chore: update repo references after config -> tools rename

.github/workflows/ci-reusable.yml

@@ -7,7 +7,7 @@
 #     pull_request: { branches: [main] }
 #   jobs:
 #     ci:
-#       uses: btravstack/config/.github/workflows/ci-reusable.yml@workflows-v1
+#       uses: btravstack/tools/.github/workflows/ci-reusable.yml@workflows-v1
 #       with:
 #         changeset: true          # contract repos that enforce changesets
 #         integration-tests: true  # run the integration suite

.github/workflows/release-reusable.yml

@@ -10,7 +10,7 @@
 #   jobs:
 #     release:
 #       if: ${{ github.event.workflow_run.conclusion == 'success' }}
-#       uses: btravstack/config/.github/workflows/release-reusable.yml@main
+#       uses: btravstack/tools/.github/workflows/release-reusable.yml@main
 #       secrets:
 #         RELEASE_PAT: ${{ secrets.RELEASE_PAT }}
 #

README.md

@@ -1,4 +1,4 @@
-# @btravstack/config
+# @btravstack/tools
 
 Shared configuration packages for [btravstack](https://github.com/btravstack)
 repositories. Each repo used to hand-copy a near-identical `tools/tsconfig`,
@@ -102,7 +102,7 @@ on:
   pull_request: { branches: [main] }
 jobs:
   ci:
-    uses: btravstack/config/.github/workflows/ci-reusable.yml@main
+    uses: btravstack/tools/.github/workflows/ci-reusable.yml@main
     with:
       changeset: true # contract repos that enforce changesets
 ```
@@ -115,7 +115,7 @@ on:
 jobs:
   release:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
-    uses: btravstack/config/.github/workflows/release-reusable.yml@main
+    uses: btravstack/tools/.github/workflows/release-reusable.yml@main
     secrets:
       RELEASE_PAT: ${{ secrets.RELEASE_PAT }}
 ```

package.json

@@ -1,12 +1,12 @@
 {
-  "name": "@btravstack/config-root",
+  "name": "@btravstack/tools-root",
   "private": true,
   "description": "Shared configuration packages for btravstack repositories",
   "license": "MIT",
   "author": "Benoit TRAVERS <benoit.travers.fr@gmail.com>",
   "repository": {
     "type": "git",
-    "url": "https://github.com/btravstack/config.git"
+    "url": "https://github.com/btravstack/tools.git"
   },
   "type": "module",
   "scripts": {

packages/commitlint/package.json

@@ -7,15 +7,15 @@
     "config",
     "conventional-commits"
   ],
-  "homepage": "https://github.com/btravstack/config/tree/main/packages/commitlint#readme",
+  "homepage": "https://github.com/btravstack/tools/tree/main/packages/commitlint#readme",
   "bugs": {
-    "url": "https://github.com/btravstack/config/issues"
+    "url": "https://github.com/btravstack/tools/issues"
   },
   "license": "MIT",
   "author": "Benoit TRAVERS <benoit.travers.fr@gmail.com>",
   "repository": {
     "type": "git",
-    "url": "https://github.com/btravstack/config.git",
+    "url": "https://github.com/btravstack/tools.git",
     "directory": "packages/commitlint"
   },
   "files": [

packages/lefthook/package.json

@@ -7,15 +7,15 @@
     "git-hooks",
     "lefthook"
   ],
-  "homepage": "https://github.com/btravstack/config/tree/main/packages/lefthook#readme",
+  "homepage": "https://github.com/btravstack/tools/tree/main/packages/lefthook#readme",
   "bugs": {
-    "url": "https://github.com/btravstack/config/issues"
+    "url": "https://github.com/btravstack/tools/issues"
   },
   "license": "MIT",
   "author": "Benoit TRAVERS <benoit.travers.fr@gmail.com>",
   "repository": {
     "type": "git",
-    "url": "https://github.com/btravstack/config.git",
+    "url": "https://github.com/btravstack/tools.git",
     "directory": "packages/lefthook"
   },
   "files": [

