https://github.com/NodeSecure/scanner/pull/606) [`2afafb7`](https://github.com/NodeSecure/scanner/commit/2afafb71835347208ce57ec0ed52041f2e7486bc) Thanks [@fraxken](https://github.com/fraxken)! - refactor: rename cwd() to workingDir()
+
+### Minor Changes
+
+- [#603](https://github.com/NodeSecure/scanner/pull/603) [`5b237e2`](https://github.com/NodeSecure/scanner/commit/5b237e22ccee184855188ff1a94c9d5bc29920e4) Thanks [@clemgbld](https://github.com/clemgbld)! - feat(tarball): add warning when hostname resolve to a private ip
+
+### Patch Changes
+
+- Updated dependencies [[`5b71ff9`](https://github.com/NodeSecure/scanner/commit/5b71ff9ef8663b03af0ff2950a3532ade428b66d), [`e013b49`](https://github.com/NodeSecure/scanner/commit/e013b4907c8f7f4046ecbf079ae529011b17c597), [`5b237e2`](https://github.com/NodeSecure/scanner/commit/5b237e22ccee184855188ff1a94c9d5bc29920e4)]:
+  - @nodesecure/mama@2.1.1
+  - @nodesecure/tarball@3.1.0
+  - @nodesecure/tree-walker@2.2.0
+  - @nodesecure/rc@5.1.0
+
 ## 9.0.0
 
 ### Major Changes

diff --git a/workspaces/scanner/package.json b/workspaces/scanner/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@nodesecure/scanner",
-  "version": "9.0.0",
+  "version": "10.0.0",
   "description": "A package API to run a static analysis of your module's dependencies.",
   "type": "module",
   "exports": {
@@ -69,12 +69,12 @@
     "@nodesecure/flags": "^3.0.3",
     "@nodesecure/i18n": "^4.0.2",
     "@nodesecure/js-x-ray": "11.2.0",
-    "@nodesecure/mama": "^2.1.0",
+    "@nodesecure/mama": "^2.1.1",
     "@nodesecure/npm-registry-sdk": "^4.4.0",
     "@nodesecure/npm-types": "^1.3.0",
-    "@nodesecure/rc": "^5.0.2",
-    "@nodesecure/tarball": "^3.0.0",
-    "@nodesecure/tree-walker": "^2.1.0",
+    "@nodesecure/rc": "^5.1.0",
+    "@nodesecure/tarball": "^3.1.0",
+    "@nodesecure/tree-walker": "^2.2.0",
     "@nodesecure/utils": "^2.3.0",
     "@nodesecure/vulnera": "^2.0.1",
     "@openally/mutex": "^2.0.0",

diff --git a/workspaces/tarball/CHANGELOG.md b/workspaces/tarball/CHANGELOG.md
@@ -1,5 +1,18 @@
 # @nodesecure/tarball
 
+## 3.1.0
+
+### Minor Changes
+
+- [#607](https://github.com/NodeSecure/scanner/pull/607) [`e013b49`](https://github.com/NodeSecure/scanner/commit/e013b4907c8f7f4046ecbf079ae529011b17c597) Thanks [@clemgbld](https://github.com/clemgbld)! - fix(tarball): fix npm tarball tests on windows by normalizing paths
+
+- [#603](https://github.com/NodeSecure/scanner/pull/603) [`5b237e2`](https://github.com/NodeSecure/scanner/commit/5b237e22ccee184855188ff1a94c9d5bc29920e4) Thanks [@clemgbld](https://github.com/clemgbld)! - feat(tarball): add warning when hostname resolve to a private ip
+
+### Patch Changes
+
+- Updated dependencies [[`5b71ff9`](https://github.com/NodeSecure/scanner/commit/5b71ff9ef8663b03af0ff2950a3532ade428b66d)]:
+  - @nodesecure/mama@2.1.1
+
 ## 3.0.0
 
 ### Major Changes

diff --git a/workspaces/tarball/package.json b/workspaces/tarball/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@nodesecure/tarball",
-  "version": "3.0.0",
+  "version": "3.1.0",
   "description": "NodeSecure tarball scanner",
   "type": "module",
   "exports": {
@@ -48,7 +48,7 @@
     "@nodesecure/conformance": "^1.2.1",
     "@nodesecure/fs-walk": "^2.0.0",
     "@nodesecure/js-x-ray": "11.2.0",
-    "@nodesecure/mama": "^2.1.0",
+    "@nodesecure/mama": "^2.1.1",
     "@nodesecure/npm-types": "^1.2.0",
     "@nodesecure/utils": "^2.3.0",
     "ipaddr.js": "2.3.0",

diff --git a/workspaces/tree-walker/CHANGELOG.md b/workspaces/tree-walker/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @nodesecure/tree-walker
 
+## 2.2.0
+
+### Minor Changes
+
+- [#603](https://github.com/NodeSecure/scanner/pull/603) [`5b237e2`](https://github.com/NodeSecure/scanner/commit/5b237e22ccee184855188ff1a94c9d5bc29920e4) Thanks [@clemgbld](https://github.com/clemgbld)! - feat(tarball): add warning when hostname resolve to a private ip
+
 ## 2.1.0
 
 ### Minor Changes

diff --git a/workspaces/tree-walker/package.json b/workspaces/tree-walker/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@nodesecure/tree-walker",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "NodeSecure tree walker",
   "type": "module",
   "exports": "./dist/index.js",