[iLevyTate]

Summary

• Version 5.1.2: package.json and package-lock.json.
• CHANGELOG [5.1.2] - 2026-11-01:
  • Security: the build and test tooling's glob (Move the vulnerable glob copies to 14.0.3 (GHSA-3g3m-2fjr-6pw4) #61) and minimatch (Move minimatch 9.x/10.x to 11.0.3 (GHSA-g3hv-75wg-m249) #62) updates.
  • Changed: retried macOS notarization (Retry the in-build macOS notarization #60).
  • The summary says the installed app works the same as 5.1.1, and the compare links are updated.
• SECURITY.md now says it applies to 5.1.2, with example patch versions moved up. The beta tester and install guides name the 5.1.2 downloads.
• After merge: create the v5.1.2 tag with create-release-tag.yml, then run release.yml and mac-release.yml on it. This is the first release that notarizes the macOS app through scripts/notarize-mac-app.js.

Scope

• Area(s): release metadata and docs
• Risk Level: low. Version and docs only; the changes being released are in Retry the in-build macOS notarization #60–Move minimatch 9.x/10.x to 11.0.3 (GHSA-g3hv-75wg-m249) #62.
• Breaking Changes: none

Type of Change

• Bug fix
• Enhancement
• New feature
• Refactor
• Documentation update
• Breaking change

Test Plan

Automated

• npm run format:check (Prettier on the changed docs)
• npm run lint
• npm test
• Additional tests added/updated when behavior changed

npm run ci is running locally on this commit; I'll report the result here before merging.

Manual QA

• Manual checklist completed (see docs/TESTING.md)
• Not applicable (explain below)

Manual QA notes:

• The release workflows' packaged-artifact checks, including the app.asar check, cover the builds. The macOS log should show [notarize] StratoSort Stack.app notarized and stapled.

Checklist

• I scoped this PR to one logical change
• I self-reviewed code and naming for clarity
• I updated docs/config references where needed
• I called out follow-up work or known limitations

---

Generated by Claude Code