release: v1.3.8

[GSTJ]

Summary

This publishes the corrected Node engine metadata as v1.3.8.

Details

• Bumps the package version to 1.3.8.
• Regenerates the changelog from the conventional commits since v1.3.7, including the engine fix and dependency maintenance.

Testing steps

1. From the root of the checked-out repository, run:

   pnpm install --frozen-lockfile
   pnpm run lint
   pnpm run format
   pnpm run typecheck
   pnpm run test
   pnpm run build
   pnpm run changelog:check
   pnpm audit --audit-level low
   npm pack

2. From the same directory, run:

   docker run --rm -v "$PWD:/package:ro" node:12-alpine sh -lc 'mkdir /app && cd /app && npm_config_engine_strict=true npm install /package/eslint-plugin-safe-jsx-1.3.8.tgz'

   The install should stop with an unsupported engine error.

3. Run:

   docker run --rm -v "$PWD:/package:ro" node:14-alpine sh -lc 'mkdir /app && cd /app && npm_config_engine_strict=true npm install --no-save /package/eslint-plugin-safe-jsx-1.3.8.tgz >/dev/null && node -e "console.log(require(\"eslint-plugin-safe-jsx\").meta)"'

   The command should print version 1.3.8.

4. Run:

   node tools/release-notes.mjs

   The first heading should be version 1.3.8 and list the engine fix.

[github-actions]

🎉 Congratulations on making your first pull request in '@gstj/safe-jsx'! We appreciate your contribution and will review it as soon as possible. Thank you for helping us make this project better.

[GSTJ]

Proof from fa0aa7f: the packed 1.3.8 release rejects Node 12 and runs under Node 14 with ESLint 8 and Node 24 with ESLint 10. The second image has the full local suite.