[jaredwray]

Please check if the PR fulfills these requirements

• Followed the Contributing and Code of Conduct guidelines.
• Tests for the changes have been added (for bug fixes/features) with 100% code coverage.
  • Version bump only. Existing suite passes at 100% coverage (261 tests).

What kind of change does this PR introduce? (Bug fix, feature, docs update, ...)
Release / version bump

Release summary

Fixes render-hook cache behavior and ships dependency and security updates.

ecto@5.1.2 — 2026-10-26

Fixes render-hook cache behavior and ships dependency and security updates.

Bug Fixes

• patch undici, zod, sharp, brace-expansion, and source-map-js (fix: security - patch undici, zod, sharp, brace-expansion, and source-map-js #429)

• Finish render hooks for cache hits and hook errors (Finish render hooks for cache hits and hook errors #447)

  The async and sync caches store engine output taken after the before-hook and before the after-hook. afterRender / afterRenderSync run on every call, including a cache hit. throwOnHookError: true rejects render and throws from renderSync.

  import { Ecto, EctoEvents } from "ecto";
  
  const ecto = new Ecto({ cache: true, throwOnHookError: true });
  ecto.onHook(EctoEvents.afterRender, (renderResult) => {
    renderResult.result = renderResult.result.trim();
  });

Documentation

• add Drydock review badge (docs: add Drydock review badge #427)

Internal

• pin handlebars and undici to patched releases (chore: pin handlebars and undici to patched releases #428)
• remove handlebars override (mono - chore: remove handlebars override #430)
• update undici@7 override to 8.12.2 (mono - chore: update undici override #431)
• remove undici@8 override (mono - chore: remove undici@8 override #432)
• sync defense-in-depth files from agentic (mono - chore: sync defense-in-depth files from agentic #433)
• upgrade code quality dependencies (mono - chore: upgrade code quality dependencies #434)
• upgrade TypeScript and build tooling (mono - chore: upgrade TypeScript and build tooling #435)
• upgrade pnpm to 12.14.0 (mono - chore: upgrade pnpm #436)
• upgrade GitHub Actions (mono - chore: upgrade GitHub Actions #437)
• upgrade Dev Container image to 5.2.3-24-trixie (mono - chore: upgrade Dev Container images #438)
• upgrade docula to 3.0.1 (mono - chore: upgrade docula #439)
• upgrade wrangler to 4.151.2 (mono - chore: upgrade wrangler #440)
• remove sharp override (mono - chore: remove sharp override #441)
• upgrade @jaredwray/fumanchu to 4.7.4 (mono - chore: upgrade @jaredwray/fumanchu #442)
• upgrade hookified to 3.0.4 (mono - chore: upgrade hookified #443)
• upgrade liquidjs to 10.30.0 (mono - chore: upgrade liquidjs #444)
• upgrade ejs to 7.0.2 (mono - chore: upgrade ejs #445)
• upgrade docula to 3.0.2 (mono - chore: upgrade docula #446)

Contributors

• @jaredwray (OWNER)

Full List of Changes

• docs: add Drydock review badge by @jaredwray in docs: add Drydock review badge #427
• chore: pin handlebars and undici to patched releases by @jaredwray in chore: pin handlebars and undici to patched releases #428
• fix: security - patch undici, zod, sharp, brace-expansion, and source-map-js by @jaredwray in fix: security - patch undici, zod, sharp, brace-expansion, and source-map-js #429
• mono - chore: remove handlebars override by @jaredwray in mono - chore: remove handlebars override #430
• mono - chore: update undici override by @jaredwray in mono - chore: update undici override #431
• mono - chore: remove undici@8 override by @jaredwray in mono - chore: remove undici@8 override #432
• mono - chore: sync defense-in-depth files from agentic by @jaredwray in mono - chore: sync defense-in-depth files from agentic #433
• mono - chore: upgrade code quality dependencies by @jaredwray in mono - chore: upgrade code quality dependencies #434
• mono - chore: upgrade TypeScript and build tooling by @jaredwray in mono - chore: upgrade TypeScript and build tooling #435
• mono - chore: upgrade pnpm by @jaredwray in mono - chore: upgrade pnpm #436
• mono - chore: upgrade GitHub Actions by @jaredwray in mono - chore: upgrade GitHub Actions #437
• mono - chore: upgrade Dev Container images by @jaredwray in mono - chore: upgrade Dev Container images #438
• mono - chore: upgrade docula by @jaredwray in mono - chore: upgrade docula #439
• mono - chore: upgrade wrangler by @jaredwray in mono - chore: upgrade wrangler #440
• mono - chore: remove sharp override by @jaredwray in mono - chore: remove sharp override #441
• mono - chore: upgrade @jaredwray/fumanchu by @jaredwray in mono - chore: upgrade @jaredwray/fumanchu #442
• mono - chore: upgrade hookified by @jaredwray in mono - chore: upgrade hookified #443
• mono - chore: upgrade liquidjs by @jaredwray in mono - chore: upgrade liquidjs #444
• mono - chore: upgrade ejs by @jaredwray in mono - chore: upgrade ejs #445
• mono - chore: upgrade docula by @jaredwray in mono - chore: upgrade docula #446
• Finish render hooks for cache hits and hook errors by @jaredwray in Finish render hooks for cache hits and hook errors #447

Full diff: v5.1.1...v5.1.2

Verification

• pnpm install --frozen-lockfile succeeds
• pnpm build succeeds
• pnpm test:ci passes locally (14 files, 261 tests, 100% coverage)
• No uncommitted changes outside the version bump

Post-merge

• Merge then create a GitHub Release at tag v5.1.2 — the release.yaml workflow stages the npm publish (pnpm stage publish) when the release is published.

  

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	🔄 Running since 2026-10-26T21:47:54.153886Z	1d6cc58	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (d46f616) to head (1d6cc58).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #448   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            9         9           
  Lines          438       438           
  Branches       102       102           
=========================================
  Hits           438       438           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.