packages/oxfmt/package.json

@@ -7,15 +7,15 @@
     "format",
     "oxfmt"
   ],
-  "homepage": "https://github.com/btravstack/config/tree/main/packages/oxfmt#readme",
+  "homepage": "https://github.com/btravstack/tools/tree/main/packages/oxfmt#readme",
   "bugs": {
-    "url": "https://github.com/btravstack/config/issues"
+    "url": "https://github.com/btravstack/tools/issues"
   },
   "license": "MIT",
   "author": "Benoit TRAVERS <benoit.travers.fr@gmail.com>",
   "repository": {
     "type": "git",
-    "url": "https://github.com/btravstack/config.git",
+    "url": "https://github.com/btravstack/tools.git",
     "directory": "packages/oxfmt"
   },
   "files": [

packages/oxlint/package.json

@@ -7,15 +7,15 @@
     "lint",
     "oxlint"
   ],
-  "homepage": "https://github.com/btravstack/config/tree/main/packages/oxlint#readme",
+  "homepage": "https://github.com/btravstack/tools/tree/main/packages/oxlint#readme",
   "bugs": {
-    "url": "https://github.com/btravstack/config/issues"
+    "url": "https://github.com/btravstack/tools/issues"
   },
   "license": "MIT",
   "author": "Benoit TRAVERS <benoit.travers.fr@gmail.com>",
   "repository": {
     "type": "git",
-    "url": "https://github.com/btravstack/config.git",
+    "url": "https://github.com/btravstack/tools.git",
     "directory": "packages/oxlint"
   },
   "files": [

packages/tsconfig/package.json

@@ -7,15 +7,15 @@
     "tsconfig",
     "typescript"
   ],
-  "homepage": "https://github.com/btravstack/config/tree/main/packages/tsconfig#readme",
+  "homepage": "https://github.com/btravstack/tools/tree/main/packages/tsconfig#readme",
   "bugs": {
-    "url": "https://github.com/btravstack/config/issues"
+    "url": "https://github.com/btravstack/tools/issues"
   },
   "license": "MIT",
   "author": "Benoit TRAVERS <benoit.travers.fr@gmail.com>",
   "repository": {
     "type": "git",
-    "url": "https://github.com/btravstack/config.git",
+    "url": "https://github.com/btravstack/tools.git",
     "directory": "packages/tsconfig"
   },
   "files": [

packages/typedoc/package.json

@@ -7,15 +7,15 @@
     "markdown",
     "typedoc"
   ],
-  "homepage": "https://github.com/btravstack/config/tree/main/packages/typedoc#readme",
+  "homepage": "https://github.com/btravstack/tools/tree/main/packages/typedoc#readme",
   "bugs": {
-    "url": "https://github.com/btravstack/config/issues"
+    "url": "https://github.com/btravstack/tools/issues"
   },
   "license": "MIT",
   "author": "Benoit TRAVERS <benoit.travers.fr@gmail.com>",
   "repository": {
     "type": "git",
-    "url": "https://github.com/btravstack/config.git",
+    "url": "https://github.com/btravstack/tools.git",
     "directory": "packages/typedoc"
   },
   "files": [

pnpm-workspace.yaml

@@ -20,18 +20,12 @@ allowBuilds:
   lefthook: true
 
 overrides:
-  # GHSA-v2hh-gcrm-f6hx (High): fast-uri host confusion via literal backslash
-  # authority delimiter. Only the vulnerable <3.1.4 line is present (transitive,
-  # via @commitlint/cli > ajv); 3.1.4 is the first patched release. Newly
-  # disclosed; dev-tooling only. fast-uri is in minimumReleaseAgeExclude below
-  # because 3.1.4 is younger than the 7-day cutoff.
-  "fast-uri@<3.1.4": "3.1.4"
+  # GHSA-7p8r-x3mc-p8w7 (High, supersedes GHSA-v2hh-gcrm-f6hx): fast-uri,
+  # patched in 3.1.5. Transitive only (via @commitlint/cli > ajv); dev-tooling
+  # only. 3.1.5 published 2026-07-31, past the 7-day cutoff.
+  "fast-uri@<3.1.5": "3.1.5"
 
 # Supply-chain maturity delay: mirror the consumer repos. Don't adopt a freshly
 # published version until it has been on the registry for 7 days (10080 minutes).
 minimumReleaseAge: 10080
 minimumReleaseAgeStrict: true
-minimumReleaseAgeExclude:
-  # Temporary: fast-uri 3.1.4 (the GHSA-v2hh-gcrm-f6hx override above) is younger
-  # than the 7-day cutoff. Remove once 3.1.4 is 7 days old (published 2026-07-19).
-  - fast-uri