5.50.1

(chore): Bump js-yaml to 4.2.0 across all transitive dependencies to fix CVE-2026-53550 (quadratic-complexity DoS in merge key handling).









5.45.4

(fix): Fix fs.cp resolving relative symlinks to absolute temp-directory paths during local generation. Adds verbatimSymlinks: true so symlinks like .claude -> .agents are preserved as-is when copying generator output.