chore(main): release 7.1.1

[github-actions]

🤖 I have created a release beep boop

7.1.1 (2026-07-14)

Bug fixes

• index: add guard for short files in magic number check (#598) (79dc046)
• index: hide spawned unrtf console window on windows (#597) (344d9e9)
• index: ignore undefined options (#569) (44508aa)
• index: skip version checks for false boolean options (#546) (13c0078)

Continuous integration

• add ossf scorecard workflow (#585) (a8818cb)
• cd: make provenance publishing explicit (#551) (0d461ed)
• cd: pin installed npm version (#603) (a8eab7c)
• ci: add node 26 to test matrix (#573) (21d8b5d)
• ci: use reusable code quality workflow (#566) (b8ce33f)
• deps: bump actions/dependency-review-action from 4.8.2 to 4.8.3 (#552) (b30f834)
• deps: bump actions/dependency-review-action from 4.8.3 to 4.9.0 (#560) (6bec0b6)
• deps: bump fastify/github-action-merge-dependabot (#562) (8235f56)
• deps: bump fastify/github-action-merge-dependabot (#592) (f0a1c18)
• deps: bump github/codeql-action in the github-owned group (#580) (4fce31c)
• deps: bump googleapis/release-please-action from 4.4.0 to 5.0.0 (#563) (70b5128)
• deps: bump the fdawgs-owned group with 3 updates (#583) (04871f8)
• deps: bump the fdawgs-owned group with 3 updates (#591) (3ff0881)
• deps: bump the github-owned group across 1 directory with 3 updates (#595) (44ccfe2)
• link-check: use sha instead of tag (#567) (35ce203)
• lock-threads: reduce frequency from daily to monthly (#571) (2e51d27)
• use full-length commit sha for github owned actions (#575) (c42c9b2)

Dependencies

• .devcontainer: add lockfile; use bookworm for base image (#576) (ce3c69d)
• dependabot: add cooldown for actions and devcontainers (#579) (08b1d49)
• dependabot: group github-owned updates (#568) (2a5b0df)
• dependabot: remove redundant includes cooldown array (#601) (2839a06)
• deps-dev: bump @types/node from 25.9.4 to 26.0.0 (#594) (51a9c1d)
• deps-dev: bump licensee from 11.1.1 to 12.0.1 (#541) (94a820c)
• deps-dev: bump prettier from 3.6.2 to 3.8.4 (#593) (59ffc43)
• deps-dev: bump prettier from 3.8.4 to 3.8.5 (#602) (f04ffc1)
• deps-dev: bump the eslint group across 1 directory with 2 updates (#578) (c5b8ed2)
• deps-dev: bump typescript from 5.9.3 to 6.0.3 (#564) (b55d6aa)
• deps-dev: pin prettier (#587) (87de24e)

Documentation

• fix broken links (#589) (4f1bbb3)
• readme: add strict directive to cjs examples (#596) (c293ca7)
• readme: link direct to issue comment re windows (#545) (1c180e3)
• readme: readability fixup (#604) (ca9b955)

Improvements

• index: cache typeof result in parseOptions (#543) (4891f1f)
• index: make acceptedOptions objects monomorphic (#542) (9c4488c)
• index: surface cause on enoent (#547) (fbe8170)

Miscellaneous

• .npmrc: add min-release-age (#565) (b3569dd)
• .nvmrc: remove redundant prefix (#572) (84d7207)
• .vscode: remove redundant javascript default formatter (#582) (ac482ee)
• .vscode: update js and telemetry settings (#559) (eb07564)
• align editorconfig and prettier ignore rules (#586) (58de6e4)
• eslint.config: includeIgnoreFile from eslint/config (#581) (6a2a07c)
• fix typos (#570) (36a3d93)
• index: add inline comment for short file check (#600) (23c55d5)
• index: add inline comment re windows which (#556) (5967bc6)
• index: correctly refer to params (#558) (b20b41f)
• license: add contact email (#544) (14169c4)
• package: stop running lint:prettier twice on test call (#550) (5a31518)
• replace http links with https (#590) (e91e449)
• use correct terminology; use complete sentences (#555) (d2fa1cf)
• use ts-expect-error over ts-ignore (#554) (f96690e)

Tests

• index: correct terminology (#557) (81f3160)
• index: use setimmediate to prevent timing flakes (#539) (e4675a6)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 Created releases:

• v7.1.1

🌻