[github-actions]

🤖 I have created a release beep boop

2.0.0 (2026-10-20)

⚠ BREAKING CHANGES

• Drop Node.js 18/20 support, add Node.js 26 (#102)

Features

• Drop Node.js 18/20 support, add Node.js 26 (#102) (f925c76)
• expose Org.accessTokenExpiration from getAuthorization (#182) (55f65fe)

Bug Fixes

• bump shell-quote to 1.12.0 to fix critical Dependabot alert (GHSA-pqg4-j6r4-53mv) (#192) (1b93637)
• force js-yaml resolution to 4.3.2 to fix CPU DoS (CVE-2026-84375) (#179) (a9fe1f0)

Dependency Updates

• bump @babel/core from 7.29.0 to 7.29.7 (#125) (b185972)
• bump @salesforce/core (#114) (adc1fc3)
• bump @salesforce/core in the production-dependencies group (#132) (2858dbb)
• bump @types/chai from 4.3.20 to 5.2.3 (#167) (fb01cc3)
• bump @types/node from 22.19.19 to 25.9.3 (#119) (dac2ddb)
• bump @types/node from 25.9.3 to 26.0.1 (#147) (7e5ed7d)
• bump @types/node from 26.1.2 to 26.2.0 in the dev-dependencies group (#166) (e709557)
• bump actions/checkout from 6 to 7 (#137) (934455c)
• bump actions/github-script from 7 to 9 (#152) (cb8e99a)
• bump actions/setup-java from 5 to 6 (#170) (c0e4da4)
• bump actions/setup-node from 6 to 7 (#151) (9b1f868)
• bump amannn/action-semantic-pull-request from 5 to 6 (#112) (bd57b58)
• bump browserslist from 4.28.1 to 4.28.8 (#172) (a969ed0)
• bump chai from 4.5.0 to 6.2.2 (#136) (e4637a0)
• bump concurrently from 10.0.4 to 10.0.5 in the dev-dependencies group (#169) (6b26640)
• bump concurrently from 9.2.1 to 10.0.3 (#134) (dd85991)
• bump cross-env from 7.0.3 to 10.1.0 (#122) (6ed0441)
• bump csv-parse from 5.6.0 to 6.2.1 (#90) (25536a8)
• bump csv-parse from 6.2.1 to 7.0.0 (#120) (2b9c93d)
• bump csv-parse from 7.0.0 to 7.0.2 (#176) (7100ceb)
• bump fast-copy from 3.0.2 to 3.1.0 (#190) (3dfd9d1)
• bump fast-uri from 3.1.2 to 3.1.4 (#156) (2bf5ec1)
• bump fast-uri from 3.1.4 to 3.1.5 (#162) (45e5e36)
• bump fast-uri from 3.1.5 to 3.1.7 (#173) (e08c789)
• bump fast-uri from 3.1.7 to 3.1.8 (#186) (ec973e1)
• bump form-data from 4.0.5 to 4.0.6 (#124) (70d11c6)
• bump googleapis/release-please-action from 4 to 5 (#109) (3c8864d)
• bump js-yaml to fix high Dependabot alert #79 (GHSA-5p4m-2wfm-xmqj) (#168) (511252b)
• bump linkify-it from 5.0.1 to 5.0.2 (#155) (7c8c95e)
• bump markdown-it from 14.3.0 to 14.3.2 (#185) (61d00f6)
• bump mocha from 11.8.0 to 12.0.3 (#189) (d333297)
• bump nyc from 17.1.0 to 18.0.0 (#91) (16456ed)
• bump picomatch from 2.3.1 to 2.3.2 (#92) (5a68e68)
• bump prettier from 3.9.9 to 3.9.10 in the dev-dependencies group (#193) (8d299c0)
• bump shell-quote, brace-expansion, js-yaml to fix high Dependabot alerts (#163) (4d5f15b)
• bump sinon from 21.0.3 to 22.0.0 (#121) (139ccc8)
• bump the dev-dependencies group across 1 directory with 3 updates (#138) (4d26aa6)
• bump the dev-dependencies group across 1 directory with 3 updates (#178) (fc679e6)
• bump the dev-dependencies group across 1 directory with 3 updates (#187) (ecc7611)
• bump the dev-dependencies group across 1 directory with 7 updates (#101) (cf15b7c)
• bump the dev-dependencies group across 1 directory with 7 updates (#165) (90e422a)
• bump the dev-dependencies group with 2 updates (#171) (e30ccd7)
• bump the dev-dependencies group with 2 updates (#188) (b1063cc)
• bump the dev-dependencies group with 2 updates (#194) (eb290c1)
• bump the dev-dependencies group with 3 updates (#191) (168e2e7)
• bump the production-dependencies group across 1 directory with 2 updates (#100) (bae3ff7)
• bump the production-dependencies group with 3 updates (#118) (d81e7fb)
• bump ts-pattern from 4.3.0 to 5.9.0 (#58) (d17e5e1)
• bump websocket-driver from 0.7.4 to 0.7.5 (#153) (6c12cfc)
• fix CVE-2026-34043 serialize-javascript CPU exhaustion DoS (#117) (0ed5071)
• fix CVE-2026-9277 shell-quote command injection (#116) (b471d19)
• remove CLAUDE.md (#159) (d19a728)

---

This PR was generated with Release Please. See documentation.