Summary:
Bumps [[https://github.com/jshttp/proxy-addr | proxy-addr]] from 2.0.7 to 2.0.8.

== Release notes ==

//Sourced from [[https://github.com/jshttp/proxy-addr/releases | proxy-addr's releases]].//

> **2.0.8**
>
> **Important**
>
> - Fix [[https://www.cve.org/CVERecord?id=CVE-2026-90711 | CVE-2026-90711]] ([[GHSA-jqcg-44mw-7w3h | GHSA-jqcg-44mw-7w3h]])
>
> **What's Changed**
>
> - Add OSSF scorecard action by [[https://github.com/carpasse | @​carpasse]] in [[jshttp/proxy-addr#27 | jshttp/proxy-addr#27]]
> - Fix ci pipeline and add missing Node.JS versions by [[https://github.com/carpasse | @​carpasse]] in [[jshttp/proxy-addr#26 | jshttp/proxy-addr#26]]
> - [StepSecurity] Apply security best practices by [[https://github.com/step-security-bot | @​step-security-bot]] in [[jshttp/proxy-addr#29 | jshttp/proxy-addr#29]]
> - build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#30 | jshttp/proxy-addr#30]]
> - build(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#31 | jshttp/proxy-addr#31]]
> - build(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#32 | jshttp/proxy-addr#32]]
> - build(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#33 | jshttp/proxy-addr#33]]
> - build(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#35 | jshttp/proxy-addr#35]]
> - build(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#34 | jshttp/proxy-addr#34]]
> - build(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#36 | jshttp/proxy-addr#36]]
> - chore: add funding to package.json by [[https://github.com/Phillip9587 | @​Phillip9587]] in [[jshttp/proxy-addr#40 | jshttp/proxy-addr#40]]
> - build(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#41 | jshttp/proxy-addr#41]]
> - build(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#43 | jshttp/proxy-addr#43]]
> - build(deps): bump actions/checkout from 3.6.0 to 5.0.0 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#42 | jshttp/proxy-addr#42]]
> - build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#47 | jshttp/proxy-addr#47]]
> - build(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#46 | jshttp/proxy-addr#46]]
> - build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#50 | jshttp/proxy-addr#50]]
> - build(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#49 | jshttp/proxy-addr#49]]
> - build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#48 | jshttp/proxy-addr#48]]
> - build(deps): bump actions/checkout from 6.0.0 to 6.0.2 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#56 | jshttp/proxy-addr#56]]
> - build(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#55 | jshttp/proxy-addr#55]]
> - build(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#57 | jshttp/proxy-addr#57]]
> - build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#58 | jshttp/proxy-addr#58]]
> - Fix "arugment" typo in README by [[https://github.com/schiwekM | @​schiwekM]] in [[jshttp/proxy-addr#61 | jshttp/proxy-addr#61]]
> - build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#64 | jshttp/proxy-addr#64]]
> - build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#63 | jshttp/proxy-addr#63]]
> - build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#45 | jshttp/proxy-addr#45]]
> - build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by [[https://github.com/dependabot | @​dependabot]][bot] in [[jshttp/proxy-addr#39 | jshttp/proxy-addr#39]]
> - chore(ci): npm-publish via reusable workflows by [[https://github.com/sheplu | @​sheplu]] in [[jshttp/proxy-addr#54 | jshttp/proxy-addr#54]]
> - refresh CI by [[https://github.com/UlisesGascon | @​UlisesGascon]] in [[jshttp/proxy-addr#69 | jshttp/proxy-addr#69]]
> - fix: typo by [[https://github.com/UlisesGascon | @​UlisesGascon]] in [[jshttp/proxy-addr#71 | jshttp/proxy-addr#71]]
> - Release: 2.0.8 by [[https://github.com/UlisesGascon | @​UlisesGascon]] in [[jshttp/proxy-addr#70 | jshttp/proxy-addr#70]]
>
> **New Contributors**
>
> - [[https://github.com/carpasse | @​carpasse]] made their first contribution in [[jshttp/proxy-addr#27 | jshttp/proxy-addr#27]]
> - [[https://github.com/step-security-bot | @​step-security-bot]] made their first contribution in [[jshttp/proxy-addr#29 | jshttp/proxy-addr#29]]
> - [[https://github.com/dependabot | @​dependabot]][bot] made their first contribution in [[jshttp/proxy-addr#30 | jshttp/proxy-addr#30]]
> - [[https://github.com/Phillip9587 | @​Phillip9587]] made their first contribution in [[jshttp/proxy-addr#40 | jshttp/proxy-addr#40]]
> - [[https://github.com/schiwekM | @​schiwekM]] made their first contribution in [[jshttp/proxy-addr#61 | jshttp/proxy-addr#61]]
> - [[https://github.com/sheplu | @​sheplu]] made their first contribution in [[jshttp/proxy-addr#54 | jshttp/proxy-addr#54]]
>
> **Full Changelog**: jshttp/proxy-addr@v2.0.7...v2.0.8

== Changelog ==

//Sourced from [[https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md | proxy-addr's changelog]].//

> **2.0.8**
>
> - Fix [[https://www.cve.org/CVERecord?id=CVE-2026-90711 | CVE-2026-90711]] ([[GHSA-jqcg-44mw-7w3h | GHSA-jqcg-44mw-7w3h]])

== Commits ==

- [[jshttp/proxy-addr@a11ad82 | a11ad82]] 2.0.8 ([[jshttp/proxy-addr#70 | #70]])
- [[jshttp/proxy-addr@780911d | 780911d]] fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix
- [[jshttp/proxy-addr@92e103e | 92e103e]] fix(ci): use publised as release trigger event ([[jshttp/proxy-addr#71 | #71]])
- [[jshttp/proxy-addr@3e5ac75 | 3e5ac75]] ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 ([[jshttp/proxy-addr#69 | #69]])
- [[jshttp/proxy-addr@4b9db81 | 4b9db81]] chore(ci): npm-publish via workflows ([[jshttp/proxy-addr#54 | #54]])
- [[jshttp/proxy-addr@655e895 | 655e895]] build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 ([[jshttp/proxy-addr#39 | #39]])
- [[jshttp/proxy-addr@50ce4d0 | 50ce4d0]] build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 ([[jshttp/proxy-addr#45 | #45]])
- [[jshttp/proxy-addr@0fd347f | 0fd347f]] build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 ([[jshttp/proxy-addr#63 | #63]])
- [[jshttp/proxy-addr@6a517fa | 6a517fa]] build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 ([[jshttp/proxy-addr#64 | #64]])
- [[jshttp/proxy-addr@0d45e2a | 0d45e2a]] Fix "arugment" typo in README ([[jshttp/proxy-addr#61 | #61]])
- Additional commits viewable in [[jshttp/proxy-addr@v2.0.7...v2.0.8 | compare view]]

== Maintainer changes ==

This version was pushed to npm by [[https://www.npmjs.com/~GitHub%20Actions | GitHub Actions]], a new releaser for proxy-addr since your current version.

Pull Request resolved: #159

Reviewed By: boujeepossum

Differential Revision: D124273538

Pulled By: JacksonGL

fbshipit-source-id: 6a06bb9ac8395ba2225ee76fab79fb9099bb16f1