docs: update the v1.1.12 release notes

README.md

@@ -10,7 +10,7 @@ Manage embedded git repositories (anonymous gitlinks) without `.gitmodules`. Pro
 
 ### Latest: v1.1.12 (October 2026)
 
-- **Header tooling on fix-headers 2.1.4** — the `@cldmv/fix-headers` dev dependency moves to 2.1.4 and the header pass was re-run; every file already matched, so nothing was restamped. No CLI code, hook, published file or runtime dependency changed (#91).
+- **Header tooling on fix-headers 2.2.0** — the `@cldmv/fix-headers` dev dependency moves to 2.2.0 (`@Last modified by` now follows content edits only) with `@cldmv/configs` 1.2.4, and a dev-only `brace-expansion` patch update lands in the lockfile; nothing needed restamping. No CLI code, hook, published file or runtime dependency changed (#90, #91, #94).
 - **Complete version history** — every release from v1.0.0 onward now has a changelog under [docs/changelog/](https://github.com/CLDMV/git-embedded/tree/master/docs/changelog/). Note that v1.1.3 raised `engines.node` to `>=22.12.0` despite being a patch release, and that v1.1.0 (first published as part of v1.1.1) added the `pre-push` check and changed the default `reference-transaction` guard.
 - [View full v1.1.12 Changelog](https://github.com/CLDMV/git-embedded/blob/master/docs/changelog/v1/v1.1.12.md)
 

docs/changelog/v1/v1.1.12.md

@@ -8,7 +8,7 @@
 
 ## Overview
 
-A dev-dependency release: `@cldmv/fix-headers` moves to 2.1.4 and the header pass was re-run. Every header already matched what 2.1.4 writes, so no file was restamped. No CLI code, hook, published file or runtime dependency changed.
+A dev-dependency release: `@cldmv/fix-headers` moves to 2.2.0 (through 2.1.4 on the way) and `@cldmv/configs` to 1.2.4, no file needed restamping, and a patch update of the dev-only transitive `brace-expansion` lands in the lockfile. No CLI code, hook, published file or runtime dependency changed.
 
 ---
 
@@ -19,7 +19,12 @@ A dev-dependency release: `@cldmv/fix-headers` moves to 2.1.4 and the header pas
 
 ## 🔧 Dependencies
 
-- `@cldmv/fix-headers` 2.1.1 → 2.1.4 ([#91](https://github.com/CLDMV/git-embedded/pull/91), dev-only).
+All changes are dev-only and none touches the published package.
+
+- `@cldmv/fix-headers` ^2.1.1 → ^2.2.0 (dev), resolved to 2.2.0. The version was first bumped to 2.1.4 ([#91](https://github.com/CLDMV/git-embedded/pull/91)) and then to 2.2.0 ([#94](https://github.com/CLDMV/git-embedded/pull/94)). 2.2.0 changes `@Last modified by` only when a file's content was edited; header-only rewrites keep the recorded editor.
+- `@cldmv/configs` ^1.2.0 → ^1.2.4 (dev), resolved to 1.2.4. The shared fix-headers config now sets `forceAuthorUpdate` and `forceLastModifiedAuthorUpdate` to false ([#94](https://github.com/CLDMV/git-embedded/pull/94)).
+- `brace-expansion` 5.0.9 → 5.0.12, a dev-only transitive dependency, updated in the lockfile only ([#90](https://github.com/CLDMV/git-embedded/pull/90), the Dependabot group update re-applied onto `next`).
+- No file was restamped: neither bump PR touches a source file, so every header already matched what 2.1.4 and 2.2.0 write.
 
 ---