Prepare next release

CHANGELOG.md

@@ -1,5 +1,22 @@
 # @germ-network/atprotoclient
 
+## 0.9.0
+
+### Minor Changes
+
+- [#49](https://github.com/germ-network/AtprotoClient/pull/49) [`c9d149e`](https://github.com/germ-network/AtprotoClient/commit/c9d149e0655fa959205deefee53366115ba101d3) Thanks [@germ-mark](https://github.com/germ-mark)! - Add `Atproto.DidWebResolver`: resolves a did:web identifier to its DID document by fetching `https://{host}/.well-known/did.json`, matching `@atproto/identity`'s reference resolver (Accept header, redirect refusal, single-segment restriction). Screens the resolved host against a strict hostname allowlist before ever fetching, since a did:web identifier is attacker-influenced input turned directly into a URL (Linear GER-1912) — no port, loopback, or IP-literal host is accepted. Defaults to a redirect-refusing session; fetcher injection is reserved for tests.
+
+### Patch Changes
+
+- [#53](https://github.com/germ-network/AtprotoClient/pull/53) [`5d1ea0a`](https://github.com/germ-network/AtprotoClient/commit/5d1ea0a2df1f64676243fcec339c45bce0efe01e) Thanks [@germ-mark](https://github.com/germ-mark)! - Fix build against GermConvenience 0.8.0, which split `HTTPDataResponse` and
+  `HTTPFetcher` out of the base `GermConvenience` library into a new
+  `GermConvenienceHTTP` product. Adds the `GermConvenienceHTTP` product
+  dependency and the matching import everywhere those types are used, and
+  raises the floor to `from: "0.8.0"`.
+
+  No public API change — this only restores buildability against current
+  GermConvenience releases.
+
 ## 0.8.0
 
 ### Minor Changes

package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@germ-network/atprotoclient",
 	"private": true,
-	"version": "0.8.0",
+	"version": "0.9.0",
 	"engines": {
 		"node": ">=24"
 	